last executing test programs: 6.154778633s ago: executing program 1 (id=4777): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@allocspi={0x1b0, 0x16, 0x1, 0x2, 0x0, {{{@in, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1, 0x4, 0x0, 0x100}, {0xff, 0x4, 0x5}, {0x0, 0xc79}, 0x0, 0x0, 0xa}, 0x2, 0xb154}, [@policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in=@loopback, 0x4e24, 0x5, 0x4e21, 0x800, 0x0, 0x0, 0x0, 0x67, 0x0, r1}, {0x1, 0x4d3, 0x2, 0x0, 0x88, 0x1, 0x3e, 0x7}, {0x101, 0xb28f, 0x80000001, 0xf6}, 0x1, 0x0, 0x2, 0x0, 0x1}}, @lastused={0xc}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 5.831137575s ago: executing program 2 (id=4781): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000000000000000000080000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r6, 0x0, 0x2c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40010) r7 = socket$alg(0x26, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001a0001002dbd7000fcdbdf258120800140000008000000005ed6a5a3d35c8908325fff539aafb40e02fa84ba8f6d21454104fb48a69f270a52cd70eb56bb42877fc1658aac090f86"], 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) accept4(r7, 0x0, 0x0, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.715663664s ago: executing program 1 (id=4782): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (rerun: 32) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001bc0)=[{&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x8, @local, 0x200}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000600)='Cqk', 0x3}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="300000000000000084000000010000000ff5050002000000010000000900000004000000029a8610fe4979aee1eb241aa300000006000000", @ANYRES32=r3], 0x30, 0x81}], 0x1, 0x40000) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32) sendto$inet6(r4, &(0x7f0000000240)="a68770a2d4aaf8fd6dbeb35663", 0xd, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0xd}, 0x1c) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x200142, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r7, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) (async) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000000)=""/135, 0x87}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x337) shutdown(r4, 0x1) r8 = socket(0xa, 0x3, 0x85) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xa}, 0x40, r9}) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x8936, &(0x7f0000000000)) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="39437379ce374ddd28a68f213c85b079ee417460ef3ebce7748a81d772ada323c7650658f2cc360028c6c59006a227d1eb27e72ae2b82679326dad1944973a26b44582637c9eba1058ed5ef785f3bf3c2ffa83ecae9b088854134ea14ea466229810341bc5a109e54014d283a91dd96e575f8f901800c4a10bff73264899b1e331eb19547b5a702e36501069e6e6805df603", @ANYRES8=r4, @ANYRES16=r7], 0x64}}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) 5.504347691s ago: executing program 0 (id=4783): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf7f}, 0x94) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x2b37c8fbf763e83f) 5.401286316s ago: executing program 2 (id=4784): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x40, 0x0}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f00)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r6, {0x5, 0xc}, {0x3, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f00)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r6, {0x5, 0xc}, {0x3, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x2b, 0x0, @val=@target_btf_id=r2}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000202000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000202000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r7, 0x0) 5.393261996s ago: executing program 0 (id=4785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="12000000030000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001811000c", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 5.183838063s ago: executing program 0 (id=4786): unshare(0x22020600) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) unshare(0x10040100) (async) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000040)="9379", 0x2) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x2, 0x15, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0xfffffdc8, &(0x7f0000000340)}, 0xc) 5.089394886s ago: executing program 2 (id=4788): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x844) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = socket$kcm(0xa, 0x3, 0x87) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES16=r7], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vlan0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x45, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000a00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1040}, 0x4004) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0x3, 0x18}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, &(0x7f0000000780), &(0x7f00000007c0)='%pI4 \x00'}, 0x20) 4.983937575s ago: executing program 0 (id=4789): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6, 0x0, 0x4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000007740)={0x0, 0x0, &(0x7f0000007700)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x90}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '/)+:^,'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) close(r1) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x144, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x79, 0x6, "94a656b25eedbd1db3f8e23d5d2895a24779572516f3c41dcd2751a191306476be3fa8a4c2569b38bbfad3fa87915827b9b4b79318994f008a30b43a81d3b4ea66af040e9dc421dc7882a794f1c13b28b57fcbf5ed03860289eb905e1ff13c311c98d7eaca9ffa180c461a44f80f7ef2a75239fbd7"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x6f, 0x6, "c5869e79cc7a19685e1d16944352b73e98c0260f79718e95da8c3333e0cca3e3a98321590d7d115e742020e6af14e1739aeed6ae3a0f3dd6d2ae61447f6956bfc50503880020154e28783ee6691fb0c98e40b140c3a4446b3c11b091f02d7c9e2d65acb5746c6224b4003d"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x30, r10, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r13, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6ff16901dc11fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101dc9078ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec36"], 0x204) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r13, 0x0) openat$cgroup_freezer_state(r13, &(0x7f00000002c0), 0x2, 0x0) 4.307502387s ago: executing program 3 (id=4792): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d5786b4f843d8ff2885266d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0xb4dac462410a8f85, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020281", 0x4}], 0x3) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000088500000076000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0xffffffc1, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0xcb, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x3, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0xfffffffd, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0x2, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_opts(r2, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r3], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002880)={0x20, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write(r10, &(0x7f0000000280)="aa0a30f6dbc4f75ae9", 0x9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r11) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000001040500000000000000000000400000060006460003000005000100010000"], 0x24}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000440)=0x3f, 0x4) 1.975845364s ago: executing program 4 (id=4793): ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x20, 0x69, 0x1, 0x70bd28, 0x25dfdbff, {}, [{0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c00}, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c001}, 0x8000) 1.904736803s ago: executing program 0 (id=4794): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@fwd={0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x4b, 0x0, 0x2}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="5400000010000104fcfffffffddbdf2500000000", @ANYRES32=r6, @ANYBLOB="31000000bd3f9f8034001280110001006272696467655f736c617665000000001c00058005002000200000000500210001"], 0x54}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000100001000000000c000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010069703665727370616e30000000000000080002400000000648000000180a0101000b000000000000010000000900010073797a30000000001c000380180003801400020000003665727370616e300000000000000900020073797a30"], 0xe8}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac286f00240000004101010026bd700004000a00010092000400cb8027dc66a07ff15c0a001600dc36b9230000000000"], 0x24}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4008094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x128, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x8}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0xfc, 0x2, [@TCA_FW_ACT={0xf8, 0x4, [@m_bpf={0xf4, 0xf, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xff, 0x3, 0x2, 0xfffffff8}, {0x2, 0x2, 0xa7, 0x5}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x6a, 0x6, "17a5179e10e3adca0b252f70bd336dfcd15d2b099876527d76752c3e1dff2f6ed48cfab61383426af865a463d0f231c4387eef10d5b402f5547be8f867ca5e103e3198d84de47238920fcfa4730758be8c5001ba996f5272f6f240b793ba49c20bdc95b7f5f8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4080}, 0x40440d0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) ioctl$XFS_IOC_GETBMAPX(r8, 0xc0205838, &(0x7f0000000380)={0x9, 0x37f, 0x401, 0x9, 0x4, 0x3f, 0x4}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1, 0xf}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x7ff, 0x10000000, 0x1}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x9751304b5dc4b606, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xffff, 0x82c03889cbaab92d}, {0xd}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, 0x0, 0x0) 1.883238433s ago: executing program 3 (id=4795): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000018000100000000000000000b0a000000000000000000000008000400", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x20044804) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x2000, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) 1.772412896s ago: executing program 2 (id=4796): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008090000000000000000000063112d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x400c055) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x1c, 0x1, 0x1, [r10, r10, r10]}}], 0x20, 0x40044}}], 0x1, 0x20008801) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd704000dcdf250f00000008000300", @ANYRES32=r9, @ANYBLOB="08002e000200000005002d00"], 0x2c}}, 0x480d8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0xf4, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x32}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000084) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x22}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x100}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.771906924s ago: executing program 1 (id=4797): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000380)={0x42, 0xfff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) (async) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x14, 0x4, 0x1, 0x70bd2a, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x24040099}, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 1.710365047s ago: executing program 4 (id=4798): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x437b, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9ad0c7c5ea8ded2f36d411b49aed248f010cf36989bcf6f373", 0x19}], 0x1}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x1c00, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1.690942383s ago: executing program 3 (id=4799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x1, 0x5, 0x0, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x7, 0x3, 0x0, [{@multicast2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) (async) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x7, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x97, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000015}, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.439911684s ago: executing program 1 (id=4800): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0xc4, 0x3, 0x2}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r3, &(0x7f0000002380), 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r2}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x2, '\x00', 0x0, r6, 0x0, 0x4}, 0x50) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x4, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x10000000, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) 1.439538338s ago: executing program 2 (id=4801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}, 0xc) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, @dev={0xac, 0x14, 0x14, 0x3a}}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="9f68f33976"], 0x48}}, 0x0) 1.392225181s ago: executing program 4 (id=4802): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtaction={0x14, 0x1d, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xfffffffffffffc37) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) recvmmsg(r5, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}, 0xeb2}], 0x1, 0x42, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@deltaction={0x40, 0x31, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x101b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x40}}, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f0000000080)=[0x2], 0x2) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000005c0)={'syztnl2\x00', 0x0}) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x8000}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r8, &(0x7f0000001140), 0x700, 0x2, 0x0) close(0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="6deaa701e78d78bfdf1c96ff0a1e58630df80c69c0f50bdf9aacd1c31cab8abd03603b45eeda258005613ecba4d6b3934e00c271b35c49c6a0a782d80a4ae368dc79c59aa81b3e58430f298aceb58eed6249323fd557cc0a3295", 0x5a) 1.045697236s ago: executing program 0 (id=4803): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890) r3 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001800400dd808c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x32, @empty, 0x4e29, 0x80000003, 'sh\x00', 0x10, 0x10000004, 0x8}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) sendmmsg(r5, &(0x7f0000009e80)=[{{&(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x2000000}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)="d49928d9548951a6616bcdfcce3debbe2d61e6e8efb941421ff2ef1b30cacfeb99bdb32ca0e287c1159724601213c6caa818aff7c75cfc2d394254f1cd6ff794ba8e85f4bca0c35a602790bf35842a8f680baaaac00cab38edec3b1e4e2415bc56514be54b9578c3baddc3be6a12a5f9aef8549f21eaa18cd647ae8873d06e022d47e6c0e886d6e5fb15216155f3a9dafa0601032130db203a81a29693d641856343011c", 0xa4}], 0x2, &(0x7f00000007c0)=[{0x30, 0x116, 0x80000000, "bab815c6e7823c6ad6998939ba008335f400d5677862feefc7a440b3734b87"}, {0x58, 0x111, 0x8, "6b62784812e72e56cc0b4667b10b576df0115bd1abe503ed6ae2870bc98c2ed1d14ce73f1681fa3dea81565a72ec83ffef72ffcdfe0b04b46fa43d02bc679c7cda5ae8"}], 0x88}}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @private0, 0xfffffffa, 0x4}, 0x80, &(0x7f0000000900), 0x0, &(0x7f0000000940)=[{0x48, 0x109, 0xfd, "3d4372f9acde884ddd55c29f44398284aecb0d7a2110e7dc454dd06e0997d1965593665bfd7c66c0cc7621d415e1d9709f088e769b"}, {0x18, 0x10b, 0x19b, "af9965c06da5"}, {0xe8, 0x109, 0x7, "f0c1e4b50438a08bfeaddbdd2ea87540ecdff0067cfed367bb4e50e71a255cec0a066c6a741d3d2140cf16cf9c2dfdf547c63eb403b10538c6c68eea8485516a5425430b80d40de849835921f5ac3f5987f2cdb644571872688caa2b2db8814c5c8d2a20b87c5cf55b59f49510179577e274f4fbb45ad8ad8df188ca3009ed960a343c5b9e39d6b523848f0f89448dc14543feb22af3620d97bf3d1bea3042e85a21cc4e361a9b22895f184259bfe6912ec6e820671698fb4a523ff41bda24ff8a0267e36a96bbc6bc6330dacb607e9a3df4"}], 0x148}}, {{&(0x7f0000000ac0)=@qipcrtr={0x2a, 0xffffffff}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000b40)}, {0x0}, {&(0x7f0000000bc0)="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", 0x1000}], 0x3, &(0x7f0000001c00)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000a0c0)=ANY=[@ANYBLOB="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"], 0x1178}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000003040)="4799c134c47c086ff02b2cdb3f3be6c5ad6804762b07bdc1396849d0db57e2b310dfb3a389f28f38598d3cc52a2c07b74c251d667634545b653c79d97b022a", 0x3f}, {&(0x7f00000030c0)="0358b64e9d287f98f2b589735d659a831d4947e5cd6471e98d7d9f6f0184d5cb2118b262aac077abcf5ca8cf07a0f6", 0x2f}], 0x2, &(0x7f0000003140)=[{0xf90, 0x112, 0x8e1, "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"}, {0xc8, 0x11, 0x6, "bc2855380bde494121331c3e6c965f64efb87d91c2ecaedcbee45399a52c0cfed2f33218a6ff66d483630bc45d35e27abba36c0ee75599fb6cc81423316d91fdd5aa3d742dc4c0739d95421d5ee9b239faf7fd6ba8a143e03aa9ecd1dcdd47bafaa1d23031891109cada0947d5f5d0b11ede9a97ee0ce78c2609a82a89f9d4f48eea70a79f06edd56a29942a3e18f008539d3ae0afcf0f310a3ebaec5bb1d6573d1a01ec74700190fd9eae63f800000000"}, {0x98, 0x112, 0x1, "c16f6f74c2bc0055f57b70de8112f2304fe603ceae6a742a02b28c101c0bcd8fe848bd3278a69bb68d0c40ffaeeec071741e9853cc7660d7441d2f2a0422c9fd7b50e38ed6cc81b44ee5ae62e9207e81945bde31a6ed89e59416c1fef3b5e7d2fa539a7f97ed77dc67b8a9ee1d3e203a20bc63fdc32db4768f1ec3054051095cf53453f65d"}, {0x48, 0x29, 0x8, "e49a61422a6b305a40ac7507302c615f4b38b9d14d3277d268111ef6e002299f9a56ae039a161198d0e0bbc57c72cb6ca51157643791"}, {0x10, 0x6, 0x8000006}, {0xa0, 0x10f, 0x7, "e35e085bbcaa1526bbb7e367cd401ab2f9af4a07378cd175f05e9bb995a896d86a5da482b7da29cac4e62d585dda7ba224bc0c6dc5b709ee9a174c2cbfe51b576c80903c30eefbbdea3b14097d7713ec9f8f86302728ca3a72db903ccf4334e18b4a3a9bb4892765d1b4d051cdd42f40812d807e315a7cad42c9614d161c3c75135469e099dab454312dd00877"}, {0xd8, 0x1, 0x9, "1aa3800fec1c4c781e47c167e0438979680fb380f424f6525557d7e4d5fbb94f6358351acbdf96faaf2e1b137fa07b03fa899ab42707bb7002c601e1c7cc6c037213f09633160539f7e7ab46cc46051107cf0f9e70aefe918ac8db45bec461b73543e321d49be42483c3b9ec46ad71bdda804cd0c24b918ef264e1bf6afff86a33514059e26a94095275edd1f30dfb73106ef8fc1fdb7f1792c0b3c56bdeef994fd499afa5a233829c359d85fc3514db2f5a273588b00b632c9ff7d4dc0cf21f8b389123f790fc"}, {0xc8, 0x10a, 0x2, "7a6a29229a64ecc378cecbc366fce7e228a2963f65e52ae9bad44502ffe114ba8f96d86a8022dce4476d6ff28d992bf25618cd594e5aab48fcb28df3f44de6527d35b2d6818ab0a19ad3c07123a39fa4f690eaee9801cc6b92862572351fb65585e1d70ef0745502dc02a6d1543479f7066973937025f94ebc01ecb39d4e759804e068d95a38470e68b69becd3704eea36144eceb24a4690fc1b38f86222534efc56c9002b310ba6453380d71985313658734803"}, {0x10, 0x114, 0xfffffffb}], 0x1398}}, {{&(0x7f0000005580)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @loopback}, 0x3, 0x4, 0x4, 0x1}}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005600)="cfda975f6e0f12bffa05c190452fa8f48e2ae2143b867c11e289a23656808c4ef19af860e74e7cf3c2eda36d20775c6bb077d440fcd38fe045ede9327823da582e6628768e4d78e6b80dd4ea3d4e5ce8d6f5586ff6c3641a2e192e4ceac3e1a12078e918a29bfe138304c8bfe276dc5a2685614aff7d5a5f9a5e44e646c7bdb3cd41ce8584212de0f7a1f9aeefac401554e324cfde5b0ba12309222b66f7d5875cbb576e19dced", 0xa7}, {0x0}, {&(0x7f0000005740)="8540fd24e3b094a41c06b83dd2937e498f2a52bab887fb231f424462c492baddbaffae172727338c94687e4cc12ee9985adf1f62e577492d6a7bf7e909f8378dcf8b109b7cd2394e7dc491f21ba2e0b86f124ba4d04db90812c3e4bed781118c03ca00", 0x63}, {&(0x7f00000057c0)}, {&(0x7f0000005800)="e182343278af7b067f3660e80f2d526969f45278b862ccd6a8b946a64199d3bbb201b4934cba37f8af6ba8439481af1d63b9f3871a60c949a3a2ef75b5b28b6a0ba71210dc50f0eadd38065b2a21cbb703b84b9b254fd2f39fdfff952ca6aeb1fcc6635bd19047c92f1ccdd45ffd46c4b3965516ce6c5cd68df462b5bd412b59239038ef887da1b6d52cb38a91ff6dca4e1ba358fae4e8e93475e7f85a3c86cf39cd6f16f46ca9f2638bff03768ba9a3788f71da2c7096daeb1032f054e7b1d27cea4966de57", 0xc6}], 0x5}}, {{&(0x7f0000005980)=@ieee802154={0x24, @short={0x2, 0x3, 0xffff}}, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005a00)="f326aa0a3908d05083563a0402e86e387f81ef3b13f2ccf54c9e28518ab2f3786a180d35157d61fda0edc7d313078e9ee554a28f5969ae7db77b7b9519c72b6ec86cd9cd098789bd19e1c992758bf2ad1c95a3791f65732cea19292a2199321eb0bc409280e2de98f45912627ddec4e478bcd13c5f78932c8a83902bb3784e046ee201c53ea1fd26de891a959ba3a9318dfe24e6dbf464627e3e95e8e0f2bd28c1d1167cc30b3d5c1996bb24f52977fefa96178e1bb517b3b5dee7a709646a66662f7ad2af77aff19c", 0xc9}, {&(0x7f0000005b00)}], 0x2, &(0x7f0000005c00)=[{0xe0, 0x112, 0x7, "3acfca10f3900b661a3001d2f8677952ebd4a4667faeaf166333d1e1a217ea6c936914aafe7329a1150c1ed584be731aa0ea0ccc40a61f225bc8efc4f7fa4f489e6c8ba5f37b2fb2a9e88e60d8884db281ef101232690999c51f586aaf3dae70a846fee143f5142067febaf735450bd93459c590990f0eccb0f00dfdeddf49d8b95b4a6f5918296ebe39af5b72b12a3cded5eaa931a35cca8e15046544ac57d13b35a7db2b795a86621f649d2c67ae2d2efc15257ce30b198e8b6990b11ef29d20dabce8b5ce0a34d51a2d97fce1"}, {0x100, 0x111, 0x3, "07ecaa383adb00adf226687f632fd6e52ebe7efe52735d768ba20bad86968f4485449b03a8c7e3866018240c0df6ef2b55cfd1069d473b149dd3987c4e2448e3c2765eeb1595e88e4dc3cbf2da9a2f8d5df37bd4359b28d3fc948cdd0c1dfb276f9cb349a3ebd772266b45d4d3aaa6ecf3a23d45febd2a9f32ca46f1a10d3bc47e290382badab1a6d5ec0696cc88d75b07385d6d656f41bec2c1ec81512db72223af21ad4405704ce7e045b0c3c3ab979716625745af07332dfae7080ac661f9c266b486531ab7c461a501cda218c72734f9498539cffbbd7b562a9849042a8be94dd277a7a53d0054f9da2403c336"}, {0x48, 0x102, 0x5, "6748d471a08b35a8f5d9034a6a07802e5118eaa82e63cdc70b5118e7717e664ec2dd765211b947a1fe92c01c1c992e0bbcdba851"}], 0x228}}, {{&(0x7f0000005e40)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @private=0xa010101}, 0x1, 0x0, 0x1, 0x2}}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000005ec0)="09fa2cd5d381f2112c718d65b40a8a82022732a58b78ba6ad44dfa040031ae2a987664", 0x23}], 0x1, &(0x7f0000005f40)=[{0x70, 0x112, 0x5, "88d02cbbe3a695d887bc962d85fb8448836a5bf5ced0bb13398cf4b0255a5157bc3d3d9676917dd4a6af560c549ab6ad30bba83daa5048d9f9d95668c13516236639d5f7a86e94c7e5ef7c18288765d31e8c9a5c8f10b19fe31c93d92175"}, {0x1010, 0x114, 0x2, "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"}, {0x10, 0x84, 0x17}, {0x50, 0x10e, 0x4, "e82d5ac492705ae9d266d9ade84e64ef884e0f7484261150262bd8242fde3f5298770dec19f2d996e1937efa914a74eef5e5249e977e8c8593c253fdb1d9361d"}], 0x10e0}}, {{&(0x7f00000071c0)=@xdp={0x2c, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000009800)=[{&(0x7f0000007240)="d0595198dbdf0aae4e4e54fe5ade380b9da8eede3bfdc48ff4f5cdbca757fb51b66fbf70b785c3b0e158bb277f067fa6bf4f533b5418ae452563ea1ffc33f992cc406367d99352a6b22fe06c3edd0e37edafb1c4f3a6c0b2e037d876a29beb186d26139084f9a5f7d051dba7d6b97321ab027ab00769da616c890360d0b5a7786ac5dffb0fac8cd661bd0fb9666b78eb42e69bf027f088d494b9876b22fb6f0a50f75a294c25", 0xa6}, {&(0x7f0000007300)="eaac9ab3ad19a67b630455e4c7337bf76b7a886ce9fb4b4f8c2aab85365c62b66e49d521b85ae21486af064beee5a8f03121cefab3fa831fc3f83eb62bb00ca849c222496a8d545f249c923fc47338a50818eeae3a41cd273f2d8eb0c8ffdd90d1c62ba724312e8baef2363eaf8219151430ed6e7af391bcc0e4ff303ec5d9afc2cf5751d391358c35ceeac70a5676e8a3499b8ca95460d6d6109f81f9f9198583f54ee32790f4408aaa933dee66ef1d553982802bce1abb4949dd8afa8c0dc0b17f15e8aaf63f729407c09db291ac252c778fd3a82c0a06a525975f496a73874c7ccfb160c8b6", 0xe7}, {&(0x7f0000007400)="6f24e3796edd8a077a6666517c82f4fcd5ab1d33f71d71fda0535bf01be18fa70b2e06119852a4e8ffaeb1c4ab63d860419094bff4e505e5c0adf00ac0149818fb066d63b72648dfa3bff31f34", 0x4d}, {&(0x7f0000007480)="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", 0xfc0}, {&(0x7f0000008480)="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", 0xfc0}, {&(0x7f0000009580)="c50556aa541459d0989d568c0fbdee719bd0a0b2d3f8e1a415baf871a472a6440f2f77cda934a0d7bc7ba3a7960ce74c91f0d29ce40a9c0764b40e46e4f7cf56829e242d3b3e423c07ba1b25fd99786e4a", 0x51}, {&(0x7f0000009600)="6e1b7c6aadf4ac75b5f4632ac9af648daa6db353d8497228d46a4d4d906df22c2198c5254f9d7f9bf18e6046d055b7a65a63c85c2ed138dbe683aa9951c58188e0562090946aefd6067f060ac5d880e8d24a8fe49df788283d14e1b86f9cb4c8a000"/109, 0x6d}, {&(0x7f0000009680)="3ad33b0002e8b17503611e941cf7a5c3b648fa8b069147772e84e0a54e281b28db59183e6a39424cc3e7e545d6348ef4aa5bb08bdfdc217778b6f7261d5aedce6e9f87270a2babe6df7bc57f487142a9c12fc4f5b794b24e1102e95f4ce5c547fb5b61cf88a76fdbb023f1696f6b638ce42bb4f7b58359eb2a1875df083fc937052dec62", 0x84}], 0x8, &(0x7f00000098c0)=[{0x90, 0x109, 0x8, "42bbbfbd65765fe1de7cfcd35af1427b034db1e0f03cab92bc24d38b850e786a8e57ef7af1c1cc2902a7bebaa8fbe8e76fc3650d7925b4ef287216ba7931b9ad7405bbe62f77698c04c9f407ca51dfd5f72c0085cf3ed3fd7a51dcbcd2d729bd6582ab9a9793069a505b903bd82c98370f029aeefe2b0a0e08f2a0a3"}, {0x88, 0x112, 0x6, "6c47ed0b1977c39fa6246eb435f79d2daf9c42db0c4086c4e8329df094c4c579663fc59007afbdc091c4dcd4b9c496125f72742ea463c2608bc0d9105bb33030a46ef5ceaa5d69f4c0efb31654480bb4ec1d1005f43ed4091ea4ec47e736c8272c1a1b023b473582e91de726d714f7bba79db38aa6"}, {0x58, 0x101, 0x9, "b18dced7ffc4d5fb000394a1d76ba2d1b5827bda64b71afbeb20fc70d4d9a31be561e86d3d7d141e57f8db2076fba06503aaa76b1eff490604df5cb23cdbfceab379a7"}, {0xd8, 0xff, 0xfff, "a543332e491715c6ba3d023514c3e82fad0630b9dd4950dfb48b9f06876501a5217766bbe6bf0c14fd8f4b0c31a8ed39d3fda935557d4994a9ec58f79b74a92a38e2fd13b6c9bb3c682d0f1187fb9860ab95e333f52d0525b666cc27fbd5f6c1b127fbcdd3a6f6b63552ef2431934f9ca84bcffb339408dd7cb6e723d3b8b22cadd1daa058f5c4a0cfed8bb8a9070debeac0aa36397fefd41c6a9faa84a3c77ca438963b84a793c09ab622b51c9097ecdbf1c18a1919476ffa1d7d5fb678d97d8fbdf9"}, {0xe0, 0xff, 0x71e, "b6a4545f9badeb73a933e63cc10dd7dc809881c9322612b92de6877858d2a55a18317d5967b2b800b509637c33f460fbf64dc219b29071a3f94dd7ba5a6039313fa1178d1f8b9218146c1ef271c056a5548091b5c756b4df37a40691c7548f044de0310eb6cea67bd7639cc431e59716ace9b722670f2bbd9a65d2876f0401aef32deac865959eb36869b2df505bf813b28851b50b1eea6aa7620063bb026f461d4162d4f96bde06b9d041ee503ba1578f48effe32c55595e98d8b14d1a290c5a11918c8ac726c87407511f9"}, {0x88, 0x109, 0x7ff, "98049d3d9b18678cf60a785bcc8c5650802b7bfe89d5552dfe3b6335b8be7c0acf85dd5670122b0aae342cefb46d9e6f828d2a03a493c53b81a3c1646590ebc07dc8d7d284a944a003adb29dcc6d6e473b16036f9f30e79d15bfce31e40e7cfd9a71d244a1ea8da3ac841b991976666da3fde27991"}, {0xb8, 0x103, 0x0, "8e0435698ec74b63718bb669fef3456bd23630802608c3f4f408f7879d2cb618ac7fb7bf4f010ce282ca2591ba13c74db8d8ef49d4dfc1c7a6f1265b33df7b5c59f06b9fc6a3388aa619e2422fff5bfe9ff6476887c8bda791bd83fd4993067fdc9504dc72963e747555387d457c7b5aff81418526897accc9a89e2dce9167afd5b44f8699f4053faa40fccd511a176b76dc652b981292da19b4f2d84c01c2428ca37050ac92"}, {0x68, 0x10d, 0xffff, "a739f56454c9f42b8a28bff692669363301a173f672ed6f4ed18f23392b1d870058213d9dcc8e69a82d9f75b17c7d2b7e0c9fc5ce45ea0e73431014668cc695d205685874ccc7a52a0e8dff2f35081f651004de3"}], 0x4d0}}], 0x9, 0x0) 912.460567ms ago: executing program 2 (id=4804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xea2930ad9e218d39}, 0x48) sendto$inet6(r0, &(0x7f00000003c0)="e6", 0x1, 0x24000045, &(0x7f0000000000)={0xa, 0x4e24, 0xffff, @private0={0xfc, 0x0, '\x00', 0x4}, 0x8}, 0x1c) close(0x3) socket$inet(0x2, 0x2, 0x9) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9f", 0x2c}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001680)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}]}}}], 0x18}}], 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000008400000000000000ff5ba622"], 0x18, 0x20000001}, 0x20008000) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x3}, 0x8) listen(r2, 0x0) close(r2) bind$inet(r1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) 895.572389ms ago: executing program 3 (id=4805): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@mcast1, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="bfa20000000007020000fcfeffff620200002a000000181100000000e0ca02ea27aad4f9467aab6353436f2b452ef2c93cf86f3461e0554e120223493a373eb3ba985b4c7a72b0d6bdffecf96f0bcedc1dce8d99668c8a0bee17af1ce58b507659f0263281676a1b8046afcdb312b5753a2928c9b4526798d94a1d20c137f318788bad60d1483c3bf3efbbb4faff5cc6d8aa402512579f05fdef0d76e069fba74ff8d9fa8c6d99f23255a9ebb5f57fc4c2db5cfb5de688dd7abf68f981145ff2672a8e", @ANYRES32=r2, @ANYBLOB="0000000000000000850000000a0000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000c2000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006117d00000000000a6070000000013009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000680)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 650.572446ms ago: executing program 3 (id=4806): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)='j\x00'/14, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x0) 583.929522ms ago: executing program 4 (id=4807): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x2, 0x29, 0xfffffff6}, {0x30, 0x10, 0x1, 0xfffffff7}, {0x6, 0xff, 0x6, 0x100005e}]}, 0x10) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x570}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}]}, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffd}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') 449.2241ms ago: executing program 3 (id=4808): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bde49c00dbdf2502feffff0700010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4002001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x2000c000) 322.713082ms ago: executing program 4 (id=4809): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b405000000000000611051000000000073019b00000000009500000000000000fd661937ce76b8"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611881000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 264.335248ms ago: executing program 1 (id=4810): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000005000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000000)={0x1, 0x8, 0x7}) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f00000001c0)={0xff, 0x3, 0x0, 0x2, 0x4}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [0xffffff00, 0x0, 0xffffff00, 0xffffff00], [0xff000000, 0xffffff00, 0xff, 0xff000000], 'vlan0\x00', 'erspan0\x00', {}, {}, 0x67, 0x5, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x200], 0x2, 0x2b, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @mcast2, [0xff000000, 0x0, 0xff, 0xffffffff], [0x0, 0x0, 0xff, 0xffffffff], 'wg2\x00', 'batadv0\x00', {0xff}, {}, 0x2c, 0x4, 0x3, 0x70}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffffffff, 0x1, 0x0, 0x0, 0xd, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xff, 0x28, "bc82316ff79b9118143c3b3350a2f9b5b5bcfd015f1b93f4518699593966"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) 193.9012ms ago: executing program 1 (id=4811): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000002c0)}}, {{&(0x7f00000003c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/59, 0x3b}, {&(0x7f0000000500)=""/35, 0x23}], 0x2, &(0x7f0000000580)=""/1, 0x1}, 0x1}, {{&(0x7f00000005c0)=@rc, 0x80, &(0x7f0000002040)=[{&(0x7f0000000640)=""/149, 0x95}, {&(0x7f0000000780)=""/126, 0x7e}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/175, 0xaf}, {&(0x7f0000001f00)}, {&(0x7f0000001f40)=""/107, 0x6b}, {&(0x7f0000001fc0)=""/33, 0x21}, {&(0x7f0000002000)=""/23, 0x17}], 0x8, &(0x7f00000020c0)=""/25, 0x19}, 0xef}], 0x3, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000140)=0x6568, 0x4) recvmmsg(r5, &(0x7f0000006040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006000)=""/5, 0xffffffffffffff9f}, 0x2}], 0x1, 0x40010042, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x2, 0xa, 0x45, 0x7}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x24, 0x12, 0x0, 0x101, 0x70bd27, 0x25dfdbfa, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x43}]}]}, 0x24}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000f1400042cbd7000fcdbdf25080001000100000008004500636d61000c00450072646d615f6303000000080001000100000021bada85d8d604a7b974981a932c87f42262d8e7c042f08aa0d11e266fef27c6948dfc6130dc86ff564e0d6998124d976fd72c"], 0x3c}, 0x1, 0x0, 0x0, 0x4884}, 0x811) 0s ago: executing program 4 (id=4812): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002d0007012bbd7000fedbdf25077c0000080001800400dd800c000380050002003b000000beccaac5888a5d5e4166869cdf83b30621387eaff7995b39c46825bfb1a65d109832c0d21ab3bf7461e73f55d247a52893a80147709501ea94709dc870053661374df3cd2bce4a3cc0060babc160c68bebee9f39efd5ee4170be95fce26e9aacf7469840fec1c503448a94f501a1511e74767c86063e85216a63c21846816e1be6a8c1718ac1e909fe97e497687c3667f0dd5ecd2e9db20729a1b904a45a2afda7989e9453feeac4868e22dd8148dfbe2159c6c239089f5a43589f"], 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) ioctl(r4, 0x8b1b, &(0x7f0000000040)) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x155}}]}}}]}, 0x58}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) kernel console output (not intermixed with test programs): er of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 561.065728][T19507] netlink: 'syz.1.3400': attribute type 2 has an invalid length. [ 561.065770][T19507] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3400'. [ 562.316187][T19464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.316425][T19462] netlink: 'syz.2.3388': attribute type 3 has an invalid length. [ 562.564647][T19515] bond2 (unregistering): Released all slaves [ 562.933107][T19528] syzkaller0: entered promiscuous mode [ 562.942899][T19528] syzkaller0: entered allmulticast mode [ 563.220480][T19546] bridge1: entered allmulticast mode [ 563.369557][T19555] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3408'. [ 563.383329][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.427938][ T5723] hid-generic 0005:0008:0009.001F: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 563.564432][T19561] fido_id[19561]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 567.634070][T19588] netlink: 'syz.4.3417': attribute type 11 has an invalid length. [ 567.814422][T19602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3420'. [ 567.845912][T19601] tipc: Started in network mode [ 567.853430][T19601] tipc: Node identity 124ce8ca80f, cluster identity 4711 [ 567.863960][T19601] tipc: Enabled bearer , priority 0 [ 567.878422][T19610] syzkaller0: entered promiscuous mode [ 567.878490][T19610] syzkaller0: entered allmulticast mode [ 567.976508][T19615] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3421'. [ 568.027258][T14244] IPVS: starting estimator thread 0... [ 568.122928][T19617] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 568.123210][T19635] IPVS: rr: FWM 3 0x00000003 - no destination available [ 568.139627][T19638] IPVS: using max 37 ests per chain, 88800 per kthread [ 568.802844][T19663] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 568.815403][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3429'. [ 568.910384][T13844] hid-generic 0005:0008:0009.0020: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 568.932610][T19674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3433'. [ 568.979683][T13844] tipc: Node number set to 2461853898 [ 569.051722][T19676] fido_id[19676]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 569.109712][T19680] netlink: 'syz.3.3432': attribute type 8 has an invalid length. [ 569.109765][T19680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3432'. [ 569.157926][T19680] veth1_to_team: entered promiscuous mode [ 569.171412][T19680] gretap0: entered promiscuous mode [ 569.295709][T19680] veth1_to_team: left promiscuous mode [ 569.325050][T19680] gretap0: left promiscuous mode [ 569.372265][T19600] tipc: Resetting bearer [ 569.519106][T19600] tipc: Disabling bearer [ 569.775881][T19700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 570.534808][ T7556] hid-generic 0005:0008:0009.0021: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 570.563009][T19726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3445'. [ 570.686166][T19725] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 570.692468][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3446'. [ 570.866448][T19728] fido_id[19728]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 570.998577][T19737] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3450'. [ 571.029813][T19743] netlink: 'syz.2.3453': attribute type 1 has an invalid length. [ 571.033115][T19743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3453'. [ 571.033145][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3453'. [ 571.192562][T19753] netlink: 'syz.1.3457': attribute type 1 has an invalid length. [ 571.286305][T19753] bond1: entered promiscuous mode [ 571.296290][T19753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.341960][T19757] tipc: Started in network mode [ 571.348050][T19757] tipc: Node identity , cluster identity 4711 [ 571.348095][T19757] tipc: Failed to set node id, please configure manually [ 571.348150][T19757] tipc: Enabling of bearer rejected, failed to enable media [ 571.436244][T19758] bond1: (slave bridge5): making interface the new active one [ 571.436319][T19758] bridge5: entered promiscuous mode [ 571.450392][T19758] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 571.673714][ T7556] hid-generic 0005:0008:0009.0022: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 571.858770][T19776] fido_id[19776]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 572.106629][T19784] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 572.800730][ T7539] hid-generic 0005:0008:0009.0023: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 572.825183][T19821] __nla_validate_parse: 8 callbacks suppressed [ 572.825492][T19821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3472'. [ 572.937129][T19823] fido_id[19823]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 573.364645][T19838] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 573.380271][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3477'. [ 573.654968][T19846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.703097][T19833] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.703755][T19833] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.808882][T19833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.836545][T19854] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 576.845166][T19833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.905267][T19833] veth1_vlan: left allmulticast mode [ 576.959128][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 576.959183][T19855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3480'. [ 576.962511][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 577.099652][T14270] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.099731][T14270] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.099773][T14270] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.099804][T14270] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.351647][ T5723] hid-generic 0005:0008:0009.0024: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 577.374386][T19869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3485'. [ 577.531834][T19876] fido_id[19876]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 578.155375][T19898] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 578.175009][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3492'. [ 578.427778][ T7556] hid-generic 0005:0008:0009.0025: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 578.464213][T19923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3497'. [ 578.674796][T19925] fido_id[19925]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 578.715957][T19935] syzkaller0: entered promiscuous mode [ 578.716006][T19935] syzkaller0: entered allmulticast mode [ 578.921248][T19952] netlink: 'syz.4.3502': attribute type 10 has an invalid length. [ 579.025921][T19956] vxcan0: tx address claim with dest, not broadcast [ 579.071333][T19952] team0: Port device dummy0 added [ 579.282285][T19967] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 579.291713][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'. [ 579.316066][T19969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3507'. [ 579.378515][ T5014] hid-generic 0005:0008:0009.0026: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 579.420310][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3508'. [ 579.594152][T19976] fido_id[19976]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 579.650810][T19987] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3514'. [ 579.938881][T20003] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3517'. [ 579.991107][T20003] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3517'. [ 580.023993][T20008] netlink: 'syz.3.3519': attribute type 4 has an invalid length. [ 580.038449][T20008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3519'. [ 580.276122][T20013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3523'. [ 580.633791][T20021] bond2: entered promiscuous mode [ 580.634284][T20021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.355524][ T5014] hid-generic 0005:0008:0009.0027: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 581.381618][T20057] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 581.491134][T20060] fido_id[20060]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 582.520916][T20113] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 582.604412][T13844] hid-generic 0005:0008:0009.0028: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 582.698275][T20120] fido_id[20120]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 582.794277][T20122] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 582.973989][T20130] pim6reg1: entered promiscuous mode [ 582.974045][T20130] pim6reg1: entered allmulticast mode [ 583.247132][T20146] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 583.260404][T20144] __nla_validate_parse: 6 callbacks suppressed [ 583.260424][T20144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3556'. [ 583.616214][T20154] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 583.626644][T20154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3560'. [ 583.753909][ T5809] hid-generic 0005:0008:0009.0029: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 583.768760][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3561'. [ 583.772245][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 583.992351][T20164] fido_id[20164]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 584.117448][T20173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3565'. [ 584.117783][T20173] 8021q: VLANs not supported on vxcan0 [ 584.377191][T20191] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 584.378258][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3574'. [ 584.538667][ T5809] hid-generic 0005:0008:0009.002A: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 584.547693][T20199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3577'. [ 584.656437][T20206] fido_id[20206]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 584.765089][T20214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3581'. [ 584.909854][T20217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3583'. [ 585.047847][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3586'. [ 585.167789][T20226] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 585.252800][T20231] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 585.317020][ T5014] hid-generic 0005:0008:0009.002B: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 585.506144][T20237] fido_id[20237]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 585.590228][T20239] Unknown options in mask 6 [ 585.784335][T20248] macvlan0: entered promiscuous mode [ 586.279862][T20273] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 586.324355][ T7539] hid-generic 0005:0008:0009.002C: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 586.431202][T20281] fido_id[20281]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 586.562022][ T202] IPVS: starting estimator thread 0... [ 586.572089][T20290] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20004 [ 586.649362][T20291] IPVS: using max 25 ests per chain, 60000 per kthread [ 587.113899][T20313] netlink: 'syz.3.3616': attribute type 10 has an invalid length. [ 587.121485][T20307] sctp: [Deprecated]: syz.4.3615 (pid 20307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.121485][T20307] Use struct sctp_sack_info instead [ 587.145542][T20313] bridge0: port 3(team0) entered disabled state [ 587.167872][T20313] team0 (unregistering): left allmulticast mode [ 587.176115][T20313] team_slave_1: left allmulticast mode [ 587.182157][T20313] team0 (unregistering): left promiscuous mode [ 587.188568][T20313] team_slave_1: left promiscuous mode [ 587.194729][T20313] bridge0: port 3(team0) entered disabled state [ 587.302038][ T5809] hid-generic 0005:0008:0009.002D: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 587.328657][T20313] team0 (unregistering): Port device team_slave_1 removed [ 587.411399][T20322] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 587.556923][T20324] fido_id[20324]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 587.706862][T20330] syzkaller0: entered promiscuous mode [ 587.706912][T20330] syzkaller0: entered allmulticast mode [ 587.773820][T20338] netlink: 'syz.4.3621': attribute type 1 has an invalid length. [ 587.791130][T20329] netlink: 'syz.0.3620': attribute type 12 has an invalid length. [ 588.028722][T20352] netlink: 'syz.4.3623': attribute type 6 has an invalid length. [ 588.041418][T20352] netlink: 'syz.4.3623': attribute type 5 has an invalid length. [ 588.347466][ T5809] hid-generic 0005:0008:0009.002E: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 588.402974][T20366] __nla_validate_parse: 15 callbacks suppressed [ 588.403055][T20366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'. [ 588.464457][T20370] fido_id[20370]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 588.505001][T20376] netlink: 'syz.1.3632': attribute type 1 has an invalid length. [ 588.580148][T20376] bond2: entered promiscuous mode [ 588.580685][T20376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 588.595957][T20375] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 588.596620][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3631'. [ 588.632941][T20381] ipvlan2: entered allmulticast mode [ 588.633000][T20381] bond2: entered allmulticast mode [ 588.679422][T20376] ipvlan3: entered allmulticast mode [ 588.731274][T20376] bond2: (slave bridge6): making interface the new active one [ 588.741487][T20376] bridge6: entered promiscuous mode [ 588.744668][T20384] IPv6: NLM_F_REPLACE set, but no existing node found! [ 588.755801][T20376] bridge6: entered allmulticast mode [ 588.764065][T20376] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 588.911397][T20393] vlan2: entered allmulticast mode [ 589.333916][T20419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3644'. [ 589.334307][ T7549] hid-generic 0005:0008:0009.002F: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 589.407735][T20423] netlink: 'syz.4.3647': attribute type 39 has an invalid length. [ 589.474680][T20420] fido_id[20420]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 589.503272][T20427] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 589.512901][T20427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'. [ 589.660784][T20431] Bluetooth: hci0: unsupported parameter 5135 [ 589.667672][T20431] Bluetooth: hci0: unsupported parameter 8192 [ 589.674787][T20431] Bluetooth: hci0: unsupported parameter 5135 [ 589.681598][T20431] Bluetooth: hci0: unsupported parameter 8192 [ 589.918223][T20399] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 590.476836][T13844] hid-generic 0005:0008:0009.0030: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 590.504584][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3658'. [ 590.581555][T20475] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 590.591856][T20475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 590.606332][T20437] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 590.667385][T20472] fido_id[20472]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 590.694499][T20479] nftables ruleset with unbound chain [ 590.759707][T20483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3663'. [ 591.288235][T13844] hid-generic 0005:0008:0009.0031: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 591.368619][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3672'. [ 591.482693][T20510] fido_id[20510]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 591.610427][T20522] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 591.611412][T20522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3678'. [ 591.997465][T20497] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 592.101416][ T25] hid-generic 0005:0008:0009.0032: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 592.108158][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3686'. [ 592.232683][T20550] fido_id[20550]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 592.437495][T20556] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 592.442531][T20553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 592.496549][T20556] netlink: 'syz.2.3688': attribute type 1 has an invalid length. [ 592.614355][T20564] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 592.690696][T20530] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 593.016284][ T7549] hid-generic 0005:0008:0009.0033: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 593.171346][T20593] tipc: Started in network mode [ 593.176496][T20593] tipc: Node identity 96d142138a3, cluster identity 4711 [ 593.184090][T20593] tipc: Enabled bearer , priority 0 [ 593.254572][T20587] fido_id[20587]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 593.309072][T20592] tipc: Disabling bearer [ 593.428130][T20602] FAULT_INJECTION: forcing a failure. [ 593.428130][T20602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.428196][T20602] CPU: 1 UID: 0 PID: 20602 Comm: syz.1.3703 Not tainted syzkaller #0 PREEMPT(full) [ 593.428219][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 593.428231][T20602] Call Trace: [ 593.428238][T20602] [ 593.428245][T20602] dump_stack_lvl+0xe8/0x150 [ 593.428279][T20602] should_fail_ex+0x410/0x560 [ 593.428316][T20602] _copy_from_user+0x2d/0xb0 [ 593.428337][T20602] ___sys_sendmsg+0x1c6/0x360 [ 593.428362][T20602] ? __lock_acquire+0x6df/0x2e50 [ 593.428388][T20602] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.428442][T20602] ? __fget_files+0x2a/0x420 [ 593.428476][T20602] ? __fget_files+0x3a2/0x420 [ 593.428510][T20602] __x64_sys_sendmsg+0x1b1/0x290 [ 593.428533][T20602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 593.428573][T20602] do_syscall_64+0x166/0x520 [ 593.428602][T20602] ? trace_irq_disable+0x3b/0x140 [ 593.428621][T20602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.428641][T20602] ? clear_bhb_loop+0x70/0xc0 [ 593.428665][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.428684][T20602] RIP: 0033:0x7f1199f9e159 [ 593.428703][T20602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.428718][T20602] RSP: 002b:00007f119ae1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.428740][T20602] RAX: ffffffffffffffda RBX: 00007f119a225fa0 RCX: 00007f1199f9e159 [ 593.428754][T20602] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 593.428766][T20602] RBP: 00007f119ae1e090 R08: 0000000000000000 R09: 0000000000000000 [ 593.428778][T20602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.428793][T20602] R13: 00007f119a226038 R14: 00007f119a225fa0 R15: 00007ffd94909bd8 [ 593.428824][T20602] [ 593.501496][T20608] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 593.502202][T20608] __nla_validate_parse: 4 callbacks suppressed [ 593.502218][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3705'. [ 593.529358][T20604] tipc: Started in network mode [ 593.529388][T20604] tipc: Node identity 8a3955784f3, cluster identity 4711 [ 593.529598][T20604] tipc: Enabled bearer , priority 0 [ 593.618355][T20603] tipc: Disabling bearer [ 593.827507][T20617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3709'. [ 593.952310][ T7549] hid-generic 0005:0008:0009.0034: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 593.997982][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3711'. [ 594.052960][T20594] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 594.089506][T20634] fido_id[20634]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 594.161245][T20641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3717'. [ 594.163178][T20641] netlink: 'syz.2.3717': attribute type 1 has an invalid length. [ 594.291796][T20641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 594.393542][T20649] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 594.402489][T20649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3718'. [ 594.405070][T20651] tipc: Enabled bearer , priority 0 [ 594.433876][T20650] tipc: Disabling bearer [ 594.518219][T20653] FAULT_INJECTION: forcing a failure. [ 594.518219][T20653] name failslab, interval 1, probability 0, space 0, times 0 [ 594.518259][T20653] CPU: 1 UID: 0 PID: 20653 Comm: syz.3.3720 Not tainted syzkaller #0 PREEMPT(full) [ 594.518283][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 594.518294][T20653] Call Trace: [ 594.518303][T20653] [ 594.518311][T20653] dump_stack_lvl+0xe8/0x150 [ 594.518342][T20653] should_fail_ex+0x410/0x560 [ 594.518376][T20653] ? __alloc_skb+0x1db/0x7a0 [ 594.518403][T20653] should_failslab+0xa8/0x100 [ 594.518436][T20653] ? __alloc_skb+0x1db/0x7a0 [ 594.518459][T20653] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 594.518487][T20653] ? __alloc_skb+0x18d/0x7a0 [ 594.518513][T20653] ? __alloc_skb+0x1db/0x7a0 [ 594.518544][T20653] __alloc_skb+0x1db/0x7a0 [ 594.518574][T20653] netlink_sendmsg+0x5d4/0xb40 [ 594.518608][T20653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.518638][T20653] ? apparmor_socket_sendmsg+0x98/0x360 [ 594.518669][T20653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.518691][T20653] sock_sendmsg_nosec+0x13a/0x180 [ 594.518718][T20653] ____sys_sendmsg+0x54e/0x850 [ 594.518743][T20653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.518772][T20653] ? import_iovec+0x73/0xa0 [ 594.518795][T20653] ___sys_sendmsg+0x2a5/0x360 [ 594.518813][T20653] ? __lock_acquire+0x6df/0x2e50 [ 594.518836][T20653] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.518889][T20653] ? __fget_files+0x2a/0x420 [ 594.518912][T20653] ? __fget_files+0x3a2/0x420 [ 594.518944][T20653] __x64_sys_sendmsg+0x1b1/0x290 [ 594.518966][T20653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 594.519006][T20653] do_syscall_64+0x166/0x520 [ 594.519032][T20653] ? trace_irq_disable+0x3b/0x140 [ 594.519050][T20653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.519069][T20653] ? clear_bhb_loop+0x70/0xc0 [ 594.519092][T20653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.519110][T20653] RIP: 0033:0x7f6f8dd9e159 [ 594.519129][T20653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.519145][T20653] RSP: 002b:00007f6f8ec31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.519166][T20653] RAX: ffffffffffffffda RBX: 00007f6f8e025fa0 RCX: 00007f6f8dd9e159 [ 594.519179][T20653] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 594.519191][T20653] RBP: 00007f6f8ec31090 R08: 0000000000000000 R09: 0000000000000000 [ 594.519202][T20653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.519213][T20653] R13: 00007f6f8e026038 R14: 00007f6f8e025fa0 R15: 00007fff61780388 [ 594.519243][T20653] [ 594.643382][T20655] netlink: 'syz.2.3721': attribute type 32 has an invalid length. [ 594.643406][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3721'. [ 594.727602][T20655] bond4: Setting coupled_control to off (0) [ 594.731030][T20657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3721'. [ 594.770619][T20655] netlink: 'syz.2.3721': attribute type 1 has an invalid length. [ 594.837793][T20659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3721'. [ 594.837881][T20657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3721'. [ 595.163621][ T5809] hid-generic 0005:0008:0009.0035: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 595.185566][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3726'. [ 595.367964][T20687] fido_id[20687]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 595.457429][T20689] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 595.584441][T20695] tipc: Enabled bearer , priority 0 [ 595.632842][T20694] tipc: Disabling bearer [ 596.046310][ T5809] hid-generic 0005:0008:0009.0036: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 596.183335][T20690] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 596.242055][T20728] fido_id[20728]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 596.564928][T20726] geneve3: entered promiscuous mode [ 596.564982][T20726] geneve3: entered allmulticast mode [ 596.675619][T20741] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 596.677415][T20743] ip6gretap2: entered allmulticast mode [ 596.682934][T20743] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 596.683746][T20743] batman_adv: batadv0: Adding interface: ip6gretap2 [ 596.683760][T20743] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.683790][T20743] batman_adv: batadv0: Interface activated: ip6gretap2 [ 597.083040][T20759] FAULT_INJECTION: forcing a failure. [ 597.083040][T20759] name failslab, interval 1, probability 0, space 0, times 0 [ 597.096818][T20759] CPU: 0 UID: 0 PID: 20759 Comm: syz.4.3751 Not tainted syzkaller #0 PREEMPT(full) [ 597.096848][T20759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.096861][T20759] Call Trace: [ 597.096870][T20759] [ 597.096879][T20759] dump_stack_lvl+0xe8/0x150 [ 597.096923][T20759] should_fail_ex+0x410/0x560 [ 597.096961][T20759] should_failslab+0xa8/0x100 [ 597.096985][T20759] ? skb_clone+0x212/0x3a0 [ 597.097010][T20759] kmem_cache_alloc_noprof+0xa1/0x600 [ 597.097043][T20759] ? skb_clone+0x212/0x3a0 [ 597.097073][T20759] skb_clone+0x212/0x3a0 [ 597.097100][T20759] __netlink_deliver_tap+0x413/0x860 [ 597.097140][T20759] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.097167][T20759] netlink_deliver_tap+0x19c/0x1b0 [ 597.097194][T20759] netlink_unicast+0x781/0x940 [ 597.097236][T20759] netlink_sendmsg+0x813/0xb40 [ 597.097273][T20759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.097307][T20759] ? apparmor_socket_sendmsg+0x98/0x360 [ 597.097341][T20759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.097365][T20759] sock_sendmsg_nosec+0x13a/0x180 [ 597.097397][T20759] ____sys_sendmsg+0x54e/0x850 [ 597.097425][T20759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.097457][T20759] ? import_iovec+0x73/0xa0 [ 597.097489][T20759] ___sys_sendmsg+0x2a5/0x360 [ 597.097510][T20759] ? __lock_acquire+0x6df/0x2e50 [ 597.097537][T20759] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.097598][T20759] ? __fget_files+0x2a/0x420 [ 597.097624][T20759] ? __fget_files+0x3a2/0x420 [ 597.097662][T20759] __x64_sys_sendmsg+0x1b1/0x290 [ 597.097687][T20759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.097734][T20759] do_syscall_64+0x166/0x520 [ 597.097763][T20759] ? trace_irq_disable+0x3b/0x140 [ 597.097783][T20759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.097803][T20759] ? clear_bhb_loop+0x70/0xc0 [ 597.097829][T20759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.097848][T20759] RIP: 0033:0x7f577819e159 [ 597.097870][T20759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.097887][T20759] RSP: 002b:00007f57790a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.097922][T20759] RAX: ffffffffffffffda RBX: 00007f5778425fa0 RCX: 00007f577819e159 [ 597.097937][T20759] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 597.097950][T20759] RBP: 00007f57790a2090 R08: 0000000000000000 R09: 0000000000000000 [ 597.097964][T20759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.097977][T20759] R13: 00007f5778426038 R14: 00007f5778425fa0 R15: 00007ffd0d53de28 [ 597.098011][T20759] [ 597.183633][T20759] tipc: Enabled bearer , priority 0 [ 597.258779][ T25] hid-generic 0005:0008:0009.0037: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 597.392401][T20758] tipc: Disabling bearer [ 597.452401][T20777] fido_id[20777]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 597.661227][T20779] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 597.727534][T20792] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 597.939539][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 598.220849][T20810] IPVS: Error connecting to the multicast addr [ 598.354054][ T7549] hid-generic 0005:0008:0009.0038: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 598.465987][T20784] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 598.496625][T20818] fido_id[20818]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 598.613535][ T25] hid-generic 0005:0008:0009.0039: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 598.655905][T20823] __nla_validate_parse: 11 callbacks suppressed [ 598.656200][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3772'. [ 598.695884][T20831] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 598.719897][T20831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3773'. [ 598.735932][ T25] hid-generic 0005:0008:0009.003A: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 598.771155][T20830] fido_id[20830]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 598.795616][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3774'. [ 598.914530][T20837] fido_id[20837]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 599.043807][T20843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3778'. [ 599.104868][T20846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3777'. [ 599.204883][T20843] team0: Port device dummy0 removed [ 599.219051][T20843] bridge_slave_0: left allmulticast mode [ 599.222203][T20843] bridge_slave_0: left promiscuous mode [ 599.222455][T20843] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.259662][T20843] bridge_slave_1: left allmulticast mode [ 599.262664][T20853] netlink: 'syz.4.3781': attribute type 1 has an invalid length. [ 599.273692][T20843] bridge_slave_1: left promiscuous mode [ 599.273965][T20843] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.295985][T20843] bond0: (slave bond_slave_0): Releasing backup interface [ 599.318049][T20843] bond0: (slave bond_slave_1): Releasing backup interface [ 599.370804][T20843] team0: Port device team_slave_0 removed [ 599.398673][T20843] team0: Port device team_slave_1 removed [ 599.403245][T20843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.403270][T20843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.444933][T20843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.444986][T20843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.557050][T20843] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 599.651305][T20853] bond2: entered promiscuous mode [ 599.651766][T20853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.686816][T20854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.690132][T20854] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 599.690155][T20854] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 599.714680][T20854] bond2: (slave gre1): making interface the new active one [ 599.714706][T20854] gre1: entered promiscuous mode [ 599.722701][T20854] bond2: (slave gre1): Enslaving as an active interface with an up link [ 599.907382][T20839] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 600.525735][T20883] tipc: Enabled bearer , priority 0 [ 600.534672][T20882] tipc: Disabling bearer [ 600.647778][ T7549] hid-generic 0005:0008:0009.003B: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 600.674675][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3787'. [ 600.848369][T20900] fido_id[20900]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 600.881222][T13844] hid-generic 0005:0008:0009.003C: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 600.916222][T20904] FAULT_INJECTION: forcing a failure. [ 600.916222][T20904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.916283][T20904] CPU: 1 UID: 0 PID: 20904 Comm: syz.2.3790 Not tainted syzkaller #0 PREEMPT(full) [ 600.916307][T20904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.916317][T20904] Call Trace: [ 600.916324][T20904] [ 600.916331][T20904] dump_stack_lvl+0xe8/0x150 [ 600.916363][T20904] should_fail_ex+0x410/0x560 [ 600.916396][T20904] _copy_to_user+0x31/0xb0 [ 600.916419][T20904] simple_read_from_buffer+0xe1/0x170 [ 600.916448][T20904] proc_fail_nth_read+0x1bb/0x230 [ 600.916501][T20904] ? common_file_perm+0x20e/0x2b0 [ 600.916573][T20904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 600.916603][T20904] ? rw_verify_area+0x24a/0x4c0 [ 600.916629][T20904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 600.916654][T20904] vfs_read+0x213/0xa80 [ 600.916684][T20904] ? __pfx___mutex_lock+0x10/0x10 [ 600.916712][T20904] ? __pfx_vfs_read+0x10/0x10 [ 600.916738][T20904] ? __fget_files+0x2a/0x420 [ 600.916765][T20904] ? __fget_files+0x3a2/0x420 [ 600.916786][T20904] ? __fget_files+0x2a/0x420 [ 600.916817][T20904] ksys_read+0x150/0x270 [ 600.916845][T20904] ? __pfx_ksys_read+0x10/0x10 [ 600.916880][T20904] do_syscall_64+0x166/0x520 [ 600.916905][T20904] ? trace_irq_disable+0x3b/0x140 [ 600.916923][T20904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.916942][T20904] ? clear_bhb_loop+0x70/0xc0 [ 600.916964][T20904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.916982][T20904] RIP: 0033:0x7fd8aef5e98e [ 600.917000][T20904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 600.917016][T20904] RSP: 002b:00007fd8afd87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 600.917037][T20904] RAX: ffffffffffffffda RBX: 00007fd8afd886c0 RCX: 00007fd8aef5e98e [ 600.917051][T20904] RDX: 000000000000000f RSI: 00007fd8afd880a0 RDI: 0000000000000009 [ 600.917070][T20904] RBP: 00007fd8afd88090 R08: 0000000000000000 R09: 0000000000000000 [ 600.917082][T20904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.917093][T20904] R13: 00007fd8af226038 R14: 00007fd8af225fa0 R15: 00007ffedcf62578 [ 600.917125][T20904] [ 600.969992][T20907] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 600.975535][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3789'. [ 601.142533][ T7542] hid-generic 0005:0008:0009.003D: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 601.188700][T20910] fido_id[20910]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 601.308155][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 601.325144][T20917] fido_id[20917]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 601.927576][T20932] vxcan3: entered promiscuous mode [ 601.977903][T20913] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 602.217566][T13844] hid-generic 0005:0008:0009.003E: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 602.261590][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3801'. [ 602.313634][T20945] fido_id[20945]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 602.345847][T20939] tipc: Enabled bearer , priority 0 [ 602.422225][T20938] tipc: Disabling bearer [ 602.423415][T20951] netlink: 'syz.4.3802': attribute type 13 has an invalid length. [ 602.592663][T20957] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 602.609737][T20953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3804'. [ 602.646131][T20959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.761198][ T32] audit: type=1804 audit(1789029202.561:6): pid=20968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3808" name="/newroot/111/cgroup.controllers" dev="tmpfs" ino=575 res=1 errno=0 [ 602.786581][ T32] audit: type=1800 audit(1789029202.601:7): pid=20968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3808" name="cgroup.controllers" dev="tmpfs" ino=575 res=0 errno=0 [ 603.005243][T20975] openvswitch: netlink: IP tunnel dst address not specified [ 603.162718][T20983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3814'. [ 603.181656][T20982] tipc: Enabled bearer , priority 0 [ 603.258931][T20982] tipc: Disabling bearer [ 603.442418][T20998] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 603.712353][T21012] vlan2: entered promiscuous mode [ 603.722008][T21012] hsr0: entered promiscuous mode [ 603.722492][T21012] vlan2: entered allmulticast mode [ 603.722508][T21012] hsr0: entered allmulticast mode [ 603.722520][T21012] hsr_slave_0: entered allmulticast mode [ 603.722535][T21012] hsr_slave_1: entered allmulticast mode [ 603.770497][T21012] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 603.963169][T21021] __nla_validate_parse: 1 callbacks suppressed [ 603.963230][T21021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3825'. [ 603.963248][T21021] openvswitch: netlink: Flow key attr not present in new flow. [ 604.136070][T21017] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3823'. [ 604.151500][T21028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3828'. [ 604.151573][T21028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3828'. [ 604.307228][T13844] hid-generic 0005:0008:0009.003F: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 604.356943][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3829'. [ 604.512199][T21034] fido_id[21034]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 604.642045][T21039] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 604.642670][T21039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3832'. [ 604.958470][T21046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3835'. [ 605.107119][T21052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3838'. [ 605.253423][T21061] tap0: tun_chr_ioctl cmd 2148553947 [ 605.442002][T21076] FAULT_INJECTION: forcing a failure. [ 605.442002][T21076] name failslab, interval 1, probability 0, space 0, times 0 [ 605.442079][T21076] CPU: 0 UID: 0 PID: 21076 Comm: syz.4.3843 Not tainted syzkaller #0 PREEMPT(full) [ 605.442103][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.442114][T21076] Call Trace: [ 605.442121][T21076] [ 605.442128][T21076] dump_stack_lvl+0xe8/0x150 [ 605.442159][T21076] should_fail_ex+0x410/0x560 [ 605.442190][T21076] ? __alloc_skb+0x1db/0x7a0 [ 605.442216][T21076] should_failslab+0xa8/0x100 [ 605.442240][T21076] ? __alloc_skb+0x1db/0x7a0 [ 605.442263][T21076] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 605.442289][T21076] ? __alloc_skb+0x18d/0x7a0 [ 605.442315][T21076] ? __alloc_skb+0x1db/0x7a0 [ 605.442348][T21076] __alloc_skb+0x1db/0x7a0 [ 605.442377][T21076] tipc_nl_compat_doit+0x1f9/0x650 [ 605.442497][T21076] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 605.442532][T21076] ? bpf_lsm_capable+0x9/0x20 [ 605.442560][T21076] ? security_capable+0x7e/0x2c0 [ 605.442588][T21076] tipc_nl_compat_recv+0x8d3/0xcf0 [ 605.442613][T21076] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 605.442637][T21076] ? __mutex_trylock_common+0x15f/0x270 [ 605.442662][T21076] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 605.442725][T21076] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 605.442746][T21076] ? __pfx___mutex_trylock_common+0x10/0x10 [ 605.442777][T21076] ? trace_contention_end+0x3d/0x140 [ 605.442799][T21076] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 605.442836][T21076] genl_family_rcv_msg_doit+0x233/0x340 [ 605.442869][T21076] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 605.442907][T21076] ? __dev_queue_xmit+0x29b/0x3820 [ 605.442966][T21076] genl_rcv_msg+0x614/0x7a0 [ 605.442999][T21076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.443034][T21076] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 605.443057][T21076] ? __pfx_ref_tracker_free+0x10/0x10 [ 605.443089][T21076] netlink_rcv_skb+0x226/0x4a0 [ 605.443112][T21076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.443140][T21076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.443179][T21076] ? down_read+0x2be/0x330 [ 605.443203][T21076] genl_rcv+0x28/0x40 [ 605.443227][T21076] netlink_unicast+0x7bd/0x940 [ 605.443259][T21076] netlink_sendmsg+0x813/0xb40 [ 605.443292][T21076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.443324][T21076] ? apparmor_socket_sendmsg+0x98/0x360 [ 605.443354][T21076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.443375][T21076] sock_sendmsg_nosec+0x13a/0x180 [ 605.443404][T21076] ____sys_sendmsg+0x54e/0x850 [ 605.443430][T21076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.443460][T21076] ? import_iovec+0x73/0xa0 [ 605.443485][T21076] ___sys_sendmsg+0x2a5/0x360 [ 605.443504][T21076] ? __lock_acquire+0x6df/0x2e50 [ 605.443527][T21076] ? __pfx____sys_sendmsg+0x10/0x10 [ 605.443586][T21076] ? __fget_files+0x2a/0x420 [ 605.443609][T21076] ? __fget_files+0x3a2/0x420 [ 605.443643][T21076] __x64_sys_sendmsg+0x1b1/0x290 [ 605.443666][T21076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 605.443709][T21076] do_syscall_64+0x166/0x520 [ 605.443735][T21076] ? trace_irq_disable+0x3b/0x140 [ 605.443753][T21076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.443772][T21076] ? clear_bhb_loop+0x70/0xc0 [ 605.443796][T21076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.443815][T21076] RIP: 0033:0x7f577819e159 [ 605.443834][T21076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.443851][T21076] RSP: 002b:00007f57790a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.443872][T21076] RAX: ffffffffffffffda RBX: 00007f5778425fa0 RCX: 00007f577819e159 [ 605.443887][T21076] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 605.443899][T21076] RBP: 00007f57790a2090 R08: 0000000000000000 R09: 0000000000000000 [ 605.443911][T21076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.443923][T21076] R13: 00007f5778426038 R14: 00007f5778425fa0 R15: 00007ffd0d53de28 [ 605.443955][T21076] [ 605.711692][T21084] netlink: 'syz.2.3846': attribute type 3 has an invalid length. [ 605.797728][T21086] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3847'. [ 605.891337][T21090] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 605.891972][T21090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3845'. [ 606.144022][T21101] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 606.220998][ T5809] hid-generic 0005:0008:0009.0040: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 606.325025][T21107] fido_id[21107]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 606.643941][T21092] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 606.932324][T21128] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 606.945357][T21128] bond2 (unregistering): Released all slaves [ 607.027777][T21137] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 607.193300][T21145] netlink: 'syz.2.3862': attribute type 1 has an invalid length. [ 607.271222][T21149] syzkaller1: entered promiscuous mode [ 607.271273][T21149] syzkaller1: entered allmulticast mode [ 607.398866][T21153] tc_dump_action: action bad kind [ 607.910508][T21167] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 608.102178][T21176] netlink: NAT attribute has 4 unknown bytes [ 608.102242][T21176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.305705][T21182] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 608.612830][ T7542] hid-generic 0005:0008:0009.0041: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 608.652554][T21200] pim6reg: entered allmulticast mode [ 608.658634][T21200] pim6reg: left allmulticast mode [ 608.765373][T21208] fido_id[21208]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 609.204693][T21219] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 609.411433][T21247] __nla_validate_parse: 8 callbacks suppressed [ 609.418300][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3889'. [ 609.421122][T21248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3889'. [ 609.497371][T21255] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 609.503798][T21255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3888'. [ 609.647031][T21238] IPv6: NLM_F_CREATE should be specified when creating new route [ 609.647156][T21238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 609.647185][T21238] IPv6: NLM_F_CREATE should be set when creating new route [ 609.647233][T21238] IPv6: NLM_F_CREATE should be set when creating new route [ 609.647261][T21238] IPv6: NLM_F_CREATE should be set when creating new route [ 609.686639][T21238] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3889'. [ 609.961904][T21257] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 609.980514][T21270] netlink: 5848 bytes leftover after parsing attributes in process `syz.2.3895'. [ 609.986001][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3894'. [ 610.156494][T21273] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 610.169356][T21273] bridge1: entered allmulticast mode [ 610.303204][T21281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3899'. [ 610.556690][T21297] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 610.557260][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3905'. [ 610.582338][T21299] netlink: 'syz.1.3906': attribute type 83 has an invalid length. [ 610.595320][T21291] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 610.761509][T21305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3909'. [ 611.539525][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 611.610218][T13844] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 611.676436][T21326] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3911'. [ 611.721809][T21322] netlink: 'syz.4.3913': attribute type 5 has an invalid length. [ 612.370407][T21363] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 612.579625][T13844] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 612.592186][T14245] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 612.615492][T21368] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 612.618911][T21368] x_tables: duplicate underflow at hook 3 [ 612.796409][T21380] xt_l2tp: v2 doesn't support IP mode [ 612.967929][T21388] syzkaller0: entered promiscuous mode [ 612.967984][T21388] syzkaller0: entered allmulticast mode [ 613.191032][T21375] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 613.490233][T21409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.855148][T14269] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 615.857384][T14269] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 615.858245][T21395] veth0: entered promiscuous mode [ 615.858452][T21395] veth0: left promiscuous mode [ 616.105903][T21417] tipc: Enabled bearer , priority 0 [ 616.151309][T21416] tipc: Disabling bearer [ 616.228594][T21425] __nla_validate_parse: 2 callbacks suppressed [ 616.232441][T21423] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 616.236338][T21423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3933'. [ 616.256186][T21425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3936'. [ 616.268878][T21425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3936'. [ 616.659641][T13844] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 616.872719][T21465] netlink: 'syz.1.3946': attribute type 12 has an invalid length. [ 617.120613][T21473] tipc: Enabled bearer , priority 0 [ 617.175505][T21472] tipc: Disabling bearer [ 617.335131][T21480] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 617.336648][T21480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3951'. [ 617.668079][T21489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3954'. [ 617.668190][T21489] netlink: 'syz.1.3954': attribute type 8 has an invalid length. [ 617.668206][T21489] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3954'. [ 617.683982][T21489] tipc: Enabled bearer , priority 0 [ 617.727954][T21487] tipc: Disabling bearer [ 617.790113][T21467] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 617.797427][T21499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3957'. [ 618.116785][T21508] netlink: 'syz.0.3959': attribute type 2 has an invalid length. [ 618.422539][T21513] block nbd4: server does not support multiple connections per device. [ 618.448150][T21513] block nbd4: shutting down sockets [ 618.554208][T21500] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3957'. [ 618.804216][T21524] tipc: Enabled bearer , priority 0 [ 618.896202][T21523] tipc: Disabling bearer [ 618.952098][T21528] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 618.959562][T21528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3965'. [ 619.032849][T21536] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3968'. [ 619.270334][T21538] FAULT_INJECTION: forcing a failure. [ 619.270334][T21538] name failslab, interval 1, probability 0, space 0, times 0 [ 619.270393][T21538] CPU: 0 UID: 0 PID: 21538 Comm: syz.2.3970 Not tainted syzkaller #0 PREEMPT(full) [ 619.270418][T21538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 619.270431][T21538] Call Trace: [ 619.270439][T21538] [ 619.270448][T21538] dump_stack_lvl+0xe8/0x150 [ 619.270490][T21538] should_fail_ex+0x410/0x560 [ 619.270529][T21538] should_failslab+0xa8/0x100 [ 619.270557][T21538] __kmalloc_cache_noprof+0xa3/0x600 [ 619.270590][T21538] ? __kmalloc_cache_noprof+0x14d/0x600 [ 619.270619][T21538] ? tipc_mon_create+0x148/0x4b0 [ 619.270638][T21538] ? tipc_mon_create+0x148/0x4b0 [ 619.270666][T21538] tipc_mon_create+0x148/0x4b0 [ 619.270694][T21538] __tipc_nl_bearer_enable+0xece/0x1480 [ 619.270820][T21538] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 619.270864][T21538] ? __asan_memcpy+0x40/0x70 [ 619.270896][T21538] ? nla_put+0xd0/0x150 [ 619.270924][T21538] ? tipc_nl_compat_bearer_enable+0x35f/0x500 [ 619.270958][T21538] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 619.270988][T21538] ? __nla_parse+0x40/0x60 [ 619.271017][T21538] tipc_nl_compat_doit+0x407/0x650 [ 619.271051][T21538] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 619.271091][T21538] ? bpf_lsm_capable+0x9/0x20 [ 619.271120][T21538] ? security_capable+0x7e/0x2c0 [ 619.271151][T21538] tipc_nl_compat_recv+0x8d3/0xcf0 [ 619.271180][T21538] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 619.271207][T21538] ? __mutex_trylock_common+0x15f/0x270 [ 619.271234][T21538] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 619.271262][T21538] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 619.271284][T21538] ? __pfx___mutex_trylock_common+0x10/0x10 [ 619.271317][T21538] ? trace_contention_end+0x3d/0x140 [ 619.271342][T21538] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 619.271383][T21538] genl_family_rcv_msg_doit+0x233/0x340 [ 619.271421][T21538] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 619.271464][T21538] ? __dev_queue_xmit+0x29b/0x3820 [ 619.271502][T21538] genl_rcv_msg+0x614/0x7a0 [ 619.271540][T21538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.271568][T21538] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 619.271594][T21538] ? __pfx_ref_tracker_free+0x10/0x10 [ 619.271627][T21538] netlink_rcv_skb+0x226/0x4a0 [ 619.271649][T21538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.271675][T21538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.271713][T21538] ? down_read+0x2be/0x330 [ 619.271745][T21538] genl_rcv+0x28/0x40 [ 619.271769][T21538] netlink_unicast+0x7bd/0x940 [ 619.271801][T21538] netlink_sendmsg+0x813/0xb40 [ 619.271834][T21538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.271865][T21538] ? apparmor_socket_sendmsg+0x98/0x360 [ 619.271894][T21538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.271915][T21538] sock_sendmsg_nosec+0x13a/0x180 [ 619.271943][T21538] ____sys_sendmsg+0x54e/0x850 [ 619.271969][T21538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.271999][T21538] ? import_iovec+0x73/0xa0 [ 619.272024][T21538] ___sys_sendmsg+0x2a5/0x360 [ 619.272043][T21538] ? __lock_acquire+0x6df/0x2e50 [ 619.272066][T21538] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.272124][T21538] ? __fget_files+0x2a/0x420 [ 619.272146][T21538] ? __fget_files+0x3a2/0x420 [ 619.272180][T21538] __x64_sys_sendmsg+0x1b1/0x290 [ 619.272203][T21538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.272246][T21538] do_syscall_64+0x166/0x520 [ 619.272271][T21538] ? trace_irq_disable+0x3b/0x140 [ 619.272289][T21538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.272308][T21538] ? clear_bhb_loop+0x70/0xc0 [ 619.272332][T21538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.272350][T21538] RIP: 0033:0x7fd8aef9e159 [ 619.272370][T21538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.272386][T21538] RSP: 002b:00007fd8afd88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.272408][T21538] RAX: ffffffffffffffda RBX: 00007fd8af225fa0 RCX: 00007fd8aef9e159 [ 619.272422][T21538] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 619.272433][T21538] RBP: 00007fd8afd88090 R08: 0000000000000000 R09: 0000000000000000 [ 619.272445][T21538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 619.272456][T21538] R13: 00007fd8af226038 R14: 00007fd8af225fa0 R15: 00007ffedcf62578 [ 619.272488][T21538] [ 619.279643][T21538] tipc: Disabling bearer [ 619.779366][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 622.812041][T21539] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 623.007780][T21575] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 623.236214][T21587] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 623.237906][T21587] __nla_validate_parse: 3 callbacks suppressed [ 623.237926][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3983'. [ 623.245466][T21584] macsec1: entered allmulticast mode [ 623.245490][T21584] veth1_macvtap: entered allmulticast mode [ 623.247704][T21584] veth1_macvtap: left allmulticast mode [ 623.361810][T21591] syzkaller0: entered promiscuous mode [ 623.361868][T21591] syzkaller0: entered allmulticast mode [ 623.367178][T21591] 0: reclassify loop, rule prio 0, protocol 700 [ 623.368602][T21591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3982'. [ 623.498151][T21601] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 623.565478][ T5625] block nbd4: Receive control failed (result -32) [ 623.578076][ T927] block nbd4: Receive control failed (result -32) [ 623.601570][T21605] xt_hashlimit: Unknown mode mask 4C5047, kernel too old? [ 624.827092][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.019467][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 628.084091][T21623] tipc: Enabling of bearer rejected, failed to enable media [ 628.394290][T21673] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 628.396755][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3997'. [ 628.715628][T21684] tipc: Enabled bearer , priority 0 [ 628.764349][T21692] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20000 [ 628.788544][T21692] netlink: 'syz.2.4006': attribute type 8 has an invalid length. [ 628.799410][T21683] tipc: Disabling bearer [ 629.090960][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4011'. [ 629.145952][T21713] bond3: entered allmulticast mode [ 629.162318][T21713] ip6gretap1: entered allmulticast mode [ 629.162926][T21713] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 629.167693][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4011'. [ 629.306862][T21725] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 629.309925][T21725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4014'. [ 629.423813][T21728] netlink: 'syz.4.4015': attribute type 12 has an invalid length. [ 629.426673][T21728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4015'. [ 629.433363][T21728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4015'. [ 629.763058][T21699] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 630.181696][T21746] tipc: Enabled bearer , priority 0 [ 630.277319][T21763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'. [ 630.324453][T21766] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 630.342559][T21766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4025'. [ 630.613482][T21778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4029'. [ 630.706304][T21783] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4030'. [ 630.735717][T21740] tipc: Disabling bearer [ 630.812109][T21788] syzkaller0: entered promiscuous mode [ 630.812160][T21788] syzkaller0: entered allmulticast mode [ 631.112040][T21800] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 631.307160][T13844] hid-generic 0005:0008:0009.0042: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 631.413832][T21813] fido_id[21813]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 631.757719][T21794] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 632.007199][T21842] tipc: Enabled bearer , priority 0 [ 632.033900][T21850] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 632.054600][T21830] tipc: Disabling bearer [ 632.156139][T21854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.242778][T21857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.282451][T21853] netlink: 'syz.0.4053': attribute type 2 has an invalid length. [ 632.386476][T21865] Cannot find add_set index 0 as target [ 632.404406][T21863] sctp: [Deprecated]: syz.2.4055 (pid 21863) Use of int in maxseg socket option. [ 632.404406][T21863] Use struct sctp_assoc_value instead [ 632.451299][T21859] xt_CT: No such helper "syz1" [ 632.695433][T21879] netlink: 'syz.3.4059': attribute type 7 has an invalid length. [ 632.827071][T21886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.847315][T21893] netlink: 'syz.2.4063': attribute type 22 has an invalid length. [ 632.847379][T21893] netlink: 'syz.2.4063': attribute type 9 has an invalid length. [ 632.885540][T21896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.942923][T21886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.019336][T21900] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 633.152556][T21902] tipc: Enabled bearer , priority 0 [ 633.192943][T21901] tipc: Disabling bearer [ 633.230273][T21906] bond3: option min_links: invalid value (18446744073709551612) [ 633.230320][T21906] bond3: option min_links: allowed values 0 - 2147483647 [ 633.249009][T21906] bond3 (unregistering): Released all slaves [ 633.636521][T21927] netlink: 'syz.0.4072': attribute type 15 has an invalid length. [ 633.688417][T21931] __nla_validate_parse: 9 callbacks suppressed [ 633.688476][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4073'. [ 633.978748][T21946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 633.990425][T21897] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 634.044336][T21948] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 634.045524][T21948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4077'. [ 634.317102][T21938] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 634.451219][T21938] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 634.686466][T21938] Dev vda: unable to read RDB block 8 [ 634.686840][T21938] vda: unable to read partition table [ 634.935930][T21982] netlink: 'syz.2.4086': attribute type 1 has an invalid length. [ 634.973639][T21976] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.975659][T21975] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.124946][T21982] 8021q: adding VLAN 0 to HW filter on device bond6 [ 635.135870][T21990] sctp: [Deprecated]: syz.0.4088 (pid 21990) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.135870][T21990] Use struct sctp_sack_info instead [ 635.345091][T21989] bond6: (slave gretap1): making interface the new active one [ 635.376780][T21989] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 635.463049][T22005] netlink: 'syz.0.4092': attribute type 11 has an invalid length. [ 635.468542][T22004] tipc: Invalid UDP bearer configuration [ 635.468593][T22004] tipc: Enabling of bearer rejected, failed to enable media [ 635.494407][T22010] netlink: 'syz.0.4092': attribute type 11 has an invalid length. [ 635.715164][T22017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4093'. [ 636.125264][T22038] IPVS: length: 225 != 24 [ 636.164071][T22031] tipc: Enabled bearer , priority 0 [ 636.324409][T22030] tipc: Disabling bearer [ 636.634795][T22064] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4109'. [ 636.647356][T22058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4107'. [ 636.753570][T22071] netlink: 67 bytes leftover after parsing attributes in process `syz.3.4111'. [ 636.945202][T22071] bridge0: port 4(vlan3) entered blocking state [ 636.945622][T22071] bridge0: port 4(vlan3) entered forwarding state [ 636.976506][T22071] syz_tun: entered promiscuous mode [ 637.010051][T22071] 8021q: adding VLAN 0 to HW filter on device eth0 [ 637.030173][T22071] 8021q: adding VLAN 0 to HW filter on device eth1 [ 637.047745][T22071] 8021q: adding VLAN 0 to HW filter on device eth2 [ 637.079028][T22071] 8021q: adding VLAN 0 to HW filter on device eth3 [ 637.139893][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 637.195894][T22064] infiniband syz0: set active [ 637.195952][T22064] infiniband syz0: added veth0_vlan [ 637.226963][T22064] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 637.227027][T22064] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 637.227471][T22064] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 637.251243][T22082] vlan0: left promiscuous mode [ 637.282302][T22082] ipvlan2: left allmulticast mode [ 637.287785][T22082] macvlan1: left allmulticast mode [ 637.313739][T22085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4115'. [ 637.364095][T22064] RDS/IB: syz0: added [ 637.368443][T22064] smc: adding ib device syz0 with port count 1 [ 637.375191][T22064] smc: ib device syz0 port 1 has no pnetid [ 637.491449][T22082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4115'. [ 637.550710][T22090] syzkaller0: entered promiscuous mode [ 637.557032][T22090] syzkaller0: entered allmulticast mode [ 637.987279][T22105] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4120'. [ 638.054150][T22105] syzkaller1: entered promiscuous mode [ 638.054206][T22105] syzkaller1: entered allmulticast mode [ 638.251839][T22116] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 638.275263][T22116] x_tables: duplicate underflow at hook 2 [ 638.959536][ T322] IPVS: starting estimator thread 0... [ 639.050726][T22140] IPVS: using max 28 ests per chain, 67200 per kthread [ 639.445870][T22155] __nla_validate_parse: 4 callbacks suppressed [ 639.445925][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4139'. [ 639.621028][T22128] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 639.706735][T22160] netlink: 'syz.4.4141': attribute type 1 has an invalid length. [ 639.884405][T22172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 639.951333][T22178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4144'. [ 640.278385][T22166] veth3: entered allmulticast mode [ 640.393357][T22169] bond4: (slave veth0_to_bond): making interface the new active one [ 640.402153][T22169] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 640.444113][T22175] macvlan2: entered promiscuous mode [ 640.444189][T22175] macvlan2: entered allmulticast mode [ 640.444858][T22175] bond4: entered promiscuous mode [ 640.444903][T22175] veth0_to_bond: entered promiscuous mode [ 640.449986][T22175] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 640.452176][T22175] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 640.452287][T22175] bond4: left promiscuous mode [ 640.452301][T22175] veth0_to_bond: left promiscuous mode [ 640.919379][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'. [ 641.278773][T22214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4151'. [ 641.794699][T22222] wg2 speed is unknown, defaulting to 1000 [ 641.804890][T22222] wg2 speed is unknown, defaulting to 1000 [ 641.819065][T22222] wg2 speed is unknown, defaulting to 1000 [ 641.844629][T22224] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 642.075521][T22235] Bluetooth: hci0: unsupported parameter 5134 [ 642.075588][T22235] Bluetooth: hci0: unsupported parameter 8192 [ 642.075868][T22235] Bluetooth: hci0: unsupported parameter 5134 [ 642.075883][T22235] Bluetooth: hci0: unsupported parameter 8192 [ 642.273509][T21603] Bluetooth: hci1: command 0x0406 tx timeout [ 642.298050][T22242] netlink: 'syz.4.4160': attribute type 1 has an invalid length. [ 642.326684][T22222] infiniband syz2: set active [ 642.348232][T22222] infiniband syz2: added wg2 [ 642.415918][T22222] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 642.438778][T22222] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 642.438863][T22222] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 642.488864][T22251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4162'. [ 642.510629][T22242] 8021q: adding VLAN 0 to HW filter on device bond5 [ 642.524788][T22243] bond4: (slave veth0_to_bond): Releasing active interface [ 642.556211][T22243] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 642.558054][T22256] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 642.558467][T22256] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 642.558578][T22256] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 642.558692][T22256] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 642.567082][T22256] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 642.567283][T22256] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 642.567418][T22256] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 642.568374][T22256] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 642.568520][T22256] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 642.656466][T22222] RDS/IB: syz2: added [ 642.656563][T22222] smc: adding ib device syz2 with port count 1 [ 642.657360][T22221] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 642.662119][T22222] smc: ib device syz2 port 1 has no pnetid [ 642.693508][ T49] wg2 speed is unknown, defaulting to 1000 [ 642.693591][T13844] wg2 speed is unknown, defaulting to 1000 [ 642.693749][T22222] wg2 speed is unknown, defaulting to 1000 [ 642.990749][T22262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4164'. [ 643.074209][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4164'. [ 643.199041][T22222] wg2 speed is unknown, defaulting to 1000 [ 643.337025][T22270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4166'. [ 643.368431][ T5809] hid-generic 0005:0008:0009.0043: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 643.618842][T22273] fido_id[22273]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 643.940804][T22222] wg2 speed is unknown, defaulting to 1000 [ 644.019529][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 644.150563][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4172'. [ 644.613559][T22222] wg2 speed is unknown, defaulting to 1000 [ 644.837679][T22307] ip_tables: iptables: counters copy to user failed while replacing table [ 644.975071][T22315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4178'. [ 645.117218][T22323] tipc: Enabling of bearer rejected, failed to enable media [ 645.209408][T22222] wg2 speed is unknown, defaulting to 1000 [ 645.291803][ T5809] hid-generic 0005:0008:0009.0044: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 645.331636][T22332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4180'. [ 645.398247][T22335] fido_id[22335]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 645.586102][T22342] ipvlan2: entered promiscuous mode [ 645.594073][T22342] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 645.608728][T22342] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 645.625085][T22342] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 645.795900][T22222] wg2 speed is unknown, defaulting to 1000 [ 646.009925][T22352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4187'. [ 646.199875][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4190'. [ 646.216119][T22222] wg2 speed is unknown, defaulting to 1000 [ 646.226838][T22354] xt_TPROXY: Can be used only with -p tcp or -p udp [ 646.616414][T22373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4196'. [ 646.652917][T22373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4196'. [ 646.653005][T22373] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4196'. [ 646.653039][T22373] tipc: Invalid UDP bearer configuration [ 646.653090][T22373] tipc: Enabling of bearer rejected, failed to enable media [ 646.703527][T22222] wg2 speed is unknown, defaulting to 1000 [ 646.852817][T15794] IPVS: starting estimator thread 0... [ 646.882514][T22383] 8021q: adding VLAN 0 to HW filter on device bond4 [ 646.939707][T22392] IPVS: using max 24 ests per chain, 57600 per kthread [ 647.003069][T22382] bridge5: entered promiscuous mode [ 647.225581][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 647.249501][T22399] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.341831][T22406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4205'. [ 648.243824][T22426] syzkaller1: entered promiscuous mode [ 648.249639][T22426] syzkaller1: entered allmulticast mode [ 648.277971][T22445] ip6erspan0: entered allmulticast mode [ 648.352685][T22450] validate_nla: 2 callbacks suppressed [ 648.352738][T22450] netlink: 'syz.0.4218': attribute type 1 has an invalid length. [ 648.457088][T22450] 8021q: adding VLAN 0 to HW filter on device bond2 [ 648.584999][T22459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4219'. [ 648.595893][T22450] bond2: (slave geneve2): making interface the new active one [ 648.635076][T22450] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 648.639880][T14245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.639930][T14245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.639963][T14245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.639995][T14245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.048633][T22481] sch_fq: defrate 0 ignored. [ 649.071842][T22472] netlink: 'syz.3.4224': attribute type 1 has an invalid length. [ 650.016652][T22516] ip_tables: iptables: counters copy to user failed while replacing table [ 650.017164][T22516] __nla_validate_parse: 4 callbacks suppressed [ 650.017181][T22516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4236'. [ 650.026934][T22522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4237'. [ 650.455672][T22506] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 651.112689][T22572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4249'. [ 651.319535][T22578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4254'. [ 651.417675][T22580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4254'. [ 651.601391][T22602] netlink: 'syz.1.4257': attribute type 1 has an invalid length. [ 651.663633][T22602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 651.847160][T22602] bond3: (slave geneve3): making interface the new active one [ 651.867588][T22602] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 651.973094][T22613] netlink: 'syz.3.4261': attribute type 10 has an invalid length. [ 651.988753][T22613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.097926][T22614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.123424][T22614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.163770][T22614] bond0 (unregistering): Released all slaves [ 652.217427][T22613] netlink: 'syz.3.4261': attribute type 10 has an invalid length. [ 652.378042][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4266'. [ 652.405407][T22633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4267'. [ 652.888766][T22653] veth1_to_bond: entered allmulticast mode [ 652.898470][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4275'. [ 652.924835][T22653] veth1_to_bond (unregistering): left allmulticast mode [ 652.960568][T22653] bond0: (slave bond_slave_1): Releasing backup interface [ 653.185454][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4278'. [ 653.330141][T22676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4279'. [ 653.338452][T22675] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 653.338699][T22675] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 653.382185][T22678] x_tables: duplicate underflow at hook 3 [ 653.385642][T22675] veth0_virt_wifi: entered promiscuous mode [ 653.397496][T22675] veth0_virt_wifi: left promiscuous mode [ 653.683417][T22651] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 653.772321][T14245] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.772399][T14245] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.772456][T14245] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.772495][T14245] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.921930][ T5625] Bluetooth: hci4: SCO packet too small [ 654.162234][T22717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 654.207271][T22717] geneve4: entered promiscuous mode [ 654.482337][T22735] netlink: 'syz.3.4300': attribute type 1 has an invalid length. [ 654.581977][T22735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.613224][T22741] bridge0: entered allmulticast mode [ 654.626632][T22739] syzkaller1: entered promiscuous mode [ 654.626672][T22739] syzkaller1: entered allmulticast mode [ 654.633738][T22739] x_tables: unsorted underflow at hook 3 [ 654.719830][T22735] bond0: (slave geneve2): making interface the new active one [ 654.730597][T22735] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 655.062360][T22759] __nla_validate_parse: 5 callbacks suppressed [ 655.062419][T22759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4309'. [ 655.062439][T22759] openvswitch: netlink: Flow actions attr not present in new flow. [ 655.063064][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4309'. [ 655.184298][T22776] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4314'. [ 655.212933][T22776] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4314'. [ 655.367687][T22784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4314'. [ 655.372579][T22776] bridge0: port 3(vlan2) entered blocking state [ 655.372715][T22776] bridge0: port 3(vlan2) entered forwarding state [ 655.389760][T22776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 655.412784][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.427571][T22785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4315'. [ 655.452267][T22776] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 655.477722][T22776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 655.503543][T22776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 655.532265][T22776] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 655.545232][ T202] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.545360][ T202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.554639][ T7542] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 655.584065][ T5756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.595406][T22783] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 656.227414][T22817] netlink: 'syz.2.4323': attribute type 2 has an invalid length. [ 656.272208][T22817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4323'. [ 656.272255][T22817] netlink: 320 bytes leftover after parsing attributes in process `syz.2.4323'. [ 656.272276][T22817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4323'. [ 656.351270][ T7538] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 656.397074][T22819] syzkaller1: entered promiscuous mode [ 656.403355][T22819] syzkaller1: entered allmulticast mode [ 656.552477][T22823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4326'. [ 656.563750][T22823] openvswitch: netlink: Flow actions attr not present in new flow. [ 657.031126][T22840] sit0: entered promiscuous mode [ 657.065944][T22840] netlink: 'syz.4.4333': attribute type 1 has an invalid length. [ 657.547662][T22858] Unknown options in mask 6 [ 657.873743][T22841] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 658.116009][T22875] xt_CT: You must specify a L4 protocol and not use inversions on it [ 658.242549][T22879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 658.744994][T13844] hid-generic 0005:0008:0009.0045: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 658.968276][T22911] fido_id[22911]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 659.102976][T22916] openvswitch: netlink: Flow actions attr not present in new flow. [ 659.357009][T22927] tipc: Enabling of bearer rejected, already enabled [ 659.535868][T22930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.594376][T22930] geneve3: entered promiscuous mode [ 659.622888][T22937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 660.018714][ T49] hid-generic 0005:0008:0009.0046: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 660.081444][T22954] __nla_validate_parse: 17 callbacks suppressed [ 660.081503][T22954] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4361'. [ 660.122632][T22957] fido_id[22957]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 660.231883][T22962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4364'. [ 660.241840][T22962] openvswitch: netlink: Flow actions attr not present in new flow. [ 660.250895][T22962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4364'. [ 660.323072][T22965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4365'. [ 660.323422][T22965] 8021q: VLANs not supported on vxcan0 [ 660.437063][T22969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4366'. [ 660.513630][T22970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4366'. [ 660.660037][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 660.924836][T22974] xt_CT: No such helper "snmp_trap" [ 661.070078][T22974] xt_CT: No such helper "snmp_trap" [ 661.152332][T22974] xt_CT: No such helper "snmp_trap" [ 661.254326][T22974] xt_CT: No such helper "snmp_trap" [ 661.403758][T22974] xt_CT: No such helper "snmp_trap" [ 661.518923][T22974] xt_CT: No such helper "snmp_trap" [ 661.535301][T22974] xt_CT: No such helper "snmp_trap" [ 661.601256][T23015] team0: Port device syz_tun added [ 661.733764][T23024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4376'. [ 661.733809][T23024] openvswitch: netlink: Flow actions attr not present in new flow. [ 661.750564][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4376'. [ 661.885757][T23030] Cannot find add_set index 0 as target [ 662.289107][T23045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 662.535706][T23045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4380'. [ 662.840667][T23030] wg2 speed is unknown, defaulting to 1000 [ 664.125452][ T7538] hid-generic 0005:0008:0009.0047: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 664.395225][T23077] xt_TCPMSS: Only works on TCP SYN packets [ 664.417912][T23074] fido_id[23074]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 665.232472][T23095] tipc: Enabled bearer , priority 0 [ 665.287754][T23093] tipc: Disabling bearer [ 665.520873][T23105] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 665.521072][T23105] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 665.521240][T23105] veth1_virt_wifi: entered allmulticast mode [ 665.527558][T23105] veth1_virt_wifi: left allmulticast mode [ 666.070621][T23125] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 666.125773][T23130] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 666.155168][T23130] tipc: Enabled bearer , priority 0 [ 666.217566][T23138] __nla_validate_parse: 2 callbacks suppressed [ 666.217630][T23138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4405'. [ 667.003878][T23165] Cannot find del_set index 2 as target [ 667.269561][ T7558] tipc: Node number set to 484524563 [ 667.644161][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 668.122743][T23191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4424'. [ 668.133776][T23191] openvswitch: netlink: Flow actions attr not present in new flow. [ 668.143485][T23191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4424'. [ 668.345119][T23195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4423'. [ 668.360875][T23195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.427972][T23204] netlink: 'syz.1.4428': attribute type 1 has an invalid length. [ 668.522451][T23204] bond4: (slave gretap1): making interface the new active one [ 668.542555][T23204] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 668.762163][T23217] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4432'. [ 668.989017][T23219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.445661][T23236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4437'. [ 669.456804][T23236] openvswitch: netlink: Flow actions attr not present in new flow. [ 669.466364][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4437'. [ 669.822806][T23238] syzkaller0: entered promiscuous mode [ 669.822854][T23238] syzkaller0: entered allmulticast mode [ 669.852230][T23238] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 670.267553][T23249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4442'. [ 670.443714][T23249] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 670.479370][T23249] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 670.624066][T23263] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4447'. [ 671.227598][T23280] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 671.259942][T23278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4450'. [ 671.259999][T23278] openvswitch: netlink: Flow actions attr not present in new flow. [ 671.260546][T23278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4450'. [ 671.920655][T23308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4459'. [ 672.032784][T23308] bond3: entered allmulticast mode [ 672.427912][T23330] netlink: 'syz.1.4476': attribute type 3 has an invalid length. [ 672.427956][T23330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4476'. [ 672.530401][T23338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4466'. [ 672.539926][T23338] openvswitch: netlink: Flow actions attr not present in new flow. [ 672.551151][T23338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4466'. [ 672.798774][T23334] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4465'. [ 673.174863][T23363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4475'. [ 673.208569][T23363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4475'. [ 673.445896][T23374] IPVS: length: 4096 != 24 [ 673.576068][T23379] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 673.584813][T23379] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 673.595870][T23377] openvswitch: netlink: Flow actions attr not present in new flow. [ 673.598473][T23377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4481'. [ 673.733074][T23380] block nbd5: shutting down sockets [ 674.136861][T23365] wg2 speed is unknown, defaulting to 1000 [ 674.478422][ T5625] Bluetooth: hci4: link tx timeout [ 674.480764][ T5625] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 674.490684][ T5625] Bluetooth: hci4: link tx timeout [ 674.490703][ T5625] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 675.053026][T23423] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 675.905300][T23435] syzkaller0: entered promiscuous mode [ 675.905365][T23435] syzkaller0: entered allmulticast mode [ 676.023364][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 676.507428][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 678.758520][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 679.919516][T23480] __nla_validate_parse: 8 callbacks suppressed [ 679.926210][T23480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4507'. [ 679.953434][T23473] tipc: Enabled bearer , priority 0 [ 680.142282][T23480] 8021q: adding VLAN 0 to HW filter on device bond6 [ 680.187969][T23480] bond6 (unregistering): Released all slaves [ 680.198177][T23492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4509'. [ 680.495087][T23506] syzkaller0: entered promiscuous mode [ 680.495146][T23506] syzkaller0: entered allmulticast mode [ 680.534193][T23506] netlink: 'syz.2.4512': attribute type 32 has an invalid length. [ 680.655378][T23514] netlink: 'syz.1.4514': attribute type 16 has an invalid length. [ 680.664457][T23514] netlink: 'syz.1.4514': attribute type 17 has an invalid length. [ 680.814020][T23523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4518'. [ 680.827233][T23523] xt_TCPMSS: Only works on TCP SYN packets [ 680.943342][T23514] bridge0: left allmulticast mode [ 681.038693][T23514] macsec1: left promiscuous mode [ 681.047172][T23514] bond1: left promiscuous mode [ 681.047251][T23514] bridge5: left promiscuous mode [ 681.058640][T23514] bond2: left promiscuous mode [ 681.058665][T23514] bridge6: left promiscuous mode [ 681.067636][T23514] ipvlan2: left allmulticast mode [ 681.068619][T23514] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 681.076819][T23514] ipvlan3: left allmulticast mode [ 681.078230][T23514] bond2: left allmulticast mode [ 681.078249][T23514] bridge6: left allmulticast mode [ 681.080729][T23514] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 681.093312][T23514] vxcan3: left promiscuous mode [ 681.101210][T23514] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 681.101238][T23514] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 681.101254][T23514] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 681.102403][T13844] wg2 speed is unknown, defaulting to 1000 [ 681.180503][T23523] vlan2: left promiscuous mode [ 681.186292][T23523] bridge0: port 3(vlan2) entered disabled state [ 681.204005][T23523] bridge_slave_1: left allmulticast mode [ 681.210036][T23523] bridge_slave_1: left promiscuous mode [ 681.210295][T23523] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.216301][T23530] netlink: 'syz.0.4520': attribute type 3 has an invalid length. [ 681.216324][T23530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4520'. [ 681.247412][T23523] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.304854][T23529] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4520'. [ 681.478047][T23540] netlink: 'syz.4.4522': attribute type 13 has an invalid length. [ 681.478094][T23540] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4522'. [ 681.478138][T23540] : renamed from syz_tun (while UP) [ 681.528011][T23540] : refused to change device tx_queue_len [ 681.536152][T23540] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 681.575106][T23543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4525'. [ 681.928948][T23561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 681.936027][T23561] bridge0: port 1(bond5) entered blocking state [ 681.936159][T23561] bridge0: port 1(bond5) entered disabled state [ 681.936328][T23561] bond5: entered allmulticast mode [ 681.949502][T23561] bond5: entered promiscuous mode [ 681.950263][T23561] bridge0: port 1(bond5) entered blocking state [ 681.950421][T23561] bridge0: port 1(bond5) entered forwarding state [ 681.975501][T23572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4532'. [ 681.975592][T23572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 681.975604][T23572] IPv6: NLM_F_CREATE should be set when creating new route [ 682.005256][ T12] bridge0: port 1(bond5) entered disabled state [ 682.042265][T23575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4531'. [ 682.117571][T23583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4534'. [ 682.339089][T23580] netlink: 'syz.4.4533': attribute type 3 has an invalid length. [ 682.436952][T23586] netlink: 'syz.4.4533': attribute type 5 has an invalid length. [ 683.070473][T23570] wg2 speed is unknown, defaulting to 1000 [ 683.283068][T23613] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 683.741103][T23639] bridge0: entered allmulticast mode [ 683.765266][T23639] ieee802154 phy1 wpan1: encryption failed: -22 [ 683.873607][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.882798][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.344156][T14245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.345295][ T322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.468294][T23653] macvtap1: entered promiscuous mode [ 684.474037][T23653] vlan0: entered promiscuous mode [ 684.480004][T23653] macvtap1: entered allmulticast mode [ 684.485604][T23653] vlan0: entered allmulticast mode [ 684.491383][T23653] veth0_vlan: entered allmulticast mode [ 684.531025][T23654] macvtap2: entered promiscuous mode [ 684.536959][T23654] macvtap2: entered allmulticast mode [ 684.751352][T23663] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 684.981172][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.029691][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.029945][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.157686][T23670] tipc: Enabling of bearer rejected, failed to enable media [ 685.161300][T23670] SET target dimension over the limit! [ 685.488761][ T322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.488806][ T322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.530419][T23677] __nla_validate_parse: 6 callbacks suppressed [ 685.536839][T23677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4556'. [ 686.159731][ T322] net_ratelimit: 2 callbacks suppressed [ 686.159787][ T322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.160057][ T322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.185164][T15794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.225568][T23708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4563'. [ 686.261328][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.497199][T23721] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 686.512469][T23721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4566'. [ 686.713137][T23725] Cannot find map_set index 2 as target [ 686.755934][T23737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4569'. [ 686.891693][T21603] Bluetooth: hci5: unexpected event 0x0f length: 124 > 4 [ 686.895570][T21603] Bluetooth: hci5: unexpected event 0x0f length: 124 > 4 [ 686.896024][T21603] Bluetooth: hci5: unexpected event 0x0f length: 124 > 4 [ 686.896550][T21603] Bluetooth: hci5: unexpected event 0x0f length: 124 > 4 [ 686.896705][T21603] Bluetooth: hci5: unexpected event 0x0f length: 124 > 4 [ 686.896857][T21603] Bluetooth: hci5: unexpected event 0x0f length: 124 > 4 [ 686.897009][T21603] Bluetooth: hci5: unexpected event 0x0f length: 124 > 4 [ 686.897161][T21603] Bluetooth: hci5: unexpected event 0x0f length: 124 > 4 [ 686.897646][T21603] Bluetooth: hci5: unexpected event 0x0f length: 124 > 4 [ 686.897803][T21603] Bluetooth: hci5: unexpected event 0x0f length: 124 > 4 [ 687.025592][T23748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4568'. [ 687.195806][T23760] FAULT_INJECTION: forcing a failure. [ 687.195806][T23760] name failslab, interval 1, probability 0, space 0, times 0 [ 687.195974][T23760] CPU: 1 UID: 0 PID: 23760 Comm: syz.4.4573 Not tainted syzkaller #0 PREEMPT(full) [ 687.196006][T23760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.196017][T23760] Call Trace: [ 687.196024][T23760] [ 687.196033][T23760] dump_stack_lvl+0xe8/0x150 [ 687.196069][T23760] should_fail_ex+0x410/0x560 [ 687.196103][T23760] should_failslab+0xa8/0x100 [ 687.196127][T23760] __kmalloc_noprof+0xfe/0x720 [ 687.196156][T23760] ? tomoyo_encode+0x2ad/0x570 [ 687.196245][T23760] ? tomoyo_encode+0x2ad/0x570 [ 687.196273][T23760] tomoyo_encode+0x2ad/0x570 [ 687.196300][T23760] tomoyo_realpath_from_path+0x5fa/0x640 [ 687.196331][T23760] ? tomoyo_path_number_perm+0x219/0x5f0 [ 687.196380][T23760] tomoyo_path_number_perm+0x246/0x5f0 [ 687.196410][T23760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 687.196435][T23760] ? __lock_acquire+0x6df/0x2e50 [ 687.196471][T23760] ? hook_file_ioctl+0x1f2/0x600 [ 687.196532][T23760] ? __fget_files+0x2a/0x420 [ 687.196559][T23760] ? __fget_files+0x2a/0x420 [ 687.196581][T23760] ? __fget_files+0x3a2/0x420 [ 687.196602][T23760] ? __fget_files+0x2a/0x420 [ 687.196630][T23760] security_file_ioctl+0xc3/0x2a0 [ 687.196680][T23760] __se_sys_ioctl+0x47/0x170 [ 687.196703][T23760] do_syscall_64+0x166/0x520 [ 687.196728][T23760] ? trace_irq_disable+0x3b/0x140 [ 687.196746][T23760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.196773][T23760] ? clear_bhb_loop+0x70/0xc0 [ 687.196797][T23760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.196815][T23760] RIP: 0033:0x7f577819e159 [ 687.196835][T23760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.196851][T23760] RSP: 002b:00007f5779081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.196872][T23760] RAX: ffffffffffffffda RBX: 00007f5778426090 RCX: 00007f577819e159 [ 687.196886][T23760] RDX: 0000200000000000 RSI: 0000000000008b36 RDI: 000000000000000a [ 687.196899][T23760] RBP: 00007f5779081090 R08: 0000000000000000 R09: 0000000000000000 [ 687.196911][T23760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.196923][T23760] R13: 00007f5778426128 R14: 00007f5778426090 R15: 00007ffd0d53de28 [ 687.196955][T23760] [ 687.199545][T23760] ERROR: Out of memory at tomoyo_realpath_from_path. [ 687.251286][T23762] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 687.253332][T23762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4573'. [ 687.300942][ T322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.302962][ T322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.795813][T23767] bond7: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 687.817391][T23772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.820688][T23767] bond7 (unregistering): Released all slaves [ 687.889786][T23751] syz_tun: entered allmulticast mode [ 687.948796][T23778] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 687.964513][T23778] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 687.964563][T23778] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 688.002909][T23750] syz_tun: left allmulticast mode [ 688.080763][T23778] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 688.085749][T23780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4579'. [ 688.434817][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.461978][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.510527][T23798] batman_adv: batadv0: Adding interface: macvtap3 [ 688.517227][T23798] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.545958][T23798] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active [ 688.587440][T23808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4588'. [ 688.587606][T23808] vlan0: entered allmulticast mode [ 688.587644][T23808] veth0_vlan: entered allmulticast mode [ 688.604240][T23798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.672225][T23801] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4584'. [ 688.692327][T23801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4584'. [ 688.934043][T23809] nbd: nbd64 already in use [ 690.277859][T23875] xt_socket: unknown flags 0x8 [ 690.652699][T23893] __nla_validate_parse: 1 callbacks suppressed [ 690.652761][T23893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4614'. [ 690.652789][T23893] netlink: 'syz.1.4614': attribute type 1 has an invalid length. [ 690.652809][T23893] netlink: 893 bytes leftover after parsing attributes in process `syz.1.4614'. [ 690.659093][T23895] netlink: 'syz.2.4615': attribute type 1 has an invalid length. [ 690.659114][T23895] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4615'. [ 690.901990][T21603] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 690.902120][T21603] Bluetooth: hci5: Injecting HCI hardware error event [ 690.903992][T21603] Bluetooth: hci5: hardware error 0x00 [ 691.210971][T23880] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 691.225638][T23911] netlink: 'syz.1.4620': attribute type 1 has an invalid length. [ 691.395468][ T202] net_ratelimit: 8 callbacks suppressed [ 691.395522][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.395552][ T202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.561139][T23911] 8021q: adding VLAN 0 to HW filter on device bond6 [ 691.663898][T23924] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 691.663946][T23924] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 691.684697][T23926] netlink: 'syz.3.4622': attribute type 4 has an invalid length. [ 691.694781][T23926] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4622'. [ 691.707985][T23911] tipc: Enabling of bearer rejected, already enabled [ 691.800997][ T322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.810462][ T322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.966553][T23937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4626'. [ 692.076145][T23939] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 692.076650][T23939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4627'. [ 692.163814][T23941] netlink: 67 bytes leftover after parsing attributes in process `syz.1.4629'. [ 692.198853][T23943] xt_cgroup: invalid path, errno=-2 [ 692.428742][T23933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4624'. [ 692.428799][T23933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4624'. [ 692.432333][T23952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4633'. [ 692.919887][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.928501][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.980261][T21603] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 693.079781][T23957] wg2 speed is unknown, defaulting to 1000 [ 693.353662][T23973] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 693.506775][T23985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.744582][T23995] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 693.798862][T23990] xt_hashlimit: max too large, truncated to 1048576 [ 693.807284][T23990] Cannot find add_set index 2 as target [ 694.049582][T14175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.203393][T24011] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 694.203577][T24011] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 694.203710][T24011] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 694.203826][T24011] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 694.203939][T24011] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 694.204083][T24011] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 694.204514][T24011] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 694.204626][T24011] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 694.204740][T24011] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 694.228584][T24006] x_tables: duplicate underflow at hook 2 [ 694.288190][T24011] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 694.559508][T24010] ovs-s!: entered promiscuous mode [ 694.990100][T24042] bridge0: entered allmulticast mode [ 695.053132][T24042] bond5: left allmulticast mode [ 695.053353][T24042] bond5: left promiscuous mode [ 695.054238][T24042] bridge0: port 1(bond5) entered disabled state [ 695.671831][T24079] __nla_validate_parse: 73 callbacks suppressed [ 695.671889][T24079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4665'. [ 695.735832][T24079] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4665'. [ 696.440986][T24122] Bluetooth: MGMT ver 1.23 [ 696.501658][T14249] net_ratelimit: 9 callbacks suppressed [ 696.501710][T14249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.907181][T24136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4677'. [ 697.025455][T24142] netlink: 'syz.1.4677': attribute type 8 has an invalid length. [ 697.033755][T24142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4677'. [ 697.139860][T14249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.158217][T14249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.401025][T14249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.401442][T14249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.577803][T24153] netlink: 'syz.4.4680': attribute type 5 has an invalid length. [ 697.586471][T24154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4680'. [ 697.586524][T24154] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 698.530014][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.530795][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.132522][T24101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 699.233773][T24158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4681'. [ 699.552423][T24177] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 699.643461][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.643776][ T89] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.017614][T24201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4694'. [ 700.017753][T24201] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4694'. [ 700.017781][T24201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4694'. [ 700.017796][T24201] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4694'. [ 700.469631][T24231] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 700.469693][T24222] netlink: 'syz.0.4700': attribute type 1 has an invalid length. [ 701.053442][T24252] netlink: 'syz.4.4708': attribute type 13 has an invalid length. [ 701.217597][T24256] netlink: 'syz.1.4709': attribute type 1 has an invalid length. [ 701.297131][T24259] __nla_validate_parse: 1 callbacks suppressed [ 701.304150][T24259] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4709'. [ 701.324137][T24237] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.390617][T24256] 8021q: adding VLAN 0 to HW filter on device bond7 [ 701.392832][T24242] wg2 speed is unknown, defaulting to 1000 [ 701.594412][T24237] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.860167][T14262] net_ratelimit: 6 callbacks suppressed [ 701.860251][T14262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.860522][T14262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.105995][T24273] tipc: Enabled bearer , priority 0 [ 702.180771][T14176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.231152][T24237] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.239688][T24283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4714'. [ 702.264154][T24279] syzkaller0: entered promiscuous mode [ 702.264200][T24279] syzkaller0: entered allmulticast mode [ 702.271027][T14262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.327228][T24267] tipc: Resetting bearer [ 702.355165][T24267] tipc: Disabling bearer [ 702.534074][T24292] netlink: 'syz.0.4718': attribute type 30 has an invalid length. [ 702.545366][T24237] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.802346][T24292] netlink: 'syz.0.4718': attribute type 30 has an invalid length. [ 702.905966][T14262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.960687][T14262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.960967][T14262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.036266][T24303] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 703.523213][T14175] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.523678][T14175] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.523758][T14175] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.678627][T24319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4727'. [ 703.679735][T14175] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.718317][T24317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4727'. [ 704.074807][T14262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.075104][T14262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.129896][T24335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4732'. [ 704.203947][T24332] syzkaller0: entered promiscuous mode [ 704.205990][T24341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4732'. [ 704.208074][T24332] syzkaller0: entered allmulticast mode [ 704.226857][T24343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4734'. [ 704.236551][T24335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.272545][T24335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.321320][T24341] tipc: Invalid UDP bearer configuration [ 704.321400][T24341] tipc: Enabling of bearer rejected, failed to enable media [ 704.410722][T24352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4736'. [ 704.753825][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 707.380030][T14249] net_ratelimit: 8 callbacks suppressed [ 707.380107][T14249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.495524][ T322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.495823][ T322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.019923][T14249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.650174][T14175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.650434][T14175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.662345][T14249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.863052][T24380] netlink: 'syz.3.4738': attribute type 11 has an invalid length. [ 709.023947][T24389] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 709.033057][T24389] netlink: 'syz.1.4743': attribute type 11 has an invalid length. [ 709.373461][T24409] tipc: Enabling of bearer rejected, already enabled [ 709.688052][T24427] tipc: Enabling of bearer rejected, failed to enable media [ 709.749538][T14175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.749816][T14175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.931056][T24435] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4754'. [ 710.137628][T24453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 710.214405][T24455] netlink: 'syz.0.4756': attribute type 11 has an invalid length. [ 710.214456][T24455] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.4756'. [ 710.272889][T24455] netlink: 'syz.0.4756': attribute type 11 has an invalid length. [ 710.273230][T24455] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.4756'. [ 710.558298][T24476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4763'. [ 710.648721][T24481] netlink: 2032 bytes leftover after parsing attributes in process `syz.1.4762'. [ 710.784628][T24489] netlink: 'syz.1.4766': attribute type 2 has an invalid length. [ 710.802293][T24489] debugfs: '.P'G!DES' already exists in 'ieee80211' [ 711.334107][T24512] Unknown options in mask 6 [ 711.341428][T24512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4770'. [ 711.341500][T24512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4770'. [ 711.362946][T24512] netlink: 'syz.2.4770': attribute type 1 has an invalid length. [ 711.371600][T24512] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4770'. [ 711.767859][T24534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4776'. [ 711.767924][T24534] nbd: must specify a size in bytes for the device [ 711.887576][T24534] nbd: must specify a size in bytes for the device [ 712.174183][T24553] netlink: 'syz.2.4781': attribute type 4 has an invalid length. [ 712.501261][T14249] net_ratelimit: 10 callbacks suppressed [ 712.501323][T14249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.778016][T24543] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 713.049628][T14263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.049919][T14263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.160042][T14256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.784217][T14256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.169910][T14263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.170286][T14263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.339641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.421702][T14263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.280403][T14263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.718900][T24584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 715.973881][T24620] geneve2: entered promiscuous mode [ 716.007966][T24624] __nla_validate_parse: 2 callbacks suppressed [ 716.008160][T24624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4795'. [ 716.008279][T24624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 716.008295][T24624] IPv6: NLM_F_CREATE should be set when creating new route [ 716.097132][T24626] netlink: 'syz.2.4796': attribute type 1 has an invalid length. [ 716.175749][T24622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4794'. [ 716.190555][T24626] netlink: 'syz.2.4796': attribute type 46 has an invalid length. [ 716.200844][T24633] netlink: 'syz.1.4797': attribute type 11 has an invalid length. [ 716.258702][T24639] syzkaller0: entered promiscuous mode [ 716.258759][T24639] syzkaller0: entered allmulticast mode [ 716.317803][T24642] tipc: Enabled bearer , priority 0 [ 716.391727][T24631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.405582][T24631] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.416629][T24652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4801'. [ 716.440574][T24631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.528834][T24656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4802'. [ 716.563082][T24631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.583194][T24631] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 716.623992][T24645] tipc: Resetting bearer [ 716.662226][T24636] tipc: Resetting bearer [ 716.712182][T24636] tipc: Disabling bearer [ 716.768932][T14176] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.769099][T14176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.774489][T14176] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.774603][T14176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.530246][T14256] net_ratelimit: 6 callbacks suppressed [ 717.530303][T14256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.530565][T14256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.621382][T14256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.754668][T24663] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20009 [ 717.772044][T24679] nbd3: detected capacity change from 0 to 63 [ 717.778616][T24681] netlink: 'syz.3.4808': attribute type 1 has an invalid length. [ 717.782281][ T4946] [ 717.792833][ T4946] ====================================================== [ 717.797598][T24662] wg2 speed is unknown, defaulting to 1000 [ 717.806418][ T4946] WARNING: possible circular locking dependency detected [ 717.813572][ T4946] syzkaller #0 Not tainted [ 717.818013][ T4946] ------------------------------------------------------ [ 717.825228][ T4946] kworker/0:1H/4946 is trying to acquire lock: [ 717.831669][ T4946] ffff888077d28668 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 717.840888][ T4946] [ 717.840888][ T4946] but task is already holding lock: [ 717.848706][ T4946] ffff88804154e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 717.857172][ T4946] [ 717.857172][ T4946] which lock already depends on the new lock. [ 717.857172][ T4946] [ 717.867683][ T4946] [ 717.867683][ T4946] the existing dependency chain (in reverse order) is: [ 717.876996][ T4946] [ 717.876996][ T4946] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 717.884408][ T4946] __mutex_lock+0x19d/0x1550 [ 717.889754][ T4946] nbd_queue_rq+0xc1/0xff0 [ 717.894821][ T4946] blk_mq_dispatch_rq_list+0x499/0x1990 [ 717.901094][ T4946] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 717.908013][ T4946] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 717.914643][ T4946] blk_mq_run_work_fn+0x16c/0x300 [ 717.920412][ T4946] process_scheduled_works+0xc3d/0x1630 [ 717.926819][ T4946] worker_thread+0xa47/0xfb0 [ 717.932003][ T4946] kthread+0x38b/0x480 [ 717.936611][ T4946] ret_from_fork+0x514/0xb70 [ 717.941964][ T4946] ret_from_fork_asm+0x1a/0x30 [ 717.947472][ T4946] [ 717.947472][ T4946] -> #5 (set->srcu){.+.+}-{0:0}: [ 717.954810][ T4946] __synchronize_srcu+0xc9/0x2f0 [ 717.960347][ T4946] elevator_switch+0x1e8/0x7b0 [ 717.965898][ T4946] elevator_change+0x2fa/0x480 [ 717.971230][ T4946] elevator_set_default+0x375/0x440 [ 717.977074][ T4946] blk_register_queue+0x3f3/0x4e0 [ 717.982709][ T4946] __add_disk+0x6cb/0xe30 [ 717.987771][ T4946] add_disk_fwnode+0x100/0x3a0 [ 717.993097][ T4946] nbd_dev_add+0x733/0xb60 [ 717.998076][ T4946] nbd_init+0x168/0x1f0 [ 718.003144][ T4946] do_one_initcall+0x250/0x870 [ 718.008472][ T4946] do_initcall_level+0x10a/0x1a0 [ 718.014004][ T4946] do_initcalls+0x59/0xa0 [ 718.018982][ T4946] kernel_init_freeable+0x29d/0x3e0 [ 718.024912][ T4946] kernel_init+0x22/0x1d0 [ 718.029785][ T4946] ret_from_fork+0x514/0xb70 [ 718.034904][ T4946] ret_from_fork_asm+0x1a/0x30 [ 718.040295][ T4946] [ 718.040295][ T4946] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 718.048304][ T4946] __mutex_lock+0x19d/0x1550 [ 718.053878][ T4946] elevator_change+0x1af/0x480 [ 718.059282][ T4946] elevator_set_none+0xb5/0x140 [ 718.065042][ T4946] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 718.071558][ T4946] nbd_start_device+0x189/0xb30 [ 718.077117][ T4946] nbd_genl_connect+0x167d/0x1cd0 [ 718.082678][ T4946] genl_family_rcv_msg_doit+0x233/0x340 [ 718.088764][ T4946] genl_rcv_msg+0x614/0x7a0 [ 718.093886][ T4946] netlink_rcv_skb+0x226/0x4a0 [ 718.099195][ T4946] genl_rcv+0x28/0x40 [ 718.103911][ T4946] netlink_unicast+0x7bd/0x940 [ 718.109464][ T4946] netlink_sendmsg+0x813/0xb40 [ 718.115007][ T4946] sock_sendmsg_nosec+0x13a/0x180 [ 718.120856][ T4946] ____sys_sendmsg+0x54e/0x850 [ 718.126608][ T4946] ___sys_sendmsg+0x2a5/0x360 [ 718.131907][ T4946] __x64_sys_sendmsg+0x1b1/0x290 [ 718.138607][ T4946] do_syscall_64+0x166/0x520 [ 718.144087][ T4946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.151299][ T4946] [ 718.151299][ T4946] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 718.160239][ T4946] blk_alloc_queue+0x544/0x690 [ 718.165827][ T4946] __blk_mq_alloc_disk+0x194/0x390 [ 718.171762][ T4946] nbd_dev_add+0x494/0xb60 [ 718.176809][ T4946] nbd_init+0x168/0x1f0 [ 718.181678][ T4946] do_one_initcall+0x250/0x870 [ 718.187275][ T4946] do_initcall_level+0x10a/0x1a0 [ 718.193031][ T4946] do_initcalls+0x59/0xa0 [ 718.198074][ T4946] kernel_init_freeable+0x29d/0x3e0 [ 718.204425][ T4946] kernel_init+0x22/0x1d0 [ 718.210349][ T4946] ret_from_fork+0x514/0xb70 [ 718.216033][ T4946] ret_from_fork_asm+0x1a/0x30 [ 718.222068][ T4946] [ 718.222068][ T4946] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 718.230343][ T4946] fs_reclaim_acquire+0x71/0x100 [ 718.236458][ T4946] __kmalloc_noprof+0xbc/0x720 [ 718.241888][ T4946] tls_sw_sendmsg+0x59b/0x2b50 [ 718.247370][ T4946] sock_sendmsg_nosec+0x90/0x180 [ 718.253107][ T4946] sock_sendmsg+0x1ca/0x2d0 [ 718.258449][ T4946] splice_to_socket+0xb5e/0x12a0 [ 718.264097][ T4946] direct_splice_actor+0x101/0x160 [ 718.271138][ T4946] splice_direct_to_actor+0x57b/0xcb0 [ 718.277322][ T4946] do_splice_direct+0x195/0x290 [ 718.283092][ T4946] do_sendfile+0x52e/0x7c0 [ 718.288157][ T4946] __se_sys_sendfile64+0x144/0x1a0 [ 718.293821][ T4946] do_syscall_64+0x166/0x520 [ 718.299060][ T4946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.305664][ T4946] [ 718.305664][ T4946] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 718.314097][ T4946] lock_sock_nested+0x41/0x100 [ 718.319569][ T4946] inet_shutdown+0x6a/0x390 [ 718.324770][ T4946] nbd_mark_nsock_dead+0x2cb/0x550 [ 718.330591][ T4946] recv_work+0x1cee/0x1e10 [ 718.335627][ T4946] process_scheduled_works+0xc3d/0x1630 [ 718.339567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.350201][ T4946] worker_thread+0xa47/0xfb0 [ 718.355431][ T4946] kthread+0x38b/0x480 [ 718.360089][ T4946] ret_from_fork+0x514/0xb70 [ 718.365465][ T4946] ret_from_fork_asm+0x1a/0x30 [ 718.370761][ T4946] [ 718.370761][ T4946] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 718.378764][ T4946] __lock_acquire+0x15ff/0x2e50 [ 718.384141][ T4946] lock_acquire+0x115/0x350 [ 718.389185][ T4946] __mutex_lock+0x19d/0x1550 [ 718.394389][ T4946] nbd_queue_rq+0x373/0xff0 [ 718.399479][ T4946] blk_mq_dispatch_rq_list+0x499/0x1990 [ 718.405847][ T4946] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 718.412905][ T4946] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 718.419706][ T4946] blk_mq_run_work_fn+0x16c/0x300 [ 718.425530][ T4946] process_scheduled_works+0xc3d/0x1630 [ 718.431808][ T4946] worker_thread+0xa47/0xfb0 [ 718.437279][ T4946] kthread+0x38b/0x480 [ 718.441879][ T4946] ret_from_fork+0x514/0xb70 [ 718.447082][ T4946] ret_from_fork_asm+0x1a/0x30 [ 718.452383][ T4946] [ 718.452383][ T4946] other info that might help us debug this: [ 718.452383][ T4946] [ 718.462783][ T4946] Chain exists of: [ 718.462783][ T4946] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 718.462783][ T4946] [ 718.475151][ T4946] Possible unsafe locking scenario: [ 718.475151][ T4946] [ 718.482602][ T4946] CPU0 CPU1 [ 718.487965][ T4946] ---- ---- [ 718.493437][ T4946] lock(&cmd->lock); [ 718.497432][ T4946] lock(set->srcu); [ 718.504022][ T4946] lock(&cmd->lock); [ 718.510712][ T4946] lock(&nsock->tx_lock); [ 718.515219][ T4946] [ 718.515219][ T4946] *** DEADLOCK *** [ 718.515219][ T4946] [ 718.523368][ T4946] locks held by kworker/0:1H/4946: 4, last CPU#0: [ 718.529870][ T4946] #0: ffff888020e8f140 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 718.541735][ T4946] #1: ffffc90010137c40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 718.555260][ T4946] #2: ffff888067cc1b18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 718.565411][ T4946] #3: ffff88804154e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 718.574488][ T4946] [ 718.574488][ T4946] stack backtrace: [ 718.580484][ T4946] CPU: 0 UID: 0 PID: 4946 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 718.590126][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 718.600376][ T4946] Workqueue: kblockd blk_mq_run_work_fn [ 718.606315][ T4946] Call Trace: [ 718.609700][ T4946] [ 718.612675][ T4946] dump_stack_lvl+0xe8/0x150 [ 718.617545][ T4946] print_circular_bug+0x2e2/0x300 [ 718.622580][ T4946] check_noncircular+0x12f/0x150 [ 718.627717][ T4946] __lock_acquire+0x15ff/0x2e50 [ 718.632971][ T4946] ? iowrite16+0x31/0x80 [ 718.637382][ T4946] lock_acquire+0x115/0x350 [ 718.641911][ T4946] ? nbd_queue_rq+0x373/0xff0 [ 718.646732][ T4946] __mutex_lock+0x19d/0x1550 [ 718.651527][ T4946] ? nbd_queue_rq+0x373/0xff0 [ 718.656923][ T4946] ? ret_from_fork_asm+0x1a/0x30 [ 718.661969][ T4946] ? unwind_next_frame+0x8f/0x2550 [ 718.667566][ T4946] ? nbd_queue_rq+0x373/0xff0 [ 718.672486][ T4946] ? __pfx___mutex_lock+0x10/0x10 [ 718.677608][ T4946] ? ret_from_fork_asm+0x1a/0x30 [ 718.682565][ T4946] ? stack_trace_save+0xa9/0x100 [ 718.687615][ T4946] ? __pfx_stack_trace_save+0x10/0x10 [ 718.692997][ T4946] nbd_queue_rq+0x373/0xff0 [ 718.697540][ T4946] ? __lock_acquire+0x14b9/0x2e50 [ 718.702838][ T4946] ? __pfx_nbd_queue_rq+0x10/0x10 [ 718.708058][ T4946] blk_mq_dispatch_rq_list+0x499/0x1990 [ 718.713670][ T4946] ? sbitmap_get+0x229/0x390 [ 718.718333][ T4946] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 718.724582][ T4946] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 718.730410][ T4946] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 718.736922][ T4946] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 718.743981][ T4946] ? lock_acquire+0x115/0x350 [ 718.748665][ T4946] ? process_scheduled_works+0x97a/0x1630 [ 718.754481][ T4946] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 718.760828][ T4946] ? blk_mq_run_work_fn+0x144/0x300 [ 718.766399][ T4946] blk_mq_run_work_fn+0x16c/0x300 [ 718.771668][ T4946] ? process_scheduled_works+0x97a/0x1630 [ 718.777490][ T4946] process_scheduled_works+0xc3d/0x1630 [ 718.783062][ T4946] ? __pfx_process_scheduled_works+0x10/0x10 [ 718.789154][ T4946] ? assign_work+0x3cf/0x5d0 [ 718.793870][ T4946] worker_thread+0xa47/0xfb0 [ 718.798583][ T4946] ? __kthread_parkme+0x71/0x1f0 [ 718.803735][ T4946] kthread+0x38b/0x480 [ 718.807844][ T4946] ? __pfx_worker_thread+0x10/0x10 [ 718.812966][ T4946] ? __pfx_kthread+0x10/0x10 [ 718.817569][ T4946] ret_from_fork+0x514/0xb70 [ 718.822174][ T4946] ? __pfx_ret_from_fork+0x10/0x10 [ 718.827299][ T4946] ? __switch_to+0xc89/0x1420 [ 718.832072][ T4946] ? __pfx_kthread+0x10/0x10 [ 718.836666][ T4946] ret_from_fork_asm+0x1a/0x30 [ 718.841542][ T4946] [ 718.857097][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4812'. [ 718.865348][T14176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.901833][T24679] netlink: 'syz.3.4808': attribute type 1 has an invalid length. [ 718.910296][T14259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.937661][T24679] 8021q: adding VLAN 0 to HW filter on device bond6 [ 718.968965][T24679] bond6: (slave veth9): Enslaving as an active interface with a down link [ 718.993768][T24679] netlink: 328 bytes leftover after parsing attributes in process `syz.3.4808'. [ 718.993838][T24679] netlink: 'syz.3.4808': attribute type 9 has an invalid length. [ 718.993855][T24679] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4808'. [ 718.993867][T24679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4808'. [ 719.096823][T21603] block nbd3: Receive control failed (result -104) [ 719.539687][T14256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.539863][T14256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.542864][T14259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.339468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.899825][T14256] net_ratelimit: 7 callbacks suppressed [ 722.899872][T14256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.900039][T14256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.379932][T14256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.009666][T14259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.009859][T14259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.339322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.659838][T14263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.660145][T14259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.129521][T14263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.129739][T14263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog