last executing test programs: 3.937652795s ago: executing program 2 (id=3783): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x404c014) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000180)='9+', 0x2}], 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000002f00)=@raw={'raw\x00', 0xc01, 0x3, 0x1248, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x11b0, 0x3c8, 0x3c8, 0x11b0, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfff9, 0x2, [0x7, 0xc, 0x1f, 0x32, 0x2a, 0xa, 0x3d, 0x3e, 0x2d, 0x17, 0x19, 0xc, 0x25, 0xd, 0x3e, 0x79], 0x0, 0x1000, 0x5b5}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12a8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000003c0), &(0x7f0000000440)='%pI4 \x00'}, 0x20) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000400)) 3.276001441s ago: executing program 2 (id=3793): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f00000002c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x141071, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001180)={0x0, 0x4, @status={[0x0, 0x8, 0x3, 0xfb7, 0x3b0]}, [0x3, 0xf, 0x4, 0x3, 0x6, 0x36, 0x1, 0x1, 0x9da, 0x1ff, 0x4, 0x19c, 0x9, 0xb1, 0x0, 0x5, 0x2, 0x9, 0x0, 0x401, 0x7, 0x7, 0x6, 0x8, 0xffffffffffffff00, 0x3, 0x80, 0x2, 0x4fe, 0x7f, 0x9, 0x1, 0x3800000, 0x4000400, 0x2, 0xfc, 0x94, 0x9, 0x1800000000000000, 0xd94, 0x5, 0x7095, 0x200, 0x100, 0xfffffffffffffe00, 0x6, 0x9e, 0x7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x3, 0x2, 0x400, 0x5, 0x0, 0x8, 0x1, 0x8, 0x2, 0x4, 0x10, 0xf6e]}) ioctl$TUNSETVNETBE(r2, 0x400454de, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @rand_addr=0x64010100}}}], 0x20}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="4c1b0000", @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYBLOB="851e3076ab53bdec5fab5fa3d03d0f06c6f3787d1f1bb40dec2132058fb3c656cceede01f08135c03e822b78c063359dd4a7ebff798114a08c75872e25d65cd249", @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d7000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r6, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d6000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r7, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) readv(r8, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) 2.996064602s ago: executing program 2 (id=3796): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'macsec0\x00', {}, 0x9}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x891e, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 2.936151677s ago: executing program 2 (id=3797): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffcbb}}, {{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004094}}], 0x2, 0xfdef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000098"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x8, 0x4, 0x3) getpeername$packet(r4, &(0x7f0000000300), &(0x7f0000000340)=0x14) socket(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x0) recvmmsg(r8, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r9, 0x3) accept4(r9, 0x0, 0x0, 0x0) 2.418129014s ago: executing program 3 (id=3803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x3e, 0x107, 0x70bd27, 0x0, {0xfd, 0x7c}, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r1}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x38}, 0x1, 0x0, 0x0, 0xc020}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x3e, 0x107, 0x70bd27, 0x0, {0xfd, 0x7c}, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r1}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x38}, 0x1, 0x0, 0x0, 0xc020}, 0x4040) (async) 2.247872048s ago: executing program 0 (id=3805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x5, [@remote, @rand_addr]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x5, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @dev={0xfe, 0x80, '\x00', 0x35}, 0x4f5}}}, 0x108) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x3, 0x1, 0xfff, 0x2, 0x2, 0xa0, 0x736, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x7f, 0xfffffffa, 0x5, 0x0, 0x1}}, &(0x7f0000000580)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={r2, @in6={{0xa, 0x4e23, 0xc6, @private2, 0x8}}, 0x75, 0xb, 0x81, 0x1, 0x4c, 0xfffffffa, 0x6}, 0x9c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e21, 0x400, @mcast2, 0x976}}, {{0xa, 0x4e23, 0xaaf7, @loopback, 0xca3b}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff"], 0x610) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb, 0x6, "91dbca1d4e4085"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x10}}, 0xe4}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) syz_emit_ethernet(0x95, &(0x7f00000001c0)={@empty, @local, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x4, 0x83, 0x66, 0x0, 0x4, 0x1, 0x0, @loopback, @remote, {[@end, @noop]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x4, 0x0, {0x17, 0x4, 0x2, 0x36, 0x80, 0x66, 0x278, 0x2, 0x32, 0x1, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x44, 0x36, 0x3, 0x1, [{@multicast2}, {@empty, 0xa33}, {@multicast1, 0x8}, {@multicast1, 0x804}, {@loopback, 0x1}, {@remote, 0x400}, {@broadcast, 0x204}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x6}]}, @ra={0x94, 0x4}]}}, "6293335b121ad4"}}}}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000a00)="6362b5bd20572e46a104f3b962a3", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="660a000000000000611160000000000018000000000000000000007fa6dd1b0c5b00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2.206957601s ago: executing program 3 (id=3806): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/110, 0x4e, 0x6e, 0x1, 0x6}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="680200000005010200000000000000000500000554020100000000000700000080cd00010600150073797a3000000000000000000000000000000000000000000000000000000000224e985b370d3c071e6a3a8ab23cd0c0189351f934658775d5145a6764ee9f1be0cda5700cf575dfe55e90d0f04cb0d048421e6fe03df1dfe6bfbac2235b4d600100fdff03000000ff070000ffff0300020000000a000000100000800300000014b600000800080001000000020000000600010003000000080000000800080000000000000100000300090000000000040e9d610000006800000000000000020000000700090002000000040000000600f40003000000020000000300790800000000ffffffff0800080002000000090000000400030003000000050000000000020003000000ffffff7f0008060001000000090000000200000003000000010000007f00ffff00000000030000004000ff00000000000101000003006a00030000000400000001809200030000000900000004000d0000000000030000000200ff7f02000000100000000400040001000000f90800000000090003000000ff0100000600040001000000000000000000810001000000070000000600080003000000000000b30d00fcff02000000030000000300070002000000400000000900060003000000ffff0000050004000300000000000002000400010000000200000004007d0000000000000000000800090003000000fbffffff0600e84c01000000800000000000010002000000d8010000050001f80100000003000000ff01800002000000f03700000500080003000000010000009afd2dc925ade03319c6cf0a31eda47564dac0d0de5fc597b9eaa5f7b109f88d9aa20ce097a7d4d59d40cddf49ea2abcea1b0d51b6366c59b459aa12a9b90949f24be6d7224b1881a8a602bb71c21e2835db0c3108d4cb1e35bf5737bec252482d7a06"], 0x268}, 0x1, 0x0, 0x0, 0x30000080}, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)="2752b243de4e082d9794385fb374f8a5499d8350c776af176bc08c1abcc75ccc4f6f587a01ef94fb9340ed2909f1b98f0dceeb67bf16dc7fca1b983e29d95fdc5c3f38387fe32e89c1d3eb885bdf6e27fa81cc3a2d9ae57d4d1ed7fdae7d7353a9259fede3f2dfb4c020edd75fb32b546bdbcc746b58826af3aed93e82b68530962cf758fcabeb7e2af1390309c15a859fe7237545e4a32a3f6af9c040a12e5c40a6330aaed7a3b31b85be3c0988", 0xae}, {&(0x7f0000000180)="56bfb36dca063e18623b1774dd8fb1a5bd56fd58c1dec7272b7d07be667553b78f80093b4e73e4adabdf3349d62b8f1ce8e42d9412eee940c4fe11a0fa369bb0c97d92cf70793fb402472db00e5ce0f3258c021675760b70e5d32b61a986d02cfc10350283126f696148ce20db0f4c55e7785b2800fbdead174983b3b56f6bbf9c6e620d74e0f6", 0x87}, {&(0x7f0000000240)="4552530aa98c090cb85dbd821a4c8f992fa37d7721a0e652074bd670f8c976510837d3", 0x23}, {&(0x7f0000000300)="2d91dc5f45b92ecce6dc6f963ba169abca491c8924647f7e79de3db4daf1f38f3cb5be3423f0c8e959dea711204e9a3f3bc7c9892c267735d2ea1580c5f429bb439c0226e4f176be17a81dac7ef2a1697f65b9a5bf33fa6d8787af610bbb4d3c508ad481f7d51f5103137617fb0109380eaf6281f130102fa56a48029a8e505bdd776644461b24936f53b66d89faed219389cc51977bcd75cd3b3d55a2831ea7d34892e105bc3b3ef1956b2c21f1a78f4e2b7b8f3e696c9a2e38fab6cf6976982f633250c30ef7ce14f3aa3cc8affa006674759e90b51a9aad024cec978cb755379b71124604bd6e5c35d04944b5b69d4c7f25", 0xf3}, {&(0x7f0000000400)="b142c57eaa688d2b9e74532a30565403078c01d6057c2f79b7e3767e58530f5d24ef59019837f208f0d903444b0b1d1ff8bf6ca3e72e6e69fec17aa374d411a3bbe38198078171fcaada787446adb8b5e84b205a46f4", 0x56}], 0x5}, 0x20000000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x3, 0x9, 0x401, 0x1, 0x49, 0x4, 0xfffffffffffffffa, 0x1}, &(0x7f0000000080)={0xd0, 0x1, 0x0, 0xe2e, 0x7, 0xc6, 0x80d, 0x1}, &(0x7f0000000240)={0x89e1, 0xd, 0xc, 0x7, 0x808, 0x4, 0x4, 0x9}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x40]}, 0x8}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0xb}]}, 0x10) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYRESOCT=r6], 0xfce) socket$netlink(0x10, 0x3, 0x7) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x10, r8}, 0x18) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="3c00000000000000ff030000fdffff3c00100400", @ANYRES32=r9, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0200000000000000000000000e00"/28], 0x50) 2.095229777s ago: executing program 0 (id=3808): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xbc42, 0x7, 0x8000, 0x5, 0xfd, 0x4a0e, 0x7ff, 0x7809, 0x7, 0x1, 0x0, 0x13, 0x1, 0x7, 0x17, 0x6, 0x5a2d4cd1, 0xa000000, 0x748e, 0x9, 0x3, 0x80, 0x4, 0x0, 0x1ff, 0xffff, 0x0, 0x9, 0x1, 0x4, 0x101, 0x80000000, 0x8fc, 0x9, 0x7ff, 0x3, 0xfff, 0x3, 0x9, 0x401, 0x7, 0x5, 0x7, 0x6, 0xd4e, 0x1, 0xfff, 0x0, 0x5e87, 0x1, 0x5, 0x4, 0x5, 0xb, 0x81, 0x9, 0x3, 0xc7bb, 0xd1, 0x7, 0x2, 0x5, 0x1, 0x8, 0x7, 0x8, 0x6, 0x1, 0x1, 0x6, 0x3695, 0xb, 0x9, 0x4, 0x2e6d, 0x80000001, 0x4, 0x6, 0x401, 0x6, 0x6, 0x9, 0xb, 0x100, 0x0, 0x10000, 0x1, 0x7, 0x101, 0x1000, 0xfffffff7, 0x9, 0x25, 0x4, 0x80000000, 0x7ff, 0x85, 0x6, 0xfffffff8, 0xc8000000, 0xaab, 0xa5, 0x1, 0x5, 0x3, 0x2, 0xd48d0000, 0x5, 0x0, 0x4ce, 0x6, 0x2, 0x5, 0xbdd, 0xffff, 0x7fff, 0x9, 0x40, 0x7, 0x80e, 0x9, 0x8, 0x8, 0x0, 0xfff, 0x10000, 0x1, 0x2, 0xa, 0x9, 0x6, 0x10, 0x6, 0x100, 0x6, 0xfffffff7, 0x0, 0x70, 0x7, 0x3, 0x6, 0x32d, 0x9d43, 0x80, 0x9, 0x9, 0x432, 0x6, 0x1, 0x6, 0x0, 0x9, 0x2, 0x6, 0x2, 0x7fab, 0x200, 0xd90000, 0x238b2750, 0x101, 0x6, 0x3, 0x0, 0x9, 0x0, 0x2, 0x0, 0x4, 0x8c, 0xff, 0x3, 0xffff, 0x0, 0x4, 0x400, 0x0, 0x3, 0xe771, 0x7ff, 0x7fff, 0x4, 0x7fffffff, 0x81, 0x7fff, 0x4, 0x6, 0x7, 0x8, 0x0, 0xfa3b, 0x9, 0x7, 0x3, 0x6, 0x3, 0x6, 0x8, 0x5, 0x5, 0x80000000, 0x3, 0x8000, 0x1, 0x5, 0x7, 0x3, 0xfffffff8, 0x8, 0x5, 0x7fff, 0x8, 0x6, 0x0, 0x7, 0x8, 0xe84e, 0x265, 0x7f, 0xa, 0x3a9b8000, 0x9, 0x2, 0xd, 0x4, 0x8, 0x5, 0x100, 0x53, 0x100, 0xdb15, 0x0, 0x5b, 0x3755, 0xfffff000, 0x0, 0x5, 0x7, 0x4, 0x401, 0x9, 0x4, 0x140, 0xb, 0x6, 0x80, 0x7, 0x2, 0x7, 0x0, 0x4, 0x88, 0x2, 0x4, 0xd37, 0x80000001, 0x10000]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$tun(r11, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, r11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) close(0x3) 1.815833333s ago: executing program 1 (id=3810): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x20040804) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 1.778052322s ago: executing program 0 (id=3811): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x7, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x400006, 0x0, 0x0, 0x1, 0x3, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}, {0x0, 0x0, 0xb}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b708000064f3ffbf7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendfile(r5, r6, 0x0, 0xffffffff000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00012dbd7000fedbdf252000000008000300", @ANYRES32=r8, @ANYBLOB="2b5fcf571c0e35d9d632cab34a8af5c5f53d1728224bc29f3ea48f1d4e9eb225ae"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f0000000700)=@framed={{}, [@alu={0x4, 0x1, 0x6, 0x2, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r10, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="21a0ffff030000e34300128009000100626f6e64"], 0x64}, 0x1, 0x0, 0x0, 0x2004001c}, 0x0) 1.700126186s ago: executing program 4 (id=3812): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="3afc4503699027bd099f67dfbcb8cdbb4a1647e00113417d49f3c1407786755adecf429f2c9c6cf93e2008f5271f28cde093550a9f4f3395d9c0b26059d468f69543aa5fdea6835f6e8f6bccab1c558c3c9461a60569c7e58a49754b0a10c9ba7bc50543a1134f9dd58b3d08e8", @ANYRESOCT=r0], 0x48) socket$kcm(0x2d, 0x2, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) close(0x3) (async) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000090d5a3650", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x20008040) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x4, 0x3, 0xf10e, 0x4d3, 0xf2}, &(0x7f0000000240)=0x14) socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r6 = socket$inet(0x2, 0x1, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r7, 0x0, 0x80) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x18) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fc01000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000000000000000000010000000000000044000500fa33646d599c39b20000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001", @ANYRESHEX=r2], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x44838) (async) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fc01000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000000000000000000010000000000000044000500fa33646d599c39b20000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001", @ANYRESHEX=r2], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x44838) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={r5, 0x0, &(0x7f0000000300)}, &(0x7f00000003c0)=0x10) 1.631820042s ago: executing program 3 (id=3813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(0x3) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="010101007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20efff5a115001c00ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0x1ff, '\x00', r4, r6, 0x0, 0x3, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x28, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @printk={@lx}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 1.616442684s ago: executing program 1 (id=3814): socket$netlink(0x10, 0x3, 0x13) (async) r0 = socket$netlink(0x10, 0x3, 0x13) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180110003"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180110003"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, r2, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c6221ac1fb"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "a0b3a0883b4d653bc1abd59d2ce59009"}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x4085) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x11, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1, 0x803, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001400b59500000000000000000a40004f29", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000ffff000000000800080000010000"], 0x34}}, 0x0) r11 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25SCALLUSERDATA(r8, 0x89e5, &(0x7f0000000380)={0x5, "9b2bfd996c0be5abb43cb3b0dbe99f3a7926b4b8e032ee19cb719817a88a825ea1816942b4e9322bc95288a463141e5ac63db6b8a145be31b7616743ed728bb8f3bae936e132cf4d5bf66ad646ff4ccef51ec743af93382a56162bbefd23448915341fcaf41f1d0862316ab3dd7d1de6f02814ca5f5c03d29189749fef86a658"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40804}, 0x40) 1.508115567s ago: executing program 4 (id=3815): r0 = socket$inet6(0xa, 0x3, 0x76) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x804, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x60a, 0xfffffffffffffff7}, {0x7, 0xfef2, 0xd, 0x5}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x3, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(r0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1.408117066s ago: executing program 1 (id=3816): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYRESHEX=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1f, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff8}]}, &(0x7f0000000480)=0x10) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x884) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r15, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x11}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfb}]}, 0x40}, 0x1, 0x0, 0x0, 0x400808d}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c20b5040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.28497696s ago: executing program 4 (id=3817): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x9660) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xdf}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x40000004}) close(r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '$/'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x60}}, 0x400c090) 1.082511867s ago: executing program 4 (id=3818): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) (async) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000200), 0x0}, 0x20) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x48000, &(0x7f0000000200)={0xa, 0x4e23, 0x3ff, @loopback, 0x10001}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x81, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae09b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 972.983715ms ago: executing program 4 (id=3819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r4, 0x305, 0x0, 0x25dfdbff, {0x7}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_ISOLATION_MASK={0x0, 0x2c, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4044080) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140004"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010008000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000d08000140000000160900020073797a32000000001400000011000100000000000d0000000200000a44a4532a13c30ebd261c209a77d9f5f7f11acc07b359cf5814bf07eab674d1ff298600ecacfe097a3252d4dd4e1aeab9c3ce055c56aabc6b8d737154f124f5121d049e199cdcb88d"], 0x80}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000000) 956.851766ms ago: executing program 0 (id=3820): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2, 0x3, 0x9) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000000000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 775.798615ms ago: executing program 3 (id=3821): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="896459fb2a664418021b81b224a429c0ef6d54ce00000103faff0700ffdadf25010000"], 0x20}, 0x1, 0x0, 0x0, 0x2400c800}, 0x44000000) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x2c, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x1}, {0x10, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x44004) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x2000000, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000200000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x34}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x91) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000480)={{r0, &(0x7f00000001c0)='@!}\x00', 0x0, &(0x7f0000000240)={@align=0x2, {0x7fff, 0x200, 0x4, 0x8}}, 0x5, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xeca3}, 0x1, &(0x7f0000000440)=[{0x3, 0x8, &(0x7f0000000300)='!)}\x00', &(0x7f0000000340)="d257dc0cff01c7b4689b65301773488103628b326c5afd2f40c57c2f4efc8a8d833eb1ecabf18a6b66769cf6b937aa5e885adffdef5918645a0587872d7a83b54ade273f4e0b3ae78c4518ab8fdacf354363e9872054b2b2d9186716b754c778a77ec79dacc25b65c746cb341168b3c78f9f630af4495aa4fd61afc45b278a613b4255e089a886b5052736a8d67c639a25ce2325e9e0bab430c5a5fccc4ae78527aebaa3bb23ba695fcda201aaea7b59102f7258d39e92d54b6e4c4bc6fe667d5d8987dde1f7d1626740db0b064895c5cccbe1e7c78f92", 0xd7, 0x2}]}) 768.568861ms ago: executing program 4 (id=3822): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000800)=""/162, 0xa2}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000000b40)=""/140, 0x8c}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0xa}, 0xfffffffd}], 0x1, 0x2000, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 674.327742ms ago: executing program 3 (id=3823): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)={0x10, 0x222, 0x523, 0x40000003}, 0x10}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)={0x10, 0x222, 0x523, 0x40000003}, 0x10}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000000), 0x4) (async) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x844, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x818, 0x2, [@TCA_FW_POLICE={0x814, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x8006, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0xc38, 0x1ff, 0x0, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0x56, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x1, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x6, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x7, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x9, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x101, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x2008001, 0x9, 0x4, 0x3, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) socket(0x2b, 0x1, 0x1) (async) socket(0x2b, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x3c}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 599.855735ms ago: executing program 1 (id=3824): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x20040804) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 536.807012ms ago: executing program 2 (id=3825): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x400082, @dev={0xfe, 0x80, '\x00', 0x33}, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b2c, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x102, 0x110}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xb767}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x10}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200400d}, 0x0) 522.904959ms ago: executing program 1 (id=3826): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nicvf0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001e000100000000000400000002000000", @ANYRES32=0x0, @ANYBLOB="000008001421838f23431e7dec00000000000000000000bb08000e8004000200"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @mcast1, 0x2}, 0x1c) (rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) write(r3, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a", 0x3f80) openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100001042dbd7000000000f43b6fe900", @ANYRES32=0x0, @ANYBLOB="4b02060000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x4044000) (rerun: 32) 500.486244ms ago: executing program 0 (id=3827): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r1, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) close(0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @remote}}}], 0x20}, 0x2000000}], 0x1, 0x4880) 276.35705ms ago: executing program 1 (id=3828): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) listen(r0, 0xfffffffb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r3, 0x111, 0x6, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx \x00'}, 0x20) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='team0\x00'}) 154.781427ms ago: executing program 3 (id=3829): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0xd, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8, @ANYBLOB="0000000000000000b7080200007b8af8ff00000000bfa2f4142918e147000000000000070200343375b3bca2e2a0aebeaae9b1c100f8ffffffb703000008000000b7040000010000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_int(r4, 0x29, 0x12, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r7 = socket(0x1, 0x5, 0x1) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000280)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x20100) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) 127.932962ms ago: executing program 2 (id=3830): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto(r1, &(0x7f0000000340)="c7b9aa5b5d609989ff3f58cfc7852085b6d44c834f87d29d7f05fe373465b4ec1c85c5a55f9c46202f4aadbadd6df58c36631397b22c0de6d43a065c97b4023ce99087940f0d59fa393c4d6c31a4564b9b26161a9668fb81a89c", 0x5a, 0x20008920, &(0x7f00000003c0)=@can, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f0000000002000000000000000000000000140020"], 0x64}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f5, 0x4, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 0s ago: executing program 0 (id=3831): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_DOWN(r6, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x44}}, 0x4008000) listen(r3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r16, 0x1, 0x15, &(0x7f0000000080)={0x77359400}, 0x10) connect$unix(r15, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r16, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): ][T17595] : option downdelay: invalid value (18446744073709547007) [ 496.531301][T17595] : option downdelay: allowed values 0 - 2147483647 [ 496.562873][T17595]  (unregistering): Released all slaves [ 496.605619][T17607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2960'. [ 497.102067][T17622] bridge0: port 3(syz_tun) entered blocking state [ 497.109137][T17622] bridge0: port 3(syz_tun) entered disabled state [ 497.115960][T17622] syz_tun: entered allmulticast mode [ 497.135800][T17622] syz_tun: entered promiscuous mode [ 497.154495][T17622] bridge0: port 3(syz_tun) entered blocking state [ 497.161264][T17622] bridge0: port 3(syz_tun) entered forwarding state [ 497.230511][T17628] tap0: tun_chr_ioctl cmd 1074812118 [ 497.840864][T17666] netlink: 'syz.0.2975': attribute type 1 has an invalid length. [ 497.870448][T17666] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2975'. [ 498.061219][T17681] netlink: 9264 bytes leftover after parsing attributes in process `syz.1.2976'. [ 498.363872][T17688] bond1: ARP target 9.0.0.0 is already present [ 498.372186][T17688] bond1: option arp_ip_target: invalid value (9) [ 498.386443][T17688] bond1 (unregistering): Released all slaves [ 498.403476][T13674] nci: nci_rx_work: unknown MT 0x4 [ 498.471450][ T1177] net_ratelimit: 25 callbacks suppressed [ 498.471474][ T1177] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 498.628037][ T1160] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 498.758299][ T1160] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 498.878748][ T1177] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 498.944548][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2983'. [ 499.017909][ T1177] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 499.164595][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.179035][T17691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.210957][ T1177] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 499.338053][ T1177] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 499.478922][ T1160] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 499.507250][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2986'. [ 499.608522][ T1160] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 499.964697][T17743] bond0: entered promiscuous mode [ 499.985755][T17743] bond_slave_0: entered promiscuous mode [ 499.992707][T17743] bond_slave_1: entered promiscuous mode [ 500.002183][T17743] batadv0: entered promiscuous mode [ 500.008792][T17743] debugfs: 'hsr1' already exists in 'hsr' [ 500.014833][T17743] Cannot create hsr debugfs directory [ 500.022594][T17743] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 500.053912][T17743] bond0: left promiscuous mode [ 500.073497][T17743] bond_slave_0: left promiscuous mode [ 500.101085][T17743] bond_slave_1: left promiscuous mode [ 500.139461][T17743] batadv0: left promiscuous mode [ 500.166571][T17750] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2993'. [ 500.582481][T17756] veth0_to_team: entered promiscuous mode [ 500.600351][T17756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.649685][T17775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2997'. [ 500.666514][T17777] xt_TPROXY: Can be used only with -p tcp or -p udp [ 500.719628][T17777] xt_TPROXY: Can be used only with -p tcp or -p udp [ 500.737927][T17777] xt_TPROXY: Can be used only with -p tcp or -p udp [ 500.762498][T17777] xt_TPROXY: Can be used only with -p tcp or -p udp [ 501.153920][T17795] __nla_validate_parse: 1 callbacks suppressed [ 501.153941][T17795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3002'. [ 501.382738][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3007'. [ 501.400913][T17808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3006'. [ 501.459505][T17813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3006'. [ 501.484924][T17808] veth1_to_team: entered promiscuous mode [ 501.504493][T17808] gretap0: entered promiscuous mode [ 501.534344][T17808] gretap0: left promiscuous mode [ 501.548615][T17808] veth1_to_team: left promiscuous mode [ 501.932055][T17835] netlink: 'syz.2.3013': attribute type 1 has an invalid length. [ 502.043320][T17835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.678859][T17866] x_tables: duplicate underflow at hook 4 [ 502.813014][T17872] netlink: 'syz.4.3024': attribute type 3 has an invalid length. [ 502.842138][T17872] netlink: 'syz.4.3024': attribute type 3 has an invalid length. [ 502.944239][T17872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3024'. [ 503.969883][T17912] netlink: 'syz.2.3032': attribute type 21 has an invalid length. [ 504.338013][ T5759] net_ratelimit: 25 callbacks suppressed [ 504.338036][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.438400][ T76] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 504.545795][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 504.583613][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3034'. [ 505.065853][ T76] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.115052][ T76] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.141037][T17948] macsec0: entered promiscuous mode [ 505.153351][T17948] netlink: 'syz.4.3040': attribute type 1 has an invalid length. [ 505.171255][T17945] macsec0: left promiscuous mode [ 505.180517][T17950] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 505.188888][T17950] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 505.196365][T17950] veth0_virt_wifi: entered allmulticast mode [ 505.207005][T17950] veth0_virt_wifi: entered promiscuous mode [ 505.214226][T17950] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 505.221674][T17950] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 505.230608][T17958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3043'. [ 505.249908][ T76] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.266164][ T76] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.279173][ T5649] block nbd3: Receive control failed (result -32) [ 505.309022][ T1123] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 505.363297][T17962] netlink: 'syz.1.3045': attribute type 1 has an invalid length. [ 505.377950][T17962] nbd: illegal input index 871591272 [ 505.385524][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.433563][T17965] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 505.449166][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.476889][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3043'. [ 505.486287][T17965] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3044'. [ 505.539101][ T3329] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 505.563062][T17957] lo speed is unknown, defaulting to 1000 [ 505.761547][ T76] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 505.929975][ T12] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 506.078294][T13674] bond6: (slave ip6gretap3): failed to get link speed/duplex [ 506.165583][T18002] FAULT_INJECTION: forcing a failure. [ 506.165583][T18002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.215291][T18002] CPU: 0 UID: 0 PID: 18002 Comm: syz.1.3054 Not tainted syzkaller #0 PREEMPT(full) [ 506.215321][T18002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.215339][T18002] Call Trace: [ 506.215352][T18002] [ 506.215369][T18002] dump_stack_lvl+0xe8/0x150 [ 506.215401][T18002] should_fail_ex+0x412/0x560 [ 506.215434][T18002] _copy_from_user+0x2d/0xb0 [ 506.215466][T18002] ___sys_sendmsg+0x1c6/0x360 [ 506.215535][T18002] ? __lock_acquire+0x6b5/0x2cf0 [ 506.215564][T18002] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.215631][T18002] ? __fget_files+0x2a/0x420 [ 506.215656][T18002] ? __fget_files+0x3a0/0x420 [ 506.215693][T18002] __x64_sys_sendmsg+0x1bd/0x2a0 [ 506.215724][T18002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.215762][T18002] ? __pfx_ksys_write+0x10/0x10 [ 506.215803][T18002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.215826][T18002] do_syscall_64+0x15f/0xf80 [ 506.215851][T18002] ? trace_irq_disable+0x3b/0x140 [ 506.215883][T18002] ? clear_bhb_loop+0x40/0x90 [ 506.215910][T18002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.215931][T18002] RIP: 0033:0x7f8d2899cdd9 [ 506.215952][T18002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.215971][T18002] RSP: 002b:00007f8d26bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.215994][T18002] RAX: ffffffffffffffda RBX: 00007f8d28c15fa0 RCX: 00007f8d2899cdd9 [ 506.216010][T18002] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 506.216024][T18002] RBP: 00007f8d26bee090 R08: 0000000000000000 R09: 0000000000000000 [ 506.216037][T18002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.216049][T18002] R13: 00007f8d28c16038 R14: 00007f8d28c15fa0 R15: 00007ffd17d141b8 [ 506.216084][T18002] [ 506.608259][T18018] IPv6: NLM_F_CREATE should be specified when creating new route [ 506.702969][T17957] lo speed is unknown, defaulting to 1000 [ 506.757965][T18021] __nla_validate_parse: 1 callbacks suppressed [ 506.758002][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3059'. [ 506.789965][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3059'. [ 506.800748][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3059'. [ 506.812515][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3059'. [ 506.822732][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3059'. [ 506.852314][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3060'. [ 506.868985][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3059'. [ 506.883910][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3059'. [ 506.897848][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3059'. [ 506.916618][T18025] netlink: 'syz.1.3060': attribute type 1 has an invalid length. [ 506.924810][T18021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3059'. [ 507.481616][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.501511][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 507.516587][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.534643][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.560929][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.662861][T18021] tipc: Resetting bearer [ 507.800872][T18025] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 507.802454][T18036] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 507.982537][ T5636] syz_tun (unregistering): left promiscuous mode [ 508.126542][T18061] sctp: [Deprecated]: syz.1.3065 (pid 18061) Use of int in maxseg socket option. [ 508.126542][T18061] Use struct sctp_assoc_value instead [ 508.394829][ T1160] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.471494][ T1160] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.074118][ T1160] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.141081][ T1160] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.366731][T18105] vlan0: entered promiscuous mode [ 509.376136][T18105] bridge0: entered promiscuous mode [ 509.400941][ T1160] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.417426][ T1160] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.527215][T18101] lo speed is unknown, defaulting to 1000 [ 509.554332][ T5641] net_ratelimit: 11 callbacks suppressed [ 509.554352][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.609520][ T5649] Bluetooth: hci0: command tx timeout [ 509.620490][ T1160] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.648280][ T1160] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.981650][T18124] bond12: entered promiscuous mode [ 509.998131][T18124] 8021q: adding VLAN 0 to HW filter on device bond12 [ 510.032221][T18129] dvmrp0: entered allmulticast mode [ 510.129674][T18124] 8021q: adding VLAN 0 to HW filter on device bond12 [ 510.150155][T18124] bond12: (slave sit2): The slave device specified does not support setting the MAC address [ 510.174431][T18124] bond12: (slave sit2): Error -95 calling set_mac_address [ 510.235507][T18101] lo speed is unknown, defaulting to 1000 [ 510.242959][T18048] lo speed is unknown, defaulting to 1000 [ 510.290937][T18136] FAULT_INJECTION: forcing a failure. [ 510.290937][T18136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.349014][T18136] CPU: 0 UID: 0 PID: 18136 Comm: syz.0.3079 Not tainted syzkaller #0 PREEMPT(full) [ 510.349045][T18136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.349058][T18136] Call Trace: [ 510.349067][T18136] [ 510.349076][T18136] dump_stack_lvl+0xe8/0x150 [ 510.349107][T18136] should_fail_ex+0x412/0x560 [ 510.349140][T18136] _copy_from_iter+0x1d3/0x1670 [ 510.349172][T18136] ? rcu_is_watching+0x15/0xb0 [ 510.349206][T18136] ? __pfx__copy_from_iter+0x10/0x10 [ 510.349243][T18136] ? netlink_sendmsg+0x650/0xb40 [ 510.349269][T18136] ? skb_put+0x11b/0x210 [ 510.349310][T18136] netlink_sendmsg+0x6c0/0xb40 [ 510.349349][T18136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.349380][T18136] ? aa_sock_msg_perm+0xf1/0x1b0 [ 510.349410][T18136] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.349443][T18136] ____sys_sendmsg+0x972/0x9f0 [ 510.349472][T18136] ? __might_fault+0xaf/0x130 [ 510.349507][T18136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.349552][T18136] ? import_iovec+0x73/0xa0 [ 510.349585][T18136] ___sys_sendmsg+0x2a5/0x360 [ 510.349610][T18136] ? __lock_acquire+0x6b5/0x2cf0 [ 510.349638][T18136] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.349701][T18136] ? __fget_files+0x2a/0x420 [ 510.349730][T18136] ? __fget_files+0x3a0/0x420 [ 510.349767][T18136] __x64_sys_sendmsg+0x1bd/0x2a0 [ 510.349797][T18136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.349836][T18136] ? __pfx_ksys_write+0x10/0x10 [ 510.349876][T18136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.349900][T18136] do_syscall_64+0x15f/0xf80 [ 510.349925][T18136] ? trace_irq_disable+0x3b/0x140 [ 510.349957][T18136] ? clear_bhb_loop+0x40/0x90 [ 510.349984][T18136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.350005][T18136] RIP: 0033:0x7f34c5b9cdd9 [ 510.350025][T18136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.350043][T18136] RSP: 002b:00007f34c3df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.350066][T18136] RAX: ffffffffffffffda RBX: 00007f34c5e15fa0 RCX: 00007f34c5b9cdd9 [ 510.350082][T18136] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 510.350097][T18136] RBP: 00007f34c3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.350110][T18136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.350123][T18136] R13: 00007f34c5e16038 R14: 00007f34c5e15fa0 R15: 00007ffc2092e7b8 [ 510.350158][T18136] [ 510.662318][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.682551][T18140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.941551][T18048] lo speed is unknown, defaulting to 1000 [ 511.211414][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.220822][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.613722][T18166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.694747][ T5649] Bluetooth: hci0: command tx timeout [ 511.709637][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.791462][ T1160] ip6gretap0 (unregistering): left promiscuous mode [ 512.202941][ T1160] bond4 (unregistering): (slave gretap1): Releasing active interface [ 512.246933][T18183] FAULT_INJECTION: forcing a failure. [ 512.246933][T18183] name failslab, interval 1, probability 0, space 0, times 0 [ 512.269002][T18183] CPU: 1 UID: 0 PID: 18183 Comm: syz.0.3090 Not tainted syzkaller #0 PREEMPT(full) [ 512.269033][T18183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 512.269047][T18183] Call Trace: [ 512.269056][T18183] [ 512.269068][T18183] dump_stack_lvl+0xe8/0x150 [ 512.269098][T18183] should_fail_ex+0x412/0x560 [ 512.269132][T18183] should_failslab+0xa8/0x100 [ 512.269165][T18183] ? skb_clone+0x212/0x3a0 [ 512.269194][T18183] kmem_cache_alloc_noprof+0x87/0x650 [ 512.269225][T18183] ? __netlink_lookup+0xc6/0x8b0 [ 512.269260][T18183] skb_clone+0x212/0x3a0 [ 512.269293][T18183] __netlink_deliver_tap+0x404/0x850 [ 512.269338][T18183] ? netlink_deliver_tap+0x2e/0x1b0 [ 512.269368][T18183] netlink_deliver_tap+0x19c/0x1b0 [ 512.269396][T18183] netlink_unicast+0x730/0x8e0 [ 512.269433][T18183] netlink_sendmsg+0x813/0xb40 [ 512.269473][T18183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.269504][T18183] ? aa_sock_msg_perm+0xf1/0x1b0 [ 512.269534][T18183] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 512.269564][T18183] ____sys_sendmsg+0x972/0x9f0 [ 512.269587][T18183] ? __might_fault+0xaf/0x130 [ 512.269615][T18183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.269646][T18183] ? import_iovec+0x73/0xa0 [ 512.269675][T18183] ___sys_sendmsg+0x2a5/0x360 [ 512.269697][T18183] ? __lock_acquire+0x6b5/0x2cf0 [ 512.269728][T18183] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.269783][T18183] ? __fget_files+0x2a/0x420 [ 512.269804][T18183] ? __fget_files+0x3a0/0x420 [ 512.269835][T18183] __x64_sys_sendmsg+0x1bd/0x2a0 [ 512.269861][T18183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.269894][T18183] ? __pfx_ksys_write+0x10/0x10 [ 512.269934][T18183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.269953][T18183] do_syscall_64+0x15f/0xf80 [ 512.269975][T18183] ? trace_irq_disable+0x3b/0x140 [ 512.270001][T18183] ? clear_bhb_loop+0x40/0x90 [ 512.270023][T18183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.270041][T18183] RIP: 0033:0x7f34c5b9cdd9 [ 512.270059][T18183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.270075][T18183] RSP: 002b:00007f34c3df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.270095][T18183] RAX: ffffffffffffffda RBX: 00007f34c5e15fa0 RCX: 00007f34c5b9cdd9 [ 512.270108][T18183] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 512.270119][T18183] RBP: 00007f34c3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 512.270130][T18183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.270140][T18183] R13: 00007f34c5e16038 R14: 00007f34c5e15fa0 R15: 00007ffc2092e7b8 [ 512.270169][T18183] [ 512.601741][T18186] __nla_validate_parse: 225 callbacks suppressed [ 512.601761][T18186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3091'. [ 512.625183][T18185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3091'. [ 512.662168][ T1160] bond2 (unregistering): (slave bridge3): Removing an active aggregator [ 512.673147][ T1160] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 512.681951][ T1160] bond2 (unregistering): (slave bridge3): the permanent HWaddr of slave - 02:56:10:8e:7a:2e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 512.701885][ T1160] bridge3 (unregistering): left promiscuous mode [ 512.708466][ T1160] bridge3 (unregistering): left allmulticast mode [ 512.732214][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.763721][ T1160] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 512.772558][ T1160] bridge4 (unregistering): left promiscuous mode [ 512.779255][ T1160] bridge4 (unregistering): left allmulticast mode [ 512.814961][ T1160] bond9 (unregistering): (slave bridge0): Releasing backup interface [ 512.823309][ T1160] bridge0 (unregistering): left promiscuous mode [ 512.830185][ T1160] bridge0 (unregistering): left allmulticast mode [ 512.986306][ T1160] bond0 (unregistering): (slave ..@): Releasing backup interface [ 513.000276][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.013464][ T1160] bond0 (unregistering): Released all slaves [ 513.025934][ T1160] bond1 (unregistering): Released all slaves [ 513.042659][ T1160] bond2 (unregistering): Released all slaves [ 513.059593][ T1160] bond3 (unregistering): Released all slaves [ 513.084651][ T1160] bond4 (unregistering): Released all slaves [ 513.103589][ T1160] bond5 (unregistering): Released all slaves [ 513.121518][ T1160] bond6 (unregistering): Released all slaves [ 513.128561][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.155461][ T1160] bond7 (unregistering): Released all slaves [ 513.178314][ T1160] bond8 (unregistering): Released all slaves [ 513.203126][ T1160] bond9 (unregistering): Released all slaves [ 513.221649][ T1160] bond10 (unregistering): Released all slaves [ 513.240435][ T1160] bond11 (unregistering): Released all slaves [ 513.261759][ T1160] bond12 (unregistering): Released all slaves [ 513.281618][ T1160] bond13 (unregistering): Released all slaves [ 513.302313][ T1160] bond14 (unregistering): (slave wireguard0): Releasing backup interface [ 513.314590][ T1160] wireguard0: left promiscuous mode [ 513.323293][ T1160] bond14 (unregistering): Released all slaves [ 513.342311][T18148] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 513.382446][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 513.656028][ T1160] : left promiscuous mode [ 513.780545][ T5649] Bluetooth: hci0: command tx timeout [ 513.786487][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.805430][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.915909][ T1160] tipc: Disabling bearer [ 513.930094][ T1160] tipc: Left network mode [ 514.426563][T18233] xt_TCPMSS: Only works on TCP SYN packets [ 514.674251][T18243] FAULT_INJECTION: forcing a failure. [ 514.674251][T18243] name failslab, interval 1, probability 0, space 0, times 0 [ 514.692504][T18243] CPU: 1 UID: 0 PID: 18243 Comm: syz.2.3101 Not tainted syzkaller #0 PREEMPT(full) [ 514.692536][T18243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 514.692549][T18243] Call Trace: [ 514.692558][T18243] [ 514.692567][T18243] dump_stack_lvl+0xe8/0x150 [ 514.692597][T18243] should_fail_ex+0x412/0x560 [ 514.692629][T18243] should_failslab+0xa8/0x100 [ 514.692664][T18243] ? skb_clone+0x212/0x3a0 [ 514.692692][T18243] kmem_cache_alloc_noprof+0x87/0x650 [ 514.692721][T18243] ? apparmor_capable+0x126/0x170 [ 514.692761][T18243] skb_clone+0x212/0x3a0 [ 514.692788][T18243] ? nfnetlink_rcv+0x4b0/0x27b0 [ 514.692816][T18243] nfnetlink_rcv+0x4de/0x27b0 [ 514.692858][T18243] ? lockdep_hardirqs_on+0x7a/0x110 [ 514.692885][T18243] ? __local_bh_enable_ip+0xd0/0x130 [ 514.692911][T18243] ? __dev_queue_xmit+0x2b6/0x3950 [ 514.692949][T18243] ? __dev_queue_xmit+0x1fe5/0x3950 [ 514.692976][T18243] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 514.693013][T18243] ? __dev_queue_xmit+0x2b6/0x3950 [ 514.693048][T18243] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 514.693090][T18243] ? ref_tracker_free+0x693/0x840 [ 514.693122][T18243] ? __pfx_ref_tracker_free+0x10/0x10 [ 514.693168][T18243] ? skb_clone+0x246/0x3a0 [ 514.693201][T18243] ? __netlink_deliver_tap+0x807/0x850 [ 514.693227][T18243] ? netlink_deliver_tap+0x2e/0x1b0 [ 514.693260][T18243] ? netlink_deliver_tap+0x2e/0x1b0 [ 514.693286][T18243] ? netlink_deliver_tap+0x2e/0x1b0 [ 514.693324][T18243] netlink_unicast+0x75c/0x8e0 [ 514.693360][T18243] netlink_sendmsg+0x813/0xb40 [ 514.693398][T18243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.693429][T18243] ? aa_sock_msg_perm+0xf1/0x1b0 [ 514.693458][T18243] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.693492][T18243] ____sys_sendmsg+0x972/0x9f0 [ 514.693516][T18243] ? __might_fault+0xaf/0x130 [ 514.693544][T18243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.693574][T18243] ? import_iovec+0x73/0xa0 [ 514.693601][T18243] ___sys_sendmsg+0x2a5/0x360 [ 514.693623][T18243] ? __lock_acquire+0x6b5/0x2cf0 [ 514.693646][T18243] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.693699][T18243] ? __fget_files+0x2a/0x420 [ 514.693719][T18243] ? __fget_files+0x3a0/0x420 [ 514.693747][T18243] __x64_sys_sendmsg+0x1bd/0x2a0 [ 514.693773][T18243] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.693804][T18243] ? __pfx_ksys_write+0x10/0x10 [ 514.693837][T18243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.693856][T18243] do_syscall_64+0x15f/0xf80 [ 514.693877][T18243] ? trace_irq_disable+0x3b/0x140 [ 514.693903][T18243] ? clear_bhb_loop+0x40/0x90 [ 514.693925][T18243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.693949][T18243] RIP: 0033:0x7f87ccd9cdd9 [ 514.693966][T18243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.693982][T18243] RSP: 002b:00007f87cdc6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.694002][T18243] RAX: ffffffffffffffda RBX: 00007f87cd015fa0 RCX: 00007f87ccd9cdd9 [ 514.694015][T18243] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 514.694026][T18243] RBP: 00007f87cdc6a090 R08: 0000000000000000 R09: 0000000000000000 [ 514.694037][T18243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.694047][T18243] R13: 00007f87cd016038 R14: 00007f87cd015fa0 R15: 00007fff51c32ca8 [ 514.694074][T18243] [ 515.170178][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.436305][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'. [ 515.796931][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3105'. [ 515.848223][ T5649] Bluetooth: hci0: command tx timeout [ 515.939451][T18048] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.957239][T18048] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.981853][T18048] bridge_slave_0: entered allmulticast mode [ 516.016594][T18048] bridge_slave_0: entered promiscuous mode [ 516.053257][T18048] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.070865][T18048] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.084811][T18048] bridge_slave_1: entered allmulticast mode [ 516.110297][T18048] bridge_slave_1: entered promiscuous mode [ 516.134492][T18283] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3108'. [ 516.161944][T18283] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3108'. [ 516.181412][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.190157][T18283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3108'. [ 516.251978][T18048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.343140][T18048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.513082][T18301] tipc: Started in network mode [ 516.529312][T18301] tipc: Node identity 768df3832bb1, cluster identity 4711 [ 516.549418][T18301] tipc: Enabled bearer , priority 0 [ 516.563949][T18306] FAULT_INJECTION: forcing a failure. [ 516.563949][T18306] name failslab, interval 1, probability 0, space 0, times 0 [ 516.595564][T18306] CPU: 1 UID: 0 PID: 18306 Comm: syz.0.3112 Not tainted syzkaller #0 PREEMPT(full) [ 516.595594][T18306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.595608][T18306] Call Trace: [ 516.595617][T18306] [ 516.595627][T18306] dump_stack_lvl+0xe8/0x150 [ 516.595657][T18306] should_fail_ex+0x412/0x560 [ 516.595691][T18306] should_failslab+0xa8/0x100 [ 516.595726][T18306] __kmalloc_noprof+0xe8/0x760 [ 516.595757][T18306] ? nf_tables_newrule+0x152c/0x28b0 [ 516.595792][T18306] ? nla_strcmp+0x106/0x140 [ 516.595826][T18306] nf_tables_newrule+0x152c/0x28b0 [ 516.595878][T18306] ? __pfx_nf_tables_newrule+0x10/0x10 [ 516.595910][T18306] ? nfnl_pernet+0x23/0x240 [ 516.595934][T18306] ? nfnl_pernet+0x23/0x240 [ 516.595969][T18306] ? __nla_parse+0x40/0x60 [ 516.596004][T18306] nfnetlink_rcv+0x123e/0x27b0 [ 516.596068][T18306] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 516.596112][T18306] ? ref_tracker_free+0x693/0x840 [ 516.596175][T18306] ? __netlink_deliver_tap+0x807/0x850 [ 516.596213][T18306] ? netlink_deliver_tap+0x2e/0x1b0 [ 516.596240][T18306] ? netlink_deliver_tap+0x2e/0x1b0 [ 516.596273][T18306] netlink_unicast+0x75c/0x8e0 [ 516.596310][T18306] netlink_sendmsg+0x813/0xb40 [ 516.596348][T18306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.596380][T18306] ? aa_sock_msg_perm+0xf1/0x1b0 [ 516.596410][T18306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.596449][T18306] ____sys_sendmsg+0x972/0x9f0 [ 516.596484][T18306] ? __might_fault+0xaf/0x130 [ 516.596517][T18306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.596560][T18306] ? import_iovec+0x73/0xa0 [ 516.596594][T18306] ___sys_sendmsg+0x2a5/0x360 [ 516.596620][T18306] ? __lock_acquire+0x6b5/0x2cf0 [ 516.596648][T18306] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.596712][T18306] ? __fget_files+0x2a/0x420 [ 516.596738][T18306] ? __fget_files+0x3a0/0x420 [ 516.596774][T18306] __x64_sys_sendmsg+0x1bd/0x2a0 [ 516.596807][T18306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.596847][T18306] ? __pfx_ksys_write+0x10/0x10 [ 516.596887][T18306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.596910][T18306] do_syscall_64+0x15f/0xf80 [ 516.596935][T18306] ? trace_irq_disable+0x3b/0x140 [ 516.596966][T18306] ? clear_bhb_loop+0x40/0x90 [ 516.596993][T18306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.597014][T18306] RIP: 0033:0x7f34c5b9cdd9 [ 516.597034][T18306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.597052][T18306] RSP: 002b:00007f34c3df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.597073][T18306] RAX: ffffffffffffffda RBX: 00007f34c5e15fa0 RCX: 00007f34c5b9cdd9 [ 516.597089][T18306] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 516.597103][T18306] RBP: 00007f34c3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 516.597116][T18306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.597129][T18306] R13: 00007f34c5e16038 R14: 00007f34c5e15fa0 R15: 00007ffc2092e7b8 [ 516.597165][T18306] [ 516.969036][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.980017][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.995971][T18048] team0: Port device team_slave_0 added [ 517.012704][T18048] team0: Port device team_slave_1 added [ 517.042658][T18312] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3113'. [ 517.226225][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.352990][T18048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.385429][T18048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.460384][T18048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.477836][T18048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.486666][T18048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.541850][T18048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.575056][T18325] hsr0: entered promiscuous mode [ 517.590252][T18328] netlink: 'syz.0.3118': attribute type 1 has an invalid length. [ 517.598464][T18328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.623285][T18301] tipc: Disabling bearer [ 517.666085][T18326] hsr_slave_0: left promiscuous mode [ 517.673051][T18326] hsr_slave_1: left promiscuous mode [ 517.699611][T18326] hsr0 (unregistering): left promiscuous mode [ 517.755464][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 518.007419][T18048] hsr_slave_0: entered promiscuous mode [ 518.027768][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 518.038930][T18338] netlink: 'syz.2.3122': attribute type 5 has an invalid length. [ 518.050927][T18338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3122'. [ 518.060816][T18048] hsr_slave_1: entered promiscuous mode [ 518.081137][T18048] debugfs: 'hsr0' already exists in 'hsr' [ 518.088142][T18048] Cannot create hsr debugfs directory [ 518.165077][T18338] geneve2: entered promiscuous mode [ 518.194612][T18338] geneve2: entered allmulticast mode [ 518.227878][T18346] FAULT_INJECTION: forcing a failure. [ 518.227878][T18346] name failslab, interval 1, probability 0, space 0, times 0 [ 518.251924][T18346] CPU: 0 UID: 0 PID: 18346 Comm: syz.0.3123 Not tainted syzkaller #0 PREEMPT(full) [ 518.251954][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 518.251968][T18346] Call Trace: [ 518.251976][T18346] [ 518.251986][T18346] dump_stack_lvl+0xe8/0x150 [ 518.252018][T18346] should_fail_ex+0x412/0x560 [ 518.252052][T18346] should_failslab+0xa8/0x100 [ 518.252087][T18346] __kmalloc_noprof+0xe8/0x760 [ 518.252118][T18346] ? nf_tables_newrule+0x152c/0x28b0 [ 518.252152][T18346] ? nla_strcmp+0x106/0x140 [ 518.252185][T18346] nf_tables_newrule+0x152c/0x28b0 [ 518.252237][T18346] ? __pfx_nf_tables_newrule+0x10/0x10 [ 518.252269][T18346] ? nfnl_pernet+0x23/0x240 [ 518.252293][T18346] ? nfnl_pernet+0x23/0x240 [ 518.252328][T18346] ? __nla_parse+0x40/0x60 [ 518.252364][T18346] nfnetlink_rcv+0x123e/0x27b0 [ 518.252427][T18346] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 518.252476][T18346] ? ref_tracker_free+0x693/0x840 [ 518.252539][T18346] ? __netlink_deliver_tap+0x807/0x850 [ 518.252577][T18346] ? netlink_deliver_tap+0x2e/0x1b0 [ 518.252602][T18346] ? netlink_deliver_tap+0x2e/0x1b0 [ 518.252635][T18346] netlink_unicast+0x75c/0x8e0 [ 518.252672][T18346] netlink_sendmsg+0x813/0xb40 [ 518.252710][T18346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.252742][T18346] ? aa_sock_msg_perm+0xf1/0x1b0 [ 518.252772][T18346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.252805][T18346] ____sys_sendmsg+0x972/0x9f0 [ 518.252833][T18346] ? __might_fault+0xaf/0x130 [ 518.252868][T18346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.252907][T18346] ? import_iovec+0x73/0xa0 [ 518.252947][T18346] ___sys_sendmsg+0x2a5/0x360 [ 518.252973][T18346] ? __lock_acquire+0x6b5/0x2cf0 [ 518.253002][T18346] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.253071][T18346] ? __fget_files+0x2a/0x420 [ 518.253095][T18346] ? __fget_files+0x3a0/0x420 [ 518.253132][T18346] __x64_sys_sendmsg+0x1bd/0x2a0 [ 518.253164][T18346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.253204][T18346] ? __pfx_ksys_write+0x10/0x10 [ 518.253245][T18346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.253269][T18346] do_syscall_64+0x15f/0xf80 [ 518.253294][T18346] ? trace_irq_disable+0x3b/0x140 [ 518.253326][T18346] ? clear_bhb_loop+0x40/0x90 [ 518.253353][T18346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.253375][T18346] RIP: 0033:0x7f34c5b9cdd9 [ 518.253395][T18346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.253414][T18346] RSP: 002b:00007f34c3df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.253437][T18346] RAX: ffffffffffffffda RBX: 00007f34c5e15fa0 RCX: 00007f34c5b9cdd9 [ 518.253453][T18346] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 518.253472][T18346] RBP: 00007f34c3df6090 R08: 0000000000000000 R09: 0000000000000000 [ 518.253485][T18346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.253497][T18346] R13: 00007f34c5e16038 R14: 00007f34c5e15fa0 R15: 00007ffc2092e7b8 [ 518.253533][T18346] [ 518.254304][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.558054][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.631469][ T80] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 518.649382][ T80] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 518.712089][ T1160] hsr_slave_0: left promiscuous mode [ 518.719815][ T1160] hsr_slave_1: left promiscuous mode [ 518.734076][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.755225][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.781860][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.814530][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.984748][T18356] xt_CT: No such helper "snmp_trap" [ 519.005946][ T1160] veth1_macvtap: left promiscuous mode [ 519.020275][ T1160] veth1_vlan: left promiscuous mode [ 519.038077][ T1160] veth0_vlan: left promiscuous mode [ 519.294346][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.528492][ T3329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.623594][T18380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3128'. [ 519.675377][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3128'. [ 519.684442][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3128'. [ 520.354793][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.378629][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.103048][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.414828][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.738270][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.458115][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.688186][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.522489][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.721979][T18384] xt_l2tp: missing protocol rule (udp|l2tpip) [ 524.859266][T18387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3130'. [ 525.289724][ T3329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.533563][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.590573][ T80] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 525.599790][ T80] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 525.678573][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 525.694639][T18388] team0: No ports can be present during mode change [ 525.770822][T18397] tipc: Enabling of bearer rejected, failed to enable media [ 525.924072][T18399] xt_hashlimit: size too large, truncated to 1048576 [ 525.977816][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3131'. [ 526.592876][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.666659][T18430] SET target dimension over the limit! [ 526.704014][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3138'. [ 526.855645][T18438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3138'. [ 526.900206][T18430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 526.950217][T18430] netlink: 'syz.0.3138': attribute type 1 has an invalid length. [ 526.958366][T18430] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3138'. [ 526.983573][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 527.218862][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.244595][T18435] bond1: (slave veth3): Enslaving as an active interface with an up link [ 527.425499][T18438] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 527.466117][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3142'. [ 527.606356][T18456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3142'. [ 527.645622][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.731072][T18461] veth15: entered promiscuous mode [ 527.770079][T18461] bond13: (slave veth15): Enslaving as an active interface with an up link [ 527.782470][T18456] 8021q: adding VLAN 0 to HW filter on device bond13 [ 527.923042][ T1160] IPVS: stop unused estimator thread 0... [ 528.004069][T18466] lo speed is unknown, defaulting to 1000 [ 528.037376][T18476] nftables ruleset with unbound set [ 528.488137][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.519089][T18494] netlink: 'syz.0.3150': attribute type 1 has an invalid length. [ 528.653383][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.760597][T18466] lo speed is unknown, defaulting to 1000 [ 528.791987][T18048] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 528.822660][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 528.856507][T18508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3151'. [ 528.885340][T18048] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 528.903285][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 528.951533][T18048] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 528.966392][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.037208][T18511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3151'. [ 529.071686][T18048] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 529.108109][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 529.132105][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.493610][T18048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.587236][T18048] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.655223][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.662667][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.725022][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.765342][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.772611][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.206815][T18547] netlink: 'syz.2.3159': attribute type 1 has an invalid length. [ 530.215730][T18550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3158'. [ 530.310821][T18559] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 530.371880][T18559] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3157'. [ 530.449141][T18555] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 530.475076][T18555] bond3 (unregistering): Released all slaves [ 530.616672][T18547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.643106][T18560] bond3: (slave ip6gretap1): making interface the new active one [ 530.658931][T18560] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 530.733116][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.955793][T18583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3162'. [ 531.000313][T18583] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3162'. [ 531.062625][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.333372][T18602] netlink: 'syz.1.3168': attribute type 32 has an invalid length. [ 531.351753][T18602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3168'. [ 531.374310][T18602] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3168'. [ 531.673419][T18620] netlink: 'syz.1.3171': attribute type 13 has an invalid length. [ 531.709114][T18620] netlink: 'syz.1.3171': attribute type 17 has an invalid length. [ 531.768983][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.901331][T18628] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 532.050503][T18620] bridge0: left promiscuous mode [ 532.062640][T18620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.078778][T18620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.181438][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 532.210489][T18620] virt_wifi0: left promiscuous mode [ 532.224575][T18620] veth1_macvtap: left promiscuous mode [ 532.231824][T18620] veth0_macvtap: left promiscuous mode [ 532.251890][T18620] veth0_macvtap: entered promiscuous mode [ 532.266733][T18620] veth1_macvtap: entered promiscuous mode [ 532.278482][T18620] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 532.289043][T18620] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 532.314425][T18620] batman_adv: batadv0: Interface activated: ipvlan0 [ 532.323625][T18620] virt_wifi0: entered promiscuous mode [ 532.334077][T18620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.344182][T18620] 8021q: adding VLAN 0 to HW filter on device bond2 [ 532.357193][T18620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 532.365538][T18620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 532.389981][T18620] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.398228][T18620] gretap0: entered promiscuous mode [ 532.409470][T18620] batman_adv: batadv0: Interface activated: ipvlan1 [ 532.422002][T18620] 8021q: adding VLAN 0 to HW filter on device eth0 [ 532.440678][T18620] 8021q: adding VLAN 0 to HW filter on device eth1 [ 532.454035][T18620] 8021q: adding VLAN 0 to HW filter on device eth2 [ 532.467190][T18620] 8021q: adding VLAN 0 to HW filter on device eth3 [ 532.513549][T18620] 8021q: adding VLAN 0 to HW filter on device bond6 [ 532.524236][T18620] vcan1: left promiscuous mode [ 532.531884][T18620] 8021q: adding VLAN 0 to HW filter on device bond7 [ 532.541459][T18620] veth5: left promiscuous mode [ 532.548977][T18620] 8021q: adding VLAN 0 to HW filter on device bond8 [ 532.558273][T18620] veth7: left promiscuous mode [ 532.570241][T18620] 8021q: adding VLAN 0 to HW filter on device bond9 [ 532.585666][T18620] 8021q: adding VLAN 0 to HW filter on device bond10 [ 532.616594][T18620] 8021q: adding VLAN 0 to HW filter on device bond11 [ 532.630447][T18620] geneve2: left promiscuous mode [ 532.653103][T18620] 8021q: adding VLAN 0 to HW filter on device bond12 [ 532.662602][T18620] 8021q: adding VLAN 0 to HW filter on device bond13 [ 532.672619][T18620] veth15: left promiscuous mode [ 532.699721][ T5838] bridge0: entered promiscuous mode [ 532.771751][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.813892][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.825436][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.850431][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.864074][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'. [ 532.874668][T18646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3176'. [ 532.884896][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.906209][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.926157][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.945900][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.957865][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.973572][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.993751][T18650] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3177'. [ 533.031686][ T1160] bond9: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 533.044151][ T1160] bond9: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 533.059170][T18648] Bluetooth: MGMT ver 1.23 [ 533.066307][ T1160] bond9: (slave veth11): making interface the new active one [ 533.082383][ T1160] bond9: active interface up! [ 533.096122][T18048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.171882][ T3352] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 533.416642][T18665] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 533.505678][T18048] veth0_vlan: entered promiscuous mode [ 533.578589][T18048] veth1_vlan: entered promiscuous mode [ 533.754383][ T3352] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 533.795613][T18683] netlink: 'syz.2.3186': attribute type 29 has an invalid length. [ 533.848991][ T7281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.887960][T18048] veth0_macvtap: entered promiscuous mode [ 533.916106][T18048] veth1_macvtap: entered promiscuous mode [ 533.961955][T18048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.971357][T18687] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 534.019447][T18048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.054949][T18693] netlink: 'syz.2.3186': attribute type 29 has an invalid length. [ 534.130227][ T1160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.152344][ T1160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.179790][ T1160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.196214][ T1160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.258680][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.637036][T18711] netlink: 'syz.1.3191': attribute type 1 has an invalid length. [ 534.769381][T18711] 8021q: adding VLAN 0 to HW filter on device bond14 [ 534.797547][ T3352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.839849][ T3352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.904423][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.913576][ T3329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.054649][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.092949][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.389150][T18743] __nla_validate_parse: 6 callbacks suppressed [ 535.389174][T18743] netlink: 840 bytes leftover after parsing attributes in process `syz.1.3200'. [ 535.971929][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.015866][T18755] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3202'. [ 536.049390][T18755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 536.170483][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.217218][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.231803][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.241745][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.253957][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.261913][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 536.718764][T18733] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 536.726647][T18733] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.919987][T18733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.978536][T18733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.048858][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 537.116612][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.515211][T18741] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3199'. [ 537.621715][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.666475][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 537.687822][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 537.731021][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.780201][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 537.849770][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.887154][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 537.925128][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.947268][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 537.983808][T18771] lo speed is unknown, defaulting to 1000 [ 538.099486][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.181908][T18794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.237570][T18846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3210'. [ 538.331107][ T5649] Bluetooth: hci4: command tx timeout [ 538.688425][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'. [ 538.770672][T18763] lo speed is unknown, defaulting to 1000 [ 538.771467][T18771] lo speed is unknown, defaulting to 1000 [ 539.081958][T18878] bridge_slave_1: left allmulticast mode [ 539.097960][T18878] bridge_slave_1: left promiscuous mode [ 539.111535][T18878] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.170452][T18878] bond0: (slave bond_slave_0): Releasing backup interface [ 539.222755][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.233392][T18878] bond0: (slave bond_slave_1): Releasing backup interface [ 539.243279][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.258427][T18808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.287287][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.311552][T18878] team0: Port device team_slave_0 removed [ 539.360356][T18878] team0: Port device team_slave_1 removed [ 539.389488][T18878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.431589][T18878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.451354][T18878] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 539.576749][T18763] lo speed is unknown, defaulting to 1000 [ 539.899872][T18896] veth1_to_bond: entered promiscuous mode [ 539.954728][T18896] veth1_to_bond: entered allmulticast mode [ 540.036541][T18892] veth1_to_bond: left allmulticast mode [ 540.074616][T18892] veth1_to_bond: left promiscuous mode [ 540.107980][T18908] netlink: 'syz.3.3217': attribute type 1 has an invalid length. [ 540.237513][T18908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3217'. [ 540.331018][T18902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3217'. [ 540.356972][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3220'. [ 540.407829][ T5649] Bluetooth: hci4: command tx timeout [ 540.545022][T18931] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.3221'. [ 540.819967][T18943] xt_cgroup: path and classid specified [ 540.829668][T18936] ip6gretap1: entered promiscuous mode [ 541.369212][T18794] net_ratelimit: 3 callbacks suppressed [ 541.369233][T18794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.423813][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3225'. [ 541.434963][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3228'. [ 541.613495][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3228'. [ 541.829541][T18763] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.847474][T18763] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.865223][T18763] bridge_slave_0: entered allmulticast mode [ 541.874068][T18763] bridge_slave_0: entered promiscuous mode [ 541.884588][T18964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.914100][T18964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.932057][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.973774][T18763] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.000936][T18763] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.035069][T18763] bridge_slave_1: entered allmulticast mode [ 542.060159][T18763] bridge_slave_1: entered promiscuous mode [ 542.212891][T18763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.264467][T18763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.408753][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.465454][T18763] team0: Port device team_slave_0 added [ 542.487815][ T5649] Bluetooth: hci4: command tx timeout [ 542.491305][T18998] lo speed is unknown, defaulting to 1000 [ 542.514978][T18763] team0: Port device team_slave_1 added [ 542.696922][T18763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.715997][T18763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.797786][T18763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.820830][T18763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.840966][T18763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.927718][T18763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.211736][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.221069][T18763] hsr_slave_0: entered promiscuous mode [ 543.249093][T18763] hsr_slave_1: entered promiscuous mode [ 543.275066][T18763] debugfs: 'hsr0' already exists in 'hsr' [ 543.294901][T18763] Cannot create hsr debugfs directory [ 543.309892][T18998] lo speed is unknown, defaulting to 1000 [ 543.457532][T18794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.542685][T19039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3239'. [ 543.650601][T19039] 8021q: adding VLAN 0 to HW filter on device bond15 [ 543.726874][T19041] bond15: (slave geneve3): Enslaving as an active interface with an up link [ 544.003142][T19051] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 544.033124][T19051] syzkaller1: linktype set to 270 [ 544.491743][T18794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.502315][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.511570][T18791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.520998][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.568348][ T5649] Bluetooth: hci4: command tx timeout [ 544.602629][T19059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3242'. [ 545.108504][T19071] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3245'. [ 545.138009][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 545.140133][T19072] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3246'. [ 545.156210][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 545.176976][T19074] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.196619][T19072] syzkaller0: entered promiscuous mode [ 545.202614][T19072] syzkaller0: entered allmulticast mode [ 545.259335][T19072] tcf_pedit_act: 7 callbacks suppressed [ 545.259358][T19072] tc action pedit 'at' offset 1029 out of bounds [ 545.273137][T19072] tc action pedit 'at' offset 1029 out of bounds [ 545.279568][T19072] tc action pedit 'at' offset 1029 out of bounds [ 545.285962][T19072] tc action pedit 'at' offset 1029 out of bounds [ 545.292414][T19072] tc action pedit 'at' offset 1029 out of bounds [ 545.298832][T19072] tc action pedit 'at' offset 1029 out of bounds [ 545.305246][T19072] tc action pedit 'at' offset 1029 out of bounds [ 545.311683][T19072] tc action pedit 'at' offset 1029 out of bounds [ 545.318263][T19072] tc action pedit 'at' offset 1029 out of bounds [ 545.324650][T19072] tc action pedit 'at' offset 1029 out of bounds [ 545.331091][T19072] 0: reclassify loop, rule prio 0, protocol 800 [ 545.754456][T18763] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 545.804638][T18763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.828883][T18763] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 545.863089][T18763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.884887][T18763] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 545.914867][T18763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.931514][T18763] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 545.933256][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3252'. [ 545.960668][T18763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.991437][T19094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3252'. [ 546.191587][T19113] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 546.210423][T19113] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3256'. [ 546.233250][T18763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.323697][T18763] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.385497][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.392858][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.450066][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.457335][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.519393][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3258'. [ 546.649477][T18794] net_ratelimit: 3 callbacks suppressed [ 546.649497][T18794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.051014][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.451281][T19158] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.3264'. [ 547.542512][T19158] openvswitch: netlink: Key type 11488 is out of range max 32 [ 547.557147][T19165] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3268'. [ 547.714961][T18794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.006510][T18763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.030607][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3271'. [ 548.141254][T19183] netlink: 'syz.2.3271': attribute type 15 has an invalid length. [ 548.194982][T19183] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3271'. [ 548.325993][T19197] GPL: option downdelay: invalid value (18446744073709547007) [ 548.347894][T19197] GPL: option downdelay: allowed values 0 - 2147483647 [ 548.392974][T19197] GPL (unregistering): Released all slaves [ 548.442299][T19200] netlink: 964 bytes leftover after parsing attributes in process `syz.3.3273'. [ 548.461871][T19200] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 548.697354][T18763] veth0_vlan: entered promiscuous mode [ 548.714105][T18763] veth1_vlan: entered promiscuous mode [ 548.728639][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.777152][T18763] veth0_macvtap: entered promiscuous mode [ 548.791574][T18763] veth1_macvtap: entered promiscuous mode [ 548.866064][T18763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.880199][T18763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.921870][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.964415][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.975410][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.985475][ T3352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.999740][ T3352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.768721][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.248877][ T3329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.260275][T18791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.963706][T19178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.159783][ T3329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.201048][ T3329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.287043][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.304298][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.497062][T19224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3280'. [ 551.533234][T19224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3280'. [ 552.234455][T19245] xt_TCPMSS: Only works on TCP SYN packets [ 552.260092][T19249] netlink: 'syz.3.3284': attribute type 10 has an invalid length. [ 552.272395][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3285'. [ 552.277943][T19249] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3284'. [ 552.299564][T19249] veth1_virt_wifi: entered promiscuous mode [ 552.310568][T19249] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 552.321525][T19249] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 552.330181][T19249] veth1_virt_wifi: entered allmulticast mode [ 552.339843][T18792] net_ratelimit: 4 callbacks suppressed [ 552.339861][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.357061][T19249] veth1_virt_wifi: left allmulticast mode [ 552.377327][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3285'. [ 552.403534][T19257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.421819][T19257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.459399][T19249] netlink: 'syz.3.3284': attribute type 27 has an invalid length. [ 552.808531][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.105252][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 553.118400][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 553.141668][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 553.155278][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 553.166725][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 553.207088][T19271] syz_tun: left allmulticast mode [ 553.212484][T19271] syz_tun: left promiscuous mode [ 553.219887][T19271] bridge0: port 3(syz_tun) entered disabled state [ 553.315286][T19271] bridge_slave_0: left allmulticast mode [ 553.357120][T19277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3294'. [ 553.369294][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.384250][T19271] bridge_slave_0: left promiscuous mode [ 553.425229][T19271] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.579090][T19271] bridge_slave_1: left allmulticast mode [ 553.633648][T19271] bridge_slave_1: left promiscuous mode [ 553.640153][T19271] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.672490][T19271] bond0: (slave bond_slave_0): Releasing backup interface [ 553.721355][T19271] bond0: (slave bond_slave_1): Releasing backup interface [ 553.787169][T19271] team0: Port device team_slave_0 removed [ 553.823244][T19271] team0: Port device team_slave_1 removed [ 553.831001][T19271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.842503][T19271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.862021][T19271] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 554.411814][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.564632][T19314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.737463][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.844924][T19332] netlink: 'syz.4.3307': attribute type 1 has an invalid length. [ 554.919879][T19268] lo speed is unknown, defaulting to 1000 [ 555.007249][T19342] xt_hashlimit: size too large, truncated to 1048576 [ 555.143401][T19345] xt_TCPMSS: Only works on TCP SYN packets [ 555.210482][ T5649] Bluetooth: hci1: command tx timeout [ 555.448095][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.550463][T19268] lo speed is unknown, defaulting to 1000 [ 555.967418][T19365] sit1: entered allmulticast mode [ 555.995450][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3314'. [ 556.209762][T19378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3315'. [ 556.310740][T19378] bond2: option primary_reselect: invalid value (133) [ 556.321509][T19378] bond2 (unregistering): Released all slaves [ 556.469761][T19379] xt_CT: No such helper "netbios-ns" [ 556.499814][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.569790][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.652370][T19373] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 556.673133][T19373] bond2 (unregistering): Released all slaves [ 556.687329][T19393] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3319'. [ 556.815794][T19397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3320'. [ 556.951317][T19382] veth1_virt_wifi: left promiscuous mode [ 556.999169][T19382] ip6gretap1: left promiscuous mode [ 557.019731][T19382] sit1: left allmulticast mode [ 557.047585][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.054880][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.159844][T19415] sctp: [Deprecated]: syz.3.3325 (pid 19415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.159844][T19415] Use struct sctp_sack_info instead [ 557.291938][ T5649] Bluetooth: hci1: command tx timeout [ 557.443772][T19268] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.451909][T19268] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.459874][T19268] bridge_slave_0: entered allmulticast mode [ 557.474234][T19268] bridge_slave_0: entered promiscuous mode [ 557.511612][T19268] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.521028][T19268] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.532985][T19268] bridge_slave_1: entered allmulticast mode [ 557.539827][T18792] net_ratelimit: 1 callbacks suppressed [ 557.539845][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.555004][T19268] bridge_slave_1: entered promiscuous mode [ 557.614767][T19413] lo speed is unknown, defaulting to 1000 [ 557.672839][T19268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.748317][T19268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.800532][T19431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3328'. [ 557.913044][T19268] team0: Port device team_slave_0 added [ 557.948074][T19268] team0: Port device team_slave_1 added [ 558.025213][T19268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.045060][T19268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.116256][T19268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.160182][T19268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.176035][T19268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.227412][T19268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.334888][T19437] bond1: option miimon: invalid value (18446744073709551607) [ 558.342472][T19437] bond1: option miimon: allowed values 0 - 2147483647 [ 558.351241][T19437] bond1 (unregistering): Released all slaves [ 558.387077][T19413] lo speed is unknown, defaulting to 1000 [ 558.426975][T19268] hsr_slave_0: entered promiscuous mode [ 558.445339][T19268] hsr_slave_1: entered promiscuous mode [ 558.452258][T19268] debugfs: 'hsr0' already exists in 'hsr' [ 558.458180][T19268] Cannot create hsr debugfs directory [ 558.570197][ T3329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.578401][ T3329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.604439][T19446] openvswitch: netlink: Message has 211 unknown bytes. [ 558.622811][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3334'. [ 558.687766][T19446] lo: entered allmulticast mode [ 558.797442][T19450] lo speed is unknown, defaulting to 1000 [ 559.057691][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3338'. [ 559.284698][T19472] netlink: 'syz.2.3339': attribute type 1 has an invalid length. [ 559.318956][T19268] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.330461][T19268] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.365752][T19450] lo speed is unknown, defaulting to 1000 [ 559.378060][ T5639] Bluetooth: hci1: command tx timeout [ 559.445299][T19472] 8021q: adding VLAN 0 to HW filter on device bond5 [ 559.530565][T19475] 8021q: adding VLAN 0 to HW filter on device bond5 [ 559.564419][T19475] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 559.590452][T19475] bond5: (slave vcan1): Error -95 calling set_mac_address [ 559.633648][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.723298][T19268] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.733435][T19268] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.769875][ T3329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.959417][T19490] 8021q: VLANs not supported on lo [ 560.042082][T19268] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.054272][T19268] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.203754][T19268] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.229647][T19268] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.443838][T19507] netlink: 'syz.3.3346': attribute type 8 has an invalid length. [ 560.499025][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 560.572277][T19507] netlink: 'syz.3.3346': attribute type 21 has an invalid length. [ 560.580536][T19507] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3346'. [ 560.652725][T18794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.662224][T19507] netlink: 'syz.3.3346': attribute type 4 has an invalid length. [ 560.703283][T19507] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3346'. [ 560.915807][T19268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 560.937469][T19268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 560.946283][T19268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 560.966459][T19268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 560.989240][T19268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 561.014902][T19268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.024164][T19268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 561.059576][T19268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 561.129838][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 561.165810][T19526] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3352'. [ 561.186253][T19525] IPVS: Unknown mcast interface: ip6erspan0 [ 561.306279][T19268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.381698][T19268] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.415998][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.423284][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.435857][T19532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3355'. [ 561.455261][ T5639] Bluetooth: hci1: command 0x0419 tx timeout [ 561.501798][T13674] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.509119][T13674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.553609][T19536] xt_hashlimit: size too large, truncated to 1048576 [ 561.697526][T18794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.798144][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.937155][T19546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3359'. [ 561.975744][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3361'. [ 562.098056][T19550] bond6: entered promiscuous mode [ 562.125096][T19550] bond6: entered allmulticast mode [ 562.139424][T19557] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3362'. [ 562.149140][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3361'. [ 562.153493][T19556] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3363'. [ 562.184822][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3363'. [ 562.251912][T19556] hsr_slave_1 (unregistering): left promiscuous mode [ 562.359527][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3361'. [ 562.413451][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.728555][T18794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.769249][T19582] veth1_to_team: mtu greater than device maximum [ 563.014274][T19268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.081122][T19595] team0 (unregistering): Port device team_slave_0 removed [ 563.120884][T19595] team0 (unregistering): Port device team_slave_1 removed [ 563.155802][T19603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3373'. [ 563.169419][T19603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3373'. [ 563.187471][T19603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3373'. [ 563.397170][T19268] veth0_vlan: entered promiscuous mode [ 563.528815][ T5649] Bluetooth: hci1: command 0x0419 tx timeout [ 563.614961][T19606] 8021q: adding VLAN 0 to HW filter on device bond7 [ 563.640062][T19606] team0: Port device bond7 added [ 563.780069][T18794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.823438][T19268] veth1_vlan: entered promiscuous mode [ 563.985980][T19268] veth0_macvtap: entered promiscuous mode [ 564.022166][T19268] veth1_macvtap: entered promiscuous mode [ 564.082088][T19634] netlink: 'syz.0.3382': attribute type 1 has an invalid length. [ 564.212547][T19641] netlink: 'syz.4.3385': attribute type 89 has an invalid length. [ 564.229575][T19634] bond2: entered promiscuous mode [ 564.241574][T19634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.294417][T19639] vlan2: entered allmulticast mode [ 564.299874][T19639] bond2: entered allmulticast mode [ 564.335233][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.371924][T19646] bond2: (slave bridge3): making interface the new active one [ 564.389228][T19646] bridge3: entered promiscuous mode [ 564.395999][T19646] bridge3: entered allmulticast mode [ 564.414842][T19646] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 564.460125][T19268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.643466][T19268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.664768][ T1177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.808278][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.809730][ T1177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.849926][ T1177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.882470][ T1177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.143631][ T5649] Bluetooth: hci5: link tx timeout [ 565.151236][ T5649] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 565.171885][ T5649] Bluetooth: hci5: link tx timeout [ 565.177764][ T5649] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 565.191064][T19673] syzkaller0: entered promiscuous mode [ 565.222500][T19673] syzkaller0: entered allmulticast mode [ 565.531388][T19664] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 565.543840][T19664] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 565.610529][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.718431][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.733664][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.747566][T19692] netlink: 'syz.2.3395': attribute type 3 has an invalid length. [ 565.782225][T19692] netlink: 'syz.2.3395': attribute type 3 has an invalid length. [ 565.852546][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.959837][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.007281][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.407403][T19720] lo speed is unknown, defaulting to 1000 [ 566.592994][T19737] netlink: 'syz.1.3289': attribute type 29 has an invalid length. [ 566.631619][T18817] bridge0: entered promiscuous mode [ 566.671920][T19734] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 566.890338][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.208797][ T5649] Bluetooth: hci5: command 0x0406 tx timeout [ 567.331378][T19771] __nla_validate_parse: 9 callbacks suppressed [ 567.331400][T19771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3409'. [ 567.531752][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.568885][T19720] lo speed is unknown, defaulting to 1000 [ 567.679005][T19782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3410'. [ 567.714275][T19767] lo speed is unknown, defaulting to 1000 [ 567.740536][T19782] netlink: 'syz.0.3410': attribute type 1 has an invalid length. [ 567.774449][T19782] netlink: 'syz.0.3410': attribute type 3 has an invalid length. [ 567.793322][T19782] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3410'. [ 567.953516][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.168275][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.326016][T19767] lo speed is unknown, defaulting to 1000 [ 568.968355][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.149160][T19824] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3419'. [ 569.221976][T19830] netlink: 'syz.2.3420': attribute type 21 has an invalid length. [ 569.268490][T19830] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3420'. [ 569.288314][ T5649] Bluetooth: hci5: command 0x0406 tx timeout [ 569.317853][T19830] netlink: 'syz.2.3420': attribute type 5 has an invalid length. [ 569.333044][T19830] netlink: 'syz.2.3420': attribute type 6 has an invalid length. [ 569.343474][T19830] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3420'. [ 569.451215][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.632161][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3423'. [ 569.896854][T19843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3423'. [ 570.014226][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.047901][T19860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3427'. [ 570.227893][T19872] xt_hashlimit: max too large, truncated to 1048576 [ 570.246435][T19872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 570.390575][T19873] syzkaller0: entered promiscuous mode [ 570.405735][T19884] netlink: 'syz.1.3433': attribute type 61 has an invalid length. [ 570.423231][T19873] syzkaller0: entered allmulticast mode [ 570.443737][T19888] netlink: 'syz.1.3433': attribute type 61 has an invalid length. [ 570.729123][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.002207][T19916] netlink: 'syz.2.3437': attribute type 30 has an invalid length. [ 571.042438][T19914] erspan0: entered promiscuous mode [ 571.056724][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.088025][T19914] macvtap1: entered promiscuous mode [ 571.123226][T19914] macvtap1: entered allmulticast mode [ 571.168666][T19914] erspan0: entered allmulticast mode [ 571.600203][T19923] erspan0: left allmulticast mode [ 571.619629][T19923] erspan0: left promiscuous mode [ 571.633165][T19923] macvtap1: left promiscuous mode [ 571.648878][T19923] macvtap1: left allmulticast mode [ 571.731699][T19946] netlink: 'syz.3.3443': attribute type 1 has an invalid length. [ 571.746483][ T3352] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.784005][ T3352] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.809550][ T3352] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.840483][T19946] netlink: 'syz.3.3443': attribute type 1 has an invalid length. [ 571.854324][ T3352] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.089087][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.439501][T19974] lo speed is unknown, defaulting to 1000 [ 572.496379][T19980] vlan3: entered promiscuous mode [ 572.510489][T19980] bridge0: entered promiscuous mode [ 572.737041][T19977] __nla_validate_parse: 6 callbacks suppressed [ 572.737062][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3451'. [ 572.969587][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3454'. [ 573.129154][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.292757][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.401579][T20015] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3457'. [ 573.432486][T20015] netlink: 'syz.3.3457': attribute type 9 has an invalid length. [ 573.444639][T19974] lo speed is unknown, defaulting to 1000 [ 573.453514][T20015] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3457'. [ 573.520171][T20015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3457'. [ 573.878025][T20039] netlink: 'syz.0.3463': attribute type 21 has an invalid length. [ 573.932601][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.112260][T20044] ip6gre1: entered promiscuous mode [ 574.150434][T20044] ip6gre1: entered allmulticast mode [ 574.179235][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.352867][T20062] netlink: 'syz.2.3467': attribute type 1 has an invalid length. [ 574.755517][T20062] 8021q: adding VLAN 0 to HW filter on device bond8 [ 574.810961][T20054] lo speed is unknown, defaulting to 1000 [ 574.857717][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.884123][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.971401][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3470'. [ 575.100937][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'. [ 575.210653][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.221448][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.720903][T20054] lo speed is unknown, defaulting to 1000 [ 576.123325][T20138] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3481'. [ 576.252778][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.490361][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.871019][T20169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3486'. [ 577.132727][T20174] syz.4.3487: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 577.153541][T20174] CPU: 0 UID: 0 PID: 20174 Comm: syz.4.3487 Not tainted syzkaller #0 PREEMPT(full) [ 577.153573][T20174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 577.153589][T20174] Call Trace: [ 577.153597][T20174] [ 577.153606][T20174] dump_stack_lvl+0xe8/0x150 [ 577.153638][T20174] warn_alloc+0x249/0x340 [ 577.153675][T20174] ? stack_trace_save+0xa9/0x100 [ 577.153712][T20174] ? __pfx_warn_alloc+0x10/0x10 [ 577.153751][T20174] ? kasan_save_track+0x4f/0x80 [ 577.153779][T20174] ? kasan_save_track+0x3e/0x80 [ 577.153808][T20174] ? __kasan_kmalloc+0x93/0xb0 [ 577.153838][T20174] ? __kmalloc_cache_noprof+0x31c/0x660 [ 577.153867][T20174] ? xskq_create+0x56/0x170 [ 577.153889][T20174] ? xsk_setsockopt+0x54c/0x990 [ 577.153921][T20174] ? do_sock_setsockopt+0x17c/0x1b0 [ 577.153947][T20174] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 577.153984][T20174] ? do_syscall_64+0x15f/0xf80 [ 577.154014][T20174] __vmalloc_node_range_noprof+0x132/0x1750 [ 577.154085][T20174] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 577.154123][T20174] ? __kasan_kmalloc+0x93/0xb0 [ 577.154162][T20174] vmalloc_user_noprof+0xad/0xe0 [ 577.154193][T20174] ? xskq_create+0xbf/0x170 [ 577.154217][T20174] xskq_create+0xbf/0x170 [ 577.154243][T20174] xsk_init_queue+0x8a/0xe0 [ 577.154268][T20174] xsk_setsockopt+0x54c/0x990 [ 577.154306][T20174] ? __pfx_xsk_setsockopt+0x10/0x10 [ 577.154340][T20174] ? __pfx_aa_sk_perm+0x10/0x10 [ 577.154369][T20174] ? aa_sock_opt_perm+0xff/0x1a0 [ 577.154400][T20174] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 577.154430][T20174] ? __pfx_xsk_setsockopt+0x10/0x10 [ 577.154468][T20174] do_sock_setsockopt+0x17c/0x1b0 [ 577.154501][T20174] __x64_sys_setsockopt+0x13d/0x1b0 [ 577.154532][T20174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.154557][T20174] do_syscall_64+0x15f/0xf80 [ 577.154582][T20174] ? trace_irq_disable+0x3b/0x140 [ 577.154615][T20174] ? clear_bhb_loop+0x40/0x90 [ 577.154646][T20174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.154668][T20174] RIP: 0033:0x7fea84f9cdd9 [ 577.154690][T20174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.154710][T20174] RSP: 002b:00007fea85f3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 577.154734][T20174] RAX: ffffffffffffffda RBX: 00007fea85215fa0 RCX: 00007fea84f9cdd9 [ 577.154751][T20174] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 577.154764][T20174] RBP: 00007fea85032d69 R08: 0000000000000004 R09: 0000000000000000 [ 577.154777][T20174] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.154790][T20174] R13: 00007fea85216038 R14: 00007fea85215fa0 R15: 00007ffe873b4468 [ 577.154827][T20174] [ 577.154859][T20174] Mem-Info: [ 577.332033][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.340229][T20174] active_anon:4085 inactive_anon:928 isolated_anon:0 [ 577.340229][T20174] active_file:4636 inactive_file:1327 isolated_file:0 [ 577.340229][T20174] unevictable:768 dirty:248 writeback:0 [ 577.340229][T20174] slab_reclaimable:8125 slab_unreclaimable:982820 [ 577.340229][T20174] mapped:31246 shmem:1140 pagetables:1582 [ 577.340229][T20174] sec_pagetables:0 bounce:0 [ 577.340229][T20174] kernel_misc_reclaimable:0 [ 577.340229][T20174] free:468341 free_pcp:14963 free_cma:0 [ 577.489320][T20174] Node 0 active_anon:16340kB inactive_anon:3712kB active_file:18544kB inactive_file:5172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:75928kB dirty:992kB writeback:0kB shmem:3024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16344kB pagetables:6260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 577.524234][T20174] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53156kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 577.558213][T20174] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 577.588609][T20174] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 577.594534][T20174] Node 0 DMA32 free:912728kB boost:30720kB min:64908kB low:73452kB high:81996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16440kB inactive_anon:3712kB active_file:18544kB inactive_file:5172kB unevictable:1536kB writepending:992kB zspages:1796kB present:3129332kB managed:2552676kB mlocked:0kB bounce:0kB free_pcp:35660kB local_pcp:18604kB free_cma:0kB [ 577.629046][T20174] lowmem_reserve[]: 0 0 0 0 0 [ 577.634025][T20174] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 577.666713][T20174] lowmem_reserve[]: 0 0 0 0 0 [ 577.674471][T20174] Node 1 Normal free:949388kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:504kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23624kB local_pcp:12184kB free_cma:0kB [ 577.709709][T20174] lowmem_reserve[]: 0 0 0 0 0 [ 577.714550][T20174] Node 0 DMA: 2*4kB (U) 3*8kB (U) 3*16kB (U) 3*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11248kB [ 577.730543][T20174] Node 0 DMA32: 8170*4kB (UME) 5583*8kB (UME) 2719*16kB (UME) 65*32kB (M) 390*64kB (UME) 865*128kB (UME) 541*256kB (UME) 295*512kB (UM) 184*1024kB (UE) 84*2048kB (UM) 1*4096kB (M) = 912688kB [ 577.749678][T20174] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.761366][T20174] Node 1 Normal: 3*4kB (UM) 8*8kB (UM) 4*16kB (UM) 4*32kB (UM) 4*64kB (UM) 7*128kB (U) 5*256kB (U) 9*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 228*4096kB (UM) = 949388kB [ 577.784494][T20174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.794524][T20174] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.804012][T20174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.814087][T20174] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.824133][T20174] 7161 total pagecache pages [ 577.828851][T20174] 62 pages in swap cache [ 577.833119][T20174] Free swap = 120200kB [ 577.837299][T20174] Total swap = 124996kB [ 577.841582][T20174] 2097051 pages RAM [ 577.845428][T20174] 0 pages HighMem/MovableOnly [ 577.850311][T20174] 427099 pages reserved [ 577.854530][T20174] 0 pages cma reserved [ 578.429011][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.865363][T20124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 579.061439][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.224510][T20199] hsr0: entered promiscuous mode [ 579.253359][T20199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3493'. [ 579.444185][T20210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3498'. [ 579.463498][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.692962][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.764958][T20229] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 579.838962][T20229] bond3: entered promiscuous mode [ 579.861363][T20229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 579.901792][T20232] veth1_macvtap: left promiscuous mode [ 579.924614][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3503'. [ 579.941868][T20232] macsec0: entered promiscuous mode [ 579.953593][T20232] macsec0: entered allmulticast mode [ 579.970699][T20236] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3504'. [ 580.001558][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3504'. [ 580.051731][T20225] 8021q: adding VLAN 0 to HW filter on device bond3 [ 580.069196][T20225] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 580.102037][T20225] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 580.156011][T20225] bond3: (slave ip6gre2): making interface the new active one [ 580.183867][T20225] ip6gre2: entered promiscuous mode [ 580.201496][T20225] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 580.488832][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.528256][T20261] syzkaller0: entered promiscuous mode [ 580.541863][T20261] syzkaller0: entered allmulticast mode [ 580.758560][T20269] sctp: [Deprecated]: syz.4.3511 (pid 20269) Use of int in maxseg socket option. [ 580.758560][T20269] Use struct sctp_assoc_value instead [ 580.937338][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'. [ 580.982934][ T3329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.525140][T20300] lo speed is unknown, defaulting to 1000 [ 581.531645][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.610263][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.298193][T20323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3523'. [ 582.353023][T20300] lo speed is unknown, defaulting to 1000 [ 582.376698][T20323] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 582.386859][T20326] : renamed from vlan0 (while UP) [ 582.395228][T20295] infiniband !yz!: set down [ 582.418569][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'. [ 582.421771][T20295] infiniband !yz!: added team_slave_0 [ 582.430975][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'. [ 582.446595][T20295] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 582.452438][T20295] infiniband !yz!: Couldn't open port 1 [ 582.470398][T20295] smbdirect: ib_dev[!yz!]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 582.487246][T20295] smbdirect: ib_dev[!yz!]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 582.504897][T20295] smbdirect: ib_dev[!yz!]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 582.544744][T20295] RDS/IB: !yz!: added [ 582.549154][T20295] smc: adding ib device !yz! with port count 1 [ 582.555469][T20295] smc: ib device !yz! port 1 has no pnetid [ 582.569470][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.057006][T20322] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 583.546524][T20353] pim6reg1: entered promiscuous mode [ 583.557285][T20353] pim6reg1: entered allmulticast mode [ 583.607946][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.946106][T20356] IPVS: set_ctl: invalid protocol: 53 172.20.20.170:20000 [ 584.043221][T20361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3535'. [ 584.209679][T20365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.376899][T20369] veth1_to_bond: entered allmulticast mode [ 584.383760][T20369] __nla_validate_parse: 3 callbacks suppressed [ 584.383780][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3538'. [ 584.499563][T20369] veth1_to_bond (unregistering): left allmulticast mode [ 584.519238][T20369] bond0: (slave bond_slave_1): Releasing backup interface [ 584.648228][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.777573][T20379] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3541'. [ 584.803035][T20381] syzkaller0: entered promiscuous mode [ 584.810092][T20381] syzkaller0: entered allmulticast mode [ 584.819631][ T3329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.324850][T20400] veth1_macvtap: entered promiscuous mode [ 585.331845][T20400] veth1_macvtap: entered allmulticast mode [ 585.343213][T20400] macsec0: left promiscuous mode [ 585.372365][T20400] veth0_to_team: entered promiscuous mode [ 585.379433][T20403] netlink: 'syz.3.3547': attribute type 1 has an invalid length. [ 585.453339][T20400] bond2: left promiscuous mode [ 585.458765][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.470128][T20400] bridge3: left promiscuous mode [ 585.507371][T20400] erspan0: entered promiscuous mode [ 585.532621][T20400] bond3: left promiscuous mode [ 585.539717][T20400] ip6gre2: left promiscuous mode [ 585.687957][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.854759][T20417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3549'. [ 586.200174][T20429] netlink: 'syz.3.3552': attribute type 4 has an invalid length. [ 586.259066][T20432] netlink: 'syz.3.3552': attribute type 4 has an invalid length. [ 586.332212][T20429] netlink: 'syz.3.3552': attribute type 4 has an invalid length. [ 586.454391][T20439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3556'. [ 586.478038][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3556'. [ 586.543222][T20431] "syz.1.3554" (20431) uses obsolete ecb(arc4) skcipher [ 586.585953][T20443] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3557'. [ 586.693350][T20444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3556'. [ 586.741405][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.770515][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.002595][T20452] "syz.0.3560" (20452) uses obsolete ecb(arc4) skcipher [ 587.091126][T20459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3560'. [ 587.203855][T20466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3563'. [ 587.372292][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.612373][T20472] bond2: Removing last ns target with arp_interval on [ 587.849916][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.908894][T20482] bond0: entered promiscuous mode [ 587.942917][T20482] bond0: left promiscuous mode [ 588.402856][T20505] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 588.402856][T20505] 3UH5rBn [ 588.580333][T20510] netlink: 'syz.3.3575': attribute type 1 has an invalid length. [ 588.689158][T20510] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 588.702246][T20510] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 588.747539][T20517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3575'. [ 588.773685][T20518] netlink: 'syz.0.3577': attribute type 1 has an invalid length. [ 588.811699][T20517] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 588.892592][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.967222][T20510] ip6gretap2: entered promiscuous mode [ 588.976435][T20510] ip6gretap2: entered allmulticast mode [ 588.989215][T20510] bond3: (slave ip6gretap2): making interface the new active one [ 588.998899][T20510] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 589.760647][T20555] bridge_slave_0: left allmulticast mode [ 589.766413][T20555] bridge_slave_0: left promiscuous mode [ 589.777463][T20555] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.842737][T20555] bridge_slave_1: left allmulticast mode [ 589.882878][T20555] bridge_slave_1: left promiscuous mode [ 589.896235][T20555] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.940310][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.958979][T20555] bond0: (slave bond_slave_0): Releasing backup interface [ 590.009121][T20555] team0: Port device team_slave_0 removed [ 590.065387][T20555] team0: Port device team_slave_1 removed [ 590.089081][T20555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.106939][T20555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.129954][T20555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 590.462125][T20581] syzkaller0: entered promiscuous mode [ 590.483775][T20581] syzkaller0: entered allmulticast mode [ 590.575530][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.780553][T20594] __nla_validate_parse: 3 callbacks suppressed [ 590.780569][T20594] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3600'. [ 590.820579][T20594] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3600'. [ 590.969789][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.985687][T20594] Cannot find del_set index 1 as target [ 591.086988][T20598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3601'. [ 591.191458][T20602] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3603'. [ 591.215889][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.256791][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'. [ 591.314287][T20604] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 591.695426][T20622] xt_TCPMSS: Only works on TCP SYN packets [ 591.709351][T20615] xt_hashlimit: size too large, truncated to 1048576 [ 591.716237][T20623] xt_TCPMSS: Only works on TCP SYN packets [ 591.812577][T20627] netlink: 'syz.1.3612': attribute type 8 has an invalid length. [ 591.849346][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 591.861976][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.008606][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.731657][T20675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3625'. [ 592.754518][T20665] IPVS: Scheduler module ip_vs_@ not found [ 592.789008][T20672] lo speed is unknown, defaulting to 1000 [ 593.035846][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3627'. [ 593.048393][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3627'. [ 593.058707][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.130368][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 593.130908][ T1123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.305066][T20691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3630'. [ 593.333547][T20672] lo speed is unknown, defaulting to 1000 [ 593.352038][T20691] tc_dump_action: action bad kind [ 593.363843][T20694] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3632'. [ 594.046377][T20684] tc_dump_action: action bad kind [ 594.088306][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.208047][T20718] netlink: 'syz.4.3640': attribute type 18 has an invalid length. [ 594.224142][T20716] xt_limit: Overflow, try lower: 28676/2147483648 [ 594.278084][T20718] netlink: 'syz.4.3640': attribute type 18 has an invalid length. [ 594.305993][T20718] netlink: 'syz.4.3640': attribute type 18 has an invalid length. [ 594.326366][T20718] netlink: 'syz.4.3640': attribute type 18 has an invalid length. [ 594.349736][T20718] netlink: 'syz.4.3640': attribute type 18 has an invalid length. [ 594.382761][T20718] netlink: 'syz.4.3640': attribute type 18 has an invalid length. [ 594.401729][T20718] netlink: 'syz.4.3640': attribute type 18 has an invalid length. [ 594.426329][T20718] netlink: 'syz.4.3640': attribute type 18 has an invalid length. [ 595.067164][T20743] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 595.128767][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.013947][T20794] __nla_validate_parse: 69 callbacks suppressed [ 596.013969][T20794] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3660'. [ 596.061274][T20797] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3658'. [ 596.091882][T20790] syzkaller1: tun_chr_ioctl cmd 35108 [ 596.107525][T20792] bridge_slave_0: mtu less than device minimum [ 596.153584][T20797] bridge0: port 2(vlan0) entered blocking state [ 596.167969][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.187444][T20797] bridge0: port 2(vlan0) entered disabled state [ 596.201524][T20797] vlan0: entered allmulticast mode [ 596.206762][T20797] geneve0: entered allmulticast mode [ 596.215857][T20797] vlan0: entered promiscuous mode [ 596.222900][T20797] geneve0: entered promiscuous mode [ 596.329841][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.525366][T20809] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3664'. [ 596.726145][T20820] lo speed is unknown, defaulting to 1000 [ 596.742863][T20815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3666'. [ 596.805102][T20824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3667'. [ 596.928364][T20822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3667'. [ 596.969919][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.068678][T20828] veth7: entered promiscuous mode [ 597.115410][T20828] bond4: (slave veth7): Enslaving as an active interface with an up link [ 597.177347][T20822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 597.208966][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.569713][T20855] syzkaller0: entered promiscuous mode [ 597.580497][T20855] syzkaller0: entered allmulticast mode [ 597.610804][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.713820][T20860] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3673'. [ 597.977808][T20873] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3675'. [ 598.046724][T20820] lo speed is unknown, defaulting to 1000 [ 598.052905][T20873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3675'. [ 598.053094][T20824] lo speed is unknown, defaulting to 1000 [ 598.249146][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.261809][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.414425][T20880] syzkaller0: entered promiscuous mode [ 598.429988][T20880] syzkaller0: entered allmulticast mode [ 598.760500][T20824] lo speed is unknown, defaulting to 1000 [ 599.264216][T20909] validate_nla: 26 callbacks suppressed [ 599.264239][T20909] netlink: 'syz.3.3688': attribute type 1 has an invalid length. [ 599.291112][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.362674][T20909] 8021q: adding VLAN 0 to HW filter on device bond4 [ 599.475324][T20909] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3688'. [ 599.567252][T20909] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 599.588754][T20909] bond4: (slave batadv1): making interface the new active one [ 599.617261][T20909] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 599.794485][T20916] lo speed is unknown, defaulting to 1000 [ 600.054492][T20925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 600.329199][T18793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.424141][T20929] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 600.551417][T20916] lo speed is unknown, defaulting to 1000 [ 600.968697][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 601.010393][T20935] veth5: entered promiscuous mode [ 601.371645][T18793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.523818][T20942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3695'. [ 602.318574][T20913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.335552][T20926] netlink: 'syz.3.3691': attribute type 2 has an invalid length. [ 602.413079][T18793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.626634][T20959] netlink: 'syz.2.3698': attribute type 1 has an invalid length. [ 602.661010][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3697'. [ 602.718292][T20955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3697'. [ 602.762730][T20967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.793199][T20959] 8021q: adding VLAN 0 to HW filter on device bond9 [ 602.866240][T20972] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3701'. [ 602.947216][T20955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3697'. [ 603.372509][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.400200][T20970] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 603.473376][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.628359][T20959] bond9: (slave ip6gretap2): making interface the new active one [ 603.658212][T20959] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 603.750166][T20965] vlan2: entered allmulticast mode [ 603.768350][T20965] bond0: entered allmulticast mode [ 603.783299][T20965] bond_slave_0: entered allmulticast mode [ 603.797844][T20965] bond_slave_1: entered allmulticast mode [ 603.841131][T20969] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 603.866931][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.893410][T20969] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 603.905911][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.917242][T20969] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 603.962469][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.985893][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 604.008580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.021640][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.036187][T20981] netlink: 'syz.4.3704': attribute type 14 has an invalid length. [ 604.124205][T20987] dvmrp0: entered allmulticast mode [ 604.264411][T20983] lo speed is unknown, defaulting to 1000 [ 604.287391][T20996] netlink: 'syz.2.3707': attribute type 1 has an invalid length. [ 604.489747][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.515870][T20996] bond10: entered promiscuous mode [ 604.538631][T20996] 8021q: adding VLAN 0 to HW filter on device bond10 [ 604.573942][T21003] 8021q: adding VLAN 0 to HW filter on device bond10 [ 604.594629][T21003] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 604.606238][T21003] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 604.641168][T21003] bond10: (slave wireguard0): making interface the new active one [ 604.654209][T21003] wireguard0: entered promiscuous mode [ 604.663744][T21003] bond10: (slave wireguard0): Enslaving as an active interface with an up link [ 604.718705][T21000] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 605.145341][T20983] lo speed is unknown, defaulting to 1000 [ 605.533235][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.669327][T21038] netlink: 'syz.0.3729': attribute type 10 has an invalid length. [ 605.714832][T21038] team0: Cannot enslave team device to itself [ 606.555024][T21063] lo speed is unknown, defaulting to 1000 [ 606.574762][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.594676][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.474263][T21084] gre1: entered allmulticast mode [ 607.501309][T21087] netlink: 'syz.4.3731': attribute type 29 has an invalid length. [ 607.616139][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.077042][T21063] lo speed is unknown, defaulting to 1000 [ 608.248810][ T5649] Bluetooth: hci1: command 0x0419 tx timeout [ 608.318522][T21112] syzkaller1: entered promiscuous mode [ 608.342067][T21112] syzkaller1: entered allmulticast mode [ 608.490826][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.651664][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.772737][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3742'. [ 609.084908][T21138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3745'. [ 609.129518][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 609.697714][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.418613][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.728620][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.793871][T21179] hmac(sh: entered promiscuous mode [ 611.752752][T21211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3763'. [ 611.777887][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.787824][T21211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3763'. [ 611.986149][T21219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3766'. [ 612.330923][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.807945][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.163510][T21254] netlink: 'syz.2.3773': attribute type 1 has an invalid length. [ 613.570410][T21273] netlink: 'syz.4.3777': attribute type 6 has an invalid length. [ 613.598586][T21273] netlink: 'syz.4.3777': attribute type 7 has an invalid length. [ 613.609083][ T80] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.622234][T21273] netlink: 'syz.4.3777': attribute type 8 has an invalid length. [ 613.849064][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.321234][T21308] xt_cgroup: path and classid specified [ 614.888147][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.195109][ T3352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.220824][T18791] IPVS: starting estimator thread 0... [ 615.240079][ T3352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.317059][T21354] lo speed is unknown, defaulting to 1000 [ 615.370722][T21357] IPVS: using max 25 ests per chain, 60000 per kthread [ 615.529705][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.664747][T21369] ip6erspan0: entered promiscuous mode [ 615.696445][T21369] ip6erspan0: entered allmulticast mode [ 615.846492][T21379] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3807'. [ 615.868426][T21354] lo speed is unknown, defaulting to 1000 [ 615.877828][T21379] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 615.885313][T21379] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20004 [ 615.929594][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.475989][T21394] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3811'. [ 616.646735][T21406] netlink: 'syz.3.3813': attribute type 28 has an invalid length. [ 616.680107][T21406] netlink: 'syz.3.3813': attribute type 3 has an invalid length. [ 616.698756][T21409] netlink: 'syz.1.3816': attribute type 1 has an invalid length. [ 616.715361][T21406] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3813'. [ 616.778643][T21394] 8021q: adding VLAN 0 to HW filter on device bond5 [ 616.857186][T21414] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3816'. [ 616.916437][T21416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3816'. [ 616.967999][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.056213][T21409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.103362][T21413] macvlan2: entered promiscuous mode [ 617.118303][T21413] macvlan2: entered allmulticast mode [ 617.148925][T21413] bond2: entered promiscuous mode [ 617.159832][T21413] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 617.201353][T21413] bond2: left promiscuous mode [ 617.498387][T21436] netlink: 'syz.3.3823': attribute type 1 has an invalid length. [ 617.511587][T21446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3826'. [ 617.555005][T21436] netlink: 'syz.3.3823': attribute type 2 has an invalid length. [ 617.603844][T21437] nbd4: detected capacity change from 0 to 63 [ 617.621987][ T5639] block nbd4: Receive control failed (result -32) [ 617.644196][T21448] bridge2: entered promiscuous mode [ 617.700263][T18394] block nbd4: Dead connection, failed to find a fallback [ 617.720160][T18394] block nbd4: shutting down sockets [ 617.729199][T18394] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.740986][T18394] Buffer I/O error on dev nbd4, logical block 0, async page read [ 617.770485][T18394] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.783472][T18394] Buffer I/O error on dev nbd4, logical block 1, async page read [ 617.808682][T18394] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.853464][T18394] Buffer I/O error on dev nbd4, logical block 2, async page read [ 617.879611][T18394] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.914872][T18394] Buffer I/O error on dev nbd4, logical block 3, async page read [ 617.945208][T18394] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 617.984828][T18394] Buffer I/O error on dev nbd4, logical block 0, async page read [ 618.013837][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.024665][T21454] [ 618.027057][T21454] ====================================================== [ 618.034116][T21454] WARNING: possible circular locking dependency detected [ 618.041180][T21454] syzkaller #0 Not tainted [ 618.045617][T21454] ------------------------------------------------------ [ 618.052658][T21454] syz.1.3828/21454 is trying to acquire lock: [ 618.058743][T21454] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 618.068181][T21454] [ 618.068181][T21454] but task is already holding lock: [ 618.075566][T21454] ffff888055bec530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 618.084821][T21454] [ 618.084821][T21454] which lock already depends on the new lock. [ 618.084821][T21454] [ 618.095245][T21454] [ 618.095245][T21454] the existing dependency chain (in reverse order) is: [ 618.104280][T21454] [ 618.104280][T21454] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 618.111875][T21454] __mutex_lock+0x1a3/0x1550 [ 618.117024][T21454] __ipv6_dev_mc_inc+0x4e/0xa50 [ 618.122416][T21454] __ipv6_sock_mc_join+0x503/0x750 [ 618.128088][T21454] ipv6_mcast_join_leave+0x1a2/0x240 [ 618.134013][T21454] do_ipv6_setsockopt+0x190e/0x3150 [ 618.139761][T21454] ipv6_setsockopt+0x59/0x170 [ 618.145003][T21454] do_sock_setsockopt+0x17c/0x1b0 [ 618.150571][T21454] __x64_sys_setsockopt+0x13d/0x1b0 [ 618.156311][T21454] do_syscall_64+0x15f/0xf80 [ 618.161441][T21454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.167879][T21454] [ 618.167879][T21454] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 618.175657][T21454] lock_sock_nested+0x41/0x100 [ 618.181001][T21454] inet_shutdown+0x6a/0x390 [ 618.186052][T21454] nbd_mark_nsock_dead+0x2e9/0x560 [ 618.191708][T21454] recv_work+0x1c2e/0x1d40 [ 618.196673][T21454] process_scheduled_works+0xb5d/0x1860 [ 618.202791][T21454] worker_thread+0xa53/0xfc0 [ 618.207941][T21454] kthread+0x388/0x470 [ 618.212566][T21454] ret_from_fork+0x514/0xb70 [ 618.217708][T21454] ret_from_fork_asm+0x1a/0x30 [ 618.223029][T21454] [ 618.223029][T21454] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 618.230703][T21454] __mutex_lock+0x1a3/0x1550 [ 618.235931][T21454] nbd_queue_rq+0x37b/0x1100 [ 618.241075][T21454] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 618.247172][T21454] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 618.254045][T21454] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 618.260571][T21454] blk_mq_run_hw_queue+0x348/0x4f0 [ 618.266239][T21454] blk_mq_dispatch_list+0xd16/0xe10 [ 618.271986][T21454] blk_mq_flush_plug_list+0x48d/0x570 [ 618.277913][T21454] __blk_flush_plug+0x3ed/0x4d0 [ 618.283309][T21454] __submit_bio+0x28d/0x580 [ 618.288362][T21454] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 618.294549][T21454] block_read_full_folio+0x599/0x830 [ 618.300379][T21454] filemap_read_folio+0x137/0x3b0 [ 618.305959][T21454] do_read_cache_folio+0x358/0x590 [ 618.311622][T21454] read_part_sector+0xb6/0x2b0 [ 618.316939][T21454] adfspart_check_ICS+0xb1/0x960 [ 618.322424][T21454] bdev_disk_changed+0x817/0x1770 [ 618.328000][T21454] blkdev_get_whole+0x380/0x510 [ 618.333411][T21454] bdev_open+0x31e/0xd30 [ 618.338202][T21454] blkdev_open+0x470/0x610 [ 618.343159][T21454] do_dentry_open+0x785/0x14e0 [ 618.348464][T21454] vfs_open+0x3b/0x340 [ 618.353163][T21454] path_openat+0x2e08/0x3860 [ 618.358313][T21454] do_file_open+0x23e/0x4a0 [ 618.363364][T21454] do_sys_openat2+0x113/0x200 [ 618.368593][T21454] __x64_sys_openat+0x138/0x170 [ 618.373986][T21454] do_syscall_64+0x15f/0xf80 [ 618.379125][T21454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.385562][T21454] [ 618.385562][T21454] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 618.392808][T21454] __mutex_lock+0x1a3/0x1550 [ 618.397957][T21454] nbd_queue_rq+0xc6/0x1100 [ 618.403013][T21454] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 618.409144][T21454] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 618.416073][T21454] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 618.422610][T21454] blk_mq_run_hw_queue+0x348/0x4f0 [ 618.428273][T21454] blk_mq_dispatch_list+0xd16/0xe10 [ 618.434018][T21454] blk_mq_flush_plug_list+0x48d/0x570 [ 618.439941][T21454] __blk_flush_plug+0x3ed/0x4d0 [ 618.445341][T21454] __submit_bio+0x28d/0x580 [ 618.450390][T21454] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 618.456592][T21454] block_read_full_folio+0x599/0x830 [ 618.462426][T21454] filemap_read_folio+0x137/0x3b0 [ 618.468001][T21454] do_read_cache_folio+0x358/0x590 [ 618.473659][T21454] read_part_sector+0xb6/0x2b0 [ 618.478969][T21454] adfspart_check_ICS+0xb1/0x960 [ 618.484458][T21454] bdev_disk_changed+0x817/0x1770 [ 618.490078][T21454] blkdev_get_whole+0x380/0x510 [ 618.495484][T21454] bdev_open+0x31e/0xd30 [ 618.500272][T21454] blkdev_open+0x470/0x610 [ 618.505228][T21454] do_dentry_open+0x785/0x14e0 [ 618.510540][T21454] vfs_open+0x3b/0x340 [ 618.515165][T21454] path_openat+0x2e08/0x3860 [ 618.520304][T21454] do_file_open+0x23e/0x4a0 [ 618.525353][T21454] do_sys_openat2+0x113/0x200 [ 618.530576][T21454] __x64_sys_openat+0x138/0x170 [ 618.535970][T21454] do_syscall_64+0x15f/0xf80 [ 618.541100][T21454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.547534][T21454] [ 618.547534][T21454] -> #3 (set->srcu){.+.+}-{0:0}: [ 618.554688][T21454] __synchronize_srcu+0xca/0x300 [ 618.560166][T21454] elevator_switch+0x1e8/0x7a0 [ 618.565479][T21454] elevator_change+0x2cc/0x450 [ 618.570791][T21454] elevator_set_default+0x36c/0x430 [ 618.576541][T21454] blk_register_queue+0x3e9/0x4e0 [ 618.582121][T21454] __add_disk+0x677/0xd50 [ 618.586986][T21454] add_disk_fwnode+0xfb/0x480 [ 618.592202][T21454] nbd_dev_add+0x72c/0xb50 [ 618.597153][T21454] nbd_init+0x168/0x1f0 [ 618.601859][T21454] do_one_initcall+0x250/0x870 [ 618.607170][T21454] do_initcall_level+0x104/0x190 [ 618.612651][T21454] do_initcalls+0x59/0xa0 [ 618.617522][T21454] kernel_init_freeable+0x2a6/0x3e0 [ 618.623271][T21454] kernel_init+0x1d/0x1d0 [ 618.628146][T21454] ret_from_fork+0x514/0xb70 [ 618.633276][T21454] ret_from_fork_asm+0x1a/0x30 [ 618.638584][T21454] [ 618.638584][T21454] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 618.646514][T21454] __mutex_lock+0x1a3/0x1550 [ 618.651654][T21454] elevator_change+0x1b3/0x450 [ 618.657065][T21454] elevator_set_none+0xb5/0x140 [ 618.662459][T21454] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 618.668801][T21454] nbd_start_device+0x17f/0xb10 [ 618.674197][T21454] nbd_genl_connect+0x165b/0x1cf0 [ 618.679757][T21454] genl_family_rcv_msg_doit+0x22a/0x330 [ 618.685857][T21454] genl_rcv_msg+0x61c/0x7a0 [ 618.690905][T21454] netlink_rcv_skb+0x232/0x4b0 [ 618.696208][T21454] genl_rcv+0x28/0x40 [ 618.700747][T21454] netlink_unicast+0x75c/0x8e0 [ 618.706051][T21454] netlink_sendmsg+0x813/0xb40 [ 618.711356][T21454] ____sys_sendmsg+0x972/0x9f0 [ 618.716664][T21454] ___sys_sendmsg+0x2a5/0x360 [ 618.721884][T21454] __x64_sys_sendmsg+0x1bd/0x2a0 [ 618.727369][T21454] do_syscall_64+0x15f/0xf80 [ 618.732506][T21454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.738958][T21454] [ 618.738958][T21454] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 618.747597][T21454] blk_alloc_queue+0x546/0x680 [ 618.752922][T21454] __blk_mq_alloc_disk+0x197/0x390 [ 618.758583][T21454] nbd_dev_add+0x499/0xb50 [ 618.763578][T21454] nbd_init+0x168/0x1f0 [ 618.768298][T21454] do_one_initcall+0x250/0x870 [ 618.773619][T21454] do_initcall_level+0x104/0x190 [ 618.779106][T21454] do_initcalls+0x59/0xa0 [ 618.783980][T21454] kernel_init_freeable+0x2a6/0x3e0 [ 618.789728][T21454] kernel_init+0x1d/0x1d0 [ 618.794608][T21454] ret_from_fork+0x514/0xb70 [ 618.799738][T21454] ret_from_fork_asm+0x1a/0x30 [ 618.805048][T21454] [ 618.805048][T21454] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 618.812278][T21454] __lock_acquire+0x15a5/0x2cf0 [ 618.817673][T21454] lock_acquire+0x106/0x350 [ 618.822723][T21454] fs_reclaim_acquire+0x71/0x100 [ 618.828207][T21454] __kmalloc_cache_noprof+0x40/0x660 [ 618.834039][T21454] __ipv6_dev_mc_inc+0x44f/0xa50 [ 618.839528][T21454] ipv6_add_dev+0xe34/0x13a0 [ 618.844664][T21454] addrconf_notify+0x771/0x1050 [ 618.850070][T21454] notifier_call_chain+0x1ad/0x3d0 [ 618.855733][T21454] register_netdevice+0x18c9/0x1ec0 [ 618.861480][T21454] br_add_bridge+0xa3/0xf0 [ 618.866442][T21454] br_ioctl_stub+0x908/0xd60 [ 618.871586][T21454] sock_ioctl+0x523/0x7f0 [ 618.876471][T21454] __se_sys_ioctl+0xfc/0x170 [ 618.881617][T21454] do_syscall_64+0x15f/0xf80 [ 618.886745][T21454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.893173][T21454] [ 618.893173][T21454] other info that might help us debug this: [ 618.893173][T21454] [ 618.903424][T21454] Chain exists of: [ 618.903424][T21454] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 618.903424][T21454] [ 618.916144][T21454] Possible unsafe locking scenario: [ 618.916144][T21454] [ 618.923605][T21454] CPU0 CPU1 [ 618.928991][T21454] ---- ---- [ 618.934366][T21454] lock(&idev->mc_lock); [ 618.938803][T21454] lock(sk_lock-AF_INET6); [ 618.945844][T21454] lock(&idev->mc_lock); [ 618.952712][T21454] lock(fs_reclaim); [ 618.956726][T21454] [ 618.956726][T21454] *** DEADLOCK *** [ 618.956726][T21454] [ 618.964986][T21454] 3 locks held by syz.1.3828/21454: [ 618.970332][T21454] #0: ffffffff8fdafd00 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0 [ 618.979612][T21454] #1: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 618.988720][T21454] #2: ffff888055bec530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 618.998430][T21454] [ 618.998430][T21454] stack backtrace: [ 619.004334][T21454] CPU: 1 UID: 0 PID: 21454 Comm: syz.1.3828 Not tainted syzkaller #0 PREEMPT(full) [ 619.004356][T21454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.004368][T21454] Call Trace: [ 619.004377][T21454] [ 619.004386][T21454] dump_stack_lvl+0xe8/0x150 [ 619.004408][T21454] print_circular_bug+0x2e1/0x300 [ 619.004435][T21454] check_noncircular+0x12e/0x150 [ 619.004462][T21454] __lock_acquire+0x15a5/0x2cf0 [ 619.004484][T21454] ? rcu_is_watching+0x15/0xb0 [ 619.004518][T21454] ? trace_contention_end+0x3d/0x140 [ 619.004544][T21454] ? __mutex_lock+0x319/0x1550 [ 619.004570][T21454] ? __kmalloc_cache_noprof+0x40/0x660 [ 619.004595][T21454] lock_acquire+0x106/0x350 [ 619.004612][T21454] ? __kmalloc_cache_noprof+0x40/0x660 [ 619.004639][T21454] ? __pfx___mutex_lock+0x10/0x10 [ 619.004663][T21454] fs_reclaim_acquire+0x71/0x100 [ 619.004688][T21454] ? __kmalloc_cache_noprof+0x40/0x660 [ 619.004712][T21454] __kmalloc_cache_noprof+0x40/0x660 [ 619.004737][T21454] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 619.004758][T21454] __ipv6_dev_mc_inc+0x44f/0xa50 [ 619.004777][T21454] ? addrconf_sysctl_register+0x1a9/0x1c0 [ 619.004802][T21454] ipv6_add_dev+0xe34/0x13a0 [ 619.004824][T21454] addrconf_notify+0x771/0x1050 [ 619.004847][T21454] notifier_call_chain+0x1ad/0x3d0 [ 619.004875][T21454] register_netdevice+0x18c9/0x1ec0 [ 619.004908][T21454] ? __pfx_register_netdevice+0x10/0x10 [ 619.004932][T21454] ? alloc_netdev_mqs+0xce1/0x1210 [ 619.004957][T21454] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 619.004986][T21454] ? alloc_netdev_mqs+0xe00/0x1210 [ 619.005016][T21454] br_add_bridge+0xa3/0xf0 [ 619.005040][T21454] br_ioctl_stub+0x908/0xd60 [ 619.005068][T21454] ? do_vfs_ioctl+0x1166/0x1530 [ 619.005095][T21454] ? __pfx_br_ioctl_stub+0x10/0x10 [ 619.005120][T21454] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 619.005149][T21454] ? map_update_elem+0x3a1/0x9d0 [ 619.005180][T21454] ? do_futex+0x395/0x420 [ 619.005207][T21454] ? __pfx_br_ioctl_stub+0x10/0x10 [ 619.005232][T21454] sock_ioctl+0x523/0x7f0 [ 619.005259][T21454] ? __pfx_sock_ioctl+0x10/0x10 [ 619.005285][T21454] ? __fget_files+0x2a/0x420 [ 619.005305][T21454] ? __fget_files+0x3a0/0x420 [ 619.005325][T21454] ? __fget_files+0x2a/0x420 [ 619.005347][T21454] ? bpf_lsm_file_ioctl+0x9/0x20 [ 619.005409][T21454] ? __pfx_sock_ioctl+0x10/0x10 [ 619.005435][T21454] __se_sys_ioctl+0xfc/0x170 [ 619.005462][T21454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.005480][T21454] do_syscall_64+0x15f/0xf80 [ 619.005513][T21454] ? trace_irq_disable+0x3b/0x140 [ 619.005540][T21454] ? clear_bhb_loop+0x40/0x90 [ 619.005561][T21454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.005579][T21454] RIP: 0033:0x7fbcfdf9cdd9 [ 619.005596][T21454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.005612][T21454] RSP: 002b:00007fbcfeeee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.005630][T21454] RAX: ffffffffffffffda RBX: 00007fbcfe215fa0 RCX: 00007fbcfdf9cdd9 [ 619.005644][T21454] RDX: 0000200000000040 RSI: 0000000000008940 RDI: 0000000000000005 [ 619.005656][T21454] RBP: 00007fbcfe032d69 R08: 0000000000000000 R09: 0000000000000000 [ 619.005667][T21454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.005677][T21454] R13: 00007fbcfe216038 R14: 00007fbcfe215fa0 R15: 00007ffd58891c98 [ 619.005699][T21454] [ 619.017372][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.042760][T18394] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.058140][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.064198][T18394] Buffer I/O error on dev nbd4, logical block 1, async page read [ 619.119536][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3830'. [ 619.134670][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.152345][T18394] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.413306][T18394] Buffer I/O error on dev nbd4, logical block 2, async page read [ 619.421375][T18394] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.430541][T18394] Buffer I/O error on dev nbd4, logical block 3, async page read [ 619.438562][T18394] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.447880][T18394] Buffer I/O error on dev nbd4, logical block 0, async page read [ 619.455799][T18394] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.479888][T18394] Buffer I/O error on dev nbd4, logical block 1, async page read [ 619.499771][T18394] ldm_validate_partition_table(): Disk read failed. [ 619.507866][T18394] Dev nbd4: unable to read RDB block 0 [ 619.514798][T18394] nbd4: unable to read partition table [ 619.558960][T18394] ldm_validate_partition_table(): Disk read failed. [ 619.586609][T18394] Dev nbd4: unable to read RDB block 0 [ 619.601289][T18394] nbd4: unable to read partition table [ 620.170567][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.648050][T13674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.210570][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.044712][T21466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 622.250622][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.209660][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.290667][T18792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.329999][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.493187][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.501386][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.370939][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.409289][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.418712][T18795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.450833][T18796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog