last executing test programs: 2.738836835s ago: executing program 1 (id=2361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000480)={0x0, 0xffffffffffffffa7, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="ab09f2b7c8d6bcab6049570022c3", @ANYRES16=r6, @ANYBLOB="0d03000000000000000013000000240009"], 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES16=r6, @ANYBLOB="100029bd7000fbdbdf2505000000980005800c0002800800020003000000080001006574680008000100657468003400028008000300ff7f0000080004000500000008000200faffffff08000200660e0000080004000002000008000200090000003c0002800800020009000000080004008002000008000300c0000000080002000100010008000200bbf100000800010015000000080003000400000008000100657468000c0002800800020008000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000002c0)=0x6d91, 0x4) sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000340)=@in6={0xa, 0x4ea3, 0x10081, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x18, 0x1, 0x51, 0x1}}], 0x18}, 0x2004c040) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@deltfilter={0x34, 0x2d, 0x2, 0x70bd2b, 0x8, {0x0, 0x0, 0x0, r3, {0xa, 0x1}, {0xa, 0x2}, {0x1c1ef0c71ea675e7, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0xb6e}]}, 0x34}, 0x1, 0x0, 0x0, 0x200488c0}, 0x40080) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) unshare(0xa020480) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r8, 0x0, 0x6, 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000006c0)={0x4800}, 0x10) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3000, 0x100000000000000d) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f80)={r11}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x7, 0x1c, &(0x7f0000001080)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000001180)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{0x1, 0xffffffffffffffff}, &(0x7f00000011c0), &(0x7f0000001200)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_lsm={0x1d, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000500000000000000da00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b74ec674a5df2f419a03000043d70b3a8500000083000000bf0900000000000055090100000000009500000000000000850000007d0000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000880)='syzkaller\x00', 0x3, 0x90, &(0x7f00000008c0)=""/144, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0x9, 0x4, 0xbd38}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r11, r12], &(0x7f00000012c0)=[{0x1, 0x1, 0x0, 0x4}, {0x3, 0x5, 0x8, 0x8}, {0x3, 0x5, 0x7, 0x3}, {0x2, 0x2}, {0x5, 0x2, 0x7, 0x2}], 0x10, 0x7}, 0x94) 2.552760346s ago: executing program 1 (id=2363): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x91}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x10000000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000b40), 0xffffffffffffffd2}, 0x48) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000e40)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x6}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400490c1}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000c80)={{r0, &(0x7f0000000180)='\x00', 0x40000, &(0x7f0000000280)={@align=0x6, {0x4, 0x3, 0x101, 0x2}}, 0x5, &(0x7f0000000b80), &(0x7f0000000bc0)=0x9}, {[0x200, 0x3, 0x7ff, 0x6]}, 0x4, 0x58, &(0x7f0000000c00)=""/88}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x38, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x735}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5c1}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xac40399f8ce21c78}, 0x24040051) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) tee(r5, r5, 0x100000001, 0x6) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bcb7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.337055843s ago: executing program 1 (id=2365): socket$netlink(0x10, 0x3, 0xc) (async) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x29}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}}, 0x20044080) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x29}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}}, 0x20044080) write(r3, &(0x7f0000000300)="000008004500001c12340000402fe5c8ac141401ac141402", 0x18) socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x409c884, &(0x7f0000001f00)={0xa, 0x4e20, 0x10, @mcast2, 0x1000000}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x50, 0x0, 0x0) 2.314771622s ago: executing program 2 (id=2366): r0 = socket(0x2, 0xa, 0x300) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000080)=""/2, &(0x7f00000000c0)=0x2) pipe(&(0x7f0000000780)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x80a, 0x9) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x248201, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$unix(0x1, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.310609221s ago: executing program 4 (id=2367): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@arena={0x21, 0x0, 0x0, 0xe, 0x400, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@arena={0x21, 0x0, 0x0, 0x6, 0x40000, r1, 0x2, '\x00', 0x0, r2, 0x2, 0x0, 0x2}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010000000000000000002d"], 0x20}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000003c0)={&(0x7f0000000400)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)='\'', 0x1}], 0x1}, 0x804) r11 = socket$can_j1939(0x1d, 0x2, 0x7) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r12, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x14, r13, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000009c0)={0x0, 0x29, &(0x7f0000000a00)={&(0x7f0000000a40)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r16 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r16, &(0x7f0000000540)={0x1d, r14, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg$sock(r16, &(0x7f0000000580)=[{{&(0x7f00000005c0)=@can={0x1d, r14, 0xc8}, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000680)="4f1cb6784f530a2f7116cb375a1f297869740e93c60a99dc2b28f7eb995c363f765b5ddcf5c9ee3d919c19619409681a8886aa9c5baea0162c303d9c7e0d076739b51286dec265914b44c50d466ca3c65c2350d60583c531fa9859d3a8f6f55c93a92fc7b7e354dec28456d479af0d88b47b0ab116cb31f746aa5023ad8ed607bbb7ff4305fc63e4ace3a0cc37d1207645cde4f729a37132d5ae94ce2cdce3ad5a4c7b16f53b94045d43e2a9dd3c66c9c01249d176e8d408dba772c0af466eedf615927797ab9c8b6f32e34208a28dcf65c9211d55bdb1cee9b23abe7d7e16d83f6a31e4b26cdae95ebf3a667397622b625105234da2ae60", 0xf8}, {0x0}], 0x3}}], 0x1, 0x40050) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0xf4, 0xa6, 0x24, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80, 0x10, 0x50, 0x2}}) getsockname$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xf42116f976eb5ab6}, 0x40000) 2.193037624s ago: executing program 2 (id=2368): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010600000000000000002700000008000200", @ANYRES32=r3, @ANYBLOB="05002b000100000005002e00f90000000500310002000014003000007d1af3d0c6bc0999090a0b0c0d0e0f00d782fd109ee138c3ecfba3f107fcc7ccf57d7686c87955aad8b8324e9270727d256567d82aefc56d768e593d04cb0ddb0ad6170f631895363b7652d1d45554e34a970ca8b72c531a2536ef64edcdd195e09d67dc6081d56c8fe90421f9d74d2ad4eacca92894099eee3aaf5273bdf632413d809147da56eac8cadd81e3f11985e59c501ccd5a6c49fd0e0e4a9f02b81dd912a57746417bfcbf6f1f5d768781330b62943073d024887d"], 0x48}}, 0x24000840) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x1010, r0, 0xffffd000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000711230000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x10, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 2.078736577s ago: executing program 1 (id=2369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000240)=0x7, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000280)=0x9, 0x4) (async) syz_emit_ethernet(0x3e, &(0x7f0000000800)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x0, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) (async) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/17, 0x11}, 0x2}], 0x1, 0x10102, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000580)="0232e6fefa8ce2d4c14866321c084bb58c3dd1666a19af3cf299188914a89370a50d9126b6ecb773704fb3e6430d12727a375df737de35a42869d1e92883480dcb474e0200000000", 0x48}, {&(0x7f0000000600)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa66d403a08c07bbbe72da665341d6592092455897fe84a54e94a", 0x36}], 0x2) write$tun(r7, &(0x7f00000008c0)=ANY=[@ANYBLOB="000000110080070032c508000700451d002800670000000690780a010100ac1414bb4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5110000790780006d2832cf7a66e76682f13e89f26c0f2202cfc8ac06de439d9322a7b579efc8c9c389b5ff1b4775f4b34b8628e3d28f0b1765d519a638ed8971a27af9b7b23b2d6cc0c1f0759cf7345f343625dcf9bbd5cfa0f6c626a1dde45728abdc791aa0e0e44f6fa06c47d7f01a17172c87a1ad2f0cd3a62cf5fbb2eaafd7d33784a6df5e41dfb"], 0x36) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz0\x00', 0x1ff) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x401c5820, &(0x7f0000000700)) (async) sendmsg$nl_route_sched(r5, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x1, 0xffe0}}, [@filter_kind_options=@f_flow={{0x7}, {0x4}}]}, 0x34}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x84}}, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008004500002012340000402f54970a0000010a0000023039"], 0x24) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x2}) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000010c0)=""/4096) (async) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002c80)={&(0x7f00000020c0)={0xbb8, 0x0, 0x5, 0x301, 0x0, 0x0, {0x5}, [{{0x254, 0x1, {{0x0, 0x7}, 0x40, 0x80, 0x8001, 0x7, 0x25, 'syz0\x00', "04a24f2870a01d08498a1bac9af59ff8b9751c0fd5a6f7b8cbc654924e990ad2", "83f1845e0c0720c999948189cfb7b3972bb01f8fadbe51dd5d6dda688a503d2c", [{0x1, 0x0, {0x0, 0x5}}, {0x8, 0xffff, {0x0, 0x9}}, {0x8a, 0x80, {0x3, 0x10001}}, {0x8, 0x3, {0x1, 0xfffffff7}}, {0xe28, 0xfff, {0x1, 0x1000}}, {0x1, 0x9, {0x1, 0x2}}, {0x80, 0x7, {0x2, 0x2}}, {0x3, 0x4, {0x2, 0x10}}, {0x5, 0x81, {0x2, 0x58}}, {0x7ff, 0xbd, {0x0, 0x5}}, {0x6, 0x6, {0x1, 0x9471}}, {0x6, 0x5, {0x2, 0x8}}, {0x800, 0x9, {0x0, 0xffff}}, {0x0, 0x7, {0x1, 0xffd}}, {0x3, 0x1, {0x1, 0x4}}, {0xeac, 0x4, {0x2, 0x6}}, {0x750, 0x8, {0x3, 0x8000}}, {0x6, 0x7fff, {0x0, 0x5}}, {0x5, 0x4, {0x1, 0x1}}, {0x4, 0x2, {0x3, 0x5}}, {0xe, 0x10, {0x1, 0x8}}, {0x23, 0xfff9, {0x2, 0x400}}, {0x9, 0x3, {0x1, 0xe7}}, {0x4, 0x2, {0x4, 0x40}}, {0x6, 0x5, {0x2, 0x3871}}, {0x1, 0x100, {0x3, 0xa0}}, {0x9, 0x4, {0x2, 0x1}}, {0x0, 0xe4d1, {0x0, 0x4}}, {0x6, 0x2, {0x2, 0x4}}, {0x5, 0x6, {0x3, 0x8}}, {0x45, 0x6, {0x3, 0xc}}, {0x95, 0x1, {0x1, 0x931}}, {0x6, 0x4, {0x3, 0x6b696de3}}, {0x100, 0x7, {0x0, 0x8000}}, {0x3, 0x5, {0x3, 0x200}}, {0x4, 0x48, {0x3, 0x8fd0}}, {0x7, 0x4, {0x3, 0x6}}, {0x6, 0x4, {0x3, 0x4}}, {0x7, 0x669, {0x1, 0x7d9}}, {0x5, 0x1c8f, {0x2, 0xfffffff7}}]}}}, {{0x254, 0x1, {{0x2}, 0xe3, 0x5, 0x8, 0xa1, 0x4, 'syz0\x00', "8b99193940999b32ee0b0ee0a07be3ecab60ee27a9ad26ab33dc33481693a84a", "6824e6671f77ad7be9b1d43c0c4a5897adc89f751b61db885a4d2edf78a31b02", [{0x4, 0xb, {0x1, 0x401}}, {0x0, 0x1ff}, {0x2, 0xc, {0x1, 0x6}}, {0x1507, 0x1, {0x0, 0x6}}, {0x41, 0x4, {0x2, 0x80000000}}, {0x8404, 0x5, {0x2, 0xff}}, {0x40, 0x2, {0x3, 0xf}}, {0xa5, 0x400, {0x2, 0x660}}, {0x8, 0x6, {0x1}}, {0xfff7, 0x7f, {0x1, 0x4}}, {0x2, 0xd, {0x3, 0xfffffffd}}, {0x7ff, 0x23c, {0x2, 0x7}}, {0x842, 0x8, {0x1, 0x7b62}}, {0x3, 0x8, {0x2, 0x401}}, {0x4, 0x8, {0x2, 0x200}}, {0x4, 0xff, {0x0, 0x1}}, {0xd375, 0x4, {0x3, 0x401}}, {0x7, 0xd, {0x3, 0x40}}, {0xde7, 0x3, {0x3, 0x5c2}}, {0x2f, 0x7fff, {0x1, 0xbe0}}, {0xfff7, 0x7f, {0x1, 0x8}}, {0x1, 0x8, {0x2, 0x1}}, {0x3, 0xa9a0, {0x2, 0x1}}, {0x4, 0x5, {0x3, 0x3}}, {0x1, 0x4, {0x1, 0x9}}, {0x3, 0x0, {0x0, 0x2}}, {0x2, 0x4, {0x2, 0x3}}, {0x3, 0x2, {0x3, 0xff}}, {0x8, 0x3ff, {0x0, 0x5}}, {0x5, 0x7fff, {0x1, 0x6}}, {0x6, 0xffe7, {0x1, 0x4}}, {0x5, 0x763c, {0x3, 0x5}}, {0x1, 0x6}, {0x40, 0xc, {0x7, 0x800}}, {0x4, 0x4, {0x1}}, {0x2, 0xfffe, {0x0, 0x3}}, {0x1ff, 0x2, {0x0, 0x7}}, {0x1, 0x1, {0x2, 0xfffffff8}}, {0xba5, 0x800, {0x3, 0xf}}, {0x1ff, 0x1, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x5, 0xa, 0x4, 0x8, 0x1, 'syz0\x00', "f1879aa009dc24af14f02b390228f9d5a89708fb5878c58f1b5eb807c908e46c", "c7eaba6d2cf4be492cd98c0b5a4ba41b90f10d40c80b46c600f56736f58ec263", [{0x8, 0x84, {0x3, 0x5}}, {0x101, 0x9}, {0x3, 0x5, {0x1, 0xd}}, {0x9, 0x8, {0x1, 0x3}}, {0x18, 0x8001, {0x3, 0x8}}, {0xcb7, 0x5, {0x0, 0x5}}, {0x8b, 0xfffb, {0x3, 0xb06}}, {0x7f, 0x11e, {0x3, 0x7ff}}, {0x212c, 0x1, {0x1, 0x9}}, {0x8000, 0x1, {0x1, 0xffffffff}}, {0xfffd, 0x2, {0x3, 0x4}}, {0x3, 0x5, {0x0, 0xfff}}, {0x1, 0xfff, {0x2, 0x80000000}}, {0x1, 0x5, {0x1, 0x7}}, {0x0, 0xfff2, {0x0, 0x100}}, {0x400, 0x7, {0x3, 0x3}}, {0x3, 0xfff, {0x2, 0x80000000}}, {0xfe01, 0xfffc, {0x3, 0x5}}, {0x7, 0x5, {0x1, 0xcb}}, {0x8, 0x4de1, {0x0, 0x5}}, {0x9b2, 0x75a, {0x3, 0x3ff}}, {0x0, 0x330, {0x0, 0x64}}, {0x6, 0xd, {0x2, 0x2}}, {0x7ff, 0x6, {0x2, 0xffffff37}}, {0xa, 0x3, {0x1, 0x6}}, {0xbd53, 0x0, {0x0, 0xc2}}, {0xc, 0x1, {0x2, 0x101}}, {0x3e0, 0xa8, {0x1, 0x7fff}}, {0x1, 0xfff0, {0x1, 0x3}}, {0x1, 0x80, {0x0, 0x3}}, {0x5, 0x2, {0x3, 0xcea}}, {0x5, 0x81, {0x1, 0x6}}, {0x8d, 0xffff, {0x0, 0x3}}, {0x5, 0xe5, {0x3, 0x5}}, {0x5, 0x5, {0x3, 0x100}}, {0x9, 0x7, {0x7, 0x2}}, {0x3e6b, 0x0, {0x2}}, {0x8, 0x3, {0x1, 0x7fffffff}}, {0x4, 0x8001, {0x3, 0x7fffffff}}, {0x8001, 0x6, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0xe, 0xfb, 0x0, 0x0, 0x10, 'syz0\x00', "a70f9079f5badbab7d39f5bbaa4128cce75c344e123f00b3f504a5530759c9f5", "9d1139468cf177f94d354251b090699f5879fc049305139160ca671499921e0a", [{0x101, 0x401, {0x3, 0xceb0}}, {0x6, 0x981, {0x1, 0x7}}, {0x5, 0x8, {0x2, 0x1}}, {0x9, 0x0, {0x2, 0x2}}, {0xd, 0x1bb, {0x2, 0x2}}, {0x8, 0x401, {0x0, 0x5}}, {0xc, 0x1, {0x2, 0x9}}, {0x4f, 0x69, {0x2, 0xffff}}, {0x7, 0xc, {0x0, 0x1d79}}, {0xfff, 0x6, {0x1, 0x7}}, {0x5, 0x6, {0x0, 0x7ff}}, {0xfffc, 0x3, {0x1}}, {0x2, 0x9, {0x2}}, {0x4, 0x6, {0x3, 0x79e9f44b}}, {0x4, 0x7, {0x1, 0x7d}}, {0x2, 0x8, {0x1, 0x8}}, {0x8, 0x4, {0x2, 0x4}}, {0x7fff, 0x8000, {0x1, 0x5}}, {0x1000, 0xa9e, {0x2, 0xdd0c}}, {0x9, 0x6, {0x0, 0x3}}, {0xbcfb, 0x8, {0x1, 0x5}}, {0xd, 0x7, {0x0, 0x5}}, {0x0, 0xfff, {0x0, 0x10}}, {0x3, 0x5, {0x0, 0x4}}, {0x5, 0x1ff, {0x3, 0x8}}, {0x4, 0x5, {0x0, 0x6}}, {0x5, 0x1ff, {0x3, 0x886}}, {0x9, 0xf, {0x3, 0x5}}, {0xfff2, 0x5, {0x0, 0x10001}}, {0x3, 0x80, {0x2, 0x5}}, {0x6, 0x3, {0x2, 0x2}}, {0xfff, 0x7, {0x2, 0x101}}, {0x1308, 0x3, {0x2, 0x23}}, {0x2, 0xff6e, {0x1, 0x6}}, {0x8, 0xfff, {0x1, 0x66}}, {0x3, 0x8, {0xbeb0a1dbb2d5774a, 0xfffffffc}}, {0x401, 0x1, {0x1, 0x4}}, {0x8a66, 0x3, {0x0, 0xa21}}, {0x0, 0x8, {0x1, 0x6}}, {0xae, 0x4, {0x0, 0xc5}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x10, 0x8, 0x40, 0xff0a, 0x1d, 'syz0\x00', "015e7d4d6ee70400000000000000ca0acf24ade1bd4c00", "44f021677edddf133f272b50f9f9d379c0bc033b1085878b8cd0c084a5294a0e", [{0x0, 0x99, {0x2, 0xb5f5}}, {0xffff, 0x7a4, {0x3, 0x3}}, {0x9, 0x9, {0x3, 0x9}}, {0x7, 0x800, {0x3, 0x911}}, {0xf, 0x5, {0x2}}, {0xe, 0xffff, {0x3, 0x3}}, {0x67b, 0x7, {0x3, 0x7fff}}, {0x89, 0x8, {0x3, 0xe}}, {0x94, 0x3, {0x2, 0x7ff}}, {0x4ab, 0xffff, {0x1, 0xfff}}, {0x2, 0xd, {0x1, 0x2}}, {0x7, 0x800, {0x2, 0x9}}, {0x9, 0x7f, {0x1}}, {0x3ff, 0x0, {0x2, 0x8}}, {0xd42, 0x9075, {0x0, 0x3}}, {0x401, 0x6, {0x3, 0x8}}, {0xffc0, 0x8, {0x0, 0x7ff}}, {0x2, 0xfffd, {0x1, 0x2de}}, {0x9, 0x6, {0x1, 0x9}}, {0x6, 0x100, {0x0, 0x8}}, {0xfffa, 0x3, {0x0, 0x9}}, {0x7, 0x0, {0x0, 0x7fffffff}}, {0x1, 0xb, {0x1, 0xd}}, {0xa, 0x7, {0x3, 0x6}}, {0x4, 0x7, {0x0, 0xe}}, {0x0, 0x4, {0x3, 0x5d12}}, {0x3, 0x7a, {0x0, 0x2}}, {0x8, 0xfff7, {0x1, 0xfffffffa}}, {0x1, 0x1, {0x2, 0x5}}, {0x0, 0x401, {0x0, 0x3}}, {0x2, 0x8, {0x1, 0x1}}, {0x7, 0x0, {0x3, 0x8}}, {0x5, 0x1, {0x2, 0x7fffffff}}, {0x4, 0xd, {0x3, 0x1000}}, {0x6, 0x2, {0x3, 0x8088}}, {0x7, 0x3, {0x2, 0x400}}, {0x5, 0x8, {0x0, 0x2}}, {0x3, 0x8, {0x3, 0x843}}, {0x8001, 0x100, {0x2, 0x6}}, {0xfff8, 0x7, {0x2, 0x9}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x805}, 0x4000) 2.002718609s ago: executing program 3 (id=2370): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, &(0x7f0000000740)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x4, r4, 0x4000}, 0x38) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000003c0)={@loopback, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl0\x00', r2, 0x4, 0xbd, 0x85, 0xfffffff5, 0x58, @dev={0xfe, 0x80, '\x00', 0x11}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x20, 0x7, 0xfffffff3, 0x6}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100025bd7000fcdbdf25010000002800028024000180080001000400000008000100010000000800010007000000080001000200000004000300200001801400020076657468305f6d61637674617000000008000100", @ANYRES32=r7, @ANYBLOB="040003000c00018008000300020000004c0001801400020069705f7674693000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="140002007665746830000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="0800030000000000600001801400020069703665727370616e30000000000000140002006261746164765f736c6176655f31000008000100", @ANYRESOCT, @ANYBLOB="1400020070696d36726567310000000000000000080003000200000008000300030000000800030001000000"], 0x11c}}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VFAT_IOCTL_READDIR_SHORT(r9, 0x82307202, &(0x7f0000000dc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="24000000240007012ebd7000fbdbdf25027c00000d0001800800020001000000df000000285bc444404bf8d351289f80420d775a64488b58dafb6c951aeee5392306c68d7310caee3ae052a9497fb2adffbbce236cb9faa5d017036e1ee07a0ca8569fc71ed50f0529dfe9368708bb6b0d1680892116d770a3e5edf3e76ab3b678ddee308a62b9eefe314cfe30b17df8677b8908e9591f4bb8ef834305ddb7c5dd83429c85ed1e802473458309a751cc48e8088c59dd2fb605f49178c58145d6cea2b52126000f6b13a32b28d77ad262f1fc6d1e695bbf8fdae854816a5818ace0564fae4dbad9f4e92f0c1455c84b"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000004000000000000000010060851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000cc0)=""/222}, 0x78) 1.940752768s ago: executing program 2 (id=2371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a4000000000dc00020073797a32000000000900010073797a3000000000080005400000001f0c20098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x4004080) 1.891562929s ago: executing program 0 (id=2372): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300000000000085000000cc000000b70000000200000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x0, 0xe, 0x0, &(0x7f0000000800)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x0, 0xe, 0x0, &(0x7f0000000800)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="2f000000000000000000000064779d669168b9e1304645e77f022de337a85facd02feb50e02ae32c2990070bf4a8fa7896ef4d93c8bf8ea9acf2fc1f3c926016c05b210b27567dff9c9b58f27214fc5d14fdda771c48a14b00000000000000000000200000005df859df29382b8c17b391fa15b80e7c1d1c434a5e082317cd98fae6f7bd52c2787bb940027253c4c4d9bd3bdc9d5380829ffe3536ea676c4acc2de312da0cda9bdefdd30101924e1b71da26b10000d3b51b2d8a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="2f000000000000000000000064779d669168b9e1304645e77f022de337a85facd02feb50e02ae32c2990070bf4a8fa7896ef4d93c8bf8ea9acf2fc1f3c926016c05b210b27567dff9c9b58f27214fc5d14fdda771c48a14b00000000000000000000200000005df859df29382b8c17b391fa15b80e7c1d1c434a5e082317cd98fae6f7bd52c2787bb940027253c4c4d9bd3bdc9d5380829ffe3536ea676c4acc2de312da0cda9bdefdd30101924e1b71da26b10000d3b51b2d8a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x6, 0x0}, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x9}, [@tail_call, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x2, 0x4, 0x8, 0x4, 0xae}]}, &(0x7f0000000480)='syzkaller\x00', 0x4, 0x9d, &(0x7f00000004c0)=""/157, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x2, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000880)=[{0x4, 0x3, 0xc, 0x8}, {0x5, 0x1, 0x9, 0x5}, {0x1, 0x2, 0x6}, {0x1, 0x3, 0xd, 0x5}, {0x2, 0x1, 0xb, 0xc}, {0x0, 0x1, 0x8, 0x1}, {0x4, 0x2, 0x9, 0x1}, {0x2, 0x3, 0x0, 0x6}], 0x10, 0x81}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x15015000) (async) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x15015000) mmap(&(0x7f0000611000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r5, 0x0) (async) mmap(&(0x7f0000611000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r5, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00', 0x0, 0x4}, 0x18) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000bc0)={{r1, &(0x7f0000000a80)='GPL\x00', 0x82c1, &(0x7f0000000ac0)={@align=0x6, {0x2, 0x5, 0x7, 0x2}}, 0x2, &(0x7f0000000b00)={@_ha_fsid}, &(0x7f0000000b40)=0x800}, {[0x2, 0x8, 0x838, 0x8]}, 0x2, 0x39, &(0x7f0000000b80)=""/57}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x10, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @alu={0x4, 0x1, 0x0, 0x9, 0x6, 0x4, 0x10}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x5b, &(0x7f00000001c0)=""/91, 0x41100, 0x42, '\x00', 0x0, @sk_msg=0x7, r2, 0x8, &(0x7f0000000340)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x2, 0xfffffff8, 0xe88}, 0x10, r3, r4, 0x6, &(0x7f0000000c80)=[r5, 0x1, r1, 0xffffffffffffffff, r6, 0x1, r7, r8], &(0x7f0000000cc0)=[{0x3, 0x3, 0xf, 0x4}, {0x2, 0x2, 0x4, 0x8}, {0x5, 0x1, 0x1, 0x959deb1161f8d7c8}, {0x0, 0x3, 0x5, 0x3}, {0x3, 0x4, 0x4, 0x3}, {0x1, 0x5, 0xf, 0x5}], 0x10, 0x8}, 0x94) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x501000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4b}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x408c8}, 0x20044001) 1.881877145s ago: executing program 4 (id=2373): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000400)={r3, &(0x7f0000000080)='GPL\x00', 0x200080, &(0x7f00000001c0)={@_ha_fsid={[0xff, 0x3ff]}, {0x3, 0x7, 0x7ff, 0x8000000000000000}}, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0xd3ae}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r4, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r0, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) 1.812308559s ago: executing program 2 (id=2374): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000001180)=ANY=[@ANYRES32=r2, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="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", @ANYRES16=r1], 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f00000004c0)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r7, 0x89f5, &(0x7f0000000500)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0x1, 0x0, &(0x7f0000000040)="ff", 0x0, 0x200cf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0xc044054) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x8) close(r11) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r9, &(0x7f0000000540), 0x0}, 0x20) r12 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a0000000600000002200000ed01000000000000", @ANYRES32, @ANYBLOB="ffca008000"/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e21, 0x2, 'fo\x00', 0x2, 0xe2, 0x39}, {@private=0xa010100, 0x4e23, 0x4, 0x2ca1, 0x3ff, 0x10001}}, 0x44) 1.762718867s ago: executing program 3 (id=2375): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002540)=@deltfilter={0x2468, 0x2d, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2434, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x2408, 0x2, [@m_mpls={0x58, 0x1a, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x78, 0x1a, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x80f3}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x3c, 0x6, "bccfcc47642a965d40e558c6dd8e6a1fc44e78792451d7b16d4c6d9b280ade4733c083ea1cc812099fcd0bc28c83b2099fdc43db74eab09e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x1038, 0xc, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x878}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xac, 0x7, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8001, 0x4, 0x5, 0x6, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x0, 0x2, 0x10, 0xe1}}]}, {0x4e, 0x6, "8544a0379d07988454df35d211a4e78cb29c0b18a7fadedf1d6d9c13df475ceeb152b05e992ae7e4f7fc201361e0055c13a9acadb2ad81a03c7d24ae19f913b0c6e3823dfe74b1ff0af7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0xc0, 0x14, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x0, 0x2}, 0x70}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x20000000, 0x8000, 0x200}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x95, 0x1, 0x46, 0x9}, 0xeb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x8, 0xffffffff, 0x2}, 0x8}}]}, {0x1f, 0x6, "2593339c5e8df8d77395cb5e55aff1b090352b526a6c8e5b3f9784"}, {0xc}, {0xc}}}, @m_ct={0x1050, 0x8, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_ACTION={0x6, 0x3, 0x1a}, @TCA_CT_ACTION={0x6, 0x3, 0x2}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x140, 0xf, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_NO_CSUM={0x30}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xda, 0x6, "52b8bd8c9855735b6dc72f32e3197ae08b0992c5e583cc31a43d37120c708af6bb93bb89583d5eae39aa46cde7b040add61f3543219229f8039f7d2dd9f291a666971a5e1c24a6698735105d2f2ebf4065b9619fddb9753ce7566293e055590d7682dc9ddd37865e7637e341860d87f01a83daadaef4198f86ea82a2a84ab5361509e5a9dcfc08ae5acab22ff2fa477c283c7a6d1e6b1060facfcb28b6570e8fd3d93583908c459c11eaf4fb5c13c2edceecb489740ce11af975cf92c24a36899e53cde93880fbdef432274f4c27ef1d892644ece465"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x2468}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) socket$key(0xf, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x4, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000700008014000780080011400000008b05001500060000000500010006000000050005000a00000005000400020000000900020073797a300000000011000300686173683a69702c6d61726b0000000049584792fff756875c1b28229838c22edb397089522c6fbdc03808b87fc7c7347ee0831bb220c4e399532cd474c0aa39b45e9a4f8002a72e4086804f8c610fec5c1f8ee242caeb9a449a2d9b3e3f2677c3823ea0216213337dcb4a"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0xe, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(&(0x7f0000000b00), 0x1, 0x0) sendmmsg$unix(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0x20040801}}], 0x1, 0x4000000) r8 = socket$key(0xf, 0x3, 0x2) recvmmsg(r8, &(0x7f0000000100), 0x6f5, 0x2000000022, &(0x7f0000000140)={0x77359400}) setsockopt$sock_int(r8, 0x1, 0x52, &(0x7f0000000300)=0x80000000, 0x4) sendmsg$key(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000f00)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000f40)={&(0x7f0000000f80)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000fc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f0000001040)=[{&(0x7f0000001080)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000001140)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000010002000400000000300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000006b009e8b2d4b1447534ea1d5a2314fa2886a8011507646000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001200)={0x0, 0x0, 0x0, &(0x7f0000001240), 0x1003, r10}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001280)={r10, &(0x7f00000012c0)}, 0x20) 1.685540836s ago: executing program 4 (id=2376): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (async) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x8c1) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) (async) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x10000040}, 0x20000880) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000480)={&(0x7f00000004c0)=@hci, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000b80)="633503a4b16f5f470e56a2a10f34c0cd281c1e265eef90d626040c6656e9c956a26e51da357e3145748a93f596b8f77865ffe5450b0570d0123daff06a99817d50ea798d204e967e42828071ac809b00c1ef6f75d5f18e8d576c9effb4346c8731b2bd2bb650705b547a0e3fe9d8a29a956f6fa63629f60b735af8a88c2f12431f0ceedd8e0b2695bee6b4b0", 0x8c}, {&(0x7f0000000080)="b22a03a400fc0000000000", 0xb}, {&(0x7f00000018c0)="312b415e0a54dff37a5d75c86d2f57fc72cfe3a1487551eda2afd96266e1477939fce76efad7441e193ad2e34a8078365701b9c2a6fc47b41b8439c92d422e45440b525eff5ee70817f8c6baee48c3a4f4a955afddd41c39f032212ecd59f904dbb8039345a6ceb322a8797130c302c01cfd7dd241fe82f34d81ee8acdffbd6ca00103a02e9157a54ae0b5d3216eb23c0703004513d046f3c2b86b40fd3d1b839d29f451d7e2917d02132b4e51a7308723a6cce5438f6c54dee30c345384a86b9935d72aaf4c5102234f33755af7e0968f444fc0fe8d8c6eaffcf06b984fea573c6dee6e9fb26a6c808034f6323c1f4984d597e483625973dbae07d4578e36d357fbc4324479a1f6c6d7e42fdfa7b76f139676a90c9c224e423ace535cc0c0be26157b3ecde9c23a101b3f5d7ae24da2ed26f15b2b4c0ed8701e516220ee23df01c5f4ee39091117a5f753580c114513902c821030", 0x155}], 0x3, 0x0, 0x0, 0x4004d}, 0x20000001) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_lsm={0x18, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa100000000000007010000faffffffb702000008000000b70300000280007f720000000000000095"], &(0x7f0000000880)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) (async) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f00000008c0), 0x4) (async) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000003600)=[{{&(0x7f0000000fc0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001780)="8cd8b57185e38aefb2f9f7ae057325f8ec1f6a06532999826ae72262cc0090a990027a93c70f3cd820b2cee343e632f287a89918c2cbd6276498bf875f88c26c81bbabf9ce842e855fac4d4b7ad7609c00775dfb5376fdf8291a1529652ac46adf40919262b394041e2932e237595619ea8dc20bd78f5dc3488abee1a18b82b8b3b2262092d8a6bb84ef576067590126b660e3f82ce3c241a0c696b385df2239ed1ee02a5fc604d2c8a1ca226d6969c5bced607721945be1d4dbe3", 0xbb}, {&(0x7f0000001840)="7806e8", 0x3}, {&(0x7f0000001a40)="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", 0xfc}, {&(0x7f0000001b40)="728ec68cae3ae0ec29977b2ffb1718f2b1fe644e1d443eeb38e27e70392c9cf72c886ca44688a01086eaba7d4b41d1cde6f4c903314ea5cc9cdeb362ed26f90f61c701f7a5b0b1f51ce3215ba3674b8b80ce3e2202ce23ae1387c51476519bf41d7c7692de5f990967aa7f3face6b28c09b9520bed4e14b9110fc66abb3f38f7f2df57758b3adf9b062e2141cc1f40e4e1e4c261fefe05bad332a0a135eca5b20946565d78c62041a9f3ae920c05dc9eaf0af73054c0c893bb6dbe8a398540f9e1d37c07cd64e200fa4fe777dbc3e547c930d8c6cbdbb2af91fe1421a3b40db91dcd9d5a72225d2c2aee7f2a6ff4c37f9d1c3135291c", 0xf6}, {&(0x7f0000001c40)="0e1bdee55426accca298d4047f67", 0xe}, {&(0x7f0000001c80)="598819eb7601ce01ec8ad439f9c28db41a34e3ad3d388489a420d30d9b9e5292e3a526990f9523104bae450c1e5496660cf36a6a22fc2cadf89ccbd318c83a0648791eda867030", 0x47}, {&(0x7f0000001d00)}, {&(0x7f00000036c0)="35e11f5b274359574710cdc8cae537672f37bfe9e74fd34ff6745936735e5c0e66d455a490e633414900fa9f4909dd559b20ce93894a85526be850502174bed27e20d63f704535bed2a48f93a83325cc982725edf25a6cce4c1e04c46f23a21e65117bbebed18bd68f29e7902d760def0877b5c926ccc48a5d82f248e5e8728989e7d2884226ded855f842698127ac7dda10b01951694ae34efcb100000000", 0x9f}, {&(0x7f0000001e00)="e43870868a936a8305c5ddb4c50f659c07", 0x11}], 0x9}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001f00)="5a0a2172eeb79ea34c6deaecfb4f49e72037d0804d9c75d447f3db036d682e7dfc6b6f1342d51396a3fc87a7599c1a2fb4bdb3bde001600baae3b6c860104d4d60b402aa096d218884d412fffc924ed1b46307caa935a62c14d1f9fff782d01dac6dbdcd5d4f563e5b4b0845741ce50f23229f11b6cc4792714cd118921d57088643c833ba77ea8bdbab3c8fead2c5d7f052ef4a9cb23d486ece334521cde420f62bdbb5c5ea37107eb04c6765484eec287383ab6733db6216b3dc4e01686e88809a95208d2eb45e6755308617964ad10702f6f738f345260b7f35", 0xdb}, {&(0x7f0000002000)="e13221058856cdbfa730f1fd334d0c444dfab7de155d0919dc14b79641b7dde80b30a3476fd162571c6a78a500aed47a5bcba4eec68e3078f123e3454ebd68031caeca20321f68c57839b98fbd", 0x4d}, {&(0x7f0000002080)="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", 0x1000}], 0x3}}, {{&(0x7f0000003100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x7, 0x8, "009802e847b8f965f00a3aaed2f817237d797b629423010adbc3c27684c218c4f8df9d463e32666e9970ad70b26675c05f84d06ea9921807f56becb32e83cd", 0x1f}, 0x80, &(0x7f0000003440)=[{&(0x7f0000003180)="c871db67732c70f673185d13f8ca3ccc4edc87c8494812019cafd24231c758bb0e5f6d6d5c74ad643a95882cfdb09cc4526e6167a8e49ddc2c57d1304d1cda1a3eba26f2fb8290cde16774f7da0b1c2362630885524ae8c4c0887fd6d04ab8dd35e1026435b23b608095a57fc73a1e601b8c1e67d214f4be91f75b9e0f6fe77794c23fb6bccc10cd8825fafc1a34d19c9ebda62f96aebf8c", 0x98}, {&(0x7f0000003240)="8d35935ba21f4d1e44eb9bd074599a4e73e26cc97757cfdb5d8412d2e9d352b14e6b0e6103762fae5e4e413ae7b03b6dd6ad4a6b18719b899d330697d336a5018c8ae2a74dbe4f995b626a07b8da34f6a0c8ba63ee4d307192bede2475b2ef7e4c5024904117d5b6a17023f8818d6042855dc570b56f628af7651c7f982e3f05027b3216ef31c27225a98971494bedcb980748da6e26d1f2695b98cb9967e96b0d33e1a27168b4c26d8bcfe8fcace01389a9d870bb59a0869ac9a0acbf5bb0edcbe9b8a7bcc7c4bedbd5083971ed2be174605c3bf74d7bff3367af73882c238a3b67b4db0c163d", 0xe7}, {&(0x7f0000003340)="4492f50e73919adc406cd55a996303b89617548cb2d2e913f97af0d05e6f785695aa8e62607830f4b29cfa9d1093599ccf27a146b1a04da937954a7846770fb905167bc96f9773167dc84e17c6207a53eed42ba9d8d4a6facad8fc79be157a358303cca64c99bf9f4b768d719ed80f40aef4a916e7f6fd1a43928978c76373a969377721add73f91f32f672f7c7ab639720b403987c53290977443ad86850771e07f13bb304ae0c53ea99ab149876b0546cfb07cb15b6508b5b98dd59b92", 0xbe}, {&(0x7f0000003400)="07742b7ff060791f94d1f53519d8e252bdfc302a555be1b171392c3508f9c73a9620d8b8c4e6962685f5984f", 0x2c}], 0x4, &(0x7f0000003480)=ANY=[@ANYBLOB="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"], 0x178}}], 0x3, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091119a000000000095"], &(0x7f0000000a40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x40) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000b00)={0x40000000, 0x0, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYRES8=r10, @ANYRES16=r0, @ANYRES8=r5, @ANYRES32=r4, @ANYRES64=r7], 0x80}}, 0x0) (async) sendmmsg(r11, &(0x7f0000000c00), 0x0, 0x0) (async) sendmsg$key(r11, &(0x7f0000000c40)={0x9, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000d00), 0x3) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000dc0)={'tunl0\x00', 0x0}) (async) recvmsg(r12, &(0x7f0000000e00)={&(0x7f0000000e40)=@caif=@util, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000f80)=""/58, 0x3a}, {&(0x7f00000013c0)=""/127, 0x7f}, {&(0x7f0000001040)=""/113, 0x71}, {0x0}, {&(0x7f00000010c0)=""/238, 0xee}, {&(0x7f00000011c0)=""/236, 0xec}, {&(0x7f00000012c0)=""/223, 0xdf}, {&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000001440)=""/178, 0xb2}], 0x9, &(0x7f0000001500)=""/247, 0xf7}, 0x40000000) sendmsg$nl_route_sched(r12, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4782]}}]}]}, 0x58}}, 0x4000010) 1.625056138s ago: executing program 0 (id=2377): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061188e000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.578000687s ago: executing program 0 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, 0x1412, 0x1, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x8084) r2 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0xc040480) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02"], 0xe) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r4, &(0x7f0000000880)=ANY=[], 0x48) splice(r3, 0x0, r5, 0x0, 0x3000, 0x100000000000000d) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000780)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000007c0)='bridge0\x00', 0x10) sendto$inet6(r6, &(0x7f0000000800)="846bf7da", 0x4, 0x6000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_int(r8, 0x1, 0x28, 0x0, &(0x7f0000000200)=0x61) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x1403, 0x10, 0x70bd27, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020820034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.502524938s ago: executing program 0 (id=2379): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/227, 0x1c}], 0x4) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000a40)={0x3, 'veth1_macvtap\x00', {0xb}, 0x3ff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000200010000001c0008800400078814000780080006"], 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000740)={0x264, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3726fd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d38dfa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}]}, {0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7da55bc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12e27a1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4972eccf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15b7b67e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x428f12fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4906a0d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a98c0a8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa024}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5eb0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2edbe35a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bf8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d41}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf8, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d25ffc0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ad843f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d8622fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41a97caa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c02582e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x129c79ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe983}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b1a7ba5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x269c524c}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2244}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79cfe4e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57baabaa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b10e37f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf3b9159}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ed6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x63ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16a4c561}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fdec8f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7df4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92a9}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x186f4d37}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ed8f376}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x976c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e471e42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e6b65bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6264a973}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x50}, 0x800) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, r8, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) write(r9, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={0x0, 0x0, 0x26}, 0x28) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf252b0000000c00050000000000000000000a0001007770616e30000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000300)=0xaf) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r13, 0x8937, &(0x7f0000000280)={'veth1_to_bond\x00', @ifru_map={0x1, 0x401, 0xf95, 0x0, 0x89, 0x5}}) 1.397001124s ago: executing program 3 (id=2380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000ae00000095"], &(0x7f0000000840)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2200000004"], 0x48) (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2}, 0x4) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000540)=0x10) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64) writev(r5, &(0x7f0000000580)=[{&(0x7f00000005c0)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r3, 0x84, 0x83, &(0x7f0000000640)={r4, 0x2}, &(0x7f0000000680)=0x8) socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}], 0x3) (rerun: 64) 1.132590238s ago: executing program 0 (id=2381): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r1}, 0x14) (async) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/20, 0x14}, {&(0x7f0000000780)=""/202, 0xca}], 0x3, &(0x7f00000000c0)=""/23, 0x17}, 0x8001}], 0x1, 0x1822b, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x4, 0xd70) (async) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 1.031234066s ago: executing program 1 (id=2382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c08010700000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020278673ff9ed00000000000000000000000000011400040000000000000000000000ffffac1e00011800068014000400"/164], 0xac}}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000000180)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)='h', 0x1}, {0x0}], 0x2}}], 0x1, 0x2000c044) (async) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000080)=0xa, 0x4) (async) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x9, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) (async) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000400)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000280)={0xff, 0xb29c, 0x803, 0x7, 0x9}) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0xc0, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0xc0}}, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f00000004c0), 0x0, 0x0, 0x0, 0x3, r5}, 0x38) (async) socketpair(0xb, 0x800, 0xffff, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r6, 0x11, 0x65, &(0x7f0000000240)=0x4, 0x4) 924.607692ms ago: executing program 2 (id=2383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x2, 0xb019, &(0x7f0000000540)=""/234}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000680)=ANY=[], 0x32600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000740), &(0x7f0000000780)=r2}, 0x20) sendmsg$inet(r1, &(0x7f00000007c0)={0x0, 0x6000, &(0x7f0000000800)=[{&(0x7f0000000840)='U', 0xa00120}], 0x1}, 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8994, &(0x7f00000001c0)={'bond0\x00', @ifru_settings={0x2, 0x6, @fr_pvc_info=&(0x7f0000000040)={0xe0000000, 'vcan0\x00'}}}) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x8001}) 919.991385ms ago: executing program 1 (id=2384): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xfffffffffffffe77, 0xc, 0x0, &(0x7f0000000080)=""/12, 0x6, 0x0, 0x400, 0xc8, &(0x7f00000003c0)="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", &(0x7f0000000200)="9d7328d6e0eff2079603250dc610ca6b1e5cbe6e2bab081652abe6ac9d23f9372b3b16643a5ea8b7e9a090e414be582a1b9a472e8a007ce3ecfd035ed6a8601215cf7ba1e5d41e2619f7729ad88954b2885d5fe237171b99a062625d3d4016b9b30743ac38d9d1350ad13dda19d2a35fe0a1386f02c5755bb3d6000000000000009f96a4441005b91123a12a5435f1a65d303b2774173ae717b37521b3b6f386cc9e32ed712f4e03d6f84124f65f52863eb8ca364100fe67ed9a332cd460fc4f1b757d6378eee07b", 0x6, 0x0, 0x5}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000400100000080000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x1c, &(0x7f0000000a80)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xa, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000000000000000000000000006301220000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000d80)=ANY=[], 0x32600) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000e00)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e40)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x1, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048851}, 0x4000080) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r13, &(0x7f0000000ac0)={0x40000006}) write$cgroup_int(r14, &(0x7f0000000b00)=0x1, 0x12) shutdown(r12, 0x0) 619.048592ms ago: executing program 4 (id=2385): socket(0x2, 0x3, 0xff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f0000000300)=@ethtool_cmd={0x28, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x1, 0x0, 0x7, 0x4, 0x7, 0x7ff, 0x8, 0x5, 0x0, [0x7, 0xff]}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e8, 0x0) bind$vsock_stream(r5, 0x0, 0x0) listen(r5, 0x4) connect$vsock_stream(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000017c0)=[{0x0}], 0x1}}], 0x1, 0x0) r6 = accept4$unix(r5, 0x0, 0x0, 0x800) recvfrom$unix(r6, &(0x7f0000001840)=""/248, 0xf8, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x5, 0x5, 0x6, 0x5, 0xff, 0x1, 0xea, 0xfa, 0x2, 0x6, 0x81, 0x8, 0x40, 0x1c}, 0xe) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0xc6e9f000) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0xd1383000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x77382000) sendto$inet6(r1, &(0x7f0000000100)="1a", 0x34000, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) close(r1) 396.893895ms ago: executing program 4 (id=2386): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000009e000000620a00ff000000007900401900000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000340)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000005ac14142e0000000000000000000000004e230000000000000a00800062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ba6b6e00030000009c0011000a0101010000000000000000000000007f000001000000000000000000000000ac1414aa000000000000000000000000200100000000000000000000000000003c030000000000100a000a000a0101010000000000000000000000007f000001000000000000000000000000ac14143800004f9f3e192cce14df2cff7a7f660000000000000000000000000000000000000000ffff7f0000"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef563b068}, 0x4020800) 344.999261ms ago: executing program 3 (id=2387): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) (async) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x60, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3d, 0x1, 0x0, 0x0, @binary="00112233445566748899aabb86dd2c00001c00002b0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2c0d05"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x60}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, 0x0, &(0x7f0000000280)) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="b8000000196301000000000000000000e000000200000000000000000000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000070000000000000000000000000000000000000000000000020000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x20004004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) (async) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)=""/144, 0x90}, {&(0x7f0000000b40)=""/217, 0xd9}, {&(0x7f0000000c40)=""/55, 0x37}, {&(0x7f0000000c80)=""/4103, 0x1007}, {&(0x7f0000001cc0)=""/141, 0x8d}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x0, 0x0) 276.340376ms ago: executing program 4 (id=2388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa0380, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000016c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000006c0)=@delqdisc={0x1a4, 0x25, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0x5, 0x7}, {0x2, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}, @qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xffffffff}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8ee}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xba3a}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x19f}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x71d, "75d8d704f05d634b41bd1d53b54ad2a2"}}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x58, 0x5, 0x1, 0x9, 0xd28, 0x6}}, {0x10, 0x2, [0x7, 0xd, 0xfd, 0x5, 0x4355, 0x1]}}, {{0x1c, 0x1, {0x65, 0x0, 0x200, 0x33, 0x0, 0x7, 0x6d45, 0x5}}, {0xe, 0x2, [0x9dc, 0x4da7, 0x3ff, 0x2, 0xce]}}, {{0x1c, 0x1, {0x5, 0x4, 0x401, 0x8, 0x1, 0x80, 0x9, 0x5}}, {0xe, 0x2, [0x4, 0x1, 0x1, 0x6, 0x4]}}, {{0x1c, 0x1, {0x1, 0x9, 0x4, 0x5, 0x0, 0x80, 0x2, 0x9}}, {0x16, 0x2, [0x200, 0xbf7, 0xcb9, 0x9, 0x1, 0x663d, 0x8, 0x3, 0x3]}}, {{0x1c, 0x1, {0x60, 0x4, 0x8, 0xff, 0x1, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0x1, 0x2, 0x8000]}}, {{0x1c, 0x1, {0x92, 0x3, 0x26c7, 0x7, 0x1, 0x8, 0x2, 0x4}}, {0xc, 0x2, [0x6, 0xfa, 0x5, 0x775d]}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001980)={'syzkaller0\x00', @multicast}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000003c0)={r8, @in6={{0xa, 0x4e24, 0x3, @mcast1, 0x9554}}}, &(0x7f0000000580)=0x84) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000100100000b000000ae5e8bed6227561b"], 0x18}, 0x4fc04) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 273.305745ms ago: executing program 3 (id=2389): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) (async) 180.540836ms ago: executing program 0 (id=2390): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r2, r2, 0x2f, 0x0, @void}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x0, 0x10, &(0x7f00000005c0), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000680)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f00000006c0)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000800)}, 0x28) connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="0100000003000000640000000000000000000000000000000000000000000000000000000000000001000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000020000", 0x3b}], 0x1}}], 0x2, 0x0) 143.555556ms ago: executing program 3 (id=2391): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000004004000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x50) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r2, &(0x7f0000000480)="14000000140005b7ffccca38b9000000060860eb", 0x14) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', 0x0}) (async) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000440)={'wlan0\x00', @ifru_mtu=0x8}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) (async) write$tun(r3, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @llc={@llc={0x0, 0xff, "b2a4", "c02d2cd53c1fefe9b933987a9203485a416abf47a91a3fdce4a70162515eedcf00000000"}}}}, 0x36) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r1, 0x4}, 0x38) 0s ago: executing program 2 (id=2392): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={0x1, 0xc}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0xfff7, 0x8}, &(0x7f00000004c0)=0x90) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={0x1, 0xc}, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0xfff7, 0x8}, &(0x7f00000004c0)=0x90) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) kernel console output (not intermixed with test programs): 60 [ 204.793630][T11308] ? call_instance+0x263/0x560 [ 204.793677][T11308] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 204.793703][T11308] ? bpf_tracing_func_proto+0x72/0x180 [ 204.793757][T11308] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 204.793788][T11308] ? __kvmalloc_node_noprof+0x340/0x820 [ 204.793811][T11308] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 204.793835][T11308] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 204.793867][T11308] bpf_compute_live_registers+0x8d3/0x1ff0 [ 204.793912][T11308] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 204.793949][T11308] bpf_check+0x2744/0x2ef0 [ 204.793992][T11308] ? __pfx_bpf_check+0x10/0x10 [ 204.794025][T11308] ? bpf_obj_name_cpy+0x194/0x1e0 [ 204.794048][T11308] bpf_prog_load+0x14d1/0x1c20 [ 204.794086][T11308] ? __pfx_bpf_prog_load+0x10/0x10 [ 204.794137][T11308] __sys_bpf+0xd0d/0xd90 [ 204.794169][T11308] ? __pfx___sys_bpf+0x10/0x10 [ 204.794205][T11308] ? __fget_files+0x2a/0x420 [ 204.794244][T11308] ? ksys_write+0x242/0x270 [ 204.794269][T11308] ? __pfx_ksys_write+0x10/0x10 [ 204.794296][T11308] __x64_sys_bpf+0xba/0xd0 [ 204.794321][T11308] do_syscall_64+0x166/0x520 [ 204.794339][T11308] ? trace_irq_disable+0x3b/0x140 [ 204.794361][T11308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.794379][T11308] ? clear_bhb_loop+0x70/0xc0 [ 204.794401][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.794420][T11308] RIP: 0033:0x7fcc7699f559 [ 204.794437][T11308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.794453][T11308] RSP: 002b:00007fcc778d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.794472][T11308] RAX: ffffffffffffffda RBX: 00007fcc76c25fa0 RCX: 00007fcc7699f559 [ 204.794486][T11308] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 204.794498][T11308] RBP: 00007fcc778d8090 R08: 0000000000000000 R09: 0000000000000000 [ 204.794510][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.794521][T11308] R13: 00007fcc76c26038 R14: 00007fcc76c25fa0 R15: 00007ffd89434d18 [ 204.794553][T11308] [ 205.285739][T11304] tipc: Started in network mode [ 205.285800][T11304] tipc: Node identity 2687ab93c30f, cluster identity 4711 [ 205.286903][T11304] tipc: Enabled bearer , priority 10 [ 205.512980][T11296] tipc: Resetting bearer [ 205.605257][T11296] tipc: Disabling bearer [ 206.322765][T11352] vlan2: entered allmulticast mode [ 206.322808][T11352] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 206.324905][T11352] batman_adv: batadv0: Adding interface: vlan2 [ 206.324938][T11352] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.324994][T11352] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 206.564373][ T1174] IPVS: starting estimator thread 0... [ 206.648663][T11361] IPVS: using max 30 ests per chain, 72000 per kthread [ 206.734366][T11363] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.735144][T11363] bridge0: port 3(bond3) entered blocking state [ 206.735320][T11363] bridge0: port 3(bond3) entered disabled state [ 206.735456][T11363] bond3: entered allmulticast mode [ 206.766706][T11363] bond3: entered promiscuous mode [ 206.774733][T11363] bridge0: port 3(bond3) entered blocking state [ 206.774851][T11363] bridge0: port 3(bond3) entered forwarding state [ 207.075934][T11387] IPVS: rr: UDP [::1]:8080 - no destination available [ 207.099461][T11393] Bluetooth: hci0: unsupported parameter 5135 [ 207.099497][T11393] Bluetooth: hci0: unsupported parameter 8192 [ 207.099526][T11393] Bluetooth: hci0: unsupported parameter 5135 [ 207.099555][T11393] Bluetooth: hci0: unsupported parameter 8192 [ 207.413803][ T6208] bridge0: port 3(bond3) entered disabled state [ 207.757591][T11425] xt_policy: neither incoming nor outgoing policy selected [ 208.917226][T11457] gretap0: entered promiscuous mode [ 209.283768][T11468] __nla_validate_parse: 68 callbacks suppressed [ 209.283788][T11468] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1339'. [ 210.222459][T11495] ip_tables: iptables: counters copy to user failed while replacing table [ 210.445813][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'. [ 210.648136][T11507] validate_nla: 24 callbacks suppressed [ 210.648156][T11507] netlink: 'syz.4.1358': attribute type 8 has an invalid length. [ 210.649580][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1358'. [ 210.703891][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 210.704542][T11507] netlink: 'syz.4.1358': attribute type 2 has an invalid length. [ 210.704575][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1358'. [ 211.154325][T11519] can: request_module (can-proto-0) failed. [ 212.112780][T11556] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1369'. [ 212.454628][T11561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.468627][T11561] netlink: 'syz.1.1371': attribute type 1 has an invalid length. [ 212.468663][T11561] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1371'. [ 212.585186][T11569] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.054579][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'. [ 213.084891][T11585] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 213.297554][T11588] netlink: 'syz.0.1379': attribute type 11 has an invalid length. [ 213.595456][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1382'. [ 213.877119][T11600] lo: Caught tx_queue_len zero misconfig [ 213.908156][T11600] netlink: 3604 bytes leftover after parsing attributes in process `syz.3.1383'. [ 213.910059][T11600] IPv6: addrconf: prefix option has invalid lifetime [ 214.390950][T11611] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 214.538642][T11614] __nla_validate_parse: 1 callbacks suppressed [ 214.538679][T11614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1388'. [ 214.641886][T11611] bond4: entered promiscuous mode [ 214.642344][T11611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.774346][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1390'. [ 214.808426][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1390'. [ 214.817151][ T53] block nbd4: Receive control failed (result -32) [ 214.855558][T11620] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.856242][T11617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1389'. [ 214.856606][T11621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1389'. [ 215.043917][T11639] ip6gretap2: entered allmulticast mode [ 215.047622][T11639] batman_adv: batadv0: Adding interface: ip6gretap2 [ 215.065910][T11639] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.065944][T11639] batman_adv: batadv0: Interface activated: ip6gretap2 [ 215.271199][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1393'. [ 215.542723][T11657] bond5: entered promiscuous mode [ 215.543214][T11657] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.569544][T11648] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.570016][T11648] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 215.570506][T11648] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 216.003267][T11677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.130468][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1399'. [ 216.162709][T11684] FAULT_INJECTION: forcing a failure. [ 216.162709][T11684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.162740][T11684] CPU: 0 UID: 0 PID: 11684 Comm: syz.1.1400 Not tainted syzkaller #0 PREEMPT(full) [ 216.162761][T11684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 216.162773][T11684] Call Trace: [ 216.162780][T11684] [ 216.162788][T11684] dump_stack_lvl+0xe8/0x150 [ 216.162819][T11684] should_fail_ex+0x410/0x560 [ 216.162851][T11684] _copy_to_user+0x31/0xb0 [ 216.162880][T11684] bpf_verifier_vlog+0x3a2/0x900 [ 216.162913][T11684] bpf_verifier_log_write+0x11d/0x1a0 [ 216.162941][T11684] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 216.162965][T11684] ? __pfx_cmp_instances+0x10/0x10 [ 216.162988][T11684] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 216.163011][T11684] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 216.163043][T11684] bpf_compute_subprog_arg_access+0x8b7/0x14d0 [ 216.163068][T11684] ? bpf_tracing_func_proto+0x72/0x180 [ 216.163119][T11684] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 216.163149][T11684] ? __kvmalloc_node_noprof+0x340/0x820 [ 216.163173][T11684] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 216.163196][T11684] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 216.163228][T11684] bpf_compute_live_registers+0x8d3/0x1ff0 [ 216.163285][T11684] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 216.163329][T11684] bpf_check+0x2744/0x2ef0 [ 216.163372][T11684] ? __pfx_bpf_check+0x10/0x10 [ 216.163398][T11684] ? bpf_obj_name_cpy+0x194/0x1e0 [ 216.163422][T11684] bpf_prog_load+0x14d1/0x1c20 [ 216.163459][T11684] ? __pfx_bpf_prog_load+0x10/0x10 [ 216.163510][T11684] __sys_bpf+0xd0d/0xd90 [ 216.163543][T11684] ? __pfx___sys_bpf+0x10/0x10 [ 216.163578][T11684] ? __fget_files+0x2a/0x420 [ 216.163616][T11684] ? ksys_write+0x242/0x270 [ 216.163641][T11684] ? __pfx_ksys_write+0x10/0x10 [ 216.163667][T11684] __x64_sys_bpf+0xba/0xd0 [ 216.163693][T11684] do_syscall_64+0x166/0x520 [ 216.163711][T11684] ? trace_irq_disable+0x3b/0x140 [ 216.163732][T11684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.163750][T11684] ? clear_bhb_loop+0x70/0xc0 [ 216.163773][T11684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.163791][T11684] RIP: 0033:0x7fa50e39f559 [ 216.163809][T11684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.163831][T11684] RSP: 002b:00007fa50f29e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.163852][T11684] RAX: ffffffffffffffda RBX: 00007fa50e625fa0 RCX: 00007fa50e39f559 [ 216.163865][T11684] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 216.163877][T11684] RBP: 00007fa50f29e090 R08: 0000000000000000 R09: 0000000000000000 [ 216.163888][T11684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.163899][T11684] R13: 00007fa50e626038 R14: 00007fa50e625fa0 R15: 00007fff897f8138 [ 216.163930][T11684] [ 216.477367][T11680] bond8: entered promiscuous mode [ 216.477392][T11680] bond8: entered allmulticast mode [ 216.825725][T11692] dvmrp8: left allmulticast mode [ 216.888981][T11695] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.003459][ T53] block nbd5: Receive control failed (result -32) [ 217.324613][T11714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1409'. [ 217.359396][T11713] xt_connbytes: Forcing CT accounting to be enabled [ 217.410189][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 217.595066][T11709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1406'. [ 217.595105][T11709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1406'. [ 217.595602][T11709] vlan0: entered promiscuous mode [ 217.758285][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 217.949528][ T6210] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.571891][T11755] netlink: 'syz.2.1418': attribute type 2 has an invalid length. [ 218.978935][ T6208] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.979467][ T6208] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.131893][ T53] block nbd6: Receive control failed (result -32) [ 219.432861][T11784] netlink: 'syz.1.1423': attribute type 8 has an invalid length. [ 219.601348][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.857573][T11810] bridge0: port 1(ip6gretap0) entered blocking state [ 219.859901][T11810] bridge0: port 1(ip6gretap0) entered disabled state [ 219.860222][T11810] ip6gretap0: entered allmulticast mode [ 219.879061][T11810] ip6gretap0: entered promiscuous mode [ 220.004146][T11807] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 220.043647][T11820] __nla_validate_parse: 5 callbacks suppressed [ 220.043666][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'. [ 220.557064][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 220.557088][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 220.557112][T11838] netlink: 'syz.0.1436': attribute type 14 has an invalid length. [ 220.557126][T11838] netlink: 'syz.0.1436': attribute type 13 has an invalid length. [ 220.648128][T11834] netlink: 'syz.3.1433': attribute type 21 has an invalid length. [ 220.648187][T11834] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.648421][T11834] netlink: 'syz.3.1433': attribute type 1 has an invalid length. [ 221.130728][T11851] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 221.131491][T11851] Cannot find map_set index 2 as target [ 221.181274][ T53] block nbd7: Receive control failed (result -32) [ 221.518704][T11855] bridge_slave_1: Caught tx_queue_len zero misconfig [ 221.630781][T11859] netlink: 'syz.3.1441': attribute type 10 has an invalid length. [ 221.666418][T11859] team0: Port device syz_tun added [ 221.787692][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1440'. [ 222.054467][T11881] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1446'. [ 222.311413][T11893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1447'. [ 222.542089][T11893] batadv0: entered promiscuous mode [ 222.542113][T11893] batadv0: entered allmulticast mode [ 222.545046][T11893] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1447'. [ 222.553690][T11893] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 223.050444][T11901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1448'. [ 223.174685][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1451'. [ 223.229896][T11914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1452'. [ 223.274235][T11914] veth5: entered allmulticast mode [ 223.285864][T11905] tipc: Failed to remove unknown binding: 66,0,2/0:4001047030/4001047031 [ 223.294120][T11908] tipc: Failed to remove unknown binding: 66,0,2/0:4001047030/4001047031 [ 223.298208][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.348551][T11918] Cannot find del_set index 17 as target [ 223.817252][T11930] netlink: 'syz.0.1457': attribute type 1 has an invalid length. [ 223.853322][ T53] block nbd8: Receive control failed (result -32) [ 224.059573][T11940] netlink: 'syz.3.1459': attribute type 5 has an invalid length. [ 224.554221][T11955] vcan0: tx address claim with broadcast sa [ 224.831806][T11973] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 224.898565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.898656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.058147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.058526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.058854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.059151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.059445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.059803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.060231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.284420][T11986] xt_CT: No such helper "snmp_trap" [ 225.312369][ T53] block nbd9: Receive control failed (result -32) [ 225.327294][T11979] IPVS: Scheduler module ip_vs_sip not found [ 225.629272][T11979] xt_CT: No such helper "snmp_trap" [ 225.630913][T11991] IPVS: Scheduler module ip_vs_sip not found [ 225.793111][T12007] syzkaller0: entered promiscuous mode [ 225.793149][T12007] syzkaller0: entered allmulticast mode [ 225.807371][T12010] __nla_validate_parse: 7 callbacks suppressed [ 225.807404][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1475'. [ 225.828637][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1475'. [ 226.044774][T12029] 8021q: VLANs not supported on ip_vti0 [ 226.173025][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 226.274056][T11995] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 226.317489][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1481'. [ 226.380966][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 226.807312][T12051] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1485'. [ 226.831793][T12056] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1485'. [ 226.916678][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'. [ 227.079436][ T53] block nbd10: Receive control failed (result -32) [ 227.155409][T12052] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 227.213742][T12052] bond5 (unregistering): Released all slaves [ 227.414003][T12078] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1491'. [ 227.414060][T12078] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1491'. [ 227.985134][T12108] netlink: 'syz.3.1499': attribute type 1 has an invalid length. [ 228.337983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.338240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.338440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.338651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.338869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.490807][ T53] block nbd11: Receive control failed (result -32) [ 229.532633][T12151] virt_wifi0: mtu less than device minimum [ 230.316743][T12182] xt_hashlimit: size too large, truncated to 1048576 [ 230.894120][T12198] can: request_module (can-proto-0) failed. [ 231.002895][T12207] __nla_validate_parse: 5 callbacks suppressed [ 231.002922][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 231.143625][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 231.143647][T12217] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1526'. [ 231.227826][T12219] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1528'. [ 231.228397][T12226] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.1530'. [ 231.229378][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1530'. [ 231.263445][T12219] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.430853][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 231.618431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.618853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.619251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.619636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.938214][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 231.960479][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1538'. [ 232.077416][T12251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1538'. [ 232.081063][T12260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1542'. [ 232.090365][T12252] syzkaller0: entered promiscuous mode [ 232.090403][T12252] syzkaller0: entered allmulticast mode [ 232.113369][T12260] xt_TCPMSS: Only works on TCP SYN packets [ 232.126048][T12252] tipc: Enabled bearer , priority 0 [ 232.198835][T12250] tipc: Resetting bearer [ 232.254960][T12250] tipc: Disabling bearer [ 233.156233][ T53] block nbd12: Receive control failed (result -32) [ 233.300503][T12303] netlink: 'syz.4.1551': attribute type 178 has an invalid length. [ 233.515133][T12310] netlink: 'syz.1.1553': attribute type 1 has an invalid length. [ 233.542980][ T4947] block nbd13: Receive control failed (result -32) [ 233.786648][T12319] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 233.810151][T12317] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 233.901002][T12328] netlink: 'syz.1.1556': attribute type 3 has an invalid length. [ 233.946977][T12317] vxcan2: entered allmulticast mode [ 233.964331][T12329] netlink: 'syz.1.1556': attribute type 83 has an invalid length. [ 234.287570][T12337] FAULT_INJECTION: forcing a failure. [ 234.287570][T12337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.287601][T12337] CPU: 0 UID: 0 PID: 12337 Comm: syz.1.1559 Not tainted syzkaller #0 PREEMPT(full) [ 234.287623][T12337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 234.287634][T12337] Call Trace: [ 234.287644][T12337] [ 234.287652][T12337] dump_stack_lvl+0xe8/0x150 [ 234.287684][T12337] should_fail_ex+0x410/0x560 [ 234.287716][T12337] _copy_to_user+0x31/0xb0 [ 234.287741][T12337] bpf_verifier_vlog+0x3a2/0x900 [ 234.287773][T12337] bpf_verifier_log_write+0x11d/0x1a0 [ 234.287799][T12337] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 234.287823][T12337] ? __pfx_cmp_instances+0x10/0x10 [ 234.287845][T12337] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 234.287868][T12337] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 234.287900][T12337] bpf_compute_subprog_arg_access+0xa42/0x14d0 [ 234.287924][T12337] ? bpf_tracing_func_proto+0x72/0x180 [ 234.287975][T12337] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 234.288006][T12337] ? __kvmalloc_node_noprof+0x340/0x820 [ 234.288030][T12337] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 234.288054][T12337] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 234.288084][T12337] bpf_compute_live_registers+0x8d3/0x1ff0 [ 234.288125][T12337] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 234.288159][T12337] bpf_check+0x2744/0x2ef0 [ 234.288222][T12337] ? __pfx_bpf_check+0x10/0x10 [ 234.288249][T12337] ? bpf_obj_name_cpy+0x194/0x1e0 [ 234.288272][T12337] bpf_prog_load+0x14d1/0x1c20 [ 234.288307][T12337] ? __pfx_bpf_prog_load+0x10/0x10 [ 234.288355][T12337] __sys_bpf+0xd0d/0xd90 [ 234.288386][T12337] ? __pfx___sys_bpf+0x10/0x10 [ 234.288419][T12337] ? __fget_files+0x2a/0x420 [ 234.288457][T12337] ? ksys_write+0x242/0x270 [ 234.288480][T12337] ? __pfx_ksys_write+0x10/0x10 [ 234.288506][T12337] __x64_sys_bpf+0xba/0xd0 [ 234.288530][T12337] do_syscall_64+0x166/0x520 [ 234.288549][T12337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.288568][T12337] ? clear_bhb_loop+0x70/0xc0 [ 234.288591][T12337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.288609][T12337] RIP: 0033:0x7fa50e39f559 [ 234.288627][T12337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.288642][T12337] RSP: 002b:00007fa50f29e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.288663][T12337] RAX: ffffffffffffffda RBX: 00007fa50e625fa0 RCX: 00007fa50e39f559 [ 234.288676][T12337] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 234.288688][T12337] RBP: 00007fa50f29e090 R08: 0000000000000000 R09: 0000000000000000 [ 234.288699][T12337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.288710][T12337] R13: 00007fa50e626038 R14: 00007fa50e625fa0 R15: 00007fff897f8138 [ 234.288741][T12337] [ 234.342256][T12340] netlink: 'syz.3.1560': attribute type 11 has an invalid length. [ 234.738455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.738912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.739281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.739637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.867281][T12345] netlink: 'syz.3.1561': attribute type 1 has an invalid length. [ 235.079454][T12345] bond5: entered promiscuous mode [ 235.080312][T12345] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.166059][T12349] vlan3: entered allmulticast mode [ 235.166082][T12349] bond5: entered allmulticast mode [ 235.223588][T12355] bond5: (slave bridge6): making interface the new active one [ 235.223621][T12355] bridge6: entered promiscuous mode [ 235.223795][T12355] bridge6: entered allmulticast mode [ 235.336857][T12355] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 235.490447][T12368] xt_ecn: cannot match TCP bits for non-tcp packets [ 235.832437][ T4947] block nbd14: Receive control failed (result -32) [ 236.366341][T12397] __nla_validate_parse: 7 callbacks suppressed [ 236.366360][T12397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1570'. [ 236.673085][T12408] FAULT_INJECTION: forcing a failure. [ 236.673085][T12408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.673117][T12408] CPU: 0 UID: 0 PID: 12408 Comm: syz.0.1573 Not tainted syzkaller #0 PREEMPT(full) [ 236.673138][T12408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 236.673149][T12408] Call Trace: [ 236.673156][T12408] [ 236.673165][T12408] dump_stack_lvl+0xe8/0x150 [ 236.673196][T12408] should_fail_ex+0x410/0x560 [ 236.673229][T12408] _copy_to_user+0x31/0xb0 [ 236.673257][T12408] bpf_verifier_vlog+0x3a2/0x900 [ 236.673292][T12408] bpf_verifier_log_write+0x11d/0x1a0 [ 236.673321][T12408] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 236.673345][T12408] ? __pfx_cmp_instances+0x10/0x10 [ 236.673370][T12408] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 236.673393][T12408] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 236.673424][T12408] bpf_compute_subprog_arg_access+0xa42/0x14d0 [ 236.673449][T12408] ? bpf_tracing_func_proto+0x72/0x180 [ 236.673510][T12408] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 236.673541][T12408] ? __kvmalloc_node_noprof+0x340/0x820 [ 236.673566][T12408] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 236.673590][T12408] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 236.673622][T12408] bpf_compute_live_registers+0x8d3/0x1ff0 [ 236.673667][T12408] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 236.673704][T12408] bpf_check+0x2744/0x2ef0 [ 236.673750][T12408] ? __pfx_bpf_check+0x10/0x10 [ 236.673777][T12408] ? bpf_obj_name_cpy+0x194/0x1e0 [ 236.673801][T12408] bpf_prog_load+0x14d1/0x1c20 [ 236.673839][T12408] ? __pfx_bpf_prog_load+0x10/0x10 [ 236.673891][T12408] __sys_bpf+0xd0d/0xd90 [ 236.673924][T12408] ? __pfx___sys_bpf+0x10/0x10 [ 236.673960][T12408] ? __fget_files+0x2a/0x420 [ 236.673999][T12408] ? ksys_write+0x242/0x270 [ 236.674022][T12408] ? __pfx_ksys_write+0x10/0x10 [ 236.674050][T12408] __x64_sys_bpf+0xba/0xd0 [ 236.674075][T12408] do_syscall_64+0x166/0x520 [ 236.674093][T12408] ? trace_irq_disable+0x3b/0x140 [ 236.674114][T12408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.674133][T12408] ? clear_bhb_loop+0x70/0xc0 [ 236.674156][T12408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.674174][T12408] RIP: 0033:0x7f336979f559 [ 236.674193][T12408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.674208][T12408] RSP: 002b:00007f336a700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.674229][T12408] RAX: ffffffffffffffda RBX: 00007f3369a25fa0 RCX: 00007f336979f559 [ 236.674243][T12408] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 236.674255][T12408] RBP: 00007f336a700090 R08: 0000000000000000 R09: 0000000000000000 [ 236.674266][T12408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.674277][T12408] R13: 00007f3369a26038 R14: 00007f3369a25fa0 R15: 00007ffe5f834198 [ 236.674309][T12408] [ 236.845106][T12406] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.1572'. [ 237.002178][T12406] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 237.044137][T12406] 0ªX¹¦Dö»: entered allmulticast mode [ 237.108779][T12419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1575'. [ 237.110440][T12419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1575'. [ 237.110771][T12419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1575'. [ 237.124301][T12419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1575'. [ 237.124596][T12419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1575'. [ 237.134732][T12419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1575'. [ 237.135112][T12419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1575'. [ 237.135391][T12419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1575'. [ 237.206956][T12413] netlink: 'syz.1.1574': attribute type 1 has an invalid length. [ 237.240480][T12428] netlink: 'syz.4.1577': attribute type 62 has an invalid length. [ 237.263902][T12430] netlink: 'syz.4.1577': attribute type 62 has an invalid length. [ 237.352968][T12413] 8021q: adding VLAN 0 to HW filter on device bond6 [ 237.648531][T12413] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 237.698388][ T6208] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 237.811836][ T6208] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 237.858494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.858890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.097574][T12460] SET target dimension over the limit! [ 238.217245][T12466] ip6tnl0: Caught tx_queue_len zero misconfig [ 238.456823][ T4947] block nbd15: Receive control failed (result -32) [ 238.553391][T12475] FAULT_INJECTION: forcing a failure. [ 238.553391][T12475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.553422][T12475] CPU: 0 UID: 0 PID: 12475 Comm: syz.3.1587 Not tainted syzkaller #0 PREEMPT(full) [ 238.553443][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.553455][T12475] Call Trace: [ 238.553463][T12475] [ 238.553470][T12475] dump_stack_lvl+0xe8/0x150 [ 238.553502][T12475] should_fail_ex+0x410/0x560 [ 238.553534][T12475] _copy_to_user+0x31/0xb0 [ 238.553563][T12475] bpf_verifier_vlog+0x3a2/0x900 [ 238.553597][T12475] bpf_verifier_log_write+0x11d/0x1a0 [ 238.553626][T12475] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 238.553656][T12475] ? bpf_vlog_reset+0x2aa/0x340 [ 238.553680][T12475] bpf_compute_subprog_arg_access+0x9a8/0x14d0 [ 238.553706][T12475] ? bpf_tracing_func_proto+0x72/0x180 [ 238.553756][T12475] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 238.553787][T12475] ? __kvmalloc_node_noprof+0x340/0x820 [ 238.553812][T12475] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 238.553835][T12475] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 238.553867][T12475] bpf_compute_live_registers+0x8d3/0x1ff0 [ 238.553911][T12475] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 238.553946][T12475] bpf_check+0x2744/0x2ef0 [ 238.553987][T12475] ? __pfx_bpf_check+0x10/0x10 [ 238.554013][T12475] ? bpf_obj_name_cpy+0x194/0x1e0 [ 238.554036][T12475] bpf_prog_load+0x14d1/0x1c20 [ 238.554073][T12475] ? __pfx_bpf_prog_load+0x10/0x10 [ 238.554122][T12475] __sys_bpf+0xd0d/0xd90 [ 238.554154][T12475] ? __pfx___sys_bpf+0x10/0x10 [ 238.554188][T12475] ? __fget_files+0x2a/0x420 [ 238.554227][T12475] ? ksys_write+0x242/0x270 [ 238.554259][T12475] ? __pfx_ksys_write+0x10/0x10 [ 238.554287][T12475] __x64_sys_bpf+0xba/0xd0 [ 238.554312][T12475] do_syscall_64+0x166/0x520 [ 238.554330][T12475] ? trace_irq_disable+0x3b/0x140 [ 238.554351][T12475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.554369][T12475] ? clear_bhb_loop+0x70/0xc0 [ 238.554392][T12475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.554409][T12475] RIP: 0033:0x7fd1bc19f559 [ 238.554426][T12475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.554442][T12475] RSP: 002b:00007fd1bcfe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.554461][T12475] RAX: ffffffffffffffda RBX: 00007fd1bc425fa0 RCX: 00007fd1bc19f559 [ 238.554473][T12475] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 238.554483][T12475] RBP: 00007fd1bcfe1090 R08: 0000000000000000 R09: 0000000000000000 [ 238.554500][T12475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 238.554510][T12475] R13: 00007fd1bc426038 R14: 00007fd1bc425fa0 R15: 00007ffdda818168 [ 238.554538][T12475] [ 239.054212][T12486] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 239.088511][T12485] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.442962][T12502] smc: removing ib device rxe0 [ 239.550747][ T6208] RDS/IB: rds_ib_setup_qp failed (-95) [ 239.554032][ T6208] RDS/IB: rds_ib_setup_qp failed (-95) [ 239.554438][ T6208] RDS/IB: rds_ib_setup_qp failed (-95) [ 239.574147][ T1174] RDS/IB: rds_ib_setup_qp failed (-95) [ 239.644597][T12502] smbdirect: ib_dev[rxe0] removed [ 239.714112][T12514] netlink: 'syz.2.1596': attribute type 11 has an invalid length. [ 240.741580][ T4947] block nbd16: Receive control failed (result -32) [ 240.978331][ C1] net_ratelimit: 2 callbacks suppressed [ 240.978367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.978756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.979087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.979418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.521205][T12545] __nla_validate_parse: 46 callbacks suppressed [ 241.521224][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1604'. [ 241.571040][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1604'. [ 241.877392][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1606'. [ 242.069977][T12556] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1608'. [ 242.070320][T12556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1608'. [ 242.360466][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 242.816347][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 243.649320][T12596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1616'. [ 243.654724][T12596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1616'. [ 243.702514][T12599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1615'. [ 244.098229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.098662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.099018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.099375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.376671][ T4947] block nbd17: Receive control failed (result -32) [ 244.486098][T12624] netlink: 'syz.2.1625': attribute type 21 has an invalid length. [ 244.496257][T12624] netlink: 'syz.2.1625': attribute type 1 has an invalid length. [ 244.496318][T12624] nbd: couldn't find device at index 767 [ 244.599641][T12628] netlink: 'syz.0.1627': attribute type 19 has an invalid length. [ 244.825310][T12639] Cannot find del_set index 4 as target [ 244.888923][T12643] batadv_slave_1: entered promiscuous mode [ 244.889048][T12643] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 245.227891][T12660] siw: device registration error -23 [ 245.415987][T12660] bond3: (slave syz_tun): Removing an active aggregator [ 245.429265][T12660] bond3: (slave syz_tun): Releasing backup interface [ 245.492482][T12666] @0Ù: renamed from bond_slave_1 [ 245.525491][T12670] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 245.746315][T12670] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 245.766337][T12670] syzkaller0: entered promiscuous mode [ 245.766377][T12670] syzkaller0: entered allmulticast mode [ 245.772952][ T4947] block nbd18: Receive control failed (result -32) [ 246.490233][ T30] audit: type=1804 audit(1793083985.741:15): pid=12699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1644" name="/newroot/349/cgroup.controllers" dev="tmpfs" ino=1804 res=1 errno=0 [ 246.682650][T12703] __nla_validate_parse: 13 callbacks suppressed [ 246.682670][T12703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1646'. [ 246.815496][T12703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1646'. [ 246.986588][T12713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.986618][T12713] IPv6: NLM_F_CREATE should be set when creating new route [ 246.986687][T12713] IPv6: NLM_F_CREATE should be set when creating new route [ 247.194977][T12726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1651'. [ 247.218262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.218658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.219057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.219417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.308441][T12728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1652'. [ 247.490811][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1654'. [ 247.492048][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1654'. [ 247.545325][T12739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1656'. [ 247.555761][T12728] xt_IDLETIMER: timeout value is zero [ 247.755376][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 247.755445][T12742] ip6gretap0: left allmulticast mode [ 247.755488][T12742] ip6gretap0: left promiscuous mode [ 247.755704][T12742] bridge0: port 1(ip6gretap0) entered disabled state [ 247.808966][T12742] bridge_slave_1: left promiscuous mode [ 247.812679][T12742] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.900233][T12750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 248.165468][T12755] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.295433][T12750] 8021q: VLANs not supported on ip6gre0 [ 248.321628][T12092] udevd[12092]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 248.521568][T12763] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 248.624268][T12773] netlink: 'syz.2.1664': attribute type 3 has an invalid length. [ 248.773687][T12779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1665'. [ 248.867983][T12774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.218194][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.375856][T12801] wg2: Caught tx_queue_len zero misconfig [ 249.466162][T12800] ip_tables: iptables: counters copy to user failed while replacing table [ 249.795200][T12800] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.796079][T12800] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.982261][T12800] batman_adv: batadv0: Interface deactivated: veth0 [ 250.338306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.338631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.338980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.537011][T12800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.574592][T12800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.803875][T12800] veth0_to_bridge: left allmulticast mode [ 250.872755][T12800] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 251.009414][ T6208] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.009505][ T6208] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.009571][ T6208] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.009633][ T6208] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.809914][T12875] sch_fq: defrate 8 ignored. [ 251.827421][T12868] SET target dimension over the limit! [ 251.849989][T12868] __nla_validate_parse: 2 callbacks suppressed [ 251.850008][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1681'. [ 251.930683][T12879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1683'. [ 252.237167][T12888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1686'. [ 252.730934][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1690'. [ 253.422786][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 253.458303][ C1] net_ratelimit: 1 callbacks suppressed [ 253.458341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.458753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.459144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.459506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.459847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.562696][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 253.562733][T12945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1696'. [ 254.042814][T12956] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.1699'. [ 254.112583][T12958] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 254.116841][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 254.225653][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1700'. [ 254.228838][T12967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 255.626000][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.981125][ T30] audit: type=1800 audit(1793083995.231:16): pid=13019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1715" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1802 res=0 errno=-22 [ 256.658021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.658237][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.658451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.837501][T13058] netlink: 'syz.4.1723': attribute type 1 has an invalid length. [ 256.915105][T13058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.962929][T13058] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 256.974786][T13058] __nla_validate_parse: 7 callbacks suppressed [ 256.974804][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1723'. [ 257.014745][T13058] bridge0: entered promiscuous mode [ 257.561822][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 257.696384][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 257.784750][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 257.819184][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 257.861025][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 257.921301][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 258.013255][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 258.133313][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 258.251177][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 258.839084][T13118] syzkaller0: entered promiscuous mode [ 258.839104][T13118] syzkaller0: entered allmulticast mode [ 259.293912][T13136] netlink: 'syz.1.1745': attribute type 3 has an invalid length. [ 259.778091][ C1] net_ratelimit: 2 callbacks suppressed [ 259.778124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.778434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.778790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.085912][T13150] sit1: entered allmulticast mode [ 260.209317][T13158] syzkaller0: entered promiscuous mode [ 260.209343][T13158] syzkaller0: entered allmulticast mode [ 260.480692][T13172] bridge0: port 1(bond0) entered blocking state [ 260.485571][T13172] bridge0: port 1(bond0) entered disabled state [ 260.485878][T13172] bond0: entered allmulticast mode [ 260.485909][T13172] bond_slave_0: entered allmulticast mode [ 260.486001][T13172] bond_slave_1: entered allmulticast mode [ 260.563183][ T5769] bond_slave_0: entered promiscuous mode [ 260.563246][ T5769] bond_slave_1: entered promiscuous mode [ 260.749335][T13184] netlink: 'syz.2.1757': attribute type 1 has an invalid length. [ 262.219796][T13241] __nla_validate_parse: 9 callbacks suppressed [ 262.219815][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 262.496975][T13255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1772'. [ 262.735950][T13264] ip_tables: iptables: counters copy to user failed while replacing table [ 262.737595][T13264] ip_tables: iptables: counters copy to user failed while replacing table [ 262.779054][T13265] ip_tables: iptables: counters copy to user failed while replacing table [ 262.795406][T13268] ip_tables: iptables: counters copy to user failed while replacing table [ 263.361368][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 263.365221][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 263.365504][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 263.368729][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 263.369132][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 263.369321][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 263.461573][T13284] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1779'. [ 263.461609][T13284] netlink: 'syz.0.1779': attribute type 8 has an invalid length. [ 263.494642][T13284] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 263.494669][T13284] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 264.370160][ T6383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.370183][ T6383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.497955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.498167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.498384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.646205][T13333] syzkaller0: entered promiscuous mode [ 264.646226][T13333] syzkaller0: entered allmulticast mode [ 265.089990][T13343] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 265.248200][T13366] netlink: 'syz.3.1804': attribute type 12 has an invalid length. [ 265.251561][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1804'. [ 265.563474][T13372] netlink: 'syz.1.1805': attribute type 1 has an invalid length. [ 265.634347][T13380] ip_tables: iptables: counters copy to user failed while replacing table [ 265.763924][T13375] syzkaller1: entered promiscuous mode [ 265.763950][T13375] syzkaller1: entered allmulticast mode [ 266.009696][T13394] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 266.011068][T13394] netlink: 'syz.1.1811': attribute type 3 has an invalid length. [ 266.135614][T13398] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 266.135902][T13398] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 266.136167][T13398] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 266.136587][T13398] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 266.136814][T13398] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 266.383490][T13413] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 266.383490][T13413] Please contact the netfilter-devel mailing list or update your nftables rules. [ 266.545237][T13413] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 266.691990][T13412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.696794][T13412] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.717473][T13412] batadv0: left promiscuous mode [ 266.725634][T13412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.749533][T13412] batman_adv: batadv0: Interface activated: veth0 [ 266.813815][T13412] veth0_to_bridge: left promiscuous mode [ 266.850482][T13412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.857076][T13412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.887300][T13412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.887327][T13412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.918722][T13412] veth1_vlan: left promiscuous mode [ 266.925051][T13412] vlan0: left promiscuous mode [ 266.939463][T13412] veth1_vlan: entered promiscuous mode [ 266.946603][T13412] veth1_macvtap: left promiscuous mode [ 266.961049][T13412] veth0_macvtap: left promiscuous mode [ 266.962547][T13412] veth0_macvtap: entered promiscuous mode [ 266.964543][T13412] veth1_macvtap: entered promiscuous mode [ 266.997106][T13412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.009615][T13412] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.015229][T13412] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.034315][T13412] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.076695][T13412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.109277][T13412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.119846][T13412] bridge0: port 3(vlan2) entered blocking state [ 267.120054][T13412] bridge0: port 3(vlan2) entered forwarding state [ 267.131713][T13412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.151050][T13412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.155507][T13412] veth0_to_bridge: entered promiscuous mode [ 267.155532][T13412] veth0_to_bridge: entered allmulticast mode [ 267.233573][T13412] batman_adv: batadv0: Interface activated: ip6gretap2 [ 267.234719][T13412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.295156][T13412] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 267.300974][ T6205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.301063][ T6205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.301129][ T6205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.301195][ T6205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.369579][T13421] lo: entered promiscuous mode [ 267.369766][T13421] tunl0: entered promiscuous mode [ 267.369919][T13421] gre0: entered promiscuous mode [ 267.370036][T13421] gretap0: entered promiscuous mode [ 267.370150][T13421] erspan0: entered promiscuous mode [ 267.370273][T13421] ip_vti0: entered promiscuous mode [ 267.370418][T13421] ip6_vti0: entered promiscuous mode [ 267.370530][T13421] sit0: entered promiscuous mode [ 267.370732][T13421] ip6tnl0: entered promiscuous mode [ 267.370846][T13421] ip6gre0: entered promiscuous mode [ 267.370958][T13421] vcan0: entered promiscuous mode [ 267.372021][T13421] dummy0: entered promiscuous mode [ 267.372182][T13421] nlmon0: entered promiscuous mode [ 267.372702][T13421] vxcan0: entered promiscuous mode [ 267.372895][T13421] vxcan1: entered promiscuous mode [ 267.373048][T13421] veth0: entered promiscuous mode [ 267.373194][T13421] veth1: entered promiscuous mode [ 267.375658][T13421] wg0: entered promiscuous mode [ 267.375823][T13421] wg2: entered promiscuous mode [ 267.375982][T13421] veth0_to_bridge: entered promiscuous mode [ 267.376128][T13421] bridge_slave_0: entered promiscuous mode [ 267.376277][T13421] veth1_to_bridge: entered promiscuous mode [ 267.376420][T13421] bridge_slave_1: entered promiscuous mode [ 267.378150][T13421] veth0_to_bond: entered promiscuous mode [ 267.378485][T13421] veth1_to_bond: entered promiscuous mode [ 267.378799][T13421] veth0_to_team: entered promiscuous mode [ 267.412031][T13421] team_slave_0: entered promiscuous mode [ 267.412188][T13421] veth1_to_team: entered promiscuous mode [ 267.412347][T13421] team_slave_1: entered promiscuous mode [ 267.505222][T13421] veth0_to_batadv: entered promiscuous mode [ 267.505390][T13421] batadv_slave_0: entered promiscuous mode [ 267.505535][T13421] veth1_to_batadv: entered promiscuous mode [ 267.505677][T13421] batadv_slave_1: entered promiscuous mode [ 267.505825][T13421] xfrm0: entered promiscuous mode [ 267.523417][T13421] veth0_to_hsr: entered promiscuous mode [ 267.524026][T13421] veth1_to_hsr: entered promiscuous mode [ 267.524558][T13421] hsr0: entered promiscuous mode [ 267.524848][T13421] veth1_virt_wifi: entered promiscuous mode [ 267.525113][T13421] veth0_virt_wifi: entered promiscuous mode [ 267.536572][T13421] vlan0: entered promiscuous mode [ 267.537160][T13421] vlan1: entered promiscuous mode [ 267.544967][T13421] macvlan1: entered promiscuous mode [ 267.554472][T13421] ipvlan0: entered promiscuous mode [ 267.554891][T13421] ipvlan1: entered promiscuous mode [ 267.555162][T13421] geneve0: entered promiscuous mode [ 267.555454][T13421] geneve1: entered promiscuous mode [ 267.555748][T13421] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 267.556044][T13421] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 267.556277][T13421] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 267.556505][T13421] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 267.572268][T13421] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 267.681225][T13421] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 267.703527][T13421] @: entered promiscuous mode [ 267.703678][T13421] gtp0: entered promiscuous mode [ 267.703978][T13421] ip6tnl1: entered promiscuous mode [ 267.704093][T13421] bond3: entered promiscuous mode [ 267.704209][T13421] n: entered promiscuous mode [ 267.704317][T13421] vxlan0: entered promiscuous mode [ 267.704463][T13421] veth2: entered promiscuous mode [ 267.704609][T13421] veth3: entered promiscuous mode [ 267.704758][T13421] veth4: entered promiscuous mode [ 267.704895][T13421] veth5: entered promiscuous mode [ 267.705064][T13421] bridge2: entered promiscuous mode [ 267.705182][T13421] macvlan2: entered promiscuous mode [ 267.705335][T13421] ipip0: entered promiscuous mode [ 267.705433][T13421] veth6: entered promiscuous mode [ 267.705569][T13421] veth7: entered promiscuous mode [ 267.705731][T13421] : entered promiscuous mode [ 267.706252][T13421] mac80211_hwsim hwsim22 wlan2: entered promiscuous mode [ 267.706481][T13421] sit1: entered promiscuous mode [ 267.773038][T13430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.773575][T13428] ip_tables: iptables: counters copy to user failed while replacing table [ 267.849782][T13421] bridge0: entered promiscuous mode [ 267.850310][T13421] dvmrp6: entered promiscuous mode [ 267.855284][T13421] syztnl2: entered promiscuous mode [ 267.876743][T13421] bridge3: entered promiscuous mode [ 267.891998][T13421] bond5: entered promiscuous mode [ 267.892946][T13421] veth8: entered promiscuous mode [ 267.895558][T13421] veth9: entered promiscuous mode [ 267.904202][T13421] bridge4: entered promiscuous mode [ 267.915382][T13421] bond6: entered promiscuous mode [ 267.921017][T13421] veth10: entered promiscuous mode [ 267.925456][T13421] veth11: entered promiscuous mode [ 267.931590][T13421] gre1: entered promiscuous mode [ 267.932092][T13421] ip6gre2: entered promiscuous mode [ 267.950217][T13421] vlan2: entered promiscuous mode [ 267.950511][T13421] vxlan1: entered promiscuous mode [ 267.950636][T13421] veth12: entered promiscuous mode [ 267.952588][T13421] veth13: entered promiscuous mode [ 267.952715][T13421] mac80211_hwsim hwsim26 wlan3: entered promiscuous mode [ 267.952886][T13421] bridge5: entered promiscuous mode [ 267.984328][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.984443][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.014194][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.014333][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.835229][T13469] __nla_validate_parse: 6 callbacks suppressed [ 268.835277][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1829'. [ 268.894469][T13472] netlink: 'syz.2.1830': attribute type 11 has an invalid length. [ 269.146982][T13481] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1832'. [ 269.537479][T13501] validate_nla: 60 callbacks suppressed [ 269.537501][T13501] netlink: 'syz.4.1836': attribute type 1 has an invalid length. [ 269.618065][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.618416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.618727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.622583][T13501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.676037][T13501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.738220][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 269.874201][T13504] bond2: (slave geneve4): making interface the new active one [ 269.905433][T13504] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 270.008688][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.008722][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.024311][ T1174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.024344][ T1174] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.029618][ T6208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 270.029663][ T6208] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.646794][T13544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1841'. [ 270.883637][T13548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.912841][T13556] netlink: 'syz.1.1845': attribute type 1 has an invalid length. [ 270.919090][T13548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.010361][T13548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.017266][T13548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.042833][T13548] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 271.131848][T13568] netlink: 'syz.4.1846': attribute type 12 has an invalid length. [ 271.227165][T13553] veth5: entered allmulticast mode [ 271.241769][T13553] bond7: (slave veth5): Enslaving as an active interface with a down link [ 271.253256][T13556] veth0_to_bond: left allmulticast mode [ 271.305772][T13556] bond7: (slave veth0_to_bond): making interface the new active one [ 271.317204][T13556] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 271.334308][T13561] macvlan2: entered promiscuous mode [ 271.334370][T13561] macvlan2: entered allmulticast mode [ 271.335654][T13561] bond7: entered promiscuous mode [ 271.335690][T13561] veth0_to_bond: entered promiscuous mode [ 271.337494][T13561] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.351614][T13561] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 271.383190][T13561] bond7: left promiscuous mode [ 271.383215][T13561] veth0_to_bond: left promiscuous mode [ 271.764629][T13591] xt_hl: Unknown TTL match mode: 237 [ 271.976516][T13585] netlink: 'syz.4.1852': attribute type 21 has an invalid length. [ 272.384883][T13594] bridge0: port 3(vlan2) entered disabled state [ 272.385334][T13594] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.386005][T13594] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.401313][T13594] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 272.401389][T13591] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1855'. [ 272.411883][T13585] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1852'. [ 272.411925][T13585] netlink: 'syz.4.1852': attribute type 1 has an invalid length. [ 272.475026][T13597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1856'. [ 272.494496][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1856'. [ 272.494556][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1856'. [ 272.681292][T13603] syzkaller0: entered promiscuous mode [ 272.681316][T13603] syzkaller0: entered allmulticast mode [ 273.259720][T13636] netlink: 'syz.2.1864': attribute type 11 has an invalid length. [ 273.427628][T13644] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 273.514034][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 273.968916][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 274.163223][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805473f000: rx timeout, send abort [ 274.317034][T13667] ip_tables: iptables: counters copy to user failed while replacing table [ 274.465338][T13672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1874'. [ 274.636251][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 274.663276][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805473f000: abort rx timeout. Force session deactivation [ 274.902965][T13511] udevd[13511]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 274.978464][T13686] batadv_slave_1: entered promiscuous mode [ 274.978591][T13686] macsec2: entered allmulticast mode [ 274.978604][T13686] batadv_slave_1: entered allmulticast mode [ 275.379773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.380157][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.380483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.580495][T13714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1887'. [ 275.715918][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1889'. [ 275.866271][T13726] netlink: 'syz.1.1891': attribute type 1 has an invalid length. [ 275.935147][T13732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1891'. [ 275.965677][T13734] bond7: (slave veth0_to_bond): Releasing active interface [ 275.990995][T13734] bond8: (slave veth0_to_bond): making interface the new active one [ 275.995233][T13734] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 276.014799][T13732] 8021q: adding VLAN 0 to HW filter on device bond8 [ 276.037301][ T6383] bond8: (slave veth0_to_bond): link status definitely down, disabling slave [ 276.047603][ T6383] bond8: now running without any active interface! [ 276.805483][T13761] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 276.955513][T13765] syzkaller0: entered promiscuous mode [ 276.955536][T13765] syzkaller0: entered allmulticast mode [ 277.091270][T13773] bond7: (slave vlan3): Error -34 calling dev_set_mtu [ 277.140377][T13777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1906'. [ 277.197299][T13773] tipc: Enabled bearer , priority 0 [ 277.788422][T13763] tipc: Resetting bearer [ 277.863685][T13763] tipc: Disabling bearer [ 277.915089][T13803] tipc: Enabled bearer , priority 0 [ 277.977461][T13791] tipc: Disabling bearer [ 278.163266][T13765] infiniband syz0: set active [ 278.163444][T13765] infiniband syz0: added bond0 [ 278.197065][T13765] infiniband syz0: Couldn't open port 1 [ 278.208308][T13765] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 278.208345][T13765] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 278.208383][T13765] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 278.409282][T13819] xt_hashlimit: size too large, truncated to 1048576 [ 278.473263][T13816] xt_hashlimit: size too large, truncated to 1048576 [ 278.596152][T13765] RDS/IB: syz0: added [ 278.596212][T13765] smc: adding ib device syz0 with port count 1 [ 278.596232][T13765] smc: ib device syz0 port 1 has no pnetid [ 278.767590][T13825] openvswitch: netlink: Duplicate key (type 16). [ 278.913300][T13830] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1913'. [ 278.932872][T13833] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1914'. [ 278.967647][T13830] syzkaller0: entered promiscuous mode [ 278.967668][T13830] syzkaller0: entered allmulticast mode [ 278.992836][T13830] tipc: Enabled bearer , priority 0 [ 279.011794][T13830] tipc: Resetting bearer [ 279.029779][T13827] tipc: Resetting bearer [ 279.073661][T13827] tipc: Disabling bearer [ 279.337394][T13838] 0ªX¹¦Dö»: left allmulticast mode [ 279.377978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.378468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.385044][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1916'. [ 279.385071][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'. [ 279.385084][T13842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1916'. [ 279.559353][T13853] netlink: 'syz.4.1919': attribute type 10 has an invalid length. [ 279.784164][ T43] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 280.511522][T13881] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1924'. [ 280.791802][T13884] syzkaller0: entered promiscuous mode [ 280.791872][T13884] syzkaller0: entered allmulticast mode [ 281.181230][T13890] netlink: 'syz.2.1927': attribute type 5 has an invalid length. [ 281.516933][T13896] netlink: 'syz.1.1929': attribute type 1 has an invalid length. [ 281.772868][T13904] netlink: 'syz.1.1931': attribute type 1 has an invalid length. [ 281.799242][T13905] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 281.799281][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 282.499063][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.591098][T13860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.810218][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'. [ 282.858810][T13914] 8021q: adding VLAN 0 to HW filter on device bond9 [ 282.924387][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 283.087595][T13931] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1939'. [ 283.113672][T13931] lo: left promiscuous mode [ 283.412588][T13958] netlink: 'syz.0.1945': attribute type 1 has an invalid length. [ 283.412608][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 283.423655][T13958] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1945'. [ 283.698109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.698512][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.876004][T13968] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 283.880941][T13969] xt_policy: neither incoming nor outgoing policy selected [ 283.916301][T13968] ip6gre0: left promiscuous mode [ 283.971324][T13971] netlink: 'syz.1.1950': attribute type 2 has an invalid length. [ 284.131838][T13971] !;: entered promiscuous mode [ 284.359354][T13991] vlan2: entered promiscuous mode [ 284.457112][T14001] netlink: 'syz.4.1957': attribute type 1 has an invalid length. [ 284.457172][T14001] __nla_validate_parse: 3 callbacks suppressed [ 284.457203][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1957'. [ 284.492987][T14003] tipc: Failed to remove unknown binding: 66,0,0/0:4207686961/4207686962 [ 284.493244][T14003] tipc: Failed to remove unknown binding: 66,0,0/0:4207686961/4207686962 [ 286.898175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.898419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.898613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.273388][T13984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.481185][T14018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1964'. [ 287.501468][T14018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1964'. [ 287.942259][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1969'. [ 287.988156][T14039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1969'. [ 288.149871][T14052] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 288.226666][T14052] bond9: entered promiscuous mode [ 288.232428][T14052] 8021q: adding VLAN 0 to HW filter on device bond9 [ 288.279876][T14060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1978'. [ 288.326995][T14058] netlink: 'syz.3.1975': attribute type 1 has an invalid length. [ 288.327033][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 288.375990][T14056] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 288.376048][T14056] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 288.376112][T14056] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 288.750569][T14068] netlink: 'syz.3.1980': attribute type 16 has an invalid length. [ 288.750625][T14068] netlink: 'syz.3.1980': attribute type 17 has an invalid length. [ 288.891967][T14068] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.892164][T14068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.947504][T14068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.957232][T14068] dummy0: left promiscuous mode [ 289.012024][T14076] openvswitch: netlink: IP tunnel dst address not specified [ 289.175062][T14068] vlan0: left promiscuous mode [ 289.220257][T14068] bond1: left promiscuous mode [ 289.220595][T14068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.225095][T14068] vxlan0: left promiscuous mode [ 289.225114][T14068] vxlan0: left allmulticast mode [ 289.227615][T14068] vxlan1: left promiscuous mode [ 289.227632][T14068] vxlan1: left allmulticast mode [ 289.261064][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.261157][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.261216][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.263389][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.263452][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.263516][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.330287][T14068] gtp0: left promiscuous mode [ 289.330308][T14068] gtp0: left allmulticast mode [ 289.352049][T14068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.371295][T14068] ip6erspan0: left allmulticast mode [ 289.377498][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.377756][ T6386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.463522][T14087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1987'. [ 289.505957][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1983'. [ 289.595660][T14076] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1984'. [ 289.615588][T14090] netlink: 'syz.0.1986': attribute type 12 has an invalid length. [ 289.733711][T14094] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 289.733734][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1990'. [ 290.095536][T14100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1993'. [ 290.163739][T14106] veth13: entered allmulticast mode [ 290.291302][T14111] netlink: 'syz.2.1994': attribute type 1 has an invalid length. [ 290.345499][T14110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1995'. [ 290.347172][T14120] geneve1: entered promiscuous mode [ 290.350026][ T6210] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 290.374136][ T6210] bond2: (slave veth5): making interface the new active one [ 290.399626][T14122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'. [ 290.400913][ T6210] bond2: active interface up! [ 290.409886][ T6383] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 290.418602][ T6383] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 290.428803][ T5748] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 290.435313][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'. [ 290.469267][ T5769] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 290.586277][ T6210] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.586717][ T6210] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.609155][ T5748] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 290.687548][T14131] ip6tnl4: entered promiscuous mode [ 290.687570][T14131] ip6tnl4: entered allmulticast mode [ 290.723754][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'. [ 290.863063][T14141] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 290.863104][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2002'. [ 291.008965][T14145] 8021q: adding VLAN 0 to HW filter on device bond10 [ 291.126327][T14145] macvtap0: entered allmulticast mode [ 291.163147][T14145] bond10: (slave sit1): refused to change device type [ 291.298322][ T5769] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 291.366465][T14165] netlink: 'syz.2.2008': attribute type 4 has an invalid length. [ 291.382014][ T5769] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.461735][ T5748] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 292.086624][T14188] IPVS: length: 94 != 24 [ 292.086654][T14188] IPVS: length: 94 != 24 [ 292.086676][T14188] IPVS: length: 94 != 24 [ 292.086696][T14188] IPVS: length: 94 != 24 [ 292.086716][T14188] IPVS: length: 94 != 24 [ 292.086735][T14188] IPVS: length: 94 != 24 [ 292.086755][T14188] IPVS: length: 94 != 24 [ 292.086775][T14188] IPVS: length: 94 != 24 [ 292.086805][T14188] IPVS: length: 94 != 24 [ 292.086824][T14188] IPVS: length: 94 != 24 [ 292.086844][T14188] IPVS: length: 94 != 24 [ 292.086864][T14188] IPVS: length: 94 != 24 [ 292.086884][T14188] IPVS: length: 94 != 24 [ 292.086904][T14188] IPVS: length: 94 != 24 [ 292.086923][T14188] IPVS: length: 94 != 24 [ 292.086943][T14188] IPVS: length: 94 != 24 [ 292.086962][T14188] IPVS: length: 94 != 24 [ 292.086982][T14188] IPVS: length: 94 != 24 [ 292.087000][T14188] IPVS: length: 94 != 24 [ 292.087020][T14188] IPVS: length: 94 != 24 [ 292.087040][T14188] IPVS: length: 94 != 24 [ 292.087059][T14188] IPVS: length: 94 != 24 [ 292.087078][T14188] IPVS: length: 94 != 24 [ 292.087110][T14188] IPVS: length: 94 != 24 [ 292.087130][T14188] IPVS: length: 94 != 24 [ 292.087149][T14188] IPVS: length: 94 != 24 [ 292.087169][T14188] IPVS: length: 94 != 24 [ 292.087187][T14188] IPVS: length: 94 != 24 [ 292.087207][T14188] IPVS: length: 94 != 24 [ 292.087226][T14188] IPVS: length: 94 != 24 [ 292.087244][T14188] IPVS: length: 94 != 24 [ 292.087263][T14188] IPVS: length: 94 != 24 [ 292.087282][T14188] IPVS: length: 94 != 24 [ 292.087300][T14188] IPVS: length: 94 != 24 [ 292.087319][T14188] IPVS: length: 94 != 24 [ 292.087366][T14188] IPVS: length: 94 != 24 [ 292.087386][T14188] IPVS: length: 94 != 24 [ 292.087405][T14188] IPVS: length: 94 != 24 [ 292.087424][T14188] IPVS: length: 94 != 24 [ 292.087444][T14188] IPVS: length: 94 != 24 [ 292.087462][T14188] IPVS: length: 94 != 24 [ 292.087482][T14188] IPVS: length: 94 != 24 [ 292.087501][T14188] IPVS: length: 94 != 24 [ 292.087520][T14188] IPVS: length: 94 != 24 [ 292.087539][T14188] IPVS: length: 94 != 24 [ 292.087558][T14188] IPVS: length: 94 != 24 [ 292.087577][T14188] IPVS: length: 94 != 24 [ 292.087596][T14188] IPVS: length: 94 != 24 [ 292.087615][T14188] IPVS: length: 94 != 24 [ 292.087633][T14188] IPVS: length: 94 != 24 [ 292.087652][T14188] IPVS: length: 94 != 24 [ 292.087671][T14188] IPVS: length: 94 != 24 [ 292.087691][T14188] IPVS: length: 94 != 24 [ 292.102304][ C0] net_ratelimit: 8 callbacks suppressed [ 292.102321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.102579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.102795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.103012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.103682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.331629][T14188] IPVS: length: 94 != 24 [ 292.331687][T14188] IPVS: length: 94 != 24 [ 292.331724][T14188] IPVS: length: 94 != 24 [ 292.331762][T14188] IPVS: length: 94 != 24 [ 292.331798][T14188] IPVS: length: 94 != 24 [ 292.331850][T14188] IPVS: length: 94 != 24 [ 292.331886][T14188] IPVS: length: 94 != 24 [ 292.331923][T14188] IPVS: length: 94 != 24 [ 292.341125][T14188] IPVS: length: 94 != 24 [ 292.341168][T14188] IPVS: length: 94 != 24 [ 292.341220][T14188] IPVS: length: 94 != 24 [ 292.341257][T14188] IPVS: length: 94 != 24 [ 292.360500][T14194] netlink: 'syz.2.2015': attribute type 1 has an invalid length. [ 292.601905][T14198] Cannot find map_set index 2 as target [ 292.748315][T14207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.748947][T14207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.749356][T14207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.749625][T14207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.749883][T14207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.080576][T14245] __nla_validate_parse: 10 callbacks suppressed [ 296.080621][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2028'. [ 296.174751][T14250] netlink: 'syz.0.2029': attribute type 1 has an invalid length. [ 296.174803][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 296.236766][T14260] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2033'. [ 296.258330][T14260] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.399282][T14247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.438538][T14247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.438562][T14247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.447436][T14247] geneve1: left promiscuous mode [ 296.477772][T14247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.478895][T14247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 296.480202][T14247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 296.481357][T14247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.486741][T14247] bridge1: left promiscuous mode [ 296.495025][T14272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2034'. [ 296.541614][T14247] geneve2: left promiscuous mode [ 296.547588][T14247] gretap2: left promiscuous mode [ 296.571588][T14247] bridge0: left promiscuous mode [ 296.572889][T14247] bridge0: entered promiscuous mode [ 296.928734][T14261] batman_adv: batadv0: Interface deactivated: veth0 [ 296.985211][T14261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.997854][T14261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.148586][T14261] veth0_to_bridge: left allmulticast mode [ 297.274539][T14261] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 297.335675][T14261] batadv_slave_1: left allmulticast mode [ 297.521253][ T6386] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.523128][ T6386] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 297.523144][ T6386] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 297.558590][ T6386] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.558911][ T6386] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.558944][ T6386] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.558977][ T6386] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.559007][ T6386] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.559037][ T6386] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.725512][T14289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2040'. [ 297.981513][T14306] veth0_to_team: Caught tx_queue_len zero misconfig [ 298.085615][T14291] syzkaller1: entered promiscuous mode [ 298.085636][T14291] syzkaller1: entered allmulticast mode [ 298.285209][T14313] netlink: 'syz.3.2044': attribute type 4 has an invalid length. [ 298.311770][T14313] netlink: 'syz.3.2044': attribute type 4 has an invalid length. [ 298.339408][T10326] net_ratelimit: 10 callbacks suppressed [ 298.339428][T10326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.365052][T14313] tunl0: Caught tx_queue_len zero misconfig [ 298.365441][T14313] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 298.391633][T14315] netlink: 'syz.0.2045': attribute type 1 has an invalid length. [ 298.391653][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'. [ 298.408304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.508258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.633452][T14327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2046'. [ 298.987967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.019545][T14344] Unsupported ieee802154 address type: 0 [ 299.023830][T14345] Unsupported ieee802154 address type: 0 [ 299.230928][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2052'. [ 299.270231][T14352] netlink: 'syz.2.2053': attribute type 1 has an invalid length. [ 299.409908][T14355] veth21: entered allmulticast mode [ 299.426458][T14355] bond11: (slave veth21): Enslaving as an active interface with a down link [ 299.496106][T14352] bond11: (slave veth0_to_bond): making interface the new active one [ 299.508370][T14352] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 299.585396][T14355] macvlan5: entered promiscuous mode [ 299.585436][T14355] macvlan5: entered allmulticast mode [ 299.586720][T14355] bond11: entered promiscuous mode [ 299.586754][T14355] veth0_to_bond: entered promiscuous mode [ 299.600974][T14355] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 299.610337][T14355] bond11: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 299.610536][T14355] bond11: left promiscuous mode [ 299.610567][T14355] veth0_to_bond: left promiscuous mode [ 299.902456][T14365] s: renamed from veth0 (while UP) [ 299.982696][T14367] netlink: 'syz.0.2058': attribute type 1 has an invalid length. [ 299.982737][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2058'. [ 300.016015][T14367] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2058'. [ 300.346089][T14384] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 301.063416][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.063668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.064098][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.064826][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.066419][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.251619][T14419] netlink: 'syz.2.2073': attribute type 1 has an invalid length. [ 301.251644][T14419] __nla_validate_parse: 2 callbacks suppressed [ 301.251655][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 301.254370][T14419] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2073'. [ 301.313259][T14418] macsec1: entered allmulticast mode [ 301.313284][T14418] vlan1: entered allmulticast mode [ 301.313297][T14418] veth0_vlan: entered allmulticast mode [ 301.398366][T14423] atomic_op ffff88802aa591e0 conn xmit_atomic 0000000000000000 [ 301.430628][T14426] netlink: 'syz.0.2074': attribute type 1 has an invalid length. [ 301.457952][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 301.531751][T14424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2072'. [ 301.651222][T14430] netlink: 'syz.4.2072': attribute type 27 has an invalid length. [ 301.675319][T14439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2077'. [ 301.746981][T14430] bridge_slave_1: left allmulticast mode [ 301.770624][T14430] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 301.794717][T14430] geneve2: left allmulticast mode [ 301.806721][T14430] veth5: left allmulticast mode [ 301.814346][T14445] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 302.147419][T14468] netlink: 'syz.2.2082': attribute type 1 has an invalid length. [ 302.159442][T14465] sctp: [Deprecated]: syz.1.2083 (pid 14465) Use of int in max_burst socket option. [ 302.159442][T14465] Use struct sctp_assoc_value instead [ 302.178297][T14474] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 302.263637][T14478] netlink: 'syz.1.2083': attribute type 1 has an invalid length. [ 302.596374][T14495] netlink: 'syz.2.2085': attribute type 1 has an invalid length. [ 302.596411][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 302.664078][ T6386] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 302.664566][ T6386] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 302.690556][ T5904] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 302.978368][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 303.037083][T14505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.038732][T14505] bridge0: port 1(bond3) entered blocking state [ 303.038962][T14505] bridge0: port 1(bond3) entered disabled state [ 303.039382][T14505] bond3: entered allmulticast mode [ 303.044163][T14505] bond3: entered promiscuous mode [ 303.046399][T14505] bridge0: port 1(bond3) entered blocking state [ 303.046591][T14505] bridge0: port 1(bond3) entered forwarding state [ 303.132014][T14505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2088'. [ 303.268172][ T9403] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 303.698338][ T9403] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 303.700791][ T6210] bridge0: port 1(bond3) entered disabled state [ 304.098698][ T973] net_ratelimit: 2 callbacks suppressed [ 304.098717][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.258628][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 304.680517][T14441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.680810][T14454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2076'. [ 304.933385][T14513] netlink: zone id is out of range [ 304.933400][T14513] netlink: zone id is out of range [ 304.933408][T14513] netlink: zone id is out of range [ 304.933427][T14513] netlink: zone id is out of range [ 304.933435][T14513] netlink: zone id is out of range [ 304.933441][T14513] netlink: zone id is out of range [ 304.934551][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 304.963980][T14523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2090'. [ 305.025661][T14522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2093'. [ 306.325878][T14565] rdma_rxe: rxe_newlink: failed to add lo [ 306.613954][T14577] __nla_validate_parse: 2 callbacks suppressed [ 306.613974][T14577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2104'. [ 306.721475][T14572] syz_tun: entered allmulticast mode [ 306.824388][ T6212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.824788][ T6212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.824948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.840124][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 306.903286][T14589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2105'. [ 306.934595][T14577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2104'. [ 307.169401][T14596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2106'. [ 307.169433][T14596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2106'. [ 307.253087][ T4947] block nbd19: Receive control failed (result -107) [ 307.270864][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2107'. [ 307.332619][T14577] bond1: left promiscuous mode [ 307.370317][T14577] geneve2: left promiscuous mode [ 307.381092][T14577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.442802][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2107'. [ 307.483640][T14577] veth0_to_team: entered promiscuous mode [ 307.502143][T14577] macsec0: entered allmulticast mode [ 307.502163][T14577] veth1_macvtap: entered allmulticast mode [ 307.502201][T14577] macsec0: entered promiscuous mode [ 307.503905][T14577] macsec1: left promiscuous mode [ 307.503922][T14577] macsec0: left promiscuous mode [ 307.540169][T14577] ip6gre2: left promiscuous mode [ 307.555619][T14567] syz_tun: left allmulticast mode [ 307.878071][T14630] netlink: 'syz.1.2112': attribute type 1 has an invalid length. [ 307.989877][T14630] bond11: entered promiscuous mode [ 307.990349][T14630] 8021q: adding VLAN 0 to HW filter on device bond11 [ 308.904082][T14636] 8021q: adding VLAN 0 to HW filter on device bond11 [ 308.911809][T14636] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 308.911848][T14636] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 308.937339][T14636] bond11: (slave ip6gre2): making interface the new active one [ 308.937378][T14636] ip6gre2: entered promiscuous mode [ 308.953666][T14636] bond11: (slave ip6gre2): Enslaving as an active interface with an up link [ 309.014999][T14667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2118'. [ 309.227233][T14670] syzkaller0: entered promiscuous mode [ 309.227256][T14670] syzkaller0: entered allmulticast mode [ 309.265420][ T6383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.265459][ T6383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.851244][T14709] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2123'. [ 309.938622][T10326] net_ratelimit: 63 callbacks suppressed [ 309.938674][T10326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.004797][T14711] netlink: 'syz.0.2124': attribute type 1 has an invalid length. [ 310.004856][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2124'. [ 310.475865][T14722] bridge0: port 4(bond0) entered blocking state [ 310.475956][T14722] bridge0: port 4(bond0) entered disabled state [ 310.476112][T14722] bond0: entered allmulticast mode [ 310.476129][T14722] bond_slave_0: entered allmulticast mode [ 310.476147][T14722] bond_slave_1: entered allmulticast mode [ 310.522123][T14722] bond0: entered promiscuous mode [ 310.522146][T14722] bond_slave_0: entered promiscuous mode [ 310.538180][T14722] bond_slave_1: entered promiscuous mode [ 310.546558][T14722] bridge0: port 4(bond0) entered blocking state [ 310.546796][T14722] bridge0: port 4(bond0) entered forwarding state [ 310.614389][T14730] syzkaller0: entered promiscuous mode [ 310.614426][T14730] syzkaller0: entered allmulticast mode [ 310.855443][T14742] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.898872][T14715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.042131][T14718] bond4: (slave geneve5): Enslaving as an active interface with an up link [ 313.458079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.814168][T14740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.689773][T14794] __nla_validate_parse: 2 callbacks suppressed [ 314.689792][T14794] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2138'. [ 314.993706][T14807] ip_tables: iptables: counters copy to user failed while replacing table [ 315.153243][T14816] geneve2: entered promiscuous mode [ 315.339873][ T6206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 52772 - 0 [ 315.340310][ T6206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 52772 - 0 [ 315.340362][ T6206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 52772 - 0 [ 315.340397][ T6206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 52772 - 0 [ 315.565658][T14836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2149'. [ 315.778197][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 315.996935][T14857] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2151'. [ 316.018053][T10326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.080412][T14865] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2157'. [ 316.097599][T14863] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2154'. [ 316.323813][T14877] bond8: option arp_all_targets: invalid value (3) [ 316.520017][T14877] bond8 (unregistering): Released all slaves [ 316.572431][T14883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.759540][T14882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2161'. [ 316.760785][T14899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. [ 316.760807][T14899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2163'. [ 316.760823][T14899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. [ 316.954972][T14904] netlink: 'syz.1.2164': attribute type 4 has an invalid length. [ 317.083299][T14909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.083595][T14909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.083798][T14909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.083982][T14909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.086172][T14909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.086381][T14909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.086571][T14909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.675061][T14931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'. [ 319.127275][T14992] syzkaller0: entered promiscuous mode [ 319.127310][T14992] syzkaller0: entered allmulticast mode [ 319.185546][T14992] netlink: 'syz.1.2185': attribute type 1 has an invalid length. [ 319.618141][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 320.069042][T15012] __nla_validate_parse: 2 callbacks suppressed [ 320.069093][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2189'. [ 320.145840][T15014] netlink: 'syz.1.2190': attribute type 1 has an invalid length. [ 320.283451][T15014] bond12: entered promiscuous mode [ 320.283900][T15014] 8021q: adding VLAN 0 to HW filter on device bond12 [ 320.409728][T15018] bond12: (slave bridge8): making interface the new active one [ 320.409765][T15018] bridge8: entered promiscuous mode [ 320.415924][T15018] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 320.558499][T15024] xt_hashlimit: size too large, truncated to 1048576 [ 320.645470][T15021] net_ratelimit: 1020 callbacks suppressed [ 320.645491][T15021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.646142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.999694][T15009] bond12 (unregistering): Released all slaves [ 321.085866][T15040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2195'. [ 321.429969][T15053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2199'. [ 321.522306][T15058] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2199'. [ 321.530086][T15059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2201'. [ 321.543311][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 321.595444][T15060] syzkaller0: entered promiscuous mode [ 321.595466][T15060] syzkaller0: entered allmulticast mode [ 322.101388][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.315606][T15067] syzkaller1: entered promiscuous mode [ 322.315628][T15067] syzkaller1: entered allmulticast mode [ 322.407451][T15083] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 323.458625][ T6206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.458802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.523711][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2219'. [ 323.523836][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2219'. [ 323.523942][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2219'. [ 323.524054][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2219'. [ 323.524162][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2219'. [ 324.345225][T15165] syzkaller0: entered promiscuous mode [ 324.345282][T15165] syzkaller0: entered allmulticast mode [ 325.140008][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.190346][T15201] syzkaller0: entered promiscuous mode [ 325.190369][T15201] syzkaller0: entered allmulticast mode [ 325.514195][T15220] syzkaller0: entered promiscuous mode [ 325.514219][T15220] syzkaller0: entered allmulticast mode [ 325.639725][T15231] syzkaller0: entered promiscuous mode [ 325.639763][T15231] syzkaller0: entered allmulticast mode [ 325.669453][T15231] tipc: Enabled bearer , priority 0 [ 325.698491][T15231] tipc: Resetting bearer [ 325.706713][T15230] tipc: Resetting bearer [ 325.777124][T15230] tipc: Disabling bearer [ 325.800953][T15235] ipt_REJECT: TCP_RESET invalid for non-tcp [ 325.806549][T15236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.981615][T15241] sctp: [Deprecated]: syz.3.2243 (pid 15241) Use of int in max_burst socket option. [ 325.981615][T15241] Use struct sctp_assoc_value instead [ 325.984779][T15242] sctp: [Deprecated]: syz.3.2243 (pid 15242) Use of int in max_burst socket option. [ 325.984779][T15242] Use struct sctp_assoc_value instead [ 326.612699][T15264] __nla_validate_parse: 32 callbacks suppressed [ 326.612719][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 326.989440][T15281] syzkaller0: entered promiscuous mode [ 326.989463][T15281] syzkaller0: entered allmulticast mode [ 327.042738][T15288] netlink: 'syz.3.2257': attribute type 6 has an invalid length. [ 327.098380][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2256'. [ 327.111645][T15283] netlink: 'syz.1.2256': attribute type 27 has an invalid length. [ 327.192608][T15283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.194671][T15283] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.196699][T15283] batadv0: left allmulticast mode [ 327.220042][T15283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.225686][T15283] batman_adv: batadv0: Interface activated: veth0 [ 327.261343][T15283] veth0_to_bridge: left promiscuous mode [ 327.298829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.324828][T15283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.326302][T15283] batadv_slave_1: left promiscuous mode [ 327.343758][T15283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.360303][T15283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.360325][T15283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.364937][T15283] veth1_vlan: left promiscuous mode [ 327.366078][T15283] veth0_vlan: left promiscuous mode [ 327.400578][T15283] veth0_vlan: entered promiscuous mode [ 327.403042][T15283] veth1_vlan: entered promiscuous mode [ 327.407547][T15283] veth1_macvtap: left promiscuous mode [ 327.426023][T15283] veth0_macvtap: left promiscuous mode [ 327.427191][T15283] veth0_macvtap: entered promiscuous mode [ 327.442894][T15283] veth1_macvtap: entered promiscuous mode [ 327.469431][T15283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.471340][T15283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.472800][T15283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.476397][T15283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.519441][T15283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.522490][T15283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.526557][T15283] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.534568][T15303] x_tables: duplicate underflow at hook 3 [ 327.557018][T15283] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.565076][T15283] veth0_to_bridge: entered promiscuous mode [ 327.565097][T15283] veth0_to_bridge: entered allmulticast mode [ 327.565181][T15283] macsec1: left allmulticast mode [ 327.565192][T15283] veth0_to_bridge: left allmulticast mode [ 327.639656][T15283] ip6gretap2: left allmulticast mode [ 327.640733][T15283] batman_adv: batadv0: Interface activated: ip6gretap2 [ 327.641457][T15283] 8021q: adding VLAN 0 to HW filter on device bond5 [ 327.695041][T15283] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 327.699588][ T6212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.756543][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.756740][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.797242][ T6206] bridge0: port 3(vlan2) entered blocking state [ 327.797460][ T6206] bridge0: port 3(vlan2) entered forwarding state [ 327.828923][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.829160][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.008437][ T6386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.179662][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.179746][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.179983][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.348067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.937308][T15336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2269'. [ 329.221521][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.221706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.264501][T15354] pimreg0: tun_chr_ioctl cmd 1074030121 [ 329.264732][T15357] pimreg0: tun_chr_ioctl cmd 1074025677 [ 329.264926][T15357] pimreg0: linktype set to 774 [ 329.740524][T15367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.740736][T15367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.741001][T15367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.911306][T15368] netlink: 'syz.3.2275': attribute type 16 has an invalid length. [ 329.911329][T15368] netlink: 'syz.3.2275': attribute type 17 has an invalid length. [ 330.097616][T15368] bridge0: port 4(bond0) entered disabled state [ 330.098147][T15368] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.098696][T15368] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.398220][T15368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.422985][T15368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.555201][T15368] bridge3: left promiscuous mode [ 330.555219][T15368] bridge3: left allmulticast mode [ 330.556612][T15368] veth11: left promiscuous mode [ 330.556995][T15368] macvlan2: left promiscuous mode [ 330.557012][T15368] macvlan2: left allmulticast mode [ 330.590602][T15368] geneve1: left allmulticast mode [ 330.591871][T15368] macvlan3: left promiscuous mode [ 330.591889][T15368] macvlan3: left allmulticast mode [ 330.618758][T15368] bond4: left promiscuous mode [ 330.622556][T15368] bond5: left promiscuous mode [ 330.622577][T15368] bridge6: left promiscuous mode [ 330.624943][T15368] vlan3: left allmulticast mode [ 330.624961][T15368] bond5: left allmulticast mode [ 330.624973][T15368] bridge6: left allmulticast mode [ 330.627636][T15368] sit1: left allmulticast mode [ 330.656835][T15368] vlan1: left allmulticast mode [ 330.656854][T15368] veth0_vlan: left allmulticast mode [ 330.656877][T15368] macsec1: left allmulticast mode [ 330.704252][T15392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2281'. [ 330.728483][ T43] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.728517][ T43] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.772984][ T43] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.773025][ T43] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.773058][ T43] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.773082][ T43] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.773111][ T43] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.773131][ T43] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.939259][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2285'. [ 330.975609][T15415] netlink: 'syz.4.2284': attribute type 10 has an invalid length. [ 331.021946][T15420] netlink: 'syz.1.2288': attribute type 1 has an invalid length. [ 331.082951][T15431] netlink: 'syz.4.2284': attribute type 10 has an invalid length. [ 331.204607][T15438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2288'. [ 331.234734][T15429] bond13 (unregistering): Released all slaves [ 331.279577][T15411] bridge0: left promiscuous mode [ 331.301550][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2288'. [ 331.350520][T15429] x_tables: unsorted entry at hook 2 [ 331.414197][T15435] bond13: (slave gretap1): making interface the new active one [ 331.414695][T15435] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 331.644352][T15452] warn_alloc: 1 callbacks suppressed [ 331.644374][T15452] syz.3.2295: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.644513][T15452] CPU: 1 UID: 0 PID: 15452 Comm: syz.3.2295 Not tainted syzkaller #0 PREEMPT(full) [ 331.644535][T15452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 331.644555][T15452] Call Trace: [ 331.644563][T15452] [ 331.644572][T15452] dump_stack_lvl+0xe8/0x150 [ 331.644615][T15452] warn_alloc+0x24d/0x270 [ 331.644642][T15452] ? kasan_save_track+0x4f/0x80 [ 331.644666][T15452] ? kasan_save_track+0x3e/0x80 [ 331.644699][T15452] ? __pfx_warn_alloc+0x10/0x10 [ 331.644720][T15452] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 331.644748][T15452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.644790][T15452] __vmalloc_node_range_noprof+0x127/0x1540 [ 331.644843][T15452] ? rcu_is_watching+0x16/0xb0 [ 331.644876][T15452] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 331.644898][T15452] ? __kmalloc_cache_noprof+0x31c/0x600 [ 331.644924][T15452] ? __kmalloc_cache_noprof+0x148/0x600 [ 331.644953][T15452] ? xskq_create+0x56/0x220 [ 331.644986][T15452] xskq_create+0x148/0x220 [ 331.645014][T15452] ? xsk_init_queue+0x8a/0xe0 [ 331.645043][T15452] xsk_init_queue+0x8a/0xe0 [ 331.645073][T15452] xsk_setsockopt+0x52a/0x960 [ 331.645103][T15452] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.645129][T15452] ? __pfx_aa_sk_perm+0x10/0x10 [ 331.645164][T15452] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 331.645182][T15452] ? __pfx_xsk_setsockopt+0x10/0x10 [ 331.645210][T15452] do_sock_setsockopt+0x17c/0x1b0 [ 331.645245][T15452] __x64_sys_setsockopt+0x13d/0x1b0 [ 331.645280][T15452] do_syscall_64+0x166/0x520 [ 331.645298][T15452] ? trace_irq_disable+0x3b/0x140 [ 331.645321][T15452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.645340][T15452] ? clear_bhb_loop+0x70/0xc0 [ 331.645364][T15452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.645383][T15452] RIP: 0033:0x7fd1bc19f559 [ 331.645401][T15452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.645417][T15452] RSP: 002b:00007fd1bcfe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.645436][T15452] RAX: ffffffffffffffda RBX: 00007fd1bc425fa0 RCX: 00007fd1bc19f559 [ 331.645452][T15452] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 331.645464][T15452] RBP: 00007fd1bc236b20 R08: 0000000000000004 R09: 0000000000000000 [ 331.645476][T15452] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.645488][T15452] R13: 00007fd1bc426038 R14: 00007fd1bc425fa0 R15: 00007ffdda818168 [ 331.645525][T15452] [ 331.645551][T15452] Mem-Info: [ 331.645561][T15452] active_anon:12380 inactive_anon:0 isolated_anon:0 [ 331.645561][T15452] active_file:0 inactive_file:43391 isolated_file:0 [ 331.645561][T15452] unevictable:0 dirty:249 writeback:0 [ 331.645561][T15452] slab_reclaimable:12263 slab_unreclaimable:113036 [ 331.645561][T15452] mapped:29413 shmem:532 pagetables:3452 [ 331.645561][T15452] sec_pagetables:0 bounce:0 [ 331.645561][T15452] kernel_misc_reclaimable:0 [ 331.645561][T15452] free:1220390 free_pcp:30803 free_cma:0 [ 331.645615][T15452] Node 0 active_anon:49520kB inactive_anon:0kB active_file:0kB inactive_file:173364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117652kB dirty:996kB writeback:0kB shmem:2128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14720kB pagetables:13672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 331.645669][T15452] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 331.645719][T15452] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.645774][T15452] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 331.645810][T15452] Node 0 DMA32 free:919560kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:49520kB inactive_anon:0kB active_file:0kB inactive_file:173364kB unevictable:0kB writepending:996kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:121704kB local_pcp:22320kB free_cma:0kB [ 331.647119][T15452] lowmem_reserve[]: 0 0 0 0 0 [ 331.647160][T15452] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.647214][T15452] lowmem_reserve[]: 0 0 0 0 0 [ 331.647249][T15452] Node 1 Normal free:3946640kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1508kB local_pcp:0kB free_cma:0kB [ 331.647304][T15452] lowmem_reserve[]: 0 0 0 0 0 [ 331.647338][T15452] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 331.647462][T15452] Node 0 DMA32: 1108*4kB (UME) 963*8kB (UME) 676*16kB (UM) 175*32kB (UME) 664*64kB (UME) 561*128kB (UME) 354*256kB (UME) 212*512kB (UM) 122*1024kB (UM) 7*2048kB (UE) 107*4096kB (UM) = 919560kB [ 331.647617][T15452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 331.701144][T15452] Node 1 Normal: 4*4kB (UM) 2*8kB (UM) 7*16kB (UM) 12*32kB (UM) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 962*4096kB (UM) = 3946640kB [ 331.701320][T15452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.701336][T15452] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.701352][T15452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.701368][T15452] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.701383][T15452] 43944 total pagecache pages [ 331.701394][T15452] 0 pages in swap cache [ 331.701401][T15452] Free swap = 124996kB [ 331.701408][T15452] Total swap = 124996kB [ 331.701416][T15452] 2097051 pages RAM [ 331.701423][T15452] 0 pages HighMem/MovableOnly [ 331.701431][T15452] 433831 pages reserved [ 331.701438][T15452] 0 pages cma reserved [ 331.882509][T15470] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2298'. [ 331.986029][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2296'. [ 332.065932][T15472] sctp: [Deprecated]: syz.1.2298 (pid 15472) Use of int in max_burst socket option. [ 332.065932][T15472] Use struct sctp_assoc_value instead [ 332.418313][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 332.776691][T15499] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2300'. [ 333.585298][T15486] syzkaller1: entered promiscuous mode [ 333.585323][T15486] syzkaller1: entered allmulticast mode [ 333.925250][T15533] net_ratelimit: 2 callbacks suppressed [ 333.925270][T15533] openvswitch: netlink: Message has 16 unknown bytes. [ 333.929550][T15533] Cannot find add_set index 2 as target [ 334.115767][T15544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2310'. [ 334.212536][T15543] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2312'. [ 334.252504][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2313'. [ 334.253028][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2313'. [ 334.273440][T15550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2313'. [ 334.274393][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2313'. [ 334.398094][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2314'. [ 334.973297][T15589] netlink: 'syz.0.2322': attribute type 8 has an invalid length. [ 335.219676][T15606] nbd20: detected capacity change from 0 to 63 [ 335.301372][ T4947] block nbd20: Receive control failed (result -104) [ 335.877818][T15645] netlink: 'syz.0.2334': attribute type 13 has an invalid length. [ 338.897126][T15678] __nla_validate_parse: 6 callbacks suppressed [ 338.897145][T15678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2345'. [ 339.361876][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 339.390960][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 339.415869][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 339.416123][T15711] gretap0: left promiscuous mode [ 339.436752][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 339.451945][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 339.463044][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 339.491453][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 339.512536][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 339.515309][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 339.552153][T15711] bridge0: port 4(bond0) entered blocking state [ 339.552270][T15711] bridge0: port 4(bond0) entered forwarding state [ 339.552634][T15711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.554184][T15711] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.589110][T15711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.607017][ T6210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.607248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.616251][ T6382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.616427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.642219][T15719] netlink: 'syz.2.2355': attribute type 1 has an invalid length. [ 339.672129][ T6383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.672950][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.675758][ T9403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.676181][ T5637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.732597][T15711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.734558][T15711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.759668][T15711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.759691][T15711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.763154][T15711] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 339.803627][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.803785][ T6212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.819249][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.819388][ T6212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.846286][ T9419] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 341.005901][T15771] netlink: 'syz.3.2370': attribute type 2 has an invalid length. [ 341.005928][T15771] netlink: 'syz.3.2370': attribute type 2 has an invalid length. [ 341.868406][ T9419] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 342.039186][ T2496] block nbd20: Connection timed out, retrying (0/1 alive) [ 342.040136][ T2496] block nbd20: Connection timed out, retrying (0/1 alive) [ 342.040967][ T2496] block nbd20: Dead connection, failed to find a fallback [ 342.041004][ T2496] block nbd20: shutting down sockets [ 342.041090][ T2496] I/O error, dev nbd20, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 342.041187][ T2496] Buffer I/O error on dev nbd20, logical block 1, async page read [ 342.041320][ T2496] Buffer I/O error on dev nbd20, logical block 2, async page read [ 342.041336][ T2496] Buffer I/O error on dev nbd20, logical block 3, async page read [ 342.041434][ T2496] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 342.041456][ T2496] Buffer I/O error on dev nbd20, logical block 0, async page read [ 342.044631][ T2496] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 342.044656][ T2496] Buffer I/O error on dev nbd20, logical block 0, async page read [ 342.044784][ T2496] Buffer I/O error on dev nbd20, logical block 1, async page read [ 342.044799][ T2496] Buffer I/O error on dev nbd20, logical block 2, async page read [ 342.044813][ T2496] Buffer I/O error on dev nbd20, logical block 3, async page read [ 342.045863][ T2496] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 342.045888][ T2496] Buffer I/O error on dev nbd20, logical block 0, async page read [ 342.045904][ T2496] Buffer I/O error on dev nbd20, logical block 1, async page read [ 342.046050][ T2496] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 342.046918][ T2496] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 342.047103][ T2496] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 342.047254][ T2496] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 342.048813][ T2496] I/O error, dev nbd20, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 342.048979][ T2496] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 342.049633][T15416] ldm_validate_partition_table(): Disk read failed. [ 342.051718][T15416] Dev nbd20: unable to read RDB block 0 [ 342.052991][T15416] nbd20: unable to read partition table [ 342.079419][T15416] ldm_validate_partition_table(): Disk read failed. [ 342.081744][T15416] Dev nbd20: unable to read RDB block 0 [ 342.083962][T15416] nbd20: unable to read partition table [ 342.131465][T15830] netlink: 'syz.1.2384': attribute type 1 has an invalid length. [ 342.739834][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.835070][T15845] syzkaller0: entered promiscuous mode [ 342.835094][T15845] syzkaller0: entered allmulticast mode [ 343.954808][ T5626] [ 343.957164][ T5626] ====================================================== [ 343.964183][ T5626] WARNING: possible circular locking dependency detected [ 343.971218][ T5626] syzkaller #0 Not tainted [ 343.975631][ T5626] ------------------------------------------------------ [ 343.982646][ T5626] syz-executor/5626 is trying to acquire lock: [ 343.988792][ T5626] ffffffff8fe8de00 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x5f0 [ 343.997958][ T5626] [ 343.997958][ T5626] but task is already holding lock: [ 344.005316][ T5626] ffff8880762468c8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0xa55/0x13b0 [ 344.015335][ T5626] [ 344.015335][ T5626] which lock already depends on the new lock. [ 344.015335][ T5626] [ 344.025735][ T5626] [ 344.025735][ T5626] the existing dependency chain (in reverse order) is: [ 344.034746][ T5626] [ 344.034746][ T5626] -> #9 (mapping.invalidate_lock#2){++++}-{4:4}: [ 344.043270][ T5626] down_read+0x45/0x320 [ 344.047953][ T5626] filemap_fault+0x6d7/0x13b0 [ 344.053154][ T5626] __do_fault+0x138/0x2a0 [ 344.058011][ T5626] do_pte_missing+0x684/0x34b0 [ 344.063305][ T5626] handle_mm_fault+0x1a53/0x3750 [ 344.068764][ T5626] do_user_addr_fault+0xb35/0x1480 [ 344.074399][ T5626] exc_page_fault+0x6a/0xc0 [ 344.079433][ T5626] asm_exc_page_fault+0x26/0x30 [ 344.084805][ T5626] [ 344.084805][ T5626] -> #8 (vm_lock){++++}-{0:0}: [ 344.091749][ T5626] __vma_start_exclude_readers+0x283/0x9b0 [ 344.098083][ T5626] __vma_start_write+0xdc/0x290 [ 344.103462][ T5626] mprotect_fixup+0x657/0xad0 [ 344.108671][ T5626] setup_arg_pages+0x658/0xbd0 [ 344.113964][ T5626] load_elf_binary+0xc6c/0x28d0 [ 344.119340][ T5626] bprm_execve+0x930/0x1590 [ 344.124366][ T5626] kernel_execve+0x8af/0x9a0 [ 344.129482][ T5626] try_to_run_init_process+0x13/0x60 [ 344.135293][ T5626] kernel_init+0xad/0x1d0 [ 344.140145][ T5626] ret_from_fork+0x514/0xb70 [ 344.145248][ T5626] ret_from_fork_asm+0x1a/0x30 [ 344.150533][ T5626] [ 344.150533][ T5626] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 344.158103][ T5626] __might_fault+0xcb/0x130 [ 344.163132][ T5626] _copy_from_user+0x28/0xb0 [ 344.168259][ T5626] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 344.174772][ T5626] ip_generic_getfrag+0x149/0x2d0 [ 344.180324][ T5626] __ip6_append_data+0x3b26/0x40c0 [ 344.185961][ T5626] ip6_append_data+0x108/0x270 [ 344.191253][ T5626] rawv6_sendmsg+0x1298/0x18c0 [ 344.196544][ T5626] sock_sendmsg_nosec+0x10f/0x190 [ 344.202532][ T5626] ____sys_sendmsg+0x54e/0x850 [ 344.207831][ T5626] ___sys_sendmsg+0x2a5/0x360 [ 344.213043][ T5626] __x64_sys_sendmsg+0x1b1/0x290 [ 344.218500][ T5626] do_syscall_64+0x166/0x520 [ 344.223622][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.230055][ T5626] [ 344.230055][ T5626] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 344.237844][ T5626] lock_sock_nested+0x41/0x100 [ 344.243141][ T5626] inet_shutdown+0x6a/0x390 [ 344.248177][ T5626] nbd_mark_nsock_dead+0x2cb/0x550 [ 344.253813][ T5626] sock_shutdown+0x15e/0x260 [ 344.258930][ T5626] nbd_clear_sock+0x24/0x170 [ 344.264040][ T5626] nbd_config_put+0x477/0x7e0 [ 344.269245][ T5626] nbd_genl_connect+0x19b8/0x1cd0 [ 344.274799][ T5626] genl_family_rcv_msg_doit+0x233/0x340 [ 344.280883][ T5626] genl_rcv_msg+0x614/0x7a0 [ 344.285915][ T5626] netlink_rcv_skb+0x226/0x4a0 [ 344.291209][ T5626] genl_rcv+0x28/0x40 [ 344.295724][ T5626] netlink_unicast+0x8ef/0xa80 [ 344.301011][ T5626] netlink_sendmsg+0x7f0/0xb20 [ 344.306301][ T5626] sock_sendmsg_nosec+0x14e/0x190 [ 344.311851][ T5626] ____sys_sendmsg+0x54e/0x850 [ 344.317135][ T5626] ___sys_sendmsg+0x2a5/0x360 [ 344.322348][ T5626] __x64_sys_sendmsg+0x1b1/0x290 [ 344.327814][ T5626] do_syscall_64+0x166/0x520 [ 344.332929][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.339350][ T5626] [ 344.339350][ T5626] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 344.346999][ T5626] __mutex_lock+0x197/0x15a0 [ 344.352117][ T5626] nbd_queue_rq+0x373/0xff0 [ 344.357153][ T5626] blk_mq_dispatch_rq_list+0x499/0x1990 [ 344.363231][ T5626] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 344.370089][ T5626] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 344.376600][ T5626] blk_mq_run_work_fn+0x167/0x2f0 [ 344.382154][ T5626] process_scheduled_works+0xc3d/0x1630 [ 344.388229][ T5626] worker_thread+0xa47/0xfb0 [ 344.393352][ T5626] kthread+0x38b/0x480 [ 344.397942][ T5626] ret_from_fork+0x514/0xb70 [ 344.403057][ T5626] ret_from_fork_asm+0x1a/0x30 [ 344.408341][ T5626] [ 344.408341][ T5626] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 344.415541][ T5626] __mutex_lock+0x197/0x15a0 [ 344.420688][ T5626] nbd_queue_rq+0xc1/0xff0 [ 344.425641][ T5626] blk_mq_dispatch_rq_list+0x499/0x1990 [ 344.431716][ T5626] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 344.438576][ T5626] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 344.445087][ T5626] blk_mq_run_work_fn+0x167/0x2f0 [ 344.450646][ T5626] process_scheduled_works+0xc3d/0x1630 [ 344.456722][ T5626] worker_thread+0xa47/0xfb0 [ 344.461847][ T5626] kthread+0x38b/0x480 [ 344.466444][ T5626] ret_from_fork+0x514/0xb70 [ 344.471557][ T5626] ret_from_fork_asm+0x1a/0x30 [ 344.476846][ T5626] [ 344.476846][ T5626] -> #3 (set->srcu){.+.+}-{0:0}: [ 344.483975][ T5626] __synchronize_srcu+0xca/0x2f0 [ 344.489451][ T5626] elevator_switch+0x1e8/0x7b0 [ 344.494746][ T5626] elevator_change+0x2fa/0x480 [ 344.500039][ T5626] elevator_set_default+0x375/0x440 [ 344.505767][ T5626] blk_register_queue+0x404/0x4f0 [ 344.511322][ T5626] __add_disk+0x6b8/0xdb0 [ 344.516184][ T5626] add_disk_fwnode+0x100/0x3a0 [ 344.521478][ T5626] nbd_dev_add+0x733/0xb60 [ 344.526425][ T5626] nbd_init+0x168/0x1f0 [ 344.531118][ T5626] do_one_initcall+0x250/0x870 [ 344.536414][ T5626] do_initcall_level+0x10a/0x1a0 [ 344.541876][ T5626] do_initcalls+0x59/0xa0 [ 344.546732][ T5626] kernel_init_freeable+0x29d/0x3e0 [ 344.552464][ T5626] kernel_init+0x22/0x1d0 [ 344.557322][ T5626] ret_from_fork+0x514/0xb70 [ 344.562440][ T5626] ret_from_fork_asm+0x1a/0x30 [ 344.567728][ T5626] [ 344.567728][ T5626] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 344.575549][ T5626] __mutex_lock+0x197/0x15a0 [ 344.580659][ T5626] elevator_change+0x1af/0x480 [ 344.585954][ T5626] elevator_set_none+0xb5/0x140 [ 344.591335][ T5626] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 344.597671][ T5626] nbd_start_device+0x189/0xb30 [ 344.603047][ T5626] nbd_genl_connect+0x167d/0x1cd0 [ 344.608599][ T5626] genl_family_rcv_msg_doit+0x233/0x340 [ 344.614678][ T5626] genl_rcv_msg+0x614/0x7a0 [ 344.619721][ T5626] netlink_rcv_skb+0x226/0x4a0 [ 344.625016][ T5626] genl_rcv+0x28/0x40 [ 344.629530][ T5626] netlink_unicast+0x8ef/0xa80 [ 344.634817][ T5626] netlink_sendmsg+0x7f0/0xb20 [ 344.640108][ T5626] sock_sendmsg_nosec+0x14e/0x190 [ 344.645657][ T5626] ____sys_sendmsg+0x54e/0x850 [ 344.650954][ T5626] ___sys_sendmsg+0x2a5/0x360 [ 344.656162][ T5626] __x64_sys_sendmsg+0x1b1/0x290 [ 344.661619][ T5626] do_syscall_64+0x166/0x520 [ 344.666731][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.673149][ T5626] [ 344.673149][ T5626] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 344.681765][ T5626] blk_alloc_queue+0x544/0x690 [ 344.687064][ T5626] __blk_mq_alloc_disk+0x194/0x390 [ 344.692702][ T5626] nbd_dev_add+0x494/0xb60 [ 344.697648][ T5626] nbd_init+0x168/0x1f0 [ 344.702323][ T5626] do_one_initcall+0x250/0x870 [ 344.707617][ T5626] do_initcall_level+0x10a/0x1a0 [ 344.713173][ T5626] do_initcalls+0x59/0xa0 [ 344.718030][ T5626] kernel_init_freeable+0x29d/0x3e0 [ 344.723758][ T5626] kernel_init+0x22/0x1d0 [ 344.728619][ T5626] ret_from_fork+0x514/0xb70 [ 344.733735][ T5626] ret_from_fork_asm+0x1a/0x30 [ 344.739023][ T5626] [ 344.739023][ T5626] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 344.746242][ T5626] __lock_acquire+0x164c/0x2de0 [ 344.751617][ T5626] lock_acquire+0x115/0x350 [ 344.756643][ T5626] fs_reclaim_acquire+0x71/0x100 [ 344.762108][ T5626] prepare_alloc_pages+0x149/0x5f0 [ 344.767756][ T5626] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 344.774090][ T5626] alloc_pages_mpol+0x21e/0x390 [ 344.779477][ T5626] alloc_pages_noprof+0xb1/0x2b0 [ 344.784935][ T5626] folio_alloc_noprof+0x1e/0x30 [ 344.790308][ T5626] filemap_alloc_folio_noprof+0x111/0x460 [ 344.796560][ T5626] __filemap_get_folio_mpol+0x3fd/0xff0 [ 344.802631][ T5626] filemap_fault+0xa84/0x13b0 [ 344.807832][ T5626] __do_fault+0x138/0x2a0 [ 344.812687][ T5626] do_pte_missing+0x2215/0x34b0 [ 344.818061][ T5626] handle_mm_fault+0x1a53/0x3750 [ 344.823519][ T5626] do_user_addr_fault+0xb35/0x1480 [ 344.829171][ T5626] exc_page_fault+0x6a/0xc0 [ 344.834208][ T5626] asm_exc_page_fault+0x26/0x30 [ 344.839584][ T5626] [ 344.839584][ T5626] other info that might help us debug this: [ 344.839584][ T5626] [ 344.849808][ T5626] Chain exists of: [ 344.849808][ T5626] fs_reclaim --> vm_lock --> mapping.invalidate_lock#2 [ 344.849808][ T5626] [ 344.862587][ T5626] Possible unsafe locking scenario: [ 344.862587][ T5626] [ 344.870038][ T5626] CPU0 CPU1 [ 344.875402][ T5626] ---- ---- [ 344.880762][ T5626] rlock(mapping.invalidate_lock#2); [ 344.886155][ T5626] lock(vm_lock); [ 344.892399][ T5626] lock(mapping.invalidate_lock#2); [ 344.900214][ T5626] lock(fs_reclaim); [ 344.904204][ T5626] [ 344.904204][ T5626] *** DEADLOCK *** [ 344.904204][ T5626] [ 344.912341][ T5626] locks held by syz-executor/5626: 1, last CPU#0: [ 344.918753][ T5626] #0: ffff8880762468c8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0xa55/0x13b0 [ 344.929214][ T5626] [ 344.929214][ T5626] stack backtrace: [ 344.935102][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 344.944575][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 344.954635][ T5626] Call Trace: [ 344.957916][ T5626] [ 344.960845][ T5626] dump_stack_lvl+0xe8/0x150 [ 344.965450][ T5626] print_circular_bug+0x2e2/0x300 [ 344.970489][ T5626] check_noncircular+0x12f/0x150 [ 344.975441][ T5626] __lock_acquire+0x164c/0x2de0 [ 344.980297][ T5626] ? __blk_flush_plug+0x416/0x4d0 [ 344.985331][ T5626] ? __pfx___blk_flush_plug+0x10/0x10 [ 344.990722][ T5626] lock_acquire+0x115/0x350 [ 344.995232][ T5626] ? prepare_alloc_pages+0x149/0x5f0 [ 345.000535][ T5626] fs_reclaim_acquire+0x71/0x100 [ 345.005478][ T5626] ? prepare_alloc_pages+0x149/0x5f0 [ 345.010770][ T5626] prepare_alloc_pages+0x149/0x5f0 [ 345.015894][ T5626] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 345.021711][ T5626] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 345.028052][ T5626] ? __pfx_policy_nodemask+0x10/0x10 [ 345.033355][ T5626] alloc_pages_mpol+0x21e/0x390 [ 345.038218][ T5626] alloc_pages_noprof+0xb1/0x2b0 [ 345.043159][ T5626] folio_alloc_noprof+0x1e/0x30 [ 345.048008][ T5626] filemap_alloc_folio_noprof+0x111/0x460 [ 345.053745][ T5626] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 345.060001][ T5626] __filemap_get_folio_mpol+0x3fd/0xff0 [ 345.065558][ T5626] filemap_fault+0xa84/0x13b0 [ 345.070244][ T5626] ? filemap_map_pages+0x1d1/0x2170 [ 345.075450][ T5626] ? __pfx_filemap_fault+0x10/0x10 [ 345.080568][ T5626] ? __pfx_filemap_map_pages+0x10/0x10 [ 345.086030][ T5626] ? lock_acquire+0x115/0x350 [ 345.090718][ T5626] __do_fault+0x138/0x2a0 [ 345.095056][ T5626] ? do_pte_missing+0x140c/0x34b0 [ 345.100085][ T5626] do_pte_missing+0x2215/0x34b0 [ 345.104950][ T5626] ? handle_mm_fault+0xf1/0x3750 [ 345.109891][ T5626] handle_mm_fault+0x1a53/0x3750 [ 345.114837][ T5626] ? handle_mm_fault+0xf1/0x3750 [ 345.119780][ T5626] ? __pfx_handle_mm_fault+0x10/0x10 [ 345.125065][ T5626] ? lock_vma_under_rcu+0x45a/0x500 [ 345.130286][ T5626] do_user_addr_fault+0xb35/0x1480 [ 345.135409][ T5626] ? trace_page_fault_user+0x84/0x1e0 [ 345.140783][ T5626] exc_page_fault+0x6a/0xc0 [ 345.145307][ T5626] asm_exc_page_fault+0x26/0x30 [ 345.150162][ T5626] RIP: 0033:0x7fa50e26d411 [ 345.154580][ T5626] Code: 85 65 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 a3 83 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 9c 82 ee 00 48 01 d1 [ 345.174183][ T5626] RSP: 002b:00007fff897f84a0 EFLAGS: 00010206 [ 345.180259][ T5626] RAX: 0000001b34024000 RBX: 0000000000000625 RCX: 0000000000053bd8 [ 345.188233][ T5626] RDX: 000000000ba61c40 RSI: 00007fff897f8530 RDI: 0000000000000001 [ 345.196207][ T5626] RBP: 00007fff897f84dc R08: 000000002c6fd925 R09: 3fffffffffffffff [ 345.204184][ T5626] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 345.212156][ T5626] R13: 00000000000927c0 R14: 0000000000053b80 R15: 00007fff897f8530 [ 345.220147][ T5626] [ 345.339298][ T6212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.339443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.789758][ T5770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.818783][ T5633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.978484][ T6383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.978609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.857923][ T9419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.897912][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!