last executing test programs: 2.650092465s ago: executing program 0 (id=4826): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x6e32, 0x80, 0x10001, 0x5, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000002c0), &(0x7f0000001840)=@udp6=r2}, 0x20) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0xffffffffffffff6c}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000003c00)=""/4108, 0x100c}, {&(0x7f0000002a00)=""/15, 0xf}], 0x3}, 0xec}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES8=0x0, @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0x20000045}, 0x880) r7 = socket$unix(0x1, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0xffffffff}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x0, 0x3, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xfffffffffffffce7, 0x3, 0xffffffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL, @TCA_TAPRIO_SCHED_ENTRY_CMD]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00'}) r10 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r10, &(0x7f0000000040), 0x10) listen(r10, 0x0) r11 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r11, &(0x7f0000000080), 0x10) sendmmsg$alg(r11, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) sendmmsg(r11, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r12 = accept4$unix(r10, 0x0, 0x0, 0x0) recvfrom$unix(r12, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r6) 2.230244237s ago: executing program 1 (id=4831): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 2.057980891s ago: executing program 1 (id=4834): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="8e6c541efaacb80e4ee4eaa449c1604fa405236f81273100ac5ab9c36e291c90ff6f8732fc24cea3084145a80fd122054467cf3a6282ffbbc9ef43eed9b8d5c79ae4891f38f7cb2aa72d93d5a422b72dba7f07f3cad310d39bfbb99cbfe20a4d8d33e72ab8b4ef5a1a404d0c2794c6565a53b2a73aece188cede8c1f7171cd7cc0a192b6f46fc9d995d4ac76e9d6adce7ac89bdd6d37717bf192f6d10516ed6734cf3a95a9e140e3feefc33509368a3361f55d4cc1ebb00c04e7eeecd5147144b917f2e723a9282ddb8d21f6c91b57975e42c5aa62e8246faba52000e8fb951d53cb0ae80ac48d79652c60ad799d876b6381150a2323c237f3", 0xf9}, {&(0x7f0000000140)="1c801a549c4a84ac2f86489b3355b46644d6f418fb3308b7f08be3b518d1608c1694fe44acdbf1992336e432fa7b4428ba29", 0x32}, {&(0x7f0000000180)="423ae2cbae02a246b085f3eca7d3d14844e358a40dfa9740e108913af81b52e7beea31f8f534619480ee2d628b72e9a9d8129f82dce80194ca25316ffce37a21ea8d479d62358e80b3278437f1edc22c2ce883399f7afa85c4896a75e1d89a38cc44b16e43d256e2c35cc57174957f683d1abb0731ba9b5a475e903c82b0242d10c1cacf61d2cf8d8e095ed229f7791521667555a6dc465dab41fca5e2c8d4d674c7ceee6d9868b7a1d79d25d4c261d359eed15e887d7b801084d034efe6ed125909615307a7b7f7543af52185fa875d5b7776268906aa10f00344b8f61526cc703795acfd0bd5685e2ad77e", 0xec}, {&(0x7f0000000280)}], 0x4, &(0x7f0000000300)=[@ip_retopts={{0xb0, 0x0, 0x7, {[@cipso={0x86, 0x77, 0x2, [{0x0, 0x5, "be0274"}, {0x0, 0x11, "8a2ae6db2351ec317290f4cc55cbc6"}, {0x1, 0x12, "d391733a28e775ebb8070ba4f1aabe3b"}, {0xedef50e557d4edb7, 0x8, "467e2438efc2"}, {0x2, 0x3, "b3"}, {0x2, 0xf, "8c8de3e9a91d8a6c6c063ed0c6"}, {0x6, 0x2}, {0x6, 0x11, "eac9b262234ba8727ec2ec7ca93a6d"}, {0x0, 0xe, "a250fe7031e48e1705569614"}, {0x0, 0xe, "143a7a7fbfbbec0fdb9b30f3"}]}, @timestamp_prespec={0x44, 0x14, 0xbb, 0x3, 0xf, [{@multicast2, 0x6bd}, {@multicast2, 0x5}]}, @timestamp_prespec={0x44, 0x14, 0xe4, 0x3, 0x5, [{@remote, 0x9}, {@rand_addr=0x64010100, 0x100}]}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0xb, 0x78, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1d, 0x0, [{0x7, 0x2}, {0x5, 0x12, "5b5deeb241b8f9c0056e7f560c9405c8"}, {0x1, 0x3, 'z'}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x100}, 0x804) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000440)={0x6, 0x2f363315, 0x401, 0x5, 0x6}, 0x14) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x40010, r0, 0x9a9d3000) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)={0x0, 0x6, 0x7, [0x1, 0x4, 0x2, 0x8, 0x8, 0x8, 0x3]}, &(0x7f00000004c0)=0x16) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000500)=@assoc_value={r3, 0x2}, &(0x7f0000000540)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r2}) connect$x25(r5, &(0x7f00000005c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xb}, @NL80211_ATTR_IE={0x1b, 0x2a, [@mic={0x8c, 0x10, {0xeaa, "9dcf2f91a4b1", @short="bdf3a60f650073a2"}}, @ssid, @dsss={0x3, 0x1, 0xb}]}, @NL80211_ATTR_IE={0x51, 0x2a, [@perr={0x84, 0x3b, {0x4, 0x3, [{{0x0, 0x1}, @broadcast, 0x25, @value=@device_b, 0x18}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0xc}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x1e}]}}, @supported_rates={0x1, 0x3, [{0x18}, {0x3, 0x1}, {0x30}]}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0xa3}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x368}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000800)={r3, 0x9, 0x101, 0x0, 0x2}, &(0x7f0000000840)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000880)={r10, 0x401}, &(0x7f00000008c0)=0x8) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000940)={'pim6reg\x00', &(0x7f0000000900)=@ethtool_channels={0x3d, 0x1, 0x6, 0x4a, 0xf6ca, 0xfffffffd, 0x9, 0x5, 0x4}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={0xffffffffffffffff, 0x0, 0x91, 0xc3, &(0x7f0000000980)="b2898b5a7780c3ee64e17edc71814d751a155df70c322e225ecf272ea936532fe174bd434dde58568a92fef059520b38450fd70f6bb628cde9f54d26a8a0706d84034285266dc52382638a5eea2f6e2c3abeb8eda5d126cefc85f33ed44ccc0da1aab3a103ed509bf2a8e24ac56e66c159f031c21bb002b1012d9508bfdb0d37f712712a33a5a2756ca43ed90a7990baff", &(0x7f0000000a40)=""/195, 0x101, 0x0, 0xde, 0x62, &(0x7f0000000b40)="4d4e334811ddb92bb2708538f9dc4aea5277211e46d338c650dc2704fddcaa7bf4f80e9331f08c23aaddabfa415a85726e63a9ee65403b9ca3afaed6531b014a17971f3376c3c28824abfc919c5daaba07141bee9ac9ca7381820b827817ef4dda175b998b6fab1163541f73115ceb2538f0fba5de3a6ff847b0549216c459e1543f411c2a7a5e6aaf9fa2ee702626a7d672b7469726f1fb29dd4824d531c636da3a50c023093da0b79f8499f6441ebc1e0052eda4add5428ddfc73bf30a61c6883ae414e90e59cc4e0bd16942f5bb83b73feb119c1868ce1b01d544d7a9", &(0x7f0000000c40)="8d823f7b00a84d58688e0a436459dc2b669ed682ad83dd0bfff3f017cdf72e9d93922d99de692839dc37229a8f8edcaf4ec18617f2eaae1927631b7f7e6e7ef83cbafe9fcd3d2de0fb50a273bea7aa8afa7155342e8cdb8d9d3dbf96be10aacfb74a", 0x4, 0x0, 0x100}, 0x50) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000d40)={0x1, 0x80000000}, 0x8) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000d80), 0x8) ioctl$TUNGETFILTER(r11, 0x801054db, &(0x7f0000000dc0)=""/109) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xf801}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7c6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xdbbe}]}, 0x50}, 0x1, 0x0, 0x0, 0x20}, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001000)={r11, &(0x7f0000000f80)="0bfeca44dce4ba95aa2f61e8ee3091fd7e387b7e83b7c2f184c6", &(0x7f0000000fc0)=""/50, 0x4}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000001040)={r10, 0x101}, 0x8) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000001080)={'veth0_virt_wifi\x00', 0x400}) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x801051c0}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r12, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000091) 1.745324164s ago: executing program 1 (id=4837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xb, 0x8, 0x6, 0x1, 0xffff8001}, 0x9, 0x2}, [{0x40, 0x7, 0x400, 0xf2, 0xe8f, 0x8}, {0xea00, 0xfffffc01, 0xb, 0xfffff000, 0xd, 0x7ff}, {0xffffa6a2, 0x29, 0x1ac, 0x0, 0x81, 0x7}, {0x2, 0xa, 0xf, 0x6, 0x9, 0x9}, {0x1, 0x3, 0x80000000, 0x2, 0x0, 0x7fffffff}, {0x0, 0x6, 0x4, 0x4, 0xd, 0x8}, {0x2, 0x9, 0x5, 0x8, 0x5}, {0x1e, 0x8000, 0x4, 0x10000, 0x10, 0x5a52}, {0x1, 0x4, 0x8, 0x4, 0x8, 0x1}, {0x6, 0x6, 0x800, 0x10000, 0x6, 0x300000}, {0x9, 0x1, 0x200, 0xee, 0x3, 0xa00000}, {0x100, 0x2, 0x8, 0xc, 0x400, 0x2}, {0x800, 0x6, 0x6, 0xfffffff9, 0x8, 0x6428}, {0x8001, 0x8000, 0xf51, 0x400, 0x8000, 0xa}, {0x3, 0x5, 0x4, 0x1, 0xffffffff, 0x81}, {0x9, 0x0, 0x2, 0x90000, 0x6, 0xbeac}, {0x7f, 0x7, 0x10001, 0x7, 0x8000, 0xc6d0}, {0x7, 0x4, 0x200, 0xa, 0x1, 0x10000}, {0x0, 0x9, 0x7, 0x9, 0x7, 0x3}, {0x6, 0x800, 0x3, 0x401, 0xfffffbf5, 0x3}, {0x6, 0x3, 0x7f96, 0x8, 0x551, 0xbc}, {0x5, 0x40000, 0x3ea, 0xe, 0xaf, 0xdec}, {0x6, 0xfffffff2, 0x7, 0x3}, {0x6, 0x1, 0x8, 0x2, 0x3, 0x80}, {0x116, 0x7, 0x101, 0x7fff, 0x401, 0xfffff001}, {0x1, 0x7, 0x800, 0x3, 0x80000001, 0xffffffff}, {0x80, 0x2, 0x3, 0xffff, 0x79314002, 0xe}, {0x8, 0xffff7fff, 0x800, 0x32e, 0x3, 0x7}, {0x10000, 0xe, 0x7a, 0x4080000, 0x1, 0x7}, {0x3, 0x7, 0x80, 0x3, 0x1, 0x734b916e}, {0xfffffff8, 0x5, 0x5, 0xffffffff, 0xe, 0x509}, {0x3, 0x400, 0x4, 0x1, 0x3316, 0x8}, {0x0, 0x140, 0x9, 0x7ff, 0x80000001, 0x1}, {0xffff0000, 0x1, 0x7fff, 0x7, 0xfff, 0xfff00000}, {0x85, 0x101, 0x2, 0x7, 0x2, 0x1acaa3e9}, {0x8, 0x5, 0xd0b, 0xd, 0x0, 0x9}, {0xc62, 0x80000001, 0x1, 0x8ae, 0xc, 0x100}, {0x3, 0xf9, 0x7, 0xec0, 0x200, 0xc80}, {0x2, 0x0, 0x7ff, 0x2, 0x1000, 0xd}, {0x7, 0xb701, 0x10000, 0xad3, 0x1, 0x8}, {0x6, 0x1, 0x8, 0x101, 0x8000, 0x1}, {0x40, 0x3c6b000, 0x7, 0x8, 0x1, 0x7fff}, {0x1, 0xffff, 0x9, 0x4, 0x10000, 0x8001}, {0x40, 0x4, 0x9, 0xfffffff7, 0x3, 0x1}, {0x8, 0x1, 0xffff, 0x9, 0x10001, 0x401}, {0x0, 0xfffffff7, 0x4, 0x2, 0x3be3}, {0x80000000, 0x6, 0x9, 0x0, 0x7, 0x8}, {0xfe000000, 0x7ff, 0x2, 0x0, 0x8, 0x9}, {0x8, 0x9, 0x8, 0x6, 0x10001, 0x1}, {0x4, 0x2, 0x1ff, 0x400, 0x1, 0x1}, {0x74f, 0x5, 0x1000, 0x2, 0x195a, 0x4}, {0x20, 0x9, 0x9, 0x1, 0x1, 0xaafe}, {0x3f, 0xfffffffa, 0xfff, 0x2, 0x8, 0x7ff}, {0x6c, 0xfffffffb, 0x6, 0x7, 0x4, 0xfffffffd}, {0x4, 0xb4ab, 0x8, 0x5, 0x3, 0x1}, {0x100, 0x0, 0x6, 0x5, 0xffff, 0x1000}, {0x1000, 0xc1db, 0x0, 0x6, 0x1, 0x5}, {0x4, 0x87c, 0x9df, 0x4, 0xbf55}, {0x5, 0x1000, 0x8001, 0x1, 0x6, 0x1000}, {0x14e5, 0x3f54, 0xfffffffb, 0x9, 0x7, 0xe482}, {0x3, 0xffff, 0x7, 0x800, 0x1d, 0x4}, {0xfff, 0x7fffffff, 0x9, 0x10000, 0x2, 0x8}, {0x9b, 0x6, 0x7fff, 0x6, 0x2, 0x3c}, {0x5, 0x7ff, 0x6, 0x40, 0xf, 0x6}, {0x4, 0x9, 0x2400000, 0x2, 0x6, 0x4}, {0x6, 0x0, 0x40, 0x201a861c, 0x8, 0x8}, {0x5fe, 0xfffffffa, 0x1000, 0x6, 0xfff}, {0x4, 0x1000, 0x6, 0xbc34, 0x5, 0xe6}, {0x8, 0xec54, 0x8000, 0x7, 0x8, 0x6}, {0xc4, 0x7, 0x7ff, 0x6, 0x4, 0x98}, {0x8, 0x8001, 0x5, 0x7fffffff, 0xcea8, 0xff}, {0x5, 0x400, 0x6, 0x1, 0xfffffff9, 0x2}, {0xffff, 0xfffffffe, 0x80, 0x5, 0x57f, 0x8}, {0x6, 0x2, 0x1, 0x5, 0x4, 0x6}, {0x1ff, 0x8000, 0x1, 0x80000001, 0x80, 0x7}, {0x3, 0x235, 0x0, 0x4, 0x100, 0x7}, {0x7, 0x8f9, 0x4, 0xb, 0xfbc, 0x5}, {0x2, 0x7, 0xd, 0x7, 0x9, 0x5}, {0x2, 0x9, 0x3, 0x3, 0x740, 0x3}, {0xfffff0ab, 0x8c6a, 0x2000, 0x0, 0x8, 0x4}, {0x6, 0x8, 0x1, 0x1000, 0x200, 0x8}, {0x800, 0x7, 0x800, 0x3ff, 0x800, 0x8000}, {0x7fff, 0x5, 0x5, 0x3, 0xa000, 0xe}, {0x6, 0x9, 0xb, 0x8, 0x8, 0x477}, {0x7fffffff, 0x0, 0x1, 0x6, 0x8001, 0x10000}, {0x1, 0x8, 0x6, 0x0, 0x8, 0x7}, {0x4, 0x3, 0x80000001, 0x3, 0x8001, 0xf7}, {0x3, 0x5, 0x5, 0x1, 0x4, 0x5}, {0xdd00, 0x7, 0xd, 0x1, 0x2, 0xa79f}, {0x5, 0xfffffffd, 0xb9, 0x3, 0x6, 0x2}, {0x9, 0x3, 0x34400000, 0x401, 0x1, 0xffffffb2}, {0x401, 0x3ff, 0x0, 0x5d, 0x9, 0x8}, {0x6, 0x6, 0x2, 0x5, 0x0, 0x3}, {0x10, 0x7, 0x5, 0x4f, 0x20000000, 0x80000000}, {0x6, 0x96c, 0x0, 0xfffffff6, 0x7, 0x3ff}, {0x0, 0x4, 0x6, 0x2, 0x1, 0x5}, {0x8, 0xfffff2ca, 0x2, 0x5, 0x4, 0xe43}, {0x9, 0x0, 0xe67, 0x7f, 0x101, 0xc}, {0x0, 0xfffffff7, 0xfffffffc, 0x28a, 0x2, 0x6dd1}, {0x1, 0x4, 0x0, 0xd7, 0x1, 0x5}, {0x4, 0x3, 0x4e82, 0x6, 0x7f, 0x35c}, {0x0, 0x5, 0x8, 0x2, 0x10000, 0x5}, {0x4, 0x7, 0x0, 0xd, 0x5, 0x7}, {0x800, 0xf7, 0x0, 0x8, 0x0, 0x8e38}, {0x5, 0x40, 0xfa, 0x5, 0x43e, 0x5}, {0x2, 0xa, 0x5, 0x9, 0x2, 0x6d4}, {0x6, 0x0, 0x10000, 0x5, 0x7, 0x5}, {0xd, 0x9, 0x9, 0xd19, 0xffffffff, 0x400}, {0x1000, 0xfffffffa, 0x0, 0x8001, 0xf00, 0x10001}, {0x10000, 0x4, 0xa, 0x72b, 0x0, 0x80000000}, {0x2, 0xf, 0x77, 0x100, 0xfe, 0x7}, {0x6, 0x8, 0x80000001, 0x3, 0x8, 0x9}, {0x5, 0x101, 0x3, 0x2, 0xa}, {0x3, 0x4, 0x3, 0x6, 0x6, 0x5}, {0x5, 0x7, 0x3, 0x1, 0x0, 0x8}, {0x7fffffff, 0x1, 0x7, 0x40, 0xc37, 0x9e}, {0x10000, 0x8, 0x1, 0x8, 0xb536, 0x9}, {0x1, 0xffffffc0, 0x7, 0x2, 0x3, 0xbf}, {0xc0a, 0xffffff1e, 0x5, 0xe, 0x90, 0x6}, {0x4, 0x7, 0x0, 0x0, 0x10, 0x1}, {0x100, 0x5, 0x6, 0x6, 0x8, 0x17f}, {0x47af, 0x8, 0x4, 0x2, 0x1, 0x8}, {0xa, 0x3, 0xb, 0x4, 0x5, 0x3}, {0x4, 0x7, 0x5, 0xba1b, 0xffff, 0xc87e}, {0x374f, 0x9, 0x5, 0xa, 0x1c87, 0xa2}, {0x3, 0x0, 0x5, 0x8000, 0x1ff, 0x7fffffff}, {0x0, 0x5104, 0x2, 0x7fffffff, 0x3, 0x7}, {0x101, 0x5c, 0x800, 0x6, 0x40, 0x8000}], [{0x5}, {}, {0x2}, {0x4}, {0x3}, {0x4}, {0x2}, {0x6, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x1}, {0xc9b7e1d7f2ad2980, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x3}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x9, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.701412989s ago: executing program 3 (id=4838): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x5, @void}, 0x10) (async) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x5, @void}, 0x10) close(r0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140b, 0x50, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x5) socket(0x13, 0x800, 0x6c) (async) r2 = socket(0x13, 0x800, 0x6c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004014}, 0x8000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000400)={0x0, 0x7}, 0x8) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000440)=0x1, 0x4) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r1, 0xd, 0x1, 0xffffffc0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r1, 0xd, 0x1, 0xffffffc0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup, r4, 0x18, 0x0, 0x0, @void, @value, @void, @void, r5}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup, r4, 0x18, 0x0, 0x0, @void, @value, @void, @void, r5}, 0x20) socket(0x21, 0x6, 0x1ff) (async) r6 = socket(0x21, 0x6, 0x1ff) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000680)={0x0, 0x3, 0x5, 0x5}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f00000006c0)={0x7f, 0x6}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000740), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x57839924301de1aa}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1e0, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x2, 0x4, 0x10001}, {0x9, 0x19, 0x1, 0x7}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4257}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8001}, 0x20041001) (async) sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x57839924301de1aa}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1e0, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x2, 0x4, 0x10001}, {0x9, 0x19, 0x1, 0x7}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4257}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8001}, 0x20041001) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bind$packet(r9, &(0x7f0000000a80)={0x11, 0x10, r8, 0x1, 0x1}, 0x14) write$cgroup_devices(r9, &(0x7f0000000ac0)={'a', ' *:* ', 'm\x00'}, 0x8) r10 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r10, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b40)=0x14) (async) getsockname$packet(r10, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b40)=0x14) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r11, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:syslogd_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2080}, 0x20000841) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000c80)={0x1, "cc"}, 0x2) r12 = openat$cgroup_ro(r9, &(0x7f0000000cc0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r12, 0x894b, &(0x7f0000000d00)) 1.581786521s ago: executing program 0 (id=4839): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6d5) r1 = accept4(r0, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000200)=0x80, 0x81000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'virt_wifi0\x00', &(0x7f0000000300)=@ethtool_channels={0x3d, 0x4, 0x9, 0x4, 0xff, 0xffffffff, 0x10000, 0x1ff, 0x1}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x28}}, 0x0) 1.504727961s ago: executing program 3 (id=4840): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 1.416912685s ago: executing program 0 (id=4841): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000080000000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 1.261681192s ago: executing program 1 (id=4843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000011c0)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000500000000060015000700000018001680bd"], 0x3c}}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r7, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 1.260970512s ago: executing program 4 (id=4844): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 1.260511247s ago: executing program 3 (id=4845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x2a}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x68}}, 0x0) 1.258657478s ago: executing program 0 (id=4846): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) sendmsg$alg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x444, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x7ffffffe, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x166, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x401, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x8, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x7, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x1, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xcdc}]}, 0x444}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}}], 0x48, 0xc800}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20483, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0x3, 0xffff}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x24084084) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 1.170808911s ago: executing program 1 (id=4847): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r2, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16], 0xc4}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.101375956s ago: executing program 4 (id=4849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000a40)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000a40)=r6}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xc, '\x00', 0x0, r6, 0x4, 0x2, 0x2}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xc, '\x00', 0x0, r6, 0x4, 0x2, 0x2}, 0x50) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}}, [0x9, 0x5, 0x7, 0x1, 0x4, 0x6, 0x6, 0x4, 0xc35, 0x5, 0x2, 0x0, 0xe, 0x6, 0xcec3]}, &(0x7f0000000140)=0x100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0705b04e009d2302bf1eb3034096289638080ea8", @ANYRES16=r9, @ANYBLOB="2b0326bd7000fbdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x2400c040) (async) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0705b04e009d2302bf1eb3034096289638080ea8", @ANYRES16=r9, @ANYBLOB="2b0326bd7000fbdbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x2400c040) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8923, &(0x7f0000000040)={'gretap0\x00', 0x1001}) r11 = socket$inet_smc(0x2b, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r13, 0x0, 0xf3c, 0x0) sendmsg$TIPC_NL_LINK_GET(r13, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000000600)={0x204, r9, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6b9f, @remote, 0xffffffc1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1c1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e8ae44d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff80}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x14040081}, 0x8000) r14 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r14, 0x29, 0x32, &(0x7f0000000000)="3b9f31b362d9345c981059c3e2731d2a23c6e073", 0x14) (async) setsockopt$inet6_buf(r14, 0x29, 0x32, &(0x7f0000000000)="3b9f31b362d9345c981059c3e2731d2a23c6e073", 0x14) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e22, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) (async) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e22, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x94, 0x2c, 0x927, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_u32={{}, {0x0, 0x2, [@TCA_U32_ACT={0x0, 0x7, [@m_csum={0x0, 0x1a, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x0, 0x4d5, 0x1, 0x3, 0xfae6}, 0x7f}}]}, {0x0, 0x6, "be444a1bad41ba8010e05892371bca1f49b64c51c910853a9dfd41493a5cb89defc29284c431503d3f2ca7e64b791693f7028a5e213bf5c22398bdc0cef95b7af56539670bd1409ef93023"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x0, 0x1d, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x0, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x0, 0x4, 0xa3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x0, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x1ff}]}, {0x0, 0x6, "40969d4740d0daf1ca744c2c3f5f54a4a4158f867e5b07f6d8887bf5f407ce3a807b89b488e600eb3cab8bcafa42624c28fdeee5c4a592f79097e2487cedb4bc2e3e7a5429cffb329dc9fea95216924968ba2c5e5ba14763543225af0fae7d4606ba7afd301edac72f9de3fbf3ed37bab62b788b88896d69106090fab3a9705858c2e6efa4db4bfa69ee8f4ad4d48dd204614430def460c542ead292aaa6"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_gact={0x0, 0x20, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0x18ea, 0xffffffffefffffff}}, @TCA_GACT_PROB={0x0, 0x3, {0x2, 0x1df1, 0x3}}, @TCA_GACT_PROB={0x0, 0x3, {0x2, 0x1d65, 0x1}}, @TCA_GACT_PARMS={0x0, 0x2, {0x75d0, 0x5, 0x7, 0x3, 0x9}}, @TCA_GACT_PARMS={0x0, 0x2, {0xd03, 0x5, 0x5, 0x100, 0x8000}}, @TCA_GACT_PARMS={0x0, 0x2, {0x6, 0x2, 0x0, 0x101, 0xe}}, @TCA_GACT_PROB={0x0, 0x3, {0x0, 0xcf8}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0x11ab}}]}, {0x0, 0x6, "dd1eac79342d002d101f8a53e9721da40b62eafcd2783932eeb3083b2b7c9ca3723e1d8f3a68b96f26e55335e70d38ab4ee3170ffce28b923c3bd21f8f398d9a4b12e56f7d953b9e76e55256db732501dbb9052899e5d48ec37d179d3c28887af00d50cd1442f526d6db45f0936282753df1a4c04a5dbf5b1ac8f25269a2d10df216719d268ddb4d1b93648bc4ad33c912cccd2819f3a34029c542a516b84b10d2411084b0473046191babdb84aec95b32a975fc558478e4e5c100a1ee9387c1afaafe3c5ee352d8850ac602dddc0586bead626e35fcf08e355d245a740c742a8a1cbee5791ba64f8bbff09edc91f8b5a06d191ea6e6"}, {0x0, 0x7, {0x1, 0x98ebe355c0907e64}}, {0x0, 0x8, {0x2, 0x2}}}}, @m_bpf={0x0, 0x17, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x0, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0x3, 0x89, 0x3, 0xda, 0xfff}}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}]}, {0x0, 0x6, "ae05a429c9313621c70643c3cd913e5ca2eff6491d0842d34ff77b4857c0f42f93abbf323c27066a11f8c42743dc3a5f3ffcb0ea9eb47ce7905368df94e1639cf07e860f34fae243f7df909a65453e6f453b8b8a41f4b4c811a947e5fb8910159efe3e9432ee159c136e2f89e226344df9bb5000dcec3b38233c06e165fa0ff0fc251fa4884613c6f2a06b0411a844fb16bf64127b49cdb6a787b6c88149a75c26ac0120f7f3c63ad14d516a4b6c8e1105cecbf2cfa9933f22935a97ffc8ec1966c793f34acf106c46425702a90a24cc4cbef7cee547876b825a05582f017e204bfc220489e2de27009a21fee1bb150cce"}, {}, {0x0, 0x8, {0x0, 0x3}}}}, @m_nat={0x0, 0xc, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x0, 0x1, {{0x81, 0x6, 0x10000000, 0x4, 0x44}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x76e, 0x81, 0x20000000, 0x0, 0x7}, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x6, 0x1, 0x3, 0x1, 0x8e}, @empty, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x81, 0x0, 0x7, 0x9}, @remote, @loopback, 0xff}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x1, 0x6, 0x0, 0x6, 0x3}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff}}, @TCA_NAT_PARMS={0x0, 0x1, {{0xffffffff, 0x3a95116a, 0x0, 0x0, 0x994}, @broadcast, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x0, 0x1, {{0x8000, 0x389, 0xffffffffffffffff, 0x93d, 0x8001}, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}, 0xff000000, 0x1}}]}, {0x0, 0x6, "51f2961ac1cfc81c123e0005fbfd6a849d80f9f137c4a64ed16fa512a0f675204e0622db971ec8ba9550bf24b520a4e6c11845c946171212542eb90e11338609de01c04696639e00ef39dfdf5885fb177d4b0b62a79a4ab6c87b7a44405738f9c94a1c000e2db60d977f5e3bb988fd3733564256baae4d11c7782be030566ba6dbb3e9120ad1a7c279549992888c75afa7c8da9fb2e1e06cea2705f459b3e3f91e4e8c056bb48cc44d92a4ec23bce30e1f5f63ba8a67989c581f0f6b5f503cad0927db20c9650fbc4e3fd3dc753eb7ac"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_CLASSID={0x0, 0x1, {0x4, 0xfff1}}, @TCA_U32_FLAGS={0x0, 0xb, 0x4}, @TCA_U32_LINK={0x0, 0x3, 0x8}, @TCA_U32_HASH={0x0, 0x2, 0x80000001}, @TCA_U32_DIVISOR={0x0, 0x4, 0xa1}, @TCA_U32_ACT={0x0, 0x7, [@m_skbmod={0x0, 0x1d, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x0, 0x5, 0x3}, @TCA_SKBMOD_SMAC, @TCA_SKBMOD_DMAC, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0x10, 0x7c30, 0x7, 0x7f, 0x40}, 0xa}}]}, {0x0, 0x6, "60d9cf4271111874173a6a208ea464dd2a1ece68e2b51bc2f423cd3329223c676bbcc6feba6f97fd2d7139ab2886f732438c31f0ffb73175648519821d471c4016f42390110797becd7869408286e38d5ed0c9ea1a11b4d4c5a492088f5d15e596d47ab7729a32ad9c7e0b31c2d1717d4498b13f8b5b2b4325524fc44e3793b50912a44d8e5b8b8dbea4301d696a82b578c921649e7c63f4cf3a"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x1}}}}, @m_bpf={0x0, 0x1f, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x0, 0x4, [{0x1000, 0xb, 0xa, 0x5}, {0x4, 0x3, 0x8, 0x8}]}]}, {0x0, 0x6, "fa6a2595a0145fac4f51383f469be8873b582f862a8e98da9db6986333fccf29294c7e61f4130612097bc263823a110a1c163248e33ab5256dc74f6a3d557c0dffc55e2b711d99e05800a53d4d2879d367c1460cde40e26c62b739f804ac7dd42d1b857c881ee7a221e6a25a457c4391114d138d09683336b62a25613db700cc90c7e0cfe9a0e1693a5b4f98173204b148e5f3255bfd4f2cd5cad3f225d3483fbe45c8038c88d4456d6dae9fbc5ac6ebb372efedb2d84f21faa80f8544b2"}, {0x0, 0x7, {0x303936d6b9731248, 0x1}}, {0x0, 0x8, {0x0, 0x1}}}}, @m_bpf={0x0, 0x3, 0x0, 0x0, {{}, {}, {0x0, 0x6, "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"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2}}}}]}, @TCA_U32_CLASSID={0x0, 0x1, {0x2}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.101038272s ago: executing program 3 (id=4850): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008001980"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x1, 0xffe4}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x2c}}, 0x20044800) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffff1f, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x6558, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x94) 929.918741ms ago: executing program 3 (id=4852): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00080000000000000008000100", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_xfrm(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)=@getsadinfo={0x200, 0x23, 0x400, 0x70bd2d, 0x25dfdbff, 0x0, [@lifetime_val={0x24, 0x9, {0x9, 0xe594, 0x1000, 0xa4f6}}, @XFRMA_SET_MARK={0x8}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010101, @in6=@private1, 0x4e23, 0x7, 0x4e23, 0x6, 0xa, 0x0, 0x80, 0x88, r4, r6}, {0x9, 0x8, 0xfffffffffffffff8, 0xc, 0x3, 0xf2, 0x5, 0x6}, {0x2, 0x5, 0x2400000000, 0x5}, 0x0, 0x6e6bbb, 0x2, 0x1, 0x1, 0x2}}, @algo_auth={0xc9, 0x1, {{'wp256-generic\x00'}, 0x408, "c664570e5574d5a15ce20603ebb2115ef56a7809d0ae6faf6a25d9d6a0a7b71d8d8dc12effb49757dbc4b1bbacad8ae87888b45538e2270b1fe91f3c9af98f7dad0ea940d3689dff689aef830118f306e5ddb8d08300787dea7a83930d62213290e724a1a6c9bf571747cd75ef040d89024c3a4e21f4928fad740f23b136b3ebd9"}}, @offload={0xc, 0x1c, {r7}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2d, 0x8001}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in=@remote, 0x0, 0x2}}]}, 0x200}, 0x1, 0x0, 0x0, 0x10}, 0x8c5) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0x70) r8 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r8, 0x0, 0x0, 0x40000002, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2280, 0x0) 852.154929ms ago: executing program 4 (id=4853): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/121, 0x79}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/105, 0x69}], 0x3}, 0x3000001}, {{0x0, 0x0, 0x0}, 0x7c64}], 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x850) socket$netlink(0x10, 0x3, 0xb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}}, 0x0) 826.191916ms ago: executing program 3 (id=4855): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f9ffffff0000000000190000850000002000400000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$bt_hci(r5, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}]}}]}, 0x48}}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r8, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x679}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r8, @ANYRES8=r9], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 561.129035ms ago: executing program 2 (id=4856): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r2, 0x80) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x138, 0x0, 0x0, @ipv4=@empty}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@local, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0) 490.367868ms ago: executing program 2 (id=4857): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0xe23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) listen(r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) (async) listen(r2, 0xfffff789) (async, rerun: 32) r3 = accept(r2, 0x0, 0x0) (rerun: 32) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000440)={0x0, 0x6}, 0x8) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 420.623333ms ago: executing program 4 (id=4858): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0xa0}}, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) close(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000000000a3fae1a5aff09514f90269fc1476467b9c97da4f48a442bc1ced39b6d2c1913744401748aab62bf3660c1ec8b3fd5b40d55b5330baae0d649b55893c9c9579c0d907f38565a61a1810443a0744e488d709000000cc57d37c29f0fc15c758a87835a972090e3cbc959a1556e70d74b439ca901ccfb0cf0ec6fc055d3d0c4dd94ee4e338df4e2313327f79b6e367e1dd0a4a1798f26c8a558ce4fecc93a20245ce9720a600"/180, @ANYRES8=r2, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x2000880}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=ANY=[@ANYBLOB="202700002c0007012bbd7000ffdbdf25047c0000280301802103dd802001e98008004600", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000227082d57c5848d403e212111b7355941a4abee53192f9ad0ca4033342783801144c6ba1ea7845071729e825b33f1a20fe09b8762b86d910fab7e0264c14550e4b91c89f69764109add4c2854f000000e42303800c0001"], 0x2720}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@newtfilter={0x878, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x80000001, 0x5, 0xd03cbcd, 0x9, 0x5, 0x400, 0xa, 0xf2, 0x6, 0xf0, 0xe9, 0x7, 0x4, 0x3, 0x4, 0x1, 0xedb, 0x9, 0x5, 0x7eb, 0x7, 0x0, 0x200, 0x6, 0x5, 0x5, 0x100, 0x6, 0xffffffff, 0xf6e, 0x5, 0xfffffbff, 0x81, 0x3, 0x1, 0x7, 0x1, 0x1, 0x10007, 0x8, 0xffff8001, 0xfffffff7, 0x4, 0x9c5, 0x5, 0x5, 0xff, 0x5a9f, 0x4, 0x8, 0x100, 0x8, 0x0, 0xff, 0xc2e, 0x9, 0x1, 0xf, 0x7ff, 0x34, 0x9, 0xb6d4, 0x5, 0x7, 0x44d, 0x43b, 0x8, 0x6, 0x2, 0x4, 0x3, 0x6, 0x8, 0xfff, 0x9, 0x7, 0x5, 0x7fff, 0x80, 0x2, 0x7, 0x0, 0x225, 0x4, 0x4, 0x1, 0x1, 0x4, 0x3, 0x0, 0x10000, 0x6, 0x2, 0x1ff, 0x10001, 0x2, 0x5, 0x200, 0x0, 0xffffff6d, 0x6c93, 0x3, 0xd5, 0x9, 0x10001, 0x0, 0x4, 0x101, 0x8, 0x10001, 0xffffffff, 0x0, 0xffffffff, 0x7, 0x1, 0x4, 0x4, 0x8, 0x110, 0x3, 0x7, 0x7, 0x3, 0x7, 0x7, 0x5bc, 0xfffffff3, 0x58, 0x0, 0x80, 0x800, 0x6, 0x9, 0x3ff, 0x9, 0xfffffffa, 0x81, 0x7, 0x3, 0x8, 0x1, 0x10001, 0x0, 0xf9b0, 0x2, 0x5, 0x0, 0x9, 0x5, 0x3, 0x7, 0x2, 0x8a, 0x6, 0x2, 0xb09, 0x200, 0x100, 0xffffff40, 0xfffffffd, 0x6, 0x80000001, 0xed0, 0x66, 0x0, 0x80000000, 0x1, 0x5c, 0xfffffc01, 0x60b, 0x8, 0x1, 0x6, 0x3, 0x7, 0x6b, 0x7fffffff, 0xfffffff6, 0x6, 0xfb, 0x2, 0x40, 0xd4, 0x2, 0x4, 0x6, 0x7ff, 0x2, 0x6c0453b7, 0x7, 0x6, 0xee, 0x4, 0x0, 0xd14f, 0x9cd, 0xfffff0bc, 0x10000, 0x4, 0x2, 0x95, 0x5, 0x8, 0x100, 0x5, 0xfffff3c3, 0x6, 0x401, 0x0, 0xffffffff, 0x4, 0xec, 0x1, 0x7, 0x4, 0x9, 0x7, 0x7, 0x2, 0x400, 0x1ff, 0x8, 0x4, 0x1000, 0xeda5, 0xc7b, 0x3, 0x6, 0x6, 0x730, 0xfffffffa, 0x80000000, 0x7ff, 0x6, 0x9, 0x7, 0x48, 0x9b, 0x5, 0x51, 0xbf7, 0x1, 0x6, 0x9, 0x8, 0x2, 0x78, 0x5, 0x1, 0x2f, 0x8, 0x8, 0x1, 0x8001, 0x7f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x8, 0x5, 0x7fff, 0x0, 0x3, 0x1, 0x0, 0x9, 0x7bba3b63, 0x101, 0x6, 0x400, 0x2, 0x4, 0x8711, 0x4, 0x2c, 0xfffffff9, 0xc, 0x7, 0xd8dc, 0x8, 0x7, 0x7, 0x8, 0x522, 0x1ff, 0x3, 0x10001, 0x1, 0x7, 0x9, 0x7, 0x4, 0x7fff, 0x7, 0x7fffffff, 0x2cca, 0x7fffffff, 0x4, 0x66f, 0x3, 0xfffffc01, 0x8, 0x5, 0x3, 0xa, 0x1000, 0x1, 0x213c, 0x1, 0x7, 0xff, 0x1, 0x6, 0x9, 0x3ff, 0x7, 0x9, 0x4, 0x46dc6052, 0xb21, 0xffffffc1, 0x2, 0x6, 0x101, 0x9fd, 0x7, 0x9, 0xd, 0xc, 0x353, 0x4, 0x4, 0x43, 0x4, 0x1ff, 0x6, 0x28, 0x4, 0x7, 0x3, 0x2, 0x7, 0x0, 0x8, 0xa6, 0xebfa, 0x8, 0x2, 0x7, 0x9a, 0x3, 0x5, 0x81, 0xbc1, 0xcaa8c3e6, 0x2, 0x81, 0x6, 0x10000000, 0x1, 0x7, 0x9, 0x3, 0x3, 0x7fff, 0x4, 0x3, 0x0, 0xfffffff8, 0x1, 0x5, 0x6, 0x7, 0x7fff, 0x4, 0x4, 0x8b, 0x4, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x7, 0x8, 0x0, 0x3f9f26e9, 0x8ca, 0x3, 0x29, 0x1, 0x2, 0x5, 0x6, 0x5, 0xe61, 0xc, 0x8, 0x10001, 0xca7, 0x7, 0x7, 0x200, 0x2, 0x3, 0x3, 0x3, 0xc8, 0x4, 0x9, 0x200, 0xbff, 0x3, 0x4, 0xc, 0x6, 0xe29a, 0x1000, 0x4, 0x55756530, 0x564f, 0x9, 0xffff6755, 0x2, 0x7fff, 0x65ef, 0xdd, 0x7, 0x6, 0x6, 0x5, 0x8, 0x9, 0x80, 0x1, 0xffffffff, 0x5, 0x3, 0x5, 0x9, 0x8001, 0x7, 0xe, 0x6, 0x7, 0xfffffff9, 0x4, 0x6, 0x8001, 0x8, 0x3, 0x10000, 0x100, 0x1ff, 0xf, 0x8c, 0xffff8000, 0x3, 0x1, 0x200, 0x3, 0x1, 0xd, 0x0, 0x4, 0x3, 0x6, 0x7, 0x0, 0x3, 0x5, 0x180, 0x5, 0x4, 0x7ff, 0x8, 0x7, 0x0, 0x7, 0x0, 0x5504, 0x0, 0x0, 0x7, 0xffffbf52, 0x9, 0xff, 0x6, 0xcee, 0x14, 0x6, 0x4, 0x4, 0xffff, 0xfffffff7, 0x9, 0x6, 0x81, 0x7, 0x0, 0x926e, 0x47b7, 0x0, 0x100, 0x1, 0x8, 0x1, 0xfffffff7, 0x8, 0xffff0001, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x4, 0x6b, 0x2, 0x0, {0x13, 0x1, 0x8, 0xb, 0x72, 0x5}, {0xa, 0x0, 0x5, 0x0, 0x100, 0x9}, 0x8, 0x3ff, 0x8}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendto(r0, &(0x7f0000000300)="a338f83edf468d9fc40e9998c6c3dc4faef7940e70fff41675340ded6f0ca6dcfaaa4915d5b967c75f2076cbbbd4cb7b60a36e8a360e0cb5395c0991a39884cb7eaebd48ca7ff0d834a6378d6d71eab979248a32b9bb210a2cfd4e49c81fc5fcc66cb55a30080ad34046fdc5f70b1c499e74b9e78844eba0b94058d9f0a729876a0230ba1235fb61d075a00d592eed198c08d9fd511ae7b3492bdb92d5548b6bb127eda085f4a0ba342fcff87fc35a20df5bbbf2dbc56dafad2fa32ab2eb88aede276a53", 0xc4, 0x0, &(0x7f0000000400)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) 324.804785ms ago: executing program 2 (id=4859): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c000280080005400000000090a07b7501815aec7984daa17e53000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}}, 0x20000000) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0xa0}}, 0x90) 314.661976ms ago: executing program 4 (id=4860): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000480)) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000300)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000002c0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) sendmsg$netlink(r3, &(0x7f0000000440)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000140)={0x10, 0x29, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x28, 0x1, 0x1, [r2, r0, r1, r0, 0xffffffffffffffff, r0]}}], 0x60, 0x20004004}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) sendmsg$inet(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="322a6ad438bbee7a04f6aa4fe67ea64b03b531257196535b4673c32c42484207fe83bd449ebc7904a14fe40182e00d497dc6d3c2fb249295b487034eac65ff1fbe47b93a6d50d12071826d364ae3edf9fec8e9a2b6792fa482998c6e2d86adb2c39524cacf23eeb809231b9df6a22649c8", 0x71}, {&(0x7f0000000540)="fd11ad63f63ed8dbd4241fe0b5a36b1220c476be290a3ac2", 0x18}], 0x2, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @empty}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xed8}}], 0x98}, 0x40) r10 = openat$cgroup_ro(r3, &(0x7f0000000100)='pids.events\x00', 0x275a, 0x0) close(r10) connect$unix(r10, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TUNSETOFFLOAD(r10, 0x5421, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket(0x840000000002, 0x3, 0x100) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000480)) (async) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) (async) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000300)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x20) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) (async) getpid() (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f00000002c0)) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) (async) sendmsg$netlink(r3, &(0x7f0000000440)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000140)={0x10, 0x29, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x28, 0x1, 0x1, [r2, r0, r1, r0, 0xffffffffffffffff, r0]}}], 0x60, 0x20004004}, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000005c0)={'vcan0\x00'}) (async) sendmsg$inet(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="322a6ad438bbee7a04f6aa4fe67ea64b03b531257196535b4673c32c42484207fe83bd449ebc7904a14fe40182e00d497dc6d3c2fb249295b487034eac65ff1fbe47b93a6d50d12071826d364ae3edf9fec8e9a2b6792fa482998c6e2d86adb2c39524cacf23eeb809231b9df6a22649c8", 0x71}, {&(0x7f0000000540)="fd11ad63f63ed8dbd4241fe0b5a36b1220c476be290a3ac2", 0x18}], 0x2, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @empty}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xed8}}], 0x98}, 0x40) (async) openat$cgroup_ro(r3, &(0x7f0000000100)='pids.events\x00', 0x275a, 0x0) (async) close(r10) (async) connect$unix(r10, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$TUNSETOFFLOAD(r10, 0x5421, 0x0) (async) 300.236461ms ago: executing program 2 (id=4861): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x7, 0x8, {{0x16, 0x4, 0x0, 0x17, 0x58, 0x67, 0x0, 0x3, 0x4, 0x0, @private=0xa010101, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xc9, 0x3, 0x7, [{@empty, 0xf}, {@multicast1, 0x80}, {@loopback, 0x2}]}, @ssrr={0x89, 0x1b, 0x12, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x6a, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @noop]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000003c0)={@rand_addr=' \x01\x00', 0x6c, r1}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000240)={{r2, &(0x7f0000000040)='\xfd!\x1c\xfe\xc1\xa2\xfe\xc7\xc5\xaf\x86\xd5\xca\x8fu\x19W\xfe\x9ee\xdby\x1a0-\x8d\xb5b8\xc8\xd5\x1c\x94~\xbf\x04l!S<\x05\xfcv\xe4P\x86o\xeeZ', 0xc0140, &(0x7f00000000c0)={@align=0x6, {0x3, 0x40, 0xf2a, 0x8}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4}, {[0x7, 0x7ff, 0x7, 0xa]}, 0x8, 0x9e, &(0x7f0000000180)=""/158}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x7, 0x8, {{0x16, 0x4, 0x0, 0x17, 0x58, 0x67, 0x0, 0x3, 0x4, 0x0, @private=0xa010101, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xc9, 0x3, 0x7, [{@empty, 0xf}, {@multicast1, 0x80}, {@loopback, 0x2}]}, @ssrr={0x89, 0x1b, 0x12, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x6a, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @noop]}}}}}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000003c0)={@rand_addr=' \x01\x00', 0x6c, r1}) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000240)={{r2, &(0x7f0000000040)='\xfd!\x1c\xfe\xc1\xa2\xfe\xc7\xc5\xaf\x86\xd5\xca\x8fu\x19W\xfe\x9ee\xdby\x1a0-\x8d\xb5b8\xc8\xd5\x1c\x94~\xbf\x04l!S<\x05\xfcv\xe4P\x86o\xeeZ', 0xc0140, &(0x7f00000000c0)={@align=0x6, {0x3, 0x40, 0xf2a, 0x8}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4}, {[0x7, 0x7ff, 0x7, 0xa]}, 0x8, 0x9e, &(0x7f0000000180)=""/158}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bond_slave_1\x00'}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) (async) 211.724817ms ago: executing program 0 (id=4862): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2ef}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}}], 0x1, 0x4) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x21, 0x3, 0x530, 0x198, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x170, 0x198, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@srh1={{0x90}, {0x3b, 0x2, 0x9, 0x0, 0xe, @loopback, @loopback, @loopback, [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], [0x0, 0x0, 0xffffffff], [0xff, 0xffffff00, 0x0, 0xff], 0x2004, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@uncond, 0x0, 0x258, 0x2c8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x3, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg0\x00', {0x3, 0xd, 0x41, 0x1, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x5, 0x1, 0x0, "ea1fe5d1434d35835e190200001a00000000d6a2fafc10325c6044c3f4a9d8bc2a4046000000d84289cd000000000000000300027f00"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b36, &(0x7f0000000240)={'wlan1\x00', @random="8dffffffebff"}) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x5a, 0x601, 0x0, 0x0, "", [@nested={0x5, 0x0, 0x0, 0x1, [@generic='j']}]}, 0x18}], 0x1}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x114, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x45}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bond\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, 'wlan1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}]}]}, 0x114}}, 0x4000800) 211.393303ms ago: executing program 1 (id=4863): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x19, @private1, 0x1000}], 0x1c) getpeername$inet6(r4, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r0, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) listen(r0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 157.007405ms ago: executing program 2 (id=4864): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x3}]}, {0x0, [0x0, 0x61, 0x2e, 0xbc543e878757aa89]}}, 0x0, 0x2a, 0x0, 0x0, 0x1c16}, 0x20) 98.342531ms ago: executing program 0 (id=4865): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0xfffffffffffffffd, &(0x7f0000000340)=0x33) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000000200000085000000ae00000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x0, 0x0, 0x9, 0xd7, 0xfffffffa, 0x6, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x0, 0x0, 0x9, 0xd7, 0xfffffffa, 0x6, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}}], 0x48, 0xc800}, 0x0) (async) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}}], 0x48, 0xc800}, 0x0) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) sendmmsg$alg(r4, &(0x7f0000006180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18c0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000006140)=[@assoc={0x18, 0x117, 0x4, 0xfffffffd}], 0x18, 0x8080}], 0x3, 0x4000010) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r8, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) (async) write$tun(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x8884) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000380)=0x2, 0x4) 1.128829ms ago: executing program 4 (id=4866): r0 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000000)={0x80}) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 0s ago: executing program 2 (id=4867): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x8000a4ff, 0x4) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @rand_addr=0x64010102}], 0xfffffffffffffe53) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0)={0x5}, 0x4) sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x24, 0x0, 0xc, 0x0, 0x10003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000001, 0x200, 0x9, 0x4, 0x0, 0x1}, 0x0, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) (async) r8 = socket$phonet(0x23, 0x2, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x30, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000229bd7000fddbdf25090000000c006e8004000200040002004000508005000200040000000800030001ac0f00040006000800030001ac0f000c000400aa02efd5a5c7e03b0c00040074da33f6b4a6bdf4080004003b63b95c0800508004000500"], 0x68}, 0x1, 0x0, 0x0, 0x4041004}, 0x40000) (async) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000003800)=""/4100, 0x1004}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000540)=""/191, 0xbf}}], 0x1, 0x121, &(0x7f0000003700)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f0000001fc0)={{r5}, "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"}) kernel console output (not intermixed with test programs): 71] netlink: 'syz.0.3339': attribute type 2 has an invalid length. [ 454.890263][T18657] gretap0: entered promiscuous mode [ 454.907734][T18657] gretap0: left promiscuous mode [ 454.930518][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3338'. [ 454.939420][T18673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3338'. [ 454.962132][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3338'. [ 455.688135][ T5636] Bluetooth: hci1: command tx timeout [ 455.726664][T18611] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.791171][T18611] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.802015][T18611] bridge_slave_0: entered allmulticast mode [ 455.837230][T18611] bridge_slave_0: entered promiscuous mode [ 455.894801][T18611] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.950297][T18611] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.994727][T18611] bridge_slave_1: entered allmulticast mode [ 456.002761][T18611] bridge_slave_1: entered promiscuous mode [ 456.099295][T18611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.176774][T18611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.317757][T18611] team0: Port device team_slave_0 added [ 456.326807][T18611] team0: Port device team_slave_1 added [ 456.523817][T18611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.530876][T18611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.558129][T18611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.587423][T18723] netlink: 'syz.2.3353': attribute type 1 has an invalid length. [ 456.628356][T18611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.635575][T18611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.661473][T18611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.843802][T18719] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.906756][T18611] hsr_slave_0: entered promiscuous mode [ 456.957771][T18611] hsr_slave_1: entered promiscuous mode [ 456.964300][T18611] debugfs: 'hsr0' already exists in 'hsr' [ 456.970067][T18611] Cannot create hsr debugfs directory [ 457.048998][T18740] netlink: 'syz.0.3357': attribute type 1 has an invalid length. [ 457.056786][T18740] netlink: 'syz.0.3357': attribute type 3 has an invalid length. [ 457.064544][T18740] NCSI netlink: No device for ifindex 131092 [ 457.180109][T18743] can: request_module (can-proto-0) failed. [ 457.451056][T18611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.461619][T18611] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.543621][ T10] net_ratelimit: 6 callbacks suppressed [ 457.543640][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.557724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.722332][ T5636] Bluetooth: hci1: command tx timeout [ 458.284930][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.478304][T18611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.488632][T18611] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.650672][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.659123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.020156][T18611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.030841][T18611] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.323033][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.710303][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.718847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.781448][ T5636] Bluetooth: hci1: command tx timeout [ 460.769689][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.778127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.206631][T18719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.334200][T18719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.437104][T18719] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.566456][T16995] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.594872][T16995] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.624685][T16995] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.647007][ T3328] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.737835][T18795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.792853][T18611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 461.817887][T18611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.844927][T18611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 461.862741][ T5636] Bluetooth: hci1: command tx timeout [ 461.938053][T18611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.975051][T18611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.015455][T18611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.027330][T18611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 462.041552][T18611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.308589][T18611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.330735][T18611] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.402309][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.409529][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.429751][T18863] validate_nla: 2 callbacks suppressed [ 462.429785][T18863] netlink: 'syz.4.3388': attribute type 27 has an invalid length. [ 462.470013][T18863] netlink: 'syz.4.3388': attribute type 4 has an invalid length. [ 462.503387][T18611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.512988][T18863] __nla_validate_parse: 40 callbacks suppressed [ 462.513007][T18863] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3388'. [ 462.513776][T18611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.551845][T17005] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.559032][T17005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.647592][T18869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3389'. [ 462.893190][ T8772] net_ratelimit: 4 callbacks suppressed [ 462.893210][ T8772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.907275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.361639][T18902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3397'. [ 463.750952][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.759946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.773246][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.788241][T18916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.979806][ T8772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.988280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.116580][T18933] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3405'. [ 464.142841][T18933] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.150250][T18933] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.188867][T18611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.263554][T18940] netlink: 'syz.4.3404': attribute type 1 has an invalid length. [ 464.275539][T18611] veth0_vlan: entered promiscuous mode [ 464.415559][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.509868][T18953] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 464.542408][T18940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.714736][T18954] bond1: (slave ip6gretap1): making interface the new active one [ 464.752799][T18954] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 464.802170][T18611] veth1_vlan: entered promiscuous mode [ 464.894807][T18964] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3409'. [ 464.912266][T18611] veth0_macvtap: entered promiscuous mode [ 464.944342][T18965] syzkaller1: entered promiscuous mode [ 464.949873][T18965] syzkaller1: entered allmulticast mode [ 464.999124][T18611] veth1_macvtap: entered promiscuous mode [ 465.075804][T18611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.119581][T18611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.261918][T17005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.270719][T17005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.355202][T17005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.444668][T17005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.656275][T17005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.664141][T17005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.937676][T17005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.945557][T17005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.977098][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3418'. [ 466.313213][T19023] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.3423'. [ 466.693968][T19034] netlink: 'syz.0.3427': attribute type 10 has an invalid length. [ 466.903397][T19039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3428'. [ 467.013187][ T5648] block nbd0: Receive control failed (result -32) [ 467.013871][ T5636] block nbd0: Receive control failed (result -32) [ 467.107041][T19016] nbd0: detected capacity change from 0 to 63 [ 467.231627][T19024] nbd0: detected capacity change from 63 to 0 [ 467.234976][T15414] block nbd0: Dead connection, failed to find a fallback [ 468.282494][ T8774] net_ratelimit: 11 callbacks suppressed [ 468.282514][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.296651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.307249][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.315570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.793644][T19035] lo speed is unknown, defaulting to 1000 [ 469.832948][T19035] lo speed is unknown, defaulting to 1000 [ 469.850224][T19035] lo speed is unknown, defaulting to 1000 [ 469.870233][T19035] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 469.894169][T19070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.898841][T19035] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 469.921940][T19035] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 469.949194][T19035] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 469.952867][T19070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.966152][T19070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.047439][T19035] lo speed is unknown, defaulting to 1000 [ 470.064357][T19035] lo speed is unknown, defaulting to 1000 [ 470.089406][T19035] lo speed is unknown, defaulting to 1000 [ 470.116089][T19035] lo speed is unknown, defaulting to 1000 [ 470.153972][T19035] lo speed is unknown, defaulting to 1000 [ 470.174618][T19035] lo speed is unknown, defaulting to 1000 [ 470.220572][T19035] lo speed is unknown, defaulting to 1000 [ 470.238178][T19035] lo speed is unknown, defaulting to 1000 [ 470.307404][T19081] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3441'. [ 470.309653][T16995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.379769][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.388302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.806104][T19099] IPv6: Can't replace route, no match found [ 470.849085][T19099] IPv6: Can't replace route, no match found [ 470.974613][T19107] netlink: 'syz.3.3448': attribute type 1 has an invalid length. [ 470.982564][T19107] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.3448'. [ 471.001796][T19107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3448'. [ 471.026401][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3450'. [ 471.137437][T19108] netlink: 187468 bytes leftover after parsing attributes in process `syz.2.3450'. [ 471.324714][T19108] bond1: entered promiscuous mode [ 471.336418][T19108] bond1: entered allmulticast mode [ 471.337320][T19127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3457'. [ 473.327008][ T808] net_ratelimit: 8 callbacks suppressed [ 473.327031][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.432135][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.492858][T15414] block nbd0: shutting down sockets [ 473.503121][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.511944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.514189][T15414] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 473.543098][T15414] Buffer I/O error on dev nbd0, logical block 0, async page read [ 473.570209][T15414] Buffer I/O error on dev nbd0, logical block 1, async page read [ 473.586699][T15414] Buffer I/O error on dev nbd0, logical block 2, async page read [ 473.597831][T15414] Buffer I/O error on dev nbd0, logical block 3, async page read [ 473.605812][T15414] ldm_validate_partition_table(): Disk read failed. [ 473.612479][T15414] Dev nbd0: unable to read RDB block 0 [ 473.620407][T15414] nbd0: unable to read partition table [ 473.627547][T15414] nbd0: partition table beyond EOD, truncated [ 473.943880][T19123] netlink: 'syz.1.3455': attribute type 12 has an invalid length. [ 473.952694][T19123] netlink: 'syz.1.3455': attribute type 29 has an invalid length. [ 473.975251][T19123] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3455'. [ 473.984360][T19123] netlink: 'syz.1.3455': attribute type 1 has an invalid length. [ 473.992230][T19123] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3455'. [ 474.001382][T19128] netlink: 'syz.1.3455': attribute type 12 has an invalid length. [ 474.009257][T19128] netlink: 'syz.1.3455': attribute type 29 has an invalid length. [ 474.017216][T19128] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3455'. [ 474.028057][T19128] netlink: 'syz.1.3455': attribute type 1 has an invalid length. [ 474.035796][T19128] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3455'. [ 474.044887][T19133] lo: entered promiscuous mode [ 474.050005][T19133] lo: left promiscuous mode [ 474.277565][T19138] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 474.397473][T19146] netlink: 'syz.0.3463': attribute type 1 has an invalid length. [ 474.405395][T19146] netlink: 'syz.0.3463': attribute type 3 has an invalid length. [ 474.453137][T19144] syzkaller0: entered promiscuous mode [ 474.458665][T19144] syzkaller0: entered allmulticast mode [ 474.491737][T19144] netlink: 'syz.4.3462': attribute type 10 has an invalid length. [ 474.499620][T19144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.507023][T19144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.564610][T19144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.572047][T19144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.592039][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.601046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.673290][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.682301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.974637][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.275466][T19202] netlink: 'syz.4.3474': attribute type 23 has an invalid length. [ 476.296020][T19202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 478.953363][ T8774] net_ratelimit: 6 callbacks suppressed [ 478.953385][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.975599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.010628][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.034802][T19206] __nla_validate_parse: 4 callbacks suppressed [ 479.034821][T19206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3475'. [ 479.283088][T19225] sctp: [Deprecated]: syz.1.3479 (pid 19225) Use of int in max_burst socket option deprecated. [ 479.283088][T19225] Use struct sctp_assoc_value instead [ 479.641998][T19248] netlink: 'syz.1.3483': attribute type 2 has an invalid length. [ 479.674281][T19248] netlink: 'syz.1.3483': attribute type 1 has an invalid length. [ 479.938208][T19256] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3486'. [ 480.053196][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.059615][T19263] netlink: 'syz.4.3488': attribute type 7 has an invalid length. [ 480.062148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.071765][T19263] netlink: 'syz.4.3488': attribute type 7 has an invalid length. [ 480.456477][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.516215][T19280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3494'. [ 481.024191][ T5636] block nbd2: Receive control failed (result -32) [ 481.076596][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.085671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.646174][T19308] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 481.754798][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.799143][T19282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3496'. [ 483.842756][T19304] tipc: Enabling of bearer rejected, failed to enable media [ 484.085758][T19314] netlink: 'syz.3.3502': attribute type 13 has an invalid length. [ 484.117360][T19312] net_ratelimit: 8 callbacks suppressed [ 484.117382][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.124797][T19314] gretap0: refused to change device tx_queue_len [ 484.164006][T19314] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 484.180097][T19315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.181198][ T5816] lo speed is unknown, defaulting to 1000 [ 484.199250][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.201511][T19319] netlink: 'syz.1.3504': attribute type 1 has an invalid length. [ 484.215494][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.221872][T19319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.223919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.518957][T19335] veth1_macvtap: left promiscuous mode [ 484.607648][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.619763][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.659510][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.737896][T19342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3514'. [ 487.721634][T19353] tipc: Invalid UDP bearer configuration [ 487.721701][T19353] tipc: Enabling of bearer rejected, failed to enable media [ 489.386013][T17005] net_ratelimit: 15 callbacks suppressed [ 489.386037][T17005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.402730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.461651][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.470619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.501928][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.510105][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.519433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.542386][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.551472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.583561][T17014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.662327][ T10] net_ratelimit: 4 callbacks suppressed [ 494.662350][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.676932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.147550][T16995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.158060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.622019][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.743400][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.751995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.741323][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.750307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.060846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.861019][ T10] net_ratelimit: 5 callbacks suppressed [ 499.861042][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.875585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.265481][T16990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.275404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.910695][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.919645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.381795][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.553433][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.602491][T16990] pimreg3: left allmulticast mode [ 501.848967][T16990] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 501.940890][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.949832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.278515][T16990] bond6 (unregistering): (slave bridge4): Releasing active interface [ 502.499878][T16990] bond1 (unregistering): Released all slaves [ 502.521654][T16990] bond2 (unregistering): Released all slaves [ 502.545180][T16990] bond3 (unregistering): Released all slaves [ 502.577064][T16990] bond4 (unregistering): Released all slaves [ 502.600822][T16990] bond5 (unregistering): Released all slaves [ 502.628346][T16990] bond6 (unregistering): Released all slaves [ 502.652538][T16990] bond7 (unregistering): Released all slaves [ 502.673779][T16990] bond0 (unregistering): Released all slaves [ 502.703438][T16990] bond8 (unregistering): Released all slaves [ 502.726107][T16990] bond9 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 502.752912][T16990] bond9 (unregistering): Released all slaves [ 502.954417][T16990] : left promiscuous mode [ 503.085656][T16990] tipc: Left network mode [ 503.602302][T16990] vlan0: left allmulticast mode [ 503.607245][T16990] veth0_vlan: left allmulticast mode [ 503.614204][T16990] veth1_macvtap: left promiscuous mode [ 503.623578][T16990] veth0_macvtap: left promiscuous mode [ 503.629512][T16990] veth1_vlan: left promiscuous mode [ 505.142609][ T5743] net_ratelimit: 5 callbacks suppressed [ 505.142631][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.157524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.021792][T16995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.030937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.181388][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.190326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.421960][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.834069][T19380] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3521'. [ 507.235096][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.244392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.284877][T19404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3530'. [ 508.198376][T19438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3539'. [ 508.304254][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.639065][T19452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3542'. [ 508.662006][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3544'. [ 510.356699][ T8774] net_ratelimit: 4 callbacks suppressed [ 510.356720][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.371697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.021430][T19452] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 511.024099][T19446] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 511.332914][T19480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3552'. [ 511.402209][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.411290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.516313][T19486] openvswitch: netlink: IPv6 tunnel dst address is zero [ 511.800542][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.809423][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.817797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.952986][T19498] syzkaller0: entered promiscuous mode [ 511.965011][T19498] syzkaller0: entered allmulticast mode [ 512.182437][T19508] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 512.430256][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.860779][ T5648] Bluetooth: hci5: command 0x0406 tx timeout [ 515.408987][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3572'. [ 515.671577][ T5753] net_ratelimit: 7 callbacks suppressed [ 515.671597][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.686199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.694902][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.705589][T19564] netlink: 'syz.4.3575': attribute type 12 has an invalid length. [ 515.748474][T19564] netlink: 'syz.4.3575': attribute type 29 has an invalid length. [ 515.756350][T19564] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3575'. [ 515.765404][T19564] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3575'. [ 515.775648][T19568] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3577'. [ 515.776515][T19564] RDS: rds_bind could not find a transport for ::ffff:100.1.1.4, load rds_tcp or rds_rdma? [ 515.796909][T19576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3576'. [ 515.998161][T19580] syzkaller0: entered promiscuous mode [ 516.021508][T19580] syzkaller0: entered allmulticast mode [ 516.050255][T19580] netlink: 'syz.2.3580': attribute type 1 has an invalid length. [ 516.103504][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3580'. [ 516.190336][T19591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3583'. [ 516.551406][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3584'. [ 516.676845][T19611] netlink: 'syz.3.3588': attribute type 1 has an invalid length. [ 516.779307][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.788353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.954133][T19621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3590'. [ 516.968366][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.977455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.990467][T19623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3591'. [ 517.432290][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.789106][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.798227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.090912][T19637] macvtap1: entered promiscuous mode [ 520.116017][T19637] vlan0: entered promiscuous mode [ 520.135957][T19637] macvtap1: entered allmulticast mode [ 520.169278][T19637] vlan0: entered allmulticast mode [ 520.187112][T19637] veth0_vlan: entered allmulticast mode [ 520.902806][ T8774] net_ratelimit: 5 callbacks suppressed [ 520.902825][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.917508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.953441][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.962615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.682281][T16990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.690936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.002171][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.011207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.146910][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.027387][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.452248][T19703] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 525.038284][T19727] __nla_validate_parse: 4 callbacks suppressed [ 525.038306][T19727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3618'. [ 525.105539][T19732] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3620'. [ 525.567030][T19719] xt_limit: Overflow, try lower: 271964/0 [ 525.935556][T19750] net_ratelimit: 4 callbacks suppressed [ 525.935577][T19750] bridge_slave_0: mtu less than device minimum [ 525.938609][T19749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3622'. [ 526.149567][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.158867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.450355][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 526.527439][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 526.611894][T19768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.622952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.207964][T19782] dvmrp8: entered allmulticast mode [ 527.222268][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.231259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.330055][T19782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3627'. [ 527.584485][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3631'. [ 527.657880][T19802] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3630'. [ 528.132026][T19817] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.290655][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.298801][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.304969][T19825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3636'. [ 528.307800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.492794][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'. [ 528.534417][T19840] netlink: 'syz.3.3638': attribute type 18 has an invalid length. [ 528.583044][T16995] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.591995][T16995] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.616254][T16995] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.658305][T16995] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.952917][T19850] syzkaller0: entered promiscuous mode [ 528.967527][T19850] syzkaller0: entered allmulticast mode [ 529.251357][T19798] Bluetooth: hci2: command 0x0405 tx timeout [ 529.646728][ T5648] Bluetooth: hci1: command 0x0405 tx timeout [ 529.851032][T19910] netlink: 'syz.1.3652': attribute type 14 has an invalid length. [ 529.893043][T19910] netlink: 'syz.1.3652': attribute type 13 has an invalid length. [ 531.397326][ T8774] net_ratelimit: 8 callbacks suppressed [ 531.397348][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.411585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.423632][T19936] bond1: option lp_interval: invalid value (0) [ 532.429913][T19936] bond1: option lp_interval: allowed values 1 - 2147483647 [ 532.439104][T19936] bond1 (unregistering): Released all slaves [ 532.442662][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.454156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.468609][T19939] __nla_validate_parse: 8 callbacks suppressed [ 532.468623][T19939] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3655'. [ 532.735512][T19955] xt_connbytes: Forcing CT accounting to be enabled [ 533.223719][T19983] ip6t_REJECT: ECHOREPLY is not supported [ 533.393859][T19980] tipc: Started in network mode [ 533.416119][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.419763][T19980] tipc: Node identity e2a48e91d586, cluster identity 4711 [ 533.473752][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.482776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.501735][T19980] tipc: Enabled bearer , priority 0 [ 533.878270][T19973] tipc: Disabling bearer [ 534.176289][T20032] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3677'. [ 534.219879][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.228349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.238614][T20035] netlink: 'syz.2.3678': attribute type 1 has an invalid length. [ 534.294509][T20035] netlink: 'syz.2.3678': attribute type 1 has an invalid length. [ 534.513833][T20046] netlink: 'syz.4.3680': attribute type 1 has an invalid length. [ 534.544024][ T8772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.572937][T20046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.855171][T20062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3683'. [ 534.899842][T20062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3683'. [ 535.279088][T20081] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3687'. [ 535.291549][T20083] netlink: 211792 bytes leftover after parsing attributes in process `syz.3.3688'. [ 535.383767][T20083] netlink: 211472 bytes leftover after parsing attributes in process `syz.3.3688'. [ 535.388522][T20087] netlink: 'syz.1.3689': attribute type 5 has an invalid length. [ 535.533983][T20096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.590303][T20093] netlink: 'syz.0.3690': attribute type 1 has an invalid length. [ 535.888342][T20093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 536.116958][T20120] netlink: 'syz.4.3696': attribute type 3 has an invalid length. [ 536.205317][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 536.263375][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3698'. [ 536.355438][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3698'. [ 536.376242][T16990] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.411184][T16990] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.440354][T16990] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.465453][T16990] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.552524][T20141] syzkaller1: entered promiscuous mode [ 536.580101][T20141] syzkaller1: entered allmulticast mode [ 536.604074][ T8772] net_ratelimit: 12 callbacks suppressed [ 536.604096][ T8772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.618868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.739641][T20148] tc_dump_action: action bad kind [ 537.597034][T20186] rB: renamed from lo (while UP) [ 537.626034][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.635126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.917396][T20195] __nla_validate_parse: 3 callbacks suppressed [ 537.917417][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3714'. [ 538.375769][T20213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3718'. [ 538.482417][T20220] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3720'. [ 538.492367][T20220] netlink: Unknown conntrack attr (0) [ 538.667760][T20228] netlink: 'syz.2.3722': attribute type 1 has an invalid length. [ 538.695436][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.704449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.727116][T20228] netlink: 'syz.2.3722': attribute type 1 has an invalid length. [ 538.737226][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3724'. [ 538.862870][T20228] syzkaller1: entered promiscuous mode [ 538.868417][T20228] syzkaller1: entered allmulticast mode [ 538.974408][T20237] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3723'. [ 538.985591][T20229] syz.0.3724 (20229) used greatest stack depth: 17944 bytes left [ 539.172837][T20249] sctp: [Deprecated]: syz.0.3727 (pid 20249) Use of int in max_burst socket option deprecated. [ 539.172837][T20249] Use struct sctp_assoc_value instead [ 539.261486][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.359801][T20249] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 539.373037][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.382093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.408021][T20249] bond3 (unregistering): Released all slaves [ 539.770508][T20262] mac80211_hwsim hwsim55 : renamed from wlan1 [ 539.897893][T20276] netlink: 'syz.4.3731': attribute type 1 has an invalid length. [ 540.104929][T20284] netlink: 'syz.4.3733': attribute type 1 has an invalid length. [ 540.114230][T20284] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3733'. [ 540.185313][T20288] tipc: Enabling of bearer rejected, failed to enable media [ 540.580609][T20302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3739'. [ 540.625469][T20307] 8021q: VLANs not supported on xfrm0 [ 540.766719][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3741'. [ 540.817160][T20314] bond2: Invalid ad_actor_system MAC address. [ 540.849683][T20314] bond2: option ad_actor_system: invalid value (1) [ 540.886572][T20321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3742'. [ 540.898623][T20314] bond2 (unregistering): Released all slaves [ 541.054639][T20317] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 541.108712][T20317] bond3: (slave lo): Enslaving as an active interface with an up link [ 541.349985][T20340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3746'. [ 541.815710][ T8774] net_ratelimit: 5 callbacks suppressed [ 541.815731][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.830419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.892047][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.517281][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.860911][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.869932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.043860][T20421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3762'. [ 543.319083][T20431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3765'. [ 543.328025][T20431] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 543.364421][T20432] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3767'. [ 543.830058][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.859764][T16995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.877051][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.895499][T20461] IPVS: set_ctl: invalid protocol: 128 172.30.8.5:20003 [ 543.953477][T20464] IPVS: set_ctl: invalid protocol: 137 100.1.1.2:20000 [ 544.174354][T20470] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 544.292519][T20472] netlink: 'syz.2.3775': attribute type 1 has an invalid length. [ 544.354322][T20472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.368155][T20447] netlink: 'syz.0.3771': attribute type 10 has an invalid length. [ 544.380400][T20477] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode [ 544.425516][T20477] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode [ 544.494759][T20447] syz_tun: entered promiscuous mode [ 544.620549][T20484] xt_CT: You must specify a L4 protocol and not use inversions on it [ 544.657019][T20479] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3777'. [ 544.670184][T20486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3779'. [ 545.685426][T20535] mac80211_hwsim hwsim52 syzkaller0: left promiscuous mode [ 545.702063][T20535] mac80211_hwsim hwsim52 syzkaller0: left allmulticast mode [ 545.910932][T20547] bridge1: entered promiscuous mode [ 545.916269][T20547] bridge1: entered allmulticast mode [ 545.986105][T20556] netlink: 'syz.0.3796': attribute type 1 has an invalid length. [ 546.088777][T20559] netem: change failed [ 546.092416][T20552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3794'. [ 546.126742][T20556] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3796'. [ 546.583758][T20584] geneve2: entered promiscuous mode [ 546.589134][T20584] geneve2: entered allmulticast mode [ 546.597975][T16995] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 546.615015][T16995] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 546.624801][T16995] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 546.637779][T16995] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 546.682227][T20587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.693434][T20587] Bluetooth: MGMT ver 1.23 [ 546.828281][T20593] net_ratelimit: 9 callbacks suppressed [ 546.828300][T20593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.845315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.175458][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.184469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.241528][T20606] bond4: option all_slaves_active: invalid value (222) [ 547.262240][T20606] bond4 (unregistering): Released all slaves [ 547.622938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.644793][T16990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.654460][T20626] : renamed from virt_wifi0 [ 547.696976][T20629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3812'. [ 547.735141][T20630] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3813'. [ 548.158404][T20652] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 548.289040][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.299062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.380642][T17014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.391154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.692417][T20674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3822'. [ 549.564541][T20719] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3834'. [ 549.706893][T19798] Bluetooth: hci3: command 0x0406 tx timeout [ 549.820930][T20737] netlink: 'syz.0.3837': attribute type 1 has an invalid length. [ 549.828755][T20737] netlink: 'syz.0.3837': attribute type 2 has an invalid length. [ 549.895843][T20737] netlink: 'syz.0.3837': attribute type 1 has an invalid length. [ 549.935917][T20737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3837'. [ 550.079668][T20751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3842'. [ 550.323135][T20761] netlink: 'syz.0.3845': attribute type 21 has an invalid length. [ 550.331083][T20761] netlink: 'syz.0.3845': attribute type 22 has an invalid length. [ 550.338924][T20761] netlink: 'syz.0.3845': attribute type 23 has an invalid length. [ 550.346765][T20761] netlink: 'syz.0.3845': attribute type 25 has an invalid length. [ 550.354674][T20761] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3845'. [ 550.581966][T20765] vlan2: entered promiscuous mode [ 550.587074][T20765] hsr0: entered promiscuous mode [ 550.661759][T20765] vlan2: entered allmulticast mode [ 550.682901][T20765] hsr0: entered allmulticast mode [ 550.719640][T20765] hsr_slave_0: entered allmulticast mode [ 550.727953][T20765] hsr_slave_1: entered allmulticast mode [ 550.846346][T20788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3852'. [ 551.280176][T20810] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode [ 551.287720][T20810] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode [ 552.146323][T20852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3863'. [ 552.222819][T20852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.794542][ T5816] net_ratelimit: 11 callbacks suppressed [ 552.794562][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.808837][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.816990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.825114][ T8772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.833554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.912197][T20884] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3868'. [ 553.005860][T20887] xt_hl: Unknown Hop Limit match mode: 206 [ 553.172287][T20891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3870'. [ 553.202797][T20894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3870'. [ 553.862242][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.871302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.880994][T20792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.893213][T16995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.901774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.099956][T20925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3872'. [ 554.108970][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3872'. [ 554.231610][T20925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3872'. [ 554.280814][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3872'. [ 554.328828][T20938] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 554.389284][T20925] netlink: 13672 bytes leftover after parsing attributes in process `syz.1.3872'. [ 554.573907][T20948] tipc: Started in network mode [ 554.618994][T20948] tipc: Node identity 6edae4f30675, cluster identity 4711 [ 554.626337][T20948] tipc: Enabled bearer , priority 0 [ 554.633873][T20956] syzkaller0: entered promiscuous mode [ 554.658316][T20956] syzkaller0: entered allmulticast mode [ 554.678229][T20953] netlink: 'syz.1.3879': attribute type 1 has an invalid length. [ 554.689128][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3879'. [ 554.761405][T20948] tipc: Resetting bearer [ 554.774098][T20943] tipc: Resetting bearer [ 554.955904][T20943] tipc: Disabling bearer [ 555.478298][T20995] tipc: Started in network mode [ 555.488779][T20995] tipc: Node identity ac14140f, cluster identity 4711 [ 555.510972][T20995] tipc: New replicast peer: 255.255.255.255 [ 555.517946][T20995] tipc: Enabled bearer , priority 10 [ 555.985167][T21025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3897'. [ 556.023966][T21029] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3898'. [ 556.043289][T21031] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 556.195453][T21029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3898'. [ 556.555326][ T8772] tipc: Node number set to 2886997007 [ 557.151875][T21088] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3913'. [ 557.162452][T21088] syzkaller0: entered promiscuous mode [ 557.167926][T21088] syzkaller0: entered allmulticast mode [ 557.488936][T21102] netlink: 'syz.2.3917': attribute type 5 has an invalid length. [ 557.702896][T21109] bond0: Error: Cannot enslave bond to itself. [ 557.762958][T17005] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 557.971190][T16990] net_ratelimit: 13 callbacks suppressed [ 557.971211][T16990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.025491][ T8772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.034059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.323699][T21157] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:21 [ 558.359125][T21154] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 558.381292][T21154] bond4 (unregistering): Released all slaves [ 558.513930][T21165] x_tables: duplicate underflow at hook 2 [ 559.101421][ T8772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.110526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.152278][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.161242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.223283][T21201] __nla_validate_parse: 9 callbacks suppressed [ 559.223303][T21201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3940'. [ 559.446238][T21203] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3939'. [ 559.478208][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3939'. [ 559.484478][T21218] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3945'. [ 559.756845][T21232] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3949'. [ 559.928270][T21232] xfrm1: entered allmulticast mode [ 559.934463][T21241] netlink: 'syz.0.3950': attribute type 21 has an invalid length. [ 559.942317][T21241] IPv6: NLM_F_CREATE should be specified when creating new route [ 559.947997][ T5648] Bluetooth: hci4: command 0x0406 tx timeout [ 559.961684][T21241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.968938][T21241] IPv6: NLM_F_CREATE should be set when creating new route [ 559.976223][T21241] IPv6: NLM_F_CREATE should be set when creating new route [ 559.983481][T21241] IPv6: NLM_F_CREATE should be set when creating new route [ 560.227625][ T8772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.236723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.353939][T21259] bridge_slave_0: left allmulticast mode [ 560.381616][T21259] bridge_slave_0: left promiscuous mode [ 560.387831][T21259] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.406500][T21259] bridge_slave_1: left allmulticast mode [ 560.412199][T21259] bridge_slave_1: left promiscuous mode [ 560.423074][T21259] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.466666][T21259] bond0: (slave bond_slave_0): Releasing backup interface [ 560.479391][T21259] bond0: (slave bond_slave_1): Releasing backup interface [ 560.495745][T21259] team0: Port device team_slave_0 removed [ 560.509235][T21259] team0: Port device team_slave_1 removed [ 560.517015][T21259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.524539][T21259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.532981][T21259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.540363][T21259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.548981][T21259] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 561.039944][T21289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3968'. [ 561.065328][T21293] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20002 [ 561.188708][T21299] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3971'. [ 561.609818][T21314] netlink: 3868 bytes leftover after parsing attributes in process `syz.0.3978'. [ 561.725522][T21319] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3980'. [ 561.774733][T21321] team_slave_1: entered promiscuous mode [ 561.785412][T21321] team0: Port device team_slave_1 removed [ 561.812163][T21317] netlink: 'syz.0.3979': attribute type 1 has an invalid length. [ 561.866629][T21317] 8021q: adding VLAN 0 to HW filter on device bond5 [ 561.904438][T21317] bond5: (slave geneve3): making interface the new active one [ 561.916845][T21317] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 562.043654][T21330] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3983'. [ 562.372824][T21351] ip6gre1: entered allmulticast mode [ 562.751983][T21378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 563.071259][T17014] net_ratelimit: 15 callbacks suppressed [ 563.071276][T17014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.130264][T17014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.341922][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.354666][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.401496][ T8772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.409828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.561834][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.222362][T17005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.422074][ T8772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.431064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.021551][T21330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.731744][T21414] __nla_validate_parse: 4 callbacks suppressed [ 565.731766][T21414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4008'. [ 565.877642][T21419] netlink: 'syz.3.4005': attribute type 1 has an invalid length. [ 565.887321][T21418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4007'. [ 566.037787][T21423] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4009'. [ 566.049446][T21423] nft_compat: unsupported protocol 0 [ 566.226126][T21433] IPv6: NLM_F_REPLACE set, but no existing node found! [ 566.721239][T21447] bond3: peer notification delay (25) is not a multiple of miimon (28933), value rounded to 0 ms [ 566.731887][T21447] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 566.763038][T21447] bond3 (unregistering): Released all slaves [ 566.959250][T21471] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 567.317599][T21489] netlink: 'syz.1.4028': attribute type 1 has an invalid length. [ 567.512599][T21489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 567.573787][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4032'. [ 567.582801][T21484] bond1: (slave ip6gretap1): making interface the new active one [ 567.623735][T21484] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 567.792993][T21513] xt_policy: too many policy elements [ 567.852874][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4037'. [ 567.900341][T21518] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4037'. [ 567.920688][T21521] netlink: 'syz.4.4038': attribute type 4 has an invalid length. [ 567.955983][T21521] netlink: 'syz.4.4038': attribute type 4 has an invalid length. [ 568.083771][T21528] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.115281][T21530] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4040'. [ 568.461255][T21543] netlink: 'syz.3.4047': attribute type 4 has an invalid length. [ 568.609399][ T5753] rB speed is unknown, defaulting to 1000 [ 568.642102][ T5753] sy2: Port: 1 Link DOWN [ 568.686293][ T5753] net_ratelimit: 20 callbacks suppressed [ 568.686313][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.701089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.724007][T21556] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4050'. [ 568.766272][T21552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'. [ 568.796666][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.974774][T21561] openvswitch: netlink: Invalid VLAN frame [ 569.021612][T17005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.053423][T21575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4054'. [ 569.177820][T21577] 0: renamed from hsr0 (while UP) [ 569.194420][T21577] 0: entered allmulticast mode [ 569.199949][T21577] hsr_slave_0: entered allmulticast mode [ 569.249463][T21577] hsr_slave_1: entered allmulticast mode [ 569.255806][T21577] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 569.299213][T21581] dvmrp0: entered allmulticast mode [ 569.511960][T21605] netlink: 'syz.4.4061': attribute type 1 has an invalid length. [ 569.548261][T21604] netlink: 'syz.4.4061': attribute type 1 has an invalid length. [ 569.738543][T21604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 569.754454][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.763377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.810363][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.818798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.333077][ T139] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.360129][ T139] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.548030][T21641] netlink: 'syz.0.4071': attribute type 2 has an invalid length. [ 570.566100][T21641] Bluetooth: MGMT ver 1.23 [ 571.189611][T21668] __nla_validate_parse: 8 callbacks suppressed [ 571.189632][T21668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4082'. [ 571.236628][T21668] nftables ruleset with unbound chain [ 571.286138][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4083'. [ 571.456868][T21680] tipc: Started in network mode [ 571.469631][T21680] tipc: Node identity ac14140f, cluster identity 4711 [ 571.491003][T21680] tipc: New replicast peer: 255.255.255.255 [ 571.519106][T21680] tipc: Enabled bearer , priority 10 [ 571.673164][T21693] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4087'. [ 571.823659][T21699] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4093'. [ 571.851610][T21699] netlink: 'syz.4.4093': attribute type 1 has an invalid length. [ 571.938574][T21699] 8021q: adding VLAN 0 to HW filter on device bond5 [ 571.989004][T21712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4095'. [ 572.041820][T21712] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 572.063083][T21712] macvlan2: entered promiscuous mode [ 572.068454][T21712] macvlan2: entered allmulticast mode [ 572.075824][T21712] bond6: (slave macvlan2): Error -98 calling set_mac_address [ 572.144285][T21715] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 572.511041][ T8772] tipc: Node number set to 2886997007 [ 572.637740][T21742] FAULT_INJECTION: forcing a failure. [ 572.637740][T21742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.656701][T21742] CPU: 1 UID: 0 PID: 21742 Comm: syz.4.4104 Not tainted syzkaller #0 PREEMPT(full) [ 572.656729][T21742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 572.656741][T21742] Call Trace: [ 572.656812][T21742] [ 572.656872][T21742] dump_stack_lvl+0xe8/0x150 [ 572.656992][T21742] should_fail_ex+0x412/0x560 [ 572.657095][T21742] _copy_to_iter+0x1e4/0x17d0 [ 572.657160][T21742] ? mptcp_release_cb+0x789/0x940 [ 572.657288][T21742] ? __pfx__copy_to_iter+0x10/0x10 [ 572.657315][T21742] ? aa_label_sk_perm+0x532/0x6e0 [ 572.657413][T21742] __skb_datagram_iter+0x41a/0x980 [ 572.657506][T21742] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 572.657538][T21742] skb_copy_datagram_iter+0xb5/0x240 [ 572.657565][T21742] mptcp_recvmsg+0x563/0x1380 [ 572.657614][T21742] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 572.657644][T21742] ? __lock_acquire+0x6b5/0x2cf0 [ 572.657700][T21742] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 572.657749][T21742] ? security_socket_recvmsg+0x7e/0x2c0 [ 572.657790][T21742] ? __pfx_inet6_recvmsg+0x10/0x10 [ 572.657886][T21742] sock_recvmsg_nosec+0x95/0x140 [ 572.657992][T21742] ____sys_recvmsg+0x3e3/0x4a0 [ 572.658023][T21742] ? __pfx_____sys_recvmsg+0x10/0x10 [ 572.658062][T21742] ? import_iovec+0x73/0xa0 [ 572.658091][T21742] ___sys_recvmsg+0x215/0x590 [ 572.658118][T21742] ? __pfx____sys_recvmsg+0x10/0x10 [ 572.658143][T21742] ? __fget_files+0x2a/0x420 [ 572.658235][T21742] do_recvmmsg+0x334/0x800 [ 572.658267][T21742] ? __pfx_do_recvmmsg+0x10/0x10 [ 572.658302][T21742] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 572.658374][T21742] __x64_sys_recvmmsg+0x198/0x250 [ 572.658399][T21742] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 572.658431][T21742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.658477][T21742] do_syscall_64+0x174/0x580 [ 572.658517][T21742] ? trace_irq_disable+0x3b/0x140 [ 572.658556][T21742] ? clear_bhb_loop+0x40/0x90 [ 572.658581][T21742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.658599][T21742] RIP: 0033:0x7fa0afb9ce59 [ 572.658641][T21742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.658677][T21742] RSP: 002b:00007fa0b0a66028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 572.658717][T21742] RAX: ffffffffffffffda RBX: 00007fa0afe15fa0 RCX: 00007fa0afb9ce59 [ 572.658730][T21742] RDX: 0000000000000002 RSI: 0000200000001580 RDI: 0000000000000003 [ 572.658741][T21742] RBP: 00007fa0b0a66090 R08: 0000000000000000 R09: 0000000000000000 [ 572.658752][T21742] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 572.658764][T21742] R13: 00007fa0afe16038 R14: 00007fa0afe15fa0 R15: 00007ffc266bbf78 [ 572.658795][T21742] [ 573.360970][T21764] netlink: 'syz.1.4110': attribute type 1 has an invalid length. [ 573.725270][T21736] infiniband syz0: set active [ 573.730317][T21736] infiniband syz0: added bridge_slave_1 [ 573.738932][T21736] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 573.744622][T21736] infiniband syz0: Couldn't open port 1 [ 573.771858][T21736] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 573.787224][T21736] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 573.805690][T21736] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 573.914781][T21736] RDS/IB: syz0: added [ 573.930483][T17014] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 573.937608][T21736] smc: adding ib device syz0 with port count 1 [ 573.959583][T21736] smc: ib device syz0 port 1 has no pnetid [ 573.982152][ T3328] net_ratelimit: 19 callbacks suppressed [ 573.982171][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.012465][T21787] netlink: 'syz.4.4115': attribute type 12 has an invalid length. [ 574.020334][T21787] netlink: 'syz.4.4115': attribute type 1 has an invalid length. [ 574.072065][T21787] netlink: 'syz.4.4115': attribute type 2 has an invalid length. [ 574.079884][T21787] netlink: 'syz.4.4115': attribute type 3 has an invalid length. [ 574.087629][T21787] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4115'. [ 574.208975][T21792] FAULT_INJECTION: forcing a failure. [ 574.208975][T21792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.264893][T21792] CPU: 0 UID: 0 PID: 21792 Comm: syz.2.4117 Not tainted syzkaller #0 PREEMPT(full) [ 574.264930][T21792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.264941][T21792] Call Trace: [ 574.264949][T21792] [ 574.264958][T21792] dump_stack_lvl+0xe8/0x150 [ 574.264989][T21792] should_fail_ex+0x412/0x560 [ 574.265018][T21792] _copy_to_iter+0x1e4/0x17d0 [ 574.265056][T21792] ? mptcp_release_cb+0x789/0x940 [ 574.265079][T21792] ? __pfx__copy_to_iter+0x10/0x10 [ 574.265105][T21792] ? aa_label_sk_perm+0x532/0x6e0 [ 574.265144][T21792] __skb_datagram_iter+0x41a/0x980 [ 574.265169][T21792] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 574.265202][T21792] skb_copy_datagram_iter+0xb5/0x240 [ 574.265229][T21792] mptcp_recvmsg+0x563/0x1380 [ 574.265277][T21792] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 574.265306][T21792] ? __lock_acquire+0x6b5/0x2cf0 [ 574.265333][T21792] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 574.265357][T21792] ? security_socket_recvmsg+0x7e/0x2c0 [ 574.265379][T21792] ? __pfx_inet6_recvmsg+0x10/0x10 [ 574.265405][T21792] sock_recvmsg_nosec+0x95/0x140 [ 574.265434][T21792] ____sys_recvmsg+0x3e3/0x4a0 [ 574.265467][T21792] ? __pfx_____sys_recvmsg+0x10/0x10 [ 574.265510][T21792] ? import_iovec+0x73/0xa0 [ 574.265538][T21792] ___sys_recvmsg+0x215/0x590 [ 574.265566][T21792] ? __pfx____sys_recvmsg+0x10/0x10 [ 574.265592][T21792] ? __fget_files+0x2a/0x420 [ 574.265653][T21792] do_recvmmsg+0x334/0x800 [ 574.265684][T21792] ? __pfx_do_recvmmsg+0x10/0x10 [ 574.265719][T21792] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 574.265762][T21792] __x64_sys_recvmmsg+0x198/0x250 [ 574.265787][T21792] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 574.265818][T21792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.265840][T21792] do_syscall_64+0x174/0x580 [ 574.265860][T21792] ? trace_irq_disable+0x3b/0x140 [ 574.265887][T21792] ? clear_bhb_loop+0x40/0x90 [ 574.265918][T21792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.265937][T21792] RIP: 0033:0x7f9acc39ce59 [ 574.265956][T21792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.265971][T21792] RSP: 002b:00007f9acd258028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 574.265993][T21792] RAX: ffffffffffffffda RBX: 00007f9acc615fa0 RCX: 00007f9acc39ce59 [ 574.266006][T21792] RDX: 0000000000000002 RSI: 0000200000001580 RDI: 0000000000000003 [ 574.266018][T21792] RBP: 00007f9acd258090 R08: 0000000000000000 R09: 0000000000000000 [ 574.266030][T21792] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 574.266041][T21792] R13: 00007f9acc616038 R14: 00007f9acc615fa0 R15: 00007ffe21cda248 [ 574.266075][T21792] [ 574.280453][T21796] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4118'. [ 574.515611][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.603326][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.611837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.646711][T21797] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4118'. [ 574.845405][T21810] netlink: 'syz.4.4124': attribute type 11 has an invalid length. [ 575.193677][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.202708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.420756][T17014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.782476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.831669][T21830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4129'. [ 575.978813][T21834] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 576.005852][T21834] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 576.027819][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4131'. [ 576.267477][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.276592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.627636][T21770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.830548][T21865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4136'. [ 576.895606][T21872] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4139'. [ 576.903674][T21865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4136'. [ 577.162614][T21881] syzkaller0: entered promiscuous mode [ 577.171728][T21881] syzkaller0: entered allmulticast mode [ 577.238547][T21887] netlink: 'syz.1.4143': attribute type 2 has an invalid length. [ 577.246350][T21887] netlink: 'syz.1.4143': attribute type 2 has an invalid length. [ 577.371319][T21897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4147'. [ 577.501103][T21906] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4149'. [ 577.538962][T21909] netlink: 'syz.2.4145': attribute type 268 has an invalid length. [ 577.552907][T21908] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4151'. [ 577.594876][T21908] syzkaller0: entered promiscuous mode [ 577.603769][T21908] syzkaller0: entered allmulticast mode [ 577.842977][T21923] netlink: 'syz.1.4154': attribute type 4 has an invalid length. [ 578.002508][T21925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4155'. [ 578.211467][T21940] netem: change failed [ 578.445818][T21952] FAULT_INJECTION: forcing a failure. [ 578.445818][T21952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.459136][T21952] CPU: 1 UID: 0 PID: 21952 Comm: syz.1.4161 Not tainted syzkaller #0 PREEMPT(full) [ 578.459163][T21952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.459174][T21952] Call Trace: [ 578.459182][T21952] [ 578.459190][T21952] dump_stack_lvl+0xe8/0x150 [ 578.459218][T21952] should_fail_ex+0x412/0x560 [ 578.459247][T21952] _copy_to_iter+0x1e4/0x17d0 [ 578.459283][T21952] ? process_measurement+0x7ce/0x1c80 [ 578.459408][T21952] ? __pfx__copy_to_iter+0x10/0x10 [ 578.459432][T21952] ? up_write+0x1ab/0x410 [ 578.459459][T21952] ? aa_label_sk_perm+0x532/0x6e0 [ 578.459497][T21952] __skb_datagram_iter+0x41a/0x980 [ 578.459523][T21952] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 578.459556][T21952] skb_copy_datagram_iter+0xb5/0x240 [ 578.459583][T21952] mptcp_recvmsg+0x563/0x1380 [ 578.459635][T21952] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 578.459664][T21952] ? __lock_acquire+0x6b5/0x2cf0 [ 578.459683][T21952] ? aa_sock_msg_perm+0xf1/0x1b0 [ 578.459732][T21952] ? inet6_recvmsg+0x10a/0x490 [ 578.459760][T21952] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 578.459785][T21952] ? security_socket_recvmsg+0x7e/0x2c0 [ 578.459806][T21952] ? __pfx_inet6_recvmsg+0x10/0x10 [ 578.459831][T21952] sock_recvmsg+0xfa/0x1b0 [ 578.459861][T21952] ____sys_recvmsg+0x1e6/0x4a0 [ 578.459893][T21952] ? __pfx_____sys_recvmsg+0x10/0x10 [ 578.459933][T21952] ? import_iovec+0x73/0xa0 [ 578.459962][T21952] ___sys_recvmsg+0x215/0x590 [ 578.459990][T21952] ? __pfx____sys_recvmsg+0x10/0x10 [ 578.460016][T21952] ? __fget_files+0x2a/0x420 [ 578.460061][T21952] ? __fget_files+0x3a0/0x420 [ 578.460098][T21952] do_recvmmsg+0x334/0x800 [ 578.460129][T21952] ? __pfx_do_recvmmsg+0x10/0x10 [ 578.460165][T21952] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 578.460209][T21952] __x64_sys_recvmmsg+0x198/0x250 [ 578.460235][T21952] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 578.460266][T21952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.460298][T21952] do_syscall_64+0x174/0x580 [ 578.460318][T21952] ? trace_irq_disable+0x3b/0x140 [ 578.460346][T21952] ? clear_bhb_loop+0x40/0x90 [ 578.460371][T21952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.460390][T21952] RIP: 0033:0x7f782059ce59 [ 578.460411][T21952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.460426][T21952] RSP: 002b:00007f78214f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 578.460447][T21952] RAX: ffffffffffffffda RBX: 00007f7820815fa0 RCX: 00007f782059ce59 [ 578.460460][T21952] RDX: 0000000000000002 RSI: 0000200000001580 RDI: 0000000000000003 [ 578.460471][T21952] RBP: 00007f78214f9090 R08: 0000000000000000 R09: 0000000000000000 [ 578.460481][T21952] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 578.460493][T21952] R13: 00007f7820816038 R14: 00007f7820815fa0 R15: 00007ffd497f7658 [ 578.460527][T21952] [ 579.017194][T21964] netlink: 516 bytes leftover after parsing attributes in process `syz.0.4165'. [ 579.044362][ T3328] net_ratelimit: 13 callbacks suppressed [ 579.044384][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.059039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.083213][T21966] Cannot find set identified by id 65534 to match [ 579.305260][ T3328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.479573][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.488625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.499610][T21976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4169'. [ 579.502525][T21973] x_tables: duplicate underflow at hook 2 [ 579.509047][T21976] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4169'. [ 579.694101][ T8772] IPVS: starting estimator thread 0... [ 579.850988][T21987] IPVS: using max 23 ests per chain, 55200 per kthread [ 580.307362][T17005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.317102][T17005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.325501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.413225][T17005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.495331][T22007] netlink: 'syz.0.4177': attribute type 5 has an invalid length. [ 580.593697][T22015] netlink: 'syz.1.4180': attribute type 10 has an invalid length. [ 580.654878][T22015] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.709273][T22015] bond0: (slave team0): Enslaving as an active interface with an up link [ 580.890110][T22027] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 581.165422][T22048] netlink: 'syz.0.4188': attribute type 10 has an invalid length. [ 581.180670][T22048] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 581.225974][T22048] IPv6: NLM_F_CREATE should be specified when creating new route [ 581.280274][T22052] netlink: 'syz.3.4190': attribute type 2 has an invalid length. [ 581.366458][T22039] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 581.387782][T22039] batman_adv: batadv0: Adding interface: wlan0 [ 581.404166][T22039] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.451697][T22039] batman_adv: batadv0: Interface activated: wlan0 [ 581.959031][T22083] __nla_validate_parse: 8 callbacks suppressed [ 581.959051][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4199'. [ 582.059128][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4200'. [ 582.195534][T22102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4204'. [ 582.662250][T22078] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 582.680596][T22078] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 582.730783][T22078] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 582.736747][T22078] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 582.773339][T22078] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 582.788996][T22078] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 582.827843][T22078] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 582.833806][T22078] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 582.847689][T22078] batman_adv: batadv0: Interface deactivated: wlan0 [ 582.932967][T22078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 582.946132][T22078] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 583.197573][T22158] netlink: 1116 bytes leftover after parsing attributes in process `syz.2.4215'. [ 583.491895][T22167] IPv6: NLM_F_CREATE should be specified when creating new route [ 583.500914][T22167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.508154][T22167] IPv6: NLM_F_CREATE should be set when creating new route [ 583.517567][T22167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.524810][T22167] IPv6: NLM_F_CREATE should be set when creating new route [ 583.539326][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4221'. [ 583.612280][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4221'. [ 583.647292][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4221'. [ 583.657746][T22179] netlink: 'syz.2.4222': attribute type 1 has an invalid length. [ 583.666589][ T47] rB speed is unknown, defaulting to 1000 [ 583.709231][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4221'. [ 583.729357][ T47] sy2: Port: 1 Link ACTIVE [ 583.742231][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4221'. [ 583.766938][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4221'. [ 583.843228][T22172] bond3: (slave gretap1): making interface the new active one [ 583.852549][T22172] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 584.526467][T22217] netlink: 'syz.1.4233': attribute type 39 has an invalid length. [ 584.623741][T22222] netlink: 'syz.4.4235': attribute type 10 has an invalid length. [ 584.637234][ T5743] net_ratelimit: 13 callbacks suppressed [ 584.637264][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.652357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.714613][T22225] tipc: Trying to set illegal importance in message [ 584.751813][T17005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.760887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.925409][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.097749][T22256] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.105032][T22256] bridge0: port 1(bridge_slave_0) entered listening state [ 585.125791][T22258] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 585.427649][T22267] veth0_macvtap: left promiscuous mode [ 586.125264][T22300] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 586.428735][T22317] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 586.447066][T22317] bond8: (slave lo): Enslaving as an active interface with an up link [ 586.457883][T22317] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 586.976613][T22344] __nla_validate_parse: 35 callbacks suppressed [ 586.976636][T22344] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4270'. [ 586.999459][T22345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4271'. [ 587.229357][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4274'. [ 587.246423][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4274'. [ 587.261715][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4274'. [ 587.293190][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4274'. [ 587.303365][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4274'. [ 587.313457][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4274'. [ 587.323596][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4274'. [ 587.333683][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4274'. [ 587.650339][T22362] bond2: option xmit_hash_policy: invalid value (64) [ 587.659442][T22362] bond2 (unregistering): Released all slaves [ 587.680008][T22368] netlink: 'syz.3.4279': attribute type 4 has an invalid length. [ 587.939799][T22379] netlink: 'syz.3.4284': attribute type 8 has an invalid length. [ 588.329584][T22396] netlink: 'syz.0.4292': attribute type 1 has an invalid length. [ 588.345124][T22396] netlink: 'syz.0.4292': attribute type 1 has an invalid length. [ 588.353967][T22396] netlink: 'syz.0.4292': attribute type 8 has an invalid length. [ 588.368816][T22399] FAULT_INJECTION: forcing a failure. [ 588.368816][T22399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.384103][T22399] CPU: 1 UID: 0 PID: 22399 Comm: syz.3.4294 Not tainted syzkaller #0 PREEMPT(full) [ 588.384130][T22399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 588.384141][T22399] Call Trace: [ 588.384149][T22399] [ 588.384158][T22399] dump_stack_lvl+0xe8/0x150 [ 588.384189][T22399] should_fail_ex+0x412/0x560 [ 588.384219][T22399] _copy_from_user+0x2d/0xb0 [ 588.384321][T22399] ___sys_sendmsg+0x1c6/0x360 [ 588.384342][T22399] ? __lock_acquire+0x6b5/0x2cf0 [ 588.384370][T22399] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.384431][T22399] ? __fget_files+0x2a/0x420 [ 588.384455][T22399] ? __fget_files+0x3a0/0x420 [ 588.384491][T22399] __x64_sys_sendmsg+0x1bd/0x2a0 [ 588.384515][T22399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.384547][T22399] ? __pfx_ksys_write+0x10/0x10 [ 588.384596][T22399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.384618][T22399] do_syscall_64+0x174/0x580 [ 588.384640][T22399] ? trace_irq_disable+0x3b/0x140 [ 588.384670][T22399] ? clear_bhb_loop+0x40/0x90 [ 588.384696][T22399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.384716][T22399] RIP: 0033:0x7f129c19ce59 [ 588.384736][T22399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.384753][T22399] RSP: 002b:00007f129d062028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.384775][T22399] RAX: ffffffffffffffda RBX: 00007f129c415fa0 RCX: 00007f129c19ce59 [ 588.384788][T22399] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000003 [ 588.384800][T22399] RBP: 00007f129d062090 R08: 0000000000000000 R09: 0000000000000000 [ 588.384812][T22399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.384824][T22399] R13: 00007f129c416038 R14: 00007f129c415fa0 R15: 00007fffad525428 [ 588.384858][T22399] [ 588.657389][T22404] bond9 (unregistering): Released all slaves [ 589.169714][T22438] Bluetooth: hci1: too big key_count value 32778 [ 589.300479][T22444] xt_hashlimit: size too large, truncated to 1048576 [ 590.139869][T22488] openvswitch: netlink: Invalid VLAN frame [ 590.177441][T22490] netlink: 'syz.2.4320': attribute type 12 has an invalid length. [ 590.185309][T22490] netlink: 'syz.2.4320': attribute type 29 has an invalid length. [ 590.303650][T22493] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 590.488450][T22506] netlink: 'syz.1.4326': attribute type 4 has an invalid length. [ 590.735362][T22514] bond9: (slave gre0): Device is not bonding slave [ 590.741914][T22514] bond9: option active_slave: invalid value (gre0) [ 590.808344][T22522] netlink: 'syz.2.4332': attribute type 1 has an invalid length. [ 590.819854][T22514] bond9 (unregistering): Released all slaves [ 590.963206][T22530] bond4: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 591.107450][T22522] veth3: entered promiscuous mode [ 591.139699][T22522] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 591.235085][ T3328] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 591.238634][T22522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 591.408944][ T139] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 591.456165][T22555] sctp: [Deprecated]: syz.1.4339 (pid 22555) Use of int in max_burst socket option. [ 591.456165][T22555] Use struct sctp_assoc_value instead [ 591.473723][T22552] bond0: (slave bond_slave_0): Releasing backup interface [ 591.833883][T22578] netlink: 'syz.0.4348': attribute type 10 has an invalid length. [ 591.868989][T22578] ipvlan0: entered allmulticast mode [ 591.887992][T22578] veth0_vlan: entered allmulticast mode [ 591.939934][T22578] team0: Device ipvlan0 failed to register rx_handler [ 591.959189][T22587] __nla_validate_parse: 73 callbacks suppressed [ 591.959208][T22587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4352'. [ 592.093327][T22593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4354'. [ 592.158975][T22595] nbd: couldn't find a device at index 1 [ 592.179305][T22597] tipc: Started in network mode [ 592.217733][T22597] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 592.225096][T22597] tipc: Enabled bearer , priority 0 [ 592.349117][T22605] netlink: 'syz.2.4358': attribute type 1 has an invalid length. [ 592.374311][T22610] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 592.534180][T22623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4362'. [ 592.548463][T22623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4362'. [ 592.699093][T22637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.912790][T22646] netlink: 'syz.1.4368': attribute type 83 has an invalid length. [ 593.052398][T22651] syzkaller0: entered promiscuous mode [ 593.057996][T22651] syzkaller0: entered allmulticast mode [ 593.340384][ T47] tipc: Node number set to 11578026 [ 593.509755][T22688] tipc: Enabled bearer , priority 10 [ 593.518703][T22688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4379'. [ 593.592974][T22691] sctp: [Deprecated]: syz.2.4380 (pid 22691) Use of int in maxseg socket option. [ 593.592974][T22691] Use struct sctp_assoc_value instead [ 593.741119][T22700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4385'. [ 593.979164][T22703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4386'. [ 594.657017][ T13] team0: Port device xfrm0 removed [ 595.758333][ T13] bond1 (unregistering): Released all slaves [ 595.780117][ T13] bond0 (unregistering): (slave lo): Releasing backup interface [ 595.798745][ T13] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 595.810676][ T13] bond0 (unregistering): Released all slaves [ 595.831706][ T13] bond2 (unregistering): Released all slaves [ 595.856511][T22709] ip6gre0: entered promiscuous mode [ 595.873799][T22709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4387'. [ 595.958343][ T13] : left promiscuous mode [ 596.295998][T22745] syzkaller0: entered promiscuous mode [ 596.331103][T22745] syzkaller0: entered allmulticast mode [ 596.594888][ T13] tipc: Disabling bearer [ 596.624251][ T13] tipc: Left network mode [ 596.839475][T22766] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 597.019204][T22779] bond2: option resend_igmp: invalid value (32767) [ 597.041284][T22779] bond2: option resend_igmp: allowed values 0 - 255 [ 597.054749][T22779] bond2 (unregistering): Released all slaves [ 597.232551][T22797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4410'. [ 597.241482][T22797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4410'. [ 597.415355][T22805] ip6t_srh: unknown srh match flags 5F28 [ 597.510894][T22812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4416'. [ 597.549708][T22812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4416'. [ 597.559877][T22814] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 597.572176][T22815] xt_hashlimit: size too large, truncated to 1048576 [ 597.577004][T22814] xt_hashlimit: size too large, truncated to 1048576 [ 597.688080][T22819] netlink: 'syz.3.4418': attribute type 1 has an invalid length. [ 597.696203][T22819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4418'. [ 597.709469][T22819] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4418'. [ 597.722888][T22819] netlink: 'syz.3.4418': attribute type 1 has an invalid length. [ 598.054497][T22827] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 598.193387][T22836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4423'. [ 598.259737][T22840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4426'. [ 598.334643][T22846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4427'. [ 598.350775][T22845] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4427'. [ 598.541397][T22854] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 599.014930][T22882] netlink: 'syz.2.4439': attribute type 10 has an invalid length. [ 599.030845][T22882] ipvlan0: entered allmulticast mode [ 599.044661][T22882] team0: Device ipvlan0 failed to register rx_handler [ 599.111583][T22888] vxcan1: tx drop: invalid sa for name 0x0000000200000000 [ 599.817912][T22917] : entered promiscuous mode [ 599.915892][T22925] vlan0: Device is already in use. [ 600.076851][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802d294000: rx timeout, send abort [ 600.086716][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802d294000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 600.169874][T22936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.252875][T22940] netlink: 'syz.1.4455': attribute type 23 has an invalid length. [ 600.728342][ T13] veth1_vlan: left allmulticast mode [ 600.874364][T22970] netlink: 'syz.3.4461': attribute type 3 has an invalid length. [ 600.882149][T22970] netlink: 'syz.3.4461': attribute type 2 has an invalid length. [ 601.188632][T22981] openvswitch: netlink: IP tunnel dst address not specified [ 601.734867][T22997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.746080][T22997] netlink: 'syz.1.4468': attribute type 5 has an invalid length. [ 601.760256][T22997] netlink: 'syz.1.4468': attribute type 10 has an invalid length. [ 601.783273][T22997] ipvlan0: entered allmulticast mode [ 601.788689][T22997] veth0_vlan: entered allmulticast mode [ 601.801330][T22997] team0: Device ipvlan0 failed to register rx_handler [ 601.905731][T23007] netlink: 'syz.4.4474': attribute type 1 has an invalid length. [ 601.944905][T23007] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 602.389608][T23037] __nla_validate_parse: 12 callbacks suppressed [ 602.389631][T23037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4478'. [ 605.074412][T23043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4482'. [ 605.101343][T23041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4482'. [ 605.168210][ T13] IPVS: stop unused estimator thread 0... [ 605.188168][T23049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4485'. [ 605.199374][T23041] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 605.268894][T23043] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4482'. [ 605.327306][T23043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.346786][T23059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.379401][T23043] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 605.407241][T23043] bond0 (unregistering): Released all slaves [ 605.630298][T23071] tipc: Enabled bearer , priority 28 [ 605.876053][T23089] vcan1: entered promiscuous mode [ 605.908468][T23089] vcan1: entered allmulticast mode [ 606.036671][T23097] gretap1: entered promiscuous mode [ 606.272292][T23115] tipc: New replicast peer: 255.255.255.255 [ 606.294379][T23115] tipc: Enabled bearer , priority 10 [ 606.462145][T23121] tc_dump_action: action bad kind [ 606.743880][ T47] tipc: Node number set to 1756357875 [ 607.685428][T23198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4528'. [ 607.695584][T23192] bond3: option mode: unable to set because the bond device has slaves [ 607.924559][T23211] SET target dimension over the limit! [ 607.956456][T23198] team1: entered promiscuous mode [ 607.985757][T23198] team1: entered allmulticast mode [ 608.043306][T23215] vcan0: tx address claim with different name [ 608.068365][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4535'. [ 608.262438][T23224] netlink: 'syz.4.4539': attribute type 13 has an invalid length. [ 608.419388][ T48] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 608.520325][T23246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.769317][T23253] x_tables: unsorted underflow at hook 2 [ 608.849539][T23255] netlink: 'syz.2.4547': attribute type 12 has an invalid length. [ 609.057297][T23267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4551'. [ 609.087776][T23262] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 609.104786][T23267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4551'. [ 609.117088][T23262] bond2 (unregistering): Released all slaves [ 609.137041][T23275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4550'. [ 609.176157][T23268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 609.304627][T23281] netlink: 'syz.2.4553': attribute type 13 has an invalid length. [ 609.454547][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4556'. [ 609.494422][T23301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4556'. [ 609.517575][T23294] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4556'. [ 609.724737][ T48] bond4: (slave ip6gretap0): link status up again after 0 ms [ 609.771649][T23320] SET target dimension over the limit! [ 609.791742][ T48] bond4: (slave ip6gretap0): link status up again after 0 ms [ 609.792073][T23322] vcan0: tx address claim with different name [ 609.806890][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 609.942180][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 609.982505][T23328] openvswitch: netlink: Message has 176 unknown bytes. [ 610.081279][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 610.212487][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 610.232993][T23353] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 610.314150][T23349] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 610.339056][T23349] CPU: 1 UID: 0 PID: 23349 Comm: syz.0.4572 Not tainted syzkaller #0 PREEMPT(full) [ 610.339083][T23349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 610.339095][T23349] Call Trace: [ 610.339102][T23349] [ 610.339111][T23349] dump_stack_lvl+0xe8/0x150 [ 610.339141][T23349] sysfs_warn_dup+0x8e/0xa0 [ 610.339222][T23349] sysfs_do_create_link_sd+0xc0/0x110 [ 610.339249][T23349] device_add_class_symlinks+0x1cf/0x240 [ 610.339366][T23349] device_add+0x475/0xbb0 [ 610.339390][T23349] wiphy_register+0x1dc5/0x2dc0 [ 610.339472][T23349] ? __pfx_wiphy_register+0x10/0x10 [ 610.339492][T23349] ? __pfx_netdev_run_todo+0x10/0x10 [ 610.339545][T23349] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 610.339627][T23349] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 610.339736][T23349] ieee80211_register_hw+0x3d82/0x4a70 [ 610.339797][T23349] ? ieee80211_register_hw+0x19b1/0x4a70 [ 610.339854][T23349] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 610.339882][T23349] ? __asan_memset+0x22/0x50 [ 610.339927][T23349] ? __hrtimer_setup+0x1b7/0x260 [ 610.339962][T23349] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 610.340036][T23349] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 610.340127][T23349] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 610.340152][T23349] ? kstrndup+0xbf/0x160 [ 610.340197][T23349] hwsim_new_radio_nl+0xf6a/0x1c00 [ 610.340252][T23349] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 610.340292][T23349] ? rcu_is_watching+0x15/0xb0 [ 610.340316][T23349] ? trace_kmalloc+0x2a/0xf0 [ 610.340365][T23349] ? __nla_parse+0x40/0x60 [ 610.340396][T23349] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 610.340454][T23349] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 610.340485][T23349] genl_family_rcv_msg_doit+0x22a/0x330 [ 610.340516][T23349] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 610.340553][T23349] ? bpf_lsm_capable+0x9/0x20 [ 610.340572][T23349] ? security_capable+0x7e/0x2c0 [ 610.340650][T23349] genl_rcv_msg+0x61c/0x7a0 [ 610.340682][T23349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.340705][T23349] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 610.340751][T23349] netlink_rcv_skb+0x232/0x4b0 [ 610.340801][T23349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.340822][T23349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.340867][T23349] ? down_read+0x270/0x2e0 [ 610.340885][T23349] ? genl_rcv+0xd/0x40 [ 610.340908][T23349] genl_rcv+0x28/0x40 [ 610.340927][T23349] netlink_unicast+0x75c/0x8e0 [ 610.340968][T23349] netlink_sendmsg+0x813/0xb40 [ 610.340998][T23349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.341020][T23349] ? aa_sock_msg_perm+0xf1/0x1b0 [ 610.341059][T23349] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 610.341088][T23349] ____sys_sendmsg+0x972/0x9f0 [ 610.341108][T23349] ? __might_fault+0xaf/0x130 [ 610.341139][T23349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.341168][T23349] ? import_iovec+0x73/0xa0 [ 610.341195][T23349] ___sys_sendmsg+0x2a5/0x360 [ 610.341214][T23349] ? __lock_acquire+0x6b5/0x2cf0 [ 610.341240][T23349] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.341268][T23349] ? futex_wait+0x2a2/0x390 [ 610.341335][T23349] ? __fget_files+0x2a/0x420 [ 610.341357][T23349] ? __fget_files+0x3a0/0x420 [ 610.341392][T23349] __x64_sys_sendmsg+0x1bd/0x2a0 [ 610.341415][T23349] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.341447][T23349] ? rcu_is_watching+0x15/0xb0 [ 610.341480][T23349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.341502][T23349] do_syscall_64+0x174/0x580 [ 610.341522][T23349] ? trace_irq_disable+0x3b/0x140 [ 610.341548][T23349] ? clear_bhb_loop+0x40/0x90 [ 610.341573][T23349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.341592][T23349] RIP: 0033:0x7f0209d9ce59 [ 610.341611][T23349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.341627][T23349] RSP: 002b:00007f020ad12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.341647][T23349] RAX: ffffffffffffffda RBX: 00007f020a015fa0 RCX: 00007f0209d9ce59 [ 610.341660][T23349] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 610.341670][T23349] RBP: 00007f0209e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 610.341681][T23349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.341692][T23349] R13: 00007f020a016038 R14: 00007f020a015fa0 R15: 00007ffed7212668 [ 610.341727][T23349] [ 610.771255][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 610.831777][T23367] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 610.937811][T23372] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4578'. [ 610.959246][T23372] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4578'. [ 611.011665][T23372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 611.044836][T23368] xt_cgroup: invalid path, errno=-2 [ 611.464649][T23375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.498855][T23375] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.804542][T23375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.815166][T23375] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.960679][T23375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.991268][T23375] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.183632][T23375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.209727][T23375] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.411927][ T1172] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.420285][ T1172] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.495974][ T1172] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.505130][ T1172] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.584057][ T1172] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.595470][ T1172] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.623068][T23449] tcf_pedit_act: 22 callbacks suppressed [ 612.623089][T23449] tc action pedit 'at' offset -4096 out of bounds [ 612.630338][ T1172] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.637308][T23449] tc action pedit 'at' offset -4096 out of bounds [ 612.651393][T23449] tc action pedit 'at' offset -4096 out of bounds [ 612.657814][T23449] tc action pedit 'at' offset -4096 out of bounds [ 612.664260][T23449] tc action pedit 'at' offset -4096 out of bounds [ 612.670691][T23449] tc action pedit 'at' offset -4096 out of bounds [ 612.677138][T23449] tc action pedit 'at' offset -4096 out of bounds [ 612.683586][T23449] tc action pedit 'at' offset -4096 out of bounds [ 612.689987][T23449] tc action pedit 'at' offset -4096 out of bounds [ 612.696406][T23449] tc action pedit 'at' offset -4096 out of bounds [ 612.704146][ T1172] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.978489][T23460] __nla_validate_parse: 6 callbacks suppressed [ 612.978510][T23460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4607'. [ 613.156254][T23460] 8021q: adding VLAN 0 to HW filter on device bond7 [ 613.183132][T23460] bond7 (unregistering): Released all slaves [ 613.225669][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4613'. [ 613.238009][T23477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4613'. [ 613.248352][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4613'. [ 613.262840][T23477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4613'. [ 613.364390][T23473] syz_tun: left promiscuous mode [ 613.401524][T23473] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.427741][T23473] tipc: Resetting bearer [ 613.541841][T23499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4616'. [ 613.564748][T23499] netlink: 'syz.2.4616': attribute type 7 has an invalid length. [ 613.589752][T23499] netlink: 'syz.2.4616': attribute type 8 has an invalid length. [ 613.592735][T23473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.606779][T23499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4616'. [ 613.658296][T23473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.704846][T23473] 0: left allmulticast mode [ 613.709666][T23473] hsr_slave_0: left allmulticast mode [ 613.718618][T23473] hsr_slave_1: left allmulticast mode [ 613.762108][T23473] ipvlan0: left allmulticast mode [ 613.767472][T23473] veth0_vlan: left allmulticast mode [ 613.798147][T23473] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 613.846667][T23473] vlan2: left promiscuous mode [ 613.859193][T23473] bridge0: left promiscuous mode [ 613.865713][T23473] veth3: left promiscuous mode [ 613.871160][T23473] veth3: left allmulticast mode [ 613.894786][T23473] geneve2: left promiscuous mode [ 613.899822][T23473] geneve2: left allmulticast mode [ 613.950676][ T3328] net_ratelimit: 12 callbacks suppressed [ 613.950699][ T3328] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 613.992671][ T48] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.006077][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.039772][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 614.081868][ T3328] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 614.104465][ T48] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.138299][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.166632][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 614.195242][ T48] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.217822][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.239404][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 614.270817][ T48] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.281217][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.300614][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 614.330785][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 614.355695][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4622'. [ 614.501837][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4625'. [ 614.510901][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 614.540943][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4625'. [ 614.579226][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.589906][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.610252][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.651591][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.684407][ T3328] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 614.801002][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 614.922908][ T3328] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 615.052007][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 615.200631][T17014] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 615.318741][T23594] bond2: entered promiscuous mode [ 615.324509][T23594] bond2: entered allmulticast mode [ 615.333851][T23594] netlink: 'syz.3.4640': attribute type 4 has an invalid length. [ 615.342230][T17014] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 615.358982][ T5753] rB speed is unknown, defaulting to 1000 [ 615.366722][T23594] netlink: 'syz.3.4640': attribute type 4 has an invalid length. [ 615.371573][ T5753] sy2: Port: 1 Link DOWN [ 615.385987][ T5753] rB speed is unknown, defaulting to 1000 [ 615.394255][ T5753] sy2: Port: 1 Link ACTIVE [ 615.394659][T23603] veth0: entered promiscuous mode [ 615.449998][T23596] veth0: left promiscuous mode [ 615.595700][T23615] bridge0: entered promiscuous mode [ 615.601164][T23615] bridge0: entered allmulticast mode [ 616.798464][T23682] netlink: 'syz.3.4669': attribute type 4 has an invalid length. [ 616.824739][T23684] netlink: 'syz.3.4669': attribute type 4 has an invalid length. [ 616.852803][ T5743] rB speed is unknown, defaulting to 1000 [ 616.867647][T23493] rB speed is unknown, defaulting to 1000 [ 617.018571][T23696] netlink: 'syz.3.4673': attribute type 30 has an invalid length. [ 617.593174][T23724] bond7: (slave ip6gre0): Device is not bonding slave [ 617.606978][T23724] bond7: option active_slave: invalid value (ip6gre0) [ 617.653419][T23724] bond7 (unregistering): Released all slaves [ 617.774434][T23744] netlink: 'syz.1.4687': attribute type 29 has an invalid length. [ 617.786465][T23744] netlink: 'syz.1.4687': attribute type 29 has an invalid length. [ 617.807875][T23744] netlink: 'syz.1.4687': attribute type 32 has an invalid length. [ 618.157432][T23769] __nla_validate_parse: 23 callbacks suppressed [ 618.157454][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4694'. [ 618.159921][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4695'. [ 618.331239][T23764] vlan0 (unregistering): left allmulticast mode [ 618.350587][T23764] vlan0 (unregistering): left promiscuous mode [ 619.151635][T23769] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 619.159013][ T48] net_ratelimit: 25 callbacks suppressed [ 619.159034][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 619.301317][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 619.341527][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 619.490622][T16990] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 619.503503][T23809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4702'. [ 619.631100][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 619.684090][T23820] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4705'. [ 619.710330][T23820] openvswitch: netlink: Flow actions attr not present in new flow. [ 619.753646][T23820] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4705'. [ 619.767266][T23817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4704'. [ 619.776465][T16990] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 619.877290][T23831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4704'. [ 619.991683][T23817] 8021q: adding VLAN 0 to HW filter on device bond6 [ 620.010691][T17014] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 620.160676][T16990] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 620.209916][T23853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4714'. [ 620.248878][T23855] tipc: Enabled bearer , priority 0 [ 620.283020][T23855] syzkaller0: entered promiscuous mode [ 620.290187][T23855] syzkaller0: entered allmulticast mode [ 620.344699][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 620.596902][T23852] tipc: Resetting bearer [ 620.719190][T23852] tipc: Disabling bearer [ 620.778130][T23878] gretap1: entered promiscuous mode [ 620.799980][T23878] batman_adv: batadv0: Adding interface: gretap1 [ 620.826963][T23878] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.860921][T23878] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 620.947456][T23890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 621.127122][T23895] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4728'. [ 621.540885][ C0] syz_tun: tun_net_xmit 118 [ 621.545051][T23920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4738'. [ 621.639172][ T5648] block nbd3: Receive control failed (result -1) [ 622.229971][T23954] syzkaller1: entered promiscuous mode [ 622.244080][T23954] syzkaller1: entered allmulticast mode [ 622.580960][ C0] syz_tun: tun_net_xmit 118 [ 622.628429][T23972] validate_nla: 1 callbacks suppressed [ 622.628457][T23972] netlink: 'syz.1.4753': attribute type 2 has an invalid length. [ 622.830313][T23982] netlink: 'syz.3.4750': attribute type 29 has an invalid length. [ 622.864890][T23982] netlink: 'syz.3.4750': attribute type 29 has an invalid length. [ 622.902701][T23982] netlink: 'syz.3.4750': attribute type 14 has an invalid length. [ 622.929649][T23982] netlink: 'syz.3.4750': attribute type 13 has an invalid length. [ 622.939349][T23978] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 622.968625][T23978] bridge0: entered allmulticast mode [ 622.986998][T23982] netlink: 'syz.3.4750': attribute type 11 has an invalid length. [ 623.011180][T23982] netlink: 'syz.3.4750': attribute type 11 has an invalid length. [ 623.019701][T23998] xt_l2tp: v2 doesn't support IP mode [ 623.620764][ C0] syz_tun: tun_net_xmit 118 [ 623.905893][T24058] __nla_validate_parse: 18 callbacks suppressed [ 623.905915][T24058] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4771'. [ 623.981054][T24042] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 624.027246][T24042] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.066547][T24042] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 624.084629][T24042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.107930][T24042] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 624.144058][T24042] 8021q: adding VLAN 0 to HW filter on device bond3 [ 624.167153][T24042] net_ratelimit: 27 callbacks suppressed [ 624.167173][T24042] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 624.226274][T17014] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 624.391528][T17005] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 624.530954][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 624.556835][T24090] netlink: 'syz.1.4779': attribute type 13 has an invalid length. [ 624.610297][T24094] netlink: 'syz.0.4781': attribute type 1 has an invalid length. [ 624.660992][ C0] syz_tun: tun_net_xmit 118 [ 624.811417][T24106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4783'. [ 624.878575][T24106] tipc: Enabling of bearer rejected, already enabled [ 624.921616][T17005] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 625.050346][T24120] tipc: Cannot configure node identity twice [ 625.083147][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 625.125957][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4788'. [ 625.156927][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4788'. [ 625.180645][T24123] netlink: 'syz.1.4788': attribute type 12 has an invalid length. [ 625.185949][T24129] Unsupported ieee802154 address type: 0 [ 625.205215][T24123] netlink: 'syz.1.4788': attribute type 11 has an invalid length. [ 625.226460][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 625.462567][T24146] netlink: 'syz.1.4793': attribute type 1 has an invalid length. [ 625.635148][T24153] bond7: entered promiscuous mode [ 625.643469][T24153] 8021q: adding VLAN 0 to HW filter on device bond7 [ 625.679148][T24162] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4796'. [ 625.700956][ C0] syz_tun: tun_net_xmit 118 [ 625.742738][T24175] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.4798'. [ 625.827458][T24166] 8021q: adding VLAN 0 to HW filter on device bond7 [ 625.841060][T24166] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 625.875296][T24166] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 625.937760][T24166] bond7: (slave vti0): making interface the new active one [ 625.975793][T24166] vti0: entered promiscuous mode [ 625.997797][T24166] bond7: (slave vti0): Enslaving as an active interface with an up link [ 626.030777][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 626.164388][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 626.257342][T24198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4804'. [ 626.291318][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4804'. [ 626.382308][T17005] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 626.408840][T24212] : entered promiscuous mode [ 626.553206][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 626.636770][T24219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 626.727083][T24227] bond4: (slave veth3): Enslaving as an active interface with a down link [ 626.741590][ C0] syz_tun: tun_net_xmit 118 [ 626.777012][T24219] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 626.777952][T24232] netlink: 403 bytes leftover after parsing attributes in process `syz.2.4814'. [ 626.784523][T24219] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 626.836471][T24231] tipc: Enabled bearer , priority 0 [ 626.908465][T24234] syzkaller0: entered promiscuous mode [ 626.914977][T24234] syzkaller0: entered allmulticast mode [ 626.936615][T24234] tipc: Resetting bearer [ 626.979361][T24222] tipc: Resetting bearer [ 627.053398][T24239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4816'. [ 627.235516][T24247] xt_TCPMSS: Only works on TCP SYN packets [ 627.790114][ C0] syz_tun: tun_net_xmit 118 [ 628.426285][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 628.822145][ C0] syz_tun: tun_net_xmit 118 [ 629.864339][ C0] syz_tun: tun_net_xmit 118 [ 629.910303][T24222] tipc: Disabling bearer [ 629.930569][T17011] net_ratelimit: 1 callbacks suppressed [ 629.930590][T17011] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 630.058070][T17011] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 630.201564][T17005] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 630.212864][T24286] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 630.224698][T24288] validate_nla: 4 callbacks suppressed [ 630.224718][T24288] netlink: 'syz.1.4825': attribute type 2 has an invalid length. [ 630.272856][T24293] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4826'. [ 630.287935][T24292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4829'. [ 630.410988][T17005] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 630.453268][T24297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4829'. [ 630.486293][T24292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4829'. [ 630.517916][T24292] erspan0: entered promiscuous mode [ 630.560937][T17005] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 630.681877][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 630.814092][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 630.900834][ C0] syz_tun: tun_net_xmit 118 [ 630.929190][T24323] netlink: 'syz.2.4835': attribute type 8 has an invalid length. [ 630.945083][T17005] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 630.953377][T24326] netlink: zone id is out of range [ 630.958864][T24326] netlink: zone id is out of range [ 630.983715][T24323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4835'. [ 631.061822][T24323] veth1_to_team: entered promiscuous mode [ 631.097288][T24323] gretap0: entered promiscuous mode [ 631.136015][T24323] veth1_to_team: left promiscuous mode [ 631.176095][T24323] gretap0: left promiscuous mode [ 631.205524][T24334] mac80211_hwsim hwsim52 syzkaller0: left promiscuous mode [ 631.231465][T24334] mac80211_hwsim hwsim52 syzkaller0: left allmulticast mode [ 631.424542][T24349] netlink: 'syz.4.4844': attribute type 16 has an invalid length. [ 631.441249][T24349] netlink: 'syz.4.4844': attribute type 3 has an invalid length. [ 631.465831][T24349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4844'. [ 631.502623][T24353] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4845'. [ 631.633446][T24356] netlink: 'syz.0.4846': attribute type 1 has an invalid length. [ 631.649564][T24356] netlink: 'syz.0.4846': attribute type 11 has an invalid length. [ 631.663530][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4850'. [ 631.666819][T24356] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4846'. [ 631.702519][T24360] : renamed from gretap0 (while UP) [ 631.718491][T24360] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4849'. [ 631.940928][ C0] syz_tun: tun_net_xmit 118 [ 632.155304][T24393] bond0: Caught tx_queue_len zero misconfig [ 632.178001][T24393] IPv6: sit1: Disabled Multicast RS [ 632.307233][T24400] netlink: 'syz.4.4858': attribute type 1 has an invalid length. [ 632.316942][T24400] netlink: 'syz.4.4858': attribute type 1 has an invalid length. [ 632.339188][T24400] wg2: Caught tx_queue_len zero misconfig [ 632.726696][T24419] [ 632.729090][T24419] ====================================================== [ 632.736205][T24419] WARNING: possible circular locking dependency detected [ 632.743348][T24419] syzkaller #0 Not tainted [ 632.747803][T24419] ------------------------------------------------------ [ 632.754854][T24419] syz.1.4863/24419 is trying to acquire lock: [ 632.760984][T24419] ffff88805923a218 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 632.769985][T24419] [ 632.769985][T24419] but task is already holding lock: [ 632.777357][T24419] ffff88802b69b418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 632.786848][T24419] [ 632.786848][T24419] which lock already depends on the new lock. [ 632.786848][T24419] [ 632.797254][T24419] [ 632.797254][T24419] the existing dependency chain (in reverse order) is: [ 632.806265][T24419] [ 632.806265][T24419] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 632.814154][T24419] __mutex_lock+0x1a3/0x1550 [ 632.819274][T24419] elevator_change+0x1b3/0x450 [ 632.824563][T24419] elevator_set_none+0xb5/0x140 [ 632.829940][T24419] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 632.836334][T24419] nbd_start_device+0x17f/0xb10 [ 632.841770][T24419] nbd_genl_connect+0x165b/0x1cf0 [ 632.847327][T24419] genl_family_rcv_msg_doit+0x22a/0x330 [ 632.853396][T24419] genl_rcv_msg+0x61c/0x7a0 [ 632.858421][T24419] netlink_rcv_skb+0x232/0x4b0 [ 632.863712][T24419] genl_rcv+0x28/0x40 [ 632.868213][T24419] netlink_unicast+0x75c/0x8e0 [ 632.873499][T24419] netlink_sendmsg+0x813/0xb40 [ 632.878787][T24419] ____sys_sendmsg+0x972/0x9f0 [ 632.884077][T24419] ___sys_sendmsg+0x2a5/0x360 [ 632.889272][T24419] __x64_sys_sendmsg+0x1bd/0x2a0 [ 632.894727][T24419] do_syscall_64+0x174/0x580 [ 632.899837][T24419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.906255][T24419] [ 632.906255][T24419] -> #5 (&q->q_usage_counter(io)#70){++++}-{0:0}: [ 632.914863][T24419] blk_alloc_queue+0x546/0x680 [ 632.920156][T24419] __blk_mq_alloc_disk+0x197/0x390 [ 632.925793][T24419] nbd_dev_add+0x499/0xb50 [ 632.930739][T24419] nbd_genl_connect+0x962/0x1cf0 [ 632.936203][T24419] genl_family_rcv_msg_doit+0x22a/0x330 [ 632.942271][T24419] genl_rcv_msg+0x61c/0x7a0 [ 632.947315][T24419] netlink_rcv_skb+0x232/0x4b0 [ 632.952604][T24419] genl_rcv+0x28/0x40 [ 632.957108][T24419] netlink_unicast+0x75c/0x8e0 [ 632.962394][T24419] netlink_sendmsg+0x813/0xb40 [ 632.967678][T24419] ____sys_sendmsg+0x972/0x9f0 [ 632.972961][T24419] ___sys_sendmsg+0x2a5/0x360 [ 632.978159][T24419] __x64_sys_sendmsg+0x1bd/0x2a0 [ 632.983618][T24419] do_syscall_64+0x174/0x580 [ 632.988738][T24419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.995158][T24419] [ 632.995158][T24419] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 633.002372][T24419] fs_reclaim_acquire+0x71/0x100 [ 633.007838][T24419] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 633.014172][T24419] __alloc_skb+0x1d0/0x7d0 [ 633.019165][T24419] __ip6_append_data+0x2d3c/0x3f60 [ 633.024798][T24419] ip6_append_data+0x10f/0x280 [ 633.030078][T24419] rawv6_sendmsg+0x12d3/0x18e0 [ 633.035406][T24419] ____sys_sendmsg+0x80a/0x9f0 [ 633.040688][T24419] ___sys_sendmsg+0x2a5/0x360 [ 633.045890][T24419] __x64_sys_sendmsg+0x1bd/0x2a0 [ 633.051346][T24419] do_syscall_64+0x174/0x580 [ 633.056458][T24419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.062875][T24419] [ 633.062875][T24419] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 633.070613][T24419] lock_sock_nested+0x41/0x100 [ 633.075899][T24419] inet_shutdown+0x6a/0x390 [ 633.080983][T24419] nbd_mark_nsock_dead+0x2e9/0x560 [ 633.086612][T24419] recv_work+0x1c2e/0x1d40 [ 633.091546][T24419] process_scheduled_works+0xb5d/0x1860 [ 633.097653][T24419] worker_thread+0xa53/0xfc0 [ 633.102764][T24419] kthread+0x389/0x470 [ 633.107361][T24419] ret_from_fork+0x514/0xb70 [ 633.112489][T24419] ret_from_fork_asm+0x1a/0x30 [ 633.117779][T24419] [ 633.117779][T24419] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 633.125424][T24419] __mutex_lock+0x1a3/0x1550 [ 633.130535][T24419] nbd_queue_rq+0x37b/0x1100 [ 633.135655][T24419] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 633.141736][T24419] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 633.148629][T24419] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 633.155137][T24419] blk_mq_run_hw_queue+0x348/0x4f0 [ 633.160772][T24419] blk_mq_dispatch_list+0xd16/0xe10 [ 633.166495][T24419] blk_mq_flush_plug_list+0x48d/0x570 [ 633.172391][T24419] __blk_flush_plug+0x3ed/0x4d0 [ 633.177815][T24419] __submit_bio+0x28d/0x580 [ 633.182841][T24419] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 633.189004][T24419] block_read_full_folio+0x599/0x830 [ 633.194825][T24419] filemap_read_folio+0x137/0x3b0 [ 633.200373][T24419] do_read_cache_folio+0x358/0x590 [ 633.206010][T24419] read_part_sector+0xb6/0x2b0 [ 633.211307][T24419] adfspart_check_ICS+0xb1/0x960 [ 633.216771][T24419] bdev_disk_changed+0x817/0x1770 [ 633.222317][T24419] blkdev_get_whole+0x380/0x510 [ 633.227736][T24419] bdev_open+0x31e/0xd30 [ 633.232507][T24419] blkdev_open+0x470/0x610 [ 633.237446][T24419] do_dentry_open+0x822/0x13a0 [ 633.242732][T24419] vfs_open+0x3b/0x340 [ 633.247320][T24419] path_openat+0x2e08/0x3860 [ 633.252434][T24419] do_file_open+0x23e/0x4a0 [ 633.257460][T24419] do_sys_openat2+0x113/0x200 [ 633.262657][T24419] __x64_sys_openat+0x138/0x170 [ 633.268026][T24419] do_syscall_64+0x174/0x580 [ 633.273136][T24419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.279549][T24419] [ 633.279549][T24419] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 633.286886][T24419] __mutex_lock+0x1a3/0x1550 [ 633.292017][T24419] nbd_queue_rq+0xc6/0x1100 [ 633.297055][T24419] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 633.303132][T24419] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 633.309995][T24419] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 633.316501][T24419] blk_mq_run_hw_queue+0x348/0x4f0 [ 633.322136][T24419] blk_mq_dispatch_list+0xd16/0xe10 [ 633.327860][T24419] blk_mq_flush_plug_list+0x48d/0x570 [ 633.333752][T24419] __blk_flush_plug+0x3ed/0x4d0 [ 633.339130][T24419] __submit_bio+0x28d/0x580 [ 633.344157][T24419] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 633.350314][T24419] block_read_full_folio+0x599/0x830 [ 633.356121][T24419] filemap_read_folio+0x137/0x3b0 [ 633.361670][T24419] do_read_cache_folio+0x358/0x590 [ 633.367308][T24419] read_part_sector+0xb6/0x2b0 [ 633.372593][T24419] adfspart_check_ICS+0xb1/0x960 [ 633.378051][T24419] bdev_disk_changed+0x817/0x1770 [ 633.383598][T24419] blkdev_get_whole+0x380/0x510 [ 633.388971][T24419] bdev_open+0x31e/0xd30 [ 633.393735][T24419] blkdev_open+0x470/0x610 [ 633.398674][T24419] do_dentry_open+0x822/0x13a0 [ 633.403959][T24419] vfs_open+0x3b/0x340 [ 633.408547][T24419] path_openat+0x2e08/0x3860 [ 633.413671][T24419] do_file_open+0x23e/0x4a0 [ 633.418700][T24419] do_sys_openat2+0x113/0x200 [ 633.423897][T24419] __x64_sys_openat+0x138/0x170 [ 633.429272][T24419] do_syscall_64+0x174/0x580 [ 633.434389][T24419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.440802][T24419] [ 633.440802][T24419] -> #0 (set->srcu){.+.+}-{0:0}: [ 633.447934][T24419] __lock_acquire+0x15a5/0x2cf0 [ 633.453311][T24419] lock_sync+0x9d/0x120 [ 633.457988][T24419] __synchronize_srcu+0xca/0x300 [ 633.463445][T24419] elevator_switch+0x1e8/0x7a0 [ 633.468730][T24419] elevator_change+0x2cc/0x450 [ 633.474017][T24419] elevator_set_default+0x36c/0x430 [ 633.479737][T24419] blk_register_queue+0x3e9/0x4e0 [ 633.485284][T24419] __add_disk+0x677/0xd50 [ 633.490164][T24419] add_disk_fwnode+0xfb/0x480 [ 633.495366][T24419] nbd_dev_add+0x72c/0xb50 [ 633.500310][T24419] nbd_genl_connect+0x962/0x1cf0 [ 633.505773][T24419] genl_family_rcv_msg_doit+0x22a/0x330 [ 633.511844][T24419] genl_rcv_msg+0x61c/0x7a0 [ 633.516871][T24419] netlink_rcv_skb+0x232/0x4b0 [ 633.522160][T24419] genl_rcv+0x28/0x40 [ 633.526661][T24419] netlink_unicast+0x75c/0x8e0 [ 633.531947][T24419] netlink_sendmsg+0x813/0xb40 [ 633.537234][T24419] ____sys_sendmsg+0x972/0x9f0 [ 633.542514][T24419] ___sys_sendmsg+0x2a5/0x360 [ 633.547709][T24419] __x64_sys_sendmsg+0x1bd/0x2a0 [ 633.553167][T24419] do_syscall_64+0x174/0x580 [ 633.558276][T24419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.564694][T24419] [ 633.564694][T24419] other info that might help us debug this: [ 633.564694][T24419] [ 633.574918][T24419] Chain exists of: [ 633.574918][T24419] set->srcu --> &q->q_usage_counter(io)#70 --> &q->elevator_lock [ 633.574918][T24419] [ 633.588592][T24419] Possible unsafe locking scenario: [ 633.588592][T24419] [ 633.596089][T24419] CPU0 CPU1 [ 633.601475][T24419] ---- ---- [ 633.606846][T24419] lock(&q->elevator_lock); [ 633.611456][T24419] lock(&q->q_usage_counter(io)#70); [ 633.619375][T24419] lock(&q->elevator_lock); [ 633.626497][T24419] sync(set->srcu); [ 633.630397][T24419] [ 633.630397][T24419] *** DEADLOCK *** [ 633.630397][T24419] [ 633.638538][T24419] 6 locks held by syz.1.4863/24419: [ 633.643733][T24419] #0: ffffffff8fe38a48 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 633.651949][T24419] #1: ffffffff8fe38880 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 633.660918][T24419] #2: ffff888035c1e9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 633.671280][T24419] #3: ffff88802b69b4a0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x119/0x4e0 [ 633.681127][T24419] #4: ffff88802b69af28 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 633.692011][T24419] #5: ffff88802b69b418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 633.701849][T24419] [ 633.701849][T24419] stack backtrace: [ 633.707738][T24419] CPU: 0 UID: 0 PID: 24419 Comm: syz.1.4863 Not tainted syzkaller #0 PREEMPT(full) [ 633.707755][T24419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 633.707764][T24419] Call Trace: [ 633.707771][T24419] [ 633.707777][T24419] dump_stack_lvl+0xe8/0x150 [ 633.707796][T24419] print_circular_bug+0x2e1/0x300 [ 633.707816][T24419] check_noncircular+0x12e/0x150 [ 633.707838][T24419] __lock_acquire+0x15a5/0x2cf0 [ 633.707857][T24419] ? lockdep_unlock+0x5d/0xd0 [ 633.707869][T24419] ? __lock_acquire+0x146e/0x2cf0 [ 633.707885][T24419] ? __lock_acquire+0x146e/0x2cf0 [ 633.707900][T24419] ? __synchronize_srcu+0xb6/0x300 [ 633.707914][T24419] lock_sync+0x9d/0x120 [ 633.707928][T24419] ? __synchronize_srcu+0xb6/0x300 [ 633.707943][T24419] __synchronize_srcu+0xca/0x300 [ 633.707957][T24419] ? do_raw_spin_lock+0x12b/0x2f0 [ 633.707976][T24419] ? __pfx___synchronize_srcu+0x10/0x10 [ 633.707994][T24419] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 633.708016][T24419] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 633.708038][T24419] ? synchronize_srcu+0x20d/0x270 [ 633.708053][T24419] elevator_switch+0x1e8/0x7a0 [ 633.708070][T24419] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 633.708091][T24419] elevator_change+0x2cc/0x450 [ 633.708108][T24419] ? do_raw_spin_unlock+0xf5/0x210 [ 633.708129][T24419] elevator_set_default+0x36c/0x430 [ 633.708147][T24419] ? __pfx_elevator_set_default+0x10/0x10 [ 633.708167][T24419] ? disk_register_independent_access_ranges+0x2db/0x380 [ 633.708238][T24419] ? blk_crypto_sysfs_register+0x11c/0x170 [ 633.708294][T24419] blk_register_queue+0x3e9/0x4e0 [ 633.708317][T24419] __add_disk+0x677/0xd50 [ 633.708346][T24419] ? down_read+0x270/0x2e0 [ 633.708363][T24419] add_disk_fwnode+0xfb/0x480 [ 633.708386][T24419] nbd_dev_add+0x72c/0xb50 [ 633.708409][T24419] ? __pfx_nbd_dev_add+0x10/0x10 [ 633.708436][T24419] ? bpf_lsm_capable+0x9/0x20 [ 633.708451][T24419] ? security_capable+0x7e/0x2c0 [ 633.708470][T24419] ? radix_tree_lookup+0x240/0x290 [ 633.708519][T24419] nbd_genl_connect+0x962/0x1cf0 [ 633.708540][T24419] ? __pfx___nla_validate_parse+0x10/0x10 [ 633.708563][T24419] ? __pfx_nbd_genl_connect+0x10/0x10 [ 633.708585][T24419] ? rcu_is_watching+0x15/0xb0 [ 633.708601][T24419] ? trace_kmalloc+0x2a/0xf0 [ 633.708623][T24419] ? __nla_parse+0x40/0x60 [ 633.708641][T24419] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 633.708659][T24419] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 633.708680][T24419] genl_family_rcv_msg_doit+0x22a/0x330 [ 633.708701][T24419] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 633.708721][T24419] ? __lock_acquire+0x6b5/0x2cf0 [ 633.708739][T24419] genl_rcv_msg+0x61c/0x7a0 [ 633.708758][T24419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.708774][T24419] ? __pfx_nbd_genl_connect+0x10/0x10 [ 633.708798][T24419] netlink_rcv_skb+0x232/0x4b0 [ 633.708820][T24419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.708837][T24419] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 633.708863][T24419] ? down_read+0x270/0x2e0 [ 633.708878][T24419] ? genl_rcv+0xd/0x40 [ 633.708894][T24419] genl_rcv+0x28/0x40 [ 633.708911][T24419] netlink_unicast+0x75c/0x8e0 [ 633.708933][T24419] netlink_sendmsg+0x813/0xb40 [ 633.708950][T24419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.708964][T24419] ? aa_sock_msg_perm+0xf1/0x1b0 [ 633.708985][T24419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.709005][T24419] ____sys_sendmsg+0x972/0x9f0 [ 633.709019][T24419] ? __might_fault+0xaf/0x130 [ 633.709039][T24419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.709056][T24419] ? import_iovec+0x73/0xa0 [ 633.709074][T24419] ___sys_sendmsg+0x2a5/0x360 [ 633.709087][T24419] ? __lock_acquire+0x6b5/0x2cf0 [ 633.709103][T24419] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.709119][T24419] ? futex_wait+0x2a2/0x390 [ 633.709147][T24419] ? __fget_files+0x2a/0x420 [ 633.709163][T24419] ? __fget_files+0x3a0/0x420 [ 633.709189][T24419] __x64_sys_sendmsg+0x1bd/0x2a0 [ 633.709205][T24419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.709222][T24419] ? rcu_is_watching+0x15/0xb0 [ 633.709241][T24419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.709257][T24419] do_syscall_64+0x174/0x580 [ 633.709272][T24419] ? trace_irq_disable+0x3b/0x140 [ 633.709292][T24419] ? clear_bhb_loop+0x40/0x90 [ 633.709309][T24419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.709323][T24419] RIP: 0033:0x7f782059ce59 [ 633.709342][T24419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.709356][T24419] RSP: 002b:00007f78214f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.709372][T24419] RAX: ffffffffffffffda RBX: 00007f7820815fa0 RCX: 00007f782059ce59 [ 633.709382][T24419] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 633.709392][T24419] RBP: 00007f7820632d6f R08: 0000000000000000 R09: 0000000000000000 [ 633.709401][T24419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.709410][T24419] R13: 00007f7820816038 R14: 00007f7820815fa0 R15: 00007ffd497f7658 [ 633.709427][T24419] [ 634.193241][ C0] syz_tun: tun_net_xmit 118 [ 634.255046][T24423] block nbd1: NBD_DISCONNECT [ 634.971392][ T13] net_ratelimit: 462 callbacks suppressed [ 634.971419][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 635.090728][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 635.200584][T17011] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 635.231090][ C0] syz_tun: tun_net_xmit 118 [ 635.310798][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 635.420711][T17011] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 635.540594][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 635.650532][T17011] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 635.760604][T17011] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 635.870652][T17011] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 635.980601][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 636.260888][ C0] syz_tun: tun_net_xmit 118 [ 637.220783][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 637.301154][ C0] syz_tun: tun_net_xmit 118 [ 638.341171][ C0] syz_tun: tun_net_xmit 118 [ 639.381160][ C0] syz_tun: tun_net_xmit 118 [ 640.012093][ T13] net_ratelimit: 35 callbacks suppressed [ 640.012114][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 640.130722][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 640.250635][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 640.360803][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 640.430961][ C0] syz_tun: tun_net_xmit 118 [ 640.470993][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 640.580891][ T13] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 640.690897][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 640.801101][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 640.910908][ T48] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 641.020673][T17014] bond4: (slave ip6gretap0): failed to get link speed/duplex [ 641.461145][ C0] syz_tun: tun_net_xmit 118 [ 642.510915][ C0] syz_tun: tun_net_xmit 118