last executing test programs: 5.561289169s ago: executing program 2 (id=2430): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000), 0x8) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.602228717s ago: executing program 2 (id=2439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, [@generic={0x81, 0x1, 0x1, 0x65}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r4 = socket(0x2d, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000000)=r0) 2.874226914s ago: executing program 0 (id=2463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x12, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x11, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0x12, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) 2.58075084s ago: executing program 1 (id=2466): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=""/226, 0xe2}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x1ff, 0x8, 0x4, 0xa, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc4}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20040600) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r6, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000140)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) 2.441591831s ago: executing program 0 (id=2468): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400e4ff07000700e00000020800020005000000080008"], 0x2c}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="15ad", 0x2) r3 = accept(r0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0xc6e9f000) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0xd1383000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r7}, 0x10) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, r10, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0xffffffffffffff12}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x90}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', r12, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000100)=ANY=[], 0xfffffdcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) recvmmsg$unix(r3, &(0x7f0000008640)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/2, 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000002940)=""/4096, 0x1000}], 0x1}}], 0x2, 0x10121, 0x0) 2.1183998s ago: executing program 0 (id=2469): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="740000000201010100000000000000000a00000630000e802c00018014000300fc000000000000000014000400fc0100000001000000000000000000040c001980080001000c0900000c00058005000100000000001800018006000340000400000c000280050001000600"/116], 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) 1.692781926s ago: executing program 3 (id=2471): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000900008085000000c400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000080)="b20b37159ddfff82eb87efce061a57e390d90a44c074c639a8e3e6a1ef0b49e2a3f6ec0de0a4598f64a06331995ccda893e2677a8d6e9981d50f2b5c55fcc9b0d81b0f01e000bcc8f5bdf6c066609edbf3890bdb770fe9413994ec4b244ab6cbd169e316007668ab21e1323dd8ba579f47abfd5f2faeb1e828dd392b0103b86cf024976bd7efb8dd24fbeb3432280435a8c04fbcf8676c08c68d5e7c524157f78cb639efcf2f2aff152fb0c27fec3d9f0c378271c89998d020529a51619240c3660f9a9f4ed7bea33dbb9c328a21e65d40a96f171470a87047af0e46339260dca5f64fa65be8cd0546d7", &(0x7f0000000180)=""/85, &(0x7f0000000200)="6f2069a4b3e03df74e4b95704c6e76448c42124f8b005b1a04a849deccfff0d5bc9b", &(0x7f0000000240)="26b65d57a645cc36aa9ec7a395501c132791a3636ad0a9b36c61890840bdb9183bfdf793347caec180a0a82b298bdec02d296c238fe92445d3359d4c0c5266c40266f4eb2f475613a238d7c23d85aae22b2c61593e8553720d47eb3cf66cd62b42cf11d85c1143e5d823172f9c0acd08eb20b443aae3ab6bed37b22b9cf227e8", 0xc7ed, 0xffffffffffffffff, 0x4}, 0x38) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="16000000", @ANYRES16=r5, @ANYBLOB="20002bbd7000fddbdf25100000000c009900000000000a000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) r6 = socket(0x10, 0x803, 0x0) (async) unshare(0x22020400) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000001280)=""/247, &(0x7f0000000200)=0xf7) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010003704000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="c304050000000000240012800400010070708008000c000018000008ffffffd93a304f"], 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 1.50745698s ago: executing program 3 (id=2473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fdffffff1800000008000300", @ANYRES32=r5, @ANYBLOB="1800018008000100020000000500020002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0x20, 0x6, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004800) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4000000000, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x8a6a, 0x5}, 0x0, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x24, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20844) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYRES64=r1, @ANYRES32=r5, @ANYBLOB="233dbb93efde5fc112c7de6e74d2be9d400ee801fa8e7a66c7197c9f3c436618b7185e6ebe4809e10cd3ca8561b6056cc45808e94c69491ccf48", @ANYRESOCT=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x40048b4}, 0x4008054) write$nci(r1, &(0x7f0000000180)=ANY=[@ANYRES64], 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x20004801) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100b1bd7000fbdbdf25250000000a0001007770616e30000700"], 0x20}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001200), r12) 1.416711533s ago: executing program 2 (id=2474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40050) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x10}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.416135748s ago: executing program 4 (id=2475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000a0a46c300000000000000000a0000090900010073797a31004f1700", @ANYRES8=r2], 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x484000, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r4, &(0x7f0000000140)=']+\x00', 0x0, &(0x7f0000000180)={@align=0x6, {0x2, 0xf30d, 0x6, 0xa92}}, 0x7, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000002c0)=0x6}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000340)="c4eb2466ce777b380a17c64e146db040d66961f3b89058da96f25e7ef73683d70103449c9ffd4c9eb12c52984fc54467c4cacf475cff624e7207e2afbcc9"}, 0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000100)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r7) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x14, r8, 0x801, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8004) close(r3) 1.309531553s ago: executing program 3 (id=2476): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf250100000008000100fcffffff2c00048005000300050000000500030002000000050003000200000005000300000000000500030080ff07000800020002"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)) write$nci(r3, &(0x7f0000000a00)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x22, @b={0x4b, 0x1, 0x5, 0x1, 0x4, 0x9, 0x10, {0xe, "a99dd5c8948c05ca5f4a9db8a72b"}, 0xa, 0x1, 0x2d, 0xc4, 0x7, "9b2837666d58be"}}, 0x25) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x1, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcfa2, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x80002, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0xfd, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x10}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x400c840) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4}, 0x94) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x200000000000011, 0x2, 0x0) 1.249945718s ago: executing program 1 (id=2477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x8650bf77ffef8b55}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.163898959s ago: executing program 4 (id=2478): r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) connect$qrtr(r0, &(0x7f00000001c0)={0x2d, 0x2}, 0xc) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="8bcd", 0x2}, {&(0x7f0000000180)="3cab", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x60) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x4}, 0x94) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a603f00ff0f040b067c55a1bc000900080006990300000015000500fe8081780d000500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r4) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000008d40)={&(0x7f0000008b40)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000008d00), 0x0, 0x0, 0x0, 0x4000800}, 0x815) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x84, &(0x7f0000000640)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x8}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x4e22, 0x420, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000600)=0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008dc0), r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000008e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000008ec0)={0x0, 0x0, &(0x7f0000008e80)={&(0x7f0000008e40)={0x34, r6, 0x21d, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x8080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c000ef9", @ANYRES16=0x0, @ANYBLOB="010426bd7000fcdbdf252600000008000300", @ANYRES32=r7, @ANYBLOB="0c00990006000000640000001000b0000000000c0900050005000300110034009fd20c1e9f66ec36ea561249640000000800a100080000000a004f00f82b66fa5ed300000a004f002568ea3bef3c00000a000600080211000001000010009d000100000036bb0500e90503000400d000"], 0x8c}, 0x1, 0x0, 0x0, 0x8814}, 0x4008003) 1.163339037s ago: executing program 0 (id=2479): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) close(r0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x70bd3d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}, 0x1, 0x0, 0x0, 0x24000007}, 0x40) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x54, 0x0, &(0x7f0000000240)="ce090000009a697f65360c5e86dd", 0x0, 0x5dce, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000240), 0x831f, r4}, 0x38) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050437bd7000fedbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="3c0002803800"], 0x58}, 0x1, 0x0, 0x0, 0x431}, 0x4040084) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000001080)={@dev, 0x0}, &(0x7f00000010c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001180)={0x194, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c06}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x280c1}, 0x82f03b35df0921) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fffdb2ff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.110255312s ago: executing program 2 (id=2480): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000640)=0x12c000, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x18, r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xa0028000}) r7 = socket(0x3, 0x3, 0x28000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000070000006122000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYBLOB="000000000000000000000000000000000000000000000000000000004a3a8662aa20381b64aeaf3d40bcf31af11f530e319bc648a3d58581a324730d1f0313a11c23dc6881aef17ef77917b453bcb1c0d0c3a436bb3b974829db87013893e021f6171e70c89145"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001380)={r9, &(0x7f0000000200), 0x0}, 0x20) ioctl$SIOCX25SCALLUSERDATA(r7, 0x89e5, &(0x7f0000000580)={0x2b, "33ed86a086c85ebf643aabe412356ef4f823160afddef49c5c75cbea0d0b4c47c78f7746dc4de6acf4fc57638d0411f2ec789a889682881accafba918ad0502758e986898230288558adadd6318a73c43e4996bb8784e69bebb6fb2221650537e3a95d6aeb4d129fb0bc20e211155407ed0b463414f2c0de89c5032bf96a0b0c"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)=r8}, 0x20) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r12, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000400)={r7, 0x4, 0xfffffffffffffff7, 0xfffffffffffffff5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000056a3eac2000000000007000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001844000002000000000000000000000018250000", @ANYRES32=r9, @ANYBLOB="00000000030000001860000004000000000000000900000018150000", @ANYRES32=r10, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x2c, &(0x7f0000000340)=""/44, 0x41000, 0x42, '\x00', r1, 0x0, r12, 0x8, &(0x7f0000000380)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xe, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r13], &(0x7f0000000480), 0x10, 0x9}, 0x94) setsockopt$CAN_RAW_ERR_FILTER(r13, 0x65, 0x2, &(0x7f0000000480)=0x3, 0x4) write(r7, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 993.195366ms ago: executing program 1 (id=2481): recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x40000040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0f0016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB], 0x44}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYBLOB="041e97"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r4, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000640)=""/103, 0x67}], 0x3}, 0xc}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 920.491368ms ago: executing program 0 (id=2482): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r0, @ANYBLOB="01002cbd7000fedbdf25030000000800010000000000640007800c00018008000100", @ANYRES32=r2, @ANYBLOB="080001", @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4814}, 0x4) 905.942618ms ago: executing program 4 (id=2483): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x30}, 0x4, 0x700000000000000, 0x0, 0x90}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="0000000000004a641c0012000c000100626f6e6400"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x30c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xac, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_DESC={0x224, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x204, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ab1b75d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x802}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7549}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xffffffffffffffc4, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x205}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x478}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4a93}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0xfffffffffffffe24, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x343}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0x334}}, 0x40004) (async) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, 0x301}}, 0x4c}, 0x1, 0x0, 0x0, 0x8081}, 0x884) (async) r11 = socket$inet6(0xa, 0x1, 0x14786a46) getsockopt$IP_SET_OP_VERSION(r11, 0x1, 0x53, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 785.986627ms ago: executing program 3 (id=2484): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r3}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001a80)="a6", 0x1}], 0x1, &(0x7f0000002e80)=ANY=[@ANYBLOB="10000000000006"], 0x10}}], 0x2, 0x4000045) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000101010100000000000000000a000000100002800c000280050001003a0000000c001980080002000808"], 0x30}}, 0x0) 690.77878ms ago: executing program 2 (id=2485): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x0, @remote}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="380000000000000029000000370000003c03000000000000c910fe8000000000000000000000000000aa0401080502000800000000000000140000000000000029"], 0x160}}], 0x2, 0xff00) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000f303010000000000000000000000000a14000000f503010000000000000013000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x9b, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xfff2, 0xe}, {0xfff8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x40c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000400)) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000540)={0x101, 0x90000000, 0x2, 0x1b, 0xffffff56, 0x6, 0x5, 0x8}) 600.379559ms ago: executing program 4 (id=2486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x30, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x30}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x150, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x12c, 0x2, 0x0, 0x1, [@nested={0x128, 0x14, 0x0, 0x1, [@nested={0x122, 0x123, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @uid}, @generic="2875c14805d06efc9bc5973b367d3561e268a07a93f84598c67927dea0138c234ce6282ec667d9cd75ec47699af9f676d4d2faf86c8c29ba87983b8a1ebade8abd32b04e7a530744c854892d89370677768a58faf745d6024d9ea75ba5d53f10ebaa2125fb57bab43f2750ba576069e143b8fccb10d0b39bf792eb16d7def1d1a99841602f2cf2cfb3e11fad85147fc2062d6db259e2bdbdace5b8cd046c5bebb4d0e16e898a1fa306a2f5a4c7b787ae8282438b44804116a03188c6cb786a89be5bcaceb018767bae9a08b1ece3105b172d5781d0990b01c03af4dd0e70", @typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x14, 0x71, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xaa, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xcc, 0x0, 0x0, @uid=r4}]}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000015) 599.352176ms ago: executing program 3 (id=2487): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x4}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="50000000130001002abd7000f8dbcf2504004f8008003300", @ANYRES32, @ANYBLOB="1800258014001c0020010000000000000000000000000001080013"], 0x50}], 0x1}, 0x8880) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) close(0x3) (async) close(0x3) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20040010) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}, 0x0) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="211000000140000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0xf00, 0x0, 0x1}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48d0}, 0x4054) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, &(0x7f0000000100), 0x0}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, &(0x7f0000000100), 0x0}, 0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, 0x0, 0x4048000) (async) sendmsg$inet_sctp(r0, 0x0, 0x4048000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32], 0xc) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32], 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r5, &(0x7f0000007300)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="7790ea2b2eae9aaf4d832d53008eae091c733817270b25b50d3e147955783b", 0x1f}], 0x1, &(0x7f0000001600)=[{0xe8, 0x10c, 0x6, "9780ee50899838027547e5a800438ff4247e0a18c0735fbacdcfeb0b65389903e01e50033b2b3fc3ca9fc346b77ac1497c9bdaf62f51a91790e5e94bf64ba307262b9c98a5b6c13f8ddfbd30d7f24e609a8abab990a1644a6bd74365cc59a52dc54ba5ca9f04a772dc24f8302e8945725e26c9ee91f3149c454eb6f20b27767234b64e4056f32b731d6af91efcabc9eda74a7dba11f4616b70d28ac30bbb5922682b165b7aadb3dbfbe8bf728b13d950ccbbd3e84d3759d195af15b271f2aecf376226ccab076264a315e8ee9f902f3051bc673bcfbe"}, {0x30, 0x119, 0x0, "1eb170b6e2f49db82101237fc5bd3f33a9ed56037a03f2732841c903f189"}, {0x10, 0x1, 0xc8}, {0x38, 0x29, 0x0, "96475c324dc52db042a7e99d2f7cbdd729b99f36ab4bf76749709522c095659c37"}, {0x10, 0x108, 0xfffffff9}], 0x170}}, {{&(0x7f0000002ac0)=@generic={0x8, "22943e1cc52fc390bb5c77a2a68e59182c67aa5e2f869a1d66c31450c1349ee6996a71be9a902007f79b826caf60f6e80d455514e7d850a0e8e95950a0c249709722428c23f5063505edc92c9da91802897ed88dc85df6fff93ffaa75baf006b64ba69cc11ab26d0c3fc7752dbd2392d93e441ccf13c0cdffdad7ba5dc63"}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002b40)}, {&(0x7f0000002c40)="a8dd1270b7d97efc1a735e6a82bbc0537a9caddd716a4d36a41d61236ef29be0a9b513aa638cd525f5071ab03306ab6cffab404906b36b07ba208d88696106583f5d7877f9d31ad08f3c4f3d5632dad7bcd330d844dc8e2b344897a37de4326945812bf62164d91cfdf40b54c9f765534c120654b3be7a09e78e39f9684e201cd04b2e737c9faf68bc", 0x89}], 0x2, &(0x7f0000002d40)}}, {{0x0, 0x0, &(0x7f0000003480), 0x0, &(0x7f0000003500)=ANY=[@ANYRES32=0x0], 0x13c8}}, {{&(0x7f0000004900)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000005c80)=[{0x0}, {0x0}, {&(0x7f0000004a80)="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", 0xdc0}, {&(0x7f0000005a80)="90c5405338d671e66a4b2f2dcd434835e32482eecbf463d1686c9ec3c198d159185665f60e1954e30bc9671de4be89e6323ef4328ee7f9eec949abeed53ab1afa2cc1e5180404c0d0b5e75932fc17713c1d8016ff05ee122be549d16fbc0fa2e4bd37ea3498636c0979c6cac04dfe0ac6dba", 0x72}, {&(0x7f0000005b40)="8a0d2e1d462b5c10dbca79513f34ce8d69d6917d28962787ebe3ced349391fa324cc32489bdde50b9225d97a9464fb4eda881d7a40c40b0a0ff99b1ed13b069397c0c9952c95fb13112eb3b822a069a3dae5e10e2d05e95fdc552fc7c6fb3ff704dc4448089591bc7a710d676c63d745163d5046b72d011431975d46f33ac23db740f486d6e4cc6503e91fca02d737ed70238b536ded25ff40b1760b", 0x9c}, {&(0x7f0000005c00)}], 0x6, &(0x7f0000005d00)}}], 0x4, 0x4001801) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000240)=0x9, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1020, 0x39, 0x5000, 0x7, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x8e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x17, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x13, 0x99, [@multicast2, @local, @empty, @loopback]}, @timestamp_prespec={0x44, 0x24, 0xd9, 0x3, 0x7, [{@remote, 0x1}, {@multicast1, 0xbca4}, {@remote, 0x12e}, {@rand_addr=0x64010102, 0xe}]}, @ssrr={0x89, 0xf, 0xf0, [@remote, @local, @multicast2]}]}}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0000ffff"}}}}}, 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x17, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x13, 0x99, [@multicast2, @local, @empty, @loopback]}, @timestamp_prespec={0x44, 0x24, 0xd9, 0x3, 0x7, [{@remote, 0x1}, {@multicast1, 0xbca4}, {@remote, 0x12e}, {@rand_addr=0x64010102, 0xe}]}, @ssrr={0x89, 0xf, 0xf0, [@remote, @local, @multicast2]}]}}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0000ffff"}}}}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 598.662498ms ago: executing program 2 (id=2488): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a31000000000800410072786500140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_emit_ethernet(0x4c8, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045bc04ba0002000000119078000000000000000000004e2004a6907802010001800000002b47019676fb912bfb3979bb82d94c42da0498ad601e4b92fe2c62ba4d6bdd44d280dada5a5650e1edaecb4fd923a6ded85d084df9d5e7bffddda34d04e5cdb51ef2fe8703b3988bb47989823d53b49308c5d2977c173d08535eaf56e740391766d74589e9806165ef3d4085755bbaa162e74e4dc541aa6004761f6a43e20556918bb04da9070b3cc89472820459902b3342031e1571d32a8b78f2da2a8e73e26af9389dced48cdcaf0a714363789e4acd9373813e2729986552c1cdbeabd3a03d7684ead62926c387b1552066f9751c9f0fa935afda36cf2fb30bba0cb8007f3bd1fea86ef3b7f8434e250f2a09e6a3b569c8c0519adc93f8b909470f39920551618ecfe04ff0cc4b1ed29eee56dcd976a79181e4d3218b51150ce595c25371293ec4d05e4aa411ef3b190554c6a2e06ee6374d80a3c511603a8a20b75f8075d0d83d31b86be7d2d785e6d60c07b515fe04bd55e20bcfe799a3e66c93744c52d0d34880ab42354859d5d1a9d0d65b52a0819b19c2d7f7a285d401825bf40ccc355b1aecb100c3f86c71607b00c59c7a8c0d8ae35a0a0e20f189568cb1a386c9d799f2c5ba6cce4e6ae0dce69f7391a4f4b011b27ad89ecaca95b90be9e517d39fa47ab5d08fd75233c1b0b604c169ebdc29efe713e9ecd551fc383be78cc5afccee1d8bb067e64054734b61c99f1055748b335ea261b9a6ccd1b3362a0c9d26c74bcda8e4d1efca7f614a61b8dfa2508a39f78901cf7ab2f15409f1da06432db0b50f00e16a77ceece0e315fc63c46cd418a1d259ba713bc5a26a49bdc202cf04e02149cf29c1f617f0898321ecf9d395f349e276480b42147d4dc1af6491e05cff9a33517437cb21125f6945e0b727576880a89ef6d53375bb901e14ae1a2dd27a5bf67012b8e4515023dba602d2e5293da914c199c0c0d610bf6461cd7bba6c8b948e96f395c39a7a0b93df65368f8eaa306fdcf87522ac1a36c427d98af77c3a3afa33dc3e8e070a1a2f66a4877abbeef23ff67befdcc9532cf3990918fb778d7799ee1f26b469c37f3c9578b8f8f2d00d32fc839171b9474e76f03d827a4eac2802322f3d68b03d1516aec9566bba3acc0bcf0d6a551c412f080d8c7fe0c60e23cdb328920263477470ea4f23e23d5aebbfda173aa781f89bf0cdfce2003ed3c010c511b3b489eab29453a365b839cca172e3abbcbab0203899bdb4f14a3423c2293166145760e61c3c188c3e0888ee817f0772ff89e02df8f42b9951e1661b39def34308c46e8ec1e4e5b68e88140ac7dc993523191fdb71db3a2677a3bd666e6180a96c9846bce6cb6c16e33a76346c0054683f24ed69f1b20f46bb79bf29e1769a66da2f6781e79f082cb80662d72adbb21240cef87dc3079a822b2a791753fcd12a7ec362088d76237370bcd5d5daa440ba735b4e29cf2cb93583a5080270d1a3fd40183dc04f30e01c428f92e595c89fcbd1fc52962eedea82e2772b5f5fa3dad0f908fe6a48fffcc69df60f34ef9d9ba7609d16cdf733ca77785c0ab6f536b79ffde4ff9b835bfcaffef0d15ae69c26c0588f1acd5a648fde52568c713163717eb77f863d20dda0f1ca2c0306748544d3763c1cfa82f1785f047c842cadc4f8ac1906ab6ad8f6425bb9efbe97ee"], 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x405, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r5, &(0x7f00000004c0)="b0", 0x1, 0x4008050, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, 0x84) sendto$inet6(r3, &(0x7f0000000100)="eba2cc9657bb2d55a717743dbbfd06dd038d5bcd2b0bb379ae3af8d32e61a90fd322f7f1b819a40279dcde9368b5c6876866f8c10692741ce157f1560a8259a77f6896c536f35de736c35553a702697c6fb546e02084552aad78b9a8b68683ee229dc7d3225bb3d7563e06f47199349907ee7d88472aae22023f41396520dd1a87cfa18aceb47282", 0x88, 0x40, &(0x7f0000000300)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="a052717183d707049bff1001000180000000000000000008004800003c000400000001907864010102ffffffff940401009404001094040000030890ff00067f4345170fff0065b9f9f5"], 0x0) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)}}], 0x1, 0x0) 387.574753ms ago: executing program 4 (id=2489): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @multicast1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="5566fb8aa6", 0x5}, {&(0x7f0000000100)="ff324d434ec75697a84d04", 0xb}, {&(0x7f0000000600)="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", 0xaf9}], 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) 383.608278ms ago: executing program 1 (id=2490): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a006da8e0ffffffffffffff1c140000000000e2"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYBLOB="c010000000000000300012800800010067726500240002b6741c089ab90003000500000005000a000110000005fc0800080000000600020002000000fc80f757bbe4af4f7e17165a9067000814a5baa80cecf6e99382ecc775339ba99e4434594eb1f20d6af1fe96b3ed4a9447b3a716ab9389c2f3ffcd2efd809c496dbd1a6400b9458d8b9972931d8084a9775454fe2c06542964b1e7ceecea80b678a4bf3782b2616a18df9f56bbde8261da18e0a021042a02e78c9f1f740fab30cf2f22699a042aca665432cee0f7ee2a217d795e8ba14497c1c65582cedd4b"], 0x50}}, 0x40) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x10, 0x4) 282.885937ms ago: executing program 0 (id=2491): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000810) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r4, 0x100000000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000580)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, @rc={0x1f, @none}, @hci={0x1f, 0x2, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x10001, 0xbed, 0x8}) 249.955826ms ago: executing program 1 (id=2492): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f00000057c0)=ANY=[@ANYBLOB="18080000fa0000000000000000ff0000851000000600000018000000", @ANYRESDEC=r0, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe3, &(0x7f00000056c0)=""/227, 0x41100, 0x8}, 0x94) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="00010804001300"/20, @ANYRES32=0x0, @ANYBLOB="00000000800000000c0016800800018004000c8008001b0000000000"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000104000000b68eaad20000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120008000500000000000800040000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x160, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0xd2bd, 0xf, 0x80000001, 0x80000001, 0x0, 0x88}, [@TCA_NETEM_LOSS={0xa0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x6, 0x5, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfffffff8, 0x9, 0x5, 0x80000000, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x3, 0x81, 0x9485}}, @NETEM_LOSS_GI={0x18, 0x1, {0x400, 0x81, 0xfffffff9, 0xc97d, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x60, 0x9, 0x10, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x0, 0x3, 0x2, 0xfffffff9}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0xfffffff7, 0x40, 0x2}}]}]}}}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x5, 0x10, 0x240c, 0x0, 0x1, 0x0, 0x5}}, {0xe, 0x2, [0x4, 0x5, 0xf, 0x5, 0x4]}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x34, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7}}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_MAX_P={0x8, 0x3, 0xffffffff}, @TCA_RED_PARMS={0x14, 0x1, {0x200, 0x0, 0x10001, 0x1f, 0x4, 0x1a, 0x8}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000203f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r9, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006940)=ANY=[@ANYBLOB="5812000044000701fefffffffcdbdf25037c000004004580401201803c1264803812cd803412d680301218800400f28004008d801d126a80cb84262700fc44f829e9ac5d2b0168d2ed51fbf02783ae7705c94d9468d49caa3fe790e8e8dd00398014006d800500a4000000000008004d00ac14140c4100d7800e234e97870570fe05971f3a8b14000b00fe88000000000000000000000000000108001c00", @ANYRES32=0x0, @ANYBLOB="1400a200ff0200000000000000000000000000010000009020019b9b40e6fb257d7f8ec5b5db9e3bcc34047d520b19e5d2da28147fea4f59847778e84473af4c9c743f1dcd7d44aff4e283c8b9432f55345b828c410002807cd95be044e7448e9971de32219ce5c8916f61b341e63a2e333d72f10e4ced0ff88f134a8223e16a328d525a28347b3491a90fb7ce3babdce115d879e00000000000000400d2800d11fd8008006600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="0000000000000400a20033680e8b826f7ff75e886d8d357b1f92628e6dea439ca712d05a09c4e31cd80a4e10f6ba4cfc5327f3eb36a6105a0fa69869e83da86bc907e440a17ca52ebd3eef8463102209099fb7c7e89bb68e7b065a4aa0c274adf02b23a36f8c75b06c2e01e30079ee9a39e526888d844d0f3f65d97626452e5fdc3accfb7816297865cee52d7dda12ff43888cbe4dcae6f41a2ccc205b053bdadb5b5e008cd6d8c755add4f29974b11457336a08d336910a31822684b7458cd9980625eea156542d0801c9cd46224b1161848e372bbb6ddcaeec6cfaaf0dc7fa0d093f68014a2c9d11dcef7f"], 0x1258}}, 0xc000) r13 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r13, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r13, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r13, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/131, 0x83}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000000380)}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/206, 0xce}, {&(0x7f0000000680)}], 0x9, &(0x7f0000000780)=""/220, 0xdc}, 0x5}, {{&(0x7f0000000880)=@qipcrtr, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/231, 0xe7}, {&(0x7f0000000a00)=""/46, 0x2e}, {&(0x7f0000000a40)=""/203, 0xcb}], 0x3}, 0x10001}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1, &(0x7f0000001c40)=""/197, 0xc5}}, {{&(0x7f0000001d40)=@nfc, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/223, 0xdf}], 0x1, &(0x7f0000001f00)=""/177, 0xb1}, 0x9}, {{&(0x7f0000001fc0)=@nl, 0x80, &(0x7f0000003100)=[{&(0x7f0000002040)=""/109, 0x6d}, {&(0x7f00000020c0)=""/44, 0x2c}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x3}, 0x2}, {{&(0x7f0000003140)=@generic, 0x80, &(0x7f0000003640)=[{&(0x7f00000031c0)=""/130, 0x82}, {&(0x7f0000003280)=""/131, 0x83}, {&(0x7f0000003340)=""/97, 0x61}, {&(0x7f00000033c0)=""/125, 0x7d}, {&(0x7f0000003440)=""/174, 0xae}, {&(0x7f0000003500)=""/236, 0xec}, {&(0x7f0000003600)=""/45, 0x2d}], 0x7, &(0x7f00000036c0)=""/234, 0xea}, 0x1}, {{&(0x7f00000037c0)=@alg, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003840)=""/34, 0x22}, {&(0x7f0000003880)=""/203, 0xcb}, {&(0x7f0000003980)=""/212, 0xd4}, {&(0x7f0000003a80)=""/32, 0x20}, {&(0x7f0000003ac0)=""/168, 0xa8}, {&(0x7f0000003b80)=""/227, 0xe3}, {&(0x7f0000003c80)=""/88, 0x58}, {&(0x7f0000003d00)=""/185, 0xb9}, {&(0x7f0000003dc0)=""/70, 0x46}, {&(0x7f0000003e40)=""/147, 0x93}], 0xa, &(0x7f0000003fc0)=""/155, 0x9b}, 0x43f}, {{&(0x7f0000004080)=@generic, 0x80, &(0x7f0000004380)=[{&(0x7f0000004100)=""/111, 0x6f}, {&(0x7f0000004180)=""/170, 0xaa}, {&(0x7f0000004240)=""/50, 0x32}, {&(0x7f0000004280)=""/151, 0x97}, {&(0x7f0000004340)=""/25, 0x19}], 0x5, &(0x7f0000004400)=""/4096, 0x1000}, 0x400}], 0x8, 0x60010000, 0x0) sendto$inet(r13, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x2c, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 116.089469ms ago: executing program 4 (id=2493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newtfilter={0x74, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xca2dabcef21b1300, 0x5}, {0xfff2, 0x3}, {0xb, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x7c46}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x80000000}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x244e}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x24040084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb010018000000000000009200000092000000040000000e0000000000000a040000000b0000000a00000f0200000003000000b20000000000edc5d6ddcc00d6cf6555008002000000080000008000000002000000960500000700000004000000ee8f00000300000005000000080000000100000003000000100000000900000002000000f3000000ff000000010000000300000001000000020000005900bd8dd2a47d92756b6744baaf8b5a4b0000060000000300000003"], &(0x7f0000000800)=""/232, 0xb0, 0xe8, 0x0, 0x0, 0x10000}, 0x28) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a1ab000000000600000032000000f2ff00006000000008001300", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24004854}, 0x40050) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r12}, &(0x7f00000000c0), &(0x7f0000000680)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffd}, 0x94) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x300, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0xfe, 0x1, 0x0, 0x0, "49fd003900"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfb, 0x4, 0x2, 0xcc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x88) close(r10) r13 = socket$unix(0x1, 0x5, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x200, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r15, {0x0, 0x6}, {0x6, 0x10}, {0xfff3, 0x1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r16, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xca}, @common=@unspec=@RATEEST={0x22, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 114.52408ms ago: executing program 3 (id=2494): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000180)='i', 0x1}], 0x1) r5 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 1 (id=2495): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000180)={0x7ec1, 0x40, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f00000001c0)={0x8, 0x80000001}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000200)) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000240)={r2, 0x7, 0x5, "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"}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001280)={r4}, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001500)={&(0x7f0000001380)={0x16c, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffffff50, 0x1f}}}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x10}, 0x4040) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, &(0x7f0000001580)=0x12) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f00000015c0), &(0x7f0000001600)=0x4) getsockopt$inet_buf(r5, 0x0, 0x25, &(0x7f0000001640)=""/4096, &(0x7f0000002640)=0x1000) bind$unix(r5, &(0x7f0000002680)=@file={0x0, './file0\x00'}, 0x6e) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002740), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x30, r9, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x768}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24044010) (async) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x30, r9, 0x0, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x768}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24044010) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000002840)) (async) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000002840)) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x41) (async) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x41) r10 = syz_genetlink_get_family_id$gtp(&(0x7f00000029c0), r5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000002b40)={'ip_vti0\x00', &(0x7f0000002a00)={'gretap0\x00', 0x0, 0x80, 0x10, 0x9, 0x4, {{0x3f, 0x4, 0x3, 0x4, 0xfc, 0x64, 0x0, 0xf9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2, {[@noop, @noop, @cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x1, 0xf, "fd2e74ac08c1e7d4bcc11712fe"}, {0x5, 0x12, "06baa955cb085bb18aeb975c592c4e7e"}, {0x0, 0x5, "208609"}]}, @timestamp={0x44, 0x24, 0x42, 0x0, 0x3, [0x1, 0x10001, 0x401, 0x7f, 0x2, 0x1, 0x1e, 0x7]}, @timestamp_prespec={0x44, 0x24, 0xd9, 0x3, 0x3, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x3}, {@multicast2, 0xa8}, {@remote, 0xd48}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x6, 0x5, "0d32b7"}, {0x0, 0x4, "8c77"}, {0x5, 0xe, "7683ab3ef74e46ec52bddf23"}]}, @timestamp_addr={0x44, 0x54, 0x4f, 0x1, 0x0, [{@private=0xa010100, 0x2}, {@multicast2, 0x3}, {@private=0xa010100, 0x4}, {@loopback, 0xfffffff9}, {@empty, 0x8}, {@broadcast, 0x6}, {@empty, 0x6}, {@broadcast, 0x8001}, {@broadcast, 0x4e2}, {@multicast1, 0x5}]}]}}}}}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000002d00)={{r8, &(0x7f0000002b80)='nl80211\x00', 0x103100, &(0x7f0000002bc0)={@align=0x8, {0x2bcf, 0xe, 0x684e92e0, 0xfffffffffffffffb}}, 0x6ba, &(0x7f0000002c00)={@_ha_fsid}, &(0x7f0000002c40)=0x7}, {[0x2, 0x2, 0xe, 0x2bf5]}, 0xfffffff7, 0x45, &(0x7f0000002c80)=""/69}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000002d00)={{r8, &(0x7f0000002b80)='nl80211\x00', 0x103100, &(0x7f0000002bc0)={@align=0x8, {0x2bcf, 0xe, 0x684e92e0, 0xfffffffffffffffb}}, 0x6ba, &(0x7f0000002c00)={@_ha_fsid}, &(0x7f0000002c40)=0x7}, {[0x2, 0x2, 0xe, 0x2bf5]}, 0xfffffff7, 0x45, &(0x7f0000002c80)=""/69}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000002e40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x50, r10, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x27}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_NET_NS_FD={0x8, 0x7, r12}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8008}, 0x5) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000002e80)) (async) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000002e80)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r12, 0x8982, &(0x7f0000002ec0)={0x1, 'veth0\x00', {}, 0x3}) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r12, 0x8982, &(0x7f0000002ec0)={0x1, 'veth0\x00', {}, 0x3}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003100)={&(0x7f0000002f00)="349bdd0e5be5d0e0bca4e65b3899e757efcea42c923d7dd6e3e0f7618539a1a9382c7f5ee43906b6173fe9d7fcbad1550d0fe07aa63a7dcc18c3c4f93a9628b1168ca3949deee502d97c8e4b55777f702c5a61bea2b2405e6b5414d1fc709725c139c9e597dbb7e74395cfae8f8ba54a003d20eded535509e71a3f93ecc72c53745b1443a1c802e35f985f19a3f617f9490a186f9172ab18f185bd32", &(0x7f0000002fc0)=""/20, &(0x7f0000003000)="323e246f71dfde3c3ba45be7ec4d5eee1b727d15c844158d40ca7f29ca2d9af5f9ddb106999302b0ba9b12dc84006816a4d8402089a9a233ea6d8571a94b1935c4a51e7ce148f8cd58a55924f240778669b75fcb50658476ebe3e488ac283dd6", &(0x7f0000003080)="f42df3098bb7c5d6f5c1c64872932b5447388ebfe04a96cf4064a82b53a0a962d4259da2c0a7f967f4ab5762cd141edf43810d6bdefc460f911b59e5d005ec2290808f75fdba29ef8e340cc50c03a343da21e8d4a22a2eced1c53b64e0e6388a80fb7e4ac61956", 0x4, r12, 0x4}, 0x38) kernel console output (not intermixed with test programs): . [ 225.172149][T10726] IPVS: using max 31 ests per chain, 74400 per kthread [ 225.536138][T10749] FAULT_INJECTION: forcing a failure. [ 225.536138][T10749] name failslab, interval 1, probability 0, space 0, times 0 [ 225.556273][T10749] CPU: 1 UID: 0 PID: 10749 Comm: syz.1.1235 Not tainted syzkaller #0 PREEMPT(full) [ 225.556297][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 225.556305][T10749] Call Trace: [ 225.556311][T10749] [ 225.556318][T10749] dump_stack_lvl+0xe8/0x150 [ 225.556352][T10749] should_fail_ex+0x40c/0x560 [ 225.556380][T10749] should_failslab+0xa8/0x100 [ 225.556408][T10749] __kmalloc_cache_noprof+0xa8/0x660 [ 225.556434][T10749] ? ovs_flow_cmd_new+0x356/0xe80 [ 225.556457][T10749] ? ovs_flow_cmd_new+0x356/0xe80 [ 225.556489][T10749] ovs_flow_cmd_new+0x356/0xe80 [ 225.556513][T10749] ? __kmalloc_noprof+0x1ad/0x720 [ 225.556536][T10749] ? kasan_save_track+0x3e/0x80 [ 225.556564][T10749] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 225.556640][T10749] ? __kmalloc_noprof+0x396/0x720 [ 225.556665][T10749] ? __nla_parse+0x40/0x60 [ 225.556693][T10749] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 225.556718][T10749] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 225.556819][T10749] genl_family_rcv_msg_doit+0x233/0x340 [ 225.556850][T10749] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 225.556905][T10749] ? bpf_lsm_capable+0x9/0x20 [ 225.556927][T10749] ? security_capable+0x7e/0x2c0 [ 225.556962][T10749] genl_rcv_msg+0x614/0x7a0 [ 225.556991][T10749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.557014][T10749] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 225.557040][T10749] ? __pfx_ref_tracker_free+0x10/0x10 [ 225.557063][T10749] ? __asan_memcpy+0x40/0x70 [ 225.557083][T10749] ? __skb_clone+0x5c/0x6c0 [ 225.557118][T10749] netlink_rcv_skb+0x226/0x4a0 [ 225.557148][T10749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.557173][T10749] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.557218][T10749] ? down_read+0x2be/0x330 [ 225.557240][T10749] genl_rcv+0x28/0x40 [ 225.557261][T10749] netlink_unicast+0x7bb/0x940 [ 225.557299][T10749] netlink_sendmsg+0x813/0xb40 [ 225.557326][T10749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.557349][T10749] ? aa_sock_msg_perm+0xf1/0x1b0 [ 225.557373][T10749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.557390][T10749] sock_sendmsg_nosec+0x13a/0x180 [ 225.557416][T10749] ____sys_sendmsg+0x54e/0x850 [ 225.557449][T10749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.557479][T10749] ? import_iovec+0x73/0xa0 [ 225.557506][T10749] ___sys_sendmsg+0x2a5/0x360 [ 225.557529][T10749] ? __lock_acquire+0x683/0x2cf0 [ 225.557557][T10749] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.557619][T10749] ? __fget_files+0x2a/0x420 [ 225.557642][T10749] ? __fget_files+0x3a2/0x420 [ 225.557676][T10749] __x64_sys_sendmsg+0x1b1/0x290 [ 225.557706][T10749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.557761][T10749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.557782][T10749] do_syscall_64+0x174/0x580 [ 225.557807][T10749] ? trace_irq_disable+0x3b/0x140 [ 225.557831][T10749] ? clear_bhb_loop+0x40/0x90 [ 225.557854][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.557873][T10749] RIP: 0033:0x7f28be19de59 [ 225.557892][T10749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.557907][T10749] RSP: 002b:00007f28bf0fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.557927][T10749] RAX: ffffffffffffffda RBX: 00007f28be425fa0 RCX: 00007f28be19de59 [ 225.557941][T10749] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 225.557953][T10749] RBP: 00007f28bf0fb090 R08: 0000000000000000 R09: 0000000000000000 [ 225.557962][T10749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.557971][T10749] R13: 00007f28be426038 R14: 00007f28be425fa0 R15: 00007ffc8b6bbdb8 [ 225.557997][T10749] [ 225.872781][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.145715][T10762] netlink: 'syz.2.1240': attribute type 1 has an invalid length. [ 226.184315][T10762] bond3: entered promiscuous mode [ 226.190088][T10762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.199328][T10760] tipc: Enabled bearer , priority 0 [ 226.260779][T10762] vlan2: entered allmulticast mode [ 226.282259][T10762] bond3: entered allmulticast mode [ 226.289176][T10759] tipc: Disabling bearer [ 226.313206][T10763] bond3: (slave bridge2): making interface the new active one [ 226.320939][T10763] bridge2: entered promiscuous mode [ 226.329709][T10763] bridge2: entered allmulticast mode [ 226.344962][T10763] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 226.415874][T10770] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 226.473758][T10780] netlink: 'syz.0.1244': attribute type 1 has an invalid length. [ 226.649440][T10784] __nla_validate_parse: 4 callbacks suppressed [ 226.649459][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'. [ 226.741514][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1248'. [ 226.787989][T10792] FAULT_INJECTION: forcing a failure. [ 226.787989][T10792] name failslab, interval 1, probability 0, space 0, times 0 [ 226.816507][T10792] CPU: 1 UID: 0 PID: 10792 Comm: syz.3.1248 Not tainted syzkaller #0 PREEMPT(full) [ 226.816532][T10792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 226.816542][T10792] Call Trace: [ 226.816550][T10792] [ 226.816558][T10792] dump_stack_lvl+0xe8/0x150 [ 226.816590][T10792] should_fail_ex+0x40c/0x560 [ 226.816618][T10792] should_failslab+0xa8/0x100 [ 226.816647][T10792] __kmalloc_noprof+0xfe/0x720 [ 226.816672][T10792] ? ovs_nla_copy_actions+0x68/0x3d0 [ 226.816689][T10792] ? ovs_nla_copy_actions+0x68/0x3d0 [ 226.816707][T10792] ? ovs_nla_get_identifier+0x72/0xd0 [ 226.816739][T10792] ovs_nla_copy_actions+0x68/0x3d0 [ 226.816760][T10792] ovs_flow_cmd_new+0x60f/0xe80 [ 226.816782][T10792] ? __kmalloc_noprof+0x1ad/0x720 [ 226.816809][T10792] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 226.816881][T10792] ? __kmalloc_noprof+0x396/0x720 [ 226.816907][T10792] ? __nla_parse+0x40/0x60 [ 226.816932][T10792] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 226.816954][T10792] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 226.816986][T10792] genl_family_rcv_msg_doit+0x233/0x340 [ 226.817016][T10792] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 226.817051][T10792] ? bpf_lsm_capable+0x9/0x20 [ 226.817073][T10792] ? security_capable+0x7e/0x2c0 [ 226.817116][T10792] genl_rcv_msg+0x614/0x7a0 [ 226.817145][T10792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.817167][T10792] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 226.817203][T10792] netlink_rcv_skb+0x226/0x4a0 [ 226.817233][T10792] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.817257][T10792] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.817298][T10792] ? down_read+0x2be/0x330 [ 226.817324][T10792] genl_rcv+0x28/0x40 [ 226.817345][T10792] netlink_unicast+0x7bb/0x940 [ 226.817383][T10792] netlink_sendmsg+0x813/0xb40 [ 226.817413][T10792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.817433][T10792] ? aa_sock_msg_perm+0xf1/0x1b0 [ 226.817457][T10792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.817475][T10792] sock_sendmsg_nosec+0x13a/0x180 [ 226.817501][T10792] ____sys_sendmsg+0x54e/0x850 [ 226.817536][T10792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.817573][T10792] ? import_iovec+0x73/0xa0 [ 226.817602][T10792] ___sys_sendmsg+0x2a5/0x360 [ 226.817629][T10792] ? __lock_acquire+0x683/0x2cf0 [ 226.817659][T10792] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.817723][T10792] ? __fget_files+0x2a/0x420 [ 226.817745][T10792] ? __fget_files+0x3a2/0x420 [ 226.817774][T10792] __x64_sys_sendmsg+0x1b1/0x290 [ 226.817802][T10792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.817844][T10792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.817863][T10792] do_syscall_64+0x174/0x580 [ 226.817887][T10792] ? trace_irq_disable+0x3b/0x140 [ 226.817910][T10792] ? clear_bhb_loop+0x40/0x90 [ 226.817934][T10792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.817952][T10792] RIP: 0033:0x7f90bed9de59 [ 226.817970][T10792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.817985][T10792] RSP: 002b:00007f90bfb91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.818005][T10792] RAX: ffffffffffffffda RBX: 00007f90bf025fa0 RCX: 00007f90bed9de59 [ 226.818018][T10792] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 226.818030][T10792] RBP: 00007f90bfb91090 R08: 0000000000000000 R09: 0000000000000000 [ 226.818041][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.818052][T10792] R13: 00007f90bf026038 R14: 00007f90bf025fa0 R15: 00007ffdbf0a0728 [ 226.818083][T10792] [ 226.821366][T10792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.056913][T10794] tipc: Enabled bearer , priority 0 [ 227.593594][T10800] syzkaller0: entered promiscuous mode [ 227.613719][T10800] syzkaller0: entered allmulticast mode [ 227.632760][T10800] tipc: Resetting bearer [ 227.651286][T10824] tipc: Enabling of bearer rejected, already enabled [ 227.718790][T10793] tipc: Resetting bearer [ 228.472345][T10849] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1260'. [ 228.682635][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 228.742777][T10858] FAULT_INJECTION: forcing a failure. [ 228.742777][T10858] name failslab, interval 1, probability 0, space 0, times 0 [ 228.773643][T10858] CPU: 0 UID: 0 PID: 10858 Comm: syz.2.1262 Not tainted syzkaller #0 PREEMPT(full) [ 228.773675][T10858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 228.773686][T10858] Call Trace: [ 228.773694][T10858] [ 228.773702][T10858] dump_stack_lvl+0xe8/0x150 [ 228.773734][T10858] should_fail_ex+0x40c/0x560 [ 228.773760][T10858] should_failslab+0xa8/0x100 [ 228.773790][T10858] __kmalloc_noprof+0xfe/0x720 [ 228.773816][T10858] ? ovs_nla_copy_actions+0x68/0x3d0 [ 228.773835][T10858] ? ovs_nla_copy_actions+0x68/0x3d0 [ 228.773855][T10858] ? ovs_nla_get_identifier+0x72/0xd0 [ 228.773888][T10858] ovs_nla_copy_actions+0x68/0x3d0 [ 228.773913][T10858] ovs_flow_cmd_new+0x60f/0xe80 [ 228.773938][T10858] ? __kmalloc_noprof+0x1ad/0x720 [ 228.773969][T10858] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 228.774046][T10858] ? __kmalloc_noprof+0x396/0x720 [ 228.774072][T10858] ? __nla_parse+0x40/0x60 [ 228.774101][T10858] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 228.774126][T10858] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 228.774159][T10858] genl_family_rcv_msg_doit+0x233/0x340 [ 228.774191][T10858] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 228.774229][T10858] ? bpf_lsm_capable+0x9/0x20 [ 228.774253][T10858] ? security_capable+0x7e/0x2c0 [ 228.774289][T10858] genl_rcv_msg+0x614/0x7a0 [ 228.774319][T10858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.774343][T10858] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 228.774384][T10858] netlink_rcv_skb+0x226/0x4a0 [ 228.774423][T10858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.774448][T10858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.774494][T10858] ? down_read+0x2be/0x330 [ 228.774518][T10858] genl_rcv+0x28/0x40 [ 228.774540][T10858] netlink_unicast+0x7bb/0x940 [ 228.774578][T10858] netlink_sendmsg+0x813/0xb40 [ 228.774608][T10858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.774632][T10858] ? aa_sock_msg_perm+0xf1/0x1b0 [ 228.774657][T10858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.774676][T10858] sock_sendmsg_nosec+0x13a/0x180 [ 228.774702][T10858] ____sys_sendmsg+0x54e/0x850 [ 228.774738][T10858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.774777][T10858] ? import_iovec+0x73/0xa0 [ 228.774808][T10858] ___sys_sendmsg+0x2a5/0x360 [ 228.774835][T10858] ? __lock_acquire+0x683/0x2cf0 [ 228.774865][T10858] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.774930][T10858] ? __fget_files+0x2a/0x420 [ 228.774954][T10858] ? __fget_files+0x3a2/0x420 [ 228.774990][T10858] __x64_sys_sendmsg+0x1b1/0x290 [ 228.775021][T10858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.775069][T10858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.775095][T10858] do_syscall_64+0x174/0x580 [ 228.775121][T10858] ? trace_irq_disable+0x3b/0x140 [ 228.775145][T10858] ? clear_bhb_loop+0x40/0x90 [ 228.775170][T10858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.775189][T10858] RIP: 0033:0x7f2616f9de59 [ 228.775208][T10858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.775225][T10858] RSP: 002b:00007f2617e1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.775246][T10858] RAX: ffffffffffffffda RBX: 00007f2617226090 RCX: 00007f2616f9de59 [ 228.775260][T10858] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 228.775273][T10858] RBP: 00007f2617e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 228.775285][T10858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.775296][T10858] R13: 00007f2617226128 R14: 00007f2617226090 R15: 00007ffd20a36e68 [ 228.775328][T10858] [ 228.775444][T10858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.975981][T10864] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1264'. [ 231.216950][T10793] tipc: Disabling bearer [ 231.228136][ T6297] tipc: Node number set to 4293131011 [ 231.256111][ T6297] lo speed is unknown, defaulting to 1000 [ 231.282698][ T6297] syz2: Port: 1 Link ACTIVE [ 231.300875][T10848] wlan0 speed is unknown, defaulting to 1000 [ 231.383446][T10848] lo speed is unknown, defaulting to 1000 [ 231.401493][T10847] wlan0 speed is unknown, defaulting to 1000 [ 231.410761][T10868] netlink: 'syz.4.1265': attribute type 30 has an invalid length. [ 231.428260][T10868] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 231.520260][T10847] lo speed is unknown, defaulting to 1000 [ 232.209330][T10907] netlink: 'syz.4.1274': attribute type 9 has an invalid length. [ 232.226695][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1274'. [ 232.241817][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1274'. [ 232.459733][T10912] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1275'. [ 232.491453][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1275'. [ 232.531287][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 232.556044][T10917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.568366][T10917] FAULT_INJECTION: forcing a failure. [ 232.568366][T10917] name failslab, interval 1, probability 0, space 0, times 0 [ 232.582793][T10917] CPU: 0 UID: 0 PID: 10917 Comm: syz.3.1277 Not tainted syzkaller #0 PREEMPT(full) [ 232.582818][T10917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 232.582829][T10917] Call Trace: [ 232.582837][T10917] [ 232.582845][T10917] dump_stack_lvl+0xe8/0x150 [ 232.582878][T10917] should_fail_ex+0x40c/0x560 [ 232.582905][T10917] should_failslab+0xa8/0x100 [ 232.582935][T10917] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 232.582957][T10917] ? local_lock_release+0x9c/0x160 [ 232.582984][T10917] ? __alloc_skb+0x1d7/0x7a0 [ 232.583007][T10917] ? __alloc_skb+0x1d7/0x7a0 [ 232.583038][T10917] __alloc_skb+0x1d7/0x7a0 [ 232.583065][T10917] netlink_ack+0x136/0xb30 [ 232.583088][T10917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.583136][T10917] netlink_rcv_skb+0x2a4/0x4a0 [ 232.583164][T10917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.583185][T10917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.583226][T10917] ? down_read+0x2be/0x330 [ 232.583245][T10917] genl_rcv+0x28/0x40 [ 232.583261][T10917] netlink_unicast+0x7bb/0x940 [ 232.583297][T10917] netlink_sendmsg+0x813/0xb40 [ 232.583319][T10917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.583337][T10917] ? aa_sock_msg_perm+0xf1/0x1b0 [ 232.583362][T10917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.583376][T10917] sock_sendmsg_nosec+0x13a/0x180 [ 232.583396][T10917] ____sys_sendmsg+0x54e/0x850 [ 232.583426][T10917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.583456][T10917] ? import_iovec+0x73/0xa0 [ 232.583483][T10917] ___sys_sendmsg+0x2a5/0x360 [ 232.583522][T10917] ? __lock_acquire+0x683/0x2cf0 [ 232.583547][T10917] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.583597][T10917] ? __fget_files+0x2a/0x420 [ 232.583621][T10917] ? __fget_files+0x3a2/0x420 [ 232.583647][T10917] __x64_sys_sendmsg+0x1b1/0x290 [ 232.583672][T10917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.583709][T10917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.583731][T10917] do_syscall_64+0x174/0x580 [ 232.583751][T10917] ? trace_irq_disable+0x3b/0x140 [ 232.583770][T10917] ? clear_bhb_loop+0x40/0x90 [ 232.583789][T10917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.583804][T10917] RIP: 0033:0x7f90bed9de59 [ 232.583818][T10917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.583832][T10917] RSP: 002b:00007f90bfb91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.583849][T10917] RAX: ffffffffffffffda RBX: 00007f90bf025fa0 RCX: 00007f90bed9de59 [ 232.583860][T10917] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 232.583870][T10917] RBP: 00007f90bfb91090 R08: 0000000000000000 R09: 0000000000000000 [ 232.583879][T10917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.583888][T10917] R13: 00007f90bf026038 R14: 00007f90bf025fa0 R15: 00007ffdbf0a0728 [ 232.583912][T10917] [ 232.959399][T10926] netlink: zone id is out of range [ 232.987883][T10926] netlink: zone id is out of range [ 233.013653][T10926] netlink: zone id is out of range [ 233.020408][T10926] netlink: zone id is out of range [ 233.027695][T10926] netlink: zone id is out of range [ 233.035037][T10926] netlink: zone id is out of range [ 233.438473][T10949] wlan0 speed is unknown, defaulting to 1000 [ 233.511756][T10949] lo speed is unknown, defaulting to 1000 [ 233.537346][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 234.069075][T10949] vlan3: entered promiscuous mode [ 234.076025][T10949] gretap0: entered promiscuous mode [ 234.262799][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.347538][T10976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 234.800677][T11000] netlink: 'syz.0.1298': attribute type 1 has an invalid length. [ 235.453934][T11031] syzkaller0: entered promiscuous mode [ 235.461166][T11031] syzkaller0: entered allmulticast mode [ 235.501046][T11033] lo: Caught tx_queue_len zero misconfig [ 235.532272][T11031] tipc: Enabled bearer , priority 0 [ 235.648085][T11031] tipc: Resetting bearer [ 235.770577][T11029] tipc: Resetting bearer [ 235.798120][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1311'. [ 235.808367][T11029] tipc: Disabling bearer [ 236.011134][T11052] wlan0 speed is unknown, defaulting to 1000 [ 236.013699][T11066] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 236.043668][T11052] lo speed is unknown, defaulting to 1000 [ 236.148906][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'. [ 236.173466][T11070] tipc: Enabling of bearer rejected, failed to enable media [ 236.218066][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'. [ 236.248345][T11072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.457711][T11072] bond4 (unregistering): Released all slaves [ 237.134172][T11122] netlink: 'syz.4.1331': attribute type 1 has an invalid length. [ 237.203985][T11125] netlink: 'syz.2.1332': attribute type 13 has an invalid length. [ 237.237519][T11125] __nla_validate_parse: 2 callbacks suppressed [ 237.237539][T11125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1332'. [ 237.402150][T11127] vlan2: entered allmulticast mode [ 237.423268][T11127] bond0: entered allmulticast mode [ 237.433122][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 237.442793][T11129] ip6tnl0: Caught tx_queue_len zero misconfig [ 238.265844][T11158] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 238.395823][T11164] Cannot find set identified by id 0 to match [ 238.424541][T11164] netlink: 'syz.4.1345': attribute type 21 has an invalid length. [ 238.454691][T11164] netlink: 'syz.4.1345': attribute type 5 has an invalid length. [ 238.473305][T11164] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1345'. [ 238.746602][T11166] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 238.888404][T11166] bond8: (slave bridge4): making interface the new active one [ 238.935788][T11166] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 239.028387][T11188] wlan0 speed is unknown, defaulting to 1000 [ 239.059477][T11188] lo speed is unknown, defaulting to 1000 [ 239.303491][T11208] netlink: 'syz.3.1358': attribute type 1 has an invalid length. [ 239.634640][T11217] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 239.687611][T11223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1361'. [ 239.694234][T11219] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1362'. [ 239.726509][T11223] bond9: (slave bridge5): making interface the new active one [ 239.735831][T11223] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 239.747271][T11225] syzkaller0: entered promiscuous mode [ 239.749666][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'. [ 239.762974][T11225] syzkaller0: entered allmulticast mode [ 239.802856][T11217] bond9: entered promiscuous mode [ 239.817497][T11217] bridge5: entered promiscuous mode [ 239.825766][T11217] bond9: entered allmulticast mode [ 239.831038][T11217] bridge5: entered allmulticast mode [ 239.838636][T11217] 8021q: adding VLAN 0 to HW filter on device bond9 [ 239.896879][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 239.926759][ T6055] bond9: (slave bridge5): link status definitely down, disabling slave [ 239.966959][ T6055] bridge5: left promiscuous mode [ 239.992982][ T6055] bridge5: left allmulticast mode [ 240.022971][ T6055] bond9: now running without any active interface! [ 240.068095][T11240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1368'. [ 240.173454][T11245] netlink: 'syz.1.1369': attribute type 2 has an invalid length. [ 240.206841][T11249] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 240.370587][T11258] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1373'. [ 240.445667][T11260] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1374'. [ 240.548509][T11269] openvswitch: netlink: Message has 141 unknown bytes. [ 241.458570][T11294] openvswitch: netlink: IPv4 tun info is not correct [ 241.714758][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.756073][T11309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.955534][T11321] xt_hashlimit: size too large, truncated to 1048576 [ 242.476989][T11342] bond4: Removing last arp target with arp_interval on [ 242.540650][T11345] __nla_validate_parse: 8 callbacks suppressed [ 242.540668][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 242.578143][T11345] validate_nla: 3 callbacks suppressed [ 242.578163][T11345] netlink: 'syz.2.1398': attribute type 26 has an invalid length. [ 242.597183][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'. [ 242.607891][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 242.637115][T11345] netlink: 'syz.2.1398': attribute type 26 has an invalid length. [ 242.652318][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'. [ 242.749514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.760082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.769040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.777944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.913531][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.222184][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.501978][T11391] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 244.583981][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1404'. [ 244.721662][T11391] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 244.778300][T11400] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1405'. [ 244.803893][T11396] tap0: tun_chr_ioctl cmd 1074025672 [ 244.809717][T11396] tap0: ignored: set checksum disabled [ 245.384311][T11405] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.767870][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 245.779194][T11408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1407'. [ 245.791583][T11408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1407'. [ 246.121200][ T6288] net_ratelimit: 4 callbacks suppressed [ 246.121218][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.291233][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.376693][T11427] xt_hashlimit: size too large, truncated to 1048576 [ 246.422492][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 246.470204][T11429] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1412'. [ 247.159268][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.462388][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.654790][T11439] vlan2: entered promiscuous mode [ 247.685301][T11439] bridge0: entered promiscuous mode [ 247.998507][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 248.201325][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.656967][ T30] audit: type=1804 audit(1784241523.287:9): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1423" name="/newroot/312/cgroup.controllers" dev="tmpfs" ino=1612 res=1 errno=0 [ 248.782498][ T30] audit: type=1800 audit(1784241523.287:10): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1423" name="cgroup.controllers" dev="tmpfs" ino=1612 res=0 errno=0 [ 248.983073][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.247363][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.346197][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.141679][T11492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1429'. [ 250.265086][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.350722][T11501] netlink: 'syz.0.1433': attribute type 1 has an invalid length. [ 250.459610][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.727424][T11498] syzkaller1: entered promiscuous mode [ 250.734330][T11498] syzkaller1: entered allmulticast mode [ 251.113405][T11516] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001 [ 251.123135][T11516] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20004 [ 251.463260][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.376725][T11540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1443'. [ 252.434785][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.434791][T11541] netlink: 'syz.3.1443': attribute type 3 has an invalid length. [ 252.502565][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.514694][T11549] tipc: Started in network mode [ 253.531605][T11549] tipc: Node identity , cluster identity 4711 [ 253.547535][T11549] tipc: Failed to obtain node identity [ 253.560468][T11549] tipc: Enabling of bearer rejected, failed to enable media [ 253.578918][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.029735][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'. [ 254.040360][T11560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.109695][T11562] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 254.122635][T11562] bridge7: entered allmulticast mode [ 254.187784][T11565] netlink: 'syz.1.1450': attribute type 1 has an invalid length. [ 254.264368][T11567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1451'. [ 254.273920][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 254.582633][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.742783][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.157349][T11578] dummy0: left promiscuous mode [ 255.209784][T11578] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 255.327997][T11580] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 255.336062][ T6297] bridge_slave_0: entered promiscuous mode [ 255.549135][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.628983][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.704913][T11590] x_tables: duplicate underflow at hook 2 [ 255.792967][T11593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 256.143622][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 256.681161][ T6287] net_ratelimit: 1 callbacks suppressed [ 256.681180][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.489002][T11613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1465'. [ 257.657399][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 257.722851][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.667828][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.742573][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.470030][T11636] netlink: 'syz.2.1472': attribute type 3 has an invalid length. [ 259.479285][T11636] netlink: 'syz.2.1472': attribute type 1 has an invalid length. [ 259.487778][T11636] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1472'. [ 259.498619][T11636] NCSI netlink: No device for ifindex 0 [ 259.653362][T11640] tipc: Resetting bearer [ 259.674086][ T6287] lo speed is unknown, defaulting to 1000 [ 259.820227][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.378653][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 260.396653][T11664] IPVS: dh: FWM 3 0x00000003 - no destination available [ 260.401545][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 260.413766][T11665] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1479'. [ 260.420351][T11664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.430857][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 260.455627][T11665] geneve3: entered promiscuous mode [ 260.465552][T11665] geneve3: entered allmulticast mode [ 260.502730][ T9462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.533701][T11670] openvswitch: netlink: Missing valid actions attribute. [ 260.552388][T11670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.632468][T11667] tap0: tun_chr_ioctl cmd 2147767507 [ 260.669896][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1481'. [ 260.751483][T11688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1485'. [ 260.799119][T11667] veth3: entered allmulticast mode [ 260.830186][T11667] bond6: (slave veth3): Enslaving as an active interface with an up link [ 261.029992][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 261.252003][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 261.274826][T11706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 261.371622][T11707] bond4: (slave batadv0): Releasing active interface [ 261.527278][T11722] netlink: 'syz.3.1493': attribute type 58 has an invalid length. [ 261.604976][ T5624] block nbd1: Receive control failed (result -32) [ 261.715679][ T6314] net_ratelimit: 241 callbacks suppressed [ 261.715698][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.841810][T11699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.918117][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.942427][T11699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.977766][T11699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.269186][T11735] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 262.504721][T11731] wlan0 speed is unknown, defaulting to 1000 [ 262.596014][T11731] lo speed is unknown, defaulting to 1000 [ 263.009226][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.947048][T11752] wlan0 speed is unknown, defaulting to 1000 [ 264.023352][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.093631][T11752] lo speed is unknown, defaulting to 1000 [ 264.399383][T11780] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 264.694036][T11789] netlink: 'syz.3.1508': attribute type 1 has an invalid length. [ 264.738130][T11780] bond10: option mode: invalid value (8) [ 264.794951][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.837964][T11780] bond10 (unregistering): Released all slaves [ 264.893377][T11794] __nla_validate_parse: 4 callbacks suppressed [ 264.893396][T11794] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1510'. [ 264.935424][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'. [ 264.965966][T11794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1510'. [ 265.064141][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.259923][T11789] 8021q: adding VLAN 0 to HW filter on device bond7 [ 265.285790][T11792] vlan0: Caught tx_queue_len zero misconfig [ 265.395646][T11804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1511'. [ 265.414033][T11801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1511'. [ 265.429832][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 265.483743][T11801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1511'. [ 265.703650][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 265.752391][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 266.227317][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.246551][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 266.270029][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.754721][T11840] FAULT_INJECTION: forcing a failure. [ 266.754721][T11840] name failslab, interval 1, probability 0, space 0, times 0 [ 266.851279][T11840] CPU: 1 UID: 0 PID: 11840 Comm: syz.0.1521 Not tainted syzkaller #0 PREEMPT(full) [ 266.851306][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 266.851330][T11840] Call Trace: [ 266.851338][T11840] [ 266.851346][T11840] dump_stack_lvl+0xe8/0x150 [ 266.851380][T11840] should_fail_ex+0x40c/0x560 [ 266.851406][T11840] should_failslab+0xa8/0x100 [ 266.851434][T11840] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 266.851457][T11840] ? local_lock_release+0x9c/0x160 [ 266.851483][T11840] ? __alloc_skb+0x1d7/0x7a0 [ 266.851506][T11840] ? __alloc_skb+0x1d7/0x7a0 [ 266.851537][T11840] __alloc_skb+0x1d7/0x7a0 [ 266.851566][T11840] netlink_ack+0x136/0xb30 [ 266.851593][T11840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 266.851616][T11840] ? ref_tracker_free+0x689/0x830 [ 266.851645][T11840] ? __pfx_ref_tracker_free+0x10/0x10 [ 266.851677][T11840] netlink_rcv_skb+0x2a4/0x4a0 [ 266.851714][T11840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 266.851741][T11840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.851782][T11840] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.851800][T11840] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.851824][T11840] netlink_unicast+0x7bb/0x940 [ 266.851861][T11840] netlink_sendmsg+0x813/0xb40 [ 266.851889][T11840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.851913][T11840] ? aa_sock_msg_perm+0xf1/0x1b0 [ 266.851937][T11840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.851955][T11840] sock_sendmsg_nosec+0x13a/0x180 [ 266.851979][T11840] ____sys_sendmsg+0x54e/0x850 [ 266.852013][T11840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.852044][T11840] ? import_iovec+0x73/0xa0 [ 266.852074][T11840] ___sys_sendmsg+0x2a5/0x360 [ 266.852101][T11840] ? __lock_acquire+0x683/0x2cf0 [ 266.852131][T11840] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.852191][T11840] ? __fget_files+0x2a/0x420 [ 266.852215][T11840] ? __fget_files+0x3a2/0x420 [ 266.852249][T11840] __x64_sys_sendmsg+0x1b1/0x290 [ 266.852280][T11840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.852325][T11840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.852347][T11840] do_syscall_64+0x174/0x580 [ 266.852372][T11840] ? trace_irq_disable+0x3b/0x140 [ 266.852396][T11840] ? clear_bhb_loop+0x40/0x90 [ 266.852419][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.852438][T11840] RIP: 0033:0x7fd0de19de59 [ 266.852466][T11840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.852483][T11840] RSP: 002b:00007fd0df0cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.852503][T11840] RAX: ffffffffffffffda RBX: 00007fd0de425fa0 RCX: 00007fd0de19de59 [ 266.852517][T11840] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 266.852529][T11840] RBP: 00007fd0df0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 266.852541][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.852552][T11840] R13: 00007fd0de426038 R14: 00007fd0de425fa0 R15: 00007ffc97858538 [ 266.852582][T11840] [ 267.420448][ T6287] net_ratelimit: 1 callbacks suppressed [ 267.420469][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.828854][T11853] tipc: Enabled bearer , priority 0 [ 267.893245][T11839] tipc: Disabling bearer [ 267.963649][ T6316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.437879][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.969663][T11875] sit0: entered promiscuous mode [ 269.618928][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.640887][T11900] syzkaller0: entered promiscuous mode [ 269.670558][T11900] syzkaller0: entered allmulticast mode [ 269.906444][ T5624] block nbd2: Receive control failed (result -32) [ 269.925285][ T5624] block nbd2: Receive control failed (result -32) [ 269.932615][ T5624] block nbd2: Receive control failed (result -32) [ 270.443350][T11909] __nla_validate_parse: 9 callbacks suppressed [ 270.443380][T11909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1538'. [ 270.662776][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.756261][T11911] tipc: Started in network mode [ 270.787144][T11911] tipc: Node identity , cluster identity 4711 [ 270.815624][T11911] tipc: Failed to obtain node identity [ 270.868348][T11911] tipc: Enabling of bearer rejected, failed to enable media [ 271.044012][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.320349][ T6060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.702552][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.823166][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.159192][T11955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1549'. [ 273.941953][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.137524][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 274.151951][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.208442][T11991] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1554'. [ 274.406491][T11991] geneve2: entered promiscuous mode [ 274.501696][T11991] geneve2: entered allmulticast mode [ 274.514853][T11996] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1556'. [ 274.565999][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 274.580875][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.621091][T11996] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1556'. [ 274.633997][T11991] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1554'. [ 274.634583][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.634626][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.634662][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.635709][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 274.635739][T11991] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1554'. [ 274.773406][T11996] netlink: 'syz.4.1556': attribute type 5 has an invalid length. [ 274.956462][T11996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.020371][T12008] netlink: 'syz.2.1561': attribute type 3 has an invalid length. [ 275.042787][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.116396][T12008] netlink: 'syz.2.1561': attribute type 3 has an invalid length. [ 276.148690][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.507660][ T1180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.754460][T12050] __nla_validate_parse: 62 callbacks suppressed [ 276.754479][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 277.195343][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.233613][ T6316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.468049][T12065] ksmbd: Unknown IPC event: 1, ignore. [ 277.560152][T12065] xt_ecn: cannot match TCP bits for non-tcp packets [ 278.306148][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.095159][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 279.339997][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.403826][T12105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.454242][T12105] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.581053][T12105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.096320][T12113] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 280.344555][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.461320][T12105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.504255][T12105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.508548][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.603030][T12105] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 281.542550][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.125855][T12130] tipc: Enabled bearer , priority 0 [ 282.273035][ T6060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.466398][T12131] syzkaller0: entered promiscuous mode [ 282.501381][T12131] syzkaller0: entered allmulticast mode [ 282.610760][T12149] xt_hashlimit: size too large, truncated to 1048576 [ 282.697627][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.732772][T12153] netlink: 'syz.3.1592': attribute type 11 has an invalid length. [ 282.860445][T12128] tipc: Resetting bearer [ 282.871945][T12153] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1592'. [ 282.905327][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.919198][T12154] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1592'. [ 283.403484][ T6316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.751503][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.828368][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.854755][T12193] xt_TCPMSS: Only works on TCP SYN packets [ 285.879241][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'. [ 285.888527][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.443860][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.951619][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.027467][ T1180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.036447][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.081607][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.492862][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.115498][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.667891][T12128] tipc: Disabling bearer [ 290.699828][T12152] bridge_slave_0 (unregistering): left allmulticast mode [ 290.707648][T12152] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.841776][ T6288] tipc: Node number set to 470483072 [ 290.925106][T12194] vlan3: entered promiscuous mode [ 290.945878][T12194] syz_tun: entered promiscuous mode [ 291.145134][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.667232][T12214] netlink: 'syz.3.1601': attribute type 1 has an invalid length. [ 292.111452][T12222] netlink: 'syz.4.1603': attribute type 11 has an invalid length. [ 292.157515][T12222] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1603'. [ 292.193010][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.818271][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.879521][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1606'. [ 292.938522][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1606'. [ 293.081074][T12239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1606'. [ 293.176785][T12239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1606'. [ 293.235998][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.338610][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 293.447205][T12248] geneve2: entered promiscuous mode [ 293.561226][T12239] syz_tun: entered promiscuous mode [ 293.616398][T12239] syz_tun: left promiscuous mode [ 293.704906][ T9462] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.753580][ T9462] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.803047][ T9462] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.865717][ T9462] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.167825][T12268] netlink: 'syz.1.1615': attribute type 1 has an invalid length. [ 294.178476][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'. [ 294.234371][T12267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1614'. [ 294.293138][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.549068][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.908019][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.913860][T12306] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1624'. [ 296.013375][T12307] geneve1: entered promiscuous mode [ 296.490126][T12324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'. [ 296.604239][T12324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.019660][T12334] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 297.298150][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.572905][T12348] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1633'. [ 297.624837][ T6062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.839753][T12351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1634'. [ 297.886414][T12355] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 297.955916][T12363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1635'. [ 297.986588][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'. [ 298.135563][T12363] tipc: Enabling of bearer rejected, already enabled [ 298.344066][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.409478][T12375] IPv4: Oversized IP packet from 127.202.26.0 [ 298.486076][T12374] IPv4: Oversized IP packet from 127.202.26.0 [ 298.602913][T12381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.081329][T12396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1648'. [ 299.376945][T12408] netlink: 'syz.0.1651': attribute type 1 has an invalid length. [ 299.394448][ T6287] net_ratelimit: 1 callbacks suppressed [ 299.394469][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.568572][T12410] tipc: Enabling of bearer rejected, already enabled [ 299.665443][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 300.210596][T12434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.422551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.432843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.475887][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.527358][T12433] vlan3: entered promiscuous mode [ 300.661738][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1663'. [ 300.833536][T12443] IPVS: length: 24 != 448536 [ 300.885449][T12445] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1664'. [ 301.202629][T12449] wlan0 speed is unknown, defaulting to 1000 [ 301.211165][T12449] lo speed is unknown, defaulting to 1000 [ 301.542407][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.636173][T12468] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1668'. [ 301.708834][T12471] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 301.779755][T12468] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 302.229478][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.245507][T12486] netlink: 'syz.2.1672': attribute type 1 has an invalid length. [ 302.582352][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.594996][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 302.638204][T12494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1673'. [ 302.689351][T12487] erspan0: left allmulticast mode [ 302.700074][T12487] erspan0: left promiscuous mode [ 302.713218][T12487] bridge1: port 1(erspan0) entered disabled state [ 302.749142][T12496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1673'. [ 302.799888][T12487] syz_tun: left allmulticast mode [ 302.805899][T12487] syz_tun: left promiscuous mode [ 302.816297][T12487] bridge0: port 3(syz_tun) entered disabled state [ 302.863782][T12487] bridge_slave_0: left allmulticast mode [ 302.874280][T12487] bridge_slave_0: left promiscuous mode [ 302.897624][T12487] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.957730][T12487] bond0: (slave bond_slave_0): Releasing backup interface [ 302.996553][T12487] team0: Port device team_slave_0 removed [ 303.016421][T12487] team0: Port device team_slave_1 removed [ 303.030898][T12487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.074035][T12487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.111167][T12487] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 303.376404][T12503] vti0: entered promiscuous mode [ 303.388939][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.408206][T12503] vti0: entered allmulticast mode [ 303.915970][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1680'. [ 304.499136][T12530] netlink: 'syz.4.1684': attribute type 1 has an invalid length. [ 304.665592][ T6287] net_ratelimit: 1 callbacks suppressed [ 304.665614][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.766197][T12474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.273718][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.357216][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 305.378505][T12554] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1690'. [ 305.459990][T12554] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1690'. [ 305.566135][T12553] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 305.589430][T12553] bond4 (unregistering): Released all slaves [ 305.699877][T12565] tipc: Enabling of bearer rejected, already enabled [ 305.754749][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.024734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.036855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.115908][T12580] netlink: 'syz.0.1695': attribute type 1 has an invalid length. [ 306.348657][T12583] sctp: [Deprecated]: syz.4.1696 (pid 12583) Use of int in max_burst socket option. [ 306.348657][T12583] Use struct sctp_assoc_value instead [ 306.841904][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.142445][T12608] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1701'. [ 307.875453][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.449679][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.764561][T12647] netlink: 'syz.2.1709': attribute type 1 has an invalid length. [ 308.788673][T12648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1710'. [ 308.902367][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.997585][T12648] bond5: Unable to set down delay as MII monitoring is disabled [ 309.029788][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'. [ 309.031572][T12648] bond5 (unregistering): Released all slaves [ 309.059785][T12659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.177547][T12656] netlink: 'syz.0.1710': attribute type 4 has an invalid length. [ 309.737391][T12664] syzkaller0: entered promiscuous mode [ 309.767231][T12682] netlink: 'syz.1.1717': attribute type 49 has an invalid length. [ 309.779924][T12664] syzkaller0: entered allmulticast mode [ 309.790607][T12685] x_tables: duplicate underflow at hook 1 [ 310.094828][T12694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1719'. [ 310.141213][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1719'. [ 310.914335][ T6287] net_ratelimit: 1 callbacks suppressed [ 310.914352][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.478447][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.011515][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.194590][ T6060] wlan1: Trigger new scan to find an IBSS to join [ 313.096153][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.130216][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.527315][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.910512][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.137520][T12713] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 315.159495][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.244433][ T36] wlan1: Trigger new scan to find an IBSS to join [ 315.381042][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1724'. [ 315.459733][T12720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.183505][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.358384][T12743] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 316.402376][T12743] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1730'. [ 317.250373][T12761] bond6 (unregistering): Released all slaves [ 317.269978][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.563470][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.889565][T12784] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 318.150348][T12787] x_tables: duplicate underflow at hook 1 [ 318.183567][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.265326][T12770] syzkaller1: entered promiscuous mode [ 318.306569][T12770] syzkaller1: entered allmulticast mode [ 318.360063][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.405351][T12791] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1739'. [ 318.477008][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1741'. [ 318.589139][T12801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.106375][T12815] netlink: 'syz.2.1747': attribute type 1 has an invalid length. [ 319.382986][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.431180][T12811] syzkaller0: entered promiscuous mode [ 319.460885][T12811] syzkaller0: entered allmulticast mode [ 319.499561][T12809] tipc: Enabled bearer , priority 0 [ 319.588924][T12808] tipc: Disabling bearer [ 320.300472][T12853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.491572][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.607460][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.664440][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.827089][T12864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1755'. [ 321.048315][T12868] netlink: 'syz.4.1758': attribute type 1 has an invalid length. [ 321.154686][T12868] 8021q: adding VLAN 0 to HW filter on device bond4 [ 321.294752][T12868] bond4: (slave gretap1): making interface the new active one [ 321.363042][T12868] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 321.435503][T12882] tipc: Enabling of bearer rejected, already enabled [ 321.554537][ T6287] net_ratelimit: 1 callbacks suppressed [ 321.554555][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.708519][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1763'. [ 322.583549][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.756362][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1770'. [ 322.823909][T12912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.005121][T12916] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 323.635773][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.701297][T12939] IPVS: Error connecting to the multicast addr [ 323.761824][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.544583][T12961] bridge5: entered allmulticast mode [ 324.679294][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.770118][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1784'. [ 324.821953][T12974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.061207][T12981] xt_hashlimit: size too large, truncated to 1048576 [ 325.133102][T12983] netlink: 'syz.3.1787': attribute type 11 has an invalid length. [ 325.263665][T12990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1789'. [ 325.287459][T12983] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1787'. [ 325.300619][T12985] openvswitch: netlink: Key 2 has unexpected len 5 expected 4 [ 325.538352][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1788'. [ 325.651014][T13003] batadv_slave_0: Caught tx_queue_len zero misconfig [ 325.702450][ T6288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.835944][T12996] wlan0 speed is unknown, defaulting to 1000 [ 325.846080][T13002] syzkaller0: entered promiscuous mode [ 325.881209][T13002] syzkaller0: entered allmulticast mode [ 325.951616][T12996] lo speed is unknown, defaulting to 1000 [ 325.977430][T13002] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 326.467331][ T6060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.662810][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.794320][ T6295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.797894][T13037] x_tables: duplicate underflow at hook 2 [ 327.875005][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.901111][T13033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1798'. [ 327.945455][T13033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1798'. [ 328.447807][T13047] netlink: 'syz.1.1801': attribute type 1 has an invalid length. [ 328.565552][T13048] vlan4: entered allmulticast mode [ 328.868419][T13048] bond0: entered allmulticast mode [ 328.902395][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.933802][T13051] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1800'. [ 329.017162][T13048] bond_slave_1: entered allmulticast mode [ 329.077231][T13048] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 329.441749][T13073] netlink: 'syz.3.1808': attribute type 2 has an invalid length. [ 329.470196][T13073] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1808'. [ 329.522436][T13051] bond0 (unregistering): left promiscuous mode [ 329.560985][T13051] bond_slave_1: left promiscuous mode [ 329.590055][T13051] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 329.668907][T13051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.778526][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.794115][T13051] bond_slave_1: left allmulticast mode [ 329.942878][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.437049][T13051] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 330.988174][T13051] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 330.995579][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.011006][T13051] bond0 (unregistering): Released all slaves [ 331.133613][T13080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.023095][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.134296][T13113] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1817'. [ 332.184533][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.195116][T13113] Bluetooth: MGMT ver 1.23 [ 332.556090][T13121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.806210][T13128] netlink: 'syz.4.1820': attribute type 1 has an invalid length. [ 332.820944][T13128] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1820'. [ 332.918881][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.919969][T13133] netlink: 'syz.0.1821': attribute type 1 has an invalid length. [ 332.983268][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 333.062645][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.207590][T13138] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1823'. [ 333.337134][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1824'. [ 333.625564][T13148] syzkaller1: entered promiscuous mode [ 333.657978][T13148] syzkaller1: entered allmulticast mode [ 334.127483][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.832634][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1833'. [ 334.980484][T13188] netlink: 'syz.4.1835': attribute type 2 has an invalid length. [ 335.142896][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.197685][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1836'. [ 335.265230][T13193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.594030][T13196] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1834'. [ 335.625891][T13196] netlink: 'syz.3.1834': attribute type 1 has an invalid length. [ 335.814620][T13204] netlink: 'syz.0.1839': attribute type 1 has an invalid length. [ 335.952874][T13209] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 335.974387][T13209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1840'. [ 336.003089][T13204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.049338][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 336.071311][T13211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.091252][T13211] bond0: (slave batadv0): making interface the new active one [ 336.100831][T13211] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 336.183044][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.198505][T13210] bond0: (slave veth3): Enslaving as an active interface with a down link [ 336.279304][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.417731][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'. [ 336.778619][T13237] xt_hashlimit: size too large, truncated to 1048576 [ 337.109721][T13211] bond0 (unregistering): (slave batadv0): Releasing active interface [ 337.157241][T13211] bond0 (unregistering): (slave veth3): Releasing active interface [ 337.195075][T13211] bond0 (unregistering): Released all slaves [ 337.232985][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.306249][ T1074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.770295][T13257] xt_connbytes: Forcing CT accounting to be enabled [ 337.922374][T13257] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 338.262570][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.529122][T13280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.565981][T13280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.628426][T13280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.704353][T13284] tunl0: Caught tx_queue_len zero misconfig [ 339.009606][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1858'. [ 339.041036][T13291] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 339.317954][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.351029][T13303] team0: left allmulticast mode [ 339.368052][ T6314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.411423][T13303] team_slave_0: left allmulticast mode [ 339.451840][T13303] team_slave_1: left allmulticast mode [ 339.481654][T13306] netlink: 'syz.0.1860': attribute type 1 has an invalid length. [ 339.503361][T13303] team0: left promiscuous mode [ 339.539344][T13303] team_slave_0: left promiscuous mode [ 339.573560][T13309] netlink: 'syz.3.1859': attribute type 3 has an invalid length. [ 339.590509][T13303] team_slave_1: left promiscuous mode [ 339.628493][T13303] bridge0: port 3(team0) entered disabled state [ 339.677335][T13303] bridge_slave_1: left allmulticast mode [ 339.698806][T13303] bridge_slave_1: left promiscuous mode [ 339.719475][T13303] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.786511][T13303] bond0: (slave bond_slave_0): Releasing backup interface [ 339.851342][T13303] bond0: (slave bond_slave_1): Releasing backup interface [ 339.909552][T13303] team0: Port device team_slave_0 removed [ 339.959778][T13303] team0: Port device team_slave_1 removed [ 339.999216][T13303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.035639][T13303] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 340.387977][T13306] bond0: entered promiscuous mode [ 340.416582][T13306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.439368][T13310] ipvlan4: entered allmulticast mode [ 340.449378][T13310] bond0: entered allmulticast mode [ 340.478605][T13313] ipvlan5: entered allmulticast mode [ 340.558687][T13321] bond0: (slave bridge3): making interface the new active one [ 340.579675][T13321] bridge3: entered promiscuous mode [ 340.600690][T13321] bridge3: entered allmulticast mode [ 340.618035][T13321] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 340.828267][T13345] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1869'. [ 341.036899][T13344] veth0_macvtap: left promiscuous mode [ 341.049500][T13344] veth0_macvtap: entered promiscuous mode [ 341.151232][T13349] netlink: 'syz.3.1871': attribute type 1 has an invalid length. [ 341.321864][T13352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1872'. [ 341.543192][T13359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1874'. [ 341.676051][ T9463] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.701115][ T9463] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.758042][ T6289] wlan0 speed is unknown, defaulting to 1000 [ 341.848832][ T9463] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.900181][ T9463] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.433526][ T6295] net_ratelimit: 4 callbacks suppressed [ 342.433635][ T6295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.515178][T13383] syzkaller0: entered promiscuous mode [ 342.543605][T13383] syzkaller0: entered allmulticast mode [ 342.859317][T13392] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1882'. [ 342.927538][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1882'. [ 342.968453][T13398] IPVS: dh: FWM 3 0x00000003 - no destination available [ 343.065953][ T1180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.768240][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.797436][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.845446][T13436] netlink: 'syz.1.1891': attribute type 1 has an invalid length. [ 344.984649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.994918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.003563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.013767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.022814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.143091][ T6060] wlan1: Trigger new scan to find an IBSS to join [ 345.327391][T13458] syzkaller0: entered promiscuous mode [ 345.338964][T13458] syzkaller0: entered allmulticast mode [ 345.910421][T13491] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1908'. [ 345.977021][T13491] unsupported nlmsg_type 40 [ 346.077027][T13498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1910'. [ 346.117527][T13498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1910'. [ 346.238222][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 346.430187][T13507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1913'. [ 346.656125][T13511] syzkaller0: entered promiscuous mode [ 346.672211][T13511] syzkaller0: entered allmulticast mode [ 347.138242][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 347.237812][T13528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1921'. [ 347.541688][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1925'. [ 347.784355][ T6315] net_ratelimit: 8 callbacks suppressed [ 347.784374][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.788546][T13550] ipip1: entered promiscuous mode [ 347.822910][T13550] ipip1: entered allmulticast mode [ 348.022761][ T6295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.041117][T13555] veth1_to_bond: entered allmulticast mode [ 348.050970][T13555] veth1_to_bond: entered promiscuous mode [ 348.074175][T13554] veth1_to_bond: left promiscuous mode [ 348.083573][T13554] veth1_to_bond: left allmulticast mode [ 348.182260][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.183043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.200426][ T6051] wlan1: Trigger new scan to find an IBSS to join [ 348.208067][ T9463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.449955][T13563] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1932'. [ 349.062433][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.226303][T13573] sit0: entered promiscuous mode [ 349.261770][T13573] netlink: 'syz.4.1935': attribute type 1 has an invalid length. [ 349.278264][T13573] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1935'. [ 349.309234][T13569] syzkaller0: entered promiscuous mode [ 349.315195][T13569] syzkaller0: entered allmulticast mode [ 349.586271][T13586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.104997][ T6295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.541775][T13610] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 350.743048][ T9463] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.823568][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.144450][ T6295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.233267][ T1074] wlan1: Trigger new scan to find an IBSS to join [ 351.817722][T13649] __nla_validate_parse: 7 callbacks suppressed [ 351.817770][T13649] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1955'. [ 352.102435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.141682][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.234532][ T6295] net_ratelimit: 1 callbacks suppressed [ 353.234550][ T6295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.315691][ T6053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.884030][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.265858][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.296742][T13665] netlink: 'syz.1.1961': attribute type 13 has an invalid length. [ 355.305534][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.325783][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'. [ 355.378893][T13663] netlink: 'syz.0.1959': attribute type 1 has an invalid length. [ 355.483632][T13663] bond6: option mode: invalid value (48) [ 355.527417][T13663] bond6 (unregistering): Released all slaves [ 355.822946][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 355.833562][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 355.881756][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1958'. [ 356.062660][T13699] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1967'. [ 356.332947][T13716] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1970'. [ 356.344423][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.376772][T13714] veth7: entered promiscuous mode [ 356.382907][T13714] veth7: entered allmulticast mode [ 356.396987][T13714] team0: Device veth7 is up. Set it down before adding it as a team port [ 356.668628][T13729] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1974'. [ 356.767059][T13736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1975'. [ 356.788091][T13735] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1976'. [ 356.901421][T13736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1975'. [ 356.932572][T13738] mac80211_hwsim hwsim8 wlan0: Caught tx_queue_len zero misconfig [ 356.942763][ T6282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.382593][ T6295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.477889][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'. [ 357.497214][T13765] lo: entered allmulticast mode [ 357.539392][T13765] dvmrp8: entered allmulticast mode [ 357.570349][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1986'. [ 357.635809][T13768] netlink: 'syz.2.1987': attribute type 1 has an invalid length. [ 357.655930][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'. [ 357.743767][T13777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1988'. [ 357.787850][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1989'. [ 357.815171][T13765] syzkaller0: entered promiscuous mode [ 357.835473][T13765] syzkaller0: entered allmulticast mode [ 357.852999][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1990'. [ 357.896618][T13777] ip6gre2: entered promiscuous mode [ 357.912188][T13777] ip6gre2: entered allmulticast mode [ 358.054849][T13783] bond11: entered promiscuous mode [ 358.094003][T13783] bond11: entered allmulticast mode [ 358.434459][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.062495][ T6060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.467628][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.027593][ T6315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.503541][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.095031][T13778] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 361.209669][T13761] lo: left allmulticast mode [ 361.303032][T13806] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 361.326765][T13808] IPv6: sit3: Disabled Multicast RS [ 361.436492][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1999'. [ 361.457557][T13819] netlink: 'syz.1.1996': attribute type 1 has an invalid length. [ 361.468415][T13818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.498414][T13819] netlink: 'syz.1.1996': attribute type 2 has an invalid length. [ 361.522262][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2000'. [ 361.542501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.556801][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.582526][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2000'. [ 361.700280][T13834] IPv6: sit1: Disabled Multicast RS [ 361.821552][T13834] netlink: 'syz.3.2003': attribute type 1 has an invalid length. [ 361.829727][T13834] netlink: 'syz.3.2003': attribute type 2 has an invalid length. [ 361.915162][T13842] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 361.941003][T13842] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.956890][T13842] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 361.968457][T13842] netlink: 'syz.2.2005': attribute type 58 has an invalid length. [ 362.240049][T13851] __nla_validate_parse: 1 callbacks suppressed [ 362.240066][T13851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2008'. [ 362.341180][T13854] x_tables: unsorted underflow at hook 3 [ 362.356295][T13854] IPVS: dh: FWM 3 0x00000003 - no destination available [ 362.590534][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.600050][T13859] wlan0 speed is unknown, defaulting to 1000 [ 362.608015][T13859] lo speed is unknown, defaulting to 1000 [ 362.756318][T13865] syzkaller0: entered promiscuous mode [ 362.762079][T13865] syzkaller0: entered allmulticast mode [ 362.938493][T13867] netlink: 'syz.3.2014': attribute type 7 has an invalid length. [ 362.951208][T13867] netlink: 'syz.3.2014': attribute type 3 has an invalid length. [ 362.959580][T13867] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2014'. [ 363.075229][T13867] netlink: 'syz.3.2014': attribute type 27 has an invalid length. [ 363.225175][T13867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.235362][T13867] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.261882][T13867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.426524][T13867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.466602][T13867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.545121][T13867] veth1_vlan: left promiscuous mode [ 363.551778][T13867] veth0_vlan: left promiscuous mode [ 363.563628][T13867] veth0_vlan: entered promiscuous mode [ 363.574837][T13867] tipc: Resetting bearer [ 363.588018][T13867] veth1_vlan: entered promiscuous mode [ 363.611544][T13867] veth1_macvtap: left promiscuous mode [ 363.627555][ T6287] net_ratelimit: 1 callbacks suppressed [ 363.627574][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.649817][T13867] veth0_macvtap: left promiscuous mode [ 363.678682][T13867] veth0_macvtap: entered promiscuous mode [ 363.703650][T13867] veth1_macvtap: entered promiscuous mode [ 363.712149][T13867] geneve1: left promiscuous mode [ 363.720118][T13867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.729362][T13867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.741914][T13867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.754704][T13867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.765780][T13867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.774339][T13867] bond2: left promiscuous mode [ 363.779471][T13867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.788554][T13867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.799359][T13867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 363.811162][T13867] bridge4: left promiscuous mode [ 363.816994][T13867] bond5: left promiscuous mode [ 363.821904][T13867] ip6gre1: left promiscuous mode [ 363.831567][T13867] 8021q: adding VLAN 0 to HW filter on device bond6 [ 363.842738][T13867] vti0: left promiscuous mode [ 363.889628][T13905] vlan1: entered promiscuous mode [ 363.898073][ T6053] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.908408][ T6053] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.921158][ T6053] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.931131][ T6053] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.003957][ T6053] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.026281][T13910] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2023'. [ 364.035811][ T6053] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.078137][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2024'. [ 364.095091][T13912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.101713][ T47] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.116672][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.152963][ T9463] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 364.191547][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.248979][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 364.264401][T13920] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2027'. [ 364.295924][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 364.320185][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 364.382432][T13920] syzkaller0: entered promiscuous mode [ 364.402737][T13920] syzkaller0: entered allmulticast mode [ 364.440886][T13926] pimreg: entered allmulticast mode [ 364.446867][T13931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2028'. [ 364.502357][T13923] pimreg: left allmulticast mode [ 364.657910][T13927] tipc: Enabling of bearer rejected, failed to enable media [ 364.667948][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.972569][T13944] tipc: Enabled bearer , priority 0 [ 365.002825][T13944] tipc: Resetting bearer [ 365.055458][T13966] IPVS: Error connecting to the multicast addr [ 365.155181][T13971] tipc: Failed to remove unknown binding: 66,0,0/0:4261354743/4261354745 [ 365.166944][T13971] tipc: Failed to remove unknown binding: 66,0,0/0:4261354743/4261354744 [ 365.177489][T13943] tipc: Disabling bearer [ 365.177954][T13971] tipc: Failed to remove unknown binding: 66,0,0/0:4261354743/4261354745 [ 365.192542][T13971] tipc: Failed to remove unknown binding: 66,0,0/0:4261354743/4261354744 [ 365.210315][T13964] syzkaller0: entered promiscuous mode [ 365.216463][T13964] syzkaller0: entered allmulticast mode [ 365.233728][T13969] tipc: Enabled bearer , priority 0 [ 365.290342][T13964] tipc: Resetting bearer [ 365.359794][T13961] tipc: Resetting bearer [ 365.411919][T13961] tipc: Disabling bearer [ 365.436278][T13977] ip6_vti0: entered promiscuous mode [ 365.452133][T13977] ip6_vti0: entered allmulticast mode [ 365.626985][T13994] netlink: 'syz.1.2047': attribute type 1 has an invalid length. [ 365.723367][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.742696][T13994] bond12: entered promiscuous mode [ 365.753514][T13994] 8021q: adding VLAN 0 to HW filter on device bond12 [ 366.048976][T14016] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2051'. [ 366.275888][T14032] syzkaller0: entered promiscuous mode [ 366.281868][T14032] syzkaller0: entered allmulticast mode [ 366.745649][ T6289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.848242][T14017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.019822][T14061] netlink: 'syz.2.2064': attribute type 1 has an invalid length. [ 367.074713][T14061] netlink: 'syz.2.2064': attribute type 49 has an invalid length. [ 367.095017][T14066] netlink: 'syz.1.2065': attribute type 1 has an invalid length. [ 367.188868][T14069] wlan0 speed is unknown, defaulting to 1000 [ 367.249114][T14069] lo speed is unknown, defaulting to 1000 [ 367.268213][T14074] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 367.297073][T14072] dvmrp0: entered allmulticast mode [ 367.491884][T14088] netlink: 'syz.3.2072': attribute type 4 has an invalid length. [ 367.562938][T14093] netlink: 'syz.3.2072': attribute type 4 has an invalid length. [ 367.815910][ T6287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.891266][T14111] netlink: 'syz.4.2076': attribute type 5 has an invalid length. [ 367.952242][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.018726][T14086] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 368.047739][T14086] geneve2: left allmulticast mode [ 368.074260][T14086] bond4: left allmulticast mode [ 368.098918][T14086] geneve3: left allmulticast mode [ 368.126923][T14086] ipvlan4: left allmulticast mode [ 368.133377][T14086] ipvlan5: left allmulticast mode [ 368.139077][T14086] bond0: left allmulticast mode [ 368.146034][T14086] bridge3: left allmulticast mode [ 368.154301][T14086] ip6gre2: left allmulticast mode [ 368.191302][ T9463] netdevsim netdevsim0 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.210568][ T6279] lo speed is unknown, defaulting to 1000 [ 368.224196][ T5741] lo speed is unknown, defaulting to 1000 [ 368.443461][ T9463] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.466519][ T9463] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.277979][T14121] bridge_slave_0: left promiscuous mode [ 369.453853][T14121] vlan0: left promiscuous mode [ 369.473453][T14121] veth1_vlan: left allmulticast mode [ 369.479866][T14121] macvlan1: left promiscuous mode [ 369.486754][T14121] macvlan1: left allmulticast mode [ 369.568568][T14121] tipc: Resetting bearer [ 369.591827][T14121] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 369.603751][T14121] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 369.695844][T14121] sit1: left promiscuous mode [ 369.704540][T14121] bond6: left promiscuous mode [ 369.715562][T14121] ip6gre1: left promiscuous mode [ 369.720554][T14121] ip6gre1: left allmulticast mode [ 369.733845][T14121] bond9: left promiscuous mode [ 369.738820][T14121] bond9: left allmulticast mode [ 369.753327][T14121] bridge7: left allmulticast mode [ 369.766820][T14121] bond11: left promiscuous mode [ 369.772601][T14121] bond11: left allmulticast mode [ 369.783294][T14121] bond12: left promiscuous mode [ 369.801172][ T9463] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.824123][ T9463] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.835781][ T9463] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.896701][T14152] tipc: Started in network mode [ 369.906505][T14152] tipc: Node identity da1d72443ad9, cluster identity 4711 [ 369.915423][T14152] tipc: Enabled bearer , priority 0 [ 369.924125][T14144] syzkaller0: entered promiscuous mode [ 369.930191][T14144] syzkaller0: entered allmulticast mode [ 369.956162][ T9463] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.976040][ T9463] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.020842][T14144] tipc: Resetting bearer [ 370.054818][T14144] tipc: Disabling bearer [ 370.070485][ T9463] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.079804][ T9463] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.090421][ T9463] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.099519][ T9463] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.125966][T14170] __nla_validate_parse: 1 callbacks suppressed [ 370.125984][T14170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2082'. [ 370.283942][T14179] tipc: New replicast peer: 255.255.255.255 [ 370.313128][T14179] tipc: Enabled bearer , priority 10 [ 370.435144][T14183] netlink: 'syz.3.2085': attribute type 1 has an invalid length. [ 370.816002][T14196] syzkaller1: entered promiscuous mode [ 370.833483][T14196] syzkaller1: entered allmulticast mode [ 371.267132][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2090'. [ 371.306091][T14216] ip6tnl2: entered allmulticast mode [ 371.321910][ T6053] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 371.360761][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2091'. [ 371.422206][ T5734] tipc: Node number set to 3770970692 [ 375.062716][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 375.702275][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 382.742660][ T1074] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 383.382423][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.672249][ T6053] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 391.062488][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 391.737294][T14246] wg2: Caught tx_queue_len zero misconfig [ 391.827006][T14245] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2094'. [ 392.082480][T14261] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 392.100359][T14261] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 392.112715][T14261] tipc: Resetting bearer [ 392.144147][T14261] tipc: Enabling of bearer rejected, already enabled [ 393.892907][T14312] tipc: Resetting bearer [ 394.428234][T14312] bridge4: left allmulticast mode [ 394.534707][T14312] veth3: left allmulticast mode [ 394.576762][T14312] vti0: left allmulticast mode [ 394.597185][T14312] bridge5: left allmulticast mode [ 394.610063][T14312] ip6tnl2: left allmulticast mode [ 394.619414][ T5734] lo speed is unknown, defaulting to 1000 [ 394.631183][T14323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2114'. [ 394.640586][ T5734] syz2: Port: 1 Link DOWN [ 394.664259][T14332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 394.704658][ T47] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.720328][ T47] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.730620][T14341] tipc: Enabled bearer , priority 0 [ 394.737900][T14337] syzkaller0: entered promiscuous mode [ 394.745410][T14337] syzkaller0: entered allmulticast mode [ 394.764346][ T47] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.779612][ T47] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.802661][ T47] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.824538][ T47] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.860389][ T47] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.898957][ T47] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.918623][T14350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2118'. [ 394.924372][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'. [ 394.940969][T14343] tipc: Resetting bearer [ 394.993841][T14343] tipc: Disabling bearer [ 395.010368][T14356] netlink: 'syz.1.2119': attribute type 13 has an invalid length. [ 395.020419][T14356] netlink: 'syz.1.2119': attribute type 17 has an invalid length. [ 395.045297][T14351] tipc: Resetting bearer [ 395.141244][T14362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.184520][T14368] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2123'. [ 395.210412][T14362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.225311][T14372] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2123'. [ 395.235185][T14356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.246347][T14356] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.257824][T14374] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 395.270454][T14374] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2122'. [ 395.283127][ T1180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.293896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.304690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.314460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.336845][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.349011][ T6301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.359451][ T6301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.372354][ T6302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.445161][T14356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 395.469239][T14356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.541744][T14356] veth1_vlan: left promiscuous mode [ 395.559169][T14356] veth0_vlan: left promiscuous mode [ 395.587200][T14356] veth0_vlan: entered promiscuous mode [ 395.608987][T14356] veth1_vlan: entered promiscuous mode [ 395.643606][T14356] veth0_macvtap: left promiscuous mode [ 395.657409][T14356] veth0_macvtap: entered promiscuous mode [ 395.691155][T14356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.709437][T14356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.717545][T14356] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 395.725225][T14356] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 395.739212][T14353] vlan0: entered allmulticast mode [ 395.753860][ T24] bridge0: entered promiscuous mode [ 395.944342][ T6053] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.957431][ T6053] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.983370][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2128'. [ 398.182819][ T13] wlan1: Trigger new scan to find an IBSS to join [ 398.684423][ T6053] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.695205][ T6053] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.873024][T14416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2130'. [ 398.970511][T14417] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 398.979229][T14417] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 399.005256][T14417] tipc: Enabling of bearer rejected, already enabled [ 399.322147][T14436] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 399.349147][T14436] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 399.578327][T14464] wlan0 speed is unknown, defaulting to 1000 [ 399.586295][T14464] lo speed is unknown, defaulting to 1000 [ 399.872485][T14471] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2145'. [ 399.917113][T14471] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2145'. [ 400.147184][T14490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2147'. [ 400.580857][T14500] net_ratelimit: 1034 callbacks suppressed [ 400.580876][T14500] netlink: zone id is out of range [ 400.699736][T14503] netlink: 'syz.1.2150': attribute type 3 has an invalid length. [ 400.928320][T14519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2154'. [ 400.945799][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2150'. [ 401.142166][ T1074] wlan1: Trigger new scan to find an IBSS to join [ 401.245952][T14535] bridge6: entered promiscuous mode [ 401.251290][T14535] bridge6: entered allmulticast mode [ 401.259252][T14535] team0: Port device bridge6 added [ 401.269802][T14535] bridge0: port 1(team0) entered blocking state [ 401.276571][T14535] bridge0: port 1(team0) entered disabled state [ 401.283320][T14535] team0: entered allmulticast mode [ 401.288738][T14535] bridge4: entered allmulticast mode [ 401.296608][T14535] team0: entered promiscuous mode [ 401.301847][T14535] bridge4: entered promiscuous mode [ 402.303300][T14462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.488666][T14557] netlink: 'syz.3.2163': attribute type 12 has an invalid length. [ 402.745101][T14574] Cannot find del_set index 2 as target [ 403.124628][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'. [ 403.315579][T14615] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 403.458100][T14622] batman_adv: batadv0: Adding interface: vlan2 [ 403.522141][T14622] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.603347][T14622] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 403.850248][T14639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2182'. [ 403.919448][T14645] netlink: 'syz.4.2183': attribute type 1 has an invalid length. [ 403.944326][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2183'. [ 404.188400][ T47] wlan1: Trigger new scan to find an IBSS to join [ 404.228539][T14663] openvswitch: netlink: Tunnel attr 157 out of range max 16 [ 404.567808][T14680] batadv2: entered promiscuous mode [ 404.573821][T14680] batadv2: entered allmulticast mode [ 404.583642][T14680] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 404.675592][T14684] vxcan2: entered allmulticast mode [ 405.088393][ T13] wlan1: Creating new IBSS network, BSSID 8e:18:26:60:4f:31 [ 405.197288][T14707] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2200'. [ 405.367702][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2203'. [ 405.430246][ T30] audit: type=1804 audit(1784241680.067:11): pid=14720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2205" name="/newroot/386/cgroup.controllers" dev="tmpfs" ino=1992 res=1 errno=0 [ 405.470312][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 405.481336][ T30] audit: type=1800 audit(1784241680.067:12): pid=14720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2205" name="cgroup.controllers" dev="tmpfs" ino=1992 res=0 errno=0 [ 405.836277][T14740] netlink: zone id is out of range [ 405.876013][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2212'. [ 405.927434][T14746] Cannot find add_set index 2 as target [ 406.021295][T14745] wlan0 speed is unknown, defaulting to 1000 [ 406.068867][T14745] lo speed is unknown, defaulting to 1000 [ 406.081476][T14754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2214'. [ 406.176473][T14762] netlink: 'syz.0.2215': attribute type 62 has an invalid length. [ 406.234708][T14754] veth15: entered allmulticast mode [ 406.586008][T14784] "syz.2.2221" (14784) uses obsolete ecb(arc4) skcipher [ 406.769442][T14786] ip6_vti0: left promiscuous mode [ 406.837238][T14786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.849532][T14786] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.866877][T14786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.911661][T14786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.924477][T14786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.943308][T14786] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 406.954878][T14786] veth1_vlan: left promiscuous mode [ 406.962925][T14786] veth0_vlan: left promiscuous mode [ 406.974037][T14786] veth0_vlan: entered promiscuous mode [ 406.985443][T14786] veth1_vlan: entered promiscuous mode [ 407.092862][T14786] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.104616][T14786] netdevsim netdevsim2 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.119312][T14786] 8021q: adding VLAN 0 to HW filter on device eth0 [ 407.127816][T14786] netdevsim netdevsim2 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.138347][T14786] 8021q: adding VLAN 0 to HW filter on device eth1 [ 407.147371][T14786] netdevsim netdevsim2 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.159012][T14786] 8021q: adding VLAN 0 to HW filter on device eth2 [ 407.167357][T14786] netdevsim netdevsim2 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.179211][T14786] 8021q: adding VLAN 0 to HW filter on device eth3 [ 407.190322][T14786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.200826][T14786] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.212295][T14786] bond3: left promiscuous mode [ 407.217466][T14786] bridge2: left promiscuous mode [ 407.231103][T14786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.243072][T14786] sit0: left promiscuous mode [ 407.248512][T14786] geneve2: left promiscuous mode [ 407.255936][T14786] 8021q: adding VLAN 0 to HW filter on device bond5 [ 407.269351][T14786] 8021q: adding VLAN 0 to HW filter on device bond7 [ 407.411615][T14800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.424944][ T47] bond6: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 407.475791][ T47] bond6: (slave veth0_to_bond): making interface the new active one [ 407.549158][ T47] bond6: active interface up! [ 407.639667][T14806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2227'. [ 407.668595][T14814] netlink: 'syz.2.2229': attribute type 3 has an invalid length. [ 407.698932][T14817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2231'. [ 407.718294][T14814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2229'. [ 407.740938][T14818] syzkaller1: entered promiscuous mode [ 407.754575][T14818] syzkaller1: entered allmulticast mode [ 408.007022][T14832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.556529][T14806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.804596][T14845] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 410.807350][T14838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2234'. [ 410.826118][T14849] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 410.995838][T14866] netlink: 'syz.0.2240': attribute type 83 has an invalid length. [ 411.130388][T14868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2241'. [ 411.211406][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2243'. [ 411.488448][T14879] wlan0 speed is unknown, defaulting to 1000 [ 411.515053][T14880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2245'. [ 411.515459][T14879] lo speed is unknown, defaulting to 1000 [ 411.612528][T14882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2246'. [ 411.766278][T14886] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 411.774966][T14886] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 411.896978][T14892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2247'. [ 411.998511][T14879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2245'. [ 412.059395][T14880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2245'. [ 412.165293][T14906] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2252'. [ 412.208268][T14906] openvswitch: netlink: Message has 512 unknown bytes. [ 412.336555][ T9463] tipc: Subscription rejected, illegal request [ 412.417576][T14917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2255'. [ 412.577070][ T6316] lo speed is unknown, defaulting to 1000 [ 412.593556][ T6316] syz2: Port: 1 Link ACTIVE [ 412.653072][ T6316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 412.780658][T14912] syzkaller0: entered promiscuous mode [ 412.792947][T14912] syzkaller0: entered allmulticast mode [ 412.808838][T14936] sctp: [Deprecated]: syz.2.2258 (pid 14936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.808838][T14936] Use struct sctp_sack_info instead [ 412.905013][ T6314] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 413.057963][T14952] netlink: 'syz.1.2262': attribute type 1 has an invalid length. [ 415.974143][ T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 416.529441][T15014] netlink: 'syz.3.2275': attribute type 32 has an invalid length. [ 416.662749][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 416.797681][T15024] __nla_validate_parse: 5 callbacks suppressed [ 416.797701][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2277'. [ 416.985310][ T6051] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 417.008077][T15007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2269'. [ 417.045133][ T6051] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 417.193822][ T6301] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 417.645486][T15069] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 417.682098][T15069] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 417.864016][T15077] x_tables: duplicate underflow at hook 2 [ 418.158808][T15087] veth5: entered allmulticast mode [ 418.244271][T15090] veth5: left allmulticast mode [ 418.477196][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2293'. [ 418.491729][T15081] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 418.679409][T15105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2296'. [ 418.749300][T15105] netlink: 'syz.1.2296': attribute type 1 has an invalid length. [ 418.775511][T15105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2296'. [ 418.775605][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'. [ 418.816813][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2297'. [ 418.828791][T15108] netlink: 'syz.0.2297': attribute type 12 has an invalid length. [ 418.848692][T15108] netlink: 'syz.0.2297': attribute type 14 has an invalid length. [ 419.024881][T15117] pimreg: entered allmulticast mode [ 419.053720][T15121] gtp1: entered promiscuous mode [ 419.062787][T15121] gtp1: entered allmulticast mode [ 419.070513][T15121] team0: Device gtp1 is of different type [ 419.108864][T15127] pimreg: left allmulticast mode [ 419.269875][T15130] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.429212][T15138] syzkaller0: entered promiscuous mode [ 419.446123][T15138] syzkaller0: entered allmulticast mode [ 419.481582][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2307'. [ 419.502109][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2307'. [ 419.614455][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 419.799081][T15152] netlink: 'syz.3.2308': attribute type 10 has an invalid length. [ 419.817889][T15152] dummy0: entered promiscuous mode [ 420.204275][T15172] netlink: 'syz.1.2314': attribute type 2 has an invalid length. [ 420.685514][T15195] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 421.062229][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 421.227608][T15219] bond13: entered promiscuous mode [ 421.258637][T15219] 8021q: adding VLAN 0 to HW filter on device bond13 [ 421.766946][T15243] batman_adv: batadv0: Adding interface: dummy0 [ 421.787004][T15243] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.818657][T15243] batman_adv: batadv0: Interface activated: dummy0 [ 421.866800][T15211] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 422.076883][T15256] __nla_validate_parse: 7 callbacks suppressed [ 422.076903][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'. [ 422.108531][T15256] batadv0: entered promiscuous mode [ 422.117554][T15256] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 422.126398][T15259] syzkaller0: entered promiscuous mode [ 422.139176][T15259] syzkaller0: entered allmulticast mode [ 422.157917][T15266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2339'. [ 422.168417][T15266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2339'. [ 422.179557][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'. [ 422.190723][T15259] tipc: Enabled bearer , priority 0 [ 422.323813][T15263] tipc: Resetting bearer [ 422.373986][T15255] tipc: Resetting bearer [ 422.410218][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 422.420445][T15255] tipc: Disabling bearer [ 422.580470][T15292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.940723][T15315] tipc: Enabling of bearer rejected, already enabled [ 423.019900][T15319] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2358'. [ 423.029774][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2358'. [ 423.039978][T15319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2358'. [ 423.051259][T15319] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2358'. [ 423.077838][T15321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2359'. [ 423.136779][T15323] tipc: Failed to remove unknown binding: 66,0,0/16966:844913387/844913388 [ 423.146397][T15323] tipc: Failed to remove unknown binding: 66,0,0/16966:844913387/844913388 [ 423.294810][T15330] atomic_op ffff88807a59c998 conn xmit_atomic 0000000000000000 [ 423.380986][T15339] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 423.466853][T15341] batman_adv: batadv0: Interface deactivated: dummy0 [ 423.474650][T15341] batman_adv: batadv0: Removing interface: dummy0 [ 423.718410][T15355] syzkaller0: entered promiscuous mode [ 423.724191][T15355] syzkaller0: entered allmulticast mode [ 423.735331][T15355] tipc: Enabled bearer , priority 0 [ 423.764752][T15355] tipc: Resetting bearer [ 423.820952][T15357] geneve3: entered promiscuous mode [ 423.840492][T15357] geneve3: entered allmulticast mode [ 423.863976][T15354] tipc: Resetting bearer [ 423.921049][T15354] tipc: Disabling bearer [ 424.337472][T15397] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 424.348335][T15397] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 424.503953][T15409] tipc: Enabled bearer , priority 0 [ 424.515199][T15409] syzkaller0: entered promiscuous mode [ 424.520871][T15409] syzkaller0: entered allmulticast mode [ 424.548340][T15409] tipc: Resetting bearer [ 424.555731][T15408] tipc: Resetting bearer [ 424.574827][T15408] tipc: Disabling bearer [ 424.733862][T15412] xt_socket: unknown flags 0x4c [ 425.082961][T15424] geneve1: entered promiscuous mode [ 425.088342][T15424] geneve1: entered allmulticast mode [ 425.089791][T15426] netlink: 'syz.2.2392': attribute type 5 has an invalid length. [ 425.094527][T15424] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 426.373343][T15484] geneve2: entered promiscuous mode [ 426.380423][ T9463] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.402362][ T9463] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.423697][ T9463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.442498][ T9463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.569345][T15488] netlink: 'syz.3.2408': attribute type 12 has an invalid length. [ 428.650272][T15500] tunl0: entered promiscuous mode [ 428.666390][T15500] tunl0: entered allmulticast mode [ 428.671791][T15500] team0: Device tunl0 is of different type [ 428.731372][T15497] __nla_validate_parse: 72 callbacks suppressed [ 428.731392][T15497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2413'. [ 428.797016][T15497] netlink: 'syz.0.2413': attribute type 7 has an invalid length. [ 428.808079][T15497] netlink: 'syz.0.2413': attribute type 8 has an invalid length. [ 428.816733][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2413'. [ 428.825956][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 428.906501][T15510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2416'. [ 429.031374][T15522] netlink: 'syz.3.2420': attribute type 2 has an invalid length. [ 429.039322][T15522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2420'. [ 429.065986][ T5624] block nbd3: Receive control failed (result -32) [ 429.221448][T15528] wlan0 speed is unknown, defaulting to 1000 [ 429.231088][T15528] lo speed is unknown, defaulting to 1000 [ 429.326892][T15532] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 429.394331][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2423'. [ 429.411514][T15535] nbd: couldn't find a device at index 0 [ 429.504860][ T1180] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.539314][ T1180] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.650346][ T1180] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.666337][ T1180] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.990667][T15559] bond0: (slave ip6tnl0): refused to change device type [ 430.057568][T15564] ip6erspan1: entered allmulticast mode [ 430.295097][T15583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.375769][T15583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.415302][T15574] nbd0: detected capacity change from 0 to 63 [ 430.525418][ T5624] block nbd0: Receive control failed (result -104) [ 430.656118][T15597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 430.726061][T15597] team0: Port device bridge_slave_0 added [ 431.170167][T15637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2445'. [ 431.397802][T15653] netlink: 'syz.3.2450': attribute type 83 has an invalid length. [ 431.408251][T15654] tipc: Enabling of bearer rejected, failed to enable media [ 431.552693][T15659] syzkaller0: entered promiscuous mode [ 431.562795][T15659] syzkaller0: entered allmulticast mode [ 432.015312][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2459'. [ 432.025604][T15684] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2459'. [ 432.036394][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2459'. [ 432.046843][T15684] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2459'. [ 432.166109][T15689] netlink: 'syz.1.2460': attribute type 19 has an invalid length. [ 432.225336][T15689] netlink: 'syz.1.2460': attribute type 2 has an invalid length. [ 432.321462][T15689] ¿: entered promiscuous mode [ 432.496417][T15698] syzkaller0: entered promiscuous mode [ 432.528382][T15698] syzkaller0: entered allmulticast mode [ 432.537274][T15708] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 432.851866][T15730] "syz.0.2468" (15730) uses obsolete ecb(arc4) skcipher [ 433.850781][T15754] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 433.890277][T15762] __nla_validate_parse: 8 callbacks suppressed [ 433.890298][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2474'. [ 433.950892][T15762] ipvlan2: entered allmulticast mode [ 433.957094][T15762] gretap0: entered allmulticast mode [ 434.096078][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2476'. [ 434.209568][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2476'. [ 434.435138][T15788] tipc: Enabled bearer , priority 0 [ 434.443854][T15788] syzkaller0: entered promiscuous mode [ 434.456105][T15788] syzkaller0: entered allmulticast mode [ 434.456809][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 434.495171][T15793] netlink: 'syz.1.2481': attribute type 22 has an invalid length. [ 434.502528][T15796] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 434.522659][T15793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2481'. [ 434.615944][T15788] tipc: Resetting bearer [ 434.663306][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2482'. [ 434.686529][T15796] block nbd0: reconnected socket [ 434.712202][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2482'. [ 434.728158][T15802] netlink: 'syz.3.2487': attribute type 28 has an invalid length. [ 434.746923][T15802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2487'. [ 434.760347][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2486'. [ 434.772290][T15785] tipc: Resetting bearer [ 434.799651][T15785] tipc: Disabling bearer [ 434.802474][T15802] netlink: zone id is out of range [ 434.811063][T15802] netlink: zone id is out of range [ 434.818802][T15802] netlink: zone id is out of range [ 434.825705][T15802] netlink: zone id is out of range [ 434.834377][T15802] netlink: zone id is out of range [ 434.848080][T15806] lo speed is unknown, defaulting to 1000 [ 434.859455][T15802] netlink: zone id is out of range [ 434.891404][T15802] netlink: zone id is out of range [ 434.899946][ T5624] block nbd0: Receive control failed (result -32) [ 434.903068][T15802] netlink: zone id is out of range [ 434.912902][T15806] lo speed is unknown, defaulting to 1000 [ 434.921168][T15806] lo speed is unknown, defaulting to 1000 [ 434.950851][T15802] netlink: zone id is out of range [ 434.974381][T15802] netlink: zone id is out of range [ 435.001208][T15813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2489'. [ 435.216761][T15824] syzkaller0: entered promiscuous mode [ 435.234024][T15824] syzkaller0: entered allmulticast mode [ 435.360440][ T6316] lo speed is unknown, defaulting to 1000 [ 435.367493][T15806] infiniband syz1: set active [ 435.374099][T15806] infiniband syz1: added lo [ 435.384813][T15806] [ 435.387176][T15806] ====================================================== [ 435.394230][T15806] WARNING: possible circular locking dependency detected [ 435.401808][T15806] syzkaller #0 Not tainted [ 435.406236][T15806] ------------------------------------------------------ [ 435.413296][T15806] syz.2.2488/15806 is trying to acquire lock: [ 435.419352][T15806] ffffffff8ec5ed40 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 435.429144][T15806] [ 435.429144][T15806] but task is already holding lock: [ 435.437639][T15806] ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 435.447008][T15806] [ 435.447008][T15806] which lock already depends on the new lock. [ 435.447008][T15806] [ 435.457654][T15806] [ 435.457654][T15806] the existing dependency chain (in reverse order) is: [ 435.466712][T15806] [ 435.466712][T15806] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 435.474540][T15806] __mutex_lock+0x19d/0x1550 [ 435.479797][T15806] __alloc_workqueue+0xa9c/0x2060 [ 435.485345][T15806] alloc_workqueue_noprof+0xe3/0x210 [ 435.491771][T15806] padata_alloc+0xbe/0x360 [ 435.496784][T15806] pcrypt_init_padata+0x27/0x100 [ 435.502395][T15806] pcrypt_init+0x60/0xc0 [ 435.507427][T15806] do_one_initcall+0x250/0x870 [ 435.512752][T15806] do_initcall_level+0x10a/0x1a0 [ 435.518665][T15806] do_initcalls+0x59/0xa0 [ 435.523509][T15806] kernel_init_freeable+0x29d/0x3e0 [ 435.529244][T15806] kernel_init+0x1d/0x1d0 [ 435.534184][T15806] ret_from_fork+0x514/0xb70 [ 435.539322][T15806] ret_from_fork_asm+0x1a/0x30 [ 435.544605][T15806] [ 435.544605][T15806] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 435.552425][T15806] cpus_read_lock+0x42/0x160 [ 435.557528][T15806] static_key_slow_inc+0x12/0x30 [ 435.562983][T15806] nbd_genl_reconfigure+0x1301/0x1e80 [ 435.569075][T15806] genl_family_rcv_msg_doit+0x233/0x340 [ 435.575233][T15806] genl_rcv_msg+0x614/0x7a0 [ 435.580511][T15806] netlink_rcv_skb+0x226/0x4a0 [ 435.585879][T15806] genl_rcv+0x28/0x40 [ 435.590374][T15806] netlink_unicast+0x7bb/0x940 [ 435.595652][T15806] netlink_sendmsg+0x813/0xb40 [ 435.601446][T15806] sock_sendmsg_nosec+0x13a/0x180 [ 435.607064][T15806] ____sys_sendmsg+0x54e/0x850 [ 435.612646][T15806] ___sys_sendmsg+0x2a5/0x360 [ 435.617838][T15806] __x64_sys_sendmsg+0x1b1/0x290 [ 435.623320][T15806] do_syscall_64+0x174/0x580 [ 435.628586][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.635107][T15806] [ 435.635107][T15806] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 435.642754][T15806] __mutex_lock+0x19d/0x1550 [ 435.648127][T15806] nbd_queue_rq+0x373/0x1150 [ 435.655002][T15806] blk_mq_dispatch_rq_list+0x499/0x1990 [ 435.661419][T15806] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 435.668920][T15806] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 435.675424][T15806] blk_mq_run_work_fn+0x16c/0x300 [ 435.680979][T15806] process_scheduled_works+0xa8e/0x14e0 [ 435.687130][T15806] worker_thread+0xa47/0xfb0 [ 435.692236][T15806] kthread+0x388/0x470 [ 435.696837][T15806] ret_from_fork+0x514/0xb70 [ 435.701949][T15806] ret_from_fork_asm+0x1a/0x30 [ 435.707227][T15806] [ 435.707227][T15806] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 435.714435][T15806] __mutex_lock+0x19d/0x1550 [ 435.719549][T15806] nbd_queue_rq+0xc1/0x1150 [ 435.724569][T15806] blk_mq_dispatch_rq_list+0x499/0x1990 [ 435.730892][T15806] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 435.737739][T15806] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 435.744449][T15806] blk_mq_run_work_fn+0x16c/0x300 [ 435.750002][T15806] process_scheduled_works+0xa8e/0x14e0 [ 435.756238][T15806] worker_thread+0xa47/0xfb0 [ 435.761358][T15806] kthread+0x388/0x470 [ 435.766198][T15806] ret_from_fork+0x514/0xb70 [ 435.771306][T15806] ret_from_fork_asm+0x1a/0x30 [ 435.776665][T15806] [ 435.776665][T15806] -> #4 (set->srcu){.+.+}-{0:0}: [ 435.783779][T15806] __synchronize_srcu+0xc9/0x2f0 [ 435.789268][T15806] elevator_switch+0x1e8/0x7b0 [ 435.794645][T15806] elevator_change+0x2fa/0x480 [ 435.799925][T15806] elevator_set_default+0x375/0x440 [ 435.805731][T15806] blk_register_queue+0x3f3/0x4e0 [ 435.811362][T15806] __add_disk+0x6cb/0xe30 [ 435.816285][T15806] add_disk_fwnode+0xfb/0x4b0 [ 435.821477][T15806] nbd_dev_add+0x733/0xb60 [ 435.826412][T15806] nbd_init+0x15f/0x1e0 [ 435.831131][T15806] do_one_initcall+0x250/0x870 [ 435.836454][T15806] do_initcall_level+0x10a/0x1a0 [ 435.841923][T15806] do_initcalls+0x59/0xa0 [ 435.846834][T15806] kernel_init_freeable+0x29d/0x3e0 [ 435.852680][T15806] kernel_init+0x1d/0x1d0 [ 435.857614][T15806] ret_from_fork+0x514/0xb70 [ 435.862724][T15806] ret_from_fork_asm+0x1a/0x30 [ 435.868003][T15806] [ 435.868003][T15806] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 435.875849][T15806] __mutex_lock+0x19d/0x1550 [ 435.880960][T15806] elevator_change+0x1af/0x480 [ 435.886235][T15806] elevator_set_none+0xb5/0x140 [ 435.891596][T15806] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 435.897917][T15806] nbd_start_device+0x189/0xb30 [ 435.903503][T15806] nbd_genl_connect+0x1597/0x1c10 [ 435.909059][T15806] genl_family_rcv_msg_doit+0x233/0x340 [ 435.915228][T15806] genl_rcv_msg+0x614/0x7a0 [ 435.920253][T15806] netlink_rcv_skb+0x226/0x4a0 [ 435.925555][T15806] genl_rcv+0x28/0x40 [ 435.930053][T15806] netlink_unicast+0x7bb/0x940 [ 435.935420][T15806] netlink_sendmsg+0x813/0xb40 [ 435.940694][T15806] sock_sendmsg_nosec+0x13a/0x180 [ 435.946239][T15806] ____sys_sendmsg+0x54e/0x850 [ 435.951612][T15806] ___sys_sendmsg+0x2a5/0x360 [ 435.956804][T15806] __x64_sys_sendmsg+0x1b1/0x290 [ 435.962260][T15806] do_syscall_64+0x174/0x580 [ 435.967370][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.973783][T15806] [ 435.973783][T15806] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 435.982461][T15806] blk_alloc_queue+0x544/0x690 [ 435.987851][T15806] __blk_mq_alloc_disk+0x194/0x390 [ 435.993917][T15806] nbd_dev_add+0x494/0xb60 [ 435.999030][T15806] nbd_init+0x15f/0x1e0 [ 436.003841][T15806] do_one_initcall+0x250/0x870 [ 436.009142][T15806] do_initcall_level+0x10a/0x1a0 [ 436.014594][T15806] do_initcalls+0x59/0xa0 [ 436.019498][T15806] kernel_init_freeable+0x29d/0x3e0 [ 436.025394][T15806] kernel_init+0x1d/0x1d0 [ 436.030238][T15806] ret_from_fork+0x514/0xb70 [ 436.035432][T15806] ret_from_fork_asm+0x1a/0x30 [ 436.040708][T15806] [ 436.040708][T15806] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 436.048184][T15806] fs_reclaim_acquire+0x71/0x100 [ 436.053965][T15806] prepare_alloc_pages+0x15b/0x650 [ 436.059593][T15806] __alloc_frozen_pages_noprof+0x12f/0x380 [ 436.065955][T15806] __alloc_pages_noprof+0x10/0x100 [ 436.071585][T15806] pcpu_populate_chunk+0x181/0xb30 [ 436.077298][T15806] pcpu_alloc_noprof+0xbca/0x1900 [ 436.082841][T15806] xt_percpu_counter_alloc+0x145/0x1e0 [ 436.088933][T15806] translate_table+0x1311/0x2040 [ 436.094472][T15806] ip6t_register_table+0x112/0x320 [ 436.100101][T15806] ip6table_raw_table_init+0x54/0x80 [ 436.105939][T15806] xt_find_table_lock+0x311/0x400 [ 436.111674][T15806] xt_request_find_table_lock+0x26/0x100 [ 436.117907][T15806] do_ip6t_get_ctl+0x77b/0x12f0 [ 436.123268][T15806] nf_getsockopt+0x26e/0x290 [ 436.128448][T15806] ipv6_getsockopt+0x213/0x2c0 [ 436.133782][T15806] do_sock_getsockopt+0x51d/0x7e0 [ 436.139326][T15806] __x64_sys_getsockopt+0x1a4/0x240 [ 436.145063][T15806] do_syscall_64+0x174/0x580 [ 436.150168][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.156688][T15806] [ 436.156688][T15806] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 436.164410][T15806] __lock_acquire+0x1520/0x2cf0 [ 436.170086][T15806] lock_acquire+0x106/0x350 [ 436.175192][T15806] __mutex_lock+0x19d/0x1550 [ 436.180414][T15806] pcpu_alloc_noprof+0x231/0x1900 [ 436.185982][T15806] __alloc_workqueue+0xb2c/0x2060 [ 436.191526][T15806] alloc_workqueue_noprof+0xe3/0x210 [ 436.197323][T15806] ib_mad_init_device+0x993/0x2150 [ 436.203053][T15806] add_client_context+0x37c/0x7b0 [ 436.208717][T15806] enable_device_and_get+0x19c/0x3e0 [ 436.214561][T15806] ib_register_device+0x10af/0x1380 [ 436.220276][T15806] rxe_register_device+0x1e3/0x350 [ 436.225974][T15806] rxe_net_add+0x81/0x110 [ 436.230960][T15806] rxe_newlink+0xf4/0x1c0 [ 436.235902][T15806] nldev_newlink+0x5bc/0x650 [ 436.241022][T15806] rdma_nl_rcv+0x6ef/0xa40 [ 436.246007][T15806] netlink_unicast+0x7bb/0x940 [ 436.251376][T15806] netlink_sendmsg+0x813/0xb40 [ 436.256828][T15806] sock_sendmsg_nosec+0x13a/0x180 [ 436.262457][T15806] ____sys_sendmsg+0x54e/0x850 [ 436.267740][T15806] ___sys_sendmsg+0x2a5/0x360 [ 436.272931][T15806] __x64_sys_sendmsg+0x1b1/0x290 [ 436.278389][T15806] do_syscall_64+0x174/0x580 [ 436.283620][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.290047][T15806] [ 436.290047][T15806] other info that might help us debug this: [ 436.290047][T15806] [ 436.300361][T15806] Chain exists of: [ 436.300361][T15806] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 436.300361][T15806] [ 436.313496][T15806] Possible unsafe locking scenario: [ 436.313496][T15806] [ 436.321300][T15806] CPU0 CPU1 [ 436.326816][T15806] ---- ---- [ 436.332292][T15806] lock(wq_pool_mutex); [ 436.336537][T15806] lock(cpu_hotplug_lock); [ 436.343554][T15806] lock(wq_pool_mutex); [ 436.350610][T15806] lock(pcpu_alloc_mutex); [ 436.355118][T15806] [ 436.355118][T15806] *** DEADLOCK *** [ 436.355118][T15806] [ 436.363668][T15806] 6 locks held by syz.2.2488/15806: [ 436.368966][T15806] #0: ffffffff9ab1b1a8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 436.379157][T15806] #1: ffffffff8fd8ae28 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650 [ 436.388567][T15806] #2: ffffffff8fd7c308 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 436.398582][T15806] #3: ffffffff8fd7c608 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 436.408626][T15806] #4: ffff88807ceac620 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0 [ 436.420475][T15806] #5: ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 436.430235][T15806] [ 436.430235][T15806] stack backtrace: [ 436.436137][T15806] CPU: 0 UID: 0 PID: 15806 Comm: syz.2.2488 Not tainted syzkaller #0 PREEMPT(full) [ 436.436157][T15806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 436.436173][T15806] Call Trace: [ 436.436181][T15806] [ 436.436279][T15806] dump_stack_lvl+0xe8/0x150 [ 436.436357][T15806] print_circular_bug+0x2e1/0x300 [ 436.436374][T15806] check_noncircular+0x12e/0x150 [ 436.436401][T15806] __lock_acquire+0x1520/0x2cf0 [ 436.436422][T15806] ? check_path+0x21/0x40 [ 436.436464][T15806] ? check_noncircular+0xda/0x150 [ 436.436487][T15806] ? add_lock_to_list+0xc7/0x100 [ 436.436509][T15806] ? lockdep_unlock+0x5d/0xd0 [ 436.436525][T15806] ? __lock_acquire+0x13e8/0x2cf0 [ 436.436546][T15806] ? pcpu_alloc_noprof+0x231/0x1900 [ 436.436562][T15806] lock_acquire+0x106/0x350 [ 436.436581][T15806] ? pcpu_alloc_noprof+0x231/0x1900 [ 436.436602][T15806] __mutex_lock+0x19d/0x1550 [ 436.436625][T15806] ? pcpu_alloc_noprof+0x231/0x1900 [ 436.436642][T15806] ? __pfx___mutex_trylock_common+0x10/0x10 [ 436.436658][T15806] ? pcpu_alloc_noprof+0x231/0x1900 [ 436.436674][T15806] ? trace_contention_end+0x3d/0x140 [ 436.436688][T15806] ? __pfx___mutex_lock+0x10/0x10 [ 436.436709][T15806] ? __mutex_lock+0x30d/0x1550 [ 436.436735][T15806] ? __pfx___mutex_lock+0x10/0x10 [ 436.436756][T15806] pcpu_alloc_noprof+0x231/0x1900 [ 436.436773][T15806] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 436.436797][T15806] __alloc_workqueue+0xb2c/0x2060 [ 436.436824][T15806] alloc_workqueue_noprof+0xe3/0x210 [ 436.436847][T15806] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 436.436868][T15806] ? __ib_alloc_pd+0x4d6/0x6d0 [ 436.436920][T15806] ? __ib_alloc_pd+0x171/0x6d0 [ 436.436940][T15806] ib_mad_init_device+0x993/0x2150 [ 436.436969][T15806] ? __pfx_ib_mad_init_device+0x10/0x10 [ 436.436985][T15806] ? do_raw_spin_unlock+0xf5/0x210 [ 436.437002][T15806] ? _raw_spin_unlock+0x28/0x50 [ 436.437048][T15806] add_client_context+0x37c/0x7b0 [ 436.437065][T15806] ? __pfx_add_client_context+0x10/0x10 [ 436.437078][T15806] ? xa_find+0x25b/0x2b0 [ 436.437096][T15806] enable_device_and_get+0x19c/0x3e0 [ 436.437118][T15806] ? __pfx_enable_device_and_get+0x10/0x10 [ 436.437142][T15806] ? device_add+0x6f6/0xb80 [ 436.437238][T15806] ib_register_device+0x10af/0x1380 [ 436.437263][T15806] ? __pfx_ib_register_device+0x10/0x10 [ 436.437287][T15806] ? xa_load+0x60/0x210 [ 436.437300][T15806] ? xa_load+0x60/0x210 [ 436.437312][T15806] ? xa_load+0x60/0x210 [ 436.437325][T15806] ? xa_load+0x1db/0x210 [ 436.437341][T15806] ? ib_device_set_netdev+0x5c9/0x6d0 [ 436.437358][T15806] rxe_register_device+0x1e3/0x350 [ 436.437381][T15806] rxe_net_add+0x81/0x110 [ 436.437404][T15806] rxe_newlink+0xf4/0x1c0 [ 436.437423][T15806] nldev_newlink+0x5bc/0x650 [ 436.437444][T15806] ? __pfx_nldev_newlink+0x10/0x10 [ 436.437503][T15806] ? bpf_lsm_capable+0x9/0x20 [ 436.437532][T15806] ? security_capable+0x7e/0x2c0 [ 436.437626][T15806] ? __pfx_nldev_newlink+0x10/0x10 [ 436.437645][T15806] rdma_nl_rcv+0x6ef/0xa40 [ 436.437670][T15806] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 436.437698][T15806] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.437712][T15806] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.437730][T15806] netlink_unicast+0x7bb/0x940 [ 436.437755][T15806] netlink_sendmsg+0x813/0xb40 [ 436.437773][T15806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.437789][T15806] ? aa_sock_msg_perm+0xf1/0x1b0 [ 436.437831][T15806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.437844][T15806] sock_sendmsg_nosec+0x13a/0x180 [ 436.437863][T15806] ____sys_sendmsg+0x54e/0x850 [ 436.437887][T15806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.437918][T15806] ? import_iovec+0x73/0xa0 [ 436.438000][T15806] ___sys_sendmsg+0x2a5/0x360 [ 436.438021][T15806] ? __lock_acquire+0x683/0x2cf0 [ 436.438041][T15806] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.438064][T15806] ? futex_wait+0x2a2/0x390 [ 436.438103][T15806] ? __fget_files+0x2a/0x420 [ 436.438133][T15806] ? __fget_files+0x3a2/0x420 [ 436.438155][T15806] __x64_sys_sendmsg+0x1b1/0x290 [ 436.438178][T15806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.438206][T15806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.438222][T15806] do_syscall_64+0x174/0x580 [ 436.438242][T15806] ? trace_irq_disable+0x3b/0x140 [ 436.438265][T15806] ? clear_bhb_loop+0x40/0x90 [ 436.438281][T15806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.438297][T15806] RIP: 0033:0x7f2616f9de59 [ 436.438313][T15806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.438326][T15806] RSP: 002b:00007f2617e3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.438343][T15806] RAX: ffffffffffffffda RBX: 00007f2617225fa0 RCX: 00007f2616f9de59 [ 436.438355][T15806] RDX: 0000000020000810 RSI: 0000200000000240 RDI: 0000000000000003 [ 436.438365][T15806] RBP: 00007f2617033e6f R08: 0000000000000000 R09: 0000000000000000 [ 436.438375][T15806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.438384][T15806] R13: 00007f2617226038 R14: 00007f2617225fa0 R15: 00007ffd20a36e68 [ 436.438402][T15806] [ 436.999611][T15806] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 437.001135][T15806] infiniband syz1: Couldn't open port 1 [ 437.016505][T15806] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 437.032051][T15806] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 437.060027][T15806] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 437.127978][T15806] RDS/IB: syz1: added [ 437.139759][T15806] smc: adding ib device syz1 with port count 1 [ 437.148533][ T1180] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 437.161052][T15806] smc: ib device syz1 port 1 has no pnetid [ 437.167927][ T24] lo speed is unknown, defaulting to 1000 [ 437.174627][T15806] lo speed is unknown, defaulting to 1000 [ 437.231728][T15806] lo speed is unknown, defaulting to 1000 [ 437.287790][T15806] lo speed is unknown, defaulting to 1000 [ 437.343273][T15806] lo speed is unknown, defaulting to 1000 [ 437.398798][T15806] lo speed is unknown, defaulting to 1000 [ 438.183743][T15825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.182129][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!