last executing test programs: 5.424988814s ago: executing program 0 (id=18367): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000008d2b2b0400ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmmsg$unix(r8, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="23a9", 0x2}, {&(0x7f0000002000)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x1, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 4.304883867s ago: executing program 0 (id=18371): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}], 0x1}, 0x7fffffff}], 0x1, 0x10002, 0x0) 4.029571523s ago: executing program 0 (id=18372): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) socket(0x1, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) recvmmsg(r5, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8}, 0xfffffffd}], 0x1, 0x2000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) 3.850044756s ago: executing program 4 (id=18373): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000002900)=r7, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0x6}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x44, r13, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x4) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 3.341349207s ago: executing program 3 (id=18374): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x2, 0x3, 0xa, 0x1, 0xfffffffffffffff2}, @exit], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r7 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfe, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r9, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212838d05d337"], 0x33fe0}}, 0x40880) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) 3.071319461s ago: executing program 2 (id=18376): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x10000000}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) shutdown(r2, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) getpeername$inet6(r9, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) socket$nl_rdma(0x10, 0x3, 0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 3.003475887s ago: executing program 3 (id=18377): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x5000}]}, @struct={0xe, 0x3, 0x0, 0x4, 0x0, 0x10, [{0xf, 0x1, 0x5}, {0x5, 0x0, 0x1}, {0x0, 0x2, 0x9}]}, @union={0xd, 0x1, 0x0, 0x5, 0x0, 0x9, [{0x6, 0x4, 0xfffffffe}]}]}}, &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0xb, 0x1}, 0x28) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x340040d4}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40004) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffff7, 0x7fffbffe}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="0d000000010001", 0x7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xffffffffffffffff}, {0x5680000000, 0xc2}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @extra_flags={0x8, 0x18, 0x4}]}, 0x140}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x24040000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x320, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x95}, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 2.569350479s ago: executing program 2 (id=18378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x0, 0x9}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0xffffffffffffff26, 0x1, {0x0, 0xfc, 0x200, 0x80200a, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x0, 0x4, 0xffffffff}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c012}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffffff, 0x5}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x3c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)}], 0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r8, 0x941c, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000080), 0x97ff}, {&(0x7f0000000740)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f58263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f686f8f4ae905e573b200d669e65d56", 0x7f}, {&(0x7f00000015c0)}, {&(0x7f0000000e00)="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", 0x270}], 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410ac141409001600001c00000000000000000000010700004404f70007b3aa65f2b300000000"], 0x40}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x2, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x58}}, 0x0) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) write$nci(r11, &(0x7f0000000500)=ANY=[@ANYBLOB="71050209020382070f03ac"], 0x18d) ioctl$PPPIOCSMRU1(r11, 0x40047452, &(0x7f0000000340)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.557961522s ago: executing program 0 (id=18379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000800) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r4, 0x5}, 0x8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000340)="35ead5c6deaab7143dc56ebac949079a404d215406863eeb2afa3b2ea8641d89f58a3c9c3eda20b8cf5763bdcae735de88f969572b6c5141750606156f13210278c75c930b8e3c97b2d088e3894917abee19e84d2dc61cb47ea06e58ec3fd4274f94312abc14f4bd1fb8af9c2bd63afc2877aa75f908ad02e9f8906e1583d800b549f74a03bfdf034c30b18ba5475d6327d77e3854c19f6fc9", 0x99}, {&(0x7f0000000400)="931e995ca198f4e9fecfa5d8d3e1021909b80c983d2329b9d2f412fa56ec18249dfb9ae650d03b2caf2d17455838751bdb785930149d657d97969a4c8a03cc459a6b89", 0x43}, {&(0x7f0000000480)="f048cac2e068135d77f3ea589e26da0a9674a1e5175d40f99ad4a0f6d6232ee3ea25b48725b99c831336a7d8ef510567a56027ac0971c12f", 0x38}, {&(0x7f0000000500)="c8917d384bb681b7ee98a02ddaf46e4a45259dfaefd206e8a86216ad1b2a76b1bdd7573b0c9727a711db60734ac46ae0f565eb2d2893f6910c8cf666e06ebedd086a43441cb6b44c254436b30138b74d28f332a7934095b5bda0bd5ac1235f9a060c42bf4480e023b23b06d6749276cfeea37a2cb05609c0dc2e9b", 0x7b}, {&(0x7f0000000580)="f024dfc3ecffe54021054dc043bf2c0199f4baabc5a3879f35b5b3cd41badf93294a22a6e0cd2af578253f049c3878d2f8b2afa688caefb897d5486dd4f2ed9b46aa0101c5e60a073b75cd0f63d7095eaf420a7f6ebe23f5e12cb0736c05ae5576118f5425803057b05034256b1008f7a1b3a98f0d6a5e555e6ce27c00b052f26d59b4cc4a7ca9c9e255585f7cd53d6c177f66cd5d7e17e6ebd67d0817bc8e7518390694dec705d580aa0da58c91bb6cc3ac9c929e35e5c4ab656d7f952abd51", 0xc0}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="20391535563f10e906d8984fdb00ab06d9b60a44d029129f3c2f43d4de088e64645ffcddd540419d187c14a6554d751feb6c7e6fc8fa5d809834349d4cd4c93a253e4759b012e30ed06d3c3b29d111f13b29b82c96dfdd2dc98ba552fecacd1a930feed0589e7fee777cb89e5624dc86e142db5a37695390d32a4652a41f62338dedc0a9e40b1163336c5ff03b40e140c02ea4f3f66ece0a8d88eb991a44827aa1e69c812213aa94ae4f621f6e70ab7e58781490372f8b58820de444dad497441a8cffafbcb9d5dfa6b65a9a2de61f4d4d76e79b46751f6a90b2f683", 0xdc}, {&(0x7f0000002600)="29952c0293417f438d2a14c3989f854793a0a301472d7f349b7361fd14c3e552b41833b64f83a426793f7fd0a30692847195019fcfdcc7b3b68c54ce36e68294fad7b10644f29ec974ac50626b4e3cbb965b2e6b20f52a6192b1511be35b960aa4bf7c98bcc44f0640f58a73f4d620c061d170dbe7d659cad037b9695027812dfaf1c00ad494dbc7900b35a186287d250f42a0db53fde17e83fb089a2fa935de994c11c77da68de255985e69b8238eaff15de2a1413f8e9820062cd67beafdb3b74da8694e4c5a975d757b6e81441e1be60049a90ae8a2e45a0cdc4d0eff61d1d2c5c71f33cf87e48f7a34b805e4e7d0952654ec", 0xf4}, {&(0x7f0000002700)="6c7381d70b8761b23ceae8c01c734bab6e2f2d62c66c2b663a6f1cf17c8a862bf29a8f5542162105d9b3bbb654e50aecfc056c77ded14ddf820b666d322866af9988cf3e358f2690e5b8ab32622a341c9d3fa6370e4e1c3ca0aee9cc425670aaa985fdc21760df6087cdfb25a846ecfe3a2db0159de4b20624cca9337f1b3356ed903b8583094259fce19be7a63127e643d1a8d0094450d38707b1fc04dbfea67a03c04f0a808eb6e28a6f3f7eb0933f7e97ff10afef7c1e54ca06cb808f77040d7a89ccfbb58dedc9d530a53c5154239d688d4368004cfcefefe005d5ff2e2a", 0xe0}, {&(0x7f0000002800)="1acd6d4c1138aff5ee1a02a868905cd6c57ba332dbe7b314a021579d2317b8b9c1865d25461a5d83e7fed0c97f44a0dfe1c747c743f3fc198cb313e11ab6fcb819fbe1b0aee1dc56b8739e9e30bfa1e9f175b186cc83312bcf468b1596447f1250bcb8a5e5239c97661ceee23c8e403e29d8627646de322f92cea99f53862df29dbb00e6116635dbec6083d5b438d49ac05ab6e527f42870fc6dd5c62199ad8eae2961c905bb3c00608303bf59cf2c100b28899bc6cb92e23ab682f8da9dd0267707f0c7e5cd5fb8b740f679c71a265423bb58bd4a4c3db8da5f73dbf4d130e91bf30b8687c31447", 0xe8}], 0xa, &(0x7f00000029c0)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0x1b3d}}, @mark={{0x14}}, @mark={{0x14}}, @mark={{0x14}}], 0x78}, 0x20000004) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x48, &(0x7f0000000640)=[@in6={0xa, 0x4e22, 0x2, @mcast1, 0x1000}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x1c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}]}, &(0x7f0000000700)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001d00)={r6, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}, 0xb}}, 0x3, 0x81, 0xac6e, 0x101, 0xc0, 0x80000003}, 0x9c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000000000)={0x7, 'sit0\x00', {0x200}, 0x2}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000addff050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f958ca058e40cccc4b3a2008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) 2.489588009s ago: executing program 3 (id=18380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x86a80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2b, 0x0, {0x4e}}, 0x14}}, 0x4000040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) read$rfkill(r3, &(0x7f00000003c0), 0x8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB='&'], 0x10) close(0x4) close(r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0xac, 0x0, 0x0, 0x3}, {0x6}]}) 2.35158765s ago: executing program 3 (id=18381): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@remote, r3}, 0x14) unshare(0x40000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) 2.179279739s ago: executing program 1 (id=18382): r0 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)={0x220, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x8, 0x8a, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x1}, @typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x4, 0x100}, @nested={0xd0, 0x55, 0x0, 0x1, [@typed={0x8, 0x10d, 0x0, 0x0, @u32=0x6}, @nested={0xc4, 0xc8, 0x0, 0x1, [@generic="3acb9a38f84a29b698cd7bd8db3ce725c5daf62381ea0efc05c5c07adb3d10b7915e3371cdddeed6700d65e4cb435851bdce5690b3ffa9", @typed={0x8, 0xb8, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="073ecb6545e0d6288cf3c434e8f8104a1c780d6282afc3083afded45c7098d4f831b6fcb35a2737b04eef293e3d243ba09e43bfe2c9611d423d9dc0322a5f0ca3d693ec676548aa7151af45731b91fb78c3526b2eb4222e7f409bb39e66e85ac301b22ea30e3e431c41c21125d3b9b1b097faca8d3bb347a64ce5d3850056c360f"]}]}, @generic="7ab1cd29b24825e051bf725fb69c96e0d8624e7b5cf7e1b2cdf03854d05a022619c4cb8f24fda82d6fe3c894c3e0b6d31d64ba76d40b3894ce4b1813a891d4ada8", @generic="ba2f82b2befe9751c5848d1fb56ce3b79c7334", @generic="b267414f9c6aeef4ba0a22671a510922f7d1b39bf80666968bd4c5c6748b1f38cc5cd8ddfd750ca678cc7c9f", @generic="cdd427e787a2bc3b8fd0dafbd55754fcaf663d1511ed47d81968848e5f29819aeca8b5a6b90231fefd8518232dfb5898e55993a5c9510188d12d2beebd7f131edd5dd9f30533e255703fd982a272458efae1ae1fc6019a1435d8d07622a7c970dd48d4884d783b92659c968104f918038429c76e0578cb9f7cc0c1b2fd9194c60def73c44a45ed189c1c6bc07af6e200365a9e6181f3f6d1c2eb317b5af7c2"]}, 0x220}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2000c890) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e20, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 2.129466991s ago: executing program 2 (id=18383): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000000740)={0x3f4, 0x15, 0x10, 0x70bd27, 0x25dfdbfe, {0xe20755d540c1ddcd, 0xe0}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "ff941782f8b00a914c3a0e992e478cb1541c008d7e548e419e2c8692dfdf4377696a7771e01efc0ad72038d4f8bb22b9f584b51606eb818b6271b4bf5e41fe8609b791896998850463c535973ad3e78618eb33e2d813515a61c14393017d0b9f21a81b7dfd0e25c05efe2109df056333dab96a38559b03de7b3323a41bd12b7eaa66e0ba9710831cd0faad9f0f0346d9a2a2100d5e543b"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "f6c0791a4db3bd863a6918af0e2f5e80504bc351f851a26217f32a88a894b24560ce286ac43314343bd0026a0b1ee91673a0b121fab6d3df4ae368bb6b63e3519df2cf408c0746db7226015557f165682dd1ee1eccdfe9b510ea1e4f384978c702b20e3a90c3f27ecf95a13cee5086fdadcb1cab2d3175a72b7af9a59419612590821ebac2ecee9f8bf84e0823b3031692e7fa22fb399116884270a78bd88c0552725b6a74e430272a62fd048f408a78f1aff32e17cf818a8b5599e9883d0cc73b361ebea92af5bd5cef4bd58164dcd5a4311aeca888e0aaa28e5da5167796ef"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "a53a056b6fa412a9c6bd37c55f2bfb196ebf3457fc6528ee9fde86d8dd30921daf76e50a7c284f3536bac3c0abb46a844ab493f5029ce9f940a1d092bf08f21a1aeb3c2f8b7f3d9fd419ef4f4f73714ac1331fede3c4eec6830002079807de8b7650cfff9eaa9491b8998d1eb37e3bf7494960968fe2ae20316f36271282c30e289a4edf07d2a08752f9a54a81a0c5c0be47d6a4e8c00ddd756f9b2762b6cb16459071d1c5636bd59fc90395dc54adfb172f6daf9baab0b1857d6ac9475be45976650a3e5c0a1d0682e4e77110c58249813c456996"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "89ae88469ac732951da1d4f7216c5354ec8b3abe37a9494c9d8e775b1343bb181b9b8563"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "7dddeb6f5111eb3c5aee7cdc91bc91cee159d20708bcbdcf17bc8583074539bbc19ac02972c50cf0c96474f6c2c73f6b3e6ce336b3c663e254d0e78259da545300bef2d84604036c78732b70b6ef1baabfa3e2bba5446ef9b5532be2d2b63bbdde718dd58746"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "ca8c65ca7a72d072af5a06380131f97e84b379469e120da182bbf9780ad36571408d7868af6653cdb3c8ceb445d3d9f4f917d80ef3def7f4e90f4c485c6c9ef58f74d98d30c74e263cbbd3d5685cf4d78a556e04f39b1619b24f58e7133acd0f8750288e945396ce8597f6aca18974c850d2e6a585a9e9b71d184034dcb9bb41f3ac8fc236ee5947fdd673a64d26add634419aa6b12a5e2ad6a2133e96bef430f1401755f1566af0c1c46c56b13f1fa406f3ba955d22e34af9b7b0ebe6e73d0f0f5cde2343ffa78764a9e4cb9af3593252b21315eca248b9dbe5e14f8adcb09224e737f96a7854e10b"}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x20040000) unshare(0x20000400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003300)={0xc, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008f6ff00000000000800000071117a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4c080) 1.944397005s ago: executing program 4 (id=18384): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000008d2b2b0400ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmmsg$unix(r8, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)="23a9", 0x2}, {&(0x7f0000002000)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x1, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008590000b70400000000000085000000030000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 1.808231569s ago: executing program 1 (id=18385): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000a80)=""/110, 0x6e}, {0x0}], 0x2, 0xa, 0x6c8) pipe(&(0x7f0000000300)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000}, 0x38) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x10, 0x2f, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r9, &(0x7f0000000100)=""/12, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c001180090001"], 0xb0}, 0x1, 0x0, 0x0, 0x40014}, 0x40) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r5) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB="e76a8f2c9c6893a8e621a65464a12c55d66a3cbc6b26c8d0e5c5"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendto$inet(r0, &(0x7f0000000080)="81efcdc3412b", 0x6, 0x0, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000200)={'xfrm0\x00', @ifru_settings={0x3, 0x100, @fr_pvc_info=&(0x7f00000001c0)={0xf, 'pimreg\x00'}}}) 1.741489827s ago: executing program 2 (id=18386): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@multicast1, 0x4d2, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xd, 0xfffffffe, 0x3}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0x2}, 0x62) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) r8 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x80000018}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000301010400000000000000000200000024000180"], 0x38}}, 0x0) close(r10) syz_emit_ethernet(0x8e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa25aae0cb3fd0a2ea4e01aaaaaaaaaa4305400f008000650000082e90780a01010164010102864e000000030008094ac467ec3f00124c985e594ee96c2b09f6e55ec84c916e05052450b2070ce17393606d00a7ab3c13010dcee8f17fabc8f286afabb207106549c337b0e2fdba29f02c960c99891be6ac141425ac1414aa64010100ffffffffe00000"], 0x0) r11 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r11, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, 0x0, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd26, 0x27dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x20008800) 1.133000816s ago: executing program 0 (id=18387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x2, 0x3, 0xa, 0x1, 0xfffffffffffffff2}, @exit], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r7 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfe, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r9, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212838d05d337"], 0x33fe0}}, 0x40880) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) 1.069140813s ago: executing program 3 (id=18388): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0xa00, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000f1000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) bind$bt_hci(r0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000080)="27875082014f62be715cb85659d321968bb84d918c9ef4a94a61601f4408d3ad9270918e72cb6eeaf2a7243261c56d2686448d22b2b31085bddcf6ef32", 0x3d}, {&(0x7f00000000c0)="4546d8e58cce4c1705f6b6ef0d6553911d9fa8f9f982ee02a1861574d2a398674df0d40c1435deae225b6489ec5687d52cbc4ea92175dfc0339091853c277f11436bc98f1039474c690535f06ab999acb1a7213b0c4f8062ea29e5b961983a6ae8993bafb6ef582f58ab8d3860cc843a2ace5f21d4df8c8fcf7600e2beb288bd2a34d784c5b430b67a23bc0b1680391b1ffb89996e2760bb1f08eaaab772f7022b05fc6a09c88ab1aa3da5a24aeaa3c8293804110776", 0xb6}, {&(0x7f0000000180)="60e269656b708b6c5a95", 0xa}, {&(0x7f0000000400)="9197d9b814bb03d4043118aeefeed2ad758541bf6ee53c1e9e7afa0d3450bec502c8bd06d3ee50bfa58d840f5ecb23757a07770a914e61e2c26225db8f025c9ffd28e063bdc04dca8a0bba91a736742dce5eedff1d0e100373c9576a68fcf22cf54fe1f2d4ec921586147bf3513fc3091bd02c7100cbe3a4462c8932ebd104de5c4d275b56df4edb83cde8ebf42fa9882dd87ebae85ae3d2c7f37d8b9f6887a9dbfbd699c4fab69902e4623d1771f1cd4b294195ac7d03b4d97c8fdcda3ef0bf5913559e195442cb0bdc3eb155bba326480d100b1e14ab386cf0b168c463a97f390a95eeb083782a8dc38b055e4f1f3adf0388f9ae", 0xf5}, {&(0x7f0000000500)}], 0x5, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c0000001a0001ff80000000000000000a00"/28, @ANYRES32], 0x2c}}, 0x0) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000240)='zvh') r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r10 = socket$inet(0x2, 0x3, 0x4) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) shutdown(r10, 0x0) recvmmsg(r10, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10010000160011072bbd7000fcdbdf25fe880000000000000000000000000001fe800000000000aa4e2400014e210003020020a03200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d66c000000fe88000000000000000000000000000118010000000000000500000000000000000000000000000008000000000000000300000000000000e10b00000000000025000000000000000010000000000000090000000000000040000000000000000500000000000000000000001c000000000000001d8a0000cb09000027bd7000000000000a000300100000000000000004000000018000000a00100001000000000000000c000f000000000000000000"], 0x110}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 970.998733ms ago: executing program 1 (id=18389): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x3, 0xf092, 0x2da}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept$alg(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x190a1, 0x2c0e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x6, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, @call={0x85, 0x0, 0x0, 0x15}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000400), 0x4) syz_emit_ethernet(0x1d, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)=""/130, &(0x7f0000000340)=0x82) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r7, 0xffffe000) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x6}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x40}, 0x1, 0x0, 0x0, 0x4803}, 0x4008014) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r8, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000070605000000000000000000030000040900020073797a32000000000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x400c811}, 0x8004) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r9, r11, 0x4, r11}, 0x10) 776.823638ms ago: executing program 4 (id=18390): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001000070000fff10000000000fe880000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000000000004d22b000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000000000000000000000000000000fcffffff0a000200700000000000000014000e00e000000200"/188], 0x104}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0xb, 0x70bd2d, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000003, 0x0, 0x8, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) unshare(0x2a060400) socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r6, 0x0) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000099c0), 0x0, 0x10002, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) unshare(0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 773.571322ms ago: executing program 0 (id=18400): socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x50) pipe(&(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 747.441657ms ago: executing program 1 (id=18391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x86a80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2b, 0x0, {0x4e}}, 0x14}}, 0x4000040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) read$rfkill(r3, &(0x7f00000003c0), 0x8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB='&'], 0x10) close(0x4) close(r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0xac, 0x0, 0x0, 0x3}, {0x6}]}) 721.806627ms ago: executing program 3 (id=18392): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) socket(0x1, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) recvmmsg(r5, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8}, 0xfffffffd}], 0x1, 0x2000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 533.934057ms ago: executing program 1 (id=18393): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket(0x2b, 0x80801, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000010c0), &(0x7f0000001100)=0x10) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a00000014"], 0x58}}, 0x0) write$bt_hci(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="010565"], 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000440)=0x7fffffff, 0x4) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2e8, 0x258, 0x258, 0x2e8, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x6c4, 0x7, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x4e22, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x11, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1], 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x418) sendmsg$nl_route(r8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0900000018000000000000004800000048000000060000000d0000007500000604000000090000e0feffffff0b0000000000000e0300de4c3c0000000000003100000003000006040000000a0000000300000006000000ffff00020e00f4ff27450000005f002bda68e305c224a5def90f571ae6d1e6f4b9d55c9c0a4677d7c553afe99845"], &(0x7f0000000180)=""/72, 0x66, 0x48, 0x0, 0x10, 0x10000}, 0x28) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/328], 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 532.059061ms ago: executing program 2 (id=18394): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f66"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20040810) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="500b570fc980bb95a72f3c5647da5c85ebbf0dceeff6b1665d53d4310e2d4f4894aa1940aed0a0e82ef5805a316a765cc0b4e8e51f95633f6a8b76d1cf911ff937160ad2b7ca6b3c138d47ef3716eb6c3e9c72cf5ccdbe25b4b146ff3b3e31ea238632c3cf0122a160b979d7", 0x6c}, {0x0}, {&(0x7f0000000440)="8e702ab02c109aa5fc4b9ae599d1b1c108e05788835149dd597de31bbf9d4c528d34528f1b9c195b8686767afb35d307f89e5cc0e203a1867fd2050ff26534e781cfe2fa4ad8c035138693f826365fbdcebe52459c76a1bace8f97e64dbafdd3f831fe9237721a20e812e3470c1a560aafbc277f0549", 0x76}], 0x3, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@generic={0x88, 0x12, "6108b50b8f75176d503aacd960160306"}, @cipso={0x86, 0x1b, 0x2, [{0x0, 0x6, "17f9c54a"}, {0x7, 0x4, "b3df"}, {0x6, 0xb, "35be601179860246e3"}]}, @ssrr={0x89, 0x1b, 0x7a, [@rand_addr=0x64010102, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @empty]}, @timestamp_prespec={0x44, 0x4, 0x3c, 0x3, 0xb}, @lsrr={0x83, 0xf, 0xa6, [@remote, @multicast2, @rand_addr=0x64010100]}, @cipso={0x86, 0x8, 0x0, [{0x2, 0x2}]}, @cipso={0x86, 0x43, 0x3, [{0x0, 0x12, "ee2af169a230c9693117dceed3d1e6e6"}, {0x1, 0x6, "86f67f56"}, {0x2, 0xc, "350e29d671eebdd2f042"}, {0x7, 0xc, "51e28b8741cb65547ec4"}, {0x1, 0xa, "9af23ce158a3267d"}, {0x1, 0x3, "98"}]}, @ssrr={0x89, 0x27, 0x71, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote]}]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x94, 0xa, "866eba0fe115c838"}, @cipso={0x86, 0x16, 0x1, [{0x2, 0x10, "0a89672238fa274d8246c10db633"}]}, @end, @rr={0x7, 0xf, 0xd5, [@rand_addr=0x64010101, @broadcast, @broadcast]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x1a8}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, &(0x7f0000001080)={&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000d00)=""/188, 0xbc}, {&(0x7f0000000dc0)=""/196, 0xc4}, {&(0x7f0000000ec0)=""/218, 0xda}], 0x4, 0x0, 0x0, 0x8800}, 0x4000800) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x3}, {0xffff, 0xd}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x1, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r13, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r13, 0x300, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 375.098951ms ago: executing program 4 (id=18395): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c0200000000"], 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x24080, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0xb, 0x9, 0x4, 0x2, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001840)={0x3c, r10, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x2000040) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000428bd7000fddbdf250400000005000100010000001400dffffe080000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x6478e85a07e7caca}, 0x4008006) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000001c0)={0x0, 0xfffffffffffffe66, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0xce22, 0x6, @mcast1, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000800"], 0x18}, 0x800) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x7}, 0x8) 223.032908ms ago: executing program 4 (id=18396): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000000740)={0x3f4, 0x15, 0x10, 0x70bd27, 0x25dfdbfe, {0xe20755d540c1ddcd, 0xe0}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "ff941782f8b00a914c3a0e992e478cb1541c008d7e548e419e2c8692dfdf4377696a7771e01efc0ad72038d4f8bb22b9f584b51606eb818b6271b4bf5e41fe8609b791896998850463c535973ad3e78618eb33e2d813515a61c14393017d0b9f21a81b7dfd0e25c05efe2109df056333dab96a38559b03de7b3323a41bd12b7eaa66e0ba9710831cd0faad9f0f0346d9a2a2100d5e543b"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "f6c0791a4db3bd863a6918af0e2f5e80504bc351f851a26217f32a88a894b24560ce286ac43314343bd0026a0b1ee91673a0b121fab6d3df4ae368bb6b63e3519df2cf408c0746db7226015557f165682dd1ee1eccdfe9b510ea1e4f384978c702b20e3a90c3f27ecf95a13cee5086fdadcb1cab2d3175a72b7af9a59419612590821ebac2ecee9f8bf84e0823b3031692e7fa22fb399116884270a78bd88c0552725b6a74e430272a62fd048f408a78f1aff32e17cf818a8b5599e9883d0cc73b361ebea92af5bd5cef4bd58164dcd5a4311aeca888e0aaa28e5da5167796ef"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "a53a056b6fa412a9c6bd37c55f2bfb196ebf3457fc6528ee9fde86d8dd30921daf76e50a7c284f3536bac3c0abb46a844ab493f5029ce9f940a1d092bf08f21a1aeb3c2f8b7f3d9fd419ef4f4f73714ac1331fede3c4eec6830002079807de8b7650cfff9eaa9491b8998d1eb37e3bf7494960968fe2ae20316f36271282c30e289a4edf07d2a08752f9a54a81a0c5c0be47d6a4e8c00ddd756f9b2762b6cb16459071d1c5636bd59fc90395dc54adfb172f6daf9baab0b1857d6ac9475be45976650a3e5c0a1d0682e4e77110c58249813c456996"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "89ae88469ac732951da1d4f7216c5354ec8b3abe37a9494c9d8e775b1343bb181b9b8563"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "7dddeb6f5111eb3c5aee7cdc91bc91cee159d20708bcbdcf17bc8583074539bbc19ac02972c50cf0c96474f6c2c73f6b3e6ce336b3c663e254d0e78259da545300bef2d84604036c78732b70b6ef1baabfa3e2bba5446ef9b5532be2d2b63bbdde718dd58746"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "ca8c65ca7a72d072af5a06380131f97e84b379469e120da182bbf9780ad36571408d7868af6653cdb3c8ceb445d3d9f4f917d80ef3def7f4e90f4c485c6c9ef58f74d98d30c74e263cbbd3d5685cf4d78a556e04f39b1619b24f58e7133acd0f8750288e945396ce8597f6aca18974c850d2e6a585a9e9b71d184034dcb9bb41f3ac8fc236ee5947fdd673a64d26add634419aa6b12a5e2ad6a2133e96bef430f1401755f1566af0c1c46c56b13f1fa406f3ba955d22e34af9b7b0ebe6e73d0f0f5cde2343ffa78764a9e4cb9af3593252b21315eca248b9dbe5e14f8adcb09224e737f96a7854e10b"}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x20040000) unshare(0x20000400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003300)={0xc, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008f6ff00000000000800000071117a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4c080) 97.432387ms ago: executing program 1 (id=18397): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @local}}, 0x0, 0x8}, &(0x7f0000000300)=0x90) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, 0x1000f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0x5}}, [0x5, 0x4, 0x1fd, 0xff, 0x66, 0x7, 0x891f, 0xd, 0x97a, 0xfffffffffffffff9, 0x80000000, 0x0, 0x1ff, 0x6, 0x4]}, &(0x7f0000000440)=0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4", 0x50}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wrr\x00', 0x9, 0x821}, 0x2c) r7 = socket$inet(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="4c0000001200ff095cab150099a283ff04b8008000f0ffff000000060040150024001d001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) close(r8) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000180)={r10, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000080)={r10, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000540)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}}, 0x0) 96.943276ms ago: executing program 2 (id=18398): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x96}, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000018140100020000000300000008000100"], 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, r4, 0x30d, 0x0, 0xfffffffe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x88, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x68}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040082}, 0x40008c0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in=@empty, @in6=@remote, 0x4e1f, 0x0, 0xfffc, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000009, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x6c}, 0x2, @in=@loopback, 0x34fe, 0x1, 0x0, 0x0, 0x1, 0x6}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r12, 0x0) setsockopt$WPAN_SECURITY(r11, 0x0, 0x1, &(0x7f00000000c0), 0x4) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r14}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) read(r10, &(0x7f0000001300)=""/112, 0x70) 0s ago: executing program 4 (id=18399): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000280)=0x40, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0102000000000000000001"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): - 0 [ 1107.912060][ T3317] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.060684][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17472'. [ 1108.154352][T13751] syzkaller0: entered promiscuous mode [ 1108.184864][T13751] syzkaller0: entered allmulticast mode [ 1108.199412][T13772] netlink: 'syz.4.17472': attribute type 10 has an invalid length. [ 1108.217914][T13772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17472'. [ 1108.229206][T13772] dummy0: entered promiscuous mode [ 1108.243869][ T3317] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.273600][T13766] syzkaller0: entered promiscuous mode [ 1108.280048][T13766] syzkaller0: entered allmulticast mode [ 1108.302259][T13767] dummy0: left promiscuous mode [ 1108.312219][T13767] bridge0: port 1(dummy0) entered blocking state [ 1108.321382][T13767] bridge0: port 1(dummy0) entered disabled state [ 1108.329061][T13767] dummy0: entered allmulticast mode [ 1108.336421][T13767] dummy0: entered promiscuous mode [ 1108.344725][T13759] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1112.553950][ T3317] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.782900][T13818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17482'. [ 1112.825351][T13814] syzkaller0: entered promiscuous mode [ 1112.859813][T13814] syzkaller0: entered allmulticast mode [ 1113.237223][T13830] tipc: Enabled bearer , priority 0 [ 1113.276849][T13813] tipc: Resetting bearer [ 1113.344439][T13813] tipc: Disabling bearer [ 1113.375884][T13827] tipc: Enabled bearer , priority 0 [ 1113.394155][T13835] syzkaller0: entered promiscuous mode [ 1113.401679][T13835] syzkaller0: entered allmulticast mode [ 1113.422992][T13826] tipc: Resetting bearer [ 1113.477290][T13826] tipc: Disabling bearer [ 1113.558052][T13848] netlink: 'syz.3.17488': attribute type 1 has an invalid length. [ 1113.606022][T13848] bond22: entered promiscuous mode [ 1113.612770][T13848] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1113.663427][T13848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17488'. [ 1113.673229][T13848] bond22: entered allmulticast mode [ 1113.720618][T13848] bond22: (slave bridge14): making interface the new active one [ 1113.737044][T13848] bridge14: entered promiscuous mode [ 1113.743652][T13848] bridge14: entered allmulticast mode [ 1113.752806][T13848] bond22: (slave bridge14): Enslaving as an active interface with an up link [ 1113.829039][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17490'. [ 1113.916649][T13856] tipc: Enabled bearer , priority 0 [ 1113.936893][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17490'. [ 1113.947133][T13856] syzkaller0: entered promiscuous mode [ 1113.953694][T13856] syzkaller0: entered allmulticast mode [ 1114.029150][T13856] tipc: Resetting bearer [ 1114.060799][T13861] syzkaller0: entered promiscuous mode [ 1114.076695][T13861] syzkaller0: entered allmulticast mode [ 1114.092318][T13855] tipc: Resetting bearer [ 1114.158436][T13855] tipc: Disabling bearer [ 1114.487477][T13868] syzkaller0: entered promiscuous mode [ 1114.506645][T13868] syzkaller0: entered allmulticast mode [ 1115.071402][T13887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1115.086822][T13877] bond0: (slave syz_tun): Releasing backup interface [ 1115.366175][T13877] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1115.384948][T13881] syzkaller0: entered promiscuous mode [ 1115.393831][T13881] syzkaller0: entered allmulticast mode [ 1115.447577][T13890] netlink: 'syz.3.17502': attribute type 12 has an invalid length. [ 1115.460467][T13892] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1115.524694][T15780] uyz0: Port: 1 Link DOWN [ 1115.639719][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17507'. [ 1116.055373][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1116.196721][T13908] bridge13: port 1(veth27) entered blocking state [ 1116.219337][T13908] bridge13: port 1(veth27) entered disabled state [ 1116.237752][T13908] veth27: entered allmulticast mode [ 1116.281592][T13908] veth27: entered promiscuous mode [ 1116.318928][T13902] bridge13: port 2(veth0_to_bond) entered blocking state [ 1116.338469][T13902] bridge13: port 2(veth0_to_bond) entered disabled state [ 1116.350469][T13902] veth0_to_bond: entered allmulticast mode [ 1116.372078][T13902] veth0_to_bond: entered promiscuous mode [ 1116.487208][T13912] bridge13: port 3(veth29) entered blocking state [ 1116.507617][T13912] bridge13: port 3(veth29) entered disabled state [ 1116.527998][T13912] veth29: entered allmulticast mode [ 1116.545923][T13912] veth29: entered promiscuous mode [ 1116.562120][T13904] syzkaller0: entered promiscuous mode [ 1116.570078][T13904] syzkaller0: entered allmulticast mode [ 1116.597310][T13921] tipc: Enabled bearer , priority 0 [ 1116.617605][T13922] syzkaller0: entered promiscuous mode [ 1116.639709][T13922] syzkaller0: entered allmulticast mode [ 1116.730549][T13931] tipc: Resetting bearer [ 1116.756051][T13913] tipc: Resetting bearer [ 1116.822100][T13913] tipc: Disabling bearer [ 1117.174512][T13948] netlink: 64 bytes leftover after parsing attributes in process `syz.3.17515'. [ 1117.265168][T13953] netlink: 'syz.4.17516': attribute type 16 has an invalid length. [ 1117.448058][T13967] netlink: 11 bytes leftover after parsing attributes in process `syz.3.17521'. [ 1117.552179][T13971] tipc: Enabling of bearer rejected, already enabled [ 1117.675998][T13970] tipc: Resetting bearer [ 1117.703638][T13973] syzkaller0: entered promiscuous mode [ 1117.714203][T13973] syzkaller0: entered allmulticast mode [ 1117.726949][T13975] syzkaller0: entered promiscuous mode [ 1117.743420][T13975] syzkaller0: entered allmulticast mode [ 1118.009488][T13980] syzkaller0: refused to change device tx_queue_len [ 1118.055057][T31517] page_pool_release_retry() stalled pool shutdown: id 425, 1 inflight 60 sec [ 1118.122422][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17527'. [ 1118.158780][T13984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17527'. [ 1118.222587][T13984] bridge0: entered promiscuous mode [ 1118.244175][T13984] bridge0: entered allmulticast mode [ 1118.384643][T13998] netlink: 'syz.3.17530': attribute type 1 has an invalid length. [ 1118.506881][T13998] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1118.800425][T14007] syzkaller0: entered promiscuous mode [ 1118.807187][T14007] syzkaller0: entered allmulticast mode [ 1118.840886][T14006] batman_adv: batadv0: Interface deactivated: wlan0 [ 1120.694580][T14031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17537'. [ 1120.704318][T14031] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 1122.800569][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17539'. [ 1123.116459][T14045] syzkaller0: entered promiscuous mode [ 1123.123269][T14045] syzkaller0: entered allmulticast mode [ 1123.141254][T14050] netlink: 'syz.4.17542': attribute type 1 has an invalid length. [ 1123.240437][T14055] netlink: 'syz.1.17544': attribute type 5 has an invalid length. [ 1126.407951][T14050] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 1126.707836][T14067] syzkaller0: entered promiscuous mode [ 1126.724301][T14067] syzkaller0: entered allmulticast mode [ 1127.027762][T14084] netlink: 'syz.4.17551': attribute type 4 has an invalid length. [ 1127.081279][T14089] netlink: 'syz.4.17551': attribute type 4 has an invalid length. [ 1127.362848][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17555'. [ 1127.680904][T14112] netlink: 'syz.1.17561': attribute type 16 has an invalid length. [ 1127.913733][T14121] netlink: 'syz.1.17563': attribute type 1 has an invalid length. [ 1128.362473][T14132] vlan1: left allmulticast mode [ 1128.382034][T14132] macvtap0: left allmulticast mode [ 1128.400644][T14132] bond5: left promiscuous mode [ 1128.430888][T14132] bond6: left promiscuous mode [ 1128.454240][T14132] bond11: left promiscuous mode [ 1128.469236][T14132] ip6gre2: left promiscuous mode [ 1128.476719][T14137] nftables ruleset with unbound chain [ 1128.490284][T14132] gtp2: left promiscuous mode [ 1128.502492][T14132] gtp2: left allmulticast mode [ 1128.512098][T14132] bond12: left promiscuous mode [ 1128.531454][T14132] bond13: left allmulticast mode [ 1128.539737][T14132] bond14: left allmulticast mode [ 1128.545047][T14132] macvlan2: left promiscuous mode [ 1128.551772][T14132] bond15: left promiscuous mode [ 1128.566289][T14132] bond16: left promiscuous mode [ 1128.572491][T14143] syz.4.17569: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1128.574946][T14132] bridge11: left promiscuous mode [ 1128.600118][T14132] bond16: left allmulticast mode [ 1128.607399][T14132] bridge11: left allmulticast mode [ 1128.632124][T14143] CPU: 1 UID: 0 PID: 14143 Comm: syz.4.17569 Not tainted syzkaller #0 PREEMPT(full) [ 1128.632173][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1128.632188][T14143] Call Trace: [ 1128.632197][T14143] [ 1128.632208][T14143] dump_stack_lvl+0xe8/0x150 [ 1128.632244][T14143] warn_alloc+0x249/0x340 [ 1128.632280][T14143] ? stack_trace_save+0xa9/0x100 [ 1128.632318][T14143] ? __pfx_warn_alloc+0x10/0x10 [ 1128.632362][T14143] ? kasan_save_track+0x4f/0x80 [ 1128.632391][T14143] ? kasan_save_track+0x3e/0x80 [ 1128.632419][T14143] ? __kasan_kmalloc+0x93/0xb0 [ 1128.632448][T14143] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1128.632477][T14143] ? xskq_create+0x56/0x170 [ 1128.632508][T14143] ? xsk_setsockopt+0x54c/0x990 [ 1128.632535][T14143] ? do_sock_setsockopt+0x17c/0x1b0 [ 1128.632558][T14143] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1128.632579][T14143] ? do_syscall_64+0x174/0x580 [ 1128.632606][T14143] __vmalloc_node_range_noprof+0x132/0x1750 [ 1128.632674][T14143] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1128.632713][T14143] ? __kasan_kmalloc+0x93/0xb0 [ 1128.632750][T14143] vmalloc_user_noprof+0xad/0xe0 [ 1128.632781][T14143] ? xskq_create+0xbf/0x170 [ 1128.632812][T14143] xskq_create+0xbf/0x170 [ 1128.632846][T14143] xsk_init_queue+0x8a/0xe0 [ 1128.632879][T14143] xsk_setsockopt+0x54c/0x990 [ 1128.632911][T14143] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1128.632963][T14143] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1128.632994][T14143] do_sock_setsockopt+0x17c/0x1b0 [ 1128.633022][T14143] __x64_sys_setsockopt+0x13d/0x1b0 [ 1128.633049][T14143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.633073][T14143] do_syscall_64+0x174/0x580 [ 1128.633093][T14143] ? trace_irq_disable+0x3b/0x140 [ 1128.633126][T14143] ? clear_bhb_loop+0x40/0x90 [ 1128.633154][T14143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.633176][T14143] RIP: 0033:0x7efe3319ce59 [ 1128.633198][T14143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.633217][T14143] RSP: 002b:00007efe34047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1128.633241][T14143] RAX: ffffffffffffffda RBX: 00007efe33416090 RCX: 00007efe3319ce59 [ 1128.633257][T14143] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1128.633270][T14143] RBP: 00007efe33232d6f R08: 0000000000000004 R09: 0000000000000000 [ 1128.633283][T14143] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.633296][T14143] R13: 00007efe33416128 R14: 00007efe33416090 R15: 00007fffca650dc8 [ 1128.633333][T14143] [ 1128.887545][T14143] Mem-Info: [ 1128.900103][T14143] active_anon:6361 inactive_anon:11 isolated_anon:0 [ 1128.900103][T14143] active_file:2439 inactive_file:40937 isolated_file:0 [ 1128.900103][T14143] unevictable:768 dirty:332 writeback:0 [ 1128.900103][T14143] slab_reclaimable:13081 slab_unreclaimable:202316 [ 1128.900103][T14143] mapped:30257 shmem:1449 pagetables:1439 [ 1128.900103][T14143] sec_pagetables:0 bounce:0 [ 1128.900103][T14143] kernel_misc_reclaimable:0 [ 1128.900103][T14143] free:1201213 free_pcp:23950 free_cma:0 [ 1129.001541][T14143] Node 0 active_anon:25444kB inactive_anon:44kB active_file:9756kB inactive_file:163544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121328kB dirty:1324kB writeback:0kB shmem:4260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15132kB pagetables:5684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1129.036694][T14132] bond18: left allmulticast mode [ 1129.042453][T14132] bond18: left promiscuous mode [ 1129.056904][T14132] macvlan3: left promiscuous mode [ 1129.063635][T14143] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1129.070448][T14132] macvlan3: left allmulticast mode [ 1129.117838][T14143] Node 0 DMA free:11104kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:160kB local_pcp:44kB free_cma:0kB [ 1129.158663][T14132] bond20: left promiscuous mode [ 1129.163645][T14132] bridge15: left promiscuous mode [ 1129.176397][T14143] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1129.188390][T14143] Node 0 DMA32 free:1197388kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25372kB inactive_anon:44kB active_file:9756kB inactive_file:163544kB unevictable:1536kB writepending:1364kB zspages:0kB present:3129332kB managed:2552608kB mlocked:0kB bounce:0kB free_pcp:35480kB local_pcp:20180kB free_cma:0kB [ 1129.223372][T14132] vlan3: left allmulticast mode [ 1129.242203][T14132] bond20: left allmulticast mode [ 1129.253999][T14132] bridge15: left allmulticast mode [ 1129.269999][T14137] mac80211_hwsim hwsim10 ªªªªª;: renamed from wlan0 [ 1129.280542][T14143] lowmem_reserve[]: 0 0 0 0 0 [ 1129.328003][T14143] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1129.570398][T14143] lowmem_reserve[]: 0 0 0 0 0 [ 1129.607011][T14143] Node 1 Normal free:3596696kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60088kB local_pcp:32432kB free_cma:0kB [ 1129.699831][T14143] lowmem_reserve[]: 0 0 0 0 0 [ 1129.710886][T14143] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11104kB [ 1129.743052][T14143] Node 0 DMA32: 5729*4kB (UME) 5155*8kB (UME) 3349*16kB (UME) 339*32kB (UME) 174*64kB (UME) 1029*128kB (UME) 781*256kB (UME) 464*512kB (UME) 287*1024kB (UM) 93*2048kB (UM) 0*4096kB = 1193292kB [ 1129.765443][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17572'. [ 1129.775684][T14143] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1129.810233][T14143] Node 1 Normal: 9*4kB (U) 7*8kB (UM) 15*16kB (UM) 12*32kB (UM) 20*64kB (UM) 10*128kB (UM) 11*256kB (UM) 9*512kB (UM) 8*1024kB (UM) 9*2048kB (U) 869*4096kB (UM) = 3596748kB [ 1129.858951][T14143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.887888][T14143] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1129.905370][T14143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1129.932554][T14176] bond21: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1129.944228][T14143] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1129.968101][T14143] 44801 total pagecache pages [ 1129.988805][T14143] 0 pages in swap cache [ 1129.993329][T14143] Free swap = 124996kB [ 1129.997547][T14143] Total swap = 124996kB [ 1130.002499][T14143] 2097051 pages RAM [ 1130.009635][T14143] 0 pages HighMem/MovableOnly [ 1130.018734][T14143] 427116 pages reserved [ 1130.026184][T14143] 0 pages cma reserved [ 1130.117990][T14176] bond21 (unregistering): Released all slaves [ 1130.386589][T14188] tipc: Enabled bearer , priority 0 [ 1130.406608][T14188] syzkaller0: entered promiscuous mode [ 1130.420310][T14188] syzkaller0: entered allmulticast mode [ 1130.477354][T14188] tipc: Resetting bearer [ 1130.511587][T14187] tipc: Resetting bearer [ 1130.581061][T14187] tipc: Disabling bearer [ 1130.615813][T14196] tipc: Enabling of bearer rejected, already enabled [ 1130.700966][T14196] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17581'. [ 1130.947867][T14207] batadv_slave_1: entered promiscuous mode [ 1130.979984][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17585'. [ 1131.408491][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1131.606045][T14224] syzkaller0: entered promiscuous mode [ 1131.621446][T14224] syzkaller0: entered allmulticast mode [ 1131.771772][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17590'. [ 1131.791598][T14201] batadv_slave_1: left promiscuous mode [ 1131.938684][T14230] bridge14: port 1(gretap3) entered blocking state [ 1131.965843][T14230] bridge14: port 1(gretap3) entered disabled state [ 1131.982161][T14234] netlink: 'syz.2.17593': attribute type 1 has an invalid length. [ 1132.008691][T14230] gretap3: entered allmulticast mode [ 1132.033025][T14230] gretap3: entered promiscuous mode [ 1132.071513][T14238] netlink: 200 bytes leftover after parsing attributes in process `syz.3.17594'. [ 1132.132076][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17594'. [ 1132.209780][T14234] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1132.293006][T14240] veth15: entered allmulticast mode [ 1132.315797][T14240] bond14: (slave veth15): Enslaving as an active interface with a down link [ 1132.357803][T14241] bond14 (unregistering): (slave veth15): Releasing active interface [ 1132.394653][T14241] bond14 (unregistering): Released all slaves [ 1132.487541][T14250] tipc: Enabling of bearer rejected, already enabled [ 1132.597204][T14245] syzkaller0: entered promiscuous mode [ 1132.603701][T14245] syzkaller0: entered allmulticast mode [ 1132.736706][ T30] audit: type=1804 audit(1780303394.917:17): pid=14258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.17598" name="/newroot/3543/cgroup.controllers" dev="tmpfs" ino=17890 res=1 errno=0 [ 1132.810254][ T30] audit: type=1800 audit(1780303394.917:18): pid=14258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17598" name="cgroup.controllers" dev="tmpfs" ino=17890 res=0 errno=0 [ 1133.134883][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17600'. [ 1133.311135][T14271] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17600'. [ 1133.324501][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17601'. [ 1136.499301][T14278] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1136.522923][T14280] syzkaller0: entered promiscuous mode [ 1136.540127][T14280] syzkaller0: entered allmulticast mode [ 1136.778437][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17606'. [ 1136.902799][T14303] tipc: Resetting bearer [ 1137.120623][T15780] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1137.263509][T14314] syzkaller0: entered promiscuous mode [ 1137.269932][T14314] syzkaller0: entered allmulticast mode [ 1137.471736][T14324] netlink: 'syz.3.17612': attribute type 2 has an invalid length. [ 1137.498546][T14324] netlink: 'syz.3.17612': attribute type 2 has an invalid length. [ 1137.589607][T15780] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1137.635891][T14328] netlink: 'syz.4.17615': attribute type 13 has an invalid length. [ 1138.129886][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17617'. [ 1138.158826][T14338] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 1138.204593][T14340] tipc: Enabling of bearer rejected, already enabled [ 1138.440456][T14350] netlink: 'syz.4.17621': attribute type 1 has an invalid length. [ 1138.567475][T14350] bond18: entered promiscuous mode [ 1138.611555][T14350] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1138.683722][T14354] ipvlan1: entered allmulticast mode [ 1138.711407][T14354] bond18: entered allmulticast mode [ 1138.785103][T14357] ipvlan2: entered allmulticast mode [ 1138.792303][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17624'. [ 1138.838495][T14359] bond18: (slave bridge15): making interface the new active one [ 1138.851384][T14359] bridge15: entered promiscuous mode [ 1138.857386][T14359] bridge15: entered allmulticast mode [ 1138.866358][T14359] bond18: (slave bridge15): Enslaving as an active interface with an up link [ 1138.894379][T14365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17624'. [ 1138.922002][T14364] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1139.262182][T14375] ip6tnl5: entered allmulticast mode [ 1139.292842][ T37] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1139.314746][ T37] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1139.323326][T15780] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1139.400533][ T30] audit: type=1804 audit(1780303401.587:19): pid=14378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.17628" name="/newroot/3568/cgroup.controllers" dev="tmpfs" ino=17983 res=1 errno=0 [ 1139.446262][ T30] audit: type=1800 audit(1780303401.607:20): pid=14378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17628" name="cgroup.controllers" dev="tmpfs" ino=17983 res=0 errno=0 [ 1139.493908][ T30] audit: type=1804 audit(1780303401.667:21): pid=14378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.17628" name="/newroot/3568/cgroup.controllers" dev="tmpfs" ino=17983 res=1 errno=0 [ 1139.580688][T15780] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1139.590747][T14380] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1139.697021][T14384] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1139.718929][T14384] syzkaller0: entered promiscuous mode [ 1139.733781][T14384] syzkaller0: entered allmulticast mode [ 1139.741447][T14386] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.17632'. [ 1139.778607][T15780] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1139.834554][T14386] syzkaller1: entered promiscuous mode [ 1139.844297][T14386] syzkaller1: entered allmulticast mode [ 1140.134133][T14396] syzkaller0: entered promiscuous mode [ 1140.144004][T14396] syzkaller0: entered allmulticast mode [ 1140.160245][T14401] tipc: Enabled bearer , priority 0 [ 1140.173456][T14396] TC_ACT_REPEAT abuse ? [ 1140.184593][T14401] syzkaller0: entered promiscuous mode [ 1140.193121][T14401] syzkaller0: entered allmulticast mode [ 1140.944446][T14424] netlink: 14 bytes leftover after parsing attributes in process `syz.0.17643'. [ 1140.976828][T14412] tipc: Resetting bearer [ 1140.998590][T14399] tipc: Resetting bearer [ 1141.058862][T14399] tipc: Disabling bearer [ 1141.137430][T14424] bond0: (slave dummy0): Releasing backup interface [ 1141.265966][T14436] netlink: 732 bytes leftover after parsing attributes in process `syz.3.17648'. [ 1141.285451][T14436] netlink: 732 bytes leftover after parsing attributes in process `syz.3.17648'. [ 1141.389690][T14436] netlink: 'syz.3.17648': attribute type 10 has an invalid length. [ 1141.412098][T14442] syzkaller0: entered promiscuous mode [ 1141.417827][T14442] syzkaller0: entered allmulticast mode [ 1141.450027][T14441] syzkaller0: entered promiscuous mode [ 1141.473623][T14441] syzkaller0: entered allmulticast mode [ 1142.083337][T14448] syzkaller0: entered promiscuous mode [ 1142.090922][T14448] syzkaller0: entered allmulticast mode [ 1143.569296][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1145.612636][T14501] Set syz1 is full, maxelem 65536 reached [ 1146.780095][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1147.042167][T14473] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 1147.145055][T14489] veth1_macvtap: renamed from veth1_vlan [ 1147.181532][T14499] lo: Caught tx_queue_len zero misconfig [ 1149.891539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.388452][T14540] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1151.429495][T14536] syzkaller0: entered promiscuous mode [ 1151.435663][T14536] syzkaller0: entered allmulticast mode [ 1151.532765][T14564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17670'. [ 1151.569767][T14533] syzkaller0: entered promiscuous mode [ 1151.575380][T14533] syzkaller0: entered allmulticast mode [ 1151.617435][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17671'. [ 1152.540251][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1155.648725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.021172][ T5294] veth1_macvtap: left promiscuous mode [ 1158.037331][T14567] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1158.252800][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17676'. [ 1158.323375][T14600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17677'. [ 1158.370663][T14604] team0: Mode changed to "roundrobin" [ 1158.810221][T14623] tipc: Enabled bearer , priority 0 [ 1158.852328][T14623] syzkaller0: entered promiscuous mode [ 1158.867322][T14623] syzkaller0: entered allmulticast mode [ 1158.984188][T14623] tipc: Resetting bearer [ 1159.014999][T14621] tipc: Resetting bearer [ 1159.155361][T14621] tipc: Disabling bearer [ 1159.264096][T14642] tipc: Enabling of bearer rejected, failed to enable media [ 1159.530944][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17685'. [ 1159.608343][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17686'. [ 1159.987295][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17688'. [ 1160.152296][T14665] ip6gretap0 (unregistering): left promiscuous mode [ 1160.286440][T14672] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 1160.295748][T14672] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 1160.688706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.793476][T14691] syzkaller0: entered promiscuous mode [ 1160.808388][T14691] syzkaller0: entered allmulticast mode [ 1164.055438][T14709] tipc: Enabled bearer , priority 0 [ 1164.075217][T14710] syzkaller0: entered promiscuous mode [ 1164.103826][T14710] syzkaller0: entered allmulticast mode [ 1164.135987][T14717] tipc: Resetting bearer [ 1164.181157][T14707] tipc: Resetting bearer [ 1164.239642][T14707] tipc: Disabling bearer [ 1164.393580][T14745] netlink: 'syz.2.17705': attribute type 12 has an invalid length. [ 1164.615245][T14750] netlink: 'syz.1.17706': attribute type 11 has an invalid length. [ 1164.625577][T14750] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.17706'. [ 1164.826693][T14757] tipc: Enabled bearer , priority 0 [ 1164.854352][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17707'. [ 1164.865388][T14757] syzkaller0: entered promiscuous mode [ 1164.882869][T14757] syzkaller0: entered allmulticast mode [ 1164.967955][T14757] tipc: Resetting bearer [ 1164.995674][T14755] tipc: Resetting bearer [ 1165.089906][T14755] tipc: Disabling bearer [ 1165.233043][T14735] syzkaller0 speed is unknown, defaulting to 1000 [ 1165.244320][T14752] rdma_rxe: rxe_newlink: failed to add bond0 [ 1165.550748][T14777] veth0_macvtap: entered allmulticast mode [ 1165.557342][T14777] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1165.697534][T14783] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 1165.730015][T14783] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 1165.858432][T14790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17718'. [ 1166.124446][T14800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17719'. [ 1166.294473][T14794] bond19 (unregistering): Released all slaves [ 1166.528759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.820114][T14825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17722'. [ 1167.250555][T14800] ip6erspan0: entered allmulticast mode [ 1167.262723][T14804] ip6erspan0: left allmulticast mode [ 1167.488845][T14828] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 1167.604861][T14831] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1167.753008][T14831] bond14 (unregistering): Released all slaves [ 1167.888846][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.031544][T14860] syzkaller0: entered promiscuous mode [ 1168.042188][T14860] syzkaller0: entered allmulticast mode [ 1168.057269][T14861] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 1168.274263][T14875] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17731'. [ 1168.521563][T14881] syzkaller0: entered promiscuous mode [ 1168.527230][T14881] syzkaller0: entered allmulticast mode [ 1168.605182][T14886] : renamed from bond0 (while UP) [ 1168.630834][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17733'. [ 1168.739659][T14886] team1: entered promiscuous mode [ 1168.749511][T14886] team1: entered allmulticast mode [ 1168.755528][T14886] 8021q: adding VLAN 0 to HW filter on device team1 [ 1168.864806][T14894] tipc: Enabled bearer , priority 0 [ 1168.884027][T14896] syzkaller0: entered promiscuous mode [ 1168.895172][T14896] syzkaller0: entered allmulticast mode [ 1168.987561][T14890] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1169.178374][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1169.187870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.655154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.866149][T14900] tipc: Resetting bearer [ 1172.880812][T14905] ip6tnl8: entered allmulticast mode [ 1172.887999][ T1107] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 1172.896187][ T1107] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 1172.909001][T31517] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 1172.960976][T14912] bridge0: port 2(vlan0) entered blocking state [ 1172.972267][T14912] bridge0: port 2(vlan0) entered disabled state [ 1172.990530][T14912] vlan0: entered allmulticast mode [ 1172.998490][T14912] bridge_slave_1: entered allmulticast mode [ 1173.022143][T14912] vlan0: entered promiscuous mode [ 1173.043239][T14888] tipc: Resetting bearer [ 1173.115911][T14888] tipc: Disabling bearer [ 1173.238796][T31517] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 1173.260171][T14938] bond0: Device is already in use. [ 1173.545770][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17743'. [ 1173.561677][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17745'. [ 1173.574291][T14951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1173.687827][T14951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.814183][T31517] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 1174.557863][T14985] syzkaller0: entered promiscuous mode [ 1174.583473][T14985] syzkaller0: entered allmulticast mode [ 1175.029935][T15002] syzkaller0: entered promiscuous mode [ 1175.045045][T15002] syzkaller0: entered allmulticast mode [ 1175.275984][T15006] syzkaller0: entered promiscuous mode [ 1175.294898][T15006] syzkaller0: entered allmulticast mode [ 1175.336232][T15006] tc action pedit offset 136 out of bounds [ 1175.682010][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17756'. [ 1175.821430][T15013] smc: net device wg2 erased user defined pnetid S [ 1175.867709][T15013] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1175.878564][T15013] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 1175.992036][T14979] syzkaller0 speed is unknown, defaulting to 1000 [ 1176.270335][T15027] xt_hashlimit: invalid rate [ 1176.688534][ C0] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 1176.688889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.793307][T14993] syzkaller0 speed is unknown, defaulting to 1000 [ 1177.490519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.591779][T15059] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1177.610227][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17761'. [ 1177.640255][T15059] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1178.828105][T15087] netlink: 'syz.1.17765': attribute type 1 has an invalid length. [ 1178.918306][T15087] bond21: (slave geneve4): making interface the new active one [ 1178.927822][T15087] bond21: (slave geneve4): Enslaving as an active interface with an up link [ 1178.940320][ T1107] netdevsim netdevsim1 €Â: set [1, 0] type 2 family 0 port 20000 - 0 [ 1178.954751][T15087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17765'. [ 1178.997563][ T1107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1179.056474][T15087] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1179.110139][T15093] tipc: Resetting bearer [ 1179.254538][T15093] tipc: Resetting bearer [ 1179.365955][ T1107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1179.398633][ T1107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1179.427526][T15102] mac80211_hwsim hwsim7 wlan0: Caught tx_queue_len zero misconfig [ 1179.736515][T15124] netlink: 136 bytes leftover after parsing attributes in process `syz.1.17772'. [ 1179.748000][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17772'. [ 1179.757490][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17772'. [ 1180.887876][T15153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1180.955983][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17776'. [ 1180.997001][T15146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17776'. [ 1181.037103][T15146] nbd: must specify at least one socket [ 1181.056569][T15153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17776'. [ 1181.086614][T15153] nbd: must specify at least one socket [ 1181.359119][T15167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.960342][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17786'. [ 1182.170206][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.202867][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.262243][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.310875][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.771423][T15222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17788'. [ 1183.308413][T15244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17792'. [ 1183.501594][T15249] netlink: 'syz.0.17793': attribute type 1 has an invalid length. [ 1183.600612][T15249] bond21: entered promiscuous mode [ 1183.606528][T15249] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1183.636809][T15249] bond21: entered allmulticast mode [ 1183.754948][T15249] bond21: (slave bridge14): making interface the new active one [ 1183.778711][T15249] bridge14: entered promiscuous mode [ 1183.795074][T15249] bridge14: entered allmulticast mode [ 1183.835738][T15249] bond21: (slave bridge14): Enslaving as an active interface with an up link [ 1184.057610][T15264] rdma_rxe: rxe_newlink: failed to add bond0 [ 1184.217596][T15274] __nla_validate_parse: 3 callbacks suppressed [ 1184.217617][T15274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17795'. [ 1184.677244][ T30] audit: type=1804 audit(1780303446.857:22): pid=15285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.17797" name="/newroot/3435/memory.events" dev="tmpfs" ino=17330 res=1 errno=0 [ 1184.721189][T15290] netlink: 'syz.1.17798': attribute type 13 has an invalid length. [ 1184.756307][ T30] audit: type=1800 audit(1780303446.857:23): pid=15285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.17797" name="memory.events" dev="tmpfs" ino=17330 res=0 errno=0 [ 1184.758145][T15290] netlink: 'syz.1.17798': attribute type 17 has an invalid length. [ 1184.869336][T10618] netdevsim netdevsim1 €Â: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1184.893536][T10618] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1185.066588][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17800'. [ 1185.137735][T15290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.149788][T15290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.176760][T15290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.222956][T15290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1185.234389][T15290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1185.252715][T15290] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1185.269503][T15304] block nbd6: server does not support multiple connections per device. [ 1185.277997][T10618] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1185.290542][T15304] block nbd6: shutting down sockets [ 1185.351428][T15298] bond14: entered promiscuous mode [ 1185.361347][T15298] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1185.424144][T15296] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1185.434174][T15301] tipc: Resetting bearer [ 1185.441275][T15301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.451632][T15301] bond25: (slave team0): Enslaving as an active interface with an up link [ 1185.501117][T15307] bridge17: entered promiscuous mode [ 1185.507414][T15307] bond14: (slave bridge17): Enslaving as an active interface with an up link [ 1185.517023][T10618] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1185.532466][T15311] batadv_slave_1: entered promiscuous mode [ 1185.547269][T15314] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17804'. [ 1185.810044][T15309] batadv_slave_1: left promiscuous mode [ 1185.856735][T15330] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17806'. [ 1185.884311][T15330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17806'. [ 1186.043231][T15338] rdma_rxe: rxe_newlink: failed to add bond0 [ 1186.241439][T15350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17808'. [ 1186.416939][T15336] syzkaller0: entered promiscuous mode [ 1186.439550][T15336] syzkaller0: entered allmulticast mode [ 1186.773238][ T30] audit: type=1804 audit(1780303448.957:24): pid=15366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.17810" name="/newroot/3578/memory.events" dev="tmpfs" ino=18070 res=1 errno=0 [ 1186.852196][ T30] audit: type=1800 audit(1780303448.957:25): pid=15366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17810" name="memory.events" dev="tmpfs" ino=18070 res=0 errno=0 [ 1187.075285][T15379] netlink: 'syz.1.17813': attribute type 10 has an invalid length. [ 1190.495010][T15375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1190.661848][T15389] netlink: 'syz.0.17816': attribute type 20 has an invalid length. [ 1190.920148][T15398] rdma_rxe: rxe_newlink: failed to add bond0 [ 1191.067602][T15405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17820'. [ 1191.344075][T15412] netlink: 'syz.3.17822': attribute type 1 has an invalid length. [ 1191.510636][T15412] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1191.563942][T15415] macvlan0: entered promiscuous mode [ 1191.581006][T15415] macvlan0: entered allmulticast mode [ 1191.590575][T15415] bond26: entered allmulticast mode [ 1191.601007][T15415] bond26: entered promiscuous mode [ 1191.611977][T15415] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1191.662317][T15415] team0: Port device macvlan0 added [ 1191.727419][T15423] : renamed from bond0 (while UP) [ 1191.766435][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17824'. [ 1191.860010][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17824'. [ 1191.866584][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17825'. [ 1191.895940][T15423] team1: entered promiscuous mode [ 1191.920419][T15423] team1: entered allmulticast mode [ 1191.937810][T15423] 8021q: adding VLAN 0 to HW filter on device team1 [ 1191.965760][T15426] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 1192.073809][T15426] team2: entered promiscuous mode [ 1192.081134][T15426] team2: entered allmulticast mode [ 1192.086991][T15426] 8021q: adding VLAN 0 to HW filter on device team2 [ 1193.211036][T15454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17832'. [ 1193.294829][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17832'. [ 1193.352724][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17833'. [ 1193.376953][T15454] team2: entered promiscuous mode [ 1193.397151][T15454] team2: entered allmulticast mode [ 1193.417027][T15454] 8021q: adding VLAN 0 to HW filter on device team2 [ 1193.643199][T15477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17833'. [ 1193.697587][T15455] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 1193.734616][T15455] team3: entered promiscuous mode [ 1193.740110][T15455] team3: entered allmulticast mode [ 1193.746116][T15455] 8021q: adding VLAN 0 to HW filter on device team3 [ 1193.810182][T15458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.844507][T15475] netlink: 200 bytes leftover after parsing attributes in process `syz.1.17833'. [ 1193.938135][T15477] bond0: (slave bridge16): Enslaving as an active interface with an up link [ 1194.013098][T15485] syzkaller0: entered promiscuous mode [ 1194.019856][T15485] syzkaller0: entered allmulticast mode [ 1194.227065][T15492] hsr0: entered promiscuous mode [ 1194.271255][T15492] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17841'. [ 1194.282782][T15492] hsr_slave_0: left promiscuous mode [ 1194.292487][T15492] hsr0 (unregistering): left promiscuous mode [ 1194.328559][T15494] syzkaller0: entered promiscuous mode [ 1194.334215][T15494] syzkaller0: entered allmulticast mode [ 1194.661902][T15511] netlink: 'syz.1.17846': attribute type 32 has an invalid length. [ 1194.680778][T15503] tipc: Enabling of bearer rejected, already enabled [ 1194.855406][T15516] veth0_virtÿifi: entered allmulticast mode [ 1195.184101][T15530] netlink: 'syz.4.17849': attribute type 2 has an invalid length. [ 1195.210496][T15530] netlink: 'syz.4.17849': attribute type 2 has an invalid length. [ 1197.107517][T15568] syzkaller0: entered promiscuous mode [ 1197.115599][T15568] syzkaller0: entered allmulticast mode [ 1197.203758][T15568] tipc: Enabled bearer , priority 0 [ 1197.217517][T15570] syzkaller0: entered promiscuous mode [ 1197.246542][T15570] syzkaller0: entered allmulticast mode [ 1197.423410][T15567] tipc: Resetting bearer [ 1197.499515][T15567] tipc: Disabling bearer [ 1197.822208][ T30] audit: type=1804 audit(1780303460.007:26): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.17866" name="/newroot/3564/cgroup.controllers" dev="tmpfs" ino=17966 res=1 errno=0 [ 1197.868633][ T30] audit: type=1800 audit(1780303460.007:27): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17866" name="cgroup.controllers" dev="tmpfs" ino=17966 res=0 errno=0 [ 1198.816867][T15608] team0: Device macvlan0 failed to change mtu [ 1199.334042][T15615] tc action pedit offset must be on 32 bit boundaries [ 1199.599935][T15617] __nla_validate_parse: 3 callbacks suppressed [ 1199.599960][T15617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17873'. [ 1199.773780][T15621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17874'. [ 1199.862257][T15598] syzkaller0 speed is unknown, defaulting to 1000 [ 1200.137307][T15628] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17877'. [ 1200.405821][T15639] netlink: 'syz.2.17880': attribute type 4 has an invalid length. [ 1200.724586][T15642] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1200.781478][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17881'. [ 1201.110733][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17885'. [ 1201.152244][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17885'. [ 1201.168513][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1201.601210][T15670] veth1_macvtap: left promiscuous mode [ 1201.630205][T15670] veth0_macvtap: left promiscuous mode [ 1201.656800][T15670] veth0_macvtap: entered promiscuous mode [ 1201.689952][T15670] veth1_macvtap: entered promiscuous mode [ 1201.725947][T15670] 8021q: adding VLAN 0 to HW filter on device €Â [ 1201.764196][T15670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1201.789386][T15670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1201.849032][T15670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1201.876864][T15670] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1201.987978][ T3361] netdevsim netdevsim1 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.008867][T15677] tipc: Enabled bearer , priority 0 [ 1202.045370][ T3361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.084235][ T3361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.097553][ T3361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.134951][T15676] tipc: Resetting bearer [ 1202.185760][T15684] syzkaller0: entered promiscuous mode [ 1202.209444][T15684] syzkaller0: entered allmulticast mode [ 1202.252340][T15672] tipc: Resetting bearer [ 1202.334330][T15672] tipc: Disabling bearer [ 1202.633211][T15650] syzkaller0 speed is unknown, defaulting to 1000 [ 1202.788057][T15701] nbd: nbd4 already in use [ 1202.806343][T15701] block nbd4: NBD_DISCONNECT [ 1202.824559][T15701] block nbd4: Send disconnect failed -32 [ 1202.960571][T15697] netlink: 'syz.1.17893': attribute type 16 has an invalid length. [ 1203.030258][T15697] netlink: 'syz.1.17893': attribute type 17 has an invalid length. [ 1203.280884][T15697] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1203.791671][T15719] tipc: Enabling of bearer rejected, already enabled [ 1203.975421][T15728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1204.169102][T15746] netlink: 288 bytes leftover after parsing attributes in process `syz.3.17905'. [ 1204.179382][T15746] openvswitch: netlink: Flow key attr not present in new flow. [ 1204.289146][T15752] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1204.973416][T15769] bond12: entered allmulticast mode [ 1205.160069][T15769] : entered promiscuous mode [ 1205.181130][T15775] rdma_rxe: rxe_newlink: failed to add bond0 [ 1206.223660][T15821] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1206.250664][T15821] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1206.886091][T15836] netlink: 'syz.4.17925': attribute type 1 has an invalid length. [ 1206.897728][T15836] netlink: 224 bytes leftover after parsing attributes in process `syz.4.17925'. [ 1206.943860][T15836] netlink: 'syz.4.17925': attribute type 10 has an invalid length. [ 1206.975813][T15836] netlink: 'syz.4.17925': attribute type 10 has an invalid length. [ 1207.100126][T15794] syzkaller0 speed is unknown, defaulting to 1000 [ 1207.857754][T15816] syzkaller0 speed is unknown, defaulting to 1000 [ 1207.934703][T15861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17929'. [ 1208.473575][T15873] netlink: 'syz.4.17933': attribute type 13 has an invalid length. [ 1209.635099][T15883] rdma_rxe: rxe_newlink: failed to add bond0 [ 1209.704875][T15885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17936'. [ 1210.097630][T15897] netlink: 108 bytes leftover after parsing attributes in process `syz.3.17937'. [ 1213.179431][T15894] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17937'. [ 1213.255052][T15897] erspan0: entered promiscuous mode [ 1213.296640][T15897] bridge0: port 1(1¾x9ÿ) entered blocking state [ 1213.303389][T15897] bridge0: port 1(1¾x9ÿ) entered listening state [ 1213.346196][T15897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.377209][T15897] tipc: Resetting bearer [ 1213.435845][T15897] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1213.486256][T15914] netlink: 'syz.4.17940': attribute type 1 has an invalid length. [ 1213.510326][T15899] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1213.665921][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17940'. [ 1213.675538][T15917] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1213.686545][T15917] bond19: (slave bond20): making interface the new active one [ 1213.701707][T15914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17940'. [ 1213.720123][T15917] bond19: (slave bond20): Enslaving as an active interface with an up link [ 1213.781141][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1213.801470][T15914] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1214.004939][T15927] bond15: option min_links: invalid value (18446744073697427452) [ 1214.013426][T15927] bond15: option min_links: allowed values 0 - 2147483647 [ 1214.033280][T15933] netlink: 'syz.4.17944': attribute type 3 has an invalid length. [ 1214.042837][T15927] bond15 (unregistering): Released all slaves [ 1214.075818][T15933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17944'. [ 1214.171639][T15943] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1214.380879][T15953] netlink: 'syz.3.17948': attribute type 12 has an invalid length. [ 1214.405744][T15938] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1214.442907][T15938] CPU: 0 UID: 0 PID: 15938 Comm: syz.0.17946 Not tainted syzkaller #0 PREEMPT(full) [ 1214.442938][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1214.442953][T15938] Call Trace: [ 1214.442963][T15938] [ 1214.442973][T15938] dump_stack_lvl+0xe8/0x150 [ 1214.443009][T15938] sysfs_warn_dup+0x8e/0xa0 [ 1214.443095][T15938] sysfs_do_create_link_sd+0xc0/0x110 [ 1214.443128][T15938] device_add_class_symlinks+0x1cf/0x240 [ 1214.443282][T15938] device_add+0x475/0xbb0 [ 1214.443322][T15938] wiphy_register+0x1fb1/0x2fe0 [ 1214.443448][T15938] ? __pfx_wiphy_register+0x10/0x10 [ 1214.443492][T15938] ? __pfx_netdev_run_todo+0x10/0x10 [ 1214.443579][T15938] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1214.443656][T15938] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1214.443754][T15938] ieee80211_register_hw+0x3c53/0x4910 [ 1214.443815][T15938] ? ieee80211_register_hw+0x1971/0x4910 [ 1214.443874][T15938] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1214.443902][T15938] ? __asan_memset+0x22/0x50 [ 1214.443933][T15938] ? __hrtimer_setup+0x1b7/0x260 [ 1214.443960][T15938] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1214.444045][T15938] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 1214.444107][T15938] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1214.444136][T15938] ? __asan_memcpy+0x40/0x70 [ 1214.444171][T15938] hwsim_new_radio_nl+0xd96/0xfa0 [ 1214.444214][T15938] genl_family_rcv_msg_doit+0x22a/0x330 [ 1214.444313][T15938] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1214.444361][T15938] ? bpf_lsm_capable+0x9/0x20 [ 1214.444383][T15938] ? security_capable+0x7e/0x2c0 [ 1214.444502][T15938] genl_rcv_msg+0x61c/0x7a0 [ 1214.444542][T15938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1214.444573][T15938] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1214.444613][T15938] netlink_rcv_skb+0x232/0x4b0 [ 1214.444639][T15938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1214.444672][T15938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1214.444716][T15938] ? down_read+0x270/0x2e0 [ 1214.444740][T15938] ? genl_rcv+0xd/0x40 [ 1214.444772][T15938] genl_rcv+0x28/0x40 [ 1214.444800][T15938] netlink_unicast+0x75c/0x8e0 [ 1214.444837][T15938] netlink_sendmsg+0x813/0xb40 [ 1214.444875][T15938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1214.444906][T15938] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1214.444941][T15938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1214.444975][T15938] ____sys_sendmsg+0x972/0x9f0 [ 1214.445002][T15938] ? __might_fault+0xaf/0x130 [ 1214.445039][T15938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1214.445077][T15938] ? import_iovec+0x73/0xa0 [ 1214.445191][T15938] ___sys_sendmsg+0x2a5/0x360 [ 1214.445214][T15938] ? __lock_acquire+0x6b5/0x2cf0 [ 1214.445253][T15938] ? __pfx____sys_sendmsg+0x10/0x10 [ 1214.445287][T15938] ? futex_wake+0x4ac/0x580 [ 1214.445357][T15938] ? __fget_files+0x2a/0x420 [ 1214.445396][T15938] ? __fget_files+0x3a0/0x420 [ 1214.445437][T15938] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1214.445466][T15938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1214.445512][T15938] ? rcu_is_watching+0x15/0xb0 [ 1214.445556][T15938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.445582][T15938] do_syscall_64+0x174/0x580 [ 1214.445607][T15938] ? clear_bhb_loop+0x40/0x90 [ 1214.445635][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.445657][T15938] RIP: 0033:0x7f275719ce59 [ 1214.445680][T15938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.445699][T15938] RSP: 002b:00007f2757f78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1214.445723][T15938] RAX: ffffffffffffffda RBX: 00007f2757415fa0 RCX: 00007f275719ce59 [ 1214.445738][T15938] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1214.445752][T15938] RBP: 00007f2757232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1214.445766][T15938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.445779][T15938] R13: 00007f2757416038 R14: 00007f2757415fa0 R15: 00007ffcc7cfdaa8 [ 1214.445818][T15938] [ 1214.836158][ T29] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1214.844540][ T1107] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1214.859614][T15954] blkio.reset_stats is deprecated [ 1215.009072][ T30] audit: type=1800 audit(1780303477.187:28): pid=15937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.17945" name="memory.events" dev="tmpfs" ino=18436 res=0 errno=0 [ 1215.081782][T15958] netlink: 288 bytes leftover after parsing attributes in process `syz.0.17950'. [ 1215.096723][T15958] openvswitch: netlink: Flow key attr not present in new flow. [ 1215.116487][T15959] netlink: 'syz.2.17949': attribute type 13 has an invalid length. [ 1215.141839][T15959] netlink: 'syz.2.17949': attribute type 17 has an invalid length. [ 1215.229187][T15959] syz_tun: left promiscuous mode [ 1215.310285][T15965] nbd4: detected capacity change from 0 to 63 [ 1215.317574][T15959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.344012][T15968] block nbd4: NBD_DISCONNECT [ 1215.383778][T15968] block nbd4: Disconnected due to user request. [ 1215.393394][T15968] block nbd4: shutting down sockets [ 1215.406256][ C0] blk_print_req_error: 138 callbacks suppressed [ 1215.406278][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.422236][ C0] buffer_io_error: 138 callbacks suppressed [ 1215.422337][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1215.442943][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.452161][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1215.460065][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.469164][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1215.477020][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.486151][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1215.497492][T15925] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.507880][T15925] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1215.520895][T15925] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.530637][T15925] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1215.539171][T15925] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.564867][T15925] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1215.591495][T15925] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.626126][T15925] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1215.658610][T15925] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.689487][T15959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1215.702264][T15925] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1215.721483][T15925] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1215.735091][T15959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1215.759844][T15925] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1215.790630][T15959] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1215.807907][T15925] ldm_validate_partition_table(): Disk read failed. [ 1215.822923][T15925] Dev nbd4: unable to read RDB block 0 [ 1215.834620][T15925] nbd4: unable to read partition table [ 1215.886922][T15925] ldm_validate_partition_table(): Disk read failed. [ 1215.903533][T15965] ip6gre0: Caught tx_queue_len zero misconfig [ 1215.911171][T15925] Dev nbd4: unable to read RDB block 0 [ 1215.913347][T15965] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1215.925059][T15925] nbd4: unable to read partition table [ 1215.936583][ T29] uyz0: Port: 1 Link ACTIVE [ 1215.971018][T10618] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1216.006510][T10618] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1216.104007][T15980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17955'. [ 1216.173633][T15984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17957'. [ 1216.194929][T15980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17955'. [ 1216.275261][T15990] xt_hashlimit: max too large, truncated to 1048576 [ 1216.277548][T15992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17957'. [ 1216.468666][T15790] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1217.343739][T16038] openvswitch: netlink: Message has 4 unknown bytes. [ 1217.371625][T16038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1217.520430][T16044] : entered promiscuous mode [ 1217.666177][T16049] netlink: 'syz.3.17972': attribute type 1 has an invalid length. [ 1217.831469][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17971'. [ 1218.026436][T16046] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1218.164062][T16046] tipc: Resetting bearer [ 1218.312033][T16046] bridge13: port 1(veth0_to_bond) entered disabled state [ 1218.457538][T16046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.674785][T16046] gre1: left allmulticast mode [ 1218.950707][T16046] ip6tnl2: left allmulticast mode [ 1219.062480][T16046] bond5: left allmulticast mode [ 1219.228677][T16046] gretap0: left allmulticast mode [ 1219.238444][T16046] macvlan2: left allmulticast mode [ 1219.300576][T16046] ip6gre2: left promiscuous mode [ 1219.317007][T16046] ip6gre2: left allmulticast mode [ 1219.366332][T16046] bond9: left promiscuous mode [ 1219.425757][T16046] bond13: left promiscuous mode [ 1219.438475][T16046] vti0: left promiscuous mode [ 1219.470198][T16046] bond14: left promiscuous mode [ 1219.484973][T16046] ip6gre3: left promiscuous mode [ 1219.526372][T16046] gretap6: left promiscuous mode [ 1219.543945][T16046] bond16: left promiscuous mode [ 1219.557261][T16046] bridge8: left promiscuous mode [ 1219.583646][T16046] bond17: left promiscuous mode [ 1219.635643][T16046] bond20: left promiscuous mode [ 1219.641747][T16046] bond20: left allmulticast mode [ 1219.652724][T16046] bond22: left promiscuous mode [ 1219.657935][T16046] bridge14: left promiscuous mode [ 1219.664731][T16046] bond22: left allmulticast mode [ 1219.669943][T16046] bridge14: left allmulticast mode [ 1219.768617][T16046] ip6tnl5: left allmulticast mode [ 1219.809145][T16046] bond26: left allmulticast mode [ 1219.818356][T16046] bond26: left promiscuous mode [ 1219.825223][T16046] macvlan0: left promiscuous mode [ 1219.830647][T16046] macvlan0: left allmulticast mode [ 1219.846853][T16049] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR [ 1219.860508][T16052] gretap7: entered allmulticast mode [ 1219.886682][T16053] batman_adv: batadv0: Removing interface: gretap1 [ 1219.913185][T16053] tipc: Resetting bearer [ 1219.997117][T16053] tipc: Disabling bearer [ 1220.052041][ T146] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.063034][ T146] netdevsim netdevsim3 eth0: unset [0, 1] type 1 family 0 port 256 - 0 [ 1220.074113][ T146] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.236171][ T146] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.265524][ T146] netdevsim netdevsim3 eth1: unset [0, 1] type 1 family 0 port 256 - 0 [ 1220.294950][ T146] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.308457][ T146] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.322809][ T146] netdevsim netdevsim3 eth2: unset [0, 1] type 1 family 0 port 256 - 0 [ 1220.332586][ T146] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.349639][ T146] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1220.362465][ T146] netdevsim netdevsim3 eth3: unset [0, 1] type 1 family 0 port 256 - 0 [ 1220.371844][ T146] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.395925][T16095] syzkaller0: entered promiscuous mode [ 1220.403168][T16095] syzkaller0: entered allmulticast mode [ 1220.581831][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17984'. [ 1220.911745][T16121] vlan2: entered promiscuous mode [ 1220.919351][T16121] geneve1: entered promiscuous mode [ 1220.926250][T16121] vlan2: entered allmulticast mode [ 1220.947024][T16121] geneve1: entered allmulticast mode [ 1221.007284][ T5641] block nbd4: Receive control failed (result -32) [ 1221.534843][T16143] gretap0: left promiscuous mode [ 1221.549855][T16143] erspan0: left promiscuous mode [ 1221.656683][T16143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.690525][T16143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.715265][T16143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.847729][T16136] xt_HMARK: proto mask must be zero with L3 mode [ 1221.924842][T16143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.951147][T16143] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1221.984063][T14163] bridge0: port 1(1¾x9ÿ) entered blocking state [ 1221.990677][T14163] bridge0: port 1(1¾x9ÿ) entered listening state [ 1222.048119][ T3317] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.093978][ T3317] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.120856][T16065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1222.137221][ T3317] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.156053][ T3317] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.193013][T13915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1222.428680][T16065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1222.445850][T16168] netlink: 9 bytes leftover after parsing attributes in process `syz.3.17996'. [ 1222.744903][T16180] netlink: 'syz.4.17998': attribute type 3 has an invalid length. [ 1222.745267][T16174] netlink: 3 bytes leftover after parsing attributes in process `syz.2.17997'. [ 1222.821180][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17997'. [ 1222.873376][T16174] netlink: 3 bytes leftover after parsing attributes in process `syz.2.17997'. [ 1222.904000][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17997'. [ 1222.937016][T16174] netlink: 3 bytes leftover after parsing attributes in process `syz.2.17997'. [ 1223.251565][T13915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1223.295179][T13915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1223.420353][T16153] syzkaller0 speed is unknown, defaulting to 1000 [ 1223.650063][T16211] netlink: 'syz.2.18005': attribute type 3 has an invalid length. [ 1223.980260][T16216] block nbd2: NBD_DISCONNECT [ 1224.198697][T16226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18009'. [ 1224.231432][T12381] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1224.253048][T16230] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 1224.451340][T16230] vlan3: entered promiscuous mode [ 1224.463590][T16230] 0ªî{X¹¦: entered promiscuous mode [ 1224.811272][T16249] netlink: 'syz.4.18014': attribute type 13 has an invalid length. [ 1224.853886][T16249] netlink: 'syz.4.18014': attribute type 17 has an invalid length. [ 1224.967816][T16258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.226036][T16249] : left promiscuous mode [ 1225.482090][T16249] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1225.593278][T16273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18018'. [ 1225.731326][T16273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1225.753489][T16273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.762090][T16273] batman_adv: batadv0: Removing interface: wlan0 [ 1225.805998][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18020'. [ 1225.971588][T16286] netlink: 288 bytes leftover after parsing attributes in process `syz.0.18022'. [ 1226.002855][T16286] openvswitch: netlink: Flow key attr not present in new flow. [ 1226.124409][T16290] IPv6: sit5: Disabled Multicast RS [ 1226.145336][T16290] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18024'. [ 1226.175636][T16293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18025'. [ 1226.221478][T16296] bond25: (slave team0): Releasing backup interface [ 1226.229624][T16065] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1226.256050][T16296] tipc: Resetting bearer [ 1226.289869][T16296] tipc: Resetting bearer [ 1226.307541][T16296] tipc: Resetting bearer [ 1226.323280][T16296] ¾x9ÿ: left allmulticast mode [ 1226.336599][T16296] ¾x9ÿ: left promiscuous mode [ 1226.356020][T16296] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1226.403950][T16296] veth0_to_bond: left allmulticast mode [ 1226.427422][T16296] veth0_to_bond: left promiscuous mode [ 1226.455439][T16296] bridge13: port 1(veth0_to_bond) entered disabled state [ 1226.476298][T16308] syz.1.18028: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1226.502649][T16308] CPU: 1 UID: 0 PID: 16308 Comm: syz.1.18028 Not tainted syzkaller #0 PREEMPT(full) [ 1226.502681][T16308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1226.502695][T16308] Call Trace: [ 1226.502704][T16308] [ 1226.502714][T16308] dump_stack_lvl+0xe8/0x150 [ 1226.502747][T16308] warn_alloc+0x249/0x340 [ 1226.502783][T16308] ? stack_trace_save+0xa9/0x100 [ 1226.502819][T16308] ? __pfx_warn_alloc+0x10/0x10 [ 1226.502859][T16308] ? kasan_save_track+0x4f/0x80 [ 1226.502887][T16308] ? kasan_save_track+0x3e/0x80 [ 1226.502914][T16308] ? __kasan_kmalloc+0x93/0xb0 [ 1226.502943][T16308] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1226.502977][T16308] ? xskq_create+0x56/0x170 [ 1226.503008][T16308] ? xsk_setsockopt+0x54c/0x990 [ 1226.503035][T16308] ? do_sock_setsockopt+0x17c/0x1b0 [ 1226.503058][T16308] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1226.503079][T16308] ? do_syscall_64+0x174/0x580 [ 1226.503105][T16308] __vmalloc_node_range_noprof+0x132/0x1750 [ 1226.503171][T16308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1226.503209][T16308] ? __kasan_kmalloc+0x93/0xb0 [ 1226.503246][T16308] vmalloc_user_noprof+0xad/0xe0 [ 1226.503276][T16308] ? xskq_create+0xbf/0x170 [ 1226.503308][T16308] xskq_create+0xbf/0x170 [ 1226.503343][T16308] xsk_init_queue+0x8a/0xe0 [ 1226.503377][T16308] xsk_setsockopt+0x54c/0x990 [ 1226.503411][T16308] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1226.503443][T16308] ? __pfx_aa_sk_perm+0x10/0x10 [ 1226.503479][T16308] ? aa_sock_opt_perm+0xff/0x1a0 [ 1226.503515][T16308] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1226.503545][T16308] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1226.503576][T16308] do_sock_setsockopt+0x17c/0x1b0 [ 1226.503605][T16308] __x64_sys_setsockopt+0x13d/0x1b0 [ 1226.503643][T16308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.503668][T16308] do_syscall_64+0x174/0x580 [ 1226.503691][T16308] ? trace_irq_disable+0x3b/0x140 [ 1226.503724][T16308] ? clear_bhb_loop+0x40/0x90 [ 1226.503750][T16308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.503771][T16308] RIP: 0033:0x7f45ca19ce59 [ 1226.503792][T16308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.503811][T16308] RSP: 002b:00007f45cafef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1226.503834][T16308] RAX: ffffffffffffffda RBX: 00007f45ca415fa0 RCX: 00007f45ca19ce59 [ 1226.503850][T16308] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1226.503863][T16308] RBP: 00007f45ca232d6f R08: 0000000000000004 R09: 0000000000000000 [ 1226.503876][T16308] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.503890][T16308] R13: 00007f45ca416038 R14: 00007f45ca415fa0 R15: 00007fffa09b1898 [ 1226.503928][T16308] [ 1226.505135][T16308] Mem-Info: [ 1226.781678][T16296] bond0: (slave bond_slave_0): Releasing backup interface [ 1226.796806][T16308] active_anon:6318 inactive_anon:11 isolated_anon:0 [ 1226.796806][T16308] active_file:2504 inactive_file:40979 isolated_file:0 [ 1226.796806][T16308] unevictable:2393 dirty:389 writeback:0 [ 1226.796806][T16308] slab_reclaimable:13025 slab_unreclaimable:206737 [ 1226.796806][T16308] mapped:37253 shmem:3080 pagetables:1426 [ 1226.796806][T16308] sec_pagetables:0 bounce:0 [ 1226.796806][T16308] kernel_misc_reclaimable:0 [ 1226.796806][T16308] free:1193638 free_pcp:21900 free_cma:0 [ 1226.870178][T16296] bond0: (slave bond_slave_1): Releasing backup interface [ 1226.889734][T16308] Node 0 active_anon:25272kB inactive_anon:44kB active_file:10016kB inactive_file:163712kB unevictable:8936kB isolated(anon):0kB isolated(file):0kB mapped:149912kB dirty:1552kB writeback:0kB shmem:11784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16404kB pagetables:5532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1226.928470][T15790] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1226.965378][T16296] team0: Port device team_slave_0 removed [ 1226.982059][T16296] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1227.010056][T16308] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1227.095618][T16314] netlink: 'syz.1.18028': attribute type 10 has an invalid length. [ 1227.104000][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18020'. [ 1227.132773][T16299] team0: No ports can be present during mode change [ 1227.145631][T16308] Node 0 DMA free:11096kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:168kB local_pcp:44kB free_cma:0kB [ 1227.204895][T16310] §: renamed from sit0 (while UP) [ 1227.226638][T16317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18028'. [ 1227.253537][T16317] openvswitch: netlink: Message has 2 unknown bytes. [ 1227.269927][T16308] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1227.300093][T16319] netlink: 'syz.1.18028': attribute type 10 has an invalid length. [ 1227.321782][T16308] Node 0 DMA32 free:1192396kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25040kB inactive_anon:44kB active_file:10016kB inactive_file:163712kB unevictable:12644kB writepending:1584kB zspages:0kB present:3129332kB managed:2552608kB mlocked:11232kB bounce:0kB free_pcp:31272kB local_pcp:12384kB free_cma:0kB [ 1227.401529][T16308] lowmem_reserve[]: 0 0 0 0 0 [ 1227.409835][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18029'. [ 1227.429543][T16308] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1227.489532][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1227.519751][T16308] lowmem_reserve[]: 0 0 0 0 0 [ 1227.529901][T16314] team0: Port device – added [ 1227.541604][T16308] Node 1 Normal free:3581576kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:54780kB local_pcp:24504kB free_cma:0kB [ 1227.633097][T16319] team0: Port device – removed [ 1227.649677][T16308] lowmem_reserve[]: 0 0 0 0 0 [ 1227.671115][T16308] Node 0 DMA: 2*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11096kB [ 1227.701359][T16319] –: entered promiscuous mode [ 1227.736182][T16308] Node 0 DMA32: 4645*4kB (UME) 5761*8kB (UME) 3733*16kB (UME) 1050*32kB (UME) 293*64kB (UME) 819*128kB (UME) 790*256kB (UME) 466*512kB (UME) 287*1024kB (UM) 86*2048kB (UM) 0*4096kB = 1192428kB [ 1227.822414][T16308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1227.853883][T16308] Node 1 Normal: 10*4kB (U) 10*8kB (UM) 17*16kB (UM) 14*32kB (UM) 21*64kB (UM) 12*128kB (UM) 14*256kB (UM) 13*512kB (UM) 10*1024kB (UM) 13*2048kB (U) 862*4096kB (UM) = 3581576kB [ 1227.896935][T16308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1227.918456][T16308] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1227.936313][T16308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1227.958240][T16308] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1227.976736][T16308] 45092 total pagecache pages [ 1227.986633][T16308] 0 pages in swap cache [ 1227.993315][T16308] Free swap = 124996kB [ 1227.998292][T16308] Total swap = 124996kB [ 1228.003734][T16308] 2097051 pages RAM [ 1228.007635][T16308] 0 pages HighMem/MovableOnly [ 1228.013034][T16308] 427116 pages reserved [ 1228.017324][T16308] 0 pages cma reserved [ 1228.031797][T16324] veth0_macvtap: left allmulticast mode [ 1228.041186][T16324] erspan1: left allmulticast mode [ 1228.046796][T16324] bond3: left allmulticast mode [ 1228.053792][T16324] vlan1: left allmulticast mode [ 1228.058921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.059084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.077897][T16324] bond0: left allmulticast mode [ 1228.084077][T16324] ip6gre3: left allmulticast mode [ 1228.093591][T16324] bond9: left promiscuous mode [ 1228.098870][T16324] bond9: left allmulticast mode [ 1228.104573][T16324] bond12: left promiscuous mode [ 1228.109993][T16324] bridge15: left promiscuous mode [ 1228.115414][T16324] ipvlan2: left allmulticast mode [ 1228.120554][T16324] bond12: left allmulticast mode [ 1228.125736][T16324] bridge15: left allmulticast mode [ 1228.132001][T16324] veth15: left allmulticast mode [ 1228.137280][T16324] bond14: left promiscuous mode [ 1228.142242][T16324] bridge17: left promiscuous mode [ 1228.148869][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18029'. [ 1228.172451][T16335] netlink: 'syz.4.18035': attribute type 1 has an invalid length. [ 1228.191160][T15790] uyz0: Port: 1 Link DOWN [ 1228.322875][T16340] netlink: 288 bytes leftover after parsing attributes in process `syz.3.18037'. [ 1228.342818][T16340] openvswitch: netlink: Flow key attr not present in new flow. [ 1228.611627][T16334] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 1228.635412][T16334] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 1228.667620][T16334] bond18: left promiscuous mode [ 1228.678678][T16334] bridge15: left promiscuous mode [ 1228.683935][T16361] netlink: 'syz.2.18038': attribute type 1 has an invalid length. [ 1228.689696][T16334] ipvlan1: left allmulticast mode [ 1228.709385][T16334] ipvlan2: left allmulticast mode [ 1228.721747][T16334] bond18: left allmulticast mode [ 1228.731870][T16334] bridge15: left allmulticast mode [ 1228.745485][T16334] team1: left promiscuous mode [ 1228.759513][T16334] team1: left allmulticast mode [ 1228.772922][T16334] ip6tnl8: left allmulticast mode [ 1228.784562][T16334] team2: left promiscuous mode [ 1228.804265][T16334] team2: left allmulticast mode [ 1228.818639][T16334] team3: left promiscuous mode [ 1228.830305][T16334] team3: left allmulticast mode [ 1228.844115][T16334] vlan2: left promiscuous mode [ 1228.865173][T16334] geneve1: left promiscuous mode [ 1228.877585][T16334] vlan2: left allmulticast mode [ 1228.888423][T16334] geneve1: left allmulticast mode [ 1229.067146][T16336] gretap4: entered allmulticast mode [ 1229.102836][T16336] bond21: (slave gretap4): making interface the new active one [ 1229.115725][T16336] bond21: (slave gretap4): Enslaving as an active interface with an up link [ 1229.403905][T16379] netlink: 'syz.3.18043': attribute type 1 has an invalid length. [ 1229.515748][T16338] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.544044][T16338] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.785236][T16338] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1229.810628][T16338] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.137383][T16338] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1230.174206][T16338] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.616998][T16338] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1230.640246][T16338] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.693242][T16198] udevd[16198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1230.779949][T16399] __nla_validate_parse: 8 callbacks suppressed [ 1230.779973][T16399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18048'. [ 1230.811173][T16399] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1230.811330][T16399] block (null): Could not allocate knbd recv work queue. [ 1230.896696][T16399] nbd: failed to add new device [ 1231.005742][T16419] netlink: 'syz.4.18050': attribute type 4 has an invalid length. [ 1231.046727][T16419] netlink: 'syz.4.18050': attribute type 4 has an invalid length. [ 1231.194075][ T146] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.210027][ T146] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.218837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.265288][T10618] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.286761][T10618] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.338447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.384904][T10618] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.397400][T10618] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.408658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.471025][ T59] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.495080][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.578713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.697809][T16438] batadv_slave_1: entered promiscuous mode [ 1231.789550][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18054'. [ 1231.989477][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18054'. [ 1232.079625][T16438] batadv_slave_1: left promiscuous mode [ 1232.416897][T16449] syzkaller0: entered promiscuous mode [ 1232.448712][T16449] syzkaller0: entered allmulticast mode [ 1232.469855][T16452] syzkaller0: entered promiscuous mode [ 1232.491779][T16452] syzkaller0: entered allmulticast mode [ 1232.644671][T16456] IPVS: Unknown mcast interface: vcan0 [ 1232.789855][T16460] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1233.555202][T16437] syzkaller0 speed is unknown, defaulting to 1000 [ 1234.308010][T16467] syzkaller0 speed is unknown, defaulting to 1000 [ 1234.448480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1234.456849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.528107][T16539] netlink: 'syz.4.18066': attribute type 1 has an invalid length. [ 1235.556870][T16523] bridge0: Device is already in use. [ 1235.728419][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1235.743049][T16546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18067'. [ 1236.095954][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18070'. [ 1236.157900][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18068'. [ 1236.220196][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18068'. [ 1236.339969][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18070'. [ 1236.359767][T13915] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1236.381510][T13915] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1236.408578][T13915] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1236.430785][T16570] netlink: 80 bytes leftover after parsing attributes in process `syz.3.18071'. [ 1236.486763][T13915] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1236.744915][T16575] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1236.791927][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18073'. [ 1236.892211][T16576] vlan3: entered promiscuous mode [ 1236.912033][T16576] bridge0: entered promiscuous mode [ 1236.998050][T16579] netlink: 'syz.4.18072': attribute type 4 has an invalid length. [ 1237.096645][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18075'. [ 1237.142879][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18075'. [ 1237.317239][T16597] netlink: 52 bytes leftover after parsing attributes in process `syz.3.18078'. [ 1237.475656][T16611] netlink: 'syz.1.18081': attribute type 3 has an invalid length. [ 1237.510635][T16599] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18080'. [ 1237.877972][T16607] sctp: [Deprecated]: syz.3.18078 (pid 16607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1237.877972][T16607] Use struct sctp_sack_info instead [ 1237.921594][T16631] netlink: 'syz.1.18084': attribute type 4 has an invalid length. [ 1237.950236][T16631] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 1238.579257][T16647] openvswitch: netlink: Flow key attr not present in new flow. [ 1238.714725][T16650] netlink: 'syz.0.18088': attribute type 3 has an invalid length. [ 1238.745970][T16653] ipt_rpfilter: unknown options [ 1238.829444][T16662] block nbd0: NBD_DISCONNECT [ 1238.842663][T16657] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 1238.856602][T16657] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 1238.932479][T16650] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1238.991117][T16650] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1239.018788][T16650] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1239.143667][T16650] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1240.014389][T16695] xt_l2tp: invalid flags combination: 8 [ 1240.073439][T16695] netlink: 'syz.0.18096': attribute type 1 has an invalid length. [ 1240.168019][T16695] gre0: entered promiscuous mode [ 1240.183773][T16704] netlink: 'syz.4.18098': attribute type 1 has an invalid length. [ 1240.201926][T16695] gre0: entered allmulticast mode [ 1240.562164][T12381] IPVS: starting estimator thread 0... [ 1240.578741][T16716] openvswitch: netlink: Flow key attr not present in new flow. [ 1240.679562][T16717] IPVS: using max 29 ests per chain, 69600 per kthread [ 1241.125558][T16738] syzkaller0: entered promiscuous mode [ 1241.145818][T16738] syzkaller0: entered allmulticast mode [ 1241.272162][T16744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.307728][T16744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.427958][T16749] __nla_validate_parse: 11 callbacks suppressed [ 1241.427979][T16749] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18107'. [ 1241.571211][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18108'. [ 1241.594870][T16755] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1242.286039][T16778] netlink: 288 bytes leftover after parsing attributes in process `syz.3.18112'. [ 1242.311630][T16778] openvswitch: netlink: Flow key attr not present in new flow. [ 1242.514623][T16787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18113'. [ 1242.735207][T16782] netlink: 80 bytes leftover after parsing attributes in process `syz.3.18113'. [ 1242.997860][T16802] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1243.109599][T16811] syzkaller0: entered promiscuous mode [ 1243.119285][T16811] syzkaller0: entered allmulticast mode [ 1244.601863][T12380] syz0: Port: 1 Link DOWN [ 1244.607523][ T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1244.654572][T16861] netlink: 'syz.0.18125': attribute type 1 has an invalid length. [ 1244.661360][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.705510][ T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1244.755966][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.777722][T16866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18125'. [ 1244.781344][ T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1244.810652][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18124'. [ 1244.816417][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.865405][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18124'. [ 1244.889275][T16867] netlink: 'syz.4.18124': attribute type 18 has an invalid length. [ 1244.905922][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18125'. [ 1244.986173][T16881] netlink: 'syz.2.18126': attribute type 13 has an invalid length. [ 1245.025112][T16881] netlink: 'syz.2.18126': attribute type 17 has an invalid length. [ 1245.205504][T16866] bond22: (slave gretap3): making interface the new active one [ 1245.246596][T16866] bond22: (slave gretap3): Enslaving as an active interface with an up link [ 1245.260151][ T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1245.275125][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.276018][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18128'. [ 1245.323885][T16868] macvlan4: entered promiscuous mode [ 1245.331522][T16868] macvlan4: entered allmulticast mode [ 1245.414736][T16881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.579308][T16881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1245.590066][T16881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1245.609618][T16881] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1245.862725][T16892] hsr_slave_0: left promiscuous mode [ 1245.874788][T16892] hsr_slave_1: left promiscuous mode [ 1245.992471][T16855] uyz0: Port: 1 Link ACTIVE [ 1246.134877][T16922] netlink: 'syz.2.18134': attribute type 12 has an invalid length. [ 1246.337860][T16928] macsec0: entered promiscuous mode [ 1246.411008][T16928] macsec0 (unregistering): left promiscuous mode [ 1246.542752][T16942] netlink: 'syz.3.18139': attribute type 4 has an invalid length. [ 1246.608518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.616993][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1246.627710][T16947] netlink: 'syz.3.18139': attribute type 4 has an invalid length. [ 1247.007841][T16954] __nla_validate_parse: 4 callbacks suppressed [ 1247.007863][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18150'. [ 1247.029174][T16954] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18150'. [ 1247.051663][T16954] tipc: Can't bind to reserved service type 0 [ 1247.074397][T16956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18140'. [ 1247.087956][T16954] tipc: Failed to remove unknown binding: 66,0,0/20185096:3546972181/3546972182 [ 1247.164800][T16961] tipc: Failed to remove unknown binding: 66,0,0/20185096:3546972181/3546972182 [ 1247.204633][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18150'. [ 1247.386321][T16962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18140'. [ 1247.400801][T16962] nbd: nbd64 already in use [ 1247.565010][T16971] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1247.695517][T16198] udevd[16198]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1247.742846][T16976] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.18143'. [ 1248.176461][T16934] syzkaller0 speed is unknown, defaulting to 1000 [ 1248.259373][T17001] netlink: 13 bytes leftover after parsing attributes in process `syz.3.18149'. [ 1248.576167][T17012] netlink: 'syz.0.18151': attribute type 1 has an invalid length. [ 1248.597443][T17012] netlink: 280 bytes leftover after parsing attributes in process `syz.0.18151'. [ 1248.658529][T17012] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18151'. [ 1248.707963][T17012] team0: Port device bond0 removed [ 1248.749779][T17012] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1248.785727][T17012] bond0 (unregistering): Released all slaves [ 1249.176838][T17025] netlink: 260 bytes leftover after parsing attributes in process `syz.1.18154'. [ 1249.977503][T17050] netlink: 'syz.1.18158': attribute type 32 has an invalid length. [ 1251.031611][T17082] block nbd0: not configured, cannot reconfigure [ 1251.575865][T17107] openvswitch: netlink: Flow key attr not present in new flow. [ 1251.706523][T17113] netlink: 'syz.2.18169': attribute type 1 has an invalid length. [ 1251.728419][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1251.740966][T17113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1252.406955][T17073] syzkaller0 speed is unknown, defaulting to 1000 [ 1252.489390][ T30] audit: type=1800 audit(1780303514.677:29): pid=17114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.18168" name="memory.events" dev="tmpfs" ino=18529 res=0 errno=0 [ 1252.687033][T17139] __nla_validate_parse: 8 callbacks suppressed [ 1252.687056][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18173'. [ 1252.730218][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18171'. [ 1252.793426][T17145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18171'. [ 1252.823475][ T30] audit: type=1804 audit(1780303515.007:30): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.18173" name="/newroot/3633/cgroup.controllers" dev="tmpfs" ino=18325 res=1 errno=0 [ 1252.861619][T17147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18172'. [ 1252.911596][ T30] audit: type=1800 audit(1780303515.007:31): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18173" name="cgroup.controllers" dev="tmpfs" ino=18325 res=0 errno=0 [ 1252.995127][ T30] audit: type=1804 audit(1780303515.087:32): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.18173" name="/newroot/3633/cgroup.controllers" dev="tmpfs" ino=18325 res=1 errno=0 [ 1255.069009][T17194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.215502][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18183'. [ 1255.282689][T17155] syzkaller0 speed is unknown, defaulting to 1000 [ 1255.596697][T17194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.030324][T17194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.075174][T17167] syzkaller0 speed is unknown, defaulting to 1000 [ 1256.082363][T17227] netlink: 'syz.0.18187': attribute type 13 has an invalid length. [ 1256.177979][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18187'. [ 1256.500969][T17238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18188'. [ 1257.098102][T17194] netdevsim netdevsim1 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.584293][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.740475][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.813466][T17275] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.894641][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.954183][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.992298][T17275] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.117172][T17275] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.202547][T17285] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1258.251372][T17275] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.617705][ T3317] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.683126][ T3317] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.758054][T17304] netlink: 'syz.2.18199': attribute type 1 has an invalid length. [ 1258.772337][ T3317] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.855805][T17304] bond15: entered promiscuous mode [ 1258.870345][T17304] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1258.929186][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18199'. [ 1258.949193][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.004919][T17304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18199'. [ 1259.330546][T17270] syzkaller0 speed is unknown, defaulting to 1000 [ 1260.081714][T17349] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18204'. [ 1260.560224][T17357] netlink: 'syz.1.18206': attribute type 1 has an invalid length. [ 1260.870732][T17370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18208'. [ 1260.890335][T17370] netlink: 47 bytes leftover after parsing attributes in process `syz.2.18208'. [ 1260.936573][T17370] netlink: 'syz.2.18208': attribute type 6 has an invalid length. [ 1260.968395][T17370] netlink: 'syz.2.18208': attribute type 6 has an invalid length. [ 1261.480334][T17393] netlink: 'syz.2.18213': attribute type 12 has an invalid length. [ 1261.598070][T17385] block nbd0: not configured, cannot reconfigure [ 1261.842309][T17406] bond22: entered promiscuous mode [ 1261.855617][T17406] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1262.063795][T17410] bridge17: entered promiscuous mode [ 1262.085533][T17410] bond22: (slave bridge17): Enslaving as an active interface with an up link [ 1262.457133][T17424] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18217'. [ 1262.538920][T16078] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1262.561117][T17421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.745877][T17421] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1262.938985][T16078] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1262.966350][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18220'. [ 1263.682172][T17466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18225'. [ 1263.806281][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18227'. [ 1264.046091][T17482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18228'. [ 1264.102351][T17482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18228'. [ 1264.764128][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.784492][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.801340][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.818630][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.842891][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.879857][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.898260][T17502] netlink: 'syz.4.18232': attribute type 12 has an invalid length. [ 1265.103529][T17503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.113651][T17503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.141660][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.174387][T17497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.278519][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18232'. [ 1265.839256][T17527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18235'. [ 1265.872560][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18238'. [ 1265.909665][T17526] bridge16: entered promiscuous mode [ 1265.932665][T17526] bridge16: entered allmulticast mode [ 1265.961374][T17526] team0: Port device bridge16 added [ 1266.037525][T17526] bridge17: entered promiscuous mode [ 1266.056455][T17526] bridge17: entered allmulticast mode [ 1266.082620][T17526] team0: Port device bridge17 added [ 1266.156292][T17541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18239'. [ 1266.363177][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18240'. [ 1266.416900][T17546] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1266.463422][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18240'. [ 1266.511342][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18242'. [ 1266.612332][T17546] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1266.805970][T17546] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1267.002444][T17546] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1267.113002][T17551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18242'. [ 1267.275933][ T3317] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1267.373144][ T59] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1267.422439][ T59] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1267.491840][ T59] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1267.525583][T17544] syzkaller0 speed is unknown, defaulting to 1000 [ 1267.738312][T17568] netlink: 'syz.4.18246': attribute type 1 has an invalid length. [ 1267.758502][T17568] netlink: 'syz.4.18246': attribute type 2 has an invalid length. [ 1267.882860][ T59] smc: removing ib device syz1 [ 1267.895284][T17568]  (unregistering): Released all slaves [ 1267.999747][T17577] netlink: 'syz.0.18248': attribute type 12 has an invalid length. [ 1268.201693][ T59] smbdirect: ib_dev[syz1] removed [ 1269.308651][T17602] __nla_validate_parse: 3 callbacks suppressed [ 1269.308675][T17602] netlink: 288 bytes leftover after parsing attributes in process `syz.2.18254'. [ 1270.253505][T17613] netlink: 'syz.3.18256': attribute type 12 has an invalid length. [ 1270.395276][T17613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18256'. [ 1270.758508][T17624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18260'. [ 1270.929142][ C1] net_ratelimit: 866 callbacks suppressed [ 1270.929167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.943500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.226416][T17637] netlink: 'syz.3.18263': attribute type 12 has an invalid length. [ 1271.775034][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18263'. [ 1271.902220][T17629] tipc: Resetting bearer [ 1272.012280][T17658] netlink: 288 bytes leftover after parsing attributes in process `syz.3.18265'. [ 1272.054304][T17658] openvswitch: netlink: Flow key attr not present in new flow. [ 1272.086301][T12380] syzkaller0 speed is unknown, defaulting to 1000 [ 1272.555280][T17676] netlink: 'syz.4.18269': attribute type 30 has an invalid length. [ 1272.573657][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18269'. [ 1272.590777][T17676] bond0: option arp_missed_max: invalid value (0) [ 1272.605107][T17676] bond0: option arp_missed_max: allowed values 1 - 255 [ 1272.778393][T17681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18272'. [ 1272.808909][T17681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18272'. [ 1273.166213][T17684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.185057][T17685] netlink: 288 bytes leftover after parsing attributes in process `syz.2.18275'. [ 1273.199048][T17685] openvswitch: netlink: Flow key attr not present in new flow. [ 1273.313848][T17690] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1273.487372][T17698] netlink: 288 bytes leftover after parsing attributes in process `syz.2.18277'. [ 1273.500799][T17698] openvswitch: netlink: Flow key attr not present in new flow. [ 1273.647128][T17705] netlink: 'syz.3.18278': attribute type 12 has an invalid length. [ 1274.242628][T17717] openvswitch: netlink: Flow key attr not present in new flow. [ 1274.450068][T17723] __nla_validate_parse: 2 callbacks suppressed [ 1274.450092][T17723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18285'. [ 1274.483079][T17723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18285'. [ 1274.717834][T17730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18287'. [ 1275.111868][T17745] netlink: 288 bytes leftover after parsing attributes in process `syz.2.18289'. [ 1275.134493][T17745] openvswitch: netlink: Flow key attr not present in new flow. [ 1275.254126][T17742] syzkaller0: entered promiscuous mode [ 1275.265914][T17742] syzkaller0: entered allmulticast mode [ 1275.508808][T17725] syzkaller0 speed is unknown, defaulting to 1000 [ 1275.593483][T17761] netlink: 'syz.2.18293': attribute type 12 has an invalid length. [ 1275.789647][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18293'. [ 1276.181388][T17750] syzkaller0 speed is unknown, defaulting to 1000 [ 1276.199196][T17772] netlink: 'syz.0.18296': attribute type 14 has an invalid length. [ 1276.515353][T17777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18297'. [ 1276.651452][T17777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18297'. [ 1277.172356][T17789] netlink: 'syz.2.18299': attribute type 12 has an invalid length. [ 1277.296509][T17795] netlink: 'syz.4.18301': attribute type 27 has an invalid length. [ 1277.520482][T17785] block nbd0: server does not support multiple connections per device. [ 1277.588430][T17797] xt_hashlimit: max too large, truncated to 1048576 [ 1277.606545][T17801] netlink: 288 bytes leftover after parsing attributes in process `syz.1.18303'. [ 1277.620813][T17785] block nbd0: shutting down sockets [ 1277.628318][T17801] openvswitch: netlink: Flow key attr not present in new flow. [ 1277.753769][T17803] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1277.867230][T17807] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1278.067199][T17815] netlink: 'syz.1.18307': attribute type 12 has an invalid length. [ 1278.125187][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18307'. [ 1278.135694][T17815] macsec0: entered promiscuous mode [ 1278.177631][T17814] macsec0: left promiscuous mode [ 1278.200368][T17819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18309'. [ 1278.893767][T17849] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1278.986228][T17852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.122295][T17825] tipc: Resetting bearer [ 1279.224737][T17825] : left promiscuous mode [ 1279.356960][T17860] netlink: 'syz.4.18316': attribute type 1 has an invalid length. [ 1279.694570][T17825] team1: left promiscuous mode [ 1279.700704][T17825] team1: left allmulticast mode [ 1279.709718][T17825] team2: left promiscuous mode [ 1279.714557][T17825] team2: left allmulticast mode [ 1279.777337][T17825] bond22: left promiscuous mode [ 1279.788226][T17825] bridge17: left promiscuous mode [ 1279.941459][T17868] __nla_validate_parse: 2 callbacks suppressed [ 1279.941480][T17868] netlink: 288 bytes leftover after parsing attributes in process `syz.1.18317'. [ 1279.957572][T17868] openvswitch: netlink: Flow key attr not present in new flow. [ 1279.969524][T17861] dummy0: left allmulticast mode [ 1280.000169][T17861] dummy0: left promiscuous mode [ 1280.025078][T17861] bridge0: port 1(dummy0) entered disabled state [ 1280.036436][T17868] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1280.086449][T17861] bond22: (slave dummy0): making interface the new active one [ 1280.120269][T17861] bond22: (slave dummy0): Enslaving as an active interface with an up link [ 1280.146938][T17862] bond22: entered promiscuous mode [ 1280.168274][T17862] dummy0: entered promiscuous mode [ 1280.211817][T17863] bond6: (slave lo): Releasing backup interface [ 1280.232647][T17863] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1280.269327][T17863] bond22: (slave dummy0): Releasing active interface [ 1280.283137][T17863] dummy0: left promiscuous mode [ 1280.315106][T17863] veth0_to_bond: left allmulticast mode [ 1280.331809][T17863] veth0_to_bond: left promiscuous mode [ 1280.346417][T17863] bridge13: port 2(veth0_to_bond) entered disabled state [ 1280.374405][T17863] team0: Port device geneve1 removed [ 1280.382793][T17883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18322'. [ 1280.399555][T17863] bond11: (slave veth13): Releasing backup interface [ 1280.418495][T17863] bond11: (slave veth13): the permanent HWaddr of slave - 9e:70:c9:1c:cf:14 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1280.457236][T17863] bond11: (slave batadv0): Releasing backup interface [ 1280.480225][T17863] bond12: (slave veth15): Releasing active interface [ 1280.488425][T17863] bond12: (slave veth15): the permanent HWaddr of slave - de:c8:f3:d6:86:fd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1280.518075][T17863] batadv2: entered promiscuous mode [ 1280.536291][T17863] bond12: (slave batadv2): Releasing active interface [ 1280.551324][T17863] batadv2: left promiscuous mode [ 1280.576176][T17891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18322'. [ 1280.593014][T17863] bond13: (slave veth21): Releasing active interface [ 1280.615089][T17863] bond15: (slave bond16): Releasing backup interface [ 1280.631160][T17863] bond15: (slave bond16): the permanent HWaddr of slave - de:b3:9e:d6:5c:9a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1280.665777][T17863] bond15: (slave gretap0): Releasing backup interface [ 1280.682585][T17863] veth27: left allmulticast mode [ 1280.695413][T17863] veth27: left promiscuous mode [ 1280.706040][T17863] bridge13: port 1(veth27) entered disabled state [ 1280.728263][T17863] veth29: left allmulticast mode [ 1280.739259][T17863] veth29: left promiscuous mode [ 1280.753385][T17863] bridge13: port 3(veth29) entered disabled state [ 1280.795180][T17863] gretap3: left allmulticast mode [ 1280.813114][T17863] gretap3: left promiscuous mode [ 1280.833051][T17863] bridge14: port 1(gretap3) entered disabled state [ 1280.867890][T17863] bond18: (slave bridge15): Releasing backup interface [ 1280.875342][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18321'. [ 1280.906024][T17863] vlan0: left allmulticast mode [ 1280.914123][T17863] bridge_slave_1: left allmulticast mode [ 1280.920513][T17863] vlan0: left promiscuous mode [ 1280.925927][T17863] bridge0: port 2(vlan0) entered disabled state [ 1280.949106][T17863] bond19: (slave bond20): Releasing backup interface [ 1280.973915][T17863] bond21: (slave gretap4): Releasing active interface [ 1281.042406][T17863] team0: Port device bridge16 removed [ 1281.063877][T17863] team0: Port device bridge17 removed [ 1281.093151][ T146] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.102439][ T146] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.112067][T17859] bond22: left promiscuous mode [ 1281.120093][T17885] netlink: 'syz.3.18321': attribute type 12 has an invalid length. [ 1281.132991][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18321'. [ 1281.143341][ T146] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.159726][ T146] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.184619][ T146] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1281.208467][ T146] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1281.229231][ T146] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1281.255491][ T146] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1281.301608][T17900] netlink: 'syz.1.18323': attribute type 8 has an invalid length. [ 1281.357676][T17900] bond5: (slave bond6): Releasing backup interface [ 1281.386253][T17900] bond9: (slave bridge6): Releasing active interface [ 1281.405095][T17900] bond11: (slave ip6gre2): Releasing backup interface [ 1281.420411][T17900] bond16: (slave bridge11): Releasing active interface [ 1281.434226][T17900] team0: Port device macvlan3 removed [ 1281.442420][T17900] bond20: (slave bridge15): Releasing backup interface [ 1281.475948][T17900] bond21: (slave geneve4): Releasing active interface [ 1281.516224][T17900] bond0: (slave bridge16): Releasing backup interface [ 1281.552099][T17900] bond22: (slave bridge17): Releasing backup interface [ 1281.713374][T17916] netlink: 288 bytes leftover after parsing attributes in process `syz.1.18329'. [ 1281.723069][T17916] openvswitch: netlink: Flow key attr not present in new flow. [ 1281.742977][T17918] netlink: 3 bytes leftover after parsing attributes in process `syz.4.18328'. [ 1281.814973][T17916] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1281.861396][T17917] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18324'. [ 1282.310656][T17906] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.353044][T16853] uyz0: Port: 1 Link DOWN [ 1282.467816][T17906] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.535464][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18332'. [ 1282.563119][T17928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18333'. [ 1282.590698][T17926] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1282.624102][T17928] netlink: 'syz.0.18333': attribute type 4 has an invalid length. [ 1282.636346][T17906] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.656937][T17926] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1282.705890][T17906] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.801708][T17933] netlink: 'syz.0.18335': attribute type 1 has an invalid length. [ 1282.869769][T17933] bond0: entered promiscuous mode [ 1282.891257][T17933] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1282.938375][T10618] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.013105][T10618] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.057109][T17936] netlink: 'syz.4.18336': attribute type 12 has an invalid length. [ 1283.101167][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.111316][T17932] bond0: left promiscuous mode [ 1283.206677][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.497306][T17947] netlink: 'syz.0.18340': attribute type 13 has an invalid length. [ 1283.518320][T17947] netlink: 'syz.0.18340': attribute type 17 has an invalid length. [ 1283.552378][T17947] gre0: left promiscuous mode [ 1283.567239][T17947] gre0: left allmulticast mode [ 1283.704298][T17947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.759348][T17947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1283.770365][T17947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1283.787115][T17947] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1283.845122][T30671] syz0: Port: 1 Link ACTIVE [ 1284.203706][T17956] bond28: entered promiscuous mode [ 1284.231516][T17956] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1284.368369][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1284.399000][T17968] bridge15: entered promiscuous mode [ 1284.425182][T17968] bond28: (slave bridge15): Enslaving as an active interface with an up link [ 1284.439512][T17972] batadv_slave_1: entered promiscuous mode [ 1284.593871][T17980] netlink: 'syz.0.18345': attribute type 12 has an invalid length. [ 1285.152917][T17969] batadv_slave_1: left promiscuous mode [ 1285.250428][T17992] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1285.282220][T17992] __nla_validate_parse: 6 callbacks suppressed [ 1285.282240][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18349'. [ 1285.327359][T17992] unsupported nla_type 216 [ 1285.344411][T17994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18350'. [ 1285.361518][T17992] netlink: zone id is out of range [ 1285.376065][T17992] netlink: zone id is out of range [ 1285.391286][T17994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18350'. [ 1285.400844][T17992] netlink: zone id is out of range [ 1285.412802][T17992] netlink: zone id is out of range [ 1285.433379][T17992] netlink: zone id is out of range [ 1285.451178][T17992] netlink: zone id is out of range [ 1285.477129][T17992] netlink: zone id is out of range [ 1285.531335][T17992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18349'. [ 1285.830883][T17987] syzkaller0 speed is unknown, defaulting to 1000 [ 1286.744354][T18005] syzkaller0 speed is unknown, defaulting to 1000 [ 1287.258079][T18024] bond16: entered promiscuous mode [ 1287.264372][T18024] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1287.291402][T18032] xt_hashlimit: size too large, truncated to 1048576 [ 1287.395747][T18024] bridge18: entered promiscuous mode [ 1287.402326][T18024] bond16: (slave bridge18): Enslaving as an active interface with an up link [ 1287.417488][T18037] netlink: 'syz.1.18358': attribute type 1 has an invalid length. [ 1287.427795][T18037] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18358'. [ 1288.064045][T18050] netlink: 288 bytes leftover after parsing attributes in process `syz.2.18361'. [ 1288.108094][T18050] net_ratelimit: 16 callbacks suppressed [ 1288.108120][T18050] openvswitch: netlink: Flow key attr not present in new flow. [ 1288.186395][T18054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18362'. [ 1288.369680][T18054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18362'. [ 1288.632772][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18365'. [ 1288.746133][T18069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1288.991486][T18078] netlink: 'syz.0.18367': attribute type 12 has an invalid length. [ 1289.156298][T18074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18366'. [ 1289.321954][T18060] syzkaller0 speed is unknown, defaulting to 1000 [ 1290.199169][T18089] netlink: 'syz.3.18370': attribute type 39 has an invalid length. [ 1290.294668][T18089] bond0 (unregistering): Released all slaves [ 1290.583141][T18092] __nla_validate_parse: 2 callbacks suppressed [ 1290.583163][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18370'. [ 1291.037159][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18373'. [ 1291.057361][T18119] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18374'. [ 1291.119933][T18119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18374'. [ 1291.308761][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18376'. [ 1291.513570][T18140] netlink: 148 bytes leftover after parsing attributes in process `syz.3.18377'. [ 1291.823740][T18148] sctp: [Deprecated]: syz.0.18379 (pid 18148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1291.823740][T18148] Use struct sctp_sack_info instead [ 1291.855308][T18146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18378'. [ 1292.050402][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18381'. [ 1292.222586][T18163] netlink: 288 bytes leftover after parsing attributes in process `syz.1.18382'. [ 1292.243129][T18163] openvswitch: netlink: Flow key attr not present in new flow. [ 1292.281028][T16078] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1292.375496][T18160] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1292.453569][T18172] netlink: 'syz.4.18384': attribute type 12 has an invalid length. [ 1292.593009][T18176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18385'. [ 1292.739778][T16842] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1293.597912][T18210] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1293.681521][T18214] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.752814][T18214] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.789445][T18218] netlink: 'syz.1.18393': attribute type 11 has an invalid length. [ 1293.856511][T18214] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.922025][T18223] xt_l2tp: invalid flags combination: 8 [ 1293.960945][T18214] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.979551][T18228] netlink: 'syz.4.18395': attribute type 9 has an invalid length. [ 1294.018381][T18218] xt_CT: No such helper "snmp_trap" [ 1294.024546][T18220] gre0: entered promiscuous mode [ 1294.034701][T18220] gre0: entered allmulticast mode [ 1294.132631][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.181682][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.234055][T10618] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.260207][T18232] netlink: 'syz.1.18397': attribute type 29 has an invalid length. [ 1294.276977][T10618] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.298534][T18232] netlink: 'syz.1.18397': attribute type 29 has an invalid length. [ 1294.312024][T18232] netlink: 'syz.1.18397': attribute type 29 has an invalid length. [ 1294.328191][T18234] [ 1294.330590][T18234] ====================================================== [ 1294.337723][T18234] WARNING: possible circular locking dependency detected [ 1294.344936][T18234] syzkaller #0 Not tainted [ 1294.349395][T18234] ------------------------------------------------------ [ 1294.356472][T18234] syz.2.18398/18234 is trying to acquire lock: [ 1294.362658][T18234] ffffffff8ea85640 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 1294.371947][T18234] [ 1294.371947][T18234] but task is already holding lock: [ 1294.379337][T18234] ffff888045e4ccb8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1294.380926][T18232] netlink: 'syz.1.18397': attribute type 29 has an invalid length. [ 1294.388985][T18234] [ 1294.388985][T18234] which lock already depends on the new lock. [ 1294.388985][T18234] [ 1294.388998][T18234] [ 1294.388998][T18234] the existing dependency chain (in reverse order) is: [ 1294.389007][T18234] [ 1294.389007][T18234] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1294.389151][T18234] __might_fault+0xcb/0x130 [ 1294.400792][T18232] netlink: 'syz.1.18397': attribute type 29 has an invalid length. [ 1294.407613][T18234] _copy_from_user+0x28/0xb0 [ 1294.407720][T18234] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 1294.407785][T18234] ip_generic_getfrag+0x149/0x2d0 [ 1294.418777][T18232] netlink: 'syz.1.18397': attribute type 29 has an invalid length. [ 1294.424382][T18234] __ip6_append_data+0x39cd/0x3f60 [ 1294.435955][T18232] netlink: 'syz.1.18397': attribute type 29 has an invalid length. [ 1294.437335][T18234] ip6_append_data+0x10f/0x280 [ 1294.481390][T18234] rawv6_sendmsg+0x12d3/0x18e0 [ 1294.486838][T18234] ____sys_sendmsg+0x80a/0x9f0 [ 1294.492172][T18234] ___sys_sendmsg+0x2a5/0x360 [ 1294.497419][T18234] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1294.502956][T18234] do_syscall_64+0x174/0x580 [ 1294.508114][T18234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.514595][T18234] [ 1294.514595][T18234] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1294.522415][T18234] lock_sock_nested+0x41/0x100 [ 1294.527848][T18234] inet_shutdown+0x6a/0x390 [ 1294.533037][T18234] nbd_mark_nsock_dead+0x2e9/0x560 [ 1294.538753][T18234] sock_shutdown+0x15e/0x260 [ 1294.543898][T18234] nbd_clear_sock+0x24/0x170 [ 1294.549042][T18234] nbd_config_put+0x2dd/0x580 [ 1294.554272][T18234] nbd_genl_connect+0x19d5/0x1cf0 [ 1294.559857][T18234] genl_family_rcv_msg_doit+0x22a/0x330 [ 1294.565963][T18234] genl_rcv_msg+0x61c/0x7a0 [ 1294.571017][T18234] netlink_rcv_skb+0x232/0x4b0 [ 1294.576320][T18234] genl_rcv+0x28/0x40 [ 1294.580872][T18234] netlink_unicast+0x75c/0x8e0 [ 1294.586189][T18234] netlink_sendmsg+0x813/0xb40 [ 1294.591518][T18234] ____sys_sendmsg+0x972/0x9f0 [ 1294.596843][T18234] ___sys_sendmsg+0x2a5/0x360 [ 1294.602064][T18234] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1294.607547][T18234] do_syscall_64+0x174/0x580 [ 1294.612690][T18234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.619137][T18234] [ 1294.619137][T18234] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1294.626816][T18234] __mutex_lock+0x1a3/0x1550 [ 1294.631956][T18234] nbd_queue_rq+0x37b/0x1100 [ 1294.637102][T18234] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1294.643282][T18234] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1294.650217][T18234] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1294.656768][T18234] blk_mq_run_hw_queue+0x348/0x4f0 [ 1294.662436][T18234] blk_mq_dispatch_list+0xd16/0xe10 [ 1294.668276][T18234] blk_mq_flush_plug_list+0x48d/0x570 [ 1294.674200][T18234] __blk_flush_plug+0x3ed/0x4d0 [ 1294.679677][T18234] __submit_bio+0x28d/0x580 [ 1294.684728][T18234] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1294.690911][T18234] block_read_full_folio+0x599/0x830 [ 1294.696789][T18234] filemap_read_folio+0x137/0x3b0 [ 1294.702421][T18234] do_read_cache_folio+0x358/0x590 [ 1294.708106][T18234] read_part_sector+0xb6/0x2b0 [ 1294.713511][T18234] adfspart_check_ICS+0xb1/0x960 [ 1294.719008][T18234] bdev_disk_changed+0x817/0x1770 [ 1294.724593][T18234] blkdev_get_whole+0x380/0x510 [ 1294.730119][T18234] bdev_open+0x31e/0xd30 [ 1294.734913][T18234] blkdev_open+0x470/0x610 [ 1294.739904][T18234] do_dentry_open+0x822/0x13a0 [ 1294.745280][T18234] vfs_open+0x3b/0x340 [ 1294.749920][T18234] path_openat+0x2e08/0x3860 [ 1294.755084][T18234] do_file_open+0x23e/0x4a0 [ 1294.760148][T18234] do_sys_openat2+0x113/0x200 [ 1294.765383][T18234] __x64_sys_openat+0x138/0x170 [ 1294.770805][T18234] do_syscall_64+0x174/0x580 [ 1294.775960][T18234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.782409][T18234] [ 1294.782409][T18234] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1294.789663][T18234] __mutex_lock+0x1a3/0x1550 [ 1294.794825][T18234] nbd_queue_rq+0xc6/0x1100 [ 1294.799915][T18234] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1294.806246][T18234] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1294.813144][T18234] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1294.819690][T18234] blk_mq_run_hw_queue+0x348/0x4f0 [ 1294.825356][T18234] blk_mq_dispatch_list+0xd16/0xe10 [ 1294.831112][T18234] blk_mq_flush_plug_list+0x48d/0x570 [ 1294.837032][T18234] __blk_flush_plug+0x3ed/0x4d0 [ 1294.842432][T18234] __submit_bio+0x28d/0x580 [ 1294.847487][T18234] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1294.853670][T18234] block_read_full_folio+0x599/0x830 [ 1294.859508][T18234] filemap_read_folio+0x137/0x3b0 [ 1294.865090][T18234] do_read_cache_folio+0x358/0x590 [ 1294.870753][T18234] read_part_sector+0xb6/0x2b0 [ 1294.876066][T18234] adfspart_check_ICS+0xb1/0x960 [ 1294.881554][T18234] bdev_disk_changed+0x817/0x1770 [ 1294.887134][T18234] blkdev_get_whole+0x380/0x510 [ 1294.892539][T18234] bdev_open+0x31e/0xd30 [ 1294.897326][T18234] blkdev_open+0x470/0x610 [ 1294.902294][T18234] do_dentry_open+0x822/0x13a0 [ 1294.907610][T18234] vfs_open+0x3b/0x340 [ 1294.912231][T18234] path_openat+0x2e08/0x3860 [ 1294.917396][T18234] do_file_open+0x23e/0x4a0 [ 1294.922477][T18234] do_sys_openat2+0x113/0x200 [ 1294.927808][T18234] __x64_sys_openat+0x138/0x170 [ 1294.933209][T18234] do_syscall_64+0x174/0x580 [ 1294.938349][T18234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.944802][T18234] [ 1294.944802][T18234] -> #3 (set->srcu){.+.+}-{0:0}: [ 1294.951964][T18234] __synchronize_srcu+0xca/0x300 [ 1294.957457][T18234] elevator_switch+0x1e8/0x7a0 [ 1294.962767][T18234] elevator_change+0x2cc/0x450 [ 1294.968076][T18234] elevator_set_default+0x36c/0x430 [ 1294.973825][T18234] blk_register_queue+0x3e9/0x4e0 [ 1294.979406][T18234] __add_disk+0x677/0xd50 [ 1294.984312][T18234] add_disk_fwnode+0xfb/0x480 [ 1294.989540][T18234] nbd_dev_add+0x72c/0xb50 [ 1294.994504][T18234] nbd_init+0x168/0x1f0 [ 1294.999306][T18234] do_one_initcall+0x250/0x870 [ 1295.004618][T18234] do_initcall_level+0x104/0x190 [ 1295.010113][T18234] do_initcalls+0x59/0xa0 [ 1295.014994][T18234] kernel_init_freeable+0x2a6/0x3e0 [ 1295.020753][T18234] kernel_init+0x1d/0x1d0 [ 1295.025635][T18234] ret_from_fork+0x514/0xb70 [ 1295.030807][T18234] ret_from_fork_asm+0x1a/0x30 [ 1295.036137][T18234] [ 1295.036137][T18234] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1295.043995][T18234] __mutex_lock+0x1a3/0x1550 [ 1295.049138][T18234] elevator_change+0x1b3/0x450 [ 1295.054485][T18234] elevator_set_none+0xb5/0x140 [ 1295.059887][T18234] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1295.066246][T18234] nbd_start_device+0x17f/0xb10 [ 1295.071648][T18234] nbd_genl_connect+0x165b/0x1cf0 [ 1295.077233][T18234] genl_family_rcv_msg_doit+0x22a/0x330 [ 1295.083332][T18234] genl_rcv_msg+0x61c/0x7a0 [ 1295.088393][T18234] netlink_rcv_skb+0x232/0x4b0 [ 1295.093711][T18234] genl_rcv+0x28/0x40 [ 1295.098247][T18234] netlink_unicast+0x75c/0x8e0 [ 1295.103564][T18234] netlink_sendmsg+0x813/0xb40 [ 1295.108883][T18234] ____sys_sendmsg+0x972/0x9f0 [ 1295.114193][T18234] ___sys_sendmsg+0x2a5/0x360 [ 1295.119422][T18234] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1295.125026][T18234] do_syscall_64+0x174/0x580 [ 1295.130193][T18234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.136643][T18234] [ 1295.136643][T18234] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1295.145361][T18234] blk_alloc_queue+0x546/0x680 [ 1295.150682][T18234] __blk_mq_alloc_disk+0x197/0x390 [ 1295.156349][T18234] nbd_dev_add+0x499/0xb50 [ 1295.161318][T18234] nbd_init+0x168/0x1f0 [ 1295.166025][T18234] do_one_initcall+0x250/0x870 [ 1295.171337][T18234] do_initcall_level+0x104/0x190 [ 1295.176829][T18234] do_initcalls+0x59/0xa0 [ 1295.181734][T18234] kernel_init_freeable+0x2a6/0x3e0 [ 1295.187493][T18234] kernel_init+0x1d/0x1d0 [ 1295.192373][T18234] ret_from_fork+0x514/0xb70 [ 1295.197512][T18234] ret_from_fork_asm+0x1a/0x30 [ 1295.202827][T18234] [ 1295.202827][T18234] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1295.210071][T18234] __lock_acquire+0x15a5/0x2cf0 [ 1295.215473][T18234] lock_acquire+0x106/0x350 [ 1295.220523][T18234] fs_reclaim_acquire+0x71/0x100 [ 1295.226019][T18234] prepare_alloc_pages+0x152/0x650 [ 1295.231688][T18234] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1295.238043][T18234] alloc_pages_mpol+0x235/0x490 [ 1295.243432][T18234] folio_alloc_mpol_noprof+0x39/0x160 [ 1295.249356][T18234] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1295.255198][T18234] do_pte_missing+0x520/0x33f0 [ 1295.260514][T18234] handle_mm_fault+0x1bf2/0x3170 [ 1295.266008][T18234] do_user_addr_fault+0x75b/0x1340 [ 1295.271708][T18234] exc_page_fault+0x6a/0xc0 [ 1295.276763][T18234] asm_exc_page_fault+0x26/0x30 [ 1295.282158][T18234] rep_movs_alternative+0x11/0x90 [ 1295.287732][T18234] _copy_to_user+0x8a/0xb0 [ 1295.292707][T18234] simple_attr_read+0x34a/0x490 [ 1295.298109][T18234] debugfs_attr_read+0x76/0x130 [ 1295.303629][T18234] vfs_read+0x20c/0xa70 [ 1295.308337][T18234] ksys_read+0x150/0x270 [ 1295.313132][T18234] do_syscall_64+0x174/0x580 [ 1295.318265][T18234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.324712][T18234] [ 1295.324712][T18234] other info that might help us debug this: [ 1295.324712][T18234] [ 1295.334967][T18234] Chain exists of: [ 1295.334967][T18234] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1295.334967][T18234] [ 1295.347711][T18234] Possible unsafe locking scenario: [ 1295.347711][T18234] [ 1295.355256][T18234] CPU0 CPU1 [ 1295.360959][T18234] ---- ---- [ 1295.366390][T18234] rlock(&mm->mmap_lock); [ 1295.370839][T18234] lock(sk_lock-AF_INET6); [ 1295.377888][T18234] lock(&mm->mmap_lock); [ 1295.384764][T18234] lock(fs_reclaim); [ 1295.388772][T18234] [ 1295.388772][T18234] *** DEADLOCK *** [ 1295.388772][T18234] [ 1295.396994][T18234] 3 locks held by syz.2.18398/18234: [ 1295.402307][T18234] #0: ffff888028bfb430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1295.411450][T18234] #1: ffff888077f05ab0 (&attr->mutex){+.+.}-{4:4}, at: simple_attr_read+0xcc/0x490 [ 1295.421030][T18234] #2: ffff888045e4ccb8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1295.431013][T18234] [ 1295.431013][T18234] stack backtrace: [ 1295.436958][T18234] CPU: 1 UID: 0 PID: 18234 Comm: syz.2.18398 Not tainted syzkaller #0 PREEMPT(full) [ 1295.436981][T18234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1295.436993][T18234] Call Trace: [ 1295.437004][T18234] [ 1295.437014][T18234] dump_stack_lvl+0xe8/0x150 [ 1295.437039][T18234] print_circular_bug+0x2e1/0x300 [ 1295.437067][T18234] check_noncircular+0x12e/0x150 [ 1295.437093][T18234] __lock_acquire+0x15a5/0x2cf0 [ 1295.437114][T18234] ? is_bpf_text_address+0x26/0x2b0 [ 1295.437167][T18234] ? is_bpf_text_address+0x292/0x2b0 [ 1295.437184][T18234] ? is_bpf_text_address+0x26/0x2b0 [ 1295.437203][T18234] ? kernel_text_address+0xa5/0xe0 [ 1295.437237][T18234] ? prepare_alloc_pages+0x152/0x650 [ 1295.437270][T18234] lock_acquire+0x106/0x350 [ 1295.437288][T18234] ? prepare_alloc_pages+0x152/0x650 [ 1295.437317][T18234] ? __lock_acquire+0x6b5/0x2cf0 [ 1295.437337][T18234] fs_reclaim_acquire+0x71/0x100 [ 1295.437362][T18234] ? prepare_alloc_pages+0x152/0x650 [ 1295.437388][T18234] prepare_alloc_pages+0x152/0x650 [ 1295.437418][T18234] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1295.437437][T18234] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1295.437467][T18234] ? __pfx_policy_nodemask+0x10/0x10 [ 1295.437485][T18234] ? __lock_acquire+0x6b5/0x2cf0 [ 1295.437505][T18234] alloc_pages_mpol+0x235/0x490 [ 1295.437525][T18234] folio_alloc_mpol_noprof+0x39/0x160 [ 1295.437543][T18234] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1295.437560][T18234] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1295.437585][T18234] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1295.437604][T18234] ? __thp_vma_allowable_orders+0x2b2/0xad0 [ 1295.437632][T18234] do_pte_missing+0x520/0x33f0 [ 1295.437660][T18234] ? mtree_range_walk+0x6f9/0x8b0 [ 1295.437769][T18234] handle_mm_fault+0x1bf2/0x3170 [ 1295.437799][T18234] ? handle_mm_fault+0xf1/0x3170 [ 1295.437825][T18234] ? __pfx_handle_mm_fault+0x10/0x10 [ 1295.437856][T18234] ? lock_mm_and_find_vma+0xa7/0x340 [ 1295.437882][T18234] do_user_addr_fault+0x75b/0x1340 [ 1295.437908][T18234] exc_page_fault+0x6a/0xc0 [ 1295.437926][T18234] asm_exc_page_fault+0x26/0x30 [ 1295.437943][T18234] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 1295.437968][T18234] Code: e9 14 57 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 1295.437984][T18234] RSP: 0018:ffffc9000516fb48 EFLAGS: 00050202 [ 1295.438000][T18234] RAX: ffffffff84b1c030 RBX: 0000000000000002 RCX: 0000000000000002 [ 1295.438012][T18234] RDX: 0000000000000000 RSI: ffff888077f05a10 RDI: 0000200000001300 [ 1295.438024][T18234] RBP: ffffc9000516fc58 R08: ffff888077f05a11 R09: 1ffff1100efe0b42 [ 1295.438037][T18234] R10: dffffc0000000000 R11: ffffed100efe0b43 R12: 0000200000001302 [ 1295.438050][T18234] R13: 00007ffffffff000 R14: ffff888077f05a10 R15: 0000200000001300 [ 1295.438068][T18234] ? _copy_to_user+0x20/0xb0 [ 1295.438094][T18234] _copy_to_user+0x8a/0xb0 [ 1295.438116][T18234] simple_attr_read+0x34a/0x490 [ 1295.438146][T18234] ? __pfx_simple_attr_read+0x10/0x10 [ 1295.438171][T18234] ? apparmor_file_permission+0x1f4/0x300 [ 1295.438199][T18234] debugfs_attr_read+0x76/0x130 [ 1295.438221][T18234] ? __pfx_debugfs_attr_read+0x10/0x10 [ 1295.438245][T18234] vfs_read+0x20c/0xa70 [ 1295.438280][T18234] ? __pfx___mutex_lock+0x10/0x10 [ 1295.438299][T18234] ? __pfx_vfs_read+0x10/0x10 [ 1295.438324][T18234] ? __fget_files+0x2a/0x420 [ 1295.438348][T18234] ? __fget_files+0x3a0/0x420 [ 1295.438368][T18234] ? __fget_files+0x2a/0x420 [ 1295.438393][T18234] ksys_read+0x150/0x270 [ 1295.438419][T18234] ? __pfx_ksys_read+0x10/0x10 [ 1295.438447][T18234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.438465][T18234] do_syscall_64+0x174/0x580 [ 1295.438483][T18234] ? trace_irq_disable+0x3b/0x140 [ 1295.438509][T18234] ? clear_bhb_loop+0x40/0x90 [ 1295.438529][T18234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.438546][T18234] RIP: 0033:0x7fabdc39ce59 [ 1295.438563][T18234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.438578][T18234] RSP: 002b:00007fabdd176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1295.438595][T18234] RAX: ffffffffffffffda RBX: 00007fabdc615fa0 RCX: 00007fabdc39ce59 [ 1295.438608][T18234] RDX: 0000000000000070 RSI: 0000200000001300 RDI: 0000000000000009 [ 1295.438619][T18234] RBP: 00007fabdc432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1295.438630][T18234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.438641][T18234] R13: 00007fabdc616038 R14: 00007fabdc615fa0 R15: 00007ffc0e1b1428 [ 1295.438662][T18234] [ 1295.960528][T18244] __nla_validate_parse: 69 callbacks suppressed [ 1295.960552][T18244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18401'. [ 1296.038573][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18401'.