last executing test programs: 17.992984125s ago: executing program 1 (id=6183): r0 = epoll_create(0x103) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) getsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000001640), &(0x7f0000001680)=0x4) recvmmsg(r1, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001280)={0x30000010}) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00030100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000012c0)=@req={0xa, 0x1, 0x4, 0x10}, 0x10) 17.835004095s ago: executing program 1 (id=6186): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xfffffffffffffffa) listen(r0, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x64}, 0x94) sendto$inet6(r2, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0xbc, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1ff, 0x9}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x91, 0xac, "da96373ba16e201039a2e23d13202fb9f8884aedbbcb7765b9e920f9b1a75fc54c1ea88ada9a9197490b34a57b2c2285455599b4a7450972711fa0b33fae99cb2b177f85f5bb67d57e375cd36a7f0fc217df2b1179596bcd8535dfff76e1a77cabcd27e2a58614fb5dc043dd594eebd50031dc77dcc47bc73e7b15c1f1c9abcb593f1e0d5fb0b7bb7655d8a265"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x20048004) r7 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1709000000000000000001000000050007000000a10006b9c5cdf44f0f57"], 0x24}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000180009007ebd7000000000001c140000fe"], 0x30}}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) 16.845368178s ago: executing program 1 (id=6193): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x7, 0x143}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r1, 0x9}, &(0x7f00000000c0)=0x8) getpeername(r0, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000180)=0x80) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000003700)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x1, 0x0, {0xa, 0x4e23, 0x36000000, @private1, 0xff}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="6d4944b418093854a1a5cef7a541d65bdc8985000b0827451d2a7f646f81cb87f407bae99bbfcd80fcf7a4c0e51732981e9dcfce8c3874263e57f6df4262de7fcb7da7af446446530ddc167f0701ec787fddeb95dac83c0b7fb5643c9b2fd93945a0d957799b944da65850c49b628bbc3e0313d867783e5ec80befd9a0a3b74cd36ab54de509b33fd279cda5d9790a6d86674ebebace5fa8282207ecf7d933a6d9269247ead7e9063d54f23d57ade338eb2ec052ce063506f8d271c350dda01e0aff6428416693507fc1978855f219eb8f1cc635c22889c63be72f1a45b06f5a", 0xe0}], 0x1, &(0x7f0000000380)=[{0xf8, 0x3a, 0x81, "270b07e1e2bf7ffb02aad46d29eeb1c7be6f9278670532aa2478dc555b62566b6b8a46f6a5f8c02a3b3e3d0e1a47a97452b214163a66c44aa0557240329be80c6178df514930d1f4ae9c76447b5546a677a54bc69726acc410529418f7862eb86e52fca1ec65307ba80ed07d1aad65acd7983deea37aa9d05aca9d4f6c7ad436449c968a17d9018d3d2ac681c61b09253e6071491c6c4b2d3dad905f4c0bc4073665dc667f2347cf8953c2e291a09df5be4dcb94476845ee683bb881705710d7face1d363d1e2ab2b233a96ba8ac9a627cccf38591f2db8680215bc302545483331085357c6a"}, {0x1010, 0x1, 0xa, "b94b4697f23e9662d631ec1706e21f881d027a3db6e0ff447de478071e4bcfe28f801b6e5918d9b56c17f78d4648aefa99b52554b0a0d2741dacbc921c5ae3661703ed54de1376eb2857dbacabb9e6c85608c26d657c12611f1bc079d2738d7bea3f0468e7b409cdf63c26a2460f332b835aff63b9dd28da974a1d4c7d0e26b896b0b9f59e851d4eddc8225b84c088611d3ef9aca1eeee844a02bfee465b2b4c578026d7a7828a34ce8767dd4da244db303fd555e1726b95a370a2afea44d3b40c8cabe46a9adc666a42ea938c15749c39606f10a5516e1da0f41c9f314a1c9aa774afd8b378580a836e060b3856a17fdfcced09313a4e8c113464a60ba1579dc5d21b851d5f17390d03778a30be9a04de780615f79b67b969c328c64aacbb451b65ec5227bd1d5337ba3b26eb5736fea3e24e22a36010ab263068d52e6552ad5fc2f68ce70020940ba502afac08eaff2c4cc616dda44f5d1b429d8c1b06a6829f18212adf8c2a754676cc5d5ffa7f955cccfe8464e95ede3b1f2bd86a047fc6a4ea60310ede55042ff3ac73b7e9996cae3ba87a20d9c45a5cf810ccd0d6739d7858a5bdf6424360c57c9ea8fba7d40a9ea1b0f8cc551e00794adcad83c5488fa1c8668119f1c5ffad9bf6d0685996cf55f8f2db6013a9ade385ef4f3f64adb28adcdb18e0ff1b0c6d0c6ff1d676e7b325bf4eb166f0a21f8c4a89103176b712c9fc3939376fe7dfec5e4029ad4106330345f66255a6b3d91c9ea3147fee0c659925e04c0360d7203bda1a399d447bd87c58831704d9f1c7bfe067d58967232a8435d42aa824826c6f2984bc596175d8e3dc2c17d1a7407e311bcc53c24998a34b72e4b9557407268f0759a36e3b8ec4851a55d80bded1a759bf7deba92fdd0f16783a589c3d9ecbf533ad722018ff197bc93e10d2e15273b0ec85c9ce9b4fb0709c8f868d96c5ecb238a4bb86b79fc9a63ac50a3909a4637c85f6701c8922be49a30a97acd523143da0ed22bcb7f0cbeaa02b1f5f41cb5c49cbe773df8e112d7f0eee90617d61867605e17310c8c5cbf083897d06ce84660e2dfbb54c01c33f334b97f533f12571a6f328d7b27551e8519f511aaba3058a4f8e0d2b6d81f512bfaf2a61fd320c1e1b07313029f38a45c60836859d727e771458794c84badf234d2b31378f5de47535c6eb9f2c2ae703f7713f0664f7b093a1d3cf905eb0ff3aabfe614a77e8e14d81a8a6fc125c4e771b5187dc54bc2e71e9b7cea4502a80a92a716c7d952832096295e56942e02e80f1649adeb8ade9c5fb5d08dcd773c65edb72562611f2755d18b29b32d2b99a7cfd37b26d2bddf4e02f4fc4c0c12c393fe1c764a597647eead949e3556b9b1e7e8b47276e810ab35e34687857273c7d94b54ad23afdb446fb50f63f9f5d78fac06828880e6925d8be7e86d2b14a83653d23954180bf4a2e49e2add5f65c210c62e0e444634b52f19fbc83a1ac9cfb04f3b0b7216a0c70a2b325465f758504504a0bb18b8a74a7e0f0a40b567094d7a61522a1201684b97eeb8484494fc36c6d04e39bdd9828317d70bfbfd61d15e43cb0ff30ab76764bd69cf2e2fc7dd164e40380a160b7f12bc1fdec25bd25eb1fc2e79cfc9e8b3c2bdc694b04f16be9cc03fd02ae88715687eff2e9ca6b6ed1660ab2b6c68e42023b1a58ef801a613d4c4ba93a078927cd5171a779e5065e7b6b5de6eee2f008e1330383e889f333fb50f1bf59379f6f84680bd8a957348c8548ab34f7c69fc4ab20d5a991e2db99702655f95ef45aa41c4f28f7e7d6c00e3aac296b5cf8af16a42e118af623425868ea4d0c77e9a07b8963adaacfd81ef17f7fdf5505ea7cf0396e672e40a9a65d638dc6ef94dcd780acd8cdec7e0db93f039731d059f941ec07d62d56f6857f663959a29699ab1e27e5081f8d197f3a955187aba1507b9111894ea32464e896899267cc8e50504b56197bd6262bff0e6afec777a3b2aa035de9fd49dd041d55e619766488f0d3813bfebaa3f1c1c5507526c8f0502934e517cf3afc25b8d5699799b8690224f5cdf339b3cfbb2cbf1078123c87f6a89c520110af9ff2501fe119bbcae2793776be45c40fa4ec3ab62d435d7cfa1b30c6b43598b7726e6d8fc0766cb3c99c9991a5587194e5d10799beb20c3785306bb51b6b9792ad41aa830893c7d42926a20f65dbf4980f41dabbe30484a2292fd4dc8e37df084d87f3b22e898d9efe6b9d2c59fdfbeccc9c97b800cd9ae1227c396616d435f3d31de3bdac17b7fe579af9e207ab11df94acdcc836caea9e96c62cda2bdd721452023aee7597b75de98c8695dedc637aed5fa705943384975a7c4671bb58c7bc2efc6d8b75936e4f1182553d347705c9edede85b8ee9bebf8b872911ea06f57ca627750b1414e194cdd3ec06cc0d494cabbce48ff27f7bd6696833cf6c433e104fc19e293ce1ddf64007980954432cd1ac8c180d45cd387db27f75d602fb71a179f0f02b2216106079fcc9b9370bbc88a95b38d9fe92dd77667f6328d3a7938bedd55122fbfbfe58e1c038f5dce9bd08392726b1e183fe24ba17089317460ff71bf7cacdeede5476618367734b13a0ebe1f7de283eb4d138d3f5323df0041dd0965d7e725271f4efda8171940b33235debbbf3a4cbe6c4e06ab492a8f9acda236a8bd01e209fb437ab0dafcc55b54120bf21db58dff51697b3ee770285174acba92d084e63f8c14b86ef581df1683095a9ac0927ca782aa01f6b7b97293c4d331fe47368c2c742605624324738cf0f150abfa6b0a1669b8d351e4e7e17555bed7010a47a1885e64864b9b97e2685bf15377bc0ac933ba85499f2b19b673d4176afb1a96df45f439d05a252f71200b514923bb541a148df00b1a230afd10646b9ad6131a271974a46798b75301c0d5b62471994619b0d38864f895d8af6ec985dfb894707ca9c4ee09df28ec7d8dc56b3e456aef7114c5b4f9192491ba9e4ca125a4e869f9fab689bd56d86d795629903a29df73c255fa87a1f46368d00a3c5d19e953efc3793bbed070cc3f784ed44e9644447b322a541de677fe93e0335bd8fa7b3d30ae16d931402501ad0ff8104176741e6091bfdd9e3c8c0566ff1265b03b38c6ab63e8277813a184d83423b1be2dffcacaa32ac66d92682ff5e25abe3611844ae1c4758c48419bcb32d5a7bd0494c181638ad9d1d41c4aa2a75d7ee42ed11a406353f028abad6ef2fe5136c072f64980d3856b21fce242fb33cfd077c5c3b0846ca5682dcacd49ea9fdbc1a53f27591f12421ec6db4afac5be1745b1eab23e542d1437804788de792b1cd23be45e913978cd4021a005f12c990c24a7ed0a4d482d00e21add44b5b4c8127666c746e922885317c22cf1a38965a7e29ed86d8f3c0f33824b78a3a573b1376beacfef8c446207f35b776050fa0db3e93e560e12e123692771ba361cef33551a3209e8686db12beb3a5670a348d0bd51c529b74e5b3387b10edb365395561a2158446bfa731369c0262e136ccc1462f1d5f866eb01bcc49e6e411e7d64f551367cba282f39d8d115eef777390be3945a5477a7655667a316ee9a3301dc71cdd0784eb9a1bcbd0ae6aa2aa2552865922619f2713d700cf00991375f35777ec0c0d1d871ce1b9e730f10f12ca231cc1531808c3031a0b0aaa0835d26e692b816733705526e491d60deccd9e6b3f83f9ef0e996ef793818bec18a01fa2b20adb90785e100b59162319ed225e777c0a1d876d1f19d69f34991d7cc39c5a8f69b268da8b34a06c555b0170aa071398e232000f1ba88840cc11bdcd16556893d679b89447c9b78f262482edc6ac36abea9c1a1cb57aed0d267abd274e7ad4910c236d6e20f4386c21d997238a0cfa9cc6550568e623dcfea368c958ef6aeefac445347406c4cbb5633e718bc54b91d114528ad1f6735556fe7ffaa573f2c78d61beba49bcaebb5d5f82780a52b164878db943390b377805d1095226ecdcc373d5c9943e437f24bf81327c66733af8f2b59c97ef6e35cccafd003ff47629ce7d50773d236254dc1953b9a8c749fa7d98de0270a92182fa2d1ad1d897a7a48d9a259665f73dfd0604cbd73e0be7c44f56ee07e30dd49a1952236ca6f599f6fd207ac738da6094abc7c456868b317248b571dd0d8685af1ae23d99d405e937eea64aaf55bf5405bb20cca114d7ce7568322499c33665eb9e396034462fc21208822c11028791240d159358f7e0f669b36aeb8b4c5bf5f8e7f95f5afd4faec46435af3d14b167dfe7231e239e80cef5798ed502d819d4e8f3ddebf6b68c2f2619840766f6ab707cfa3168bd33a00c7d26559836db0ce431946f95da9265beb7ebb9e930cec77fcadfa93b6e0cb50722a984ba05e6f4c4b22f3f8bcb1960785a104747c9046392f12969580f5e2f6ce9ba8db6951c849ed9aa42938428916b7a1745b5bc09f495bc9dc6fec93b7a42cdf613f447f7051f50d406d3cb715180da1cc642fa150094f07cd23a545eb508641919e1cde0409e63afb7d16e5ebb5d9fdc7437d8117ddcab94abb94a85a1a3547672a039beef2d4b983dabb9b9b4f77127720db51122477044b45c7922688e398f139fb47f21a067c342aeb0d4ba7d50f91d1c5465d88f95643d5461caa756c15d4668b04c3059ef1fb434dbf1b4d6378850078e971fe28b7719026ee47d3965d203202183ac265e8a20ac26e4821be00e337806a5fb001d9eb6482dfe1c71b854b20fee98b5eb5cc8821204c7fb1ff51c6dc9ee79ecb88f67927efd56deac0a2c259ad29bfad7e84728e953b4d12134771b4b71dfd933593609c40b8e7b43cf01a5fef8f5152c0ec16fcf51ef27570540ccdc89853b84430f56394f32e48b78cdd263daea833661bb7ad37a49d4dfd7e26a901ef042957a7c02707936a8b5da38ba77a88232ffd6d9af7c91e22c4530ef9b080531fcec334f6414eac4a07946c7167af0c2e5bc60c36820026fbc5f8b5909dad78fdfb64c2e8899343b062cc5066afa29daea88aa78a2d62866b4de4568a7f6be70a1351510ec5548b2bf2a3e69ade9cbc4fc0a80c5d84e489da68f41e7fe1523a814d034741d78a307daebcf4bfabec4619af3e816fd10457dace1d6ee04f023a0ff95d27fe6a6b08595f19984f16fa2074ed5ab6d538934898505c58e338b917d0b77d11aafe51cf3c04f48891052267dc40bc7c9cce456704d332f89ebd5cdc075df0bb8fcdedc06f6490089fad2c27d49edb3839b2152b0ab3f9cc0159b673e7d745fca138932a9b5be996499ffada28f1b3fbc1086990ba123cd1fed77809c17ee9d9dd778b80c25f93c44e4e3000a504cc13a2330863b457b950c0a118ff157d63833fdbc7eb8772079a53bd6bb172d42650300f6f7f099a5083a3e430ba7b7951c5531ed5bca090955b708e1b5ad9eedce52bba50ffdaa3152b07662faed0b6d4f35215170b12cdf1f5486b39445497b947622cd4d5d842be5ec684e239df13058256b5edbecd46e3e1d57b43d54faefb487b4c297655bcd79ea8c8006c2eada4dc56fc16db1c3ead7c9af550f3ea46901f1c6d6c99e0fa15d7b0116f7217de2a97d11fae273e20587e198d96e82abd1a78eca01a5d826ec656d53e84caf35d95546019877315cb56bc15ae736611565bc87b3663d03cae935b4af0adf87d5e85149811c15154e7025721ee56c95c826b00c6c2867df632a3a09216d683c8f935c177373636bc7be486770e5fb1327b891b206770653974e03e33659c7fdada8bf6773792da0a573ddc3b1"}, {0x1010, 0x10c, 0xffffff46, "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"}, {0x80, 0x1, 0x5, "bdfc43bef078eef2443e2d0e72ac64b94fc98fa3edffc5c97c42a99cd301de41a50ef4693e2668f6235ca9f300f90610e8bbb17559d55a2f37bfee8c2b3b4729259d386758aec252f303339a36d854a378555b2daa31b2bd73bf3aae63db355af770bcad506cb9dff56a02c7ddb61c"}, {0x68, 0x101, 0x8, "0bea41a572306ff1c7b3ca6c92cbcda24b47bf4ccf56bc25b7c83fca5f73f15a0e87bdc6750b47b519170ea1ff058f8f29dec08a6facfbeee6e1fd5ef5eef6c654b77b17ecef06fb99284a1374ba048fb38d607168d1d5"}, {0x1010, 0x107, 0xd73f, "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"}, {0xd0, 0x111, 0x4, "be0728940f4d84e450bd5daba901189bfbfee8046a4e0be1dd4ae2267325372d8422770c4f6068f7f9678dbe9395350f4c51e448202ad2e65532a3708161c7fbda4b12a96d518b36bd322cfb14af31ea45b39e70845eb942c857ad3b70096b104a22a235dc428484c833ee3e42fa4661c85a2bab6eb6c97b698ead78d584043ad7323c8e81303e98006bdfe1cc51466ad9a5ac85f50990ccd9bf7c281236579bd864de716e1362d980e6799f2f4ff8c2b121383501aa2ee394e7fd1fbd4db50d"}, {0x80, 0x103, 0x400, "8d833d269231bdbd10e200eb0af6901b0871c768b51fb9d2ea9de676153268808d1d202efba4c7a056dc41d96882d2a691a9482c24bcf60176218a8660d766ca2349cd30f02c0675629bd01ac6ffd9a92448167ce5d6c3f56070bc68c5d9885c7f12346677a5ad475e94e669850f"}], 0x3360}, 0x4c880) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000003740)={0x3, 0x7}) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000003780)) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0x0, &(0x7f00000037c0), &(0x7f0000003800)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x7) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000039c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003980)={@cgroup=r6, 0x37, 0x1, 0x6, &(0x7f0000003880)=[0x0], 0x1, 0x0, &(0x7f00000038c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003900)=[0x0, 0x0], &(0x7f0000003940)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$rds(r2, &(0x7f0000003a00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000003a40)={0x0, 'veth1_to_bridge\x00', {0x1}, 0x7}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000003a80), &(0x7f0000003ac0)=0x4) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000003b00)={0x0, 0xb8c, 0x5}) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000003b40)=0x1000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000003b80)={'wg2\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003bc0)=@bloom_filter={0x1e, 0x400, 0x800, 0xfffffffe, 0x40846, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x8}, 0x50) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000003c40)={0x6, [0x69, 0x2, 0x1, 0x2, 0x1, 0x2]}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003e00)={&(0x7f0000003c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x5, [@union={0x2, 0x4, 0x0, 0x5, 0x1, 0x2, [{0x9, 0x2, 0x1d5}, {0x9, 0x1, 0xb2}, {0x8, 0x2, 0x5}, {0x2, 0x1, 0x1ff}]}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @restrict={0x8}, @union={0x9, 0x7, 0x0, 0x5, 0x0, 0x4, [{0x7, 0x3, 0xc3}, {0x4, 0x4, 0x9}, {0x3, 0x2, 0xc}, {0x0, 0x4, 0xd}, {0x8, 0x1, 0x1}, {0x1}, {0xe, 0x2, 0x3}]}, @enum64={0x7, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x2, 0x163, 0x8}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x2e, 0x2e, 0x5efb21162ba67aea]}}, &(0x7f0000003d80)=""/104, 0xf5, 0x68, 0x0, 0x1, 0x10000}, 0x28) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r9, 0x40086e81, &(0x7f0000003e40)=0x1a) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003ec0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003f40)={{r8, 0xffffffffffffffff}, &(0x7f0000003e80), &(0x7f0000003f00)=r10}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004240)={r10, 0xe0, &(0x7f0000004140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000003f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000003fc0)=[0x0, 0x0], &(0x7f0000004000)=[0x0, 0x0], 0x0, 0x80, &(0x7f0000004040)=[{}], 0x8, 0x10, &(0x7f0000004080), &(0x7f00000040c0), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000004100)}}, 0x10) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000053c0)={0x6, 0x5, &(0x7f0000004280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000042c0)='GPL\x00', 0x401, 0x1000, &(0x7f0000004300)=""/4096, 0x40f00, 0x40, '\x00', r7, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005300)={0x5, 0xe, 0x3, 0x40000000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000005340)=[r11, r11, r11, r8, r0], &(0x7f0000005380)=[{0x4, 0x5, 0x2, 0x5}, {0x3, 0x5, 0x7, 0xc}], 0x10, 0x200}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000005480)=r12, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000005500)={0xb, 0x8, '\x00', 0x1, &(0x7f00000054c0)=[0x0]}) 16.045267071s ago: executing program 1 (id=6196): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x18, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0xffffffffffffff9b) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x50000, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) write$tun(r5, 0x0, 0xfdef) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x6, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="080bf4e404000000050000000000008073100000", @ANYRES32, @ANYBLOB="0000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf77fc200000308004600002c0000000000019078ac1414bbac1414bb4404e2000d009078400900020000672d0000000100000009"], 0x0) 12.133557955s ago: executing program 1 (id=6240): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x105e, &(0x7f0000002500)=""/4098, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x201}, 0x94) 11.873223187s ago: executing program 1 (id=6244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xfff3, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000140)=0x8000) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfa, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 4.57702773s ago: executing program 4 (id=6290): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x8}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) socket$inet6(0xa, 0x80000, 0x2) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42486, 0x6025}, [@IFLA_NET_NS_FD={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2.913859697s ago: executing program 2 (id=6304): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x3, 0x84) epoll_create1(0x0) (async) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r4, 0x1}, {0xffffffffffffffff, 0x502}, {r1, 0x4}], 0x3, 0x0, 0x0, 0x0) epoll_wait(r4, 0x0, 0x0, 0xffffffff) (async) epoll_wait(r4, 0x0, 0x0, 0xffffffff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) connect$unix(r3, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x200005, 0xce, &(0x7f0000000740)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x200005, 0xce, &(0x7f0000000740)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x6}, 0x94) accept(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000007c0)) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r7, 0x4) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) (async) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r6, 0x0, r7, 0x0, 0xfffd, 0x0) shutdown(r0, 0x2) 2.249511568s ago: executing program 4 (id=6307): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x9, 0x0, &(0x7f0000000280)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="bb00bbbbbbbbaaaaaaaaaabb8100480086dd6d002000001011fffe8000000000000000000000000000aaff0000000000000008000000000000014f194e2000109078c205000100000000"], 0x4a) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) unshare(0x22020400) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2026179e3f9e94f795c462aef6c3ea5725a79a084ad573851312355a1302", 0x200000ff, 0x3, 0x6, 0x2}, 0xfffffffffffffcc6) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@loopback, @multicast2}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.24725622s ago: executing program 3 (id=6308): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x105e, &(0x7f0000002500)=""/4098, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x900}, 0x94) 2.079247783s ago: executing program 0 (id=6310): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x28c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3d}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x170, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x50}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xde}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe0}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x81}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x525a8ef2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff00}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x35}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa61f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xf8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x200}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6efc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x78575d0a}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8e5f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfff}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) r5 = socket(0xa, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000000) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000640)=0x3, 0x4) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x68, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) 2.027051773s ago: executing program 3 (id=6311): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x700, 0x0, 0x0}, 0x0) close(0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000000124000008001b0100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r6, &(0x7f0000000180)="8995", 0x2, 0x4c041, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x8, 0x6, 0xfab5, 0x9, 0x10, 0x8, 0x5, {0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x4c, 0x6, 0x81, 0xfffffffd, 0x163}}, &(0x7f0000000100)=0xb0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0xa0, 0x0, 0x1, 0x102, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffef7f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd9}]}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_LABELS_MASK={0x14, 0x17, [0xc0000000, 0x1, 0x2, 0x8]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000801) 1.733496959s ago: executing program 2 (id=6312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x20, 0x19, 0x15, 0x0, 0x3, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x9}]}, 0x20}], 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x30, 0x800, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x3, 0x11, 0x0, 0x0, 0x4, 0xccce, {0x5, 0x4, 0x2, 0x1, 0xff, 0x67, 0x1, 0xe7, 0x33, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}}}}, 0x0) 1.732899701s ago: executing program 4 (id=6313): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) 1.565153922s ago: executing program 2 (id=6314): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x890c, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.557280122s ago: executing program 4 (id=6315): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r5, 0x1}, 0x20) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}, [@mark={0xc, 0x15, {0x35075d, 0x81}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x2e00}, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x1204, r8, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x646}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NODE={0x10c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "e18eb5562c283bdb5e2691b8692eb19cd1a0f81ab83e0a7d7ea70bee3fb555d5e2a16a545c103e6b459ad27e383a22493c39aff50182fffff0b0eab657fac933d3a8d47ebe129a5fd3b08db7f3f79eab6ef6f335451dac11269638bd06d43858c1dcefbda56f1262be7b130244ac053442ce8159a4a5ba068ac9d04ab82f3f05f110036bd9ed88d6e200f0bfca0727d829c081dfe84e3718217c598f66dff0dba5e61a915cf1021ec55cf35e3006cf3c4b14e896e1ca53d9f98cfdae37cd5dfd1f6023b668440ec53038569865a6f72d864f0b50a9aa02393297be31ef9f7afe92a817a276b72c8440f21b2ae32c9fe488aeaa9ce4396783254cd36b023bbbc5a04b72ab3ce60ae9b795e068cb2ec33f523a698109bbd730e7c3394ae072fbf91f907fa651507f8873fe11db37870e1ea368a32bdda9caef98dd4b3e49dad46c6daf7e0d15ae8a1797cb6333a14658b3d49dac9071fa5eac443176607e171fda850f3899ccb2ab27bfadb539ce6dc59d5443f7cb1ccdc598bc0d8aed8afda0b1a0a2cd15ef09515a094bc8ebc1b7590b3002b7f6303ef2d69de6f54443a0deacd3c5806e3aa36327db7afba259f05c272bcfd9374737adc2bbe1efbae490aba3ddac4f8378de2eec904e288486e8a9e206ae5dc8a6505032391b2d616a5bf678455083056f7e88d338c58769248c0a3d7eff53eb9a8b4045058a9aaccbde74c77edb390470af2da4f43caf9bdc468a13d8716c4899e27e6e4cedf18f6ca18be2c0c6e1f9d4ebf84892c465842e7cc227b3fdff3412bacdecbb0bc54615fcb378e469f2a0a320be23f14b1284420ec761a22a1056a8f3124601ed987591f35239418af4d9b9acd5bdd3d6e9df8e30b4f17a7d2af0d8d72f29ceca9bf5ef2443a83ebe9854dc5b380b328f8bc227ac46dceb4f98ce97ee08420af4021fe68aea2cb304817508ca9ec5862b9de93ce14c4ca2c6fbc58be6b489be1337017792491e031b8c7ea659996c3ecfe43366e9c5ed725e06f42933e5b8b56099e0b4c6ee9af20a1a36b62f27333329daf86992341f39c7306c54a797aa509255ed481468af239890b0dd9da906a2f9e9cab29b1abfdb66721acfc4892731f2eae7693a43aa74fc27d48ca8a7aea6a285563664ce1232cc168aa3d6242ae050f55523a97a54d0ca9f76ec3f3e0edfd735a873b5e03b278f05d6da0aa4e46fc4b715bffed468ac15d64d3db2dccadbe25663a35532a573aa0bfd9591ddbd800d20c952892ad381fa247c415760a328e0a6d37cfd42e611e2e975fea74ad1e87ecdd59dfc18b48b695dad7d2106a00e6d28a4663e3dbfc96095f36f6777e3f6fd8b1c005cbcd15cda5fc877360e7337744d066f3c2f9d62fbe7a84b6cf15679c9bc6e31069b66903f73f5fd7b8eef047d4c5a980dd11e9da9014a75a905c419286e1d98473e07e5b9356b0fb8cf72244b35aedea53c937ffcd0d8e78a5f65e791b3ce5b5d3ff76c2beaebf9fdb01976597671cf121c4a59d1c4cd25dddbe1c9d404f0b22cdd1463b6d286082baa5df067b91ae22ee6f95323b539012c84439979840187e77c5e176094768608af98211e60935b4a11acd9185d702fbb2129b7cd71c2052e38f36b54a3dfe88dd96f81e6914f4614b1ddd1812e36360f431cafed26bbcf2f75275003838c96bdca3c1cfb0210e3655dbbdf9cc005a18f68088da6e2ba98b8777f49be3a4fa045244ab9e0dc1a4cb44d364e87cb379fa760dd3ed3693c2ab2e56e5bfa50c303847824e5058be41b78e386b6280e0be306bd98e3079d32e5823985231e1f0915136e8befb711abffe594e0cde17fc051c4428d865c4dac4027c43faf0b7b773181f69e34cbc51ab8214bb155721f131fdeb6657a0f3a2a38bead0f5473087bfc4c100e0ba4cd6d82e74c16db9422262d9fd6faf04555022f4ade0a92e4d393d6ab32263c8244369ca1a658c48a7a633a102fe08a0c05c9ce9ff585a801ede918d769c8cc3d23a726d4416abf82de46b60db8b9c0773cb4f9c06881a770f71a75741d23f3e5969970af6b9cb655da5d973aa13900d410c20eb7cd0ad0b5e9fdb87e5944eae309850fcb5eeb2a55bbcfe07d02a557daa92ea47688cf3173030c8f004b88bde4a6e5396d99f65145704e6a4e5560a2b3da29e0332c6ff013d68b2deaa6cb060cac0371234103e6b8128f718cf764887bd41107bbb6f1bb2da9f7f660387901d363bce970c4263b96b4c6e423d77067f039f6215387dbf0c9681d8eadcdbbe3c76ad2380adc4ab955bd7e2402112a3679c266b5c1ee31cf10ff32defc11fb4525f433a76bde5d0762bdbb1d36101ab8f050a094db991383af757461eb2aa53a017dd5dbeae94e576dce13c7f3b8339dd02ed6d303e8a4219109e772606ba8217a921ee3e0babca55daaf947fab8b69c78e61e80ec0d82fc4acc606546d2c25860686b0c2064a7232d2518b8d9a711115ca60eb447bec93fcd35a45cbaed848be82aef425554595060aa391bd31cfa76e39f7615af94e9fad4d2060b358a725ba5c3be8e3eef0b0bb019771b95f23472e9c644bce8a28bc12008b2d495d6b045659520c654f205788665499f573d764c6a0f8e6fcede20208b59b74b5c48bd76f3d4546e04da3e04fed44c234c46b1c380fa4f54718fff69d85fd292938d00e24724c14b49a2bc134fd051f6218a985893d1355b6bab8d6882d9ee3c14d545e57d0b08c1df8cee85a2c394521751a4b5742bb59388f93ec160e9cb5fd801c4d86a3eb0bd201ac33843b83687495b5bee767dc168c1ea4ca179f080a57a21f439e1ae83bf2745d20d77ae077095275dcf5d2a360b01a60ca810173ef022a2744f3503cde2f5b27e4c1e14ebb21474adfbc89d23b0abd6fcca487a20ae39f610e00d7d1025804c4b3fd4326940ad6e8b466b67d2755c49bfc1f4add2f574d9dc187c6fd6101ad4cce07defe82fd73a2d8aee9439974f2423787b93f449eadffb5bf35049fc09c52f6590d9c406a0bcea70511db5889a74ca51da890236ca184cbe6f846b72967576b87b68d05f89f8167bb6592c7d013a5de9bc46c7b12e9a8c6bbb50baa51f92e6231c49be1214853d351f732c5c49bb7db8eebf514220d3346c1f4664c070d3b2937fde0dcd7002373d9ad1f371ab51ead3377597339844a080e2aa242d461ef1ae5e340eb7b594d9e58a81435f593ac88182eb0ff29a3b615e4c330620f44ffd7a7724de31a9563f457d0bd7d1cb9ad3105506874c1dbd95288ee680036a677b597441c21a66f09388c62bfefd330349960c3498b01370c6ebaed774f2d9036cede60d66ab9d86eb38be8b241dcfe4139a15224ca21c5bc616b5ded78eeca8748322b5afc866e556dffb6965f991f3bf043896e5f990121890340facf477a67f7a6a52a59828ff8a3684b4405414213797c12d3c65353a3d7c11d71f806f07b3e44f05e61eefa4e7f77b4ac0898440b2717dd4941a5ad2fb300a74e2313687bf7b8d3ae39e88d296b5676f9bd650703c8bf35271a05b71e57f625c1c3c13686539a4886bb8be319c3452170590d8d48673884c71238cfa7a56f0934322ec47c06a44173e26433ff0d68a02c78e1a32115e634284b6336d2ea9832ec9f7eb8ed217c88c8dd0a778ab0ca54f4f41eeb708f54af4e63c3b5a2a74374aeb25420610c04413a52dd8703f2416e4e27598e6ac7d0425fd894e12d6203c8c6e1ad04d3032af01d46117ca578eb3d88f8265e872bcfe4263e9be77c6635c0b8fe645dc339337a2d792681b5883f80785083d376773283c481971051707a55bc55a28e102b586a95d13a063c52b114a6f6ea4937f2f77444fd1feea00db47c546c94eb4a6434b42db34d645434c4ebffd7da500d99a058f70aeb7d5900639d3e1314bc628b7f3c4b1fa9872ed9bd88ed91e77715221806c3a9a534a9c58840cbd2523bff8a3bd465f86a8c9309aca1def8dde6900ae2a96595ffa77ac101ceec23762cdc6913d7110f5b96baac97a76a07549d5620a8c60c0261548f98eb6ca7d955fdf66662959ac9cd1153fb4f67aa944600a8793ac53063f693ace8c581c05d7c5966123a1e356a6df8d57532b145d39b4a35e8639364ef11eacf3e57434dcfaeae142e6fec15dc9d951008c8e5a08c2e98e7240c8cf52ea022f07075b6cfa5f0ca9244d808fe8e6a05d3dd692c979943f3c7b17d7d34c7a6f667a7a0ae8d95b171917a2e4270cb6b754c9fb45adbed7bd0db8deda303c6b47eed5785cfab47523257b43ecaa2799ad420b15bb7927f652835deae4302ae734d5eefe73f80f49252a55a127668b293f3b4118a244954165d53175785160b958a4fa3a0fad4e26149ee58de90e35e231902c137fb7c412a79e58bae3ae116b669eea0d2697b3b4ddae0f0793f8187e57b17c4ba5bc5b566ae653eeb39a7d38974b6b3047399d968c2175ccaaeb7a497f5a10598e1fab1f0ad7f5c465259989130e36db82f50c48c887ba2712c607f56ac9b99835c376cab1f2d68ddbe4fd992403c537d779804bc9f94fb7546dfd2b5a41541deb3ee29346b82729737e1936f8777d7a6200e449e26f6f2a19ac346345c6f42e529a6b3f448ad616e54810ca2d7db82606d49303b3f1a0f080b1c2a487a072ce7fe103f1ac8a98a48035c4999ec549b17080d450d75538e4944243ca4af901ff49e267b4dda55acde6773889143f1689dde80ee3f50c197db8538637ff9bf148fa0c2af427ed38eb1c59bcecb7c29766e661e810d9d0554b7e94a9aade543ac39bffb62a252fd09073cd926bc9f40a015863e17e15628a113512212602c7e6364d37c67cff8ccf9f63044a74c12b6a2c4751560dedd0683235761a53f5bed8b151226a561e2a914787d3ec1c3e64577063b259d5aa175900e78780cfae64b7bcb281bee155508dfc0a5aad676529cdac3af115a829a7dbc80cc924f8c350caa98fbf3a98ed40f6a861679d531038ab68622e9455208671d4d74312e91c2d0a47810f977c92263169bfd39bc4d48fa7ce3a79410f9bd1d81934691b65f6dc9cdb7be914138c536c10b7e0bcb330c5740ce8223e7ecdf5473ff5f22defdede3a5b369bbfccf1aeebf3adf4bfcd26d5134e43ae824d19a331259644f36a2ec3d752df0e573b9336ba3a7ca87cde80cc52adbbaa49db557bd1f8f7fef7d1a70b0cac46eea4475446d8026296cc79cafd02f5e39c5ddb1ae519b9ad98e67c05ee3feae40b64fdab458a4ce147e281f1dfcbfe4804d647052d32253fa05244cebbb0fd2cbf08c3bcfd060c9b64c0171b1a94fff550174a02ca1d38e784a32cc175825ccce5111f7f1f6b41eea6533807fa2b4d9e9b08021fa768086f685d081dcad1e02cd8f94648f7134cb8d5dc36ede265e1c1025a6076e1dd85d6bdfef60628ad930c1c0c87c8c2fb4b974da013dc7357ffdc5f32f783fc7e86bcec44017925f3c6a653628208a40b2d8705bd5b6c97054030ca9f73bd929e6ca47098466e99a3933046a02fd7b247b25a5bdd9130777447d2b35e2f91cb1b4e7dbf72c6d782cc9c90235f2681af48b7702f880b11bd94e99554d29a546dc39056e9cecb15bc45fc020e9084c952d036136a859e3e9c54254ccd1b3ecd019109e08af2c0d52ca367fefe2ffc77d6bda5f2d20b1b38d8bc08600e3d1d26460f3c1fbc8ac2df0151e137bbcc16d6d26a813c32f965582ca1c9ae22f2fef0e851a1b808fa48f6dfab7c6f08f1262db1efefdb5b849b6d753a359285aea35da1f7fad439a58a9aa59e18627fe4b0b103de"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8252}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa8, 0x3, "dfed5940553a248e55f53ba982097a78e37099efd98976de8650c746319aeffb5e3f40356dd61667de0c71563b00b0cb7c1b75c0d46ecc53ef31e7c6eb83fddbd32f3973a38b4b8eb5bfcfa22d1cc9ee3eaa9d1e67ea4b19cb855520c3483f60718415b7f4a1280a89ab845baa27fa77677a06d5b36116ee3333a408af75883c0db15c68728d28d95f1248da857749ceb4a4eaa4b327448502f705569264fe4971d2ec35"}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x85}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9058}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x94}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7a}]}]}, 0x1204}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x10}], 0x1, 0x0, 0x0, 0x0) 1.393369672s ago: executing program 0 (id=6316): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0xe15, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r3, &(0x7f0000000440)="1fefe8f4f11796bb756a17cc2bf1a39ae22e983aa61eaa72518b6237e9a852425c387fb14b840cf6bcb004c80af848c08b9023944f6cbd32a3e8d6672af8", &(0x7f0000000800)=""/62}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r5 = socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@void, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @local, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000f40)={0x4f4, r7, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x5}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x2fd, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xd}, @device_a, @device_a, @from_mac, {0x8, 0x9}}, 0x4400, 0x18, @default, @val={0x1, 0x8, [{0xc}, {0x3, 0x1}, {0x5, 0x1}, {0x9}, {0x36}, {0x17, 0x1}, {0x6, 0x1}, {0x9, 0x1}]}, @void, [{0xdd, 0xf8, "6e59e6a3ba17794c1b1f04794ec81d2dcc156c7de901846aff42310ff7675d5288a8e12b46ebe7895ed3c7b4361200ff19d25e855c104557a6d480c4983adadfdec93d220ee23916cf4b0f65e40cde150a6e91b50b9996ee5d1d5c4697966e49ebe05e4153ae91271b0aa67c7ec46067d963c7394465b09fc720605d6b049275ed96735bd6d1a5d46e03e49ab829def6af39f8295c02c21521e1ad3dee6e82f145f6c20230eef849ffd388a74233b3ddbe4a95242854b633aa27ff9266599b241f9a54f7b7e7348829c4fe07e63fd561c6bc2089b231b6f9341ea9b3c10f5a1587412ab1b6e91b09ba856b3183085a4632379a3cbfb6f401"}, {0xdd, 0xe9, "614c1e86b47330bc5e2ff629c036026685bb93a2dda4a5e642274991387f80fdf8069e245c1247c3186dfe19190bf7997d6bd0a2b1f60b07ebcb51223901ef02aa8e62657c3900dcbe8866f2328eb6b36b4608d5953e5ef4365b7225c2500fbdd68f3fae341eefc457b5a9b6751bb228a855724815c045d6a767dc6fd2bc1165a4415f090edfa342311e693479a0db05ae3a15395433b919a2ec38f933761144fca8bf0fa297aa14e5a4050608c2ddf4dbce2fd78c2f269e82f694ef9725b7ebfbe0e0707c8737d0e6b95e4717a4d4aa1ea2e66dd6ec39eb264d788de7688fc1810555d0cc606e08f2"}, {0xdd, 0xea, "7f16763752e25a0b94ed116ae03c976843fae21a00cd6c4bbc0ada68934679234bf0b9b11e95ab1c817b9e37136c63d51c7a3f1d3810b2c135ea7dbb338a45ead03f412f073ba6ee28ec1a7407879128a92c0823164f2b1f54c8fa2af15d4087301950fe668642487f4769da011eff558ebd0e94d81a54fe43ef2402af4ed5be60e255880c9eac6d7b4a8b6dad593913b6b74dc11f0fb2c4d1bea1711d924e66cda684c69bb6415f22e13d299f4263c1daa3daab4d219f9de814f4181d71dc2785264ec87e8676280886d41a11295f1fbda82f55fe1cbe98227f3af363261e238c713c78c36d8e67f130"}]}}, @NL80211_ATTR_FRAME={0x1b6, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @broadcast, @initial, {0x2, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xa03, 0xc, @default, @void, @val={0x2d, 0x1a, {0xc, 0x2, 0x0, 0x0, {0x8acb, 0x3, 0x0, 0x4, 0x0, 0x1}, 0xe, 0x9, 0x69}}, [{0xdd, 0x71, "052cb507b7ea7df6e5a1b8bb0eb597479b0602fdbf1bb15ac3535d24d9a73aa5019a5879c1f50d58eccaf46048fbb3d532047e7782da4fdcec675cd76dd62cc38b10da7a61c81d346d00fce3a227b728eb306516c1c2f1405a30bf89da9b802074a601f1ad88a748baa549845752580dd5"}, {0xdd, 0xff, "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"}]}}, @NL80211_ATTR_MAC={0xa}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000340)="e7ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1.283043627s ago: executing program 3 (id=6317): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc", 0xae}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000002700)="7182159d05118b143e133b2e78e4d4c045ed85e3bf8266604cd6e63dff2ba768781b2a9aef2643cc37dcb20f067677ff34eb0768325725cbd27c73637073a6590f000c5a4a16f384e20a8aa898428b50611b5d6603eed9e6000000000000008c05c1e3445f3b93cb8c241951a0d6e588f3840ccc3011bffa0124c9e6e6fe24cd819d3e42f1d7b2a68cc5abc301cd88219a6353fb4ec0ad2ca6f72ca7ed6de945219ae17d3fd2b8299b5aa61a5bda580404b29ea384950fdf6a4f63071733a2b01d32a508d2d6fa0dc261e638bf1968ae2ad756740b5408f64ec288ae00"/231, 0xe7}, {&(0x7f0000000300)="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", 0xca3}], 0x5}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2}, 0x40012220) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r6, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r7, &(0x7f0000000000), 0x0}, 0x20) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x25dfdbff, [@sadb_key={0x200000000000018d, 0x8, 0x8, 0x0, "a3"}, @sadb_x_sec_ctx={0x1, 0x18, 0x9, 0xe}, @sadb_sa={0x2, 0x1, 0x0, 0x3, 0x0, 0x7, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) 1.179205087s ago: executing program 2 (id=6318): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x28}}, 0x200080c4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) poll(0x0, 0x0, 0x7) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001140)=[{{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0xfffffffffffffa4, &(0x7f0000000d80)=ANY=[], 0x68}}], 0x1, 0x4048045) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r3, 0x1ad72f3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x10}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e60deaffd7279208b50285590f3c6d2c787a662803041693d57ebef73f4ceb5a3877cdc0077a5a0ee050058c6688969fca910cb2b1eb5de731b7884ba9f111b34e0802537ec9b2d2f489ac8c4d20803beab9fc69498f8feb05bf12ff10ca7af313869390d0dd4bdd489d12b177d0ed8e8ed7749d579ef2039ce9ba4a", @ANYRES16=r8, @ANYBLOB="010000000000030000001c000000200001801400020064766d7270300000000000000000000008000100", @ANYRES32=r10, @ANYBLOB], 0x34}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) mmap(&(0x7f000009f000/0x3000)=nil, 0x3000, 0x1, 0x30, 0xffffffffffffffff, 0x6f322000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)}, 0x30141) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), 0xffffffffffffffff) 1.097591942s ago: executing program 3 (id=6319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e23, 0x400000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}}}, &(0x7f0000000000)=0x84) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x240, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x240, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x5, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3f0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1.097001966s ago: executing program 0 (id=6320): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x105e, &(0x7f0000002500)=""/4098, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa00}, 0x94) 922.972906ms ago: executing program 0 (id=6321): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff038}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b1f5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x44}}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xfffffffffffffde6, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xe}, @TCA_FQ_QUANTUM={0xfffffffffffffcf5, 0x3, 0x4002}]}}]}, 0x40}}, 0x0) 878.851471ms ago: executing program 3 (id=6322): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x2005, 0x3, 'none\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x4e23, 0x8e0d, @empty, 0x413d}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="cec7b134d6b6b8cbc899ea8de8f7a32adc1db8c05e370d9f0ee52e08f5bfb4add30019e942ba0adebde44efc014c36cabadf693debcdb70f0bc27fd0", 0x3c}], 0x1, &(0x7f0000000140)=[@hopopts={{0x50, 0x29, 0x36, {0x5e, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x400}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x10, {0x3, 0x2, 0xf, 0x8001, [0xa4a]}}, @ra={0x5, 0x2, 0x9}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x68}, 0xc815) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002780), r0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d5310000000400"], 0x18}}, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r8, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r8, &(0x7f0000000100)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44094}, 0x20008000) 757.160951ms ago: executing program 2 (id=6323): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f079171000700880000"}}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r5, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x24}}, 0xc0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x810, r4, 0x18c46000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r9, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10, @ANYBLOB="ed5d5e67"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r14, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x166}, 0x48) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x88c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x860, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0xffff, 0x5027, 0x3, 0x2}, {0x7, 0x2, 0x5, 0x5, 0xc, 0x7}, 0x9, 0x770, 0x94}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x6cc1c33c4502b6e3}, @TCA_TBF_RATE64={0xc, 0x4, 0xd7a9652af506456b}, @TCA_TBF_RTAB={0x404, 0x2, [0xd, 0x81, 0x101, 0x6, 0x7, 0x8, 0xa, 0x3, 0x6a49, 0x101, 0x200, 0x8, 0x3, 0x2, 0xfffffffd, 0x9, 0xe, 0x5, 0x3, 0x2, 0x6, 0x80000000, 0x3e4a, 0x80, 0x100, 0x7, 0x79d, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x10, 0x100, 0x10000, 0x1, 0xa, 0x8, 0xffffffff, 0x8, 0x10, 0x1, 0x4, 0x400, 0x2, 0x4, 0x7ff, 0x5, 0x96, 0x100, 0xe, 0x0, 0x9, 0x5ab0, 0xc, 0x3, 0xffffffff, 0x2, 0xc, 0x2, 0x9, 0x40, 0xc, 0x6, 0xfffffff8, 0x4, 0x1, 0x40, 0x2, 0x4, 0x101, 0x8, 0x6, 0x2, 0x0, 0xc0, 0x2, 0x311, 0x9, 0x9, 0x3, 0xd70, 0x8, 0x3, 0x3ff, 0x2, 0x3, 0xfffffffa, 0x3, 0x7, 0x2, 0x0, 0x2, 0x3, 0x71, 0x6, 0x200, 0x4, 0xc, 0xe0e, 0x0, 0xa, 0x3, 0xacb7, 0xe, 0x3, 0x800, 0x80, 0x6, 0xffffffff, 0x323, 0x8, 0x8, 0xfffffff8, 0x8a52c200, 0x101, 0xc5, 0x1, 0x9, 0x0, 0xd92, 0x0, 0x8, 0x5, 0x200, 0x7, 0x6, 0xae4d, 0x40, 0x9, 0x9b, 0x5, 0xf, 0xcd0, 0x8, 0x1, 0x5, 0x400, 0xb3, 0xfffffffc, 0x2, 0xff, 0x3, 0x4, 0x7, 0x4c63e723, 0x2, 0x80, 0x6, 0xffff8000, 0x0, 0x0, 0x8, 0x6, 0x71fe, 0x4b3f, 0xfffffffc, 0x6, 0x1e, 0x3, 0x9, 0x2, 0x8, 0x8, 0x6, 0x9, 0x80, 0x2, 0x32f9, 0xad8, 0xfffffffe, 0x7fffffff, 0x10000, 0x69f9, 0xba4594a8, 0x1000, 0x4, 0x2, 0x14a1, 0x7e0, 0x74, 0x2, 0x100, 0x4, 0x5, 0x9237, 0x40, 0x9, 0x4, 0x0, 0x7, 0x0, 0xf93d, 0x80000000, 0x0, 0x10, 0x5, 0x7, 0x6, 0xfffffffb, 0x1, 0x3, 0x2, 0x1, 0x7, 0x88, 0x5, 0x9, 0x7, 0x0, 0x1, 0x2, 0x7fff, 0x7, 0xfffff000, 0x33a, 0x7, 0x9, 0x0, 0x2, 0x7, 0x4, 0x8c3, 0x1, 0xb76, 0x7, 0x6, 0x1, 0x2, 0x8, 0x6, 0x800, 0x49, 0x3, 0x6, 0xe8, 0x8, 0xfffffff9, 0x7993, 0x0, 0x6a, 0x1583, 0x2, 0x1e08fcac, 0xe4, 0x5, 0x6, 0x1, 0x1000, 0x16e, 0x0, 0x6, 0x2, 0x7, 0x8, 0x9]}, @TCA_TBF_RATE64={0xc, 0x4, 0x29ef3c48c808fe36}, @TCA_TBF_BURST={0x4, 0x6, 0x200000}, @TCA_TBF_PTAB={0x404, 0x3, [0x80000001, 0xffffffc0, 0x3, 0x1000, 0x5, 0x0, 0x8b, 0x7, 0x9, 0xfffffffb, 0x9, 0xc, 0x80000000, 0x1, 0x1, 0x2, 0x99, 0xffffffff, 0x3, 0xb, 0x81, 0x5, 0x5, 0x1, 0xd08, 0x3, 0x7, 0x76, 0x0, 0x10, 0xd49, 0x6, 0x6, 0x5, 0x8, 0x5, 0x78d, 0xd4, 0x72000000, 0x1fe, 0x0, 0x6, 0x7, 0x4000000, 0x3d, 0xffffff80, 0x36b, 0x5c, 0x2, 0x7fffffff, 0x7, 0x3, 0xc, 0xf, 0x9, 0xd, 0x8, 0x6, 0x1, 0x0, 0x8, 0x0, 0x6, 0x2, 0x6e, 0x5, 0x0, 0x5, 0x6, 0x4, 0x101, 0x9, 0x7, 0x3, 0x9, 0x8, 0xfffffff9, 0xfffffffe, 0x8b7, 0x8, 0x800, 0x5, 0x6, 0x25, 0x1, 0x9, 0x6, 0x5, 0x5, 0x6, 0x9, 0x6, 0x9, 0x10001, 0x80, 0x9, 0x2, 0x8, 0x1, 0xfffff4d0, 0x1, 0x8, 0xfffffffa, 0x69, 0x1, 0x8, 0x3, 0x6, 0x6, 0x2, 0xcf5, 0xa0000, 0x1, 0x2, 0x6, 0x0, 0x0, 0x8, 0x0, 0x80, 0x401, 0xfffffffe, 0x9, 0x800, 0x4, 0xf, 0x0, 0x6, 0x5, 0x10000, 0x4, 0x9, 0x1, 0x2, 0x5, 0x7f, 0x9, 0x9, 0x100, 0x9, 0xffffff81, 0x1, 0x7fff, 0xf, 0x72, 0x1, 0x8001, 0x6, 0x9, 0x2, 0x10000, 0x2, 0x1, 0xd, 0x0, 0xc2, 0x8, 0xa, 0x10, 0x2, 0x38dc, 0xef, 0x9, 0x3bc6, 0x0, 0x8ea, 0x51bb056c, 0x47ae, 0x7599bb00, 0x0, 0x7f, 0x8, 0x8, 0xca, 0xffffff0e, 0xe8, 0x8000, 0x5, 0xffffff8a, 0x5, 0x8, 0x8, 0x3ff, 0x9, 0x1, 0x3ff, 0x16, 0x6, 0x5, 0x7, 0x101, 0x9, 0x3ff, 0x30, 0xaaa9, 0x7, 0x0, 0x400, 0x1ea3, 0xffffffff, 0x1, 0xfe00000, 0x202, 0x7, 0xc0, 0xfffffcc5, 0x1d, 0x8, 0xbe6, 0x5, 0x8, 0x6, 0xfffffffe, 0x3, 0x8, 0x8, 0x81e, 0x28c, 0x203, 0x6, 0xd, 0x5, 0x0, 0x6, 0x3, 0x1, 0x1, 0x6, 0x7fff, 0x4, 0x8, 0xffff8001, 0x3, 0x7, 0x9, 0x7, 0x3, 0x3, 0x6, 0x6, 0x1, 0x3, 0x3, 0x2, 0xfffffffb, 0x11e0, 0x6, 0xa12, 0x6, 0x90a7, 0xc927, 0x7, 0x2a5c, 0x8, 0xffffffff, 0x1]}]}}]}, 0x88c}}, 0x40) 609.050809ms ago: executing program 4 (id=6324): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e23, 0x4, @private1, 0xfffffffa}], 0x3c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000004c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x80}}}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="00080000075005001c0012800b000100627269646765ffe30c0002800600270001040000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0xbe, 0x0, 0x11d80000, 0x1, @mcast2, @empty, 0x20, 0x700, 0x9, 0xfffff1ef}}) openat$cgroup_procs(r4, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'pim6reg0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x37, 0x0, 0x1d, 0x8, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, 0x80, 0x700, 0xb, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0xf0, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000014}, 0x891) r16 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x60044080) 420.060616ms ago: executing program 0 (id=6325): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0xfffffffe}}, 0x10) (async) connect$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0xfffffffe}}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x140c, 0x300, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc110}, 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c00028006000100"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007d40)={0x60, r6, 0x405, 0x70bd2f, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xf, 0x42, 0x3e, 0x42}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xf, 0x42, 0x3e, 0x42}, 0x50) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="5886", 0x2}, {0x0}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000340)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000, 0x4, 0x1ff, 0x400, 0xc, 0x4000000, r10}) (async) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000, 0x4, 0x1ff, 0x400, 0xc, 0x4000000, r10}) syz_emit_ethernet(0x32, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/322], 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r11, 0x800448f0, &(0x7f00000004c0)={0x3, 0x6, "ec2428", 0x2, 0xf8}) (async) ioctl$HCIINQUIRY(r11, 0x800448f0, &(0x7f00000004c0)={0x3, 0x6, "ec2428", 0x2, 0xf8}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80, 0x10, 0x0, 0x0, 0x0, 0x6}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x5c}]}, 0x24}}, 0x48850) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000ae30a55d0000000300000095000000000000007fb8adf6bae9"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) 404.043611ms ago: executing program 3 (id=6326): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x800) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0) 9.334147ms ago: executing program 2 (id=6327): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x661, &(0x7f0000000080)=0x4) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x10448) r1 = socket(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x9e, "d9c237d98ae89a63dd93d9fe39acb6d4f7acef92f3de711e30d5864e5de1fae97e54e1cfc357f10d97351a668810704512d271e37d52a071b99ee383dedac570d0b6897e57f50b296bce939cf7f2b2933648ab65b6b65a7491eb66ddf07e7d3ec84d0d61e6d513e38a469c31a4170465a41f7a1c9fcd19335c49b141a39011a210c5d2cc889ad85c6c979e4050eb8bcb0dd3027ca094b997ccbb56e1eb15"}, &(0x7f0000000180)=0xa6) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000019240)={r2, 0x87, "99d26dfc3aebc45b2e4563d418b3ae203f9daa8ea2c2f24df4cbc7e197b979316ee2653224ab4b47584f76fb189d4c1246313c61706b336bc278104ddff3d8e97750c37545722014a2cd0ef006fd747c8c475b3b3cdd3453747a93941671af7280915eb27c54f970dffdca31abd5d9568686be9a9aabcbcf0df370a073c092fb66ccabdca84846"}, &(0x7f0000000200)=0x8f) getsockopt(r1, 0x200000000114, 0x2712, &(0x7f0000000240)=""/102390, &(0x7f0000000040)=0x18ff6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000001140)) 8.280997ms ago: executing program 4 (id=6328): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x260, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x228, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xff, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xb8, 0x2, "85d945cee31f1c68b61e77866634f1efc8872f0f22c5e7b44d1d0d864cab1827d20636de93942c9d2e6bb2619552a141093e944bdaa8c0f019049918373cba5437f9eec9f3e3a7f3cbdcd4057883a9744b1e659c15f904e5a3d23caf16ed8ac6697a5565957aff554c60b6f9559a1832efffaed4465dd158a9e851777f8643f7450837b2b5ceecd274749095ec69747aa7a46d99dfb2100ab39d484f5bd301f38570b5ff8fb9cc2c7a18c5376adefe22d5f3069f"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x61, 0x3, "5f085befc0ab9cb01cecf4b07f3cd46ab347497f8d9d1f55df5332bcef1c1a4265056cc8a6aaf199eb19d0618de7002f905a3ef55953246e0518c9c51f32d7d9945795443b9fca032d891a0e6f60eddfeb77b3cca284a9f08e362e0c2e"}]}], @NL80211_ATTR_HE_OBSS_PD={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}]}, 0x260}, 0x1, 0x0, 0x0, 0x20048044}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000740)=[{0x1, 0x1, {0x0, 0xf0, 0xd}, {0x2, 0x1}, 0xfe, 0x1}], 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x51}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@null, @rose, @remote, @netrom, @bcast, @remote, @null, @null]}, &(0x7f0000000100)=0x48, 0x180000) sendto$ax25(r9, &(0x7f0000000200)="3cfe6c5bfe1cd55727883b7c286cb3001a560765c75d34133bcac69bbf3d0e8b146ecca2a9140e1a61769d8f9b448954a75e04044b66c502ff681388c7be3a786414169ae87136dda55c9926a318e3e54517623ffe047f12942573610b87d9e69093cd326b9985f07b258ba5c8c930743752ce9767", 0x75, 0x2000c004, 0x0, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x5f) 0s ago: executing program 0 (id=6329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x24008004) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x5c}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000340000002000128008000100677470001400028008000200", @ANYRES32, @ANYBLOB="00002773bdbb5c048ef6c3ab7f00"/24], 0x40}}, 0x240080c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2006, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x71}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x8002, @multicast2}}}, 0x108) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='/'], 0x20) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={'ip6_vti0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x718, 0x420, 0x420, 0x260, 0x260, 0x260, 0x648, 0x648, 0x648, 0x648, 0x648, 0x6, &(0x7f0000000240), {[{{@ipv6={@mcast2, @local, [0x0, 0xff000000, 0xffffffff, 0xff000000], [0x0, 0x0, 0xff000000, 0xffffff00], 'team_slave_0\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x2, 0x7, 0x7}, 0x0, 0x218, 0x260, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e24, 0x4e21], [0x5, 0x401, 0x2, 0x7, 0x6, 0x80000000, 0x6303eaaa, 0x887f, 0x8, 0x18000, 0x6, 0x9, 0x6, 0x4000, 0x19, 0x4, 0x9, 0x2, 0x610, 0x0, 0x6, 0x4, 0x9, 0x5, 0xf3, 0x27, 0x8, 0xf62, 0x9, 0x6e35, 0x9, 0x9, 0xa60, 0xc, 0x1, 0x950, 0xffffff88, 0x0, 0x9, 0x2f, 0x6, 0x8, 0x78, 0x7, 0xfffffe00, 0x81, 0x1ff, 0x8, 0xfffffff4, 0x0, 0x2, 0x0, 0x8001, 0x619, 0x8, 0x9, 0x3, 0xffffffff, 0x9c, 0xffffffff, 0x3, 0xd1c, 0x5, 0x10000], 0x5, [{0x9, 0x6, 0x6}, {0xfc, 0xfe, 0xf}, {0x2, 0x80, 0xf}, {0x5, 0xff, 0x72}], 0x3, 0x2, 0x3}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@broadcast, 0xa, 0x16, 0x1b5}}}, {{@ipv6={@mcast2, @mcast1, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0x0, 0xffffffff], 'ip6gretap0\x00', 'dvmrp1\x00', {0xff}, {}, 0x32, 0x1, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010102, 'bridge_slave_1\x00', {0xb}}}}, {{@ipv6={@loopback, @private1, [0x0, 0xff, 0x0, 0xffffffff], [0xff, 0xff000000, 0xff, 0xffffffff], 'dummy0\x00', '\x00', {0xff}, {0xff}, 0x0, 0x2, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @loopback, [0xffffff00, 0xff000000, 0xffffffff, 0xff], [0x0, 0xffffff00, 0x0, 0xff000000], 'dvmrp1\x00', 'pimreg0\x00', {}, {}, 0x16, 0xa7, 0x1, 0x51}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x44}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x35, 0x13, 0x7}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x1a, 0x82, {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) write$tun(r0, &(0x7f0000000500)={@void, @val={0x1, 0x0, 0x27, 0x0, 0x26}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x8, 0x0, 0x8}}}}}, 0x32) kernel console output (not intermixed with test programs): ttribute type 3 has an invalid length. [ 807.391178][ T5178] block nbd1: Possible stuck request ffff888085d70000: control (read@0,1024B). Runtime 60 seconds [ 807.402053][ T5178] block nbd1: Possible stuck request ffff888085d70200: control (read@1024,1024B). Runtime 60 seconds [ 807.413196][ T5178] block nbd1: Possible stuck request ffff888085d70400: control (read@2048,1024B). Runtime 60 seconds [ 807.425303][ T5178] block nbd1: Possible stuck request ffff888085d70600: control (read@3072,1024B). Runtime 60 seconds [ 807.580102][T25625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5328'. [ 807.620726][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.745395][T25634] IPv6: NLM_F_REPLACE set, but no existing node found! [ 807.957270][T25659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5338'. [ 807.982965][T25659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5338'. [ 808.028129][T25659] netlink: 'syz.3.5338': attribute type 12 has an invalid length. [ 808.065247][T25664] syzkaller0: entered promiscuous mode [ 808.073765][T25659] netlink: 'syz.3.5338': attribute type 11 has an invalid length. [ 808.078107][T25664] syzkaller0: entered allmulticast mode [ 808.491916][T25691] netlink: 'syz.3.5348': attribute type 1 has an invalid length. [ 808.521377][T25694] pim6reg99999999: entered allmulticast mode [ 808.607537][T25697] sit3: entered promiscuous mode [ 808.650180][T25706] netlink: 'syz.3.5353': attribute type 1 has an invalid length. [ 808.746332][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.794664][T25717] netlink: 'syz.3.5357': attribute type 61 has an invalid length. [ 808.896897][T25732] sctp: [Deprecated]: syz.3.5361 (pid 25732) Use of int in max_burst socket option deprecated. [ 808.896897][T25732] Use struct sctp_assoc_value instead [ 808.942672][T25722] lo speed is unknown, defaulting to 1000 [ 809.293158][T25722] lo speed is unknown, defaulting to 1000 [ 809.857097][ T6693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.953538][T25783] lo speed is unknown, defaulting to 1000 [ 810.639768][T25783] lo speed is unknown, defaulting to 1000 [ 810.647139][T25747] lo speed is unknown, defaulting to 1000 [ 811.001006][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.295252][T25854] __nla_validate_parse: 10 callbacks suppressed [ 811.295270][T25854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5388'. [ 811.314888][T25808] lo speed is unknown, defaulting to 1000 [ 811.631813][T25808] lo speed is unknown, defaulting to 1000 [ 811.651496][T25852] lo speed is unknown, defaulting to 1000 [ 811.705411][T25747] lo speed is unknown, defaulting to 1000 [ 812.108526][T25852] lo speed is unknown, defaulting to 1000 [ 812.126621][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.712346][T25899] validate_nla: 1 callbacks suppressed [ 812.712366][T25899] netlink: 'syz.1.5398': attribute type 1 has an invalid length. [ 812.914179][T25902] bond9: (slave gretap1): making interface the new active one [ 812.939943][T25905] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5398'. [ 812.949722][T25902] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 812.993705][T25905] 8021q: adding VLAN 0 to HW filter on device bond9 [ 813.154366][T25909] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5400'. [ 813.246344][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.249425][T25913] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5404'. [ 813.587413][T25943] netlink: 'syz.1.5409': attribute type 1 has an invalid length. [ 813.679003][T25943] 8021q: adding VLAN 0 to HW filter on device bond10 [ 813.748775][T25928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5406'. [ 813.771174][T25928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5406'. [ 813.785879][T25947] bond10: (slave veth3): Enslaving as an active interface with a down link [ 813.852897][T25950] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 813.860609][T25950] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 813.926912][T25943] netlink: 'syz.1.5409': attribute type 6 has an invalid length. [ 814.241603][T25959] netlink: 'syz.4.5414': attribute type 7 has an invalid length. [ 814.247524][T25966] tipc: Enabling of bearer rejected, already enabled [ 814.258565][T25965] tipc: Enabling of bearer rejected, already enabled [ 814.294989][T25959] netlink: 'syz.4.5414': attribute type 7 has an invalid length. [ 814.366766][ T6693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.716705][T25981] team_slave_0: entered allmulticast mode [ 814.762678][T25981] pim6reg: entered allmulticast mode [ 814.879253][T25999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5427'. [ 814.881337][T26001] netlink: 'syz.2.5424': attribute type 4 has an invalid length. [ 814.897901][T25999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 814.914732][T25998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5427'. [ 814.924492][T25998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 814.937099][T26004] netlink: 'syz.2.5424': attribute type 4 has an invalid length. [ 815.027316][T26009] syz_tun: entered allmulticast mode [ 815.054611][T26009] syz_tun: left allmulticast mode [ 815.124837][T26018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5430'. [ 815.141122][T26018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5430'. [ 815.566497][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.604589][T26034] lo speed is unknown, defaulting to 1000 [ 815.656562][T26042] ip6gretap1: entered allmulticast mode [ 815.965867][T26062] bridge5: entered promiscuous mode [ 816.238707][T26034] lo speed is unknown, defaulting to 1000 [ 816.241323][T26050] lo speed is unknown, defaulting to 1000 [ 816.746685][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.218540][T26106] netlink: 'syz.4.5457': attribute type 1 has an invalid length. [ 817.262681][T26106] 8021q: adding VLAN 0 to HW filter on device bond10 [ 817.270748][T26050] lo speed is unknown, defaulting to 1000 [ 817.419339][T26107] bond10: (slave geneve5): making interface the new active one [ 817.437369][T26107] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 817.483141][T26106] batman_adv: batadv0: Interface deactivated: macsec2 [ 817.736362][T26112] lo speed is unknown, defaulting to 1000 [ 817.856782][ T6693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.099328][T26137] bond11: entered allmulticast mode [ 818.172855][T26137] 8021q: adding VLAN 0 to HW filter on device bond11 [ 818.207772][T26112] lo speed is unknown, defaulting to 1000 [ 818.324989][T26140] lo speed is unknown, defaulting to 1000 [ 818.575353][T26147] __nla_validate_parse: 5 callbacks suppressed [ 818.575375][T26147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5468'. [ 818.680118][T26150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5469'. [ 818.733261][T26151] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.5469'. [ 818.736318][T26150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5469'. [ 818.776908][T26150] netlink: 'syz.1.5469': attribute type 13 has an invalid length. [ 818.811327][T26150] netlink: 'syz.1.5469': attribute type 11 has an invalid length. [ 818.965329][T26156] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 818.986894][T26140] lo speed is unknown, defaulting to 1000 [ 819.057234][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.198390][T26158] lo speed is unknown, defaulting to 1000 [ 819.462907][T26166] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5472'. [ 819.472673][T26166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5472'. [ 819.574802][T26163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5473'. [ 819.739176][T26158] lo speed is unknown, defaulting to 1000 [ 820.188498][T26175] netlink: 'syz.4.5475': attribute type 4 has an invalid length. [ 820.200432][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.297243][T26176] netlink: 'syz.4.5475': attribute type 4 has an invalid length. [ 820.362011][T26178] netlink: zone id is out of range [ 820.380438][T26178] netlink: zone id is out of range [ 820.394536][T26178] netlink: zone id is out of range [ 820.418451][T26178] netlink: zone id is out of range [ 820.440524][T26178] netlink: zone id is out of range [ 820.545937][T26179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5476'. [ 820.560177][T26179] tipc: Enabled bearer , priority 0 [ 821.491741][T26194] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.5483'. [ 821.844974][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5492'. [ 822.001926][T26235] pim6reg1: entered allmulticast mode [ 822.181201][T26253] syzkaller0: entered promiscuous mode [ 822.191476][T26253] syzkaller0: entered allmulticast mode [ 822.335838][T26264] netlink: 'syz.4.5502': attribute type 14 has an invalid length. [ 822.433998][T26264] bond0: option xmit_hash_policy: invalid value (6) [ 822.537247][ T8087] net_ratelimit: 3 callbacks suppressed [ 822.537266][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.659084][T26280] bond0: entered promiscuous mode [ 822.675923][T26280] batadv0: entered promiscuous mode [ 822.697764][T26280] debugfs: 'hsr1' already exists in 'hsr' [ 822.703546][T26280] Cannot create hsr debugfs directory [ 822.728745][T26280] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 822.772288][T26280] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 822.819091][T26280] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 822.882638][T26299] lo speed is unknown, defaulting to 1000 [ 823.058550][T26313] netlink: 'syz.4.5512': attribute type 7 has an invalid length. [ 823.087473][T26313] netlink: 'syz.4.5512': attribute type 7 has an invalid length. [ 823.299216][T26324] syzkaller0: entered promiscuous mode [ 823.366579][T26324] syzkaller0: entered allmulticast mode [ 823.527862][T26336] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 823.705972][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.708595][T26299] lo speed is unknown, defaulting to 1000 [ 823.999849][T26357] lo speed is unknown, defaulting to 1000 [ 824.384795][T26369] __nla_validate_parse: 7 callbacks suppressed [ 824.384817][T26369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5528'. [ 824.871000][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.986429][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.063791][T26357] lo speed is unknown, defaulting to 1000 [ 826.266770][T26383] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5531'. [ 826.286980][T26383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5531'. [ 826.333166][T26380] 8021q: adding VLAN 0 to HW filter on device ` [ 826.343706][T26380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 826.509145][T26391] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3207540229/3207540231 [ 826.532700][T26391] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3207540229/3207540231 [ 826.890713][T26385] lo speed is unknown, defaulting to 1000 [ 826.928456][T26411] netlink: 'syz.2.5539': attribute type 1 has an invalid length. [ 826.956862][T26411] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5539'. [ 826.972426][T26416] netlink: 'syz.4.5541': attribute type 1 has an invalid length. [ 827.007860][T26416] netlink: 732 bytes leftover after parsing attributes in process `syz.4.5541'. [ 827.108099][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.229150][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.319728][T26385] lo speed is unknown, defaulting to 1000 [ 828.552264][T26454] --map-set only usable from mangle table [ 828.872114][T26466] lo speed is unknown, defaulting to 1000 [ 829.347028][ T6693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.658780][T26466] lo speed is unknown, defaulting to 1000 [ 829.780002][T26493] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 829.949132][T26506] openvswitch: netlink: Actions may not be safe on all matching packets [ 830.071774][T26516] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5565'. [ 830.086888][T26516] xt_hashlimit: size too large, truncated to 1048576 [ 830.099984][T26517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5566'. [ 830.468015][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.603132][T26539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5572'. [ 831.106865][T26545] nbd9: detected capacity change from 0 to 63 [ 831.126635][ T5837] block nbd9: Receive control failed (result -32) [ 831.129101][T22520] block nbd9: Send control failed (result -32) [ 831.180518][T22520] block nbd9: Request send failed, requeueing [ 831.212715][ T5178] block nbd9: Dead connection, failed to find a fallback [ 831.222979][ T5178] block nbd9: shutting down sockets [ 831.228999][ T5178] blk_print_req_error: 138 callbacks suppressed [ 831.229017][ T5178] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 831.245923][ T5178] buffer_io_error: 138 callbacks suppressed [ 831.245938][ T5178] Buffer I/O error on dev nbd9, logical block 0, async page read [ 831.261076][T22520] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 831.272278][T22520] Buffer I/O error on dev nbd9, logical block 1, async page read [ 831.281352][T22520] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 831.292026][T22520] Buffer I/O error on dev nbd9, logical block 2, async page read [ 831.301813][T22520] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 831.326826][T22520] Buffer I/O error on dev nbd9, logical block 3, async page read [ 831.352623][T22520] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 831.363359][T22520] Buffer I/O error on dev nbd9, logical block 0, async page read [ 831.372146][T22520] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 831.383110][T22520] Buffer I/O error on dev nbd9, logical block 1, async page read [ 831.391594][T22520] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 831.427213][T26572] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.5576'. [ 831.498292][T22520] Buffer I/O error on dev nbd9, logical block 2, async page read [ 831.566232][T22520] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 831.607132][ T6693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.652482][T22520] Buffer I/O error on dev nbd9, logical block 3, async page read [ 831.666801][T22520] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 831.726634][T22520] Buffer I/O error on dev nbd9, logical block 0, async page read [ 831.734594][T22520] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 831.769825][T22520] Buffer I/O error on dev nbd9, logical block 1, async page read [ 831.797207][T22520] ldm_validate_partition_table(): Disk read failed. [ 831.820610][T22520] Dev nbd9: unable to read RDB block 0 [ 831.847962][T22520] nbd9: unable to read partition table [ 831.877725][T22520] ldm_validate_partition_table(): Disk read failed. [ 831.894069][T22520] Dev nbd9: unable to read RDB block 0 [ 831.987259][T22520] nbd9: unable to read partition table [ 832.776326][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.071815][T26663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5596'. [ 833.115928][T26663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5596'. [ 833.294839][T26669] netlink: 'syz.2.5599': attribute type 3 has an invalid length. [ 833.444686][T26679] FAULT_INJECTION: forcing a failure. [ 833.444686][T26679] name failslab, interval 1, probability 0, space 0, times 0 [ 833.505542][T26679] CPU: 1 UID: 0 PID: 26679 Comm: syz.2.5602 Not tainted syzkaller #0 PREEMPT(full) [ 833.505570][T26679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 833.505582][T26679] Call Trace: [ 833.505590][T26679] [ 833.505599][T26679] dump_stack_lvl+0xe8/0x150 [ 833.505631][T26679] should_fail_ex+0x412/0x560 [ 833.505659][T26679] should_failslab+0xa8/0x100 [ 833.505683][T26679] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 833.505704][T26679] ? __alloc_skb+0x186/0x7d0 [ 833.505730][T26679] ? __alloc_skb+0x1d0/0x7d0 [ 833.505779][T26679] ? __local_bh_enable_ip+0xd0/0x130 [ 833.505806][T26679] __alloc_skb+0x1d0/0x7d0 [ 833.505833][T26679] netlink_sendmsg+0x5d4/0xb40 [ 833.505869][T26679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.505896][T26679] ? aa_sock_msg_perm+0xf1/0x1b0 [ 833.505920][T26679] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 833.505944][T26679] ____sys_sendmsg+0x972/0x9f0 [ 833.505969][T26679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 833.505995][T26679] ? import_iovec+0x73/0xa0 [ 833.506021][T26679] ___sys_sendmsg+0x2a5/0x360 [ 833.506041][T26679] ? __pfx____sys_sendmsg+0x10/0x10 [ 833.506085][T26679] ? __fget_files+0x2a/0x420 [ 833.506109][T26679] ? __fget_files+0x3a0/0x420 [ 833.506141][T26679] __x64_sys_sendmsg+0x1bd/0x2a0 [ 833.506161][T26679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 833.506187][T26679] ? __pfx_ksys_write+0x10/0x10 [ 833.506216][T26679] do_syscall_64+0x14d/0xf80 [ 833.506240][T26679] ? trace_irq_disable+0x3b/0x150 [ 833.506263][T26679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.506282][T26679] ? clear_bhb_loop+0x40/0x90 [ 833.506304][T26679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.506323][T26679] RIP: 0033:0x7f1b5e79c799 [ 833.506341][T26679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.506357][T26679] RSP: 002b:00007f1b5f67c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.506376][T26679] RAX: ffffffffffffffda RBX: 00007f1b5ea15fa0 RCX: 00007f1b5e79c799 [ 833.506390][T26679] RDX: 0000000020000880 RSI: 00002000000000c0 RDI: 0000000000000004 [ 833.506401][T26679] RBP: 00007f1b5f67c090 R08: 0000000000000000 R09: 0000000000000000 [ 833.506412][T26679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.506423][T26679] R13: 00007f1b5ea16038 R14: 00007f1b5ea15fa0 R15: 00007ffdcf201888 [ 833.506452][T26679] [ 833.536797][T26687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5605'. [ 833.658761][T26690] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 833.708356][T26693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5607'. [ 833.794275][T26695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 833.801636][T26695] IPv6: NLM_F_CREATE should be set when creating new route [ 833.929278][T26695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5608'. [ 833.936925][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.968071][T26693] syzkaller0: entered promiscuous mode [ 833.973609][T26693] syzkaller0: entered allmulticast mode [ 834.239591][T26707] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5612'. [ 834.478584][T26723] FAULT_INJECTION: forcing a failure. [ 834.478584][T26723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.493724][T26723] CPU: 1 UID: 0 PID: 26723 Comm: syz.1.5617 Not tainted syzkaller #0 PREEMPT(full) [ 834.493749][T26723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 834.493760][T26723] Call Trace: [ 834.493768][T26723] [ 834.493776][T26723] dump_stack_lvl+0xe8/0x150 [ 834.493806][T26723] should_fail_ex+0x412/0x560 [ 834.493834][T26723] _copy_from_iter+0x1d3/0x1670 [ 834.493862][T26723] ? rcu_is_watching+0x15/0xb0 [ 834.493893][T26723] ? __pfx__copy_from_iter+0x10/0x10 [ 834.493925][T26723] ? netlink_sendmsg+0x650/0xb40 [ 834.493948][T26723] ? skb_put+0x11b/0x210 [ 834.493976][T26723] netlink_sendmsg+0x6c0/0xb40 [ 834.494009][T26723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.494036][T26723] ? aa_sock_msg_perm+0xf1/0x1b0 [ 834.494060][T26723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 834.494090][T26723] ____sys_sendmsg+0x972/0x9f0 [ 834.494118][T26723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.494144][T26723] ? import_iovec+0x73/0xa0 [ 834.494172][T26723] ___sys_sendmsg+0x2a5/0x360 [ 834.494196][T26723] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.494246][T26723] ? __fget_files+0x2a/0x420 [ 834.494270][T26723] ? __fget_files+0x3a0/0x420 [ 834.494304][T26723] __x64_sys_sendmsg+0x1bd/0x2a0 [ 834.494325][T26723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 834.494352][T26723] ? __pfx_ksys_write+0x10/0x10 [ 834.494382][T26723] do_syscall_64+0x14d/0xf80 [ 834.494406][T26723] ? trace_irq_disable+0x3b/0x150 [ 834.494431][T26723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.494447][T26723] ? clear_bhb_loop+0x40/0x90 [ 834.494467][T26723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.494485][T26723] RIP: 0033:0x7f72fb19c799 [ 834.494503][T26723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.494518][T26723] RSP: 002b:00007f72fbfcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.494538][T26723] RAX: ffffffffffffffda RBX: 00007f72fb415fa0 RCX: 00007f72fb19c799 [ 834.494551][T26723] RDX: 0000000020000880 RSI: 00002000000000c0 RDI: 0000000000000004 [ 834.494563][T26723] RBP: 00007f72fbfcd090 R08: 0000000000000000 R09: 0000000000000000 [ 834.494574][T26723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.494585][T26723] R13: 00007f72fb416038 R14: 00007f72fb415fa0 R15: 00007ffe34802a38 [ 834.494614][T26723] [ 835.287969][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.907212][ T5194] udevd[5194]: worker [22498] /devices/virtual/block/nbd1 is taking a long time [ 836.176334][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 836.433061][ T6693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.675093][T26732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 836.706246][T26731] smc: net device hsr0 applied user defined pnetid SYZ2 [ 836.832294][T26739] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5626'. [ 836.907783][T26744] syzkaller0: entered promiscuous mode [ 836.913300][T26744] syzkaller0: entered allmulticast mode [ 836.957994][T26746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5627'. [ 836.960607][T26744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5625'. [ 836.978279][T26744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5625'. [ 837.000623][T26755] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 786437, id = 0 [ 837.022715][T26756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5627'. [ 837.049527][T26756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5627'. [ 837.233616][T26770] netlink: 'syz.4.5632': attribute type 3 has an invalid length. [ 837.391783][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5635'. [ 837.421603][T26782] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5637'. [ 837.459149][ T5178] block nbd1: Possible stuck request ffff888085d70000: control (read@0,1024B). Runtime 90 seconds [ 837.470278][ T5178] block nbd1: Possible stuck request ffff888085d70200: control (read@1024,1024B). Runtime 90 seconds [ 837.483562][ T5178] block nbd1: Possible stuck request ffff888085d70400: control (read@2048,1024B). Runtime 90 seconds [ 837.495485][ T5178] block nbd1: Possible stuck request ffff888085d70600: control (read@3072,1024B). Runtime 90 seconds [ 837.546738][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.699119][T26806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5639'. [ 837.848312][T26814] netlink: 'syz.0.5641': attribute type 30 has an invalid length. [ 837.870784][T26817] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 837.876065][T26814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5641'. [ 837.933122][T26814] bond8: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 837.948907][T26814] bond8 (unregistering): Released all slaves [ 837.994397][T26823] lo speed is unknown, defaulting to 1000 [ 838.137162][T26828] netlink: 'syz.2.5645': attribute type 3 has an invalid length. [ 838.263770][T26833] tipc: Enabling of bearer rejected, already enabled [ 838.468132][T26823] lo speed is unknown, defaulting to 1000 [ 838.494781][T26849] x_tables: duplicate underflow at hook 2 [ 838.562817][T26848] netlink: 'syz.2.5653': attribute type 12 has an invalid length. [ 838.686683][ T6693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.900091][T26858] netlink: 'syz.3.5656': attribute type 3 has an invalid length. [ 838.912556][T26858] FAULT_INJECTION: forcing a failure. [ 838.912556][T26858] name failslab, interval 1, probability 0, space 0, times 0 [ 838.942937][T26858] CPU: 1 UID: 0 PID: 26858 Comm: syz.3.5656 Not tainted syzkaller #0 PREEMPT(full) [ 838.942965][T26858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 838.942976][T26858] Call Trace: [ 838.942983][T26858] [ 838.942992][T26858] dump_stack_lvl+0xe8/0x150 [ 838.943022][T26858] should_fail_ex+0x412/0x560 [ 838.943049][T26858] should_failslab+0xa8/0x100 [ 838.943072][T26858] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 838.943092][T26858] ? __alloc_skb+0x186/0x7d0 [ 838.943116][T26858] ? __alloc_skb+0x1d0/0x7d0 [ 838.943137][T26858] ? __local_bh_enable_ip+0xd0/0x130 [ 838.943163][T26858] __alloc_skb+0x1d0/0x7d0 [ 838.943187][T26858] ? netlink_ack_tlv_len+0x6c/0x210 [ 838.943212][T26858] netlink_ack+0x146/0xa50 [ 838.943233][T26858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.943256][T26858] ? ref_tracker_free+0x693/0x840 [ 838.943277][T26858] ? __copy_skb_header+0xa3/0x4a0 [ 838.943295][T26858] ? __pfx_ref_tracker_free+0x10/0x10 [ 838.943331][T26858] netlink_rcv_skb+0x2b6/0x4b0 [ 838.943355][T26858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.943379][T26858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 838.943411][T26858] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.943441][T26858] netlink_unicast+0x80f/0x9b0 [ 838.943470][T26858] ? __pfx_netlink_unicast+0x10/0x10 [ 838.943493][T26858] ? netlink_sendmsg+0x650/0xb40 [ 838.943514][T26858] ? skb_put+0x11b/0x210 [ 838.943541][T26858] netlink_sendmsg+0x813/0xb40 [ 838.943573][T26858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.943599][T26858] ? aa_sock_msg_perm+0xf1/0x1b0 [ 838.943623][T26858] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 838.943645][T26858] ____sys_sendmsg+0x972/0x9f0 [ 838.943671][T26858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 838.943697][T26858] ? import_iovec+0x73/0xa0 [ 838.943725][T26858] ___sys_sendmsg+0x2a5/0x360 [ 838.943747][T26858] ? __pfx____sys_sendmsg+0x10/0x10 [ 838.943803][T26858] ? __fget_files+0x2a/0x420 [ 838.943828][T26858] ? __fget_files+0x3a0/0x420 [ 838.943859][T26858] __x64_sys_sendmsg+0x1bd/0x2a0 [ 838.943879][T26858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 838.943905][T26858] ? __pfx_ksys_write+0x10/0x10 [ 838.943935][T26858] do_syscall_64+0x14d/0xf80 [ 838.943959][T26858] ? trace_irq_disable+0x3b/0x150 [ 838.943982][T26858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.943997][T26858] ? clear_bhb_loop+0x40/0x90 [ 838.944018][T26858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.944034][T26858] RIP: 0033:0x7f2f3b79c799 [ 838.944052][T26858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.944067][T26858] RSP: 002b:00007f2f3c6f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.944087][T26858] RAX: ffffffffffffffda RBX: 00007f2f3ba15fa0 RCX: 00007f2f3b79c799 [ 838.944100][T26858] RDX: 0000000020000880 RSI: 00002000000000c0 RDI: 0000000000000004 [ 838.944112][T26858] RBP: 00007f2f3c6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 838.944123][T26858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.944134][T26858] R13: 00007f2f3ba16038 R14: 00007f2f3ba15fa0 R15: 00007ffd95375878 [ 838.944161][T26858] [ 840.051181][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.192599][T26924] erspan0: entered promiscuous mode [ 840.221397][T26924] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 840.838145][T26967] lo speed is unknown, defaulting to 1000 [ 841.031285][T26976] syzkaller1: entered promiscuous mode [ 841.038787][T26976] syzkaller1: entered allmulticast mode [ 841.087598][T26978] netlink: 'syz.4.5691': attribute type 1 has an invalid length. [ 841.197024][T26978] 8021q: adding VLAN 0 to HW filter on device bond11 [ 841.206470][ T6693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.673271][T26967] lo speed is unknown, defaulting to 1000 [ 841.788629][T27007] `: Port device dummy0 removed [ 841.801361][T27007] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 841.837775][T27005] bond0: entered allmulticast mode [ 841.937314][T27012] tipc: Invalid UDP bearer configuration [ 841.937363][T27012] tipc: Enabling of bearer rejected, failed to enable media [ 842.032486][T27020] __nla_validate_parse: 17 callbacks suppressed [ 842.032504][T27020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5701'. [ 842.350296][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.367129][T27041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5708'. [ 842.379014][T27041] tipc: Enabled bearer , priority 0 [ 842.407076][T27043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5707'. [ 842.467080][T27045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5710'. [ 842.642115][T27057] netlink: 'syz.3.5713': attribute type 3 has an invalid length. [ 842.808575][T27068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.959012][T27080] lo speed is unknown, defaulting to 1000 [ 842.973960][T27068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5718'. [ 843.154211][T27090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5722'. [ 843.315223][T27080] lo speed is unknown, defaulting to 1000 [ 843.335363][T27098] netlink: 'syz.3.5725': attribute type 2 has an invalid length. [ 843.408760][T27098] 9: entered promiscuous mode [ 843.479672][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.366603][T27151] sctp: [Deprecated]: syz.4.5736 (pid 27151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 844.366603][T27151] Use struct sctp_sack_info instead [ 844.373773][T27152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5735'. [ 844.402681][T27154] sctp: [Deprecated]: syz.4.5736 (pid 27154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 844.402681][T27154] Use struct sctp_sack_info instead [ 844.464222][T27152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5735'. [ 844.646266][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.838872][T27174] lo speed is unknown, defaulting to 1000 [ 844.881301][T27179] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5743'. [ 845.173123][T27174] lo speed is unknown, defaulting to 1000 [ 845.173689][T27192] lo speed is unknown, defaulting to 1000 [ 845.188473][T27188] geneve0: entered promiscuous mode [ 845.620562][T27192] lo speed is unknown, defaulting to 1000 [ 845.759056][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.361767][ T30] audit: type=1800 audit(1773713418.932:18): pid=27232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5755" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3018 res=0 errno=0 [ 846.494794][T27237] netlink: 'syz.0.5756': attribute type 1 has an invalid length. [ 846.543537][T27237] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5756'. [ 846.690388][T27250] netlink: 'syz.0.5759': attribute type 2 has an invalid length. [ 846.834925][T27262] netlink: 'syz.2.5764': attribute type 1 has an invalid length. [ 846.866901][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.964628][T27262] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 846.980126][T27262] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 847.191410][T27281] __nla_validate_parse: 4 callbacks suppressed [ 847.191432][T27281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5767'. [ 847.273362][T27287] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5767'. [ 847.498351][T27287] lo speed is unknown, defaulting to 1000 [ 847.713144][T27307] netlink: 'syz.0.5771': attribute type 17 has an invalid length. [ 847.718600][T27287] lo speed is unknown, defaulting to 1000 [ 847.742988][T27307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5771'. [ 847.782155][T27307] bond0: option all_slaves_active: invalid value (99) [ 847.989520][T27317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5775'. [ 848.031398][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5775'. [ 848.123619][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.158392][T27317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5775'. [ 848.187069][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5775'. [ 848.232363][T27323] xt_hashlimit: size too large, truncated to 1048576 [ 848.352539][T27327] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 848.414011][T27327] bond12 (unregistering): Released all slaves [ 848.423075][T27333] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5778'. [ 848.838945][T27355] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 848.874087][T27356] batadv_slave_0: Caught tx_queue_len zero misconfig [ 849.067063][T27367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5788'. [ 849.124755][T27366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5788'. [ 849.190188][T27378] netlink: 'syz.4.5792': attribute type 13 has an invalid length. [ 849.287710][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.441356][T27396] netlink: 'syz.4.5797': attribute type 1 has an invalid length. [ 849.451971][T27398] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 849.483151][T27399] sctp: [Deprecated]: syz.0.5796 (pid 27399) Use of int in max_burst socket option deprecated. [ 849.483151][T27399] Use struct sctp_assoc_value instead [ 849.905693][T27421] FAULT_INJECTION: forcing a failure. [ 849.905693][T27421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.923532][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 849.938079][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 849.947972][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 849.960276][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 849.963472][T27421] CPU: 0 UID: 0 PID: 27421 Comm: syz.0.5804 Not tainted syzkaller #0 PREEMPT(full) [ 849.963497][T27421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 849.963509][T27421] Call Trace: [ 849.963517][T27421] [ 849.963531][T27421] dump_stack_lvl+0xe8/0x150 [ 849.963561][T27421] should_fail_ex+0x412/0x560 [ 849.963588][T27421] _copy_from_user+0x2d/0xb0 [ 849.963615][T27421] ___sys_sendmsg+0x1c6/0x360 [ 849.963640][T27421] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.963687][T27421] ? __fget_files+0x2a/0x420 [ 849.963710][T27421] ? __fget_files+0x3a0/0x420 [ 849.963741][T27421] __x64_sys_sendmsg+0x1bd/0x2a0 [ 849.963761][T27421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.963786][T27421] ? __pfx_ksys_write+0x10/0x10 [ 849.963815][T27421] do_syscall_64+0x14d/0xf80 [ 849.963848][T27421] ? trace_irq_disable+0x3b/0x150 [ 849.963871][T27421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.963888][T27421] ? clear_bhb_loop+0x40/0x90 [ 849.963909][T27421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.963926][T27421] RIP: 0033:0x7fb1ca79c799 [ 849.963943][T27421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.963957][T27421] RSP: 002b:00007fb1cb64e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.963976][T27421] RAX: ffffffffffffffda RBX: 00007fb1caa15fa0 RCX: 00007fb1ca79c799 [ 849.963988][T27421] RDX: 0000000000004080 RSI: 0000200000002380 RDI: 0000000000000004 [ 849.964000][T27421] RBP: 00007fb1cb64e090 R08: 0000000000000000 R09: 0000000000000000 [ 849.964012][T27421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.964022][T27421] R13: 00007fb1caa16038 R14: 00007fb1caa15fa0 R15: 00007ffcd30ce248 [ 849.964050][T27421] [ 850.183043][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 850.242411][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 850.251483][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 850.261885][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 850.277209][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 850.286997][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 850.418998][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.482463][T27422] lo speed is unknown, defaulting to 1000 [ 850.951512][T27422] lo speed is unknown, defaulting to 1000 [ 850.953830][T27457] lo speed is unknown, defaulting to 1000 [ 851.442093][T27422] chnl_net:caif_netlink_parms(): no params data found [ 851.546293][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.677304][T27505] netlink: 'syz.0.5824': attribute type 1 has an invalid length. [ 851.710763][T27422] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.718447][T27422] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.726585][T27422] bridge_slave_0: entered allmulticast mode [ 851.734507][T27422] bridge_slave_0: entered promiscuous mode [ 851.744364][T27422] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.752018][T27422] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.759775][T27422] bridge_slave_1: entered allmulticast mode [ 851.769787][T27422] bridge_slave_1: entered promiscuous mode [ 852.053324][T27422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.105623][T27422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.147315][T27457] lo speed is unknown, defaulting to 1000 [ 852.256815][T27462] lo speed is unknown, defaulting to 1000 [ 852.277503][T27422] team0: Port device team_slave_0 added [ 852.321698][T27422] team0: Port device team_slave_1 added [ 852.338781][ T5839] Bluetooth: hci4: command tx timeout [ 852.489788][T27422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.505908][T27422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.549977][T27538] __nla_validate_parse: 72 callbacks suppressed [ 852.549999][T27538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5831'. [ 852.582098][T27422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.607538][T27462] lo speed is unknown, defaulting to 1000 [ 852.611346][T27422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.648982][T27422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.677017][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.681219][T27422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.765843][T27544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 852.917543][T27422] hsr_slave_0: entered promiscuous mode [ 852.925274][T27422] hsr_slave_1: entered promiscuous mode [ 852.932705][T27422] debugfs: 'hsr0' already exists in 'hsr' [ 852.940415][T27422] Cannot create hsr debugfs directory [ 853.038156][T27550] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5835'. [ 853.167804][T27552] netlink: 'syz.2.5836': attribute type 83 has an invalid length. [ 853.345559][T27553] bridge0: entered allmulticast mode [ 853.450663][T27549] lo speed is unknown, defaulting to 1000 [ 853.784974][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.938395][T27582] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 854.033702][T27585] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 854.092751][T27588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5844'. [ 854.152171][T27562] lo speed is unknown, defaulting to 1000 [ 854.176871][T27549] lo speed is unknown, defaulting to 1000 [ 854.426615][ T5839] Bluetooth: hci4: command tx timeout [ 854.456660][T27570] lo speed is unknown, defaulting to 1000 [ 854.474859][T27422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 854.489035][T27422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 854.500990][T27422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 854.532150][T27422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 854.709584][T27422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.735555][T27422] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.753818][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.761045][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.790971][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.798359][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.865369][T27608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5846'. [ 854.909498][T27570] lo speed is unknown, defaulting to 1000 [ 854.938462][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.975709][T27612] batman_adv: batadv0: Adding interface: ipvlan2 [ 854.991854][T27612] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.035934][T27612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.046941][T27612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.057687][T27612] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 855.074336][T27562] lo speed is unknown, defaulting to 1000 [ 855.158745][T27616] netlink: 'syz.0.5847': attribute type 1 has an invalid length. [ 855.212922][T27613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5847'. [ 855.281278][T27613] bond9: entered promiscuous mode [ 855.288178][T27613] bond9: entered allmulticast mode [ 855.301836][T27613] 8021q: adding VLAN 0 to HW filter on device bond9 [ 855.373418][T27616] 8021q: adding VLAN 0 to HW filter on device bond9 [ 855.395024][T27616] bond9: (slave geneve3): making interface the new active one [ 855.404997][T27616] geneve3: entered promiscuous mode [ 855.411059][T27616] geneve3: entered allmulticast mode [ 855.418699][T27616] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 855.497545][T18716] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 855.553390][T27422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.574101][T18716] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 855.601154][T18716] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 855.640543][T18716] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 855.879264][T27643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5849'. [ 855.892445][T27643] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5849'. [ 856.087553][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.302528][T27662] xt_hashlimit: size too large, truncated to 1048576 [ 856.310847][T27422] veth0_vlan: entered promiscuous mode [ 856.362148][T27422] veth1_vlan: entered promiscuous mode [ 856.429342][T27665] ¾x9ÿ: renamed from bridge_slave_0 [ 856.499126][ T5839] Bluetooth: hci4: command tx timeout [ 856.599080][T27676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5859'. [ 856.631050][T27422] veth0_macvtap: entered promiscuous mode [ 856.681011][T27422] veth1_macvtap: entered promiscuous mode [ 856.713474][T27422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.728967][T27682] x_tables: duplicate entry at hook 3 [ 856.804142][T27422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.839093][ T6139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.857462][ T6139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.888463][ T6139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.902039][ T6139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.229478][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.287648][ T6139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.305731][ T6139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.368850][ T6139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.395199][ T6139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.451245][T27711] netlink: 'syz.3.5867': attribute type 10 has an invalid length. [ 857.535002][T27710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5866'. [ 857.719889][T27739] netlink: 'syz.0.5872': attribute type 2 has an invalid length. [ 857.728586][T27739] netlink: 119 bytes leftover after parsing attributes in process `syz.0.5872'. [ 857.919915][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5874'. [ 857.940933][T27753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5874'. [ 857.970729][T27759] netlink: 'syz.1.5875': attribute type 2 has an invalid length. [ 858.065853][T27761] FAULT_INJECTION: forcing a failure. [ 858.065853][T27761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.133856][T27761] CPU: 1 UID: 0 PID: 27761 Comm: syz.4.5876 Not tainted syzkaller #0 PREEMPT(full) [ 858.133883][T27761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 858.133904][T27761] Call Trace: [ 858.133911][T27761] [ 858.133918][T27761] dump_stack_lvl+0xe8/0x150 [ 858.133948][T27761] should_fail_ex+0x412/0x560 [ 858.133974][T27761] _copy_from_user+0x2d/0xb0 [ 858.134001][T27761] sock_do_ioctl+0x195/0x320 [ 858.134025][T27761] ? __pfx_sock_do_ioctl+0x10/0x10 [ 858.134042][T27761] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 858.134080][T27761] sock_ioctl+0x5c6/0x7f0 [ 858.134101][T27761] ? __pfx_sock_ioctl+0x10/0x10 [ 858.134120][T27761] ? __fget_files+0x2a/0x420 [ 858.134142][T27761] ? __fget_files+0x3a0/0x420 [ 858.134164][T27761] ? __fget_files+0x2a/0x420 [ 858.134189][T27761] ? bpf_lsm_file_ioctl+0x9/0x20 [ 858.134211][T27761] ? __pfx_sock_ioctl+0x10/0x10 [ 858.134233][T27761] __se_sys_ioctl+0xfc/0x170 [ 858.134257][T27761] do_syscall_64+0x14d/0xf80 [ 858.134282][T27761] ? trace_irq_disable+0x3b/0x150 [ 858.134306][T27761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.134325][T27761] ? clear_bhb_loop+0x40/0x90 [ 858.134348][T27761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.134367][T27761] RIP: 0033:0x7f69d339c799 [ 858.134385][T27761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.134399][T27761] RSP: 002b:00007f69d421a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.134419][T27761] RAX: ffffffffffffffda RBX: 00007f69d3615fa0 RCX: 00007f69d339c799 [ 858.134433][T27761] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 858.134446][T27761] RBP: 00007f69d421a090 R08: 0000000000000000 R09: 0000000000000000 [ 858.134458][T27761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.134470][T27761] R13: 00007f69d3616038 R14: 00007f69d3615fa0 R15: 00007ffd56416108 [ 858.134501][T27761] [ 858.430852][ T30] audit: type=1107 audit(1773713431.002:19): pid=27770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='B¿‚ߥYÂUI„žZjPÇn1_îa‡…ÊÖL”Èc–ŸxÝ¡×LØ‘Yø7³Ä³Š6E'6´}¾·ÑæÞ}/-€ÒJ' [ 858.566764][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.576729][ T5839] Bluetooth: hci4: command tx timeout [ 858.577652][T27780] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 858.617653][T27784] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 858.694737][T27780] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 858.999844][T27781] lo speed is unknown, defaulting to 1000 [ 859.175632][T27801] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5886'. [ 859.201556][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 859.219626][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 859.258623][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 859.291471][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 859.334804][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 859.378274][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 859.435498][T27781] lo speed is unknown, defaulting to 1000 [ 859.509068][T27810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.545638][T27812] FAULT_INJECTION: forcing a failure. [ 859.545638][T27812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.577563][T27812] CPU: 0 UID: 0 PID: 27812 Comm: syz.3.5890 Not tainted syzkaller #0 PREEMPT(full) [ 859.577589][T27812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 859.577599][T27812] Call Trace: [ 859.577606][T27812] [ 859.577614][T27812] dump_stack_lvl+0xe8/0x150 [ 859.577644][T27812] should_fail_ex+0x412/0x560 [ 859.577670][T27812] _copy_from_user+0x2d/0xb0 [ 859.577698][T27812] dev_ethtool+0xcf/0x1ae0 [ 859.577726][T27812] ? irqentry_exit+0x59e/0x620 [ 859.577751][T27812] ? __pfx_dev_ethtool+0x10/0x10 [ 859.577778][T27812] ? dev_load+0x21/0x1f0 [ 859.577912][T27812] ? dev_load+0x21/0x1f0 [ 859.577936][T27812] dev_ioctl+0x392/0x1150 [ 859.577962][T27812] sock_do_ioctl+0x23e/0x320 [ 859.577986][T27812] ? __pfx_sock_do_ioctl+0x10/0x10 [ 859.578008][T27812] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 859.578048][T27812] sock_ioctl+0x5c6/0x7f0 [ 859.578070][T27812] ? __pfx_sock_ioctl+0x10/0x10 [ 859.578090][T27812] ? __fget_files+0x2a/0x420 [ 859.578114][T27812] ? __fget_files+0x3a0/0x420 [ 859.578137][T27812] ? __fget_files+0x2a/0x420 [ 859.578164][T27812] ? bpf_lsm_file_ioctl+0x9/0x20 [ 859.578195][T27812] ? __pfx_sock_ioctl+0x10/0x10 [ 859.578215][T27812] __se_sys_ioctl+0xfc/0x170 [ 859.578237][T27812] do_syscall_64+0x14d/0xf80 [ 859.578262][T27812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.578284][T27812] ? clear_bhb_loop+0x40/0x90 [ 859.578306][T27812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.578330][T27812] RIP: 0033:0x7f2f3b79c799 [ 859.578347][T27812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.578370][T27812] RSP: 002b:00007f2f3c6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.578389][T27812] RAX: ffffffffffffffda RBX: 00007f2f3ba15fa0 RCX: 00007f2f3b79c799 [ 859.578402][T27812] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 859.578414][T27812] RBP: 00007f2f3c6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 859.578426][T27812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.578443][T27812] R13: 00007f2f3ba16038 R14: 00007f2f3ba15fa0 R15: 00007ffd95375878 [ 859.578507][T27812] [ 859.907575][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.368277][T27826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.940134][T27858] FAULT_INJECTION: forcing a failure. [ 860.940134][T27858] name failslab, interval 1, probability 0, space 0, times 0 [ 861.005787][T27858] CPU: 0 UID: 0 PID: 27858 Comm: syz.3.5902 Not tainted syzkaller #0 PREEMPT(full) [ 861.005814][T27858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 861.005825][T27858] Call Trace: [ 861.005832][T27858] [ 861.005841][T27858] dump_stack_lvl+0xe8/0x150 [ 861.005870][T27858] should_fail_ex+0x412/0x560 [ 861.005897][T27858] should_failslab+0xa8/0x100 [ 861.005921][T27858] __kmalloc_cache_noprof+0x88/0x660 [ 861.005943][T27858] ? dev_ethtool+0x132/0x1ae0 [ 861.005967][T27858] dev_ethtool+0x132/0x1ae0 [ 861.005993][T27858] ? irqentry_exit+0x59e/0x620 [ 861.006015][T27858] ? __pfx_dev_ethtool+0x10/0x10 [ 861.006041][T27858] ? dev_load+0x21/0x1f0 [ 861.006066][T27858] ? dev_load+0x21/0x1f0 [ 861.006089][T27858] dev_ioctl+0x392/0x1150 [ 861.006116][T27858] sock_do_ioctl+0x23e/0x320 [ 861.006140][T27858] ? __pfx_sock_do_ioctl+0x10/0x10 [ 861.006159][T27858] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 861.006199][T27858] sock_ioctl+0x5c6/0x7f0 [ 861.006221][T27858] ? __pfx_sock_ioctl+0x10/0x10 [ 861.006241][T27858] ? __fget_files+0x2a/0x420 [ 861.006264][T27858] ? __fget_files+0x3a0/0x420 [ 861.006287][T27858] ? __fget_files+0x2a/0x420 [ 861.006314][T27858] ? bpf_lsm_file_ioctl+0x9/0x20 [ 861.006337][T27858] ? __pfx_sock_ioctl+0x10/0x10 [ 861.006356][T27858] __se_sys_ioctl+0xfc/0x170 [ 861.006379][T27858] do_syscall_64+0x14d/0xf80 [ 861.006402][T27858] ? trace_irq_disable+0x3b/0x150 [ 861.006426][T27858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.006444][T27858] ? clear_bhb_loop+0x40/0x90 [ 861.006466][T27858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.006484][T27858] RIP: 0033:0x7f2f3b79c799 [ 861.006502][T27858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.006517][T27858] RSP: 002b:00007f2f3c6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.006536][T27858] RAX: ffffffffffffffda RBX: 00007f2f3ba15fa0 RCX: 00007f2f3b79c799 [ 861.006548][T27858] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 861.006559][T27858] RBP: 00007f2f3c6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 861.006569][T27858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.006579][T27858] R13: 00007f2f3ba16038 R14: 00007f2f3ba15fa0 R15: 00007ffd95375878 [ 861.006607][T27858] [ 861.256639][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.499874][T27865] netlink: 'syz.2.5903': attribute type 1 has an invalid length. [ 861.550662][T27865] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 861.551236][T27869] xt_hashlimit: size too large, truncated to 1048576 [ 861.730929][T27884] vlan0: left allmulticast mode [ 861.736695][T27884] geneve1: left allmulticast mode [ 861.783388][T27886] lo speed is unknown, defaulting to 1000 [ 862.176455][T27886] lo speed is unknown, defaulting to 1000 [ 862.259544][T27914] xt_CT: No such helper "snmp_trap" [ 862.338991][T27919] syzkaller0: entered promiscuous mode [ 862.344676][T27919] syzkaller0: entered allmulticast mode [ 862.363695][T27921] netlink: 'syz.1.5920': attribute type 1 has an invalid length. [ 862.368019][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.450077][T27919] macsec3: entered promiscuous mode [ 862.552483][T27929] vlan1: entered promiscuous mode [ 862.557857][T27929] bridge0: entered promiscuous mode [ 862.576739][T18716] tipc: Resetting bearer [ 862.596762][T27926] ipt_ECN: cannot use operation on non-tcp rule [ 862.659830][T27926] netlink: 'syz.1.5923': attribute type 32 has an invalid length. [ 862.683847][T27931] lo speed is unknown, defaulting to 1000 [ 862.778010][T27926] __nla_validate_parse: 31 callbacks suppressed [ 862.778039][T27926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5923'. [ 862.837189][T27939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5926'. [ 862.864375][T27940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5925'. [ 862.886708][T27939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5926'. [ 862.897481][T27939] netlink: 'syz.0.5926': attribute type 3 has an invalid length. [ 862.905283][T27926] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 863.039296][T27940] 8021q: adding VLAN 0 to HW filter on device bond4 [ 863.086942][T27945] bond4: (slave batadv2): Opening slave failed [ 863.106743][T27943] netlink: 'syz.2.5927': attribute type 2 has an invalid length. [ 863.212000][T27931] lo speed is unknown, defaulting to 1000 [ 863.212175][T27933] lo speed is unknown, defaulting to 1000 [ 863.374425][T27953] netlink: 1100 bytes leftover after parsing attributes in process `syz.0.5929'. [ 863.437295][ T5950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 863.566922][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.660184][T27977] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 863.862963][T27989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5936'. [ 864.067198][T27973] lo speed is unknown, defaulting to 1000 [ 864.082757][T27933] lo speed is unknown, defaulting to 1000 [ 864.201237][T27997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 864.299770][T28001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5941'. [ 864.336860][ T5950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 864.444908][T28006] netlink: 'syz.4.5942': attribute type 10 has an invalid length. [ 864.462922][T28001] 8021q: adding VLAN 0 to HW filter on device bond5 [ 864.652296][T28001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.663609][T28001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.674317][T28001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 864.684525][T28001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.694823][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.720646][T28001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.731457][T28001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.744286][T28006] bridge0: port 3(netdevsim0) entered blocking state [ 864.752571][T28006] bridge0: port 3(netdevsim0) entered disabled state [ 864.760342][T28006] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 864.771241][T28006] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 864.779850][T28006] bridge0: port 3(netdevsim0) entered blocking state [ 864.786703][T28006] bridge0: port 3(netdevsim0) entered forwarding state [ 864.830711][T28012] IPVS: length: 28 != 24 [ 864.859748][T27973] lo speed is unknown, defaulting to 1000 [ 864.878303][T28015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5945'. [ 864.956183][T28018] x_tables: duplicate underflow at hook 3 [ 865.442007][T28036] syzkaller0: entered promiscuous mode [ 865.447819][T28036] syzkaller0: entered allmulticast mode [ 865.818290][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.062245][T28058] netlink: 4104 bytes leftover after parsing attributes in process `syz.2.5957'. [ 866.166673][T28058] xt_bpf: check failed: parse error [ 866.406804][T28067] tap0: tun_chr_ioctl cmd 1074812118 [ 866.557935][T28067] tap0: tun_chr_ioctl cmd 37729 [ 866.716566][T28075] lo speed is unknown, defaulting to 1000 [ 866.997275][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.043989][T28075] lo speed is unknown, defaulting to 1000 [ 867.117333][T28093] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 867.142482][T28099] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5971'. [ 867.160273][T28099] netlink: 'syz.3.5971': attribute type 8 has an invalid length. [ 867.205131][T28097] lo speed is unknown, defaulting to 1000 [ 867.483894][T28097] lo speed is unknown, defaulting to 1000 [ 867.554454][ T5178] block nbd1: Possible stuck request ffff888085d70000: control (read@0,1024B). Runtime 120 seconds [ 867.566545][ T5178] block nbd1: Possible stuck request ffff888085d70200: control (read@1024,1024B). Runtime 120 seconds [ 867.585343][ T5178] block nbd1: Possible stuck request ffff888085d70400: control (read@2048,1024B). Runtime 120 seconds [ 867.606327][ T5178] block nbd1: Possible stuck request ffff888085d70600: control (read@3072,1024B). Runtime 120 seconds [ 867.864077][T28133] netlink: 'syz.1.5976': attribute type 322 has an invalid length. [ 868.166240][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.430792][T28143] dummy0: entered promiscuous mode [ 868.445760][T28143] dummy0: entered allmulticast mode [ 868.454247][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 868.468428][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 868.477166][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 868.487568][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 868.497743][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 868.522518][T28152] __nla_validate_parse: 3 callbacks suppressed [ 868.522535][T28152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5982'. [ 868.621213][T28156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5983'. [ 868.752631][T28156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 868.862201][ T232] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 868.914934][T28148] lo speed is unknown, defaulting to 1000 [ 869.058392][ T232] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 869.214037][ T232] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 869.266472][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.315512][T28166] lo speed is unknown, defaulting to 1000 [ 869.326740][T28148] lo speed is unknown, defaulting to 1000 [ 869.333955][ T232] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 869.764605][ T6133] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 869.788910][ T6133] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 869.874077][ T8087] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 869.883654][ T8087] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 869.927446][ T232] pimreg9: left allmulticast mode [ 870.419033][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.436648][ T232] bond4 (unregistering): (slave gretap1): Releasing active interface [ 870.519409][ T232] bond9 (unregistering): (slave geneve3): Releasing active interface [ 870.528737][ T232] geneve3 (unregistering): left promiscuous mode [ 870.535176][ T232] geneve3 (unregistering): left allmulticast mode [ 870.577789][ T5837] Bluetooth: hci1: command tx timeout [ 870.696745][ T232] bond4 (unregistering): (slave bridge2): Releasing active interface [ 870.724359][T28252] xt_hashlimit: size too large, truncated to 1048576 [ 871.012039][ T232] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 871.022501][ T232] bond0 (unregistering): Released all slaves [ 871.032484][ T232] bond1 (unregistering): Released all slaves [ 871.045130][ T232] bond2 (unregistering): Released all slaves [ 871.064431][ T232] bond3 (unregistering): Released all slaves [ 871.077718][ T232] bond4 (unregistering): Released all slaves [ 871.092231][ T232] bond5 (unregistering): Released all slaves [ 871.110136][ T232] bond6 (unregistering): (slave macvlan0): Releasing backup interface [ 871.120246][ T232] bond6 (unregistering): Released all slaves [ 871.132704][ T232] bond7 (unregistering): Released all slaves [ 871.147218][ T232] bond8 (unregistering): Released all slaves [ 871.161491][ T232] bond9 (unregistering): Released all slaves [ 871.203782][T28166] lo speed is unknown, defaulting to 1000 [ 871.397139][ T232] : left promiscuous mode [ 871.431383][T28256] lo speed is unknown, defaulting to 1000 [ 871.536243][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.580048][ T232] tipc: Disabling bearer [ 871.598247][ T232] tipc: Left network mode [ 871.631965][T28264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6006'. [ 871.632369][T28148] chnl_net:caif_netlink_parms(): no params data found [ 871.795292][ T232] IPVS: stopping backup sync thread 26817 ... [ 872.141106][T28148] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.156848][T28148] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.184954][T28148] bridge_slave_0: entered allmulticast mode [ 872.209789][T28148] bridge_slave_0: entered promiscuous mode [ 872.260700][T28264] lo speed is unknown, defaulting to 1000 [ 872.262118][T28256] lo speed is unknown, defaulting to 1000 [ 872.280361][T28148] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.292047][T28148] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.311438][T28148] bridge_slave_1: entered allmulticast mode [ 872.328796][T28148] bridge_slave_1: entered promiscuous mode [ 872.614485][T28148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.646696][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.656477][ T5837] Bluetooth: hci1: command tx timeout [ 872.700782][T28148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.780666][T28264] lo speed is unknown, defaulting to 1000 [ 872.789240][T28148] team0: Port device team_slave_0 added [ 872.799703][T28148] team0: Port device team_slave_1 added [ 872.954429][T28148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.964424][T28148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.997036][T28148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.022957][T28148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.032421][T28148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.060901][T28148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.143652][T28301] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6010'. [ 873.232611][T28303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6011'. [ 873.234888][T28148] hsr_slave_0: entered promiscuous mode [ 873.288006][T28148] hsr_slave_1: entered promiscuous mode [ 873.295560][T28148] debugfs: 'hsr0' already exists in 'hsr' [ 873.302541][T28148] Cannot create hsr debugfs directory [ 873.461192][T28307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6012'. [ 873.478329][ T232] batman_adv: batadv0: Interface deactivated: macsec0 [ 873.501130][ T232] batman_adv: batadv0: Removing interface: macsec0 [ 873.771798][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.980298][T28329] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6017'. [ 874.240576][T28148] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 874.274267][ T232] hsr_slave_0: left promiscuous mode [ 874.310235][ T232] pim6reg (unregistering): left allmulticast mode [ 874.584935][ T232] team_slave_0 (unregistering): left allmulticast mode [ 874.736433][ T5837] Bluetooth: hci1: command tx timeout [ 874.793992][T28278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 874.843497][T19128] lo speed is unknown, defaulting to 1000 [ 874.872890][T28148] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 874.879944][T19128] syz2: Port: 1 Link DOWN [ 874.919568][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.170753][T28148] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 875.260928][T28349] IPVS: set_ctl: invalid protocol: 1 4.0.16.0:1025 [ 875.483724][T28148] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 875.688129][T28367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6024'. [ 875.762331][T28367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 875.954930][T28371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6025'. [ 876.023197][ T232] IPVS: stop unused estimator thread 0... [ 876.072112][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.204653][T28148] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 876.285661][T28148] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 876.311872][T28148] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 876.352721][T28148] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 876.643928][T28415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6034'. [ 876.708100][T28415] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 876.821857][T28148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.834847][ T5837] Bluetooth: hci1: command tx timeout [ 876.877849][T28424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6036'. [ 876.895223][T28424] syzkaller1: entered allmulticast mode [ 876.933010][T28148] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.092346][T28428] lo speed is unknown, defaulting to 1000 [ 877.108108][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.115316][ T8087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.151492][ T8087] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.158809][ T8087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.186963][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.308899][T19128] IPVS: starting estimator thread 0... [ 877.416387][T28439] IPVS: using max 29 ests per chain, 69600 per kthread [ 877.478833][T28437] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.651190][T28437] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.801605][T28437] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.884745][T28148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.994637][T28437] bridge0: port 3(netdevsim0) entered disabled state [ 878.062573][T28437] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 878.097148][T28437] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 878.107673][T28437] bridge0: port 3(netdevsim0) entered disabled state [ 878.148616][T28437] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.212996][T28458] lo speed is unknown, defaulting to 1000 [ 878.288907][T28472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6043'. [ 878.316596][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.482337][T28148] veth0_vlan: entered promiscuous mode [ 878.525940][ T6133] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.604835][T28148] veth1_vlan: entered promiscuous mode [ 878.628071][ T232] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.647955][T28493] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6045'. [ 878.658472][ T232] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.687635][T28493] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 878.697981][ T232] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.749526][T28148] veth0_macvtap: entered promiscuous mode [ 878.778379][T28148] veth1_macvtap: entered promiscuous mode [ 878.918502][T28148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.024592][T28504] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6047'. [ 879.044746][T28504] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6047'. [ 879.092560][T28501] lo speed is unknown, defaulting to 1000 [ 879.103100][T28148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.132878][T28504] syzkaller0: entered promiscuous mode [ 879.147451][T28504] syzkaller0: entered allmulticast mode [ 879.262177][ T6133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.293565][ T6133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.313389][ T6133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.349609][ T6133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.457362][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.824994][ T232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.851049][ T232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.022368][ T6139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.034919][ T6139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.240591][T28537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5977'. [ 880.606310][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.731192][T28552] tipc: Started in network mode [ 880.748296][T28552] tipc: Node identity ac14140f, cluster identity 4711 [ 880.755340][T28552] tipc: New replicast peer: 255.255.255.255 [ 880.780981][T28552] tipc: Enabled bearer , priority 10 [ 880.969620][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 880.987955][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 880.999830][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 881.014090][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 881.027584][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 881.196767][T28563] lo speed is unknown, defaulting to 1000 [ 881.279505][T15915] syz_tun (unregistering): left promiscuous mode [ 881.510287][T28583] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6063'. [ 881.603486][T28588] bridge10: entered promiscuous mode [ 881.631624][T28588] bridge10: entered allmulticast mode [ 881.728578][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.886253][T19128] tipc: Node number set to 2886997007 [ 881.905872][T28563] chnl_net:caif_netlink_parms(): no params data found [ 881.934582][T28605] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6066'. [ 881.975095][T28604] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6066'. [ 882.010188][T28605] openvswitch: netlink: Flow key attr not present in new flow. [ 882.027271][T28563] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.034616][T28563] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.042462][T28563] bridge_slave_0: entered allmulticast mode [ 882.047694][T28604] openvswitch: netlink: Flow key attr not present in new flow. [ 882.050934][T28563] bridge_slave_0: entered promiscuous mode [ 882.065002][T28612] lo speed is unknown, defaulting to 1000 [ 882.065845][T28563] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.079178][T28563] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.087024][T28563] bridge_slave_1: entered allmulticast mode [ 882.095388][T28563] bridge_slave_1: entered promiscuous mode [ 882.119133][T28612] lo speed is unknown, defaulting to 1000 [ 882.137816][T28563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.159041][T28563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.189995][T28612] lo speed is unknown, defaulting to 1000 [ 882.231503][T28612] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 882.243446][T28563] team0: Port device team_slave_0 added [ 882.288606][T28563] team0: Port device team_slave_1 added [ 882.334206][T28612] lo speed is unknown, defaulting to 1000 [ 882.343132][T28615] lo speed is unknown, defaulting to 1000 [ 882.380379][T28563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.396552][T28563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.469771][T28563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.755475][T28612] lo speed is unknown, defaulting to 1000 [ 882.767303][T28563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.774283][T28563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.810491][T28563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.836823][T28612] lo speed is unknown, defaulting to 1000 [ 882.851683][T28612] lo speed is unknown, defaulting to 1000 [ 882.891547][T28612] lo speed is unknown, defaulting to 1000 [ 882.924855][T28615] lo speed is unknown, defaulting to 1000 [ 882.943822][T28563] hsr_slave_0: entered promiscuous mode [ 882.957651][T28563] hsr_slave_1: entered promiscuous mode [ 882.964172][T28563] debugfs: 'hsr0' already exists in 'hsr' [ 882.976858][T28563] Cannot create hsr debugfs directory [ 882.982655][T28612] lo speed is unknown, defaulting to 1000 [ 883.018504][T28612] lo speed is unknown, defaulting to 1000 [ 883.027112][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.060893][ T5839] Bluetooth: hci2: command tx timeout [ 883.128653][T28612] lo speed is unknown, defaulting to 1000 [ 883.182442][T28612] lo speed is unknown, defaulting to 1000 [ 883.362491][T28639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6074'. [ 883.415352][T28640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6074'. [ 883.524860][T28563] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.657205][T28563] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.728676][T28563] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.824535][T28563] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.030195][T28662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6080'. [ 884.153978][T28563] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 884.161389][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.255638][T28563] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 884.299897][T28563] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 884.366908][T28667] lo speed is unknown, defaulting to 1000 [ 884.377468][T28563] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 884.538347][T28684] sit4: entered promiscuous mode [ 884.633964][T28684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6087'. [ 884.670892][T28563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.678436][T28690] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6089'. [ 884.710757][T28563] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.841498][T18716] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.848811][T18716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.874002][T18716] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.881200][T18716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.913922][T28667] lo speed is unknown, defaulting to 1000 [ 884.953923][T28694] lo speed is unknown, defaulting to 1000 [ 885.139463][ T5839] Bluetooth: hci2: command tx timeout [ 885.306534][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.339881][T28694] lo speed is unknown, defaulting to 1000 [ 885.484108][T28563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.625069][T28710] xt_connbytes: Forcing CT accounting to be enabled [ 885.817635][T28563] veth0_vlan: entered promiscuous mode [ 886.005196][T28563] veth1_vlan: entered promiscuous mode [ 886.088260][T28563] veth0_macvtap: entered promiscuous mode [ 886.143290][T28563] veth1_macvtap: entered promiscuous mode [ 886.184504][T28563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.207560][T28563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.240479][T28730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6097'. [ 886.269067][ T8087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.299704][ T8087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.338024][ T8087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.368601][T28743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6102'. [ 886.394967][ T8087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.457317][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.598356][T18715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.635364][T18715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.788784][T28763] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6107'. [ 886.807314][ T232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.818337][T18715] wlan1: Trigger new scan to find an IBSS to join [ 886.837244][ T232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.848009][T28767] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6107'. [ 887.133136][T28780] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6112'. [ 887.175837][T28780] ksmbd: Unknown IPC event: 1, ignore. [ 887.217352][ T5839] Bluetooth: hci2: command tx timeout [ 887.381202][T19145] IPVS: starting estimator thread 0... [ 887.390325][T28791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6116'. [ 887.559669][T28789] IPVS: using max 34 ests per chain, 81600 per kthread [ 887.600095][T28767] Bluetooth: MGMT ver 1.23 [ 887.607853][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.635029][T28767] : renamed from veth0_to_bond (while UP) [ 887.708868][T28804] netlink: 'syz.1.6119': attribute type 21 has an invalid length. [ 887.742455][T28804] netlink: 'syz.1.6119': attribute type 1 has an invalid length. [ 887.767423][T28804] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6119'. [ 887.865017][T28810] netlink: 'syz.0.6120': attribute type 16 has an invalid length. [ 888.424771][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 888.441821][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 888.466942][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 888.478830][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 888.503188][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 888.723749][T28829] lo speed is unknown, defaulting to 1000 [ 888.738044][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.043587][T28829] lo speed is unknown, defaulting to 1000 [ 889.218804][T28829] chnl_net:caif_netlink_parms(): no params data found [ 889.297171][ T5839] Bluetooth: hci2: command tx timeout [ 889.339441][T28829] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.347337][T28829] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.354625][T28829] bridge_slave_0: entered allmulticast mode [ 889.363706][T28829] bridge_slave_0: entered promiscuous mode [ 889.374740][T28829] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.383301][T28829] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.392512][T28829] bridge_slave_1: entered allmulticast mode [ 889.400980][T28829] bridge_slave_1: entered promiscuous mode [ 889.440646][T28829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.453760][T28829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.493704][T28829] team0: Port device team_slave_0 added [ 889.503179][T28829] team0: Port device team_slave_1 added [ 889.541222][T28829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.549068][T28829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.576892][T28829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.590395][T28829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.598174][T28829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.625268][T28829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.682158][T28829] hsr_slave_0: entered promiscuous mode [ 889.690594][T28829] hsr_slave_1: entered promiscuous mode [ 889.699112][T28829] debugfs: 'hsr0' already exists in 'hsr' [ 889.704874][T28829] Cannot create hsr debugfs directory [ 889.847991][T28829] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.860171][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.869733][ T232] wlan1: Trigger new scan to find an IBSS to join [ 889.922365][T28829] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.960724][T28829] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.022825][T28829] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 890.133776][T28829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 890.143969][T28829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 890.153945][T28829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 890.163865][T28829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 890.191165][T28829] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.198313][T28829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.205717][T28829] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.213022][T28829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.260404][T28829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.280129][T18716] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.290140][T18716] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.311929][T28829] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.323260][T18715] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.330386][T18715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.344378][ T232] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.351520][ T232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.503665][T28829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.548805][T28829] veth0_vlan: entered promiscuous mode [ 890.560008][T28829] veth1_vlan: entered promiscuous mode [ 890.577545][ T5839] Bluetooth: hci5: command tx timeout [ 890.588604][T28829] veth0_macvtap: entered promiscuous mode [ 890.603769][T28829] veth1_macvtap: entered promiscuous mode [ 890.622064][T28829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.637904][T28829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.652528][ T232] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.663534][ T232] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.675185][ T232] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.685069][ T232] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.762610][ T8087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.780328][ T8087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.804358][ T6139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.812436][ T6139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.997407][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.107915][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.656654][ T5839] Bluetooth: hci5: command tx timeout [ 892.896484][T18715] wlan1: Trigger new scan to find an IBSS to join [ 893.246291][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.796435][ T8087] wlan1: Creating new IBSS network, BSSID 82:16:5c:f3:d6:5d [ 894.356550][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.736553][ T5839] Bluetooth: hci5: command tx timeout [ 895.458360][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.566586][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.817051][ T5839] Bluetooth: hci5: command tx timeout [ 897.619551][ T5178] block nbd1: Possible stuck request ffff888085d70000: control (read@0,1024B). Runtime 150 seconds [ 897.630422][ T5178] block nbd1: Possible stuck request ffff888085d70200: control (read@1024,1024B). Runtime 150 seconds [ 897.641640][ T5178] block nbd1: Possible stuck request ffff888085d70400: control (read@2048,1024B). Runtime 150 seconds [ 897.653601][ T5178] block nbd1: Possible stuck request ffff888085d70600: control (read@3072,1024B). Runtime 150 seconds [ 897.686608][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.786581][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.896308][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.819893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.016661][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.126385][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.227145][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.346607][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.446542][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.556341][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.666551][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.776570][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.876524][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.976842][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.076512][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.186538][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.286668][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.386267][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.496936][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.606555][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.726541][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.826502][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.927317][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.026387][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.136678][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.246601][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.346569][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.418230][T18715] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 926.446583][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.546280][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.706125][ T5178] block nbd1: Possible stuck request ffff888085d70000: control (read@0,1024B). Runtime 180 seconds [ 927.717180][ T5178] block nbd1: Possible stuck request ffff888085d70200: control (read@1024,1024B). Runtime 180 seconds [ 927.728282][ T5178] block nbd1: Possible stuck request ffff888085d70400: control (read@2048,1024B). Runtime 180 seconds [ 927.739436][ T5178] block nbd1: Possible stuck request ffff888085d70600: control (read@3072,1024B). Runtime 180 seconds [ 927.837578][ T5194] udevd[5194]: worker [22498] /devices/virtual/block/nbd1 timeout; kill it [ 927.847883][ T5194] udevd[5194]: seq 31786 '/devices/virtual/block/nbd1' killed [ 928.647046][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.766348][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.876781][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.987232][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.096568][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.216656][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.316628][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.426468][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.526599][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.626618][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.736563][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.846268][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.956544][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.066596][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.166283][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.266556][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.376540][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.486308][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.596834][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.698354][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.816848][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.916899][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.026785][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.126503][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.246575][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.346568][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.446753][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.777800][ T5178] block nbd1: Possible stuck request ffff888085d70000: control (read@0,1024B). Runtime 210 seconds [ 957.788614][ T5178] block nbd1: Possible stuck request ffff888085d70200: control (read@1024,1024B). Runtime 210 seconds [ 957.800494][ T5178] block nbd1: Possible stuck request ffff888085d70400: control (read@2048,1024B). Runtime 210 seconds [ 957.812215][ T5178] block nbd1: Possible stuck request ffff888085d70600: control (read@3072,1024B). Runtime 210 seconds [ 958.417205][ T6133] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 958.546646][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.646401][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.747708][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.867209][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.977217][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.077188][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.176432][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.276699][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.378719][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.486565][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.586557][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.686397][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.796590][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.897170][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.996670][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.098393][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.206788][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.336356][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.436599][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.546622][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.646655][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.766744][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.789813][T28911] __nla_validate_parse: 9 callbacks suppressed [ 982.789833][T28911] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6127'. [ 982.881332][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.117384][T28947] team0: entered promiscuous mode [ 983.143620][T28947] team_slave_0: entered promiscuous mode [ 983.170364][T28947] team_slave_1: entered promiscuous mode [ 983.179580][T28947] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 983.188641][T28947] team0: Device macvlan2 is already an upper device of the team interface [ 983.198972][T28947] team0: left promiscuous mode [ 983.206138][T28947] team_slave_0: left promiscuous mode [ 983.225280][T28947] team_slave_1: left promiscuous mode [ 983.503533][T28965] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6143'. [ 983.525370][T28965] netlink: 'syz.3.6143': attribute type 2 has an invalid length. [ 983.534158][T28965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6143'. [ 983.587122][T28969] netlink: 'syz.0.6144': attribute type 1 has an invalid length. [ 983.661193][T28973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6146'. [ 983.679608][T28969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6144'. [ 984.027015][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.281435][T28999] netlink: 'syz.0.6154': attribute type 3 has an invalid length. [ 984.295508][T28999] batadv_slave_0: entered promiscuous mode [ 984.317336][T28999] netlink: 'syz.0.6154': attribute type 4 has an invalid length. [ 984.434900][ T9332] lo speed is unknown, defaulting to 1000 [ 984.447320][ T9332] syz2: Port: 1 Link DOWN [ 984.457131][T28997] batadv_slave_0: left promiscuous mode [ 984.611011][T29031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6164'. [ 984.676556][T29031] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6164'. [ 984.724019][T29038] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6168'. [ 984.783005][T29038] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.802976][T29038] bridge_slave_0 (unregistering): left allmulticast mode [ 984.825124][T29038] bridge_slave_0 (unregistering): left promiscuous mode [ 984.833096][T29038] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.950647][T29054] syzkaller0: entered promiscuous mode [ 984.956915][T29054] syzkaller0: entered allmulticast mode [ 985.082798][T29062] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.6175'. [ 985.137572][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.269027][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.155319][T29081] lo speed is unknown, defaulting to 1000 [ 987.297629][T29088] netlink: 'syz.2.6182': attribute type 7 has an invalid length. [ 987.316581][T29088] netlink: 'syz.2.6182': attribute type 5 has an invalid length. [ 987.335564][T29088] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6182'. [ 987.352828][T29092] netlink: 'syz.1.6183': attribute type 1 has an invalid length. [ 987.377500][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.553786][T29081] lo speed is unknown, defaulting to 1000 [ 987.774065][T29115] tipc: Started in network mode [ 987.779764][T29115] tipc: Node identity 6ad8c410848b, cluster identity 4711 [ 987.788387][T29115] tipc: Enabled bearer , priority 0 [ 987.797504][T29115] syzkaller0: entered promiscuous mode [ 987.803022][T29115] syzkaller0: entered allmulticast mode [ 987.844256][T29115] tipc: Resetting bearer [ 987.864784][ T5178] block nbd1: Possible stuck request ffff888085d70000: control (read@0,1024B). Runtime 240 seconds [ 987.876966][ T5178] block nbd1: Possible stuck request ffff888085d70200: control (read@1024,1024B). Runtime 240 seconds [ 987.888936][ T5178] block nbd1: Possible stuck request ffff888085d70400: control (read@2048,1024B). Runtime 240 seconds [ 987.901500][ T5178] block nbd1: Possible stuck request ffff888085d70600: control (read@3072,1024B). Runtime 240 seconds [ 987.981353][T29119] __nla_validate_parse: 2 callbacks suppressed [ 987.981367][T29119] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6191'. [ 988.224377][T18715] bond10 (unregistering): (slave geneve5): Releasing active interface [ 988.378455][T18715] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 988.396022][T18715] bridge2 (unregistering): left promiscuous mode [ 988.512130][T18715] team0: Port device bridge4 removed [ 988.517800][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.571909][T18715] bond5 (unregistering): (slave bridge5): Releasing active interface [ 988.580923][T18715] bond5 (unregistering): (slave bridge5): the permanent HWaddr of slave - 96:55:31:4a:31:7b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 988.609994][T18715] bond5 (unregistering): (slave bridge6): Releasing active interface [ 988.870179][T18715] bond0 (unregistering): Released all slaves [ 988.880149][T18715] bond1 (unregistering): Released all slaves [ 988.903659][T18715] bond2 (unregistering): Released all slaves [ 988.922780][T18715] bond3 (unregistering): Released all slaves [ 988.935728][T18715] bond4 (unregistering): Released all slaves [ 988.949765][T18715] bond5 (unregistering): Released all slaves [ 988.964342][T18715] bond6 (unregistering): (slave veth3): Releasing active interface [ 988.973622][T18715] bond6 (unregistering): Released all slaves [ 988.994916][T18715] bond7 (unregistering): Released all slaves [ 989.008317][T18715] bond8 (unregistering): Released all slaves [ 989.024967][T18715] team0: Port device bond9 removed [ 989.036935][T18715] bond9 (unregistering): Released all slaves [ 989.050406][T18715] bond10 (unregistering): Released all slaves [ 989.063347][T18715] bond11 (unregistering): Released all slaves [ 989.092977][T29114] tipc: Resetting bearer [ 989.200769][T29114] tipc: Disabling bearer [ 989.253333][ T5950] tipc: Node number set to 3998467088 [ 989.260281][T29115] lo speed is unknown, defaulting to 1000 [ 989.290009][T18715] !: left promiscuous mode [ 989.356942][T18715] tipc: Left network mode [ 989.632197][T29147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 989.641442][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.658062][T29149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6198'. [ 989.851171][T29149] sit1: entered allmulticast mode [ 989.907677][T29154] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6201'. [ 989.927732][T29115] lo speed is unknown, defaulting to 1000 [ 989.930771][T29136] lo speed is unknown, defaulting to 1000 [ 990.418719][T18716] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 990.451527][T29176] xt_hashlimit: size too large, truncated to 1048576 [ 990.625041][T29183] netlink: 'syz.4.6211': attribute type 29 has an invalid length. [ 990.644396][T29182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6210'. [ 990.697999][T29184] netlink: 'syz.4.6211': attribute type 29 has an invalid length. [ 990.708122][T29183] netlink: 500 bytes leftover after parsing attributes in process `syz.4.6211'. [ 990.759610][T29183] netlink: 292 bytes leftover after parsing attributes in process `syz.4.6211'. [ 990.769946][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.799369][T29183] ip6tnl1: entered allmulticast mode [ 990.830898][T29183] openvswitch: netlink: IP tunnel dst address not specified [ 991.456172][T29136] lo speed is unknown, defaulting to 1000 [ 991.597871][T29206] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6218'. [ 991.906662][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.968098][T29220] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6224'. [ 991.990260][T29220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6224'. [ 992.068757][T29218] syzkaller1: entered promiscuous mode [ 992.078670][T29218] syzkaller1: entered allmulticast mode [ 992.236651][T11257] lo speed is unknown, defaulting to 1000 [ 992.252359][T29235] netlink: 'syz.4.6229': attribute type 3 has an invalid length. [ 992.289154][T29235] netlink: 'syz.4.6229': attribute type 3 has an invalid length. [ 992.303775][T29235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6229'. [ 992.366386][T29238] netlink: 'syz.2.6230': attribute type 6 has an invalid length. [ 992.490565][T29243] tipc: Started in network mode [ 992.513044][T29243] tipc: Node identity 5e9c4bb47c87, cluster identity 4711 [ 992.526536][T29243] tipc: Enabled bearer , priority 0 [ 992.594925][T29244] syzkaller0: entered promiscuous mode [ 992.602346][T29244] syzkaller0: entered allmulticast mode [ 992.709243][T29243] tipc: Resetting bearer [ 992.765564][T29242] tipc: Resetting bearer [ 992.818266][T29242] tipc: Disabling bearer [ 992.923265][T29263] veth1_to_team: entered promiscuous mode [ 992.943562][T29263] netlink: 'syz.2.6236': attribute type 30 has an invalid length. [ 993.037351][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.106976][T18715] batman_adv: batadv0: Removing interface: macsec2 [ 993.712337][T29296] __nla_validate_parse: 5 callbacks suppressed [ 993.712357][T29296] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6247'. [ 993.793499][T18715] hsr_slave_0: left promiscuous mode [ 993.812373][T18715] hsr_slave_1: left promiscuous mode [ 993.877742][T18715] pim6reg99999999 (unregistering): left allmulticast mode [ 993.902720][T28566] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 993.913995][T28566] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 993.924208][T28566] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 993.933507][T28566] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 993.945080][T28566] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 994.178210][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.257482][T18715] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 994.458916][T29314] tipc: Trying to set illegal importance in message [ 994.571999][T29296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6247'. [ 994.587586][T29296] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.751570][T29322] bridge1: entered allmulticast mode [ 994.852995][T29303] lo speed is unknown, defaulting to 1000 [ 994.998881][T18715] IPVS: stop unused estimator thread 0... [ 995.037045][ T9332] IPVS: starting estimator thread 0... [ 995.070497][T28566] Bluetooth: hci1: command 0x0406 tx timeout [ 995.185031][T29337] IPVS: using max 30 ests per chain, 72000 per kthread [ 995.233636][T29329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.277427][T29340] 8021q: VLANs not supported on nlmon0 [ 995.283138][T29303] lo speed is unknown, defaulting to 1000 [ 995.339552][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.400449][T29329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.466145][T29352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6263'. [ 995.476552][T29351] syzkaller1: entered promiscuous mode [ 995.482127][T29351] syzkaller1: entered allmulticast mode [ 995.553800][T29329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.669180][T29329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.750751][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6266'. [ 995.761871][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6266'. [ 995.791053][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6266'. [ 995.830993][T29365] netlink: 'syz.0.6266': attribute type 3 has an invalid length. [ 995.846224][T29365] netlink: 'syz.0.6266': attribute type 1 has an invalid length. [ 995.896562][T29365] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6266'. [ 995.938455][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6266'. [ 995.998091][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6266'. [ 996.035769][ T5839] Bluetooth: hci3: command tx timeout [ 996.039924][T29372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.090033][T29303] chnl_net:caif_netlink_parms(): no params data found [ 996.167931][ T6133] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.188721][ T6133] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 996.239515][ T6133] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.250051][T29377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6271'. [ 996.250525][ T6133] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 996.308772][ T6133] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.325552][T29374] lo speed is unknown, defaulting to 1000 [ 996.399107][T18714] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.492110][T18714] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 996.507174][T18716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.517137][T18714] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 996.584646][T18715] hsr0: left allmulticast mode [ 996.591534][T18715] hsr_slave_0: left allmulticast mode [ 996.608193][T18715] bridge0: port 1(hsr0) entered disabled state [ 996.644588][T18715] pimreg3: left allmulticast mode [ 996.860907][T18715] bond8 (unregistering): (slave erspan2): Releasing active interface [ 996.869210][T18715] erspan2 (unregistering): left promiscuous mode [ 996.903584][T18715] bond9 (unregistering): (slave gretap1): Releasing backup interface [ 996.951230][T18715] tipc: Disabling bearer [ 997.074604][T18715] bond2 (unregistering): (slave bridge2): Releasing active interface [ 997.460862][T18715] bond0 (unregistering): left promiscuous mode [ 997.468725][T18715] bond0 (unregistering): Released all slaves [ 997.483392][T18715] bond1 (unregistering): Released all slaves [ 997.500896][T18715] bond2 (unregistering): Released all slaves [ 997.519746][T18715] bond3 (unregistering): Released all slaves [ 997.552124][T18715] bond4 (unregistering): left allmulticast mode [ 997.558687][T18715] bond4 (unregistering): left promiscuous mode [ 997.569161][T18715] team0: Port device macvlan2 removed [ 997.586145][T18715] bond4 (unregistering): Released all slaves [ 997.603886][T18715] bond5 (unregistering): Released all slaves [ 997.610240][ T232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.659666][T18715] bond6 (unregistering): Released all slaves [ 997.679403][T18715] bond7 (unregistering): Released all slaves [ 997.713312][T18715] bond8 (unregistering): Released all slaves [ 997.735542][T18715] bond9 (unregistering): Released all slaves [ 997.763550][T18715] bond10 (unregistering): (slave veth3): Releasing active interface [ 997.775260][T18715] bond10 (unregistering): Released all slaves [ 997.798736][T18715] bond11 (unregistering): Released all slaves [ 997.817707][T18715] bond12 (unregistering): Released all slaves [ 997.865913][T29303] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.873172][T29303] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.892486][T29303] bridge_slave_0: entered allmulticast mode [ 997.918724][T29303] bridge_slave_0: entered promiscuous mode [ 997.940510][T29303] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.947875][T29303] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.955171][T29303] bridge_slave_1: entered allmulticast mode [ 997.973714][T29303] bridge_slave_1: entered promiscuous mode [ 998.008348][T29374] lo speed is unknown, defaulting to 1000 [ 998.008377][T18715] tipc: Disabling bearer [ 998.046560][T18715] tipc: Left network mode [ 998.066868][T29393] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 998.100879][ T5839] Bluetooth: hci3: command tx timeout [ 998.190503][T29303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.204427][T29303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.233230][T29388] lo speed is unknown, defaulting to 1000 [ 998.418972][ T9325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.505446][T29406] netlink: 'syz.2.6279': attribute type 9 has an invalid length. [ 998.584847][T29303] team0: Port device team_slave_0 added [ 998.620038][T29303] team0: Port device team_slave_1 added [ 998.722206][T29412] openvswitch: netlink: IPv6 tunnel dst address is zero [ 998.739742][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.852038][T29303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.879414][T29303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.928532][ T9332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.955718][T29303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.010617][T29388] lo speed is unknown, defaulting to 1000 [ 999.017083][T29303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.054011][T29303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 999.076843][T29425] __nla_validate_parse: 6 callbacks suppressed [ 999.076863][T29425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6284'. [ 999.083843][T29303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.359206][T29303] hsr_slave_0: entered promiscuous mode [ 999.367383][T29303] hsr_slave_1: entered promiscuous mode [ 999.379412][T29303] debugfs: 'hsr0' already exists in 'hsr' [ 999.385453][T29303] Cannot create hsr debugfs directory [ 999.444192][T29431] syzkaller1: entered promiscuous mode [ 999.457634][T29431] syzkaller1: entered allmulticast mode [ 999.890061][T18714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.940571][T11256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.168342][T18715] batadv0: left promiscuous mode [ 1000.176201][ T5839] Bluetooth: hci3: command tx timeout [ 1000.185298][T18715] hsr_slave_0: left promiscuous mode [ 1000.467692][T18715] team0 (unregistering): Port device dummy0 removed [ 1000.764865][T29303] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1000.944015][T29484] lo speed is unknown, defaulting to 1000 [ 1001.123072][T29303] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1001.254594][T29506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6294'. [ 1001.364498][T29303] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1001.459909][ T9325] net_ratelimit: 3 callbacks suppressed [ 1001.459927][ T9325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.535765][T29484] lo speed is unknown, defaulting to 1000 [ 1001.543785][T18715] IPVS: stop unused estimator thread 0... [ 1001.658563][T29303] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1001.685887][T29533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6297'. [ 1001.726920][T29527] macvtap0: entered promiscuous mode [ 1001.733169][T29537] xt_hashlimit: size too large, truncated to 1048576 [ 1001.748890][T29533] veth0_macvtap: left promiscuous mode [ 1001.819341][T29533] macvtap0 (unregistering): left promiscuous mode [ 1001.994087][T29540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6299'. [ 1002.019434][T11256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.051435][T29541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6299'. [ 1002.136730][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.165725][T29540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6299'. [ 1002.256131][ T5839] Bluetooth: hci3: command tx timeout [ 1002.332103][T29555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6301'. [ 1002.368008][T29551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6302'. [ 1002.410400][T29303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1002.457679][T29303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1002.477153][T29562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1002.508500][T29303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1002.690944][T29303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1002.701309][T29548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6301'. [ 1002.761325][T29562] batadv0: entered promiscuous mode [ 1002.769582][T29562] vlan2: entered promiscuous mode [ 1002.984765][T29303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.058727][T11256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.088732][T29303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.122300][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.129525][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.180889][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.188212][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.277130][T18715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.286654][ T9325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.319869][T29591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.338182][T29591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.367166][T29591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.377086][T29589] nbd: socks must be embedded in a SOCK_ITEM attr [ 1003.384317][T29589] block nbd10: shutting down sockets [ 1003.466966][T29591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6311'. [ 1003.571245][T29595] bond2: option lacp_active: invalid value (8) [ 1003.600572][T29595] bond2 (unregistering): Released all slaves [ 1003.747413][T29591] team0 (unregistering): Port device team_slave_0 removed [ 1003.782870][T29591] team0 (unregistering): Port device team_slave_1 removed [ 1003.893993][T29607] tipc: Enabling of bearer rejected, failed to enable media [ 1004.424801][T29303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.571200][T29640] netlink: 'syz.2.6323': attribute type 1 has an invalid length. [ 1004.617886][T29640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1004.761511][T29303] veth0_vlan: entered promiscuous mode [ 1004.829974][T29303] veth1_vlan: entered promiscuous mode [ 1004.872649][T29640] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1004.921977][T29652] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1004.946944][T29652] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1005.105113][T29640] netlink: 'syz.2.6323': attribute type 6 has an invalid length. [ 1005.117562][T29665] team0: No ports can be present during mode change [ 1005.279429][T29303] veth0_macvtap: entered promiscuous mode [ 1005.299869][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 1005.307493][T29303] veth1_macvtap: entered promiscuous mode [ 1005.315122][T28566] [ 1005.317494][T28566] ====================================================== [ 1005.324518][T28566] WARNING: possible circular locking dependency detected [ 1005.331568][T28566] syzkaller #0 Not tainted [ 1005.335991][T28566] ------------------------------------------------------ [ 1005.343104][T28566] kworker/u9:0/28566 is trying to acquire lock: [ 1005.349438][T28566] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 1005.359974][T28566] [ 1005.359974][T28566] but task is already holding lock: [ 1005.367335][T28566] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 1005.377621][T28566] [ 1005.377621][T28566] which lock already depends on the new lock. [ 1005.377621][T28566] [ 1005.388011][T28566] [ 1005.388011][T28566] the existing dependency chain (in reverse order) is: [ 1005.397024][T28566] [ 1005.397024][T28566] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 1005.405102][T28566] down_write+0x96/0x200 [ 1005.409876][T28566] kernfs_add_one+0x41/0x5c0 [ 1005.414986][T28566] kernfs_create_dir_ns+0xde/0x130 [ 1005.420611][T28566] internal_create_group+0x425/0x1180 [ 1005.426504][T28566] cpuhp_invoke_callback+0x445/0x860 [ 1005.432312][T28566] cpuhp_issue_call+0x430/0x7a0 [ 1005.437681][T28566] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 1005.444272][T28566] __cpuhp_setup_state+0x3f/0x60 [ 1005.449741][T28566] do_one_initcall+0x250/0x8d0 [ 1005.455025][T28566] do_initcall_level+0x104/0x190 [ 1005.460588][T28566] do_initcalls+0x59/0xa0 [ 1005.465525][T28566] kernel_init_freeable+0x2a6/0x3e0 [ 1005.471229][T28566] kernel_init+0x1d/0x1d0 [ 1005.476065][T28566] ret_from_fork+0x51e/0xb90 [ 1005.481174][T28566] ret_from_fork_asm+0x1a/0x30 [ 1005.486450][T28566] [ 1005.486450][T28566] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1005.494358][T28566] [ 1005.494358][T28566] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1005.502273][T28566] cpus_read_lock+0x42/0x160 [ 1005.507398][T28566] static_key_slow_inc+0x12/0x30 [ 1005.512857][T28566] setup_udp_tunnel_sock+0x343/0x550 [ 1005.518785][T28566] l2tp_tunnel_register+0xda0/0x1460 [ 1005.524758][T28566] pppol2tp_connect+0x8b7/0x17c0 [ 1005.530221][T28566] __sys_connect+0x312/0x450 [ 1005.535387][T28566] __x64_sys_connect+0x7a/0x90 [ 1005.540723][T28566] do_syscall_64+0x14d/0xf80 [ 1005.545834][T28566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.552645][T28566] [ 1005.552645][T28566] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1005.560367][T28566] lock_sock_nested+0x41/0x100 [ 1005.565656][T28566] inet_shutdown+0x6a/0x390 [ 1005.570875][T28566] nbd_mark_nsock_dead+0x2e9/0x560 [ 1005.576522][T28566] sock_shutdown+0x15e/0x260 [ 1005.581643][T28566] nbd_clear_sock+0x24/0x170 [ 1005.586922][T28566] nbd_config_put+0x2dd/0x580 [ 1005.592120][T28566] nbd_genl_connect+0x19d5/0x1cf0 [ 1005.597661][T28566] genl_family_rcv_msg_doit+0x22a/0x330 [ 1005.603803][T28566] genl_rcv_msg+0x61c/0x7a0 [ 1005.608812][T28566] netlink_rcv_skb+0x232/0x4b0 [ 1005.614202][T28566] genl_rcv+0x28/0x40 [ 1005.618698][T28566] netlink_unicast+0x80f/0x9b0 [ 1005.624016][T28566] netlink_sendmsg+0x813/0xb40 [ 1005.629293][T28566] ____sys_sendmsg+0x972/0x9f0 [ 1005.634563][T28566] ___sys_sendmsg+0x2a5/0x360 [ 1005.639778][T28566] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1005.645221][T28566] do_syscall_64+0x14d/0xf80 [ 1005.650327][T28566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.656819][T28566] [ 1005.656819][T28566] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1005.664492][T28566] __mutex_lock+0x19f/0x1300 [ 1005.669601][T28566] nbd_queue_rq+0x37b/0x1100 [ 1005.674720][T28566] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1005.680955][T28566] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1005.687898][T28566] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1005.694397][T28566] blk_mq_run_hw_queue+0x348/0x4f0 [ 1005.700029][T28566] blk_mq_dispatch_list+0xd16/0xe10 [ 1005.705738][T28566] blk_mq_flush_plug_list+0x48d/0x570 [ 1005.711616][T28566] __blk_flush_plug+0x3ed/0x4d0 [ 1005.716975][T28566] __submit_bio+0x28d/0x580 [ 1005.721991][T28566] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1005.728136][T28566] block_read_full_folio+0x599/0x830 [ 1005.733924][T28566] filemap_read_folio+0x137/0x3b0 [ 1005.739464][T28566] do_read_cache_folio+0x358/0x590 [ 1005.745078][T28566] read_part_sector+0xb6/0x2b0 [ 1005.750357][T28566] adfspart_check_ICS+0xa5/0xa40 [ 1005.755803][T28566] bdev_disk_changed+0x7ba/0x1550 [ 1005.761328][T28566] blkdev_get_whole+0x380/0x510 [ 1005.766770][T28566] bdev_open+0x31e/0xd30 [ 1005.771524][T28566] blkdev_open+0x470/0x610 [ 1005.776451][T28566] do_dentry_open+0x785/0x14e0 [ 1005.781734][T28566] vfs_open+0x3b/0x340 [ 1005.786313][T28566] path_openat+0x2e08/0x3860 [ 1005.791416][T28566] do_file_open+0x23e/0x4a0 [ 1005.796427][T28566] do_sys_openat2+0x113/0x200 [ 1005.801618][T28566] __x64_sys_openat+0x138/0x170 [ 1005.806988][T28566] do_syscall_64+0x14d/0xf80 [ 1005.812089][T28566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.818578][T28566] [ 1005.818578][T28566] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1005.825781][T28566] __mutex_lock+0x19f/0x1300 [ 1005.830894][T28566] nbd_queue_rq+0xc6/0x1100 [ 1005.836096][T28566] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1005.842260][T28566] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1005.849118][T28566] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1005.855635][T28566] blk_mq_run_hw_queue+0x348/0x4f0 [ 1005.861366][T28566] blk_mq_dispatch_list+0xd16/0xe10 [ 1005.867104][T28566] blk_mq_flush_plug_list+0x48d/0x570 [ 1005.873335][T28566] __blk_flush_plug+0x3ed/0x4d0 [ 1005.878694][T28566] __submit_bio+0x28d/0x580 [ 1005.883708][T28566] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1005.889848][T28566] block_read_full_folio+0x599/0x830 [ 1005.895645][T28566] filemap_read_folio+0x137/0x3b0 [ 1005.901178][T28566] do_read_cache_folio+0x358/0x590 [ 1005.906890][T28566] read_part_sector+0xb6/0x2b0 [ 1005.912169][T28566] adfspart_check_ICS+0xa5/0xa40 [ 1005.917626][T28566] bdev_disk_changed+0x7ba/0x1550 [ 1005.923177][T28566] blkdev_get_whole+0x380/0x510 [ 1005.928535][T28566] bdev_open+0x31e/0xd30 [ 1005.933285][T28566] blkdev_open+0x470/0x610 [ 1005.938210][T28566] do_dentry_open+0x785/0x14e0 [ 1005.943484][T28566] vfs_open+0x3b/0x340 [ 1005.948062][T28566] path_openat+0x2e08/0x3860 [ 1005.953256][T28566] do_file_open+0x23e/0x4a0 [ 1005.958722][T28566] do_sys_openat2+0x113/0x200 [ 1005.964033][T28566] __x64_sys_openat+0x138/0x170 [ 1005.969416][T28566] do_syscall_64+0x14d/0xf80 [ 1005.974551][T28566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.981040][T28566] [ 1005.981040][T28566] -> #4 (set->srcu){.+.+}-{0:0}: [ 1005.988324][T28566] __synchronize_srcu+0xca/0x3e0 [ 1005.993773][T28566] elevator_switch+0x1e8/0x7a0 [ 1005.999047][T28566] elevator_change+0x2cc/0x450 [ 1006.004317][T28566] elevator_set_default+0x36c/0x430 [ 1006.010021][T28566] blk_register_queue+0x366/0x430 [ 1006.015554][T28566] __add_disk+0x677/0xd50 [ 1006.020393][T28566] add_disk_fwnode+0xfb/0x480 [ 1006.025585][T28566] nbd_dev_add+0x72c/0xb50 [ 1006.030515][T28566] nbd_init+0x168/0x1f0 [ 1006.035216][T28566] do_one_initcall+0x250/0x8d0 [ 1006.040489][T28566] do_initcall_level+0x104/0x190 [ 1006.045972][T28566] do_initcalls+0x59/0xa0 [ 1006.050809][T28566] kernel_init_freeable+0x2a6/0x3e0 [ 1006.056514][T28566] kernel_init+0x1d/0x1d0 [ 1006.061360][T28566] ret_from_fork+0x51e/0xb90 [ 1006.066458][T28566] ret_from_fork_asm+0x1a/0x30 [ 1006.071820][T28566] [ 1006.071820][T28566] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1006.079624][T28566] __mutex_lock+0x19f/0x1300 [ 1006.084817][T28566] elevator_change+0x1b3/0x450 [ 1006.090085][T28566] elevator_set_none+0xb5/0x140 [ 1006.095442][T28566] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1006.101756][T28566] nbd_start_device+0x17f/0xb10 [ 1006.107122][T28566] nbd_genl_connect+0x165b/0x1cf0 [ 1006.112665][T28566] genl_family_rcv_msg_doit+0x22a/0x330 [ 1006.118719][T28566] genl_rcv_msg+0x61c/0x7a0 [ 1006.123767][T28566] netlink_rcv_skb+0x232/0x4b0 [ 1006.129042][T28566] genl_rcv+0x28/0x40 [ 1006.133532][T28566] netlink_unicast+0x80f/0x9b0 [ 1006.138802][T28566] netlink_sendmsg+0x813/0xb40 [ 1006.144072][T28566] ____sys_sendmsg+0x972/0x9f0 [ 1006.149363][T28566] ___sys_sendmsg+0x2a5/0x360 [ 1006.154635][T28566] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1006.160077][T28566] do_syscall_64+0x14d/0xf80 [ 1006.165183][T28566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.171580][T28566] [ 1006.171580][T28566] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1006.180348][T28566] blk_alloc_queue+0x546/0x680 [ 1006.185632][T28566] __blk_mq_alloc_disk+0x197/0x390 [ 1006.191336][T28566] nbd_dev_add+0x499/0xb50 [ 1006.196267][T28566] nbd_init+0x168/0x1f0 [ 1006.200941][T28566] do_one_initcall+0x250/0x8d0 [ 1006.206218][T28566] do_initcall_level+0x104/0x190 [ 1006.211670][T28566] do_initcalls+0x59/0xa0 [ 1006.216523][T28566] kernel_init_freeable+0x2a6/0x3e0 [ 1006.222228][T28566] kernel_init+0x1d/0x1d0 [ 1006.227077][T28566] ret_from_fork+0x51e/0xb90 [ 1006.232176][T28566] ret_from_fork_asm+0x1a/0x30 [ 1006.237547][T28566] [ 1006.237547][T28566] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1006.244755][T28566] fs_reclaim_acquire+0x71/0x100 [ 1006.250227][T28566] kmem_cache_alloc_noprof+0x40/0x650 [ 1006.256295][T28566] __kernfs_iattrs+0xdf/0x340 [ 1006.261666][T28566] kernfs_iop_setattr+0xea/0x3f0 [ 1006.267123][T28566] notify_change+0xc1a/0xf40 [ 1006.272220][T28566] do_truncate+0x1c2/0x250 [ 1006.277200][T28566] path_openat+0x2f89/0x3860 [ 1006.282310][T28566] do_file_open+0x23e/0x4a0 [ 1006.287326][T28566] do_sys_openat2+0x113/0x200 [ 1006.292608][T28566] __x64_sys_openat+0x138/0x170 [ 1006.298617][T28566] do_syscall_64+0x14d/0xf80 [ 1006.303722][T28566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.310121][T28566] [ 1006.310121][T28566] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1006.318707][T28566] __lock_acquire+0x15a5/0x2cf0 [ 1006.324069][T28566] lock_acquire+0xf0/0x2e0 [ 1006.328992][T28566] down_write+0x96/0x200 [ 1006.334589][T28566] kernfs_unlink_sibling+0x71/0x180 [ 1006.340401][T28566] __kernfs_remove+0x3e7/0x660 [ 1006.345679][T28566] kernfs_remove_by_name_ns+0xaf/0x130 [ 1006.351850][T28566] sysfs_unmerge_group+0xd4/0x140 [ 1006.357390][T28566] dpm_sysfs_remove+0x76/0xd0 [ 1006.362581][T28566] device_del+0x250/0x8f0 [ 1006.367423][T28566] device_unregister+0x21/0xf0 [ 1006.372704][T28566] hci_conn_del+0xc36/0x1230 [ 1006.377889][T28566] hci_abort_conn_sync+0xdd0/0x1190 [ 1006.383660][T28566] hci_cmd_sync_work+0x213/0x400 [ 1006.389160][T28566] process_scheduled_works+0xb02/0x1830 [ 1006.395309][T28566] worker_thread+0xa50/0xfc0 [ 1006.400437][T28566] kthread+0x388/0x470 [ 1006.405017][T28566] ret_from_fork+0x51e/0xb90 [ 1006.410116][T28566] ret_from_fork_asm+0x1a/0x30 [ 1006.415404][T28566] [ 1006.415404][T28566] other info that might help us debug this: [ 1006.415404][T28566] [ 1006.425648][T28566] Chain exists of: [ 1006.425648][T28566] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1006.425648][T28566] [ 1006.440250][T28566] Possible unsafe locking scenario: [ 1006.440250][T28566] [ 1006.447692][T28566] CPU0 CPU1 [ 1006.453134][T28566] ---- ---- [ 1006.458547][T28566] lock(&root->kernfs_rwsem); [ 1006.463318][T28566] lock(cpuhp_state_mutex); [ 1006.470424][T28566] lock(&root->kernfs_rwsem); [ 1006.477698][T28566] lock(&root->kernfs_iattr_rwsem); [ 1006.482975][T28566] [ 1006.482975][T28566] *** DEADLOCK *** [ 1006.482975][T28566] [ 1006.491102][T28566] 5 locks held by kworker/u9:0/28566: [ 1006.496555][T28566] #0: ffff888025286948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1006.507357][T28566] #1: ffffc900046bfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1006.519910][T28566] #2: ffff888032698ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1006.529747][T28566] #3: ffff8880326980c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1006.539848][T28566] #4: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 1006.550563][T28566] [ 1006.550563][T28566] stack backtrace: [ 1006.556828][T28566] CPU: 0 UID: 0 PID: 28566 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1006.556849][T28566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1006.556860][T28566] Workqueue: hci2 hci_cmd_sync_work [ 1006.556885][T28566] Call Trace: [ 1006.556894][T28566] [ 1006.556903][T28566] dump_stack_lvl+0xe8/0x150 [ 1006.556923][T28566] print_circular_bug+0x2e1/0x300 [ 1006.556946][T28566] check_noncircular+0x12e/0x150 [ 1006.556968][T28566] __lock_acquire+0x15a5/0x2cf0 [ 1006.556987][T28566] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.557008][T28566] lock_acquire+0xf0/0x2e0 [ 1006.557023][T28566] ? kernfs_unlink_sibling+0x71/0x180 [ 1006.557040][T28566] down_write+0x96/0x200 [ 1006.557054][T28566] ? kernfs_unlink_sibling+0x71/0x180 [ 1006.557067][T28566] ? __pfx_down_write+0x10/0x10 [ 1006.557080][T28566] ? kernfs_root+0x1c/0x230 [ 1006.557097][T28566] ? kernfs_root+0x1c/0x230 [ 1006.557113][T28566] ? kernfs_root+0x1c/0x230 [ 1006.557131][T28566] ? kernfs_root+0x1ea/0x230 [ 1006.557149][T28566] kernfs_unlink_sibling+0x71/0x180 [ 1006.557164][T28566] __kernfs_remove+0x3e7/0x660 [ 1006.557178][T28566] kernfs_remove_by_name_ns+0xaf/0x130 [ 1006.557192][T28566] sysfs_unmerge_group+0xd4/0x140 [ 1006.557212][T28566] dpm_sysfs_remove+0x76/0xd0 [ 1006.557230][T28566] device_del+0x250/0x8f0 [ 1006.557242][T28566] ? klist_iter_exit+0xc1/0x100 [ 1006.557332][T28566] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1006.557351][T28566] ? __pfx_device_del+0x10/0x10 [ 1006.557364][T28566] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1006.557381][T28566] device_unregister+0x21/0xf0 [ 1006.557401][T28566] hci_conn_del+0xc36/0x1230 [ 1006.557417][T28566] ? hci_abort_conn_sync+0xa7b/0x1190 [ 1006.557431][T28566] hci_abort_conn_sync+0xdd0/0x1190 [ 1006.557448][T28566] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1006.557463][T28566] ? abort_conn_sync+0x26/0x210 [ 1006.557488][T28566] ? abort_conn_sync+0x26/0x210 [ 1006.557503][T28566] ? abort_conn_sync+0x19c/0x210 [ 1006.557517][T28566] ? __pfx_abort_conn_sync+0x10/0x10 [ 1006.557534][T28566] hci_cmd_sync_work+0x213/0x400 [ 1006.557552][T28566] ? process_scheduled_works+0xa25/0x1830 [ 1006.557570][T28566] process_scheduled_works+0xb02/0x1830 [ 1006.557596][T28566] ? __pfx_process_scheduled_works+0x10/0x10 [ 1006.557614][T28566] ? assign_work+0x3d5/0x5e0 [ 1006.557631][T28566] worker_thread+0xa50/0xfc0 [ 1006.557657][T28566] kthread+0x388/0x470 [ 1006.557670][T28566] ? __pfx_worker_thread+0x10/0x10 [ 1006.557686][T28566] ? __pfx_kthread+0x10/0x10 [ 1006.557698][T28566] ret_from_fork+0x51e/0xb90 [ 1006.557716][T28566] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.557732][T28566] ? __switch_to+0xc7d/0x1450 [ 1006.557749][T28566] ? __pfx_kthread+0x10/0x10 [ 1006.557761][T28566] ret_from_fork_asm+0x1a/0x30 [ 1006.557785][T28566] [ 1006.830078][T29303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.852612][T29303] batman_adv: batadv0: Interface activated: batadv_slave_1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1006.894145][T11258] net_ratelimit: 11 callbacks suppressed [ 1006.894164][T11258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.119921][ T6133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.131184][ T6133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.140267][ T6133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.149933][ T6133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.159665][ T8087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.307357][T27982] ================================================================== [ 1007.315460][T27982] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300 [ 1007.322594][T27982] Read of size 8 at addr ffff88807e3b00a8 by task khidpd_04f55508/27982 [ 1007.331009][T27982] [ 1007.333349][T27982] CPU: 0 UID: 0 PID: 27982 Comm: khidpd_04f55508 Not tainted syzkaller #0 PREEMPT(full) [ 1007.333376][T27982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1007.333388][T27982] Call Trace: [ 1007.333396][T27982] [ 1007.333404][T27982] dump_stack_lvl+0xe8/0x150 [ 1007.333432][T27982] print_report+0xba/0x230 [ 1007.333453][T27982] ? __mutex_lock+0x812/0x1300 [ 1007.333477][T27982] kasan_report+0x117/0x150 [ 1007.333496][T27982] ? rcu_is_watching+0x15/0xb0 [ 1007.333519][T27982] ? __mutex_lock+0x812/0x1300 [ 1007.333546][T27982] __mutex_lock+0x812/0x1300 [ 1007.333570][T27982] ? __mutex_lock+0x5ac/0x1300 [ 1007.333596][T27982] ? l2cap_unregister_user+0x6a/0x1b0 [ 1007.333689][T27982] ? __pfx___mutex_lock+0x10/0x10 [ 1007.333716][T27982] ? rcu_is_watching+0x15/0xb0 [ 1007.333738][T27982] ? trace_irq_enable+0x3b/0x150 [ 1007.333763][T27982] l2cap_unregister_user+0x6a/0x1b0 [ 1007.333788][T27982] hidp_session_thread+0x3cb/0x440 [ 1007.333835][T27982] ? __pfx_hidp_session_thread+0x10/0x10 [ 1007.333851][T27982] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1007.333870][T27982] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1007.333885][T27982] ? __kthread_parkme+0x7a/0x1f0 [ 1007.333906][T27982] ? __kthread_parkme+0x19c/0x1f0 [ 1007.333928][T27982] kthread+0x388/0x470 [ 1007.333943][T27982] ? __pfx_hidp_session_thread+0x10/0x10 [ 1007.333956][T27982] ? __pfx_kthread+0x10/0x10 [ 1007.333971][T27982] ret_from_fork+0x51e/0xb90 [ 1007.333990][T27982] ? __pfx_ret_from_fork+0x10/0x10 [ 1007.334007][T27982] ? __switch_to+0xc7d/0x1450 [ 1007.334026][T27982] ? __pfx_kthread+0x10/0x10 [ 1007.334041][T27982] ret_from_fork_asm+0x1a/0x30 [ 1007.334071][T27982] [ 1007.334078][T27982] [ 1007.499093][T27982] The buggy address belongs to the physical page: [ 1007.505500][T27982] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7e3b0 [ 1007.515554][T27982] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1007.522709][T27982] raw: 00fff00000000000 ffffea0001f23608 ffff8880b8640c40 0000000000000000 [ 1007.531320][T27982] raw: ffff888000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1007.539886][T27982] page dumped because: kasan: bad access detected [ 1007.546323][T27982] page_owner tracks the page as freed [ 1007.551697][T27982] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 27422, tgid 27422 (syz-executor), ts 849904915404, free_ts 1007301233837 [ 1007.570020][T27982] post_alloc_hook+0x231/0x280 [ 1007.574791][T27982] get_page_from_freelist+0x24dc/0x2580 [ 1007.580378][T27982] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1007.586356][T27982] alloc_pages_mpol+0x232/0x4a0 [ 1007.591216][T27982] ___kmalloc_large_node+0x4e/0x150 [ 1007.596401][T27982] __kmalloc_large_node_noprof+0x18/0x90 [ 1007.602115][T27982] __kmalloc_noprof+0x3e8/0x760 [ 1007.606954][T27982] hci_alloc_dev_priv+0x28/0x2060 [ 1007.612038][T27982] vhci_create_device+0x120/0x650 [ 1007.617118][T27982] vhci_write+0x3ce/0x4a0 [ 1007.621440][T27982] vfs_write+0x61d/0xb90 [ 1007.625701][T27982] ksys_write+0x150/0x270 [ 1007.630012][T27982] do_syscall_64+0x14d/0xf80 [ 1007.634588][T27982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.640479][T27982] page last free pid 27422 tgid 27422 stack trace: [ 1007.646958][T27982] __free_frozen_pages+0xc2b/0xdb0 [ 1007.652315][T27982] bt_host_release+0x82/0x90 [ 1007.656892][T27982] device_release+0x9e/0x1d0 [ 1007.661584][T27982] kobject_put+0x228/0x560 [ 1007.665987][T27982] vhci_release+0x15a/0x1a0 [ 1007.670489][T27982] __fput+0x44f/0xa70 [ 1007.674473][T27982] task_work_run+0x1d9/0x270 [ 1007.679158][T27982] do_exit+0x70f/0x23c0 [ 1007.683327][T27982] do_group_exit+0x21b/0x2d0 [ 1007.688019][T27982] __x64_sys_exit_group+0x3f/0x40 [ 1007.693040][T27982] x64_sys_call+0x221a/0x2240 [ 1007.697711][T27982] do_syscall_64+0x14d/0xf80 [ 1007.702304][T27982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.708190][T27982] [ 1007.710520][T27982] Memory state around the buggy address: [ 1007.716145][T27982] ffff88807e3aff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1007.724393][T27982] ffff88807e3b0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1007.732538][T27982] >ffff88807e3b0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1007.740681][T27982] ^ [ 1007.746136][T27982] ffff88807e3b0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1007.754187][T27982] ffff88807e3b0180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1007.762404][T27982] ================================================================== [ 1007.771706][T27982] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1007.778937][T27982] CPU: 0 UID: 0 PID: 27982 Comm: khidpd_04f55508 Not tainted syzkaller #0 PREEMPT(full) [ 1007.788757][T27982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1007.798823][T27982] Call Trace: [ 1007.802117][T27982] [ 1007.805049][T27982] vpanic+0x56c/0xa60 [ 1007.809043][T27982] ? __pfx_vpanic+0x10/0x10 [ 1007.813570][T27982] ? rcu_is_watching+0x15/0xb0 [ 1007.818703][T27982] panic+0xc5/0xd0 [ 1007.822446][T27982] ? __pfx_panic+0x10/0x10 [ 1007.826888][T27982] ? __mutex_lock+0x812/0x1300 [ 1007.831788][T27982] ? __mutex_lock+0x812/0x1300 [ 1007.836567][T27982] check_panic_on_warn+0x89/0xb0 [ 1007.841498][T27982] ? __mutex_lock+0x812/0x1300 [ 1007.846284][T27982] end_report+0x73/0x180 [ 1007.850552][T27982] ? __mutex_lock+0x812/0x1300 [ 1007.855419][T27982] kasan_report+0x128/0x150 [ 1007.859934][T27982] ? rcu_is_watching+0x15/0xb0 [ 1007.864703][T27982] ? __mutex_lock+0x812/0x1300 [ 1007.869482][T27982] __mutex_lock+0x812/0x1300 [ 1007.874332][T27982] ? __mutex_lock+0x5ac/0x1300 [ 1007.879176][T27982] ? l2cap_unregister_user+0x6a/0x1b0 [ 1007.884545][T27982] ? __pfx___mutex_lock+0x10/0x10 [ 1007.889577][T27982] ? rcu_is_watching+0x15/0xb0 [ 1007.894333][T27982] ? trace_irq_enable+0x3b/0x150 [ 1007.899264][T27982] l2cap_unregister_user+0x6a/0x1b0 [ 1007.904458][T27982] hidp_session_thread+0x3cb/0x440 [ 1007.909557][T27982] ? __pfx_hidp_session_thread+0x10/0x10 [ 1007.915176][T27982] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1007.921419][T27982] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1007.927644][T27982] ? __kthread_parkme+0x7a/0x1f0 [ 1007.932569][T27982] ? __kthread_parkme+0x19c/0x1f0 [ 1007.937580][T27982] kthread+0x388/0x470 [ 1007.941637][T27982] ? __pfx_hidp_session_thread+0x10/0x10 [ 1007.947253][T27982] ? __pfx_kthread+0x10/0x10 [ 1007.951832][T27982] ret_from_fork+0x51e/0xb90 [ 1007.956414][T27982] ? __pfx_ret_from_fork+0x10/0x10 [ 1007.961517][T27982] ? __switch_to+0xc7d/0x1450 [ 1007.966275][T27982] ? __pfx_kthread+0x10/0x10 [ 1007.970856][T27982] ret_from_fork_asm+0x1a/0x30 [ 1007.975791][T27982] [ 1007.979044][T27982] Kernel Offset: disabled [ 1007.983350][T27982] Rebooting in 86400 seconds..