last executing test programs: 7.875993338s ago: executing program 1 (id=3812): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket(0x200000000000011, 0x2, 0x8001) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.079546072s ago: executing program 1 (id=3817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x402c400}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_delvlan={0x30, 0x71, 0x100, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x3}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0xb5, 0x9, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x31}, @datasec={0xb, 0x1, 0x0, 0xf, 0x1, [{0x5, 0xffffffbf, 0x2}], "e7"}, @fwd={0xf}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0x61, 0x4}, @struct={0x10, 0x5, 0x0, 0x4, 0x0, 0x500000, [{0xd, 0x2, 0x4}, {0xc, 0x0, 0xb5}, {0xc, 0x3, 0x2}, {0x8, 0x2, 0x3}, {0xe, 0x1, 0x20}]}, @fwd={0x5}, @func={0x7, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0x3}]}, {0x0, [0x2e, 0x30, 0x61, 0x2e, 0x30, 0x30, 0x61]}}, &(0x7f00000003c0)=""/12, 0xd9, 0xc, 0x1, 0x80000001}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', r2, r0, 0x4, 0x0, 0x2, 0xd}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r2, r3, 0x4, 0x2, 0x5}, 0x50) (async) sendmsg$sock(r1, &(0x7f00000006c0)={&(0x7f0000000540)=@tipc=@name={0x1e, 0x2, 0x1}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)="ace358b4e44b505ee7a64722ee0b21f8d9133236b0795603db4a1dd5c1a4b8b83021c0c03e2135d4776a501da3d198d8b898fd0e7246eb75ce75205a48f247a2ed166778d53f06902bd2cf22e96c159229a792e344628b39298e442a06cee9f83f0be618c2da210b76beda878d404e55436f2351504bfade64e08d59c196c694cb1bbce5174ee457ceb3a20a95381fa3df68e3", 0x93}], 0x1}, 0x80) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000740)=0x8000, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f00000007c0)=@getsadinfo={0x1180, 0x23, 0x300, 0x70bd25, 0x25dfdbfd, 0x0, [@lifetime_val={0x24, 0x9, {0xff, 0x0, 0xb948, 0xfffffffffffffff8}}, @extra_flags={0x8, 0x18, 0x2}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x10, 0x1000, "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"}}, @algo_comp={0x76, 0x3, {{'deflate\x00'}, 0x170, "ef0dda89c28e2c3793b117c47950b15b32028c40cede8a9b0378c650539a4a633c60935e164a41f0fabc0cf4a86a"}}, @algo_auth={0xb9, 0x1, {{'sha3-224\x00'}, 0x388, "e837eea78889a69842c4c8fc99e65bcc1e2ad4ba85102658cf3573690ccba59b237faeba1ade1e747e75d6a6f973df326bd5c83f6dc80a7488f43816df8889822e0afd96ae8915a8bce9dff522dc62a64faf3d4125aca09522002cd36e309986bde02d8021084e1175fc179d80a179a4e4"}}]}, 0x1180}, 0x1, 0x0, 0x0, 0x800}, 0x4008040) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000019c0)={0x0, 0x6, 0x30, 0x9}, &(0x7f0000001a00)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001a40)={r7, 0x8}, 0x8) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, r8, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x80) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001bc0), 0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c40)={0x100, 0x1403, 0x400, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x40c0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e00)={0x108, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9d44}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x36}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffc0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5088}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x53d}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002000)={'pim6reg\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000002040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @remote, 0x10000, 0x8, 0xc3a7, 0x0, 0xbe8c, 0x3090002, r12}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002100), r9) (async) getsockname$packet(r9, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002180)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000002240)={'ip6_vti0\x00', &(0x7f00000021c0)={'syztnl0\x00', r12, 0x4, 0xe4, 0xa, 0x800, 0x40, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd23683f36198b1a7, 0x40, 0x3, 0x7fff}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f00000024c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002480)={&(0x7f0000002280)={0x1d0, r13, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) (async) writev(r11, &(0x7f00000029c0)=[{&(0x7f0000002500)="997b47632a8e8d8b979b1b40f52520b14d602e6a385407613990b7f69d50749bef92e08ea32c7d53773cdf6090819f617ef95320e0d5d16b0e64ba1f603aad10c83f3f6bc9083bae6bd5d949dba267c8ff29d6056c3a15c0913f77eaf6af3f70daac4e476d33ad0a841448f1145917727c3a33bc418b233f10309903b4a46fc278f2", 0x82}, {&(0x7f00000025c0)="b76014164e9636ef8300baeba3c832ee4b7e60a6537d993ef13b42def8d1ad041352379fae3e8c38214e5ae34b60d6b30e66ba4785e1f0a7667ca56890f37a8c41efd6379c4165e0", 0x48}, {&(0x7f0000002640)="50747b7725e1c7e2fbf79dd1e936bb6f8d3c7030d68514d35b059c0bd525448c5454982d3f3a5a874a7c7aac4b00d69d96750188fa1df300b95d77b2c7aa2088984aa8f7268aa4dfae06248576df861381e5c2d786704d4de81bf260207fd7868b4c98ac33e182fafba86a07cb69de4c46e04443682794fb34c516afc5f5262a341e788e83045747c4d6253e8d90179dbff77368e5a42bbb9fd773bf49508d6d89228e30e008f3d9e2fbc692053f0c1308012420593b42f09161b448", 0xbc}, {&(0x7f0000002700)="5d0466ff8baa56d7522e84b0f8d97261a5b6b7bbf4fae383ffc352d08c262f4bd91d45577f9cbd9253394b15fa5deec9106915ea4769f6b89aafab2bf5e5c2e8491b4eace5d82ba6a32a230b07307aea54bb405c80e5fa66fc82b19021489cb89e1fdd42b123396f50973144357a34cc6fdfb32ff5bb39f9d4639fee3bd901d58efe1a66937ca39a095faed81a2ccc572a5684bfaecb5b97de5412d1e577469fc41afaab90afc0e78431acc441cecf5015d16b05f5ef282f9ffe4715a3fbe7b68eb4dc7a23ae9433554601d0bea5a878bfa57b81a21c108fefe3e0171a64ad4265feed62ab", 0xe5}, {&(0x7f0000002800)="644b56ce10", 0x5}, {&(0x7f0000002840)="7d006ab0325c5e5c6b15c15b5613a4a18b0c5b2105f52aa750544c811582d655ae9d43d2c994e604432808cd8c9b413b60cf8cbc282e10a3153f3a3dc73b66a026866b8cc4b34ac71668813d2a547461464b9dd22cd28c36c8cb49aee0995584603c1265f49c393fbdf2c159fa8a3135d5f884724bcb645b0c4f004ace1384df9797f18a47c576710ffed6bd7c57c98fafbb408ae20422f44059448f96a255a73e1ef194f2d46b79d2a5a014b9839688a89ed1fbe490933d92d5f1e4bb1b32b52d008a2b8115c4934289cdb89a67135ca5696999442f49af7a1b78f460a4d2844d04b5647541a194edb3bd", 0xeb}, {&(0x7f0000002940)="c53011094e73a72dc1f03df607658ef9eac1c34bc0c5e91c0a3bee7f3eb7ef90e84477c99916e414df59581480c927bff2f0e76b519e8a2d8a26dc156bfb460ba80189cc15d256cdeb2dc9194d465b1cb2defa5842f5a2cc5acb43ecb2fa8617c9d42948159b6dcd", 0x68}], 0x7) 6.151241688s ago: executing program 1 (id=3821): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0xfffffff1, 0x200, &(0x7f00000002c0)=""/108, &(0x7f0000000780)=0x6c) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0f00050a010100000000000000000200000508000b40000000040c000240000000000000000414000000eb03010000000000000000000000000a"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002980)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0600150003000000"], 0x1040}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x2, 0xfffffffd, 0x2, @private1, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x700, 0x7, 0x5, 0x6}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r6, 0x1) close(0x3) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/37, 0x25}, {&(0x7f0000001800)=""/43, 0x2b}], 0x3, &(0x7f0000001880)=""/65, 0x41}, 0x20) 5.485942855s ago: executing program 2 (id=3826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf0001007564703a73797a32010020000c0002800800040008000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040194) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYRESHEX], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="8e83313fc7270a61820d5c5096b0ad2814000000", @ANYRES16=r4, @ANYBLOB="090300000000000000002a000000"], 0x14}}, 0x0) r5 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x12, "6b132c40435fa71d88fa70efa856c48a7658"}, &(0x7f0000000100)=0x1a) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xc, r8, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000600)={r3, &(0x7f0000000440)='syzkaller\x00', 0x410000, &(0x7f0000000480)={@align=0xc0, {0x3, 0xffff, 0x80, 0x4}}, 0x7fffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="85ff00001c000000f6464703483efb90c97ec1229877a99eafc1a976c605f21d0800000000000000d8e1481e8036fd0de3f3d4"], &(0x7f00000003c0)='GPL\x00', 0xc510, 0x0, 0x0, 0x41000, 0x44, '\x00', r8, @fallback=0x1d, r9, 0x8, &(0x7f0000000840)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x3, 0xbc, 0x1}, 0x10, 0xffffffffffffffff, r2}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x5c, 0x2, 0x18, 0x4}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000001c0)={r6, 0x9, 0x400, 0x4}, 0x10) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r11, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)=""/188, 0x1001}], 0x1}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r12, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f00000009c0)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r12, 0x84, 0x76, &(0x7f0000000340)={r13}, &(0x7f0000000380)=0x8) 5.390523037s ago: executing program 0 (id=3827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd780000f8ffffff000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@setlink={0x44, 0x13, 0x5, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x11}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@setlink={0x44, 0x13, 0x5, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x11}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x2, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x9}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x9}, 0x28) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r7}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b4400128014000180090001006c61737400000000040002802c0001800a00010071756f74610000001c0002800c00014000000000000000800c000440280000000000000708000340000001"], 0xc4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b4400128014000180090001006c61737400000000040002802c0001800a00010071756f74610000001c0002800c00014000000000000000800c000440280000000000000708000340000001"], 0xc4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 5.091187173s ago: executing program 1 (id=3829): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x282400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619, r4, 0x100000000000000}, 0x38) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0xfffffebb, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x10004, 0x5, 0x84, 0x6, 0x7, 0x83, 0x6f0d}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000003}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e53194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000300)=@xdp={0x2c, 0x2, r5, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000700)="e28ee7ec44819a102e09c23856ec", 0xe}], 0x1}, 0x0) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113900000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x46}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x4004000) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r8, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) 4.981015476s ago: executing program 0 (id=3830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x1, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x50}, {0xfd64}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000015010200e9ffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.932702599s ago: executing program 2 (id=3831): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x8, 0x20833}, 0x56}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x11e, 0x82, 0x0, &(0x7f0000007200)=0xffffffffffffff03) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000c}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r4}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000000c0)=0x10000, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000001a00000027bd7000fbdbdf25800000040001fd03002b000076791b72695454c2fd18a28d32ed8e64659bedca01745ce2c58775eee70d61d6d39158cca2e7a235f1d5a523108d2971846cb828ea0886d428476c311e180cfc335e733eb69318289ba3974e4be810d6f9ce0099b4ef84603691ad55207920a80c1de904451d7742cca20f9aaeeaf7bf6062cfaa53bb48b2fbfd44e60e8dbe403c29d52764371dd88dfa7c412c07eb9ac71913b8c758a42aecda119fdcb2bd1ca5d8a4e815b71ca097083362ac"], 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x8000, 0x10, 0xd00000, 0x4, {{0x1f, 0x4, 0x0, 0x1b, 0x7c, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@end, @timestamp_addr={0x44, 0x3c, 0xfd, 0x1, 0x0, [{@private=0xa010102}, {@multicast1, 0x6}, {@local, 0xffffff6b}, {@broadcast, 0x7101}, {@empty, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp={0x44, 0x10, 0xc6, 0x0, 0xe, [0x3, 0x4, 0x4]}, @ssrr={0x89, 0xb, 0xc3, [@private=0xa010100, @local]}, @generic={0x89, 0xe, "8e7d4dac1e6956bb032c5f5d"}, @noop]}}}}}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x104, 0x26, 0x29, 0x70bd2f, 0x0, {0x15}, [@typed={0xf0, 0x15e, 0x0, 0x0, @str='\xf8}@\x00JX#\xaa\xfe\v\xd0d\xdd:\x99e\xe7\xf9z\xe7U\xbe\xc33X,*\xc1\x81t+\x17w\xf1&\x14\xe7\x88\x95\xf8$v\xd6o\xb9vb\xb5\xde\xf0\x9e\x06\x18\x93Nz\xfeM6+\x9c\xa5\xce\x86\xa7o\x89\xd6\xfcx\xd7\x81\xc4\xcb$ \x9d\xcc~j\x9a\xd4\xebA\xc8\xba\x01\xcf\xcf}]\x97!6}QGh\xeb\xcd\xf1\xfe\xc6\x97(\x13NzB\x98/\"V\xfag\x85:\xceh\xef\x83|\a\x81x/*ZH\t\xb7\xe5\x16L\xc3*(^\xce\xc9\x9e\xd8\xe3\xdb\xa30#s\x05H\x99\xe12\xc3\xe6\xe5\xd0Z\x87\x9c\x80\xb32\xbf\xa8@\xc3p6A^\\\xee\x90u\x86VaH\xb7\xc0J\xdaN\xe94\xb0\x15\x0657\xc7Db4\xe1o\xc1:\xd8\x11\xcbv%\xe4z\xc7\xd6\x19\xd3\a\xc6\x9d\xfd\x93\x1a%\xe6\t\xca\x1f\x00'/236}]}, 0x104}, 0x1, 0x0, 0x0, 0x408c811}, 0x20040014) 4.927978339s ago: executing program 3 (id=3832): r0 = socket$kcm(0x2, 0x5, 0x84) syz_emit_ethernet(0x11a, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x41, 0x4, 0x0, 0x8, 0x10c, 0x66, 0x0, 0x7, 0x1, 0x0, @multicast2, @local, {[@rr={0x7, 0x1b, 0x72, [@local, @broadcast, @multicast1, @rand_addr=0x64010102, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xce, 0x1, 0x9, [{@multicast1, 0x8}, {@remote, 0x4}, {@local, 0x80}]}, @cipso={0x86, 0x2d, 0x1, [{0x5, 0x12, "f19fe1e1c41c2520c5f97acad4df3fc1"}, {0x6, 0x4, "9b81"}, {0x2, 0x5, "a28dcb"}, {0x3, 0x7, "4597c383b9"}, {0x5, 0x5, "a7f65d"}]}, @cipso={0x86, 0x27, 0x2, [{0x5, 0x10, "98b08f81f1c7504db443b35c9edf"}, {0x0, 0x6, "c2f1038f"}, {0x7, 0x5, "84e4bb"}, {0x2, 0x6, "9fa36ae0"}]}, @noop, @ssrr={0x89, 0x27, 0xcc, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @private=0xa010100, @broadcast, @multicast2, @rand_addr=0x64010100, @remote]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x7, 0x12, "bbfb54091f3e8994da5056d4ab5e9d00"}, {0x6, 0x6, "d1548764"}, {0x2, 0x6, "a5b98fc5"}, {0x0, 0x3, '2'}, {0x2, 0x8, "6b6ea8961357"}, {0x7, 0xe, "a468354ce5dae910dfcab328"}]}]}}, @info_reply={0x10, 0x0, 0x0, 0x8, 0x101}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3865000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d657461000000001400028008000140000000010800024000000025"], 0xdc}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x77ca, 0x4) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000002c0)=""/76, &(0x7f0000000340)=0x4c) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x20000010) 4.656117768s ago: executing program 2 (id=3833): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000010bfa100000000000007010000f8ffffffb702000008000008b703000002000000850000004800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.603762709s ago: executing program 2 (id=3834): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0xfff0}, {0x0, 0x1}, {0xd, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000030}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40845}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000500)={0x11, 0xf5, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) sendto(r7, &(0x7f00000000c0)='\x00', 0x1, 0x84, 0x0, 0x39) 4.330587437s ago: executing program 1 (id=3835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000580)={'ip6gretap0\x00', &(0x7f0000000540)=@ethtool_sset_info={0x37, 0x47c1, 0xfffffffffffffbff}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7d}}}}}}}}, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x20, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendto$inet6(r4, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r3, 0x0, 0xffffffff000) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000300)) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESOCT=r1, @ANYRESDEC=r6], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000090900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b6574000014000280080001400000000308000240000000171400000011000100"], 0xc4}}, 0x4000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1826db9ed0bf223e7ab8080020ff00020000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 4.159882277s ago: executing program 4 (id=3836): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c5", 0xd}, {&(0x7f0000000100)="051a0000", 0x4}, {&(0x7f0000000200)="73ec500447db", 0x6}], 0x3) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000002c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0xb7b87000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r0, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.811343491s ago: executing program 0 (id=3837): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) 3.79260476s ago: executing program 3 (id=3838): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001300)={'ip6_vti0\x00', &(0x7f0000001280)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x3, 0x9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7, 0x1, 0xffffffc0, 0x400}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001340), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x2a, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x0, 0x1, 0xa, 0x5, 0x1, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}], &(0x7f0000000240)='GPL\x00', 0x8, 0x1000, &(0x7f0000000280)=""/4096, 0x41000, 0x0, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000001380)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000013c0), &(0x7f0000001400)=[{0x5, 0x3, 0xc, 0xa}, {0x0, 0x5, 0xb, 0x4}, {0x3, 0x1}], 0x10, 0x6}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x2a, &(0x7f00000000c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x0, 0x1, 0xa, 0x5, 0x1, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}], &(0x7f0000000240)='GPL\x00', 0x8, 0x1000, &(0x7f0000000280)=""/4096, 0x41000, 0x0, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000001380)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000013c0), &(0x7f0000001400)=[{0x5, 0x3, 0xc, 0xa}, {0x0, 0x5, 0xb, 0x4}, {0x3, 0x1}], 0x10, 0x6}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000001700)={{0xffffffffffffffff, &(0x7f0000001500)='\xd7)/\x00', 0x280, &(0x7f0000001540)={@align=0x1, {0x9, 0x9, 0x84, 0x10}}, 0x7, &(0x7f0000001580), &(0x7f00000015c0)=0x6}, {[0x4c39, 0xf4f, 0xcb, 0xffff1cce]}, 0x5, 0xd6, &(0x7f0000001600)=""/214}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000017c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched_retired(r6, &(0x7f0000001cc0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001800)=@deltclass={0x450, 0x29, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x7, 0xffff}, {0x8, 0xffff}, {0xf, 0xd}}, [@c_cbq={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x81, 0xb, 0x128, 0x280f, 0x5, 0x1, 0x1000, 0x4, 0x2, 0x4, 0x2b, 0x2, 0x6, 0x0, 0x39, 0x9, 0x5, 0x3, 0x9, 0x401, 0x4, 0x80000001, 0xba2e, 0x9, 0xb6, 0xddcb, 0x6, 0x6, 0x8, 0x3, 0x9, 0x5, 0xf, 0x0, 0x2d9f, 0x7, 0x3, 0xf, 0xfffffff8, 0x6, 0x3, 0x210d, 0x40, 0x2, 0x9, 0xc0, 0x800, 0x1, 0x200, 0x0, 0x8, 0x7, 0xffff, 0x10001, 0x12, 0x8, 0x6, 0x2, 0x5, 0x9, 0x89a, 0xffffff7f, 0x2e, 0x8000, 0x7, 0x4, 0x0, 0x5, 0x6, 0x1, 0x40, 0x6, 0x7, 0x81, 0x8, 0x4, 0x231a, 0x9, 0x7ff, 0xdb, 0x0, 0x9, 0x7fffffff, 0x10000, 0xe0, 0x800, 0x0, 0x6, 0x3, 0x7f, 0x8, 0x6, 0x0, 0x6, 0x1, 0xffff, 0x4, 0x32892c1e, 0x7, 0xe2, 0xe, 0x9, 0xff, 0x5, 0xfffffc01, 0x10001, 0xc4f6, 0x81, 0xfffffff7, 0xac48, 0x17, 0x6, 0x5, 0x8, 0x5, 0x6, 0xe, 0xf4, 0x3, 0x8001, 0x8001, 0x6, 0xc, 0x7ff, 0x4f, 0x5, 0x4, 0x7fffffff, 0xfea, 0x0, 0x2, 0x6, 0x8, 0x7, 0xb, 0x5, 0x213, 0x5, 0xd, 0x8, 0x8, 0x3, 0xf, 0xa6, 0xd9, 0xffffffff, 0x6, 0xff, 0xf, 0x1000, 0x78, 0xfffffeff, 0x9, 0xffff, 0x2, 0x0, 0x8, 0x7fffffff, 0x3, 0x7, 0x5, 0x5, 0x5, 0x2, 0x3b, 0x8, 0x3b, 0x2d60, 0x5, 0x101, 0x401, 0x5, 0x0, 0x6bd38d9e, 0x283d, 0x8, 0x6, 0x0, 0x9, 0x8dd7, 0xde, 0xfffffc01, 0xd2e, 0xb9, 0x200, 0x2, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x5, 0x3, 0x4, 0x4, 0xfffffffa, 0xfffff41b, 0xfffc0000, 0x0, 0x7, 0x0, 0x6, 0x7, 0x7fff, 0x7, 0xf742, 0xfffffffd, 0x2, 0x8000, 0x7f, 0x6, 0xb0d, 0x400, 0x3, 0x6, 0x5, 0x0, 0x3, 0x0, 0x76, 0xf44335, 0x9b, 0x800, 0x80000000, 0x2, 0x8001, 0x7, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x7b1, 0x8f0, 0x100, 0x9, 0x3, 0xa, 0x0, 0x7, 0x3f91, 0x7, 0x3, 0xd, 0xfffffffe, 0x0, 0x8001, 0x9df7, 0x5, 0x2, 0xee16, 0x2, 0xb, 0x9, 0x7, 0x1, 0x7]}, @TCA_CBQ_RATE={0x10, 0x5, {0x7f, 0x1, 0x0, 0x1, 0xe, 0x6}}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000001d00)=[0x4, 0x2], 0x2) connect$inet6(r6, &(0x7f0000001d40)={0xa, 0x4e24, 0x3, @empty, 0x1}, 0x1c) (async) connect$inet6(r6, &(0x7f0000001d40)={0xa, 0x4e24, 0x3, @empty, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001d80)={0x0, 0x306, 0x6, 0x4}, &(0x7f0000001dc0)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001d80)={0x0, 0x306, 0x6, 0x4}, &(0x7f0000001dc0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000001e00)={0x1, 0x8004, 0x8187, 0xaf9, r8}, &(0x7f0000001e40)=0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000001e80)={0x0, 0x7}) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000001e80)={0x0, 0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f40)={{r6, 0xffffffffffffffff}, &(0x7f0000001ec0), &(0x7f0000001f00)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002000)={{r6, 0xffffffffffffffff}, &(0x7f0000001f80), &(0x7f0000001fc0)=r5}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002240)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x21, &(0x7f0000002040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2a617d8c}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @ldst={0x0, 0x3, 0x2, 0x6, 0x0, 0xc, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000002180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x18, '\x00', r3, @fallback, r4, 0x8, &(0x7f00000021c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000002200)={0x4, 0x4, 0x7, 0x4}, 0x10, 0xffffffffffffffff, r6, 0x9, &(0x7f0000002280)=[r11, r2, r2], &(0x7f00000022c0)=[{0x0, 0x3, 0x1, 0xc}, {0x4, 0x3, 0xc}, {0x0, 0x5, 0x6, 0x6}, {0x1, 0x3, 0x7, 0x2}, {0x0, 0x5, 0x8, 0x7}, {0x3, 0x2, 0xf, 0x3}, {0x0, 0x3, 0xe, 0x5}, {0x1, 0x4, 0xb}, {0x0, 0x2, 0x4}], 0x10, 0x5}, 0x94) setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000002440)={{0xa, 0x4e24, 0x400, @loopback, 0x702}, {0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}, 0xffffffffffffffff, {[0xffffff00, 0xffffff33, 0x5d5d5c2c, 0x6, 0xaa, 0x6f, 0x7, 0xa]}}, 0x5c) (async) setsockopt$MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000002440)={{0xa, 0x4e24, 0x400, @loopback, 0x702}, {0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}, 0xffffffffffffffff, {[0xffffff00, 0xffffff33, 0x5d5d5c2c, 0x6, 0xaa, 0x6f, 0x7, 0xa]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000002680)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002640)={&(0x7f0000002500)={0x130, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa4c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xcd70}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffa}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5eb}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x346}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0xb, 0x1, 0x5, 0x7, 0xffffff01, 0x8, 0x8, 0x6, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xd, 0x10, 0x8]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x6, 0x0, 0x2104, 0x4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x3, 0x7f, 0x6, 0x81, 0xf, 0x9, 0x1, 0x7f, 0x2]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) (async) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000002680)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002640)={&(0x7f0000002500)={0x130, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa4c}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xcd70}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x400}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffa}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5eb}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x346}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0xb, 0x1, 0x5, 0x7, 0xffffff01, 0x8, 0x8, 0x6, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xd, 0x10, 0x8]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x6, 0x0, 0x2104, 0x4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x3, 0x7f, 0x6, 0x81, 0xf, 0x9, 0x1, 0x7f, 0x2]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000026c0)={0x0, 0xdd, 0x200, 0x17, 0x2, 0x7}, 0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002880)={0x3}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002880)={0x3, 0x0}, 0x8) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c80)=@bpf_ext={0x1c, 0x2b, &(0x7f00000028c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb6a0a70}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x401}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0xa, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000002a40)='syzkaller\x00', 0x10000, 0xe8, &(0x7f0000002a80)=""/232, 0x40f00, 0x43, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002b80)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2534d, r5, 0x6, &(0x7f0000002bc0)=[r1, r6, r1, r11, r1, r6, r9, r2, r6, r9], &(0x7f0000002c00)=[{0x3, 0x2, 0x0, 0x5}, {0x5, 0x2, 0x4, 0x1}, {0x5, 0x1, 0x7, 0x6}, {0x3, 0x3, 0xa, 0x8}, {0x2, 0x5, 0xd, 0x3}, {0x1, 0x2, 0xb, 0x7}], 0x10, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x1, 0x3, &(0x7f0000002700)=@raw=[@ldst={0x3, 0x0, 0xd, 0x6, 0xa, 0x20, 0xfffffffffffffff0}, @map_val={0x18, 0x2, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000002740)='syzkaller\x00', 0x7dd12756, 0xf9, &(0x7f0000002780)=""/249, 0x40f00, 0x45, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r14, 0x0, &(0x7f0000002d40)=[r1], 0x0, 0x10, 0x4}, 0x94) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002f00)={r8, 0xbc, &(0x7f0000002e40)=[@in6={0xa, 0x4e21, 0x97d, @private1, 0x8}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0xe}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e20, 0x17c, @empty, 0xeb1}, @in6={0xa, 0x4e20, 0x9, @remote, 0x5}, @in6={0xa, 0x4e22, 0x1000, @private2}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000002f40)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002f00)={r8, 0xbc, &(0x7f0000002e40)=[@in6={0xa, 0x4e21, 0x97d, @private1, 0x8}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0xe}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e20, 0x17c, @empty, 0xeb1}, @in6={0xa, 0x4e20, 0x9, @remote, 0x5}, @in6={0xa, 0x4e22, 0x1000, @private2}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000002f40)=0x10) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000002f80)=0x4226, 0x4) sendmsg$NFT_BATCH(r12, &(0x7f0000003300)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003000)={{0x14}, [@NFT_MSG_NEWTABLE={0x144, 0x0, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xeb, 0x6, "23c6f30568a437fd6157e10b3160583ad1148720467033891364ffd8cf03128efb283db616ef714a0961ba50f18cdeba84688dc9a1b61676505deedea5c0b192ba33cf7d38831e0f7b1b60095c3664c6b9ba86fe105971c4d70d9516b022af93f75939239262b57fecd44f51e8dc6d84dd10fad43225e0e9e3720f84a514270dfd2bc105d6d315628f6e369529e59731cd079e484762107ebc8b66d7ab18593403f1b93cd07d8f3837bce3066cfd01072261541b28b764d2817ad7c55c2439c2095bc144aba1d946d44f9048575f117155c9759e9fd2f032d9af6af34b970db20045136b9e75c2"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x13c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x49, 0xc, "18ddcd0b4230ad033ac3148eaf12bd74c38908420824b3c3b88b89d2961c5c3c52e88e2d7b0a3a8abcdcfe6d0d99757af68d2e60d9e46922d9ee45681941b584eade94cdbc"}, @NFTA_CHAIN_USERDATA={0x7e, 0xc, "f9986517e659b8dc74d83eb11e654ad8c666c4bf30d51166bd977d6122cfa909ced677dac892d94bf1421f0d04a7b56d11aa3f9c912c536d7e8364f674d0f6416ca7e5b105905d8f2b410d57ec13b555ff47c6a69182eaace909312c44cb88e83d4325349cb2a42aa12a6a65c61b07a4a6c3860d40d810a071b3"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x2a8}, 0x1, 0x0, 0x0, 0x4000844}, 0x80) socket(0x0, 0x4, 0x4) (async) socket(0x0, 0x4, 0x4) 3.509236902s ago: executing program 2 (id=3839): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) pselect6(0x0, 0x0, &(0x7f0000000200)={0x0, 0x5, 0x1000, 0x4, 0x7fff, 0x200, 0x1, 0x8}, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000380)={@private=0xa010100, @broadcast}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000280)={'wlan1\x00'}) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d2ee9ea6a174880b96f40a9eefbc8d23da7971856981a796b64ac6515d6403da66c3743f7ba0c04f8f604058fca56abab92aca03c73b83c6ae335d1eaad0c249adb2fe723bde8054b8401d33d166eaaf30c434c95d9a7627c883c2e6424c8adf2444a66fb5583af32ba0f22d493c1141288a28ee7428af8bfe99bef4eb1512d6bf586958d80c0a8be354a7c7b16cebd356d63b0cbb4a1190d5f3a82fd2f7fd0f36274be4cf84aac510f0c38dad06429a098fe6ce7269372d071e78dac6559427fc114e1309"], 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x4040800) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0x7, &(0x7f0000000100)=0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000000), 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000000)=0x40, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000001b40)=[{&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/223, 0xdf}, {&(0x7f00000016c0)=""/218, 0xda}, {&(0x7f00000017c0)}, {&(0x7f0000001800)=""/86, 0x56}, {&(0x7f0000001880)=""/227, 0xe3}, {&(0x7f0000001980)=""/150, 0x96}, {&(0x7f0000001a40)=""/100, 0x64}, {&(0x7f0000001ac0)=""/98, 0x62}], 0xa}, 0x1}, {{&(0x7f0000001c00)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001c80)=""/205, 0xcd}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/203, 0xcb}], 0x3}, 0x2}, {{&(0x7f0000002ec0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002f40)=""/108, 0x6c}], 0x1, &(0x7f0000003000)=""/161, 0xa1}, 0x9}], 0x3, 0x45833af92e4b39ff, 0x0) getsockopt$inet_mreq(r5, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @dev}, &(0x7f0000000080)=0x8) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) 3.450621404s ago: executing program 0 (id=3840): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@getchain={0x3c, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {0xfff3, 0xffe0}, {0xc, 0x6}}, [{0x8, 0xb, 0xfb}, {0x8, 0xb, 0x5}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x20040844) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) 3.314984234s ago: executing program 4 (id=3841): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000001000000000000000300000085000000410000001800000003000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r2, 0x0, 0xb90, 0x0, &(0x7f00000002c0)="000000005b4eba7aeaccd2c62b2b", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="020029bd7000fbdbdf25160000000c00060001000000010000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000000000000c000600030000791107abe0aed2369611a77fb126fa00030000000c00060003000000030000000c000600033c230d85ba423b0702c4d67500000000000000c33e0106f546040df86a3f5330150f94be9e4429451cd6642a2689b289ba059071081cbbb0f361a566b5c9842c608ee33bcacb91ec1303b6c455f4bc876c38629fd0cc36505f345b3be4795976da2dd50440fcc23784b297a9b5aa302e0f43aa6f3acd76d97c6ca4a477e4d7f159d80ea045059329410b2d4f826258629c9ae0ab1e0f5b24"], 0x64}, 0x1, 0x0, 0x0, 0x4000084}, 0x8001) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2, 0xc}, {0x1, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x50, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20000040) 2.95589282s ago: executing program 1 (id=3842): unshare(0x68020000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001000010025bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a4301000000000014001680100001800c00090002000000ffff000014000300626f6e645f736c6176655f300000000008000a00", @ANYRES32=0x0, @ANYBLOB="33732d15f131e345dbbb55db98a1acfc3573e3d31bd9212206880ced033481f09ac054e54e67d77570f16d3b24ceeea7fcb0f67b02851a59640f684230d1de8faf3097629036acfcf14473d47d75354f16d6e127ad29561e0fdffe7876c6645a97e58a000000000000000000000000769b84f9d66bac82768cd145af8b4284315dcfc2c7b31afbf4928c7707a026fc0166e2295304056ce6aa66515df3de8ad0428316c2d3360e935e922ae7ab38af8d822ba4902f3a8db9b073248d54cafa2bb4fea60aebbe92e4025f952029d866aa4820f18cfcf0c2b41100e7036cfce5592ceb2cddabd2df69794369c5c63e05880c8a2169f5c8bb02f8d47481382069f0c7c027b0e603feb36b08cd70305109e46815f4ca55caede0e9f6c4e8fe0260d27686b8820fd54610bc3ca7c97e5cf5b5e5e01d32a36284ce391bd1d7943d0d911d77f7d1fd1b20c864c452eed294789bc09e9b3594013cd614d4fb140eb07746ef4ca8db2108f091e4f7245b2e5a8ae971cbde2c27406bf3e891017ad19156463396720168f2dcbf6c2105"], 0x50}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000480)={{r4, &(0x7f00000001c0)='devlink\x00', 0x400400, &(0x7f0000000200)={@align=0x800, {0xff01, 0x7, 0xe230, 0xda0}}, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4}, {[0x8, 0x8000, 0x5e, 0x7]}, 0x4, 0x1a, &(0x7f0000000440)=""/26}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r6, 0x58, &(0x7f0000000500)}, 0x10) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0xfffffffffffffe30, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa902, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x2, 0xfffff000}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000a4fa4cb92262e07256eadfbadf8c74f114df877549a150e8afe78b845970f1f221067559b01be897da7edaa37983d3d79c108b6a8814f3476756b690d6b6aa741f10e9cb29105cf526bf15d74d1b3653d30200000000000000028eb69919a1e07513fea9b6c1e0ed", @ANYRES16=r10, @ANYBLOB="31072bbd700000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x2}, 0x20000014) 2.950978296s ago: executing program 0 (id=3843): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000010201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d20000060003000015"], 0xc8}}, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0xe) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$key(0xf, 0x3, 0x2) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000340)) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000c0000a2c000000180a010300000000000000000a00000509006500020073797a3200000000140000001100010000000000000000000200000a00"/84], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) splice(r5, 0x0, r7, 0x0, 0x3000, 0x100000000000000d) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 2.855199241s ago: executing program 3 (id=3844): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000500bfa100000000000007010000f8ffffffb702000008000008b703000002000000850000004800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.373752455s ago: executing program 3 (id=3845): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xa, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="180000008d0000000000000003fa000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00006a00000086000000bf0920000000000055090100ffffffff950000000000000018000000000000000000000007000000bf91000000000000b702000003000000850000002a000000b70000000000003e9500"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0xe138, 0x198, 0x130, 0x198, 0x1c0, 0x358, 0x358, 0x1c0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth0_to_bond\x00', {}, {}, 0x29}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x0, 0x27bc, 0x3, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x13, &(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185a00000a0000000000000000646c6c2500000000002020207b1af8ff00000000bfa100000000000007014000f8ffffffb7910e0008000000b7030000040000008500000006000000"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x8e, &(0x7f00000003c0)=""/142, 0x0, 0x4ff658dcec598ed4, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x8, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000700)=[0x1, 0x1], &(0x7f0000000540)=[{0x1, 0x3, 0x6, 0x8}, {0x1, 0x4, 0x4, 0x6}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xf, 0x2}, {0x2, 0x3, 0x3, 0xd848aa3c7e609454}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x34, 0x0, &(0x7f00000006c0)="5eb62788ecd1fe7f42e4aef38559af2d395eb652c9f8b99a2dd70318b3f673a0903c71503aae9e9e010d095dd94bf0f8891180ce", &(0x7f0000000700), 0xa0, 0x0, 0xab, 0x0, &(0x7f0000000740)="24f2319e8da38ac1031aa8085e7b1f73bc5e2b04052f2ac22afc13d8ba595fda24cd5ab55e73a13c964e2d5d896de90be54fb6255d25ee329a8e4b1607f29abd27b7adc2ed30bf69a3b0630fe2a39af9b74558c3311e55f8991854dc866615442574cad5dbff6ae003c970e14e58d1e1be7c61cba92a49d0110989a24ee4908c7ffd406faac66ace0a40a1a56d5c8c0acdf1931485671cae03467246f523393d92766c44ede51de998bb55", 0x0, 0x3, 0x0, 0x8}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000500)) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r9, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010428bd70000100000000130000", @ANYRES32=0x0, @ANYBLOB="08000000000001002c00128009000100766c616e000000001c000280060001000200000006000100020000000600050088a8000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0xf) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900040c01001c00128009000100626f6e64000000000c08028008000b00", @ANYRES32=r13, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r15, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 2.159602324s ago: executing program 4 (id=3846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x9, 0x70bd29, 0xffffffff, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x20000000}, 0x2}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x14004008) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.604883865s ago: executing program 4 (id=3847): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='@$\x00', 0xc040, &(0x7f0000000040)={@align=0xe9c7, {0x9, 0x6, 0xffffff7f, 0x8}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7fff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'TIPC\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @local}}, [0x400, 0x1, 0x8, 0x3, 0x5, 0x6, 0x78bafc91, 0x1, 0x4, 0x9, 0x7f, 0x6, 0xfffffffffffffffc, 0x3, 0x1000]}, &(0x7f0000000300)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e21, 0x40, @dev={0xfe, 0x80, '\x00', 0x15}, 0x4}}, 0x7ffffffc, 0x2, 0x8, 0x7fffffff, 0x7}, &(0x7f0000000400)=0x98) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r4, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000300)=0xcf99, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) poll(&(0x7f0000000180)=[{r6, 0xe203}, {r5, 0x8000}, {r5, 0x2400}, {r5, 0x10100}, {r6, 0xc030}, {r5, 0x23}, {r5, 0x24}, {r5, 0x290}, {r7, 0x40}], 0x9, 0x40) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0xc, [{@multicast2}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r11, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x95c5c52c0427a77b}, 0x2400c8c0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r12, 0x400448ca, 0x0) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r13, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7fff, @media='ib\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc800}, 0xc150) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x9, {{0xa, 0x4e21, 0xb6, @empty, 0x80000000}}}, 0x88) 1.51661393s ago: executing program 2 (id=3848): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000015010200e9ffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x9, 0x7ff, {{0x2f, 0x4, 0x1, 0x11, 0xbc, 0x65, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @local, {[@rr={0x7, 0x23, 0xac, [@multicast1, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @remote]}, @rr={0x7, 0x1b, 0x21, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @private=0xa010100, @rand_addr=0x64010100, @remote]}, @cipso={0x86, 0x16, 0x0, [{0x0, 0x5, "4ecad6"}, {0x2, 0xb, "25e037f1db9febfbe2"}]}, @rr={0x7, 0x23, 0xfe, [@multicast2, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @multicast1, @remote]}, @cipso={0x86, 0x1e, 0x3, [{0x1, 0xc, "f601fff3065b6c926bd4"}, {0x903d8daef78d7f81, 0x3, "a4"}, {0x2, 0x9, "6bf05a99e422c5"}]}, @noop, @generic={0x86, 0x12, "920eeea57449907a59b3c97afd90c53d"}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2}]}}, 0x0, 0x2a, 0x0, 0x1, 0xfffff354}, 0x28) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0x2, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0}, 0x40) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r6, &(0x7f0000000000), 0x0, 0x1}, 0x20) r7 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r7, 0x0, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x1, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x3, 0x3, 0x7, 0x4, 0x2, 0x8}], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xa, 0xe88, 0x1000}, 0x10, 0x39c8, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x2, 0x9, 0xb}], 0x10, 0x5}, 0x94) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r11, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000010) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r13, 0x89e3, &(0x7f0000004580)={0xa, 0x7fff, 0x5, 0x4, 0x0, 0x40}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, r11, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x4d}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3580}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1e7d}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x43}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x283}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x48}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4090}, 0x80c0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex=r8, 0xffffffffffffffff, 0xa, 0x18, 0x0, @void, @value=r9, @void, @void, r5}, 0x20) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa0, 0x0, 0x100, 0x70bd29, 0x2, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x800) 1.31546394s ago: executing program 0 (id=3849): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) unshare(0x4a040000) 995.678161ms ago: executing program 4 (id=3850): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) 890.012618ms ago: executing program 3 (id=3851): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) unshare(0x20000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000003740)=""/4096, 0x1000}], 0x1, 0x0, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x2, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004041) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000100)=0x1000002, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616ef314000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 724.931924ms ago: executing program 4 (id=3852): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000040, 0x8, 0x0, 0x0}}, 0x10) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r7, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}}, 0x400400c) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7, 0x62a5, 0x7}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r10 = socket(0x0, 0xa, 0xffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r13, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd4, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9c}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '$-'}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, '#./!$--['}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x84}, 0x20000014) 0s ago: executing program 3 (id=3853): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) unshare(0x20400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x0, 0x5979449deeec1e48, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x781e524c265f1956}, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f00000000c0), 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001340)={0x0, 0xfffffffffffffd29, &(0x7f0000001300)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0xc000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304, 0x36}, "00257059cb008000", "8b3de2aabceef22f419e59f30000000004000000000200", "07350080", "000000d900"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304, 0x36}, "b398a992143a240d", "d036788c4aaf9c6ef96dda7201d2d2a5", "1a13ecde", "0597b7f1463f0f33"}, 0x28) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000000000)=[0x5, 0x3]) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x6040850}, 0x20040040) close(0x3) kernel console output (not intermixed with test programs): [ 526.177494][T19601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 526.434353][T19596] geneve1: entered promiscuous mode [ 526.641629][ T41] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.641673][ T41] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.641705][ T41] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.641736][ T41] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.875923][ T5614] syz_tun (unregistering): left allmulticast mode [ 527.349871][ T145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.463120][T19311] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 527.697825][ T145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.107809][ T145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.261975][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 528.262266][T19311] Bluetooth: hci3: command tx timeout [ 528.442636][ T145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.901438][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 529.364324][ T145] bridge_slave_1: left allmulticast mode [ 529.364571][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.490803][ T145] pim6reg: left allmulticast mode [ 530.317802][ T31] audit: type=1804 audit(1790434436.587:18): pid=19713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3128" name="/newroot/52/cgroup.controllers" dev="tmpfs" ino=284 res=1 errno=0 [ 530.317924][ T31] audit: type=1800 audit(1790434436.587:19): pid=19713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3128" name="cgroup.controllers" dev="tmpfs" ino=284 res=0 errno=0 [ 530.347031][T19311] Bluetooth: hci3: command tx timeout [ 530.526670][ T145] .` (unregistering): Released all slaves [ 530.541383][ T145] bond1 (unregistering): Released all slaves [ 530.572402][ T145] bond2 (unregistering): Released all slaves [ 530.623065][ T145] bond0 (unregistering): Released all slaves [ 530.644834][ T145] bond3 (unregistering): Released all slaves [ 530.670227][ T145] bond4 (unregistering): Released all slaves [ 530.696022][ T145] bond5 (unregistering): Released all slaves [ 530.743824][ T145] bond6 (unregistering): Released all slaves [ 530.765311][T19593] netdevsim0 speed is unknown, defaulting to 1000 [ 530.766430][T19707] geneve1: left promiscuous mode [ 530.857813][T19713] veth3: entered allmulticast mode [ 530.942351][ T145] ovs-dp0: left promiscuous mode [ 531.044596][ T145] tipc: Disabling bearer [ 531.052919][ T145] tipc: Left network mode [ 531.188869][ T145] IPVS: stopping master sync thread 13697 ... [ 531.275956][T19727] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 531.310532][T19733] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.312848][T19733] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.498467][T19730] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 531.643477][T19734] virt_wifi0: entered promiscuous mode [ 531.643499][T19734] virt_wifi0: entered allmulticast mode [ 531.947349][T19748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3135'. [ 532.000948][T19750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3135'. [ 532.422082][T19311] Bluetooth: hci3: command tx timeout [ 533.168607][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 533.546819][T19800] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3143'. [ 533.793959][T19593] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.796162][T19593] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.796322][T19593] bridge_slave_0: entered allmulticast mode [ 533.799997][T19593] bridge_slave_0: entered promiscuous mode [ 533.971980][ T145] hsr_slave_0: left promiscuous mode [ 533.975276][ T145] hsr_slave_1: left promiscuous mode [ 534.494808][T19832] netlink: 'syz.0.3147': attribute type 58 has an invalid length. [ 534.494833][T19832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3147'. [ 534.501377][T19311] Bluetooth: hci3: command tx timeout [ 534.781610][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3148'. [ 535.038513][ T8393] smc: removing ib device syz0 [ 535.320156][T19593] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.320268][T19593] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.320420][T19593] bridge_slave_1: entered allmulticast mode [ 535.324262][T19593] bridge_slave_1: entered promiscuous mode [ 535.413108][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 535.533706][T19839] netlink: 'syz.1.3148': attribute type 1 has an invalid length. [ 535.533727][T19839] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3148'. [ 535.534100][T19839] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 535.738872][T19593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.748310][ T8393] smbdirect: ib_dev[syz0] removed [ 535.828176][T19593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.856122][T19851] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 536.378221][T19593] team0: Port device team_slave_0 added [ 536.420774][T19593] team0: Port device team_slave_1 added [ 536.513130][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3154'. [ 536.513967][T19884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3155'. [ 536.579212][T19888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3155'. [ 536.696610][T19890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3156'. [ 536.874943][T19593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.874962][T19593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.874987][T19593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.895420][T19593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.895438][T19593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.895461][T19593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.962925][T19890] netlink: 'syz.0.3156': attribute type 1 has an invalid length. [ 536.962946][T19890] __nla_validate_parse: 1 callbacks suppressed [ 536.962958][T19890] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3156'. [ 537.305701][T19903] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 537.467551][T19593] hsr_slave_0: entered promiscuous mode [ 537.490945][T19593] hsr_slave_1: entered promiscuous mode [ 537.500346][T19593] debugfs: 'hsr0' already exists in 'hsr' [ 537.500367][T19593] Cannot create hsr debugfs directory [ 537.530536][T19904] xt_hashlimit: size too large, truncated to 1048576 [ 537.621166][T19905] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 537.621191][T19905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3158'. [ 538.504422][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3165'. [ 538.504445][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3165'. [ 538.539190][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 538.596082][T19946] netlink: 'syz.0.3165': attribute type 1 has an invalid length. [ 538.617943][T19953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3165'. [ 538.627781][T19950] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3167'. [ 538.677227][T19954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3167'. [ 538.757297][T19942] bridge2: entered promiscuous mode [ 539.180456][T19950] netlink: 239 bytes leftover after parsing attributes in process `syz.2.3167'. [ 539.250936][T19945] bridge2: entered promiscuous mode [ 539.660621][T19972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3170'. [ 539.737382][T19967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3169'. [ 539.990310][T19980] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 540.232569][T19983] ip_tables: iptables: counters copy to user failed while replacing table [ 542.468103][T19593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 542.695204][T20046] __nla_validate_parse: 1 callbacks suppressed [ 542.695222][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'. [ 543.066366][T19593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.279719][T19593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 543.291116][T20052] netlink: 'syz.1.3184': attribute type 10 has an invalid length. [ 543.310923][T19593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.341621][T20054] netlink: 'syz.1.3184': attribute type 10 has an invalid length. [ 543.380590][T20052] team0: Port device dummy0 added [ 543.392557][T19593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 543.427485][T19593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.430061][T19593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 543.482172][T19593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 543.538521][T20054] team0: Port device dummy0 removed [ 543.632129][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 543.768180][T20077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3190'. [ 543.769805][T20080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3190'. [ 543.875969][T20081] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3188'. [ 543.876819][T20081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3188'. [ 544.084763][T19593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.146133][T19593] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.189214][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.189311][ T8393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.265360][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.265492][ T8393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.410540][T20105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3193'. [ 545.220586][ T31] audit: type=1804 audit(1790434451.487:20): pid=20129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3197" name="/newroot/72/cgroup.controllers" dev="tmpfs" ino=390 res=1 errno=0 [ 545.244407][ T31] audit: type=1800 audit(1790434451.517:21): pid=20129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3197" name="cgroup.controllers" dev="tmpfs" ino=390 res=0 errno=0 [ 545.291743][T20129] No such timeout policy "syz0" [ 545.408527][T20146] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3201'. [ 545.426567][T20146] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003 [ 545.514756][T20149] openvswitch: netlink: IPv6 tunnel dst address is zero [ 545.542360][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 545.546237][T20133] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3198'. [ 545.690203][T19593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.854715][T19593] veth0_vlan: entered promiscuous mode [ 545.924292][T19593] veth1_vlan: entered promiscuous mode [ 546.097029][T20168] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 546.132467][T20168] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 546.234828][T19593] veth0_macvtap: entered promiscuous mode [ 546.254737][T19593] veth1_macvtap: entered promiscuous mode [ 546.277142][T20175] netlink: 'syz.1.3207': attribute type 10 has an invalid length. [ 546.358580][T20175] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.405335][T20175] team0: Port device netdevsim1 added [ 546.565064][T20190] netlink: 'syz.1.3207': attribute type 10 has an invalid length. [ 546.607755][T19593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.640683][T20190] team0: Port device netdevsim1 removed [ 546.652369][T20190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.654493][T20190] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 546.688024][T19593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.722876][ T8399] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.724039][ T8393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.724076][ T8393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.724108][ T8393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.360026][T20231] sctp: [Deprecated]: syz.0.3214 (pid 20231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.360026][T20231] Use struct sctp_sack_info instead [ 547.553335][T20204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.988785][ T8387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.988807][ T8387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.246533][ T8387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.246554][ T8387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.373435][T20266] netlink: 'syz.0.3220': attribute type 3 has an invalid length. [ 548.697160][T20277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3224'. [ 548.783864][ T145] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 548.845390][T20277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 548.874540][T20277] syzkaller1: entered promiscuous mode [ 548.876828][T20277] syzkaller1: entered allmulticast mode [ 549.060037][T19601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 549.063915][T19601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 549.070734][T19601] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 549.085241][T19601] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 549.085953][T19601] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 549.426949][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 549.493158][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 549.578972][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3229'. [ 549.917642][T20313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.971066][T20329] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3234'. [ 549.987450][T20313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.998821][T20313] bond0 (unregistering): Released all slaves [ 550.136194][ T8387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.136226][ T8387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 550.136251][ T8387] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 47218 - 0 [ 550.266125][T20340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3237'. [ 550.269870][T20335] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3236'. [ 550.355288][T20294] netdevsim0 speed is unknown, defaulting to 1000 [ 550.471614][ T8387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.471648][ T8387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 550.471672][ T8387] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 47218 - 0 [ 550.791481][T20340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.799644][T20340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.947525][T20356] netlink: 'syz.3.3242': attribute type 1 has an invalid length. [ 551.151854][T19601] Bluetooth: hci2: command tx timeout [ 551.161181][ T8387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.184280][ T8387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 551.184318][ T8387] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 47218 - 0 [ 551.234268][ T145] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.234315][ T145] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.234349][ T145] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.234382][ T145] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.356271][ T8387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.356305][ T8387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 551.358948][ T8387] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 47218 - 0 [ 551.409366][ T8399] smbdirect: ib_dev[syz2] removed [ 551.644723][T20368] tipc: Enabled bearer , priority 0 [ 551.708487][T20368] syzkaller0: entered promiscuous mode [ 551.708511][T20368] syzkaller0: entered allmulticast mode [ 551.945493][T20368] tipc: Resetting bearer [ 551.962399][T20374] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 551.968381][T20367] tipc: Resetting bearer [ 552.019479][T20367] tipc: Disabling bearer [ 552.398442][ T8387] bond4: left allmulticast mode [ 552.398464][ T8387] ip6gre2: left allmulticast mode [ 552.477864][ T8387] bond4 (unregistering): (slave ip6gre2): Releasing backup interface [ 552.477899][ T8387] ip6gre2 (unregistering): left promiscuous mode [ 552.920070][ T8387] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 553.038768][ T8387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.052772][ T8387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.056626][ T8387] bond0 (unregistering): Released all slaves [ 553.081849][ T8387] bond1 (unregistering): Released all slaves [ 553.106024][ T8387] bond2 (unregistering): Released all slaves [ 553.132017][ T8387] bond3 (unregistering): Released all slaves [ 553.160993][ T8387] bond4 (unregistering): Released all slaves [ 553.185087][ T8387] bond5 (unregistering): Released all slaves [ 553.207218][ T8387] bond6 (unregistering): Released all slaves [ 553.222262][T19601] Bluetooth: hci2: command tx timeout [ 553.230928][ T8387] bond7 (unregistering): Released all slaves [ 553.263020][ T8387] bond8 (unregistering): Released all slaves [ 553.295488][ T8387] bond9 (unregistering): (slave veth13): Releasing active interface [ 553.297481][ T8387] bond9 (unregistering): (slave veth15): Releasing active interface [ 553.300415][ T8387] bond9 (unregistering): Released all slaves [ 553.339514][ T8387] bond10 (unregistering): Released all slaves [ 553.368827][ T8387] bond11 (unregistering): (slave veth0_to_bond): Releasing active interface [ 553.389150][ T8387] bond11 (unregistering): Released all slaves [ 553.444503][ T8387] bond12 (unregistering): Released all slaves [ 553.878237][ T8387] tipc: Disabling bearer [ 553.926943][ T8387] tipc: Left network mode [ 554.058527][T20294] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.058632][T20294] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.058773][T20294] bridge_slave_0: entered allmulticast mode [ 554.066364][T20294] bridge_slave_0: entered promiscuous mode [ 554.224266][T20294] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.224391][T20294] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.224548][T20294] bridge_slave_1: entered allmulticast mode [ 554.238583][T20294] bridge_slave_1: entered promiscuous mode [ 554.630099][T20435] syzkaller1: entered promiscuous mode [ 554.630122][T20435] syzkaller1: entered allmulticast mode [ 555.148429][T20294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.301939][T19601] Bluetooth: hci2: command tx timeout [ 555.405209][T20455] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3259'. [ 555.688268][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 555.704575][T20294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.814570][T20294] team0: Port device team_slave_0 added [ 555.817671][T20294] team0: Port device team_slave_1 added [ 556.043784][T20469] lo: Caught tx_queue_len zero misconfig [ 556.049196][T20294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.049213][T20294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.049235][T20294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.136863][T20294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.136878][T20294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.136897][T20294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.155471][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 556.155511][T20470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3262'. [ 556.650515][T20294] hsr_slave_0: entered promiscuous mode [ 556.655703][T20294] hsr_slave_1: entered promiscuous mode [ 556.658616][T20294] debugfs: 'hsr0' already exists in 'hsr' [ 556.658635][T20294] Cannot create hsr debugfs directory [ 556.911191][T20483] bond0: entered promiscuous mode [ 556.916155][T20483] bond0: entered allmulticast mode [ 557.177868][T20504] net wpan0: Using DEBUGing ioctl SIOCSIFADDR isn't recommended! [ 557.381849][T19601] Bluetooth: hci2: command tx timeout [ 557.542337][T20516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3270'. [ 557.582385][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 557.622644][T20526] netlink: 'syz.1.3272': attribute type 16 has an invalid length. [ 557.622664][T20526] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3272'. [ 557.769734][T20523] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3271'. [ 557.798828][T20542] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 558.855680][ T8387] hsr_slave_0: left promiscuous mode [ 559.110830][T20626] sctp: [Deprecated]: syz.0.3277 (pid 20626) Use of int in maxseg socket option. [ 559.110830][T20626] Use struct sctp_assoc_value instead [ 560.598968][ T8387] team0 (unregistering): Port device team_slave_1 removed [ 560.619308][ T8387] team0 (unregistering): Port device team_slave_0 removed [ 560.836179][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 561.888713][T20682] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3289'. [ 561.910573][T20679] batman_adv: batadv0: Adding interface: syzkaller0 [ 561.910591][T20679] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.910620][T20679] batman_adv: batadv0: Interface activated: syzkaller0 [ 561.963805][T20676] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 562.108337][T20676] batman_adv: batadv0: Removing interface: syzkaller0 [ 562.529039][T20707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3292'. [ 562.736970][T20722] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3294'. [ 562.855025][T20708] bond18 (unregistering): Released all slaves [ 563.015840][T20722] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3294'. [ 563.458709][T20294] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 563.489028][T20294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 563.490001][T20294] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 563.510419][T20294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 563.519193][T20294] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 563.539748][T20294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 563.553937][T20294] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 563.588535][T20749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3301'. [ 563.615479][T20294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.814687][T20763] pim6reg: entered allmulticast mode [ 563.967038][T20766] netlink: 'syz.1.3302': attribute type 1 has an invalid length. [ 564.083439][T20772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'. [ 564.128992][T20766] bond1: entered promiscuous mode [ 564.138204][T20766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.179997][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 564.197880][T20770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.199513][T20770] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 564.199533][T20770] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 564.232302][T20770] bond1: (slave gre1): making interface the new active one [ 564.232326][T20770] gre1: entered promiscuous mode [ 564.269153][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 564.275964][T20770] bond1: (slave gre1): Enslaving as an active interface with an up link [ 564.383093][T20766] bond1 (unregistering): (slave gre1): Releasing backup interface [ 564.383120][T20766] gre1: left promiscuous mode [ 564.388457][T20766] bond1 (unregistering): Released all slaves [ 564.492699][T20294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.558590][T20294] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.635224][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.635326][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.672170][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.672287][ T8389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.749004][T20796] lo: entered promiscuous mode [ 564.760486][T20796] tunl0: entered promiscuous mode [ 564.776549][T20794] netlink: 'syz.2.3306': attribute type 1 has an invalid length. [ 564.776651][T20796] gre0: entered promiscuous mode [ 564.780510][T20796] gretap0: entered promiscuous mode [ 564.797203][T20795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3306'. [ 564.820500][T20796] erspan0: entered promiscuous mode [ 564.837322][T20796] ip_vti0: entered promiscuous mode [ 564.847528][T20796] ip6_vti0: entered promiscuous mode [ 564.857756][T20796] sit0: entered promiscuous mode [ 564.887326][T20796] ip6tnl0: entered promiscuous mode [ 564.960769][T20796] ip6gre0: entered promiscuous mode [ 564.984934][T20796] ip6gretap0: entered promiscuous mode [ 565.002876][T20796] vcan0: entered promiscuous mode [ 565.024378][T20796] bond0: entered promiscuous mode [ 565.024399][T20796] bond_slave_0: entered promiscuous mode [ 565.024981][T20796] bond_slave_1: entered promiscuous mode [ 565.052948][T20796] team0: entered promiscuous mode [ 565.053096][T20796] team_slave_0: entered promiscuous mode [ 565.053275][T20796] team_slave_1: entered promiscuous mode [ 565.085122][T20796] : entered promiscuous mode [ 565.105851][T20796] nlmon0: entered promiscuous mode [ 565.114033][T20796] batadv0: entered promiscuous mode [ 565.126092][T20796] vxcan0: entered promiscuous mode [ 565.163944][T20796] vxcan1: entered promiscuous mode [ 565.170364][T20796] veth0: entered promiscuous mode [ 565.188235][T20796] veth1: entered promiscuous mode [ 565.210432][T20796] wg0: entered promiscuous mode [ 565.230518][T20796] wg1: entered promiscuous mode [ 565.240674][T20796] wg2: entered promiscuous mode [ 565.251110][T20796] veth0_to_bridge: entered promiscuous mode [ 565.267049][T20796] bridge_slave_0: entered promiscuous mode [ 565.296119][T20796] veth1_to_bridge: entered promiscuous mode [ 565.317385][T20796] bridge_slave_1: entered promiscuous mode [ 565.335426][T20796] veth0_to_bond: entered promiscuous mode [ 565.374667][T20796] veth1_to_bond: entered promiscuous mode [ 565.412782][T20796] veth0_to_team: entered promiscuous mode [ 565.442393][T20796] veth1_to_team: entered promiscuous mode [ 565.487064][T20796] veth0_to_batadv: entered promiscuous mode [ 565.507960][T20796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.508153][T20796] batadv_slave_0: entered promiscuous mode [ 565.528292][T20796] veth1_to_batadv: entered promiscuous mode [ 565.552015][T20796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.559089][T20796] batadv_slave_1: entered promiscuous mode [ 565.600017][T20796] xfrm0: entered promiscuous mode [ 565.659801][T20796] veth0_to_hsr: entered promiscuous mode [ 565.711626][T20796] veth1_to_hsr: entered promiscuous mode [ 565.752238][T20796] hsr0: entered promiscuous mode [ 565.773671][T20796] veth1_virt_wifi: entered promiscuous mode [ 565.789353][T20830] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3310'. [ 565.809289][T20796] veth0_virt_wifi: entered promiscuous mode [ 565.823518][T20796] virt_wifi0: entered promiscuous mode [ 565.872823][T20796] macvtap0: entered promiscuous mode [ 565.878183][T20796] macsec0: entered promiscuous mode [ 565.899991][T20796] geneve1: entered promiscuous mode [ 565.900538][T20796] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 565.927658][T20796] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 565.944140][T20796] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 565.959503][T20796] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 565.985552][T20796] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 565.993870][T20796] ipip0: entered promiscuous mode [ 566.001779][T20796] veth2: entered promiscuous mode [ 566.010654][T20796] veth3: entered promiscuous mode [ 566.024503][T20796] bridge1: entered promiscuous mode [ 566.043219][T20796] bond1: entered promiscuous mode [ 566.051937][T20796] macsec1: entered promiscuous mode [ 566.066231][T20796] bond2: entered promiscuous mode [ 566.079227][T20796] bridge2: entered promiscuous mode [ 566.094531][T20796] ip6tnl1: entered promiscuous mode [ 566.116899][T20796] bond3: entered promiscuous mode [ 566.116921][T20796] bridge3: entered promiscuous mode [ 566.140405][T20796] vlan2: entered promiscuous mode [ 566.175627][T20796] bond4: entered promiscuous mode [ 566.181165][T20796] gretap1: entered promiscuous mode [ 566.209752][T20796] bond5: entered promiscuous mode [ 566.209775][T20796] veth5: entered promiscuous mode [ 566.229413][T20796] veth4: entered promiscuous mode [ 566.267240][T20796] bridge4: entered promiscuous mode [ 566.280499][T20796] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 566.288784][T20796] ip6gretap1: entered promiscuous mode [ 566.310164][T20796] veth6: entered promiscuous mode [ 566.330979][T20796] veth7: entered promiscuous mode [ 566.351801][T20796] pimreg: entered promiscuous mode [ 566.369525][T20796] macvlan0: entered promiscuous mode [ 566.381562][T20796] bridge_slave_0.: entered promiscuous mode [ 566.399235][T20796] syztnl2: entered promiscuous mode [ 566.419186][T20796] bond6: entered promiscuous mode [ 566.443342][T20796] ip6tnl2: entered promiscuous mode [ 566.457587][T20796] bond7: entered promiscuous mode [ 566.468466][T20796] bridge5: entered promiscuous mode [ 566.478960][T20796] ip6gre1: entered promiscuous mode [ 566.488555][T20796] ip6tnl3: entered promiscuous mode [ 566.498250][T20796] bond8: entered promiscuous mode [ 566.541506][T20796] bridge6: entered promiscuous mode [ 566.545191][T20796] bond9: entered promiscuous mode [ 566.545211][T20796] gretap2: entered promiscuous mode [ 566.589234][T20796] veth8: entered promiscuous mode [ 566.616196][T20796] veth9: entered promiscuous mode [ 566.624344][T20796] bareudp0: entered promiscuous mode [ 566.652138][T20796] bond10: entered promiscuous mode [ 566.657891][T20796] vcan1: entered promiscuous mode [ 566.665782][T20796] sit1: entered promiscuous mode [ 566.716404][T20796] erspan1: entered promiscuous mode [ 566.814437][T20796] macsec2: entered promiscuous mode [ 566.833816][T20796] bond11: entered promiscuous mode [ 566.845906][T20796] vxlan0: entered promiscuous mode [ 566.856027][T20796] bond12: entered promiscuous mode [ 566.867208][T20796] macvlan1: entered promiscuous mode [ 566.875246][T20796] ip6gre2: entered promiscuous mode [ 566.885074][T20796] bond13: entered promiscuous mode [ 566.898722][T20796] bond14: entered promiscuous mode [ 566.905939][T20796] veth10: entered promiscuous mode [ 566.921865][T20796] veth11: entered promiscuous mode [ 566.934831][T20796] veth12: entered promiscuous mode [ 566.951010][T20796] veth13: entered promiscuous mode [ 566.969651][T20796] bond15: entered promiscuous mode [ 566.982171][T20796] bond16: entered promiscuous mode [ 566.988005][T20796] syztnl1: entered promiscuous mode [ 567.003617][T20796] bridge0: entered promiscuous mode [ 567.012637][T20796] bridge7: entered promiscuous mode [ 567.028790][T20796] ipip1: entered promiscuous mode [ 567.044744][T20796] ip6tnl4: entered promiscuous mode [ 567.052998][T20796] ip6tnl5: entered promiscuous mode [ 567.089960][T20796] mac80211_hwsim hwsim38 wlan2: entered promiscuous mode [ 567.099153][T20796] bond17: entered promiscuous mode [ 567.099173][T20796] wireguard0: entered promiscuous mode [ 567.116931][T20796] vxlan1: entered promiscuous mode [ 567.128840][T20796] bridge8: entered promiscuous mode [ 567.148099][T20796] gre1: entered promiscuous mode [ 567.197363][T20796] bridge9: entered promiscuous mode [ 567.313118][T20796] bridge_slave_1.: entered promiscuous mode [ 567.313601][T20796] bridge10: entered promiscuous mode [ 567.329229][T20796] erspan2: entered promiscuous mode [ 567.329466][T20796] pim6reg: entered promiscuous mode [ 567.341041][T20796] syzkaller0: entered promiscuous mode [ 567.434218][T20795] veth15: entered allmulticast mode [ 567.446838][T20795] bond18: (slave veth15): Enslaving as an active interface with a down link [ 567.447212][T20806] veth0_to_bond: left promiscuous mode [ 567.467433][T20806] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 567.484353][T20807] macvlan2: entered promiscuous mode [ 567.484375][T20807] macvlan2: entered allmulticast mode [ 567.484962][T20807] bond18: entered promiscuous mode [ 567.485578][T20807] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 567.486301][T20807] bond18: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 567.486535][T20807] bond18: left promiscuous mode [ 567.660721][T20294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 567.660745][T20294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 567.722509][ T8389] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 567.722543][ T8389] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 567.722782][ T8389] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 567.722805][ T8389] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 567.722836][ T8389] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 567.722858][ T8389] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 567.777684][ T8363] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 567.777714][ T8363] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 567.846233][T20838] netlink: 'syz.0.3313': attribute type 1 has an invalid length. [ 567.846255][T20838] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3313'. [ 567.856080][T20837] lo speed is unknown, defaulting to 1000 [ 567.856138][T20837] lo speed is unknown, defaulting to 1000 [ 567.857086][T20837] lo speed is unknown, defaulting to 1000 [ 567.872986][T20837] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 567.873021][T20837] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 567.873059][T20837] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 567.889511][T20842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3314'. [ 567.897463][T20837] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 567.956427][T20845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3314'. [ 568.034646][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 568.096868][T20837] lo speed is unknown, defaulting to 1000 [ 568.125882][T20837] lo speed is unknown, defaulting to 1000 [ 568.128934][T20837] lo speed is unknown, defaulting to 1000 [ 568.143756][T20837] lo speed is unknown, defaulting to 1000 [ 568.157757][T20837] lo speed is unknown, defaulting to 1000 [ 568.159657][T20837] lo speed is unknown, defaulting to 1000 [ 568.317433][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3317'. [ 568.317457][T20856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3317'. [ 568.317481][T20856] netlink: 'syz.3.3317': attribute type 18 has an invalid length. [ 568.336251][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3317'. [ 568.390650][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3317'. [ 568.550217][T20863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3318'. [ 568.604357][T20871] netlink: 'syz.3.3320': attribute type 1 has an invalid length. [ 568.658590][T20294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.740494][T20878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3320'. [ 568.808198][T20872] lo speed is unknown, defaulting to 1000 [ 569.182837][T20889] sctp: [Deprecated]: syz.3.3324 (pid 20889) Use of int in max_burst socket option deprecated. [ 569.182837][T20889] Use struct sctp_assoc_value instead [ 569.322288][T17029] IPv4: Oversized IP packet from 127.0.0.1 [ 569.324385][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 569.324652][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 569.347595][T17029] IPv4: Oversized IP packet from 127.0.0.1 [ 569.348082][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 569.348255][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 569.615983][T20294] veth0_vlan: entered promiscuous mode [ 569.639325][T20294] veth1_vlan: entered promiscuous mode [ 569.819892][T20294] veth0_macvtap: entered promiscuous mode [ 569.833168][T20294] veth1_macvtap: entered promiscuous mode [ 569.876320][T20912] macsec3: entered promiscuous mode [ 569.966618][T20294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.003208][T20294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.041989][ T8393] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.042874][ T8393] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.042909][ T8393] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.042939][ T8393] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.314509][ T8363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.314528][ T8363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.534190][ T8393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.534210][ T8393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.685717][T20928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.045530][T20952] bridge_slave_0: left allmulticast mode [ 571.045559][T20952] bridge_slave_0: left promiscuous mode [ 571.045781][T20952] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.174371][T20954] bridge_slave_1: left allmulticast mode [ 571.174397][T20954] bridge_slave_1: left promiscuous mode [ 571.174625][T20954] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.415432][T19311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 571.431872][T19311] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 571.435010][T19311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 571.436609][T19311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 571.437282][T19311] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 571.545410][T20960] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 571.838467][T20962] syzkaller1: entered promiscuous mode [ 571.838492][T20962] syzkaller1: entered allmulticast mode [ 571.925607][T20961] lo speed is unknown, defaulting to 1000 [ 572.610877][T21004] netlink: 'syz.1.3347': attribute type 219 has an invalid length. [ 572.901063][T21010] macsec1: entered promiscuous mode [ 572.933492][T21012] xt_TCPMSS: Only works on TCP SYN packets [ 572.934381][T21012] syzkaller1: entered promiscuous mode [ 572.934399][T21012] syzkaller1: entered allmulticast mode [ 573.024715][T20963] lo speed is unknown, defaulting to 1000 [ 573.040538][T21014] Bluetooth: MGMT ver 1.23 [ 573.098584][T21014] Cannot find add_set index 0 as target [ 573.170948][T21018] ip_tables: iptables: counters copy to user failed while replacing table [ 573.214719][T21014] __nla_validate_parse: 13 callbacks suppressed [ 573.214739][T21014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3351'. [ 573.234110][T21014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3351'. [ 573.234132][T21014] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 573.462039][T19311] Bluetooth: hci0: command tx timeout [ 573.896149][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3359'. [ 574.108887][T21047] žÿ: renamed from team_slave_1 (while UP) [ 574.205777][T21056] block nbd2: server does not support multiple connections per device. [ 574.206104][T21056] block nbd2: shutting down sockets [ 574.436670][T20963] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.436801][T20963] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.436957][T20963] bridge_slave_0: entered allmulticast mode [ 574.440840][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3364'. [ 574.465652][T20963] bridge_slave_0: entered promiscuous mode [ 574.490688][T20963] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.490803][T20963] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.490944][T20963] bridge_slave_1: entered allmulticast mode [ 574.510657][T20963] bridge_slave_1: entered promiscuous mode [ 574.763921][T20963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.835312][T21070] sctp: [Deprecated]: syz.1.3366 (pid 21070) Use of int in maxseg socket option. [ 574.835312][T21070] Use struct sctp_assoc_value instead [ 574.836159][T20963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.836512][T21066] tipc: Started in network mode [ 574.836529][T21066] tipc: Node identity 1001001, cluster identity 4711 [ 574.836539][T21066] tipc: Node number set to 16781313 [ 574.838018][T21057] tipc: Enabled bearer , priority 0 [ 575.090939][T21082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3368'. [ 575.156561][T20963] team0: Port device team_slave_0 added [ 575.246700][T20963] team0: Port device team_slave_1 added [ 575.478977][T20963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.478996][T20963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.479021][T20963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.539483][T20963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.539501][T20963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.539526][T20963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.551254][T19311] Bluetooth: hci0: command tx timeout [ 575.828875][T20963] hsr_slave_0: entered promiscuous mode [ 575.843822][T20963] hsr_slave_1: entered promiscuous mode [ 575.850297][T20963] debugfs: 'hsr0' already exists in 'hsr' [ 575.850318][T20963] Cannot create hsr debugfs directory [ 576.754049][T21104] netlink: 'syz.0.3375': attribute type 1 has an invalid length. [ 576.754070][T21104] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3375'. [ 577.621353][T19311] Bluetooth: hci0: command tx timeout [ 577.826616][T21137] FAULT_INJECTION: forcing a failure. [ 577.826616][T21137] name failslab, interval 1, probability 0, space 0, times 0 [ 577.826649][T21137] CPU: 0 UID: 0 PID: 21137 Comm: syz.1.3382 Not tainted syzkaller #0 PREEMPT(full) [ 577.826674][T21137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 577.826686][T21137] Call Trace: [ 577.826695][T21137] [ 577.826704][T21137] dump_stack_lvl+0xe8/0x150 [ 577.826746][T21137] should_fail_ex+0x410/0x560 [ 577.826776][T21137] should_failslab+0xa8/0x100 [ 577.826805][T21137] __kmalloc_node_noprof+0x100/0x720 [ 577.826823][T21137] ? __get_vm_area_node+0x200/0x2f0 [ 577.826888][T21137] ? __get_vm_area_node+0x283/0x2f0 [ 577.826912][T21137] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 577.826938][T21137] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 577.826974][T21137] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 577.827003][T21137] ? __lock_acquire+0x747/0x2de0 [ 577.827063][T21137] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 577.827101][T21137] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 577.827124][T21137] __vmalloc_noprof+0xd2/0x120 [ 577.827153][T21137] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 577.827178][T21137] bpf_prog_alloc_no_stats+0x47/0x560 [ 577.827199][T21137] ? bpf_prog_alloc+0x2a/0x1a0 [ 577.827224][T21137] bpf_prog_alloc+0x3c/0x1a0 [ 577.827248][T21137] bpf_prog_load+0x7f8/0x1c20 [ 577.827284][T21137] ? __pfx_bpf_prog_load+0x10/0x10 [ 577.827333][T21137] __sys_bpf+0xd0d/0xd90 [ 577.827364][T21137] ? __pfx___sys_bpf+0x10/0x10 [ 577.827398][T21137] ? __fget_files+0x2a/0x420 [ 577.827443][T21137] ? ksys_write+0x242/0x270 [ 577.827474][T21137] ? __pfx_ksys_write+0x10/0x10 [ 577.827507][T21137] __x64_sys_bpf+0xba/0xd0 [ 577.827530][T21137] do_syscall_64+0x166/0x520 [ 577.827558][T21137] ? trace_irq_disable+0x3b/0x140 [ 577.827578][T21137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.827598][T21137] ? clear_bhb_loop+0x70/0xc0 [ 577.827623][T21137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.827642][T21137] RIP: 0033:0x7f073999e159 [ 577.827660][T21137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.827676][T21137] RSP: 002b:00007f0737bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.827698][T21137] RAX: ffffffffffffffda RBX: 00007f0739c25fa0 RCX: 00007f073999e159 [ 577.827712][T21137] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 577.827724][T21137] RBP: 00007f0737bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 577.827742][T21137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.827753][T21137] R13: 00007f0739c26038 R14: 00007f0739c25fa0 R15: 00007ffda5c940a8 [ 577.827786][T21137] [ 577.938771][T21137] warn_alloc: 2 callbacks suppressed [ 577.938787][T21137] syz.1.3382: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 577.938862][T21137] CPU: 0 UID: 0 PID: 21137 Comm: syz.1.3382 Not tainted syzkaller #0 PREEMPT(full) [ 577.938883][T21137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 577.938895][T21137] Call Trace: [ 577.938903][T21137] [ 577.938912][T21137] dump_stack_lvl+0xe8/0x150 [ 577.938945][T21137] warn_alloc+0x24d/0x270 [ 577.938972][T21137] ? __pfx_warn_alloc+0x10/0x10 [ 577.938999][T21137] ? __kmalloc_node_noprof+0x4d7/0x720 [ 577.939017][T21137] ? __get_vm_area_node+0x200/0x2f0 [ 577.939043][T21137] ? __get_vm_area_node+0x283/0x2f0 [ 577.939066][T21137] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 577.939093][T21137] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 577.939128][T21137] __vmalloc_node_range_noprof+0x969/0x1540 [ 577.939156][T21137] ? __lock_acquire+0x747/0x2de0 [ 577.939204][T21137] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 577.939241][T21137] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 577.939263][T21137] __vmalloc_noprof+0xd2/0x120 [ 577.939291][T21137] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 577.939316][T21137] bpf_prog_alloc_no_stats+0x47/0x560 [ 577.939337][T21137] ? bpf_prog_alloc+0x2a/0x1a0 [ 577.939361][T21137] bpf_prog_alloc+0x3c/0x1a0 [ 577.939386][T21137] bpf_prog_load+0x7f8/0x1c20 [ 577.939421][T21137] ? __pfx_bpf_prog_load+0x10/0x10 [ 577.939469][T21137] __sys_bpf+0xd0d/0xd90 [ 577.939500][T21137] ? __pfx___sys_bpf+0x10/0x10 [ 577.939533][T21137] ? __fget_files+0x2a/0x420 [ 577.939578][T21137] ? ksys_write+0x242/0x270 [ 577.939609][T21137] ? __pfx_ksys_write+0x10/0x10 [ 577.939642][T21137] __x64_sys_bpf+0xba/0xd0 [ 577.939665][T21137] do_syscall_64+0x166/0x520 [ 577.939691][T21137] ? trace_irq_disable+0x3b/0x140 [ 577.939710][T21137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.939737][T21137] ? clear_bhb_loop+0x70/0xc0 [ 577.939761][T21137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.939781][T21137] RIP: 0033:0x7f073999e159 [ 577.939800][T21137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.939816][T21137] RSP: 002b:00007f0737bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.939835][T21137] RAX: ffffffffffffffda RBX: 00007f0739c25fa0 RCX: 00007f073999e159 [ 577.939849][T21137] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 577.939861][T21137] RBP: 00007f0737bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 577.939873][T21137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.939885][T21137] R13: 00007f0739c26038 R14: 00007f0739c25fa0 R15: 00007ffda5c940a8 [ 577.939915][T21137] [ 577.939928][T21137] Mem-Info: [ 577.939938][T21137] active_anon:6437 inactive_anon:0 isolated_anon:0 [ 577.939938][T21137] active_file:1 inactive_file:43401 isolated_file:0 [ 577.939938][T21137] unevictable:0 dirty:205 writeback:0 [ 577.939938][T21137] slab_reclaimable:11748 slab_unreclaimable:109456 [ 577.939938][T21137] mapped:29591 shmem:523 pagetables:1483 [ 577.939938][T21137] sec_pagetables:0 bounce:0 [ 577.939938][T21137] kernel_misc_reclaimable:0 [ 577.939938][T21137] free:1266536 free_pcp:11894 free_cma:0 [ 577.939999][T21137] Node 0 active_anon:25748kB inactive_anon:0kB active_file:4kB inactive_file:173400kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118364kB dirty:816kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16308kB pagetables:5804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 577.940049][T21137] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 577.940099][T21137] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 577.940150][T21137] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 577.940185][T21137] Node 0 DMA32 free:1109772kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25748kB inactive_anon:0kB active_file:4kB inactive_file:173400kB unevictable:0kB writepending:816kB zspages:0kB present:3129332kB managed:2546844kB mlocked:0kB bounce:0kB free_pcp:41028kB local_pcp:21008kB free_cma:0kB [ 578.283898][T21137] lowmem_reserve[]: 0 0 0 0 0 [ 578.283939][T21137] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 578.283988][T21137] lowmem_reserve[]: 0 0 0 0 0 [ 578.284020][T21137] Node 1 Normal free:3941012kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:6548kB local_pcp:0kB free_cma:0kB [ 578.284072][T21137] lowmem_reserve[]: 0 0 0 0 0 [ 578.284110][T21137] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 578.284213][T21137] Node 0 DMA32: 1627*4kB (UME) 652*8kB (UM) 194*16kB (UM) 246*32kB (UME) 163*64kB (UME) 270*128kB (UME) 225*256kB (UME) 165*512kB (UME) 113*1024kB (UME) 5*2048kB (UME) 189*4096kB (UM) = 1109868kB [ 578.285006][T21137] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 578.285095][T21137] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3941012kB [ 578.285228][T21137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.285243][T21137] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 578.285273][T21137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.285287][T21137] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 578.285302][T21137] 43921 total pagecache pages [ 578.285313][T21137] 0 pages in swap cache [ 578.285320][T21137] Free swap = 124996kB [ 578.285328][T21137] Total swap = 124996kB [ 578.285335][T21137] 2097051 pages RAM [ 578.285342][T21137] 0 pages HighMem/MovableOnly [ 578.285349][T21137] 428724 pages reserved [ 578.285356][T21137] 0 pages cma reserved [ 578.363846][ T8393] IPVS: starting estimator thread 0... [ 578.539231][T21142] IPVS: using max 30 ests per chain, 72000 per kthread [ 578.918995][T21138] netlink: 'syz.4.3383': attribute type 1 has an invalid length. [ 579.115429][T21147] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3383'. [ 579.197940][T21147] batadv_slave_1: entered promiscuous mode [ 579.200259][T21149] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3384'. [ 579.428190][T21153] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 579.701713][T19311] Bluetooth: hci0: command tx timeout [ 579.817808][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'. [ 579.818398][T21156] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.3386'. [ 579.818503][T21156] 0ªX¹¦Dö»: renamed from gretap0 [ 579.852585][T21156] 0ªX¹¦Dö»: entered allmulticast mode [ 580.373475][T21123] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 580.373501][T21123] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 580.550405][T20963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 580.609309][T20963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.610453][T20963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 580.644127][T20963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.789696][T21123] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 580.789721][T21123] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 580.861412][T20963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 581.013174][T20963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 581.014087][T20963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 581.053383][T20963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.380556][T21123] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 581.380580][T21123] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 581.613884][T21123] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 581.613909][T21123] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 581.758621][T21193] openvswitch: netlink: Missing key (keys=40, expected=100) [ 581.758878][T21193] openvswitch: netlink: Missing key (keys=40, expected=100) [ 581.780421][T21193] openvswitch: netlink: Missing key (keys=40, expected=100) [ 581.780633][T21193] openvswitch: netlink: Missing key (keys=40, expected=100) [ 581.780842][T21193] openvswitch: netlink: Missing key (keys=40, expected=100) [ 581.781046][T21193] openvswitch: netlink: Missing key (keys=40, expected=100) [ 581.819787][T21193] openvswitch: netlink: Missing key (keys=40, expected=100) [ 581.830148][T21193] openvswitch: netlink: Missing key (keys=40, expected=100) [ 581.830378][T21193] openvswitch: netlink: Missing key (keys=40, expected=100) [ 581.830584][T21193] openvswitch: netlink: Missing key (keys=40, expected=100) [ 582.010394][T21123] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 582.010419][T21123] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 582.154382][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 582.477217][T20963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.539432][T21198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3393'. [ 582.654123][T20963] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.718288][ T273] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.718396][ T273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.803416][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.803538][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.038892][T21209] xt_IDLETIMER: label is empty or not nul-terminated [ 583.186897][T21215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3397'. [ 583.360458][T21218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3398'. [ 584.094869][T21234] tipc: MTU too low for tipc bearer [ 584.163676][T21236] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3401'. [ 584.217166][T21239] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3400'. [ 584.314823][T21244] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3401'. [ 584.390952][T21248] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3401'. [ 584.982151][T18193] udevd[18193]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 585.058721][T21257] batman_adv: batadv0: Adding interface: gretap0 [ 585.058746][T21257] batman_adv: batadv0: The MTU of interface gretap0 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.058789][T21257] batman_adv: batadv0: Interface activated: gretap0 [ 585.108607][T21265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3402'. [ 585.108632][T21265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3402'. [ 585.159639][T21267] FAULT_INJECTION: forcing a failure. [ 585.159639][T21267] name failslab, interval 1, probability 0, space 0, times 0 [ 585.159673][T21267] CPU: 0 UID: 0 PID: 21267 Comm: syz.3.3405 Not tainted syzkaller #0 PREEMPT(full) [ 585.159694][T21267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.159706][T21267] Call Trace: [ 585.159714][T21267] [ 585.159723][T21267] dump_stack_lvl+0xe8/0x150 [ 585.159765][T21267] should_fail_ex+0x410/0x560 [ 585.159794][T21267] should_failslab+0xa8/0x100 [ 585.159821][T21267] __kmalloc_cache_noprof+0xa3/0x600 [ 585.159842][T21267] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 585.159864][T21267] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 585.159894][T21267] bpf_prog_alloc_no_stats+0xd8/0x560 [ 585.159915][T21267] ? bpf_prog_alloc+0x2a/0x1a0 [ 585.159939][T21267] bpf_prog_alloc+0x3c/0x1a0 [ 585.159964][T21267] bpf_prog_load+0x7f8/0x1c20 [ 585.160000][T21267] ? __pfx_bpf_prog_load+0x10/0x10 [ 585.160048][T21267] __sys_bpf+0xd0d/0xd90 [ 585.160078][T21267] ? __pfx___sys_bpf+0x10/0x10 [ 585.160112][T21267] ? __fget_files+0x2a/0x420 [ 585.160155][T21267] ? ksys_write+0x242/0x270 [ 585.160186][T21267] ? __pfx_ksys_write+0x10/0x10 [ 585.160219][T21267] __x64_sys_bpf+0xba/0xd0 [ 585.160242][T21267] do_syscall_64+0x166/0x520 [ 585.160267][T21267] ? trace_irq_disable+0x3b/0x140 [ 585.160285][T21267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.160305][T21267] ? clear_bhb_loop+0x70/0xc0 [ 585.160329][T21267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.160348][T21267] RIP: 0033:0x7f0ca619e159 [ 585.160366][T21267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.160382][T21267] RSP: 002b:00007f0ca70a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.160403][T21267] RAX: ffffffffffffffda RBX: 00007f0ca6425fa0 RCX: 00007f0ca619e159 [ 585.160417][T21267] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 585.160430][T21267] RBP: 00007f0ca70a0090 R08: 0000000000000000 R09: 0000000000000000 [ 585.160442][T21267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.160453][T21267] R13: 00007f0ca6426038 R14: 00007f0ca6425fa0 R15: 00007ffe15826bb8 [ 585.160485][T21267] [ 585.493126][T21270] netlink: 6888 bytes leftover after parsing attributes in process `syz.0.3404'. [ 586.317881][T21287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3409'. [ 586.612303][T20963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.008095][T21307] tbf_change: 17 callbacks suppressed [ 587.008117][T21307] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 587.050740][T21310] syzkaller0: entered promiscuous mode [ 587.050764][T21310] syzkaller0: entered allmulticast mode [ 587.160831][T21312] FAULT_INJECTION: forcing a failure. [ 587.160831][T21312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.160865][T21312] CPU: 0 UID: 0 PID: 21312 Comm: syz.0.3415 Not tainted syzkaller #0 PREEMPT(full) [ 587.160887][T21312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.160899][T21312] Call Trace: [ 587.160907][T21312] [ 587.160916][T21312] dump_stack_lvl+0xe8/0x150 [ 587.160949][T21312] should_fail_ex+0x410/0x560 [ 587.160978][T21312] _copy_from_user+0x2d/0xb0 [ 587.161006][T21312] copy_from_bpfptr+0x5c/0x90 [ 587.161030][T21312] bpf_prog_load+0xcdb/0x1c20 [ 587.161066][T21312] ? __pfx_bpf_prog_load+0x10/0x10 [ 587.161115][T21312] __sys_bpf+0xd0d/0xd90 [ 587.161145][T21312] ? __pfx___sys_bpf+0x10/0x10 [ 587.161178][T21312] ? __fget_files+0x2a/0x420 [ 587.161220][T21312] ? ksys_write+0x242/0x270 [ 587.161250][T21312] ? __pfx_ksys_write+0x10/0x10 [ 587.161283][T21312] __x64_sys_bpf+0xba/0xd0 [ 587.161305][T21312] do_syscall_64+0x166/0x520 [ 587.161331][T21312] ? trace_irq_disable+0x3b/0x140 [ 587.161350][T21312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.161370][T21312] ? clear_bhb_loop+0x70/0xc0 [ 587.161394][T21312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.161414][T21312] RIP: 0033:0x7fe91ab9e159 [ 587.161431][T21312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.161448][T21312] RSP: 002b:00007fe91b97e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.161469][T21312] RAX: ffffffffffffffda RBX: 00007fe91ae25fa0 RCX: 00007fe91ab9e159 [ 587.161491][T21312] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 587.161502][T21312] RBP: 00007fe91b97e090 R08: 0000000000000000 R09: 0000000000000000 [ 587.161515][T21312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.161526][T21312] R13: 00007fe91ae26038 R14: 00007fe91ae25fa0 R15: 00007ffc9a840928 [ 587.161558][T21312] [ 587.383328][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'. [ 587.541079][T21317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3417'. [ 587.594955][T20963] veth0_vlan: entered promiscuous mode [ 587.638004][T20963] veth1_vlan: entered promiscuous mode [ 587.806478][T20963] veth0_macvtap: entered promiscuous mode [ 587.845536][T20963] veth1_macvtap: entered promiscuous mode [ 588.295837][T21322] bond2: entered promiscuous mode [ 588.305855][T21322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 588.720418][T21343] syzkaller0: entered promiscuous mode [ 588.720443][T21343] syzkaller0: entered allmulticast mode [ 588.723814][T20963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.765674][T20963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.265329][T21358] netlink: 'syz.1.3425': attribute type 1 has an invalid length. [ 589.265352][T21358] __nla_validate_parse: 1 callbacks suppressed [ 589.265364][T21358] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3425'. [ 589.478166][ T8393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.795608][ T273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.795656][ T273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.795692][ T273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.015981][T21383] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3430'. [ 590.159837][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3430'. [ 590.413828][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.413850][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.502965][T18527] net_ratelimit: 56 callbacks suppressed [ 590.502985][T18527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.833481][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.833504][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.912863][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.542054][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.547033][T21424] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 591.826231][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.017384][T21429] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 592.160545][T21429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.197962][T21429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.363358][T21429] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 592.404983][T21429] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 592.483101][T21429] bond0 (unregistering): Released all slaves [ 592.518310][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.598678][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.619289][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.622505][T21432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.648660][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.649412][T21425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.693872][T21432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.789463][T18527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.901637][T21475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3442'. [ 593.955737][T21476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3442'. [ 594.030309][T21466] syzkaller0: entered promiscuous mode [ 594.030332][T21466] syzkaller0: entered allmulticast mode [ 595.341378][T21501] netlink: 'syz.3.3446': attribute type 12 has an invalid length. [ 595.341426][T21501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3446'. [ 595.865359][T18527] net_ratelimit: 3 callbacks suppressed [ 595.865395][T18527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.008266][T21528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3451'. [ 596.904042][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.983121][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.003408][T21542] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3456'. [ 597.952096][T18527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.994703][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.285284][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3464'. [ 599.304471][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.449042][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888032d46c00: rx timeout, send abort [ 600.027378][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.042297][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.241411][T21611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3468'. [ 600.241453][T21611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3468'. [ 600.624829][T21618] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 601.063552][ T6072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.111809][T21625] netlink: 'syz.1.3471': attribute type 1 has an invalid length. [ 601.248145][T21608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.298155][T21608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.623046][ T273] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.623093][ T273] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.623125][ T273] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.623157][ T273] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.756189][T21634] netlink: 'syz.3.3473': attribute type 21 has an invalid length. [ 601.756213][T21634] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3473'. [ 601.756285][T21634] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3473'. [ 602.102430][ T6072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.206293][T21649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'. [ 602.272939][T21647] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3477'. [ 602.273989][T21649] IPv6: NLM_F_CREATE should be specified when creating new route [ 602.274083][T21649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 602.274093][T21649] IPv6: NLM_F_CREATE should be set when creating new route [ 602.274133][T21649] IPv6: NLM_F_CREATE should be set when creating new route [ 602.274158][T21649] IPv6: NLM_F_CREATE should be set when creating new route [ 602.334434][T21649] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3478'. [ 602.376024][T21649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.376462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.376808][T21649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.377036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.533701][T21655] netlink: 'syz.4.3480': attribute type 1 has an invalid length. [ 602.678685][T21660] netlink: 'syz.4.3480': attribute type 10 has an invalid length. [ 602.678707][T21660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3480'. [ 602.966651][T21655] bond3: option mode: invalid value (9) [ 602.979180][T21655] bond3 (unregistering): Released all slaves [ 603.063221][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.095951][T21660] dummy0: entered promiscuous mode [ 603.148600][T18527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.256383][T21669] batman_adv: batadv0: Adding interface: macsec0 [ 603.256402][T21669] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.256431][T21669] batman_adv: batadv0: Interface activated: macsec0 [ 603.349421][T21669] ksmbd: Unknown IPC event: 1, ignore. [ 603.395425][T21675] syzkaller1: entered promiscuous mode [ 603.395620][T21675] syzkaller1: entered allmulticast mode [ 603.508851][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3487'. [ 603.509528][T21681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3487'. [ 603.698691][T21686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3490'. [ 603.907720][T21688] netlink: 'syz.4.3491': attribute type 1 has an invalid length. [ 603.958550][T21688] bond3: entered promiscuous mode [ 603.958995][T21688] 8021q: adding VLAN 0 to HW filter on device bond3 [ 604.090333][T21692] bond4 (unregistering): Released all slaves [ 604.200674][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.298938][T21694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 604.299310][T21694] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 604.299336][T21694] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 604.368233][T21694] bond3: (slave ip6gre1): making interface the new active one [ 604.368260][T21694] ip6gre1: entered promiscuous mode [ 604.370359][T21694] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 604.999002][T21724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3497'. [ 605.225147][T18527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.334735][T21724] dvmrp0: entered allmulticast mode [ 605.613500][T21725] dvmrp1: entered allmulticast mode [ 606.107992][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.151673][T21758] FAULT_INJECTION: forcing a failure. [ 606.151673][T21758] name failslab, interval 1, probability 0, space 0, times 0 [ 606.151705][T21758] CPU: 0 UID: 0 PID: 21758 Comm: syz.2.3504 Not tainted syzkaller #0 PREEMPT(full) [ 606.151726][T21758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.151738][T21758] Call Trace: [ 606.151746][T21758] [ 606.151754][T21758] dump_stack_lvl+0xe8/0x150 [ 606.151785][T21758] should_fail_ex+0x410/0x560 [ 606.151812][T21758] should_failslab+0xa8/0x100 [ 606.151837][T21758] __kmalloc_noprof+0xfe/0x720 [ 606.151856][T21758] ? tomoyo_encode+0x2ad/0x570 [ 606.151986][T21758] ? tomoyo_encode+0x2ad/0x570 [ 606.152018][T21758] tomoyo_encode+0x2ad/0x570 [ 606.152046][T21758] tomoyo_realpath_from_path+0x5fa/0x640 [ 606.152079][T21758] ? tomoyo_path_number_perm+0x219/0x5f0 [ 606.152101][T21758] tomoyo_path_number_perm+0x246/0x5f0 [ 606.152126][T21758] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 606.152146][T21758] ? __lock_acquire+0x747/0x2de0 [ 606.152183][T21758] ? hook_file_ioctl+0x1f2/0x600 [ 606.152259][T21758] ? __fget_files+0x2a/0x420 [ 606.152296][T21758] ? __fget_files+0x2a/0x420 [ 606.152320][T21758] ? __fget_files+0x3a2/0x420 [ 606.152343][T21758] ? __fget_files+0x2a/0x420 [ 606.152371][T21758] security_file_ioctl+0xc3/0x2a0 [ 606.152510][T21758] __se_sys_ioctl+0x47/0x170 [ 606.152535][T21758] do_syscall_64+0x166/0x520 [ 606.152560][T21758] ? trace_irq_disable+0x3b/0x140 [ 606.152579][T21758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.152599][T21758] ? clear_bhb_loop+0x70/0xc0 [ 606.152623][T21758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.152642][T21758] RIP: 0033:0x7f383119e159 [ 606.152660][T21758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.152677][T21758] RSP: 002b:00007f38320ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.152698][T21758] RAX: ffffffffffffffda RBX: 00007f3831425fa0 RCX: 00007f383119e159 [ 606.152712][T21758] RDX: 0000200000000300 RSI: 0000000000008946 RDI: 0000000000000003 [ 606.152725][T21758] RBP: 00007f38320ad090 R08: 0000000000000000 R09: 0000000000000000 [ 606.152736][T21758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.152748][T21758] R13: 00007f3831426038 R14: 00007f3831425fa0 R15: 00007fffb52ce918 [ 606.152779][T21758] [ 606.157206][T21758] ERROR: Out of memory at tomoyo_realpath_from_path. [ 606.273243][ T6072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.480848][T21766] netlink: 'syz.0.3506': attribute type 1 has an invalid length. [ 606.480870][T21766] netlink: 'syz.0.3506': attribute type 2 has an invalid length. [ 606.876430][T21774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.878851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.879115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.879406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.104862][T21786] Bluetooth: hci0: unsupported parameter 5134 [ 607.104887][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 607.104900][T21786] Bluetooth: hci0: unsupported parameter 5134 [ 607.104912][T21786] Bluetooth: hci0: unsupported parameter 8192 [ 607.233526][T21788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.301533][T18527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.333869][T21790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.435519][T21787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.241844][T21812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3520'. [ 608.344338][ T6072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.835964][T21820] netdevsim0 speed is unknown, defaulting to 1000 [ 608.836030][T21820] netdevsim0 speed is unknown, defaulting to 1000 [ 608.836818][T21820] netdevsim0 speed is unknown, defaulting to 1000 [ 608.871444][T21820] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 608.871480][T21820] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 608.871517][T21820] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 608.932301][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.000595][T21826] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3527'. [ 609.000621][T21826] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3527'. [ 609.025681][T21820] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 609.145503][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.211092][T21826] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3527'. [ 609.364790][T21820] netdevsim0 speed is unknown, defaulting to 1000 [ 609.392589][T21820] netdevsim0 speed is unknown, defaulting to 1000 [ 609.418426][T21820] netdevsim0 speed is unknown, defaulting to 1000 [ 609.436681][T21820] netdevsim0 speed is unknown, defaulting to 1000 [ 609.454657][T21820] netdevsim0 speed is unknown, defaulting to 1000 [ 609.485416][T21820] netdevsim0 speed is unknown, defaulting to 1000 [ 609.490158][T21820] netdevsim0 speed is unknown, defaulting to 1000 [ 609.513033][T21820] netdevsim0 speed is unknown, defaulting to 1000 [ 609.773608][T21853] tipc: Started in network mode [ 609.773640][T21853] tipc: Node identity feffffff000000000000ffffffffffff, cluster identity 4711 [ 609.773768][T21853] tipc: Enabling of bearer rejected, failed to enable media [ 609.846364][T21857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3529'. [ 609.846390][T21857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.964179][T21857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.996726][T21857] batman_adv: batadv0: Interface deactivated: gretap0 [ 609.996915][T21857] batman_adv: batadv0: Removing interface: gretap0 [ 610.047858][T21856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3531'. [ 610.389145][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3532'. [ 610.795946][T21867] syzkaller1: entered promiscuous mode [ 610.795969][T21867] syzkaller1: entered allmulticast mode [ 610.826919][T21880] netlink: 1303 bytes leftover after parsing attributes in process `syz.0.3534'. [ 610.866835][T21880] netlink: 1303 bytes leftover after parsing attributes in process `syz.0.3534'. [ 611.541498][ T6072] net_ratelimit: 4 callbacks suppressed [ 611.541516][ T6072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.655205][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.656062][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.459974][T21915] netlink: 4124 bytes leftover after parsing attributes in process `syz.1.3544'. [ 612.582647][T18527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.912878][T21924] sctp: [Deprecated]: syz.4.3545 (pid 21924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.912878][T21924] Use struct sctp_sack_info instead [ 612.931672][T21922] openvswitch: netlink: Missing key (keys=50, expected=80) [ 613.621477][T18527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.133223][T21947] __nla_validate_parse: 2 callbacks suppressed [ 614.133245][T21947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3551'. [ 614.263169][T21949] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3552'. [ 614.266135][T21949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3552'. [ 614.266508][T21949] xt_cgroup: path and classid specified [ 614.617390][T21949] team0 (unregistering): Port device team_slave_0 removed [ 614.671104][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.682165][ T5782] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.777092][T21949] team0 (unregistering): Port device 76žÿ removed [ 614.987769][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 614.989616][T21951] bridge1: entered promiscuous mode [ 615.128792][T21961] gretap0: entered promiscuous mode [ 615.129703][T21961] macvlan2: entered promiscuous mode [ 615.159423][T21961] gretap0: left promiscuous mode [ 615.292629][T21964] block nbd2: server does not support multiple connections per device. [ 615.315880][T21964] block nbd2: shutting down sockets [ 615.712143][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.849070][T21973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'. [ 615.849095][T21973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3558'. [ 615.849121][T21973] netlink: 'syz.0.3558': attribute type 19 has an invalid length. [ 615.849135][T21973] netlink: 'syz.0.3558': attribute type 20 has an invalid length. [ 615.931994][ T273] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.932038][ T273] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.932069][ T273] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.932098][ T273] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.210363][T21976] FAULT_INJECTION: forcing a failure. [ 616.210363][T21976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.210395][T21976] CPU: 0 UID: 0 PID: 21976 Comm: syz.4.3560 Not tainted syzkaller #0 PREEMPT(full) [ 616.210417][T21976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.210429][T21976] Call Trace: [ 616.210438][T21976] [ 616.210446][T21976] dump_stack_lvl+0xe8/0x150 [ 616.210480][T21976] should_fail_ex+0x410/0x560 [ 616.210509][T21976] _copy_from_user+0x2d/0xb0 [ 616.210536][T21976] ethtool_set_per_queue+0xef/0x1f0 [ 616.210700][T21976] ? __pfx_ethtool_set_per_queue+0x10/0x10 [ 616.210809][T21976] dev_ethtool+0x1d7a/0x29e0 [ 616.210832][T21976] ? __lock_acquire+0x747/0x2de0 [ 616.210868][T21976] ? __pfx_dev_ethtool+0x10/0x10 [ 616.210889][T21976] ? inet_ioctl+0x484/0x560 [ 616.210969][T21976] ? lock_acquire+0x115/0x350 [ 616.210999][T21976] ? dev_load+0x21/0x1f0 [ 616.211054][T21976] ? dev_load+0x21/0x1f0 [ 616.211080][T21976] dev_ioctl+0x392/0x1150 [ 616.211108][T21976] sock_do_ioctl+0x23e/0x320 [ 616.211177][T21976] ? __pfx_sock_do_ioctl+0x10/0x10 [ 616.211192][T21976] ? hook_file_ioctl+0x1f2/0x600 [ 616.211230][T21976] sock_ioctl+0x57a/0x7e0 [ 616.211250][T21976] ? __pfx_sock_ioctl+0x10/0x10 [ 616.211269][T21976] ? __fget_files+0x2a/0x420 [ 616.211293][T21976] ? __fget_files+0x3a2/0x420 [ 616.211317][T21976] ? __fget_files+0x2a/0x420 [ 616.211342][T21976] ? bpf_lsm_file_ioctl+0x9/0x20 [ 616.211377][T21976] ? __pfx_sock_ioctl+0x10/0x10 [ 616.211396][T21976] __se_sys_ioctl+0xfc/0x170 [ 616.211420][T21976] do_syscall_64+0x166/0x520 [ 616.211447][T21976] ? trace_irq_disable+0x3b/0x140 [ 616.211466][T21976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.211486][T21976] ? clear_bhb_loop+0x70/0xc0 [ 616.211510][T21976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.211530][T21976] RIP: 0033:0x7f4a10b9e159 [ 616.211548][T21976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.211565][T21976] RSP: 002b:00007f4a11a9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 616.211586][T21976] RAX: ffffffffffffffda RBX: 00007f4a10e25fa0 RCX: 00007f4a10b9e159 [ 616.211601][T21976] RDX: 0000200000000300 RSI: 0000000000008946 RDI: 0000000000000003 [ 616.211614][T21976] RBP: 00007f4a11a9b090 R08: 0000000000000000 R09: 0000000000000000 [ 616.211626][T21976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.211638][T21976] R13: 00007f4a10e26038 R14: 00007f4a10e25fa0 R15: 00007ffdf923e748 [ 616.211671][T21976] [ 616.585477][T21980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3562'. [ 616.587427][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.702112][T21982] bridge_slave_1: left allmulticast mode [ 616.702139][T21982] bridge_slave_1: left promiscuous mode [ 616.702366][T21982] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.744926][ T6072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.828276][T21982] bridge_slave_0: left allmulticast mode [ 616.828624][T21982] bridge_slave_0: left promiscuous mode [ 616.829498][T21982] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.581059][T22000] lo speed is unknown, defaulting to 1000 [ 617.594364][T22000] netdevsim0 speed is unknown, defaulting to 1000 [ 617.704332][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.781850][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.861578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.923926][T22010] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 617.991962][T22008] raw_sendmsg: syz.0.3570 forgot to set AF_INET. Fix it! [ 618.580356][T22016] ipvlan2: entered promiscuous mode [ 618.580381][T22016] ipvlan2: entered allmulticast mode [ 618.580400][T22016] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 618.610705][T22016] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 618.667454][T22021] FAULT_INJECTION: forcing a failure. [ 618.667454][T22021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.667486][T22021] CPU: 0 UID: 0 PID: 22021 Comm: syz.4.3574 Not tainted syzkaller #0 PREEMPT(full) [ 618.667507][T22021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.667520][T22021] Call Trace: [ 618.667528][T22021] [ 618.667537][T22021] dump_stack_lvl+0xe8/0x150 [ 618.667570][T22021] should_fail_ex+0x410/0x560 [ 618.667599][T22021] _copy_to_user+0x31/0xb0 [ 618.667627][T22021] simple_read_from_buffer+0xe1/0x170 [ 618.667661][T22021] proc_fail_nth_read+0x1bb/0x230 [ 618.667681][T22021] ? common_file_perm+0x20e/0x2b0 [ 618.667710][T22021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.667733][T22021] ? rw_verify_area+0x24a/0x4c0 [ 618.667763][T22021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.667782][T22021] vfs_read+0x213/0xa80 [ 618.667815][T22021] ? __pfx___mutex_lock+0x10/0x10 [ 618.667843][T22021] ? __pfx_vfs_read+0x10/0x10 [ 618.667872][T22021] ? __fget_files+0x2a/0x420 [ 618.667903][T22021] ? __fget_files+0x3a2/0x420 [ 618.667927][T22021] ? __fget_files+0x2a/0x420 [ 618.667962][T22021] ksys_read+0x150/0x270 [ 618.667992][T22021] ? __pfx_ksys_read+0x10/0x10 [ 618.668019][T22021] ? __pfx_sock_ioctl+0x10/0x10 [ 618.668050][T22021] do_syscall_64+0x166/0x520 [ 618.668075][T22021] ? trace_irq_disable+0x3b/0x140 [ 618.668095][T22021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.668116][T22021] ? clear_bhb_loop+0x70/0xc0 [ 618.668140][T22021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.668159][T22021] RIP: 0033:0x7f4a10b5e98e [ 618.668177][T22021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 618.668194][T22021] RSP: 002b:00007f4a11a9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 618.668215][T22021] RAX: ffffffffffffffda RBX: 00007f4a11a9b6c0 RCX: 00007f4a10b5e98e [ 618.668229][T22021] RDX: 000000000000000f RSI: 00007f4a11a9b0a0 RDI: 0000000000000004 [ 618.668242][T22021] RBP: 00007f4a11a9b090 R08: 0000000000000000 R09: 0000000000000000 [ 618.668254][T22021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.668266][T22021] R13: 00007f4a10e26038 R14: 00007f4a10e25fa0 R15: 00007ffdf923e748 [ 618.668302][T22021] [ 618.915548][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.948279][T22023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3577'. [ 618.980970][T22023] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3577'. [ 618.983047][T22020] batadv_slave_0: entered promiscuous mode [ 618.985040][T22018] batadv_slave_0: left promiscuous mode [ 619.475527][T22037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3579'. [ 619.565063][T22041] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 619.920243][T22045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 619.944797][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.975625][T22045] gre1: entered promiscuous mode [ 619.975648][T22045] gre1: entered allmulticast mode [ 620.029603][T22045] netlink: 'syz.3.3582': attribute type 1 has an invalid length. [ 620.642115][T22029] bond1: ARP target 9.0.0.0 is already present [ 620.642142][T22029] bond1: option arp_ip_target: invalid value (9) [ 620.761964][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.782253][T22029] bond1 (unregistering): Released all slaves [ 620.982246][T22092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.718256][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.943150][T22114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.943659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.051339][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.413378][T22120] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3591'. [ 622.532567][T22126] netlink: 'syz.3.3595': attribute type 49 has an invalid length. [ 622.561851][T22124] netlink: 'syz.1.3594': attribute type 39 has an invalid length. [ 622.720062][T22133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3596'. [ 622.784897][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3596'. [ 622.785649][T22138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3596'. [ 622.812984][T22126] ip6gretap0: entered promiscuous mode [ 622.813007][T22126] ip6gretap0: entered allmulticast mode [ 623.066314][T22093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.250183][T22150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3599'. [ 623.250212][T22150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3599'. [ 623.760937][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3600'. [ 624.102435][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.353710][T22172] wg2 speed is unknown, defaulting to 1000 [ 624.525275][T22172] wg2 speed is unknown, defaulting to 1000 [ 624.526126][T22172] wg2 speed is unknown, defaulting to 1000 [ 624.598893][T22181] x_tables: duplicate underflow at hook 1 [ 624.753963][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.144114][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.284734][T22188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3608'. [ 625.331643][T22188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'. [ 625.777747][T22198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3611'. [ 626.002883][T22202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3609'. [ 626.003775][T22205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3611'. [ 626.192361][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.196400][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.455050][T22212] digital: digital_start_poll: Unknown protocol [ 626.550396][T22172] infiniband syz1: set active [ 626.550416][T22172] infiniband syz1: added wg2 [ 626.638932][T22093] wg2 speed is unknown, defaulting to 1000 [ 626.640699][T22172] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 626.652442][T22160] lo speed is unknown, defaulting to 1000 [ 626.654404][T22160] netdevsim0 speed is unknown, defaulting to 1000 [ 626.690813][T22172] infiniband syz1: Couldn't open port 1 [ 626.691065][T22172] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 626.691095][T22172] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 626.691132][T22172] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 626.700436][T22160] wg2 speed is unknown, defaulting to 1000 [ 626.832457][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.886795][T22238] netlink: 'syz.2.3613': attribute type 16 has an invalid length. [ 626.886828][T22238] netlink: 'syz.2.3613': attribute type 3 has an invalid length. [ 626.886841][T22238] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.3613'. [ 627.150832][T22172] RDS/IB: syz1: added [ 627.150895][T22172] smc: adding ib device syz1 with port count 1 [ 627.150916][T22172] smc: ib device syz1 port 1 has no pnetid [ 627.150991][T22093] wg2 speed is unknown, defaulting to 1000 [ 627.237951][T22093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.790867][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.262324][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.325411][T22172] wg2 speed is unknown, defaulting to 1000 [ 628.603424][T22214] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 629.147276][T22340] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3618'. [ 629.311636][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.032693][T22344] TC_ACT_REPEAT abuse ? [ 630.059456][T22172] wg2 speed is unknown, defaulting to 1000 [ 630.360226][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.833160][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.982264][T22364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3620'. [ 631.093168][T22172] wg2 speed is unknown, defaulting to 1000 [ 631.168132][T22349] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 631.179731][ T8393] IPVS: starting estimator thread 0... [ 631.272851][T22368] IPVS: using max 27 ests per chain, 64800 per kthread [ 631.383124][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.093848][T22172] wg2 speed is unknown, defaulting to 1000 [ 632.123708][T22380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3625'. [ 632.124489][T22381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3626'. [ 632.421970][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.602776][T22391] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3627'. [ 633.158290][T22172] wg2 speed is unknown, defaulting to 1000 [ 633.495611][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.846673][T22414] netlink: 'syz.2.3632': attribute type 1 has an invalid length. [ 633.881988][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.952062][T22419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3633'. [ 634.021394][T22420] netlink: 'syz.2.3632': attribute type 10 has an invalid length. [ 634.021416][T22420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3632'. [ 634.036148][T22414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 634.267650][T22418] bond1: (slave dummy0): making interface the new active one [ 634.293419][T22418] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 634.326228][T22425] netlink: 'syz.1.3635': attribute type 12 has an invalid length. [ 634.327497][T22425] netlink: 'syz.1.3635': attribute type 1 has an invalid length. [ 634.327514][T22425] netlink: 'syz.1.3635': attribute type 6 has an invalid length. [ 634.327527][T22425] netlink: 'syz.1.3635': attribute type 3 has an invalid length. [ 634.672409][T22420] dummy0: entered promiscuous mode [ 634.688855][T22420] bond1: (slave dummy0): Releasing active interface [ 634.709530][T22172] wg2 speed is unknown, defaulting to 1000 [ 634.729716][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.842353][T22437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3636'. [ 635.178243][T22172] wg2 speed is unknown, defaulting to 1000 [ 635.459684][T22172] wg2 speed is unknown, defaulting to 1000 [ 635.782335][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.998325][T22449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3641'. [ 636.432687][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.520447][ T41] nci: nci_rx_work: unknown MT 0x6 [ 636.521050][T22458] netlink: 'syz.4.3639': attribute type 4 has an invalid length. [ 636.521068][T22458] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3639'. [ 636.812836][T22172] wg2 speed is unknown, defaulting to 1000 [ 636.840982][T22458] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 636.859117][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.904352][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.323620][T22091] lo speed is unknown, defaulting to 1000 [ 637.359626][T22091] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 637.862645][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.686699][T22497] xt_policy: output policy not valid in PREROUTING and INPUT [ 638.901598][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.910888][T22453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.440905][T22507] tipc: Started in network mode [ 639.440936][T22507] tipc: Node identity ac14140f, cluster identity 4711 [ 639.456074][T22507] tipc: New replicast peer: 255.255.255.255 [ 639.481015][T22507] tipc: Enabled bearer , priority 26 [ 639.941823][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.946651][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.229522][T22533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3656'. [ 640.572127][T22089] tipc: Node number set to 2886997007 [ 641.022690][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.104595][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.478359][T22559] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3659'. [ 642.478539][T22559] 0·: renamed from hsr0 (while UP) [ 642.552678][T22559] 0·: entered allmulticast mode [ 642.552702][T22559] hsr_slave_0: entered allmulticast mode [ 642.553038][T22559] hsr_slave_1: entered allmulticast mode [ 642.554589][T22559] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 642.982852][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.142374][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.277484][T22575] xt_hashlimit: size too large, truncated to 1048576 [ 643.349929][T22576] xt_hashlimit: size too large, truncated to 1048576 [ 644.193258][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.465453][T22591] netlink: 'syz.1.3665': attribute type 8 has an invalid length. [ 644.465474][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3665'. [ 644.497001][T22591] veth1_to_team: entered promiscuous mode [ 644.498033][T22591] gretap0: entered promiscuous mode [ 644.526620][T22591] veth1_to_team: left promiscuous mode [ 644.562670][T22596] netlink: 'syz.1.3665': attribute type 8 has an invalid length. [ 644.562689][T22596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3665'. [ 644.563152][T22591] gretap0: left promiscuous mode [ 645.232043][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.529127][T22596] veth1_to_team: entered promiscuous mode [ 645.546803][T22596] gretap0: entered promiscuous mode [ 645.574051][T22596] veth1_to_team: left promiscuous mode [ 645.594786][T22596] gretap0: left promiscuous mode [ 646.023213][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.024117][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.263170][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.617246][T22643] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3674'. [ 647.263850][T22657] sctp: [Deprecated]: syz.3.3677 (pid 22657) Use of int in maxseg socket option. [ 647.263850][T22657] Use struct sctp_assoc_value instead [ 647.304856][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.603567][ T41] IPVS: starting estimator thread 0... [ 647.717103][T22673] nbd2: detected capacity change from 0 to 63 [ 647.751264][T22681] IPVS: using max 33 ests per chain, 79200 per kthread [ 647.752990][T22684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3680'. [ 647.753016][T22684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3680'. [ 647.753913][T22673] block nbd2: NBD_DISCONNECT [ 647.807663][T22678] IPVS: fo: FWM 3 0x00000003 - no destination available [ 647.807748][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 647.852428][T22673] block nbd2: Disconnected due to user request. [ 647.951934][T22673] block nbd2: shutting down sockets [ 647.975843][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.976124][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 647.976159][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.976248][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 647.976269][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.976350][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 647.976369][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.976447][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 647.976666][ T2025] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.976692][ T2025] Buffer I/O error on dev nbd2, logical block 0, async page read [ 647.977093][ T2025] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.977119][ T2025] Buffer I/O error on dev nbd2, logical block 1, async page read [ 647.977737][ T2025] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.977762][ T2025] Buffer I/O error on dev nbd2, logical block 2, async page read [ 647.977860][ T2025] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.977883][ T2025] Buffer I/O error on dev nbd2, logical block 3, async page read [ 647.980378][ T2025] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.980408][ T2025] Buffer I/O error on dev nbd2, logical block 0, async page read [ 647.980518][ T2025] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.980541][ T2025] Buffer I/O error on dev nbd2, logical block 1, async page read [ 648.160674][T22105] ldm_validate_partition_table(): Disk read failed. [ 648.180432][T22105] Dev nbd2: unable to read RDB block 0 [ 648.262206][T22105] nbd2: unable to read partition table [ 648.342940][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.380540][T22105] ldm_validate_partition_table(): Disk read failed. [ 648.381098][T22105] Dev nbd2: unable to read RDB block 0 [ 648.392900][T22105] nbd2: unable to read partition table [ 648.570342][T22697] netlink: 'syz.2.3686': attribute type 1 has an invalid length. [ 649.092217][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.381923][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.424763][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.617168][T22744] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.639018][T22743] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3696'. [ 650.720146][ T8399] IPVS: starting estimator thread 0... [ 650.767653][T22752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.767823][T22752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.767954][T22752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.768081][T22752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.769583][T22752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.809416][T22747] IPVS: using max 32 ests per chain, 76800 per kthread [ 650.900881][T22743] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3696'. [ 650.914636][T22743] netlink: 'syz.3.3696': attribute type 29 has an invalid length. [ 650.914657][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3696'. [ 651.204552][T22758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3698'. [ 651.950667][T22771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3702'. [ 652.180735][T22775] veth0: entered promiscuous mode [ 652.210490][T22769] veth0: left promiscuous mode [ 652.462725][T22784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3704'. [ 652.513177][T22784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3704'. [ 652.875202][T22798] x_tables: duplicate underflow at hook 1 [ 653.543864][T22093] net_ratelimit: 583 callbacks suppressed [ 653.543887][T22093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.699747][T22817] netlink: 'syz.1.3711': attribute type 10 has an invalid length. [ 653.747665][T22817] netlink: Conntrack attr has 8 unknown bytes [ 653.747700][T22817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.158547][T22827] sctp: [Deprecated]: syz.1.3714 (pid 22827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.158547][T22827] Use struct sctp_sack_info instead [ 654.236320][T22833] netlink: 'syz.2.3716': attribute type 2 has an invalid length. [ 654.582202][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.020363][T22855] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.3722'. [ 655.105479][T22843] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3721'. [ 655.142910][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.622383][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.633655][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.288377][T22873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3726'. [ 656.558002][T22889] bond2: entered promiscuous mode [ 656.558029][T22889] bond2: entered allmulticast mode [ 656.682385][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.110365][T22903] netlink: 'syz.3.3733': attribute type 2 has an invalid length. [ 657.297641][T22912] netlink: 'syz.3.3733': attribute type 12 has an invalid length. [ 657.702406][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.202134][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.709158][T22931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3734'. [ 658.742854][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.783164][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.911104][T22964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3741'. [ 659.911135][T22964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3741'. [ 660.073912][T22969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 660.366968][T22972] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 660.457017][T22972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3744'. [ 660.822171][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.967215][T22991] team_slave_0: entered allmulticast mode [ 660.972998][T22994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.973775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.026404][T22994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.027116][ T8399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.031335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.070717][T22994] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 661.084233][T22994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.086682][T22994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3749'. [ 661.775365][T23013] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 661.775511][T23013] syzkaller1: linktype set to 776 [ 662.557129][T23038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3758'. [ 663.943826][T22091] net_ratelimit: 3 callbacks suppressed [ 663.943846][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.310292][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.487830][T23070] syzkaller0: entered promiscuous mode [ 664.487855][T23070] syzkaller0: entered allmulticast mode [ 664.938634][T23096] netlink: 'syz.1.3769': attribute type 1 has an invalid length. [ 664.984960][T22093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.234801][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.057289][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.061991][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.412490][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.113247][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.156664][T22093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.151685][T23098] bond0: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 670.175979][T23098] bond0 (unregistering): Released all slaves [ 670.198064][T22093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.288476][T23119] siw: device registration error -23 [ 670.423011][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.496882][T23120] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 670.496922][T23120] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 670.496957][T23120] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 670.644330][T23120] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 671.126453][T23143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.126866][T23143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.131090][T23143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.208196][T23144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3781'. [ 671.224085][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.271533][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 671.271658][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 671.271762][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 671.271864][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 671.271970][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 671.272086][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 671.272192][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 671.272310][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 671.272416][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 671.715951][T23161] xt_cgroup: path and classid specified [ 671.945814][T23166] x_tables: duplicate underflow at hook 1 [ 672.007303][T23166] tipc: Enabling not permitted [ 672.007339][T23166] tipc: Enabling of bearer rejected, failed to enable media [ 672.135586][T23167] 0ªî{X¹¦: renamed from gretap0 [ 672.197108][T23167] 0ªî{X¹¦: entered allmulticast mode [ 672.209231][T23167] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 672.262405][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.307389][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.744010][T23207] gretap0: entered promiscuous mode [ 673.815974][T23207] gretap0: left promiscuous mode [ 674.075414][T23208] bridge_slave_0: left allmulticast mode [ 674.075441][T23208] bridge_slave_0: left promiscuous mode [ 674.075664][T23208] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.154822][T23208] bridge_slave_1: left allmulticast mode [ 674.154849][T23208] bridge_slave_1: left promiscuous mode [ 674.155083][T23208] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.343558][T22093] net_ratelimit: 1 callbacks suppressed [ 674.343578][T22093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.430730][T23208] team0: Port device team_slave_0 removed [ 674.544373][T23208] team0: Port device team_slave_1 removed [ 674.570745][T23208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.570770][T23208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.623471][T23208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 674.784574][T23212] team0: Mode changed to "loadbalance" [ 674.823081][T17033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.848525][T22089] wg2 speed is unknown, defaulting to 1000 [ 674.999242][ T145] tipc: Subscription rejected, illegal request [ 675.317878][T23238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.318351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.391187][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.195379][T23255] netlink: 'syz.2.3808': attribute type 5 has an invalid length. [ 676.453521][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.542038][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.572886][T23260] __nla_validate_parse: 36 callbacks suppressed [ 676.572908][T23260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3812'. [ 676.603394][T23260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3812'. [ 677.437420][T23283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3818'. [ 677.539030][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.766308][T23283] ip6gre2: entered promiscuous mode [ 677.766333][T23283] ip6gre2: entered allmulticast mode [ 678.316718][T23299] gre3: entered promiscuous mode [ 678.624536][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.753992][T23310] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3825'. [ 678.868816][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3825'. [ 679.105482][T23319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 679.305478][T23324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3830'. [ 679.305504][T23324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3830'. [ 679.508704][T23330] netlink: 'syz.3.3832': attribute type 7 has an invalid length. [ 679.508727][T23330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3832'. [ 679.508760][T23330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3832'. [ 679.638456][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.713269][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.974628][T23336] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 680.587763][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.590467][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.616830][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.722284][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.749120][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.613925][T23371] __nla_validate_parse: 3 callbacks suppressed [ 681.613945][T23371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3843'. [ 681.613960][T23371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3843'. [ 681.746330][T23371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3843'. [ 681.856860][T22089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.048033][T23376] bond_slave_0: entered promiscuous mode [ 682.048060][T23376] bond_slave_0: entered allmulticast mode [ 682.048254][T23376] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 682.093154][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3846'. [ 682.093192][T23380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3846'. [ 682.099981][T23379] xt_cluster: node mask cannot exceed total number of nodes [ 682.175245][T23380] geneve3: entered promiscuous mode [ 682.175268][T23380] geneve3: entered allmulticast mode [ 682.192205][ T145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.192249][ T145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.192281][ T145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.192309][ T145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.325119][T23374] lo speed is unknown, defaulting to 1000 [ 682.468247][T23382] netlink: 'syz.3.3845': attribute type 1 has an invalid length. [ 682.521094][T23383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3845'. [ 682.591724][T23384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3845'. [ 682.593362][T23379] bridge0: port 1(vlan1) entered blocking state [ 682.593792][T23379] bridge0: port 1(vlan1) entered disabled state [ 682.594132][T23379] vlan1: entered allmulticast mode [ 682.594148][T23379] geneve0: entered allmulticast mode [ 682.623722][ T31] audit: type=1800 audit(1790434588.897:22): pid=23371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3843" name="memory.events" dev="tmpfs" ino=1044 res=0 errno=0 [ 682.762860][T23374] netdevsim0 speed is unknown, defaulting to 1000 [ 682.764860][T23374] wg2 speed is unknown, defaulting to 1000 [ 682.938290][T23389] IPv6: sit1: Disabled Multicast RS [ 682.998521][T23390] lo speed is unknown, defaulting to 1000 [ 683.000435][T23390] netdevsim0 speed is unknown, defaulting to 1000 [ 683.890284][T23381] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3842'. [ 683.963609][T23390] wg2 speed is unknown, defaulting to 1000 [ 684.649245][T23402] [ 684.651626][T23402] ====================================================== [ 684.658646][T23402] WARNING: possible circular locking dependency detected [ 684.665672][T23402] syzkaller #0 Not tainted [ 684.670090][T23402] ------------------------------------------------------ [ 684.677099][T23402] syz.4.3852/23402 is trying to acquire lock: [ 684.683161][T23402] ffff888026e43d68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 684.692678][T23402] [ 684.692678][T23402] but task is already holding lock: [ 684.700039][T23402] ffff888026e43840 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 684.710239][T23402] [ 684.710239][T23402] which lock already depends on the new lock. [ 684.710239][T23402] [ 684.720648][T23402] [ 684.720648][T23402] the existing dependency chain (in reverse order) is: [ 684.729669][T23402] [ 684.729669][T23402] -> #6 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 684.738292][T23402] blk_alloc_queue+0x544/0x690 [ 684.743680][T23402] __blk_mq_alloc_disk+0x194/0x390 [ 684.749520][T23402] nbd_dev_add+0x494/0xb60 [ 684.754548][T23402] nbd_init+0x168/0x1f0 [ 684.759336][T23402] do_one_initcall+0x250/0x870 [ 684.764648][T23402] do_initcall_level+0x10a/0x1a0 [ 684.770170][T23402] do_initcalls+0x59/0xa0 [ 684.775024][T23402] kernel_init_freeable+0x29d/0x3e0 [ 684.780756][T23402] kernel_init+0x22/0x1d0 [ 684.785609][T23402] ret_from_fork+0x514/0xb70 [ 684.790751][T23402] ret_from_fork_asm+0x1a/0x30 [ 684.796048][T23402] [ 684.796048][T23402] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 684.803263][T23402] fs_reclaim_acquire+0x71/0x100 [ 684.808728][T23402] __kmalloc_cache_node_noprof+0x66/0x620 [ 684.815020][T23402] create_worker+0x112/0x7c0 [ 684.820145][T23402] workqueue_prepare_cpu+0xe4/0x170 [ 684.825873][T23402] cpuhp_invoke_callback+0x434/0x810 [ 684.831727][T23402] _cpu_up+0x2ce/0x5b0 [ 684.836322][T23402] cpu_up+0x1d2/0x220 [ 684.840830][T23402] cpuhp_bringup_mask+0xb2/0x1a0 [ 684.846406][T23402] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 684.852755][T23402] bringup_nonboot_cpus+0x17/0x30 [ 684.858311][T23402] smp_init+0x32/0x110 [ 684.863072][T23402] kernel_init_freeable+0x27f/0x3e0 [ 684.868799][T23402] kernel_init+0x22/0x1d0 [ 684.873651][T23402] ret_from_fork+0x514/0xb70 [ 684.878765][T23402] ret_from_fork_asm+0x1a/0x30 [ 684.884060][T23402] [ 684.884060][T23402] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 684.891799][T23402] cpus_read_lock+0x42/0x160 [ 684.896918][T23402] static_key_slow_inc+0x12/0x30 [ 684.902413][T23402] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 684.908670][T23402] nbd_genl_foreach_sock+0x265/0x450 [ 684.914483][T23402] nbd_genl_reconfigure+0xbbb/0x1040 [ 684.920293][T23402] genl_family_rcv_msg_doit+0x233/0x340 [ 684.926453][T23402] genl_rcv_msg+0x614/0x7a0 [ 684.931489][T23402] netlink_rcv_skb+0x226/0x4a0 [ 684.936802][T23402] genl_rcv+0x28/0x40 [ 684.941313][T23402] netlink_unicast+0x7bd/0x940 [ 684.946673][T23402] netlink_sendmsg+0x813/0xb40 [ 684.951961][T23402] sock_sendmsg_nosec+0x13a/0x180 [ 684.957511][T23402] ____sys_sendmsg+0x54e/0x850 [ 684.962859][T23402] ___sys_sendmsg+0x2a5/0x360 [ 684.968064][T23402] __x64_sys_sendmsg+0x1b1/0x290 [ 684.973538][T23402] do_syscall_64+0x166/0x520 [ 684.978660][T23402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.985774][T23402] [ 684.985774][T23402] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 684.993439][T23402] __mutex_lock+0x19d/0x1550 [ 684.998566][T23402] nbd_queue_rq+0x373/0xff0 [ 685.003597][T23402] blk_mq_dispatch_rq_list+0x499/0x1990 [ 685.009671][T23402] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 685.016564][T23402] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 685.023088][T23402] blk_mq_run_work_fn+0x16c/0x300 [ 685.028663][T23402] process_scheduled_works+0xc3d/0x1630 [ 685.034736][T23402] worker_thread+0xa47/0xfb0 [ 685.039858][T23402] kthread+0x38b/0x480 [ 685.044450][T23402] ret_from_fork+0x514/0xb70 [ 685.049564][T23402] ret_from_fork_asm+0x1a/0x30 [ 685.054861][T23402] [ 685.054861][T23402] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 685.062080][T23402] __mutex_lock+0x19d/0x1550 [ 685.067203][T23402] nbd_queue_rq+0xc1/0xff0 [ 685.072143][T23402] blk_mq_dispatch_rq_list+0x499/0x1990 [ 685.078217][T23402] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 685.085075][T23402] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 685.091587][T23402] blk_mq_run_work_fn+0x16c/0x300 [ 685.097145][T23402] process_scheduled_works+0xc3d/0x1630 [ 685.103225][T23402] worker_thread+0xa47/0xfb0 [ 685.108345][T23402] kthread+0x38b/0x480 [ 685.112935][T23402] ret_from_fork+0x514/0xb70 [ 685.118048][T23402] ret_from_fork_asm+0x1a/0x30 [ 685.123340][T23402] [ 685.123340][T23402] -> #1 (set->srcu){.+.+}-{0:0}: [ 685.130492][T23402] __synchronize_srcu+0xc9/0x2f0 [ 685.135957][T23402] elevator_switch+0x1e8/0x7b0 [ 685.141248][T23402] elevator_change+0x2fa/0x480 [ 685.146533][T23402] elevator_set_default+0x375/0x440 [ 685.152346][T23402] blk_register_queue+0x3f3/0x4e0 [ 685.158011][T23402] __add_disk+0x6b8/0xdb0 [ 685.162936][T23402] add_disk_fwnode+0x100/0x3a0 [ 685.168242][T23402] nbd_dev_add+0x733/0xb60 [ 685.173190][T23402] nbd_init+0x168/0x1f0 [ 685.177880][T23402] do_one_initcall+0x250/0x870 [ 685.183181][T23402] do_initcall_level+0x10a/0x1a0 [ 685.188649][T23402] do_initcalls+0x59/0xa0 [ 685.193506][T23402] kernel_init_freeable+0x29d/0x3e0 [ 685.199242][T23402] kernel_init+0x22/0x1d0 [ 685.204103][T23402] ret_from_fork+0x514/0xb70 [ 685.209225][T23402] ret_from_fork_asm+0x1a/0x30 [ 685.214526][T23402] [ 685.214526][T23402] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 685.222361][T23402] __lock_acquire+0x164c/0x2de0 [ 685.227808][T23402] lock_acquire+0x115/0x350 [ 685.232837][T23402] __mutex_lock+0x19d/0x1550 [ 685.237962][T23402] elevator_change+0x1af/0x480 [ 685.243247][T23402] elevator_set_none+0xb5/0x140 [ 685.248622][T23402] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 685.254956][T23402] nbd_start_device+0x189/0xb30 [ 685.260332][T23402] nbd_genl_connect+0x167d/0x1cd0 [ 685.265880][T23402] genl_family_rcv_msg_doit+0x233/0x340 [ 685.271958][T23402] genl_rcv_msg+0x614/0x7a0 [ 685.276992][T23402] netlink_rcv_skb+0x226/0x4a0 [ 685.282278][T23402] genl_rcv+0x28/0x40 [ 685.286791][T23402] netlink_unicast+0x7bd/0x940 [ 685.292086][T23402] netlink_sendmsg+0x813/0xb40 [ 685.297373][T23402] sock_sendmsg_nosec+0x13a/0x180 [ 685.302927][T23402] ____sys_sendmsg+0x54e/0x850 [ 685.308222][T23402] ___sys_sendmsg+0x2a5/0x360 [ 685.313429][T23402] __x64_sys_sendmsg+0x1b1/0x290 [ 685.318899][T23402] do_syscall_64+0x166/0x520 [ 685.324026][T23402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.330449][T23402] [ 685.330449][T23402] other info that might help us debug this: [ 685.330449][T23402] [ 685.340675][T23402] Chain exists of: [ 685.340675][T23402] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 685.340675][T23402] [ 685.354437][T23402] Possible unsafe locking scenario: [ 685.354437][T23402] [ 685.361891][T23402] CPU0 CPU1 [ 685.367257][T23402] ---- ---- [ 685.372625][T23402] lock(&q->q_usage_counter(io)#51); [ 685.378008][T23402] lock(fs_reclaim); [ 685.384516][T23402] lock(&q->q_usage_counter(io)#51); [ 685.392430][T23402] lock(&q->elevator_lock); [ 685.397024][T23402] [ 685.397024][T23402] *** DEADLOCK *** [ 685.397024][T23402] [ 685.405159][T23402] locks held by syz.4.3852/23402: 6, last CPU#0: [ 685.411489][T23402] #0: ffffffff902c61c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 685.419690][T23402] #1: ffffffff902c6000 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 685.428673][T23402] #2: ffff888026cb79c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 685.440088][T23402] #3: ffff888026cb78d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 685.451075][T23402] #4: ffff888026e43840 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 685.461717][T23402] #5: ffff888026e43878 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 685.472618][T23402] [ 685.472618][T23402] stack backtrace: [ 685.478520][T23402] CPU: 0 UID: 0 PID: 23402 Comm: syz.4.3852 Not tainted syzkaller #0 PREEMPT(full) [ 685.487892][T23402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 685.497956][T23402] Call Trace: [ 685.501239][T23402] [ 685.504177][T23402] dump_stack_lvl+0xe8/0x150 [ 685.508784][T23402] print_circular_bug+0x2e2/0x300 [ 685.513825][T23402] check_noncircular+0x12f/0x150 [ 685.518787][T23402] __lock_acquire+0x164c/0x2de0 [ 685.523660][T23402] lock_acquire+0x115/0x350 [ 685.528180][T23402] ? elevator_change+0x1af/0x480 [ 685.533222][T23402] __mutex_lock+0x19d/0x1550 [ 685.537825][T23402] ? elevator_change+0x1af/0x480 [ 685.542773][T23402] ? rcu_is_watching+0x16/0xb0 [ 685.547546][T23402] ? elevator_change+0x1af/0x480 [ 685.552488][T23402] ? __pfx___mutex_lock+0x10/0x10 [ 685.557524][T23402] ? enable_work+0x17f/0x230 [ 685.562123][T23402] ? lockdep_hardirqs_on+0x7b/0x110 [ 685.567336][T23402] ? __cancel_work_sync+0xf8/0x110 [ 685.572465][T23402] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 685.577938][T23402] elevator_change+0x1af/0x480 [ 685.582709][T23402] elevator_set_none+0xb5/0x140 [ 685.587563][T23402] ? __pfx_elevator_set_none+0x10/0x10 [ 685.593027][T23402] ? xa_load+0x1db/0x210 [ 685.597288][T23402] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 685.603101][T23402] ? kernfs_add_one+0xfc/0x6f0 [ 685.607879][T23402] ? nbd_start_device+0x17d/0xb30 [ 685.612910][T23402] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 685.619169][T23402] ? sysfs_add_file_mode_ns+0x258/0x300 [ 685.624731][T23402] nbd_start_device+0x189/0xb30 [ 685.629596][T23402] ? device_create_file+0xf4/0x1b0 [ 685.634807][T23402] nbd_genl_connect+0x167d/0x1cd0 [ 685.639846][T23402] ? __pfx_nbd_genl_connect+0x10/0x10 [ 685.645221][T23402] ? rcu_is_watching+0x16/0xb0 [ 685.650002][T23402] ? __nla_parse+0x40/0x60 [ 685.654430][T23402] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 685.660774][T23402] genl_family_rcv_msg_doit+0x233/0x340 [ 685.666333][T23402] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 685.672421][T23402] ? __lock_acquire+0x747/0x2de0 [ 685.677374][T23402] genl_rcv_msg+0x614/0x7a0 [ 685.681897][T23402] ? __pfx_genl_rcv_msg+0x10/0x10 [ 685.686929][T23402] ? __pfx_nbd_genl_connect+0x10/0x10 [ 685.692314][T23402] netlink_rcv_skb+0x226/0x4a0 [ 685.697101][T23402] ? __pfx_genl_rcv_msg+0x10/0x10 [ 685.702154][T23402] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 685.703386][ T5727] net_ratelimit: 5 callbacks suppressed [ 685.703400][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.703964][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.729087][T23402] ? down_read+0x2be/0x330 [ 685.733533][T23402] genl_rcv+0x28/0x40 [ 685.737532][T23402] netlink_unicast+0x7bd/0x940 [ 685.742311][T23402] netlink_sendmsg+0x813/0xb40 [ 685.747092][T23402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.752389][T23402] ? apparmor_socket_sendmsg+0x98/0x360 [ 685.757950][T23402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.763246][T23402] sock_sendmsg_nosec+0x13a/0x180 [ 685.768287][T23402] ____sys_sendmsg+0x54e/0x850 [ 685.773070][T23402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.778382][T23402] ? import_iovec+0x73/0xa0 [ 685.782995][T23402] ___sys_sendmsg+0x2a5/0x360 [ 685.787693][T23402] ? __lock_acquire+0x747/0x2de0 [ 685.792645][T23402] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.797867][T23402] ? futex_wait+0x2a2/0x390 [ 685.802407][T23402] ? __fget_files+0x2a/0x420 [ 685.807014][T23402] ? __fget_files+0x3a2/0x420 [ 685.811703][T23402] __x64_sys_sendmsg+0x1b1/0x290 [ 685.816652][T23402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.822131][T23402] do_syscall_64+0x166/0x520 [ 685.826740][T23402] ? trace_irq_disable+0x3b/0x140 [ 685.831769][T23402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.837839][T23402] ? clear_bhb_loop+0x70/0xc0 [ 685.842526][T23402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.848431][T23402] RIP: 0033:0x7f4a10b9e159 [ 685.852856][T23402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.872477][T23402] RSP: 002b:00007f4a11a7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.880910][T23402] RAX: ffffffffffffffda RBX: 00007f4a10e26090 RCX: 00007f4a10b9e159 [ 685.888894][T23402] RDX: 000000000400400c RSI: 0000200000001ac0 RDI: 0000000000000009 [ 685.896883][T23402] RBP: 00007f4a10c3506b R08: 0000000000000000 R09: 0000000000000000 [ 685.904865][T23402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.912847][T23402] R13: 00007f4a10e26128 R14: 00007f4a10e26090 R15: 00007ffdf923e748 [ 685.920841][T23402] [ 685.941749][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.166465][T19311] block nbd2: Receive control failed (result -32) [ 686.166474][T19601] block nbd2: Receive control failed (result -32) [ 686.984803][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.024726][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.741877][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.066240][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.104676][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.182545][T17035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.821419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.171706][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.811586][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.182775][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.226509][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.271817][T22091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog