last executing test programs: 3.340198588s ago: executing program 1 (id=4765): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000340)={0x8, '\x00', {'bond_slave_0\x00'}}) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x9, 0x3, 0x401}]}]}, {0x0, [0x30, 0x30, 0x5f]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f00000004c0)=0x10) 2.999088008s ago: executing program 4 (id=4768): r0 = socket$inet_icmp(0x2, 0x2, 0x1) listen(r0, 0x401) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 2.767858798s ago: executing program 4 (id=4770): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8a}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000c80)={{r0}, 0x0, 0x12, @unused=[0x5, 0x200, 0x49a4, 0x4], @devid=r1}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000008000000000000000900000073119d00000000009500"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f00000001c0)=@ethtool_rxfh={0x46, 0x9, 0xff, 0x8, 0x0, "8fc46e", 0x8, [0xff]}}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000180)=@get={0x1, &(0x7f0000000100)=""/102, 0x9}) 2.70149128s ago: executing program 0 (id=4771): syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x34, 0x68, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @fastopen={0x22, 0x6, "9ed163b5"}, @nop]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x602c}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390440bdbad6fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0198000000000000180012800e000100776972656775617264000000040002800800290009200600080028"], 0x48}, 0x1, 0x0, 0x0, 0x20886}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000006ba6d00000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000090000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.550330858s ago: executing program 1 (id=4773): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1406, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40010) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040), &(0x7f00000000c0)=0x4) (async) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) close(r1) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1406, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40010) (async) 2.492273549s ago: executing program 3 (id=4774): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f0000000000)=""/110, 0x6e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x98, &(0x7f0000000080)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3582}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x1ff, 0x2, 0x81, 0x0, 0x3241, 0x1}, &(0x7f0000000280)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x54, 0x4}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x22, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xc6}, @printk={@lld}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0x3, 0x9, 0x30, 0x1}], &(0x7f0000000440)='GPL\x00', 0xf6, 0x2a, &(0x7f0000000480)=""/42, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x7, 0x5, 0x7}, 0x10, 0x1a3e0, 0xffffffffffffffff, 0xa, &(0x7f0000000540)=[r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x5, 0x1}, {0x3, 0x2, 0x2}, {0x3, 0x4, 0x7, 0x1}, {0x4, 0x2, 0xa, 0x8}, {0x2, 0x5, 0x9, 0x5}, {0x5, 0x1, 0x3, 0x4}, {0x0, 0x4, 0xf, 0x3}, {0x2, 0x4, 0x10, 0x3}, {0x2, 0x5, 0x5, 0xb}, {0x2, 0x5, 0xe}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x0, 0x9d, 0xb8, &(0x7f0000000700)="6ea1d57ab81eafdf5693686fe544f8f7cbf32e48b7434cb64c23c39e831fa9df2cfc3a05b12295bcec6e3510abfd645681ee03374e1c9ff9f6400017e2eafad35da6dfb030f22fedb6e3bd091f42bb483c00e72db0436a29c2ba82eea523ea760262d736c7acd2c2f3ba67b775abe4d7777bbdc08f7c92e305004c886d62cf7175795bbcfa23cbb973c4d841d7ed656ad9eb460f97166830df02ba07b0", &(0x7f00000007c0)=""/184, 0x2, 0x0, 0xe9, 0xad, &(0x7f0000000880)="2c804c40876b2da3e01e4e314f79dece384d62aa460c036a67ae589fb24a1379236d490378d3ed8d2fdb19ff34563e02350bf9e22726895800d703b9bfd0ab50cd9f41e38a4e44dc93b497b2e601f4b18c0015ea3b26cc80eac17a577decd681daed531b242b4a2659a3a9a2d54f13d988cbb47e121d01f9596b331d1e6343692e41f6a11c900eb1339b05ce2814b7cf6554bc24e8aa6cec20f116db32b889724bc5e7d1ccada7f484437403b72e418a86b391af1053a0106317b25e01c1a15495a1629f3feee243d6b45547cdb9e9fba1640cdfee0f88d3841b3677fa658aef08af7a396946ef25d6", &(0x7f0000000980)="e981d8a4d4d8c135184f847610ade6a4da832388dcf3b4d78579cbacf3d6709ec116a79e6d2c56d1600aac6eb0c983116b2ca41802a652ca3cf0ab3771ca16d07003ff20d4c148bfdc27c670c54a8803751dc813f564883c92cb06865249e47742af2000550b3cb7ab40723d52510ef6fd665a4073e9dd1b14593a4194af792f0e468ff9eb84f7fa26d617321526280a39b3f2a7218490024bd379e74dd18680b244f2c3dea05ca6a788320458", 0x6, 0x0, 0xffff}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000b00)=0xb, 0x4) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000b40)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000b80)={r3, 0x2, 0xfffd}, &(0x7f0000000bc0)=0x8) syz_emit_ethernet(0xce, &(0x7f0000000c00)={@multicast, @local, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x7, 0xbc, 0x68, 0x0, 0xb, 0x11, 0x0, @remote, @loopback, {[@generic={0x44, 0x7, "49b191989b"}]}}, {0x4e22, 0x4e20, 0xa0, 0x0, @opaque="4c80a14bc422d8e4535ba0835e6fdb35938ed694242817c3a2f0ed4e2c7921bfb366358870cd1464470e2e255d6078b528b31b66b729d42c7abe508b46505d95c0632084e6f5eb65c5b9f08a5704d2fa65f6a2e5a653d517b2b22778197ca8405b96aa32e3c7944e0ee90cc8ee3ecfb066ec95992e1e964da5030e74645e59ae3b98965a8092310fcb5e76a1166fb0bfb4faa43481c6f6d7"}}}}}, &(0x7f0000000d00)={0x1, 0x3, [0xbc5, 0x1d4, 0xbf6, 0x511]}) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000dc0)=""/223, 0xdf}, {&(0x7f0000000ec0)=""/28, 0x1c}, {&(0x7f0000000f00)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/199, 0xc7}, {&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/39, 0x27}, {&(0x7f0000001140)=""/128, 0x80}], 0x7}, 0x8}], 0x1, 0x2002, &(0x7f00000012c0)={r8, r9+10000000}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xeb, 0xeb, 0xb, [@datasec={0xd, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x3, 0xa}, {0x4, 0x101, 0x7}, {0x5, 0x5, 0x7}], "f5715e"}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0x7, 0xfffffff8}, {0x3, 0x2}, {0x3, 0xd1}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @var={0x8, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0xe, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0xfd6}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}, @union={0x9, 0x1, 0x0, 0x5, 0x1, 0xed, [{0xb, 0x5, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x10}}]}, {0x0, [0x4f, 0x0, 0x61, 0x6f, 0x5f, 0x0, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000001440)=""/71, 0x10f, 0x47, 0x1, 0x7000}, 0x28) r11 = accept(r6, &(0x7f0000001500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000001580)=0x80) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f00000016c0)={r12, r0, 0x7, 0xec, &(0x7f00000015c0)="6f8aef582e257e5359ad9cee930c2613304099ad2d8476c752038f8a9aec2ef9f203f2b9b40c240c818b2cddecc40c9248109255398fbedf8a1ee6aa98d3418c23f47fd4affbce472c63eff6d0e9818845267e9e3410b1bb21fef9892b63691afa27ef3d94bf7595513de280c1cd3d187852ce571e0a19a1fd8ef90d3118dbab3ba7f16a3ec1bd201c807baf348e018a9731f24a6525cc7dae11d4aa7689dfff32697012b8a22c2a8ba1c22bfac011a86ec1a1fd318e4a8d3c641024724fd5fdba248554b98ca6a32c9336b5ffc331c850a1d7620a89b26b562b2b83e4b40bb960f89e0e566f874aeab433b7", 0x10, 0x4, 0x1000, 0xfb59, 0x8000, 0x1, 0x5, 'syz1\x00'}) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f0000001780)=0x80, 0x4) r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000001800)={'veth1_to_bond\x00', @multicast}) r15 = accept4$llc(r11, &(0x7f0000001840)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001880)=0x10, 0x1000) ppoll(&(0x7f00000018c0)=[{r1, 0x41}, {r14, 0xe010}, {r1, 0x4000}, {r15, 0xac}, {r14, 0xc013}, {r0, 0xc}, {r10, 0x82}], 0x7, &(0x7f0000001900), &(0x7f0000001940)={[0x9]}, 0x8) recvmmsg(r11, &(0x7f0000007400)=[{{&(0x7f0000001980)=@phonet, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a00)=""/190, 0xbe}, {&(0x7f0000001ac0)=""/154, 0x9a}], 0x2, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/14, 0xe}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/154, 0x9a}, {&(0x7f0000005cc0)=""/153, 0x99}, {&(0x7f0000005d80)=""/221, 0xdd}], 0x7, &(0x7f0000005f00)=""/207, 0xcf}, 0xfffffffc}, {{&(0x7f0000006000)=@l2, 0x80, &(0x7f0000007340)=[{&(0x7f0000006080)=""/4, 0x4}, {&(0x7f00000060c0)=""/223, 0xdf}, {&(0x7f00000061c0)=""/160, 0xa0}, {&(0x7f0000006280)=""/4096, 0x1000}, {&(0x7f0000007280)=""/146, 0x92}], 0x5, &(0x7f00000073c0)=""/5, 0x5}, 0x6}], 0x3, 0x0, &(0x7f00000074c0)={0x0, 0x3938700}) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000007500)={0xffffffffffffffff}) ioctl$XFS_IOC_FSCOUNTS(r16, 0x80205871, &(0x7f0000007580)) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000007700)={0x7e8, 0x10, 0x8, 0x0, 0x0, [{{r15}, 0x40}, {{}, 0x6}, {{r11}}, {{r10}, 0x4}, {{r4}, 0x6}, {{r0}, 0x6}, {{r13}, 0x2}, {}]}) 2.362189585s ago: executing program 0 (id=4775): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0xc004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x338, 0x178, 0x178, 0x338, 0x178, 0x49, 0x0, {[{{@ip={@empty, @local, 0xff000000, 0xff000000, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x168, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x5, 0x2, 0x7, 0x6, '\x00', 'syz0\x00', {0x8000000000000000}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@random="2a859b2f456e", 0x1}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x7, 0x2, 0x1, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "b6f0fe1218aa4764", "fe3ce268993749e24b84130c7657dd3aeef3a43a539183928886a4edd41b1a0f", "4c69ca8b", "2baebc7bc1b3b0ec"}, 0x38) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x29}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x60ccf0620c3ff7a7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES16=r8, @ANYBLOB="010025bd720000000000390000000800", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0xc) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400195a8563e43c12f461560a8447600000000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed5e0000", 0x43}], 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 2.214981214s ago: executing program 4 (id=4776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x6, 0x4279, 0x6, 0x2, 0x5}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)='<', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@hl={{0x28}, {0x4, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, r3}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) shutdown(r3, 0x1) 2.100504634s ago: executing program 3 (id=4777): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000200012800900010069706970000000001000028004001300080014005d00000008001f"], 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) close(r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x3, 0x76, 0x4b, 0x40}, {0x2, 0xf2, 0xf, 0x2}, {0x0, 0x6, 0xe, 0x1}, {0x2a1, 0x8, 0x97, 0x400}]}, 0x10) pipe(&(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000200012800900010069706970000000001000028004001300080014005d00000008001f"], 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) close(r0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x3, 0x76, 0x4b, 0x40}, {0x2, 0xf2, 0xf, 0x2}, {0x0, 0x6, 0xe, 0x1}, {0x2a1, 0x8, 0x97, 0x400}]}, 0x10) (async) 1.977162751s ago: executing program 2 (id=4778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000600a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000020200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) 1.646207s ago: executing program 2 (id=4779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000030000000004000000a000f02abe0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffec7}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRESDEC], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x800) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0xd4, 0x12, 0x5, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x21, 0x0, 0x8}}) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x1, 0xb}, {0x0, 0x9}, {0x3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "a3b1ce122ce2c3a1c7c1be3af78e4a13"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@dev, @empty, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000001a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x222200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001a80)={0x14ec, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1244, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "20fe836d12c8641fb8541e724869f6bfec8ed55d8305806afc0bae2999526740a6c52ea973bff55769e5d29150f75e3371c6edeb9299c57a9a65a132a346594de6d76da42410ffaba19c9f204f955a87c1bdef4f1391ca71b62a6ddd7e409415d4abf94aea114db6748fa9dbb3f25ca282b2adc93d1114ca77ee430b455284a1142981f10a3db02de8d13fb9c6e27f2f14280635f2e027e5e4e1f29223608592aca7bd1ef75b5fbf549689bc3610cca004770e5bd1bbcff5f9e14b4097ef0b6ea493b480180d068be40bc3073279c254c0da716ed71fdd7debe3c1fd2f0d97297b254c6963999b43d5b3f7bac473a80a60c846fd15c4b400b0b6ee64a7ec198e65ea042e653adf62ad8747d1211fc4e0d510ed512927125ab72b9b763460a1926fe6dcf2d80f850c6eeb25d3cb8b44a7e9a4ea88c741289f0c24030f1db5d35162f8798e333f869bd10d9d15271f7140079a1484271cb782fe80a15c128f8b9dc88d61017e4d5465394abe8458e6ec305f6b62053d0c9a43683a7a40632ff67def4691bd9fc45ab7798735b0f0cfd8be06b0005d97c8dcc5b398227ab6660b04527a23ce44488f38920b42d211ee998ec09842c02a0ccd76a28b0034b712b18245263088443881eba2dea3ed83be7877885caec320bdbc0680d5f51493efbfaed57ea268398d833d3e30d9e62d34fdc4945ae58cea39acf976c12da4d962f705d60e5eb714de2c2a4d53ffe5959d4089e7b147a093ce4e327f7c0b6ce6a01baaa66e49514b291ba5f51e3beaba9cf919b9e08fd74f8e1021ba7e4d291c89373cfd09f100c4a3170a0069bfe947f5681b1f9cfe7e3db81f414c06f92c45f290923f8b08264c8c3c70d71df2e9c6084e782c9eebe507ffb75071e77457d6c02693f68e15d6c5326304293bcbcb37c1626744dc312457653ef51d1bb9d9f74a1dbf957454256e97737d6152b8720f10eeccc242ca37600eba466300e8c113a5046d3abae32cd277c242054b66b42614b53334f2f06e9a5902f9d9e6e9e94007608ca0094eb900d0eaa4d7bf8ebcf6131fd3d7dcb395496172681e30c3fd46b2c6a96b5278dce84af80090ff7e63b4a603fc7de46a2f73e3d4260b989397d4a10be51d9b325fae995a333e42843de6a9f4dc8517dd207129a70789b61b6bf851c5753f064af370ead1e5d4b238119dc4939804430706c478a3c8c1efcd67d66083cd0624cb64b81d1bcdc994d81b4c09d366a22ddc314d5fe6f49c72932649679bbd5e0990c3f58d0c253b96ba3fe21b681037e017dc17edd270292c4be9800a12c560bd6b6464dd011003ba31e1f9688b2459aaf87b42251972fe03aeca019baeb75a23444984b473f391218441a7ffd563d99dbf21396dbb2b7c808ccae31c92a479c6b09032f5107c800f96dab819c5673ca167e581dc959d3cfa3a44220217724efaaaf8ddd99a05736003d5ebdf418742ae12a2e9b5c09b8c9034367665284822ae6dae68f5cf7704af8616564d189442cb5e521d6a9fda083456172da558c95a288016adf466e538629c489ff6165acf2493352c1de347a70256127495ca6aa662fb1be5f1a3f01bc0d4630517ea6a7f4dc55e3206509a4ad400bfbb68b479d5ec7e285b6904db12d85c4ec34380559eede0e05105aec6a389c0d6c81a57651a28e1db7f2ff8d3d9e81692dee92632615e3ba91d841f4e17fde776d38afacbaf62d044087e96f08ff0ec74d34f13db5545094c483b05e4da05785b01ce92cbf2ee7485549c71e466474bc38b4684d681abea08f571ea2d973ae98e25d5d85bdb91c6d57cf559f7f0f56c4a5511ced9b519320b06971ffd065b22167bf04d7c4226dae51aacf7c6e7f2445a4b2c995d3a121c08086beea85dee98c71eb6d9b89d91845e23080f779996f04d2a4c782fa50ebdca77205c8416fc60e3fb669f82ad47017c7f251d744726660ab87791484f10926effba17ae89af58a90411fd0706b2ad73f78c398eddce12e669af443991b20cef5102718e922d43559f89b8bf5be8e051ca23eb8379dc9a5e9b5cb25ca8222fa55423f7b9c2a750edf361b72c572cc3f4c73851e8e2ef183380a7f09df88c941ea3ef733262231736db6e0d71e4e608fed95461417b95445b766adfcaac09cb8b73260d9a11b130cccd9e0be494ed104fe5f782ede8c81be2f6b0fa3205d40c08fb966758fa9ebf6de504c929fdf962b6bf7a8bb11f8a9dca165154261901471452d5d7734673bd2877ddd01223eba34ffd19e76eb8f4c951e0e41e16590576063bb9a64b71d3db134f42bfc72a50069aa31126cfe51ad14cc33ceee230bfeaea323fc0a9057b5ddc70e1bfb3f6bdbffa63ce311c5d10c5aef61ca540d26405cbde976641c333e53f8bc1789e6111c8bae4b8e8a9f02f76e34bb5e388e4ef1d0d6fae6b9385cfee0ef366c659bfa43d1497f713137a970a5504ddcc377a1d8af5fa17d39bbde2afd39b3420c68976b4ef88a8cb850abf71da7a5cc3ac5fc5c75a04881b05ca3c6b0d75cecffaf28ee54bbb6bfae68327440fb6f4d16c43cf962ed3054599eacf3fef6cf17ba994d61815879187f748e71392bdf8df1e6e0646abf2c45f65b698e69f99a91d46148d879cb0c3b93ebb9236486efbb352be0ef398c1e7477fa9a182ee26b83ffaa720dbf3fc95b09640dd1d31241e1c74e05c5b0d32c30f2c2b07314c3c10b930080ba504962a06a89c49d6a808093ffac612c5c86552768f0af6d8e465d0d443d157c328d3ed0e00d8b381108c04f01ead1edb40da403cfea551137249eb3890d0e66b9d328c22b3baebdaa78684ae166a51133ccfaea69dc2d2410e6701e5d2e92790828234a6b06acfc91882df6eb278966606f2f9365db24e151163331c1f944017917ef00b94e1649a0769282b781c2133396eb325bc8ed31538706e21289906c35d6724ed27890302bf965d8f743628f4bc04fac4ea1a601eef01ca6ac40577051fff5305dbfbfbf35d097873c950e019fac3be5ecbf0ec5f04e77adf4740ce5dd98f43d52f48c484799e21ea45ceb328d68a63edab35004b0335ed47196e43121b88bd742eb7c8d2479d9037d232501ff7d96e9d4d1b59724d85d91c62e56962c3e14dc12e83d348b8c883e62e48485dfee17a387fd4b3c6d0534bcb1b6fb3b97f5101102218779dd6af38cd6850bad09ddcf336272f17c84b894538a4d32a4c770b01ca03ad8781382b0c42b737eef36e19e87669e44f0f55d9fb7ecfc341504abedaa2278c293161c747bc000fb24d8640e9839164d0738e6d3081ea1c5a36cb3082c6a054982919153da59b4524fbbe753ac0ab0a38d69ef4b72318eaea177d65cf7fcfaa8c3b994cc477ca89ccd209a71b58d0186608692cd8736557352bd565bda4e1f335fb15f9b8e72217d7fd30ded5ddc0ff88b3f16a1aca7f1be7c8af68115b3692499208fc150cb620b4ee04e0e7232ac69e676bf1bad64b60b9edd0bb93ac59df52a2e148382cda71d90223ab29cd6ad006c16f71087d8d4e233b59949211795cf2e5ebef6fc0ab77cac0ec42612d3c2a49c3d9e76868d673f6be67c7e39bd37105bfd154c840ffb799f2b1c98190d5fa866ce608ff4f130ffb17c75c27e94e1d65609b59ca192bee9f812b8bfbd94878a09b7b4cffd88ce67a4f7f13629c3d7d3f77f9131b47eb3c2f960579d71f887395a7901bfa108fc3d6a77df31beb2a7bd351587e62699caf51f109769c2c321dbf9d9fcc68e40b0ba05e50f9b3b03934b36e729157508f878b6e99888b7a33b5086d6c831ae18129db356455cbfc66c301474a4ff98e01a710a4cdaa2dfc7696b13993d367d9122d25d3ee58e5c31e26bafb71e36484262b7ab3b08e195f9d463f568a5b28806ca9cfb292678058152e547f60905c4d4c4177fac6bd813d4679a8f51ad937882eee8ae648aab78fe504fc9161691e3b9b2793ed98d56530b62de45244aa702a26691a5cd4ff8ab014a9423e3469ef2e975b6cfaf84195a7be02e436b3e725e688dfa81fd32d9b1df2bf15764bb31a672946b7182c73498acb54468a003f4cc01a1588a6a10644dbcd10f4ced29d5db2477db645c0666985d07a8a292b53fd322dddff9bb0e419c4b95c4e2064e78868f3be58279e3a7d44140aa741dca313416de9bd579f1b4f2bcfcbdf2282aa29b527a52599aa9f1577079f9aa03b01721279ebbf8d099c29fca602d24a85584a3162df002f7b09b0b5db852f23274957cadc5c574f196e33fb52d242555043434a9743a60090674441579de145e97b5bdb69330a2663d819b7cf8f0cb0f12fe6eda9e3dd8fc630cde156836c67821c3f6a9b541463a92b82bf1008cfc59a7dd74b9cff6c3d07fdccf4811a6bb1b03de77c7cbb97c68e8a520e03b0e7cf2622a7d15e53a09461345ad7473b83ef5db31cf0db1f051edf0f0e1cfcd11417dfc87f4b78b4083a6f23971ad5537cdad6d2ec70c142947da1e850b7a235da2682f66d2820cd5f2b27abbd623d59f8ca6d63bf154f6e0ed83a01d7bac25481a155f8eafe7d9c80c3d0773bd89e6473703d7dbab878fd4ca38dc68a40f2daf0f31e9d6b0fc1caddc804a6c85c1966a07117ed3d563c033d51282eb9eaea8ef4a1b57e9ae75168cbf1d8a4e866b15a3fafd96a24c47472780b565c64aa0559e52b95e30a5c8279d7d7d190d4904e81c8a0835809f81bcfb7cbe7acf3ec08107edd4be7a166961607c4f2c38b20054f5f5a21c2fe43f56cb1fea48855e222d69acc410c8b34bdf4b65d840fc79988aca601a95dabd6c0e839e93f18c440dc44cde5587ceeb7176e0d9df44540c449e02359c250f3a5b59210dc3afad4abc31892b144c50184cc2e3c8dbe368f0eb9866c8e0da8dcf608c9ec3258c2c9af2253d0437e87cbe95b07863b4b838ba30f08df82e0a1b80514064322ca155209e99233460d9b3001362f430d09f64b5aba7d041b471bcf98edc1668dad1e6a82b8688704589f563115952adc8ba673cef492d0d044c8c007d10fbf6a0d28cfb832907cc25902204c6a990c23aa6bd36b499ff9202d07f584484207e173fb8c7b9220cb4df9ce8a6bd81bfe32d59861cf723734a627a2b17dc2ed66203325beddf248a4af9d640d95879b6d4266e9caad80041c84479ce8f467c81a19369ec79728955c98318f4a54b99d78ff190dfa1ac349ab500198e6890c2cd2b7c9770450cd19a5bed7999b90a521d018da06ee56c62eca42ef2c427e4063f5ca18114593bea05692b1b5793a49a85e4e67b39a11eba5422df69a77a6096026664b59a088742420be4a5fed31b91c41b346612f275c666d0919f90cf244cbace4f65aadee9095a38611b444f0654cec8d396a81a8dcb032f46818b5a59f236e64dd63603622763325c82fc73ea351d390e148006d1da500ba4013bb984ab63c99e934abc6463a9218be9817b64f250b0c883c57a6e13392e23b3624c76e166c27618f834c5d66d8ea24c18903e68dde3fc51c8b6f3832f77d1ac228810800a6c39ecb93d0076530b16752f96b6e3f9fecaa0a2e1518f135e0f03a886524706960ab0df9022b4227f637a3fe7ca014f1c47a54970a9f2c74c681d5dd90fc562075a12fe8112c60fa0c4f7a600072f6c17adadfaace3f65a2ffef5c8b392383929d662bf37755b88b9aa9e4528f1417fe1aab8b1eea68987de20e3e05a2c3caf97bad1b0df340ef18b2cf1a7ed82080586b1b85686775fd23b02feeaa4dba527e45500319a3fbacf3b07b330110ad265fb9e86906703f01f813c68034db44"}, @ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "e90050ec0e567014f1c88dc4468f358f66434a56da338e300478b5b3b82bf3be100f6938ea829167395c99f2f8cdd55d78de2d361db3e5c85a13a5f8eb6794d4bd00b4f550803a0e921b1523502f7237dd"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '#.{--$/(\x11k\\\\\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-/\x90}$(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '{!-+:+-.\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '#.)\\.#\xba^\'][-]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa0ec}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "f4c8c67b65d3421577ed4904cd7c5a3ad2124b0d1022ec074e4845fa4075a869bd4ac1f7d353117365d32c3751f23be4ce46fa4c94a2a2dd086779bb0246b790c5997ced0e179fd5b440fb2eb9a56472f9e8f73f30310c0e73adaa491c29ba7b1877d4d82a5a3acb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x228, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '(\\:](/[^[)^{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xded7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']-%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '+{]+@}(+*^{\x00'}]}, {0xb0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x78a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7f, 0x2, '\x00\x00\x00,S\xb3\x9b&\xd8\xc5S\x8c\x94\xcb\x94[bN[\x81\xf3]\xd7s.>\xcd\x96\x99\x85x*CU\xfd\xae\xb0\xf8\xda\xa2\x03\x00\x00\x00\x00\x00\x00\x00\xabn\x10\xfe\xd4\xb1\xd5#\xac\xc3)\xe3\x82\x91\xc3n\xa5\x9c\x92#\xaa\xe8XFD\x8er\xf0^\x7f\"\x02\xe0eD\xc6\xb0\x95\xe0\xb3\xa6\xcb\\\x94\x00\x153\x7f\xbc|\xb7\xe9#O\xca\x05\x98\xa2\xa1~\xb8\x86\x1d\x94D\xca\xbb\xa3\x110\x8d\x12&\v\b'}]}]}, @ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "25865ced5931ac64adf3fda97e2dbb5288b5a380044299d4219f3eccae0fb9b8ba68986e2cdc33aa422999cd316e4feeeddc83b26a34a2729b54172809d1e91057c83d7c65353c629ad66bc553bd26f01f06935b38a9102f2ecdb58143d56b6aac3a4044e5ace24bbb077d78154429e6e3226815910596aa8ee8fe7c053930833895a936e207e8aefe9a9a84bd904907d6d3c9a0d0f1fbb63b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb99}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x4}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x14ec}, 0x1, 0x0, 0x0, 0x8011}, 0x20) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2900}, 0xc, &(0x7f0000000b00)={&(0x7f0000000700)={0x3f8, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x3e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffeffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaa29}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68b7f53a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$O.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '--\xc0&$!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x96, 0x5, "6af276f43af08bdff1d4995517c39ea2008affa688e46d1ccbb8e17f2e5128f3b8e7374ca4b86a76417f28effc42368f2fcdddafdfba3aa08c02aebf9c9c8d54a8effbbff27a8f1b71a08959c829629ba42bdc9d4784d9ea7b3f1d77f4adda41b84a732535c9ca28aa5ffe3b8d36cba605f5eee380ae82bfe706a92bee14134d402451c356d67158611688975069dc5efedb"}, @ETHTOOL_A_BITSET_VALUE={0xc4, 0x4, "ede4dd975029df8a83b0daff3cd5657f24c121600d3337c0be330092ff15c9ea9fa6304d78237d4eb104607c622bd16602bd72d329b1e6627b1ae393de1d9567c5a75dbfeed960a7631eea2b667b00a28f4efb335ff5f266ba97a5b55f41adc5e1eefb49408237d21a0e9b84855eb5566f0246287f5f049451ec3374d9df9b9d56a77974b6ed3cf1f5ae4a6bd9e56b6f9bd2a05f45ef09f91a8c16b94972b9ffda46cdc01cf6ef96d485ec32f5952c845f47321e5dace025eb5e5467edc26c25"}, @ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "ab3860c0ecd26bacc6042aa52a668f3884f37d65e37058733b62804b784a72cefd090f3ff02a235db040816e21300cf5ed7cec6cbbc415b03893013621a3be74ff86f0c840cef5e7834e7372d9bd7bc06a6fd16a43c4b28e6ff8a2ee647753e96099129c37215cad2c159845a4852a76a5c78508fd042dad9407ee7a6110aa36a52be9af9a8916ed77dbf03ac255ee114879ec206e96ea43cac47a97bb3b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_VALUE={0x8b, 0x4, "f36afc30b2ee86d9134133db0c2fc0e86c9a628135e4f48e2abb3cfbbcf75254d6063ef5157813e49331fc1bd020991989f26af5ba404bbc0a8f14c23c528dcb378e0e378b21c0dc9d2bda7ad338d26b0ed13f4a1861538f5879a15dfa31c3902d0241abc35f6775b7d8c891bc0c2458b8b82c3cdbb4b28829c2ea7ce1a83b758ca85e2dd7ecee"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "6be82bad3fa5cba9338a8fe9cd200fa4b1cd668852ced1ff8e90eace6a560123ba4590798e7cb71957a029f2ae1e8f658f007fb8d0de6c141b417092993dc4e5ebd6cb54da9f06f51e7711b2798694a40613d25449d2ae64bfced1137ecd9bcc29c61faa6b50c2ee869bf8c86f89cf0fe11abee3f01137bcb9704674ab70b9ae34126be904e4a736987f03e99a53fdde9c1978d2ac"}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x4040000}, 0x90) 1.64479197s ago: executing program 3 (id=4780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}, 0x1, 0x1200000000000000}, 0x0) 1.484509868s ago: executing program 4 (id=4781): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x20) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0xfffffffffffffff7, 0x81, 0x7ff}, 0x46}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0xa888}, {&(0x7f0000000000)="f8dbb89bfc5f187cca4335143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x1, 0x10}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}]}, 0x34}}, 0x0) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r12, &(0x7f0000000140)={0x1d, r13}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x3, 0x6, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x7, 0x8, 0x9}}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x234, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9e4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x3, 0x2}, {0x0, 0x3, 0xb5, 0x2}]}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r11}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x96b3}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8, 0x1, r14}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x7, 0x0, {{0x5, 0x4, 0x0, 0x3f, 0x14, 0x1, 0x0, 0x0, 0x2f, 0x0, @empty=0x2000000, @multicast1}}}}) 1.377143882s ago: executing program 1 (id=4782): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x200, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="180800003000000000000000000000001811007f", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b709000000000000739af1ff00000000ce09020000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.304621718s ago: executing program 3 (id=4783): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x9ec9, 0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x410) 1.166389295s ago: executing program 1 (id=4784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x1a0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x7fff, 0x1, {{0x15, 0x4, 0x1, 0x4, 0x54, 0x64, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_addr={0x44, 0x34, 0xee, 0x1, 0xd, [{@loopback, 0x9a1d}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x4f5}, {@private=0xa010100, 0x2}, {@local, 0x10001}, {@remote, 0xff}]}, @timestamp={0x44, 0x8, 0x55, 0x0, 0x3, [0x81]}, @noop]}}}}}) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x30}}], 0x1, 0x4) 1.10502441s ago: executing program 0 (id=4785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, 0x0, 0x78244, 0x8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000c090) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) 923.898008ms ago: executing program 2 (id=4786): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800ffd018210000", @ANYRES32=r0, @ANYBLOB="000a000002000000b705000008000000850000001900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x28}, 0x94) 823.859127ms ago: executing program 3 (id=4787): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) bind$can_j1939(r0, &(0x7f0000000580)={0x1d, r2, 0x1, {0x0, 0x1}, 0xfd}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002b40)={'ip6tnl0\x00', &(0x7f0000002ac0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x2, 0xc9a9, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7a1, 0x48, 0x7, 0xa9}}) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000100000000000001000000000000", @ANYRES32=r6, @ANYBLOB="00010000ac0000003c0012800b000100697036746e6c00002c000280060011004e20000006000f0002000000060012004e24000008000700000100000500060007000000"], 0x5c}}, 0xeb64d656001b2f26) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003340)={'syztnl2\x00', &(0x7f00000032c0)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x8, 0x4, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, 0x40, 0x7, 0xe4cc, 0x200}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003640)={'team0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000000200)="6a7b27918e21cff8bb210832b97e25b5ee6f0d8d962bb21194", 0x19}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="642f978d037ce33e87153f587960cea6750f3616900b4a7bc35a515d2498435d7b0de3c222764cea959f4e549a9055fa5fbbab17c4f183c89788708b195d9337af823172d77f6bb5110dda7d5aff75fda73d080baaa5d827e68210ead53c1b4051f438a21385c0ad9aea7af757068efdbe4aa7d53e5d5860e0230905e6184b0187f5b470fa8f10ce0d34eb0c0ef841d1e69dc4ca", 0x94}, {&(0x7f0000001300)="e0463396d398c04844a2f052ddfd4d7606a0bac63fa870cfad627a34b340316d6276bb65c6e167a4f16075726534ca49f4676a25a2d9f3740e2bb85085e4fbd584b757c168dbe8457e3bd31a178dd3c0bbd0ba423315fb16a7aa2e278a9cf1084e1f6f95a445120cc6604e6c632ec910e255f3a92135437fd99ac45b46ed042eaacaf8c851ca5519a8beba53c6aead6b", 0x90}, {&(0x7f00000013c0)="8002093218adea3a15b5d592e3ddfb9b8a5816a6e87bef905cd0996a2c2d729ece84d9050eeba8016b14571997610f921b8b5013baae339e19249fb183f3ec9a05ddf5073bac46ba5afefe9ea36ef1d52c902f3ccfc650955547138ffef1297d67", 0x61}, {&(0x7f0000001440)="ef4a7448567b3542d50144903829ed90cd07d08f059cab252c419e307c01538ec4f5947cd58d76a6bfdab09c939ca161f9f21331974974c7d9cc2326ccd11674b224ed3d6c624d77a30d4966f580847a0eba4eac228a35f6a614b58d3986073452ed7147658abe8b13d6e11ca68826b3416c72fe5eb2ad784884d562cada799cf97f0a35344cbf6cc5031b0b4fbeb5e96562c986c22761c7df0c7a0185d09011cd865eeb55bfa01a94da78c561ac9d233a1da12e", 0xb4}, {&(0x7f0000001500)="9b94668415c94a557f293826fb038570f4606b8b273625ddcc9a721a408f6e903a581f774eeb94ec1eba2fbe6ab4aa2fea2d474d3df72a753865b7b9297c7d754b89390e3f29c62184362e81fcac1a3896579679990980a3f6eb9ecda5bb2dfba1f7e70e1e0d9229628e7545d89ab041834c12c4ae1a513e6ecf16e9cd1fe813365359c42b93eba22f5fb73dbb07d6a7cd28b9ef2c2bb2ea62763a1aa1ae67f25e45b04134720479c64bf4581376902fc5d6ec484b61d1465078f5ddc42462d73591b390a85c4ff8f661a4e7a7b19fe41adbbf403b29ac421d8d5af47d9b681608", 0xe1}, {&(0x7f0000001a40)="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", 0x1000}], 0x8, &(0x7f0000002b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xd0}}, {{&(0x7f0000002c80)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000003000)=[{&(0x7f0000002cc0)="21ca01e14d7bfd72f79e2380b49f637d025787a9ed537314559b907a7e0cf12aaa058303b5f8afc794d45cf0c7d26952e8d7405bbfa173ac95bb8d557e745e8103bc970feadd150c4e1bfc4c0038fe587be7d46c906a811344a027121a354ff9f5cbdfb397d4b5601fe3df2f14bc395b1ca3ca29d1f84f5954317f991c240626da8f29c5e008fdfb3f6187d5e4318f3bc7e790c9a8a7e924842963b8d63ee8134c10bb9ec392800544bdde9470de56939fa61c30112f4d4172ec7d1ad6f1b11e2d0ebc2884f602f75389a279a36e32d0eed1a81762", 0xd5}, {&(0x7f0000002dc0)="d412f0df2e4aa8cd3eca78d4408138788b2826b0549db2df19326454bc662716d784cde3bd4e6057ac51be8a86d1406e51bbc62e63c5e6a2b12ce270b717264922efdcc6d679692bd2cbf34d95c7e81df13330802c2e66aa5197792f9a2d0907dbb9bb8b16725c9d04a9dd637e05d85e1649eb38f2ac1394c70890", 0x7b}, {&(0x7f0000002e40)="bc3701a9ffcfa611b1d0be38ac11b1124031222e5b227c354c5dae88a56cecc2c9e54b21471af5ff2de9fd183afc6fa9095931c6cecb004918323e6d6cba6d5bb40e8cb8183d84619c0d146a8eb94df4f86a02238ad58ad796cdab739dba9b3ea932d1a4c7b7bdb95ce70d8fb9ca30fa323cb2bd4c064e2cc95c1e26bcc6235e1d1f2df15203a0164b65dddd564cad8eca3aa5f083a59404f12e09eaa533f25b1b29741d30429aef118902ab2c692dda4e81f3d0bc68b00204f260f12b4f9567d82edcee12b3688cf1c767fc94beae221e12c449652b0df17ce043c518233204a959", 0xe2}, {&(0x7f0000002f40)="d246fd1ab2d055ce55ecb8f14b84b5535e1497e0ddedbb1fb89e2dce8aa38b99c5a58c82355fc8e9dda75c54b3d62429b36f098eb32846e19964252695cdb3a9da2f6e5ff762318b5a649c8a5dbaa8120eec5f5215c13e73fa9de2569f15bf1c4d3f5eca1befd57c56978368022a8805197683ba18f5e9d61e23cf073c0a2a35a50bd9d18c988b", 0x87}], 0x4, &(0x7f0000003040)=[@ip_retopts={{0x80, 0x0, 0x7, {[@noop, @noop, @lsrr={0x83, 0xb, 0x99, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x3d, 0x2, [{0x0, 0x4, "5c81"}, {0x5de83ac73a8452d0, 0xe, "134d6ea6fff496b24e6308a8"}, {0x7, 0xc, "8969c6736060e752b1a0"}, {0x1, 0x6, "3e987a1c"}, {0x7, 0xd, "2032011c1ab046975e2bb8"}, {0x6, 0x6, "990f13f7"}]}, @end, @rr={0x7, 0x7, 0xd4, [@local]}, @noop, @timestamp={0x44, 0x8, 0xb1, 0x0, 0xe, [0xc00]}, @timestamp_prespec={0x44, 0x14, 0x66, 0x3, 0x2, [{@rand_addr=0x64010100, 0x6}, {@loopback, 0x5}]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x57, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x64, 0x0, 0x8, [0x1, 0x9, 0x3, 0x5, 0x1, 0x2, 0x9, 0x9]}, @lsrr={0x83, 0x13, 0x3a, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x43}]}, @rr={0x7, 0x23, 0x52, [@empty, @multicast2, @loopback, @multicast1, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2]}, @generic={0x83, 0x7, "dc7e24a76f"}, @timestamp_addr={0x44, 0x24, 0xe3, 0x1, 0x1, [{@empty, 0x9}, {@loopback, 0x40}, {@local, 0xc}, {@loopback, 0x4}]}, @noop, @lsrr={0x83, 0xf, 0xd6, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @generic={0x86, 0xe, "82e0df119fd7650a95c2998c"}, @end]}}}], 0x190}}, {{&(0x7f0000003200)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003280)=[{&(0x7f0000003240)="581d21887c53962ff600e7c413e16a", 0xf}], 0x1, &(0x7f0000003380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xd0, [@multicast1, @local]}, @timestamp={0x44, 0x14, 0xed, 0x0, 0x9, [0x80000000, 0x9, 0x3921debd, 0x7]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast2}}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xab, [@broadcast, @loopback, @remote, @rand_addr=0x64010102]}, @lsrr={0x83, 0xb, 0xf6, [@remote, @multicast2]}, @ssrr={0x89, 0xf, 0x8d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0xc, [{@multicast2, 0x2}, {@broadcast, 0x1}]}, @lsrr={0x83, 0x13, 0xe3, [@broadcast, @rand_addr=0x64010100, @loopback, @local]}, @generic={0x94, 0x12, "f22005da13cb01aed4945dc3fea31f3e"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x81, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010101, 0x6}]}, @timestamp={0x44, 0x28, 0x6f, 0x0, 0x0, [0xa6, 0x7, 0xa1, 0x6, 0xc000000, 0x4, 0x8, 0x3ff, 0x8]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc2}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x64, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2b}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f1}}], 0x190}}, {{&(0x7f0000003540)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000003600)=[{&(0x7f0000003580)="48fd45fecb4a0a25fb2911ebf7bb65fe5093eefad4ea1c029b1ffc92e88554576a4f0a932cf7616ca7a98ff3fc56a8def63b37aabcec70ed0b9771984dc40f8879b1", 0x42}], 0x1, &(0x7f0000003680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x38}}], 0x4, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "652dfafdb01f288766c82323e8"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "8300552c"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x840) 655.246476ms ago: executing program 2 (id=4788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x1, 0xffffffffffffffad, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x1, 0xffffffffffffffad, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) (async) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) (async) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000180)={'macvtap0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x5, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x13, &(0x7f0000000500)=""/19, 0x41000, 0x29, '\x00', r5, 0x1b, r2, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1beaf4ef}, 0x94) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0xd, 0x8}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff000000e1ffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f00000000c0)="328ab2b3e5"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f00000000c0)="328ab2b3e5"}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x2, 0x6, 0xc, 0xc011, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x45, 0x8, 0x2c40, 0xffffffffffffffff, 0x7ff00000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xe}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000a00)={{r0, &(0x7f00000004c0)='!{{\x00', 0x400000, &(0x7f0000000500)={@align=0xfffffffffffffff8, {0x99, 0x7fff, 0x7, 0x1f}}, 0x8, &(0x7f0000000540), &(0x7f0000000580)=0x2}, {[0xe9, 0x6, 0xdd83, 0xfa2]}, 0x8ac, 0xea, &(0x7f00000005c0)=""/234}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000a00)={{r0, &(0x7f00000004c0)='!{{\x00', 0x400000, &(0x7f0000000500)={@align=0xfffffffffffffff8, {0x99, 0x7fff, 0x7, 0x1f}}, 0x8, &(0x7f0000000540), &(0x7f0000000580)=0x2}, {[0xe9, 0x6, 0xdd83, 0xfa2]}, 0x8ac, 0xea, &(0x7f00000005c0)=""/234}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x17, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000}, [@ldst={0x1, 0x1, 0x4, 0xa, 0x7, 0x20, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x8d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x3, 0x0, 0x5, 0x2, 0x100, 0xfffffffffffffff0}]}, &(0x7f0000000140)='GPL\x00', 0xee1d, 0x79, &(0x7f0000000200)=""/121, 0x40f00, 0x22, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x6, 0x2, 0x9}, 0x10, r6, r0, 0x0, &(0x7f0000000740)=[r7, 0xffffffffffffffff, r8, r0, r9, r10, r11, r12, r13], 0x0, 0x10, 0x2}, 0x94) 560.474431ms ago: executing program 0 (id=4789): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x6, 0x8, 0xffffffffffffffff}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x22}, 0x94) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x1000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x1c, 0x0, 0x28, 0x28, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x4}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0xd, 0x1}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x42, 0x0, 0x3}, 0x28) socket$inet6(0xa, 0x80003, 0xff) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fc00000008000a0000000000060002000100000014001f0012000000000000000000000000000000140020"], 0x5c}}, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340)=r2) 552.072191ms ago: executing program 1 (id=4790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000110a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000020200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) 458.386923ms ago: executing program 4 (id=4791): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x6, 0x4279, 0x6, 0x2, 0x5}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000340)='<', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@hl={{0x28}, {0x4, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, r2}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) shutdown(r2, 0x1) 219.717993ms ago: executing program 2 (id=4792): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010426bd7000fddbdf2500000000", @ANYRES64=r0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000400000008000500", @ANYRES32=r1, @ANYBLOB="08daeafb2768db698349000ae581c130944b5a97ecaefe6ec9d826fe", @ANYRES32=r1], 0x4c}}, 0x200040cc) 219.438134ms ago: executing program 1 (id=4793): close(0xffffffffffffffff) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000000)) socket(0x1d, 0x2, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r4, 0xf5f) accept(r4, 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0) (async) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8922, 0x0) (async) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) 219.2569ms ago: executing program 0 (id=4794): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x200, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000300000000000000000000000181100b0", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b709000000000000739af1ff00000000ce09020000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 192.147802ms ago: executing program 3 (id=4795): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x20, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x80c5) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r4], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x49, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f00000001c0)={{r5}, 0x4000, 0x8, 0x7}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010126bd7000030000002b00000008000300", @ANYRES32=r13, @ANYBLOB="0400460005003400c4"], 0x54}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x9, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000100)={0x2b, 0x3}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000104000000000000000003010000000000002600010000112233445566778899aa00000000000001020304050607087c385c93ed3c12666d00000c00020006000600884800000c0003"], 0x58}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x8044) 124.454476ms ago: executing program 4 (id=4796): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv4_newrule={0x30, 0x20, 0x200, 0x70bd2d, 0x25dfdbff, {0x2, 0x20, 0x34, 0xb5, 0x80, 0x0, 0x0, 0x7, 0x4}, [@FRA_SRC={0x8, 0x2, @empty}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x30}}, 0x0) 44.375385ms ago: executing program 0 (id=4797): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000003000000040000000800000000000000", @ANYRESDEC=0x0, @ANYBLOB="00000000f31ae8826c37e07c00"/25, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="1300"/20], 0x50) r0 = socket$rxrpc(0x21, 0x2, 0x2) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES8, @ANYBLOB="00080000000000007b8af8ff00000000bfa200000000ffffb703000008000000b7040000f6ff000085000000030000009500000000000000070000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000005db2c65c9e5f000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x24}, 0x94) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x2181, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5b, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0xffffffff, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x5000940f, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 0s ago: executing program 2 (id=4798): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800ffd018210000", @ANYRES32=r0, @ANYBLOB="000c000002000000b705000008000000850000001900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x28}, 0x94) kernel console output (not intermixed with test programs): netlink: Flow actions may not be safe on all matching packets. [ 474.425136][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'. [ 474.615621][T19171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3514'. [ 474.988742][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3519'. [ 474.989520][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3519'. [ 475.216560][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 475.217021][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 475.220031][T19199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3524'. [ 475.253440][T19200] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 475.652832][T19226] netlink: 'syz.0.3533': attribute type 2 has an invalid length. [ 476.188783][T19257] netlink: 'syz.2.3544': attribute type 1 has an invalid length. [ 476.305399][T19257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.330352][T19257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 476.332722][T19257] bond4: (slave batadv1): making interface the new active one [ 476.334713][T19257] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 476.392733][T19267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.403745][T19267] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.421619][T19267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.518922][T19267] team_slave_0: left allmulticast mode [ 476.523921][T19267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.541793][T19267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.554675][T19267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 476.554697][T19267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.585541][T19267] veth1_vlan: left promiscuous mode [ 476.590825][T19267] veth0_vlan: left promiscuous mode [ 476.597889][T19267] veth0_vlan: entered promiscuous mode [ 476.600644][T19267] veth1_vlan: entered promiscuous mode [ 476.617885][T19267] veth1_macvtap: left promiscuous mode [ 476.619097][T19267] veth0_macvtap: left promiscuous mode [ 476.620205][T19267] veth0_macvtap: entered promiscuous mode [ 476.621344][T19267] veth1_macvtap: entered promiscuous mode [ 476.653717][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.655040][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.671240][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.672650][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.694947][ T12] bond1: (slave batadv0): link status up again after 0 ms [ 476.704036][T19267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.712754][T19267] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.716834][ T12] bond1: (slave batadv0): link status up again after 0 ms [ 476.738028][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.742973][ T83] bond1: (slave batadv0): link status up again after 0 ms [ 476.766847][ T12] bond1: (slave batadv0): link status up again after 0 ms [ 476.772872][T18502] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.772975][T18502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.783279][T18502] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.783382][T18502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.795881][T18498] bond1: (slave batadv0): link status up again after 0 ms [ 476.809034][T18498] bond1: (slave batadv0): link status up again after 0 ms [ 476.837731][ T12] bond1: (slave batadv0): link status up again after 0 ms [ 476.865724][T18498] bond1: (slave batadv0): link status up again after 0 ms [ 476.933358][T19295] netlink: 'syz.4.3555': attribute type 3 has an invalid length. [ 477.038075][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.040231][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.040272][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.889912][T19344] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.892108][T19344] bridge0: port 1(1¾x9ÿ) entered disabled state [ 478.380776][T19369] tc action pedit offset 132 out of bounds [ 478.705433][T19389] x_tables: duplicate underflow at hook 3 [ 479.193181][T19419] __nla_validate_parse: 51 callbacks suppressed [ 479.193200][T19419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3589'. [ 479.340356][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3594'. [ 479.400556][T19424] syzkaller0: entered promiscuous mode [ 479.400578][T19424] syzkaller0: entered allmulticast mode [ 479.403222][T19396] syz_tun: entered allmulticast mode [ 479.411423][T19431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3592'. [ 479.471700][T19432] gtp0: entered promiscuous mode [ 479.471717][T19432] gtp0: entered allmulticast mode [ 479.471981][T19395] syz_tun: left allmulticast mode [ 479.645543][T19438] net_ratelimit: 27 callbacks suppressed [ 479.645562][T19438] openvswitch: netlink: Actions may not be safe on all matching packets [ 479.835931][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 479.845331][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'. [ 479.922018][T19448] smc: net device vlan1 applied user defined pnetid SYZ2 [ 479.948219][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 479.993761][T19451] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 480.046315][T19451] netlink: 'syz.3.3598': attribute type 4 has an invalid length. [ 480.046335][T19451] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3598'. [ 480.064454][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 480.075880][T19462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3602'. [ 480.096912][T19450] xt_hl: Unknown Hop Limit match mode: 4 [ 480.169777][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 480.276720][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 480.386799][T18503] bond1: (slave batadv0): failed to get link speed/duplex [ 480.452843][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3604'. [ 480.598071][T18498] bond1: (slave batadv0): failed to get link speed/duplex [ 480.610901][T19477] syzkaller0: entered promiscuous mode [ 480.610921][T19477] syzkaller0: entered allmulticast mode [ 480.707073][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 480.801061][T19488] tipc: Started in network mode [ 480.801091][T19488] tipc: Node identity ac14140f, cluster identity 4711 [ 480.801380][T19488] tipc: New replicast peer: 255.255.255.255 [ 480.825893][T19488] tipc: Enabled bearer , priority 10 [ 480.826903][ T83] bond1: (slave batadv0): failed to get link speed/duplex [ 480.859039][T19488] netlink: 'syz.4.3610': attribute type 26 has an invalid length. [ 480.903153][T19488] netlink: 'syz.4.3610': attribute type 362 has an invalid length. [ 481.003776][T19497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3614'. [ 481.177385][T19505] netlink: 'syz.2.3616': attribute type 3 has an invalid length. [ 481.219509][T19509] xt_policy: output policy not valid in PREROUTING and INPUT [ 481.871690][T19533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3626'. [ 481.927063][T11708] tipc: Node number set to 2886997007 [ 481.932990][T19535] netlink: 'syz.2.3627': attribute type 1 has an invalid length. [ 481.957879][T19538] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3628'. [ 482.084126][T19542] tc_dump_action: action bad kind [ 482.848794][T19582] veth1_macvtap: left promiscuous mode [ 483.300849][T19602] syzkaller0: entered promiscuous mode [ 483.300871][T19602] syzkaller0: entered allmulticast mode [ 483.797916][T19625] syzkaller1: entered promiscuous mode [ 483.797938][T19625] syzkaller1: entered allmulticast mode [ 484.570648][ T5280] veth1_macvtap: entered promiscuous mode [ 484.654078][T19676] __nla_validate_parse: 2 callbacks suppressed [ 484.654098][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3662'. [ 484.735814][T18500] net_ratelimit: 29 callbacks suppressed [ 484.735833][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 484.846817][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 484.958994][T18501] bond1: (slave batadv0): failed to get link speed/duplex [ 485.071525][ T4018] bond1: (slave batadv0): failed to get link speed/duplex [ 485.178986][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 485.214166][T19705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3669'. [ 485.287306][T18503] bond1: (slave batadv0): failed to get link speed/duplex [ 485.371433][T19712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3669'. [ 485.399502][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 485.516462][T18497] bond1: (slave batadv0): failed to get link speed/duplex [ 485.627603][T18497] bond1: (slave batadv0): failed to get link speed/duplex [ 485.685437][T19727] tc_dump_action: action bad kind [ 485.736496][T18497] bond1: (slave batadv0): failed to get link speed/duplex [ 485.803501][T19731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3675'. [ 485.958964][T19742] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 486.038451][T19744] netlink: 'syz.4.3676': attribute type 10 has an invalid length. [ 486.038479][T19744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3676'. [ 486.288296][T19755] netlink: 'syz.0.3681': attribute type 16 has an invalid length. [ 486.288318][T19755] netlink: 'syz.0.3681': attribute type 17 has an invalid length. [ 486.372693][T19755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.397473][T19759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3679'. [ 486.523053][T19760] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3681'. [ 486.660647][T19755] syzkaller0: entered promiscuous mode [ 486.660670][T19755] syzkaller0: entered allmulticast mode [ 486.752560][T19771] netlink: 'syz.3.3684': attribute type 3 has an invalid length. [ 486.752580][T19771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3684'. [ 486.758767][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3683'. [ 487.302524][T19789] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:21 [ 487.827594][T19809] netlink: 'syz.2.3696': attribute type 2 has an invalid length. [ 487.830922][T19809] netlink: 'syz.2.3696': attribute type 2 has an invalid length. [ 487.832416][T19810] x_tables: duplicate underflow at hook 1 [ 487.837369][T19810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3695'. [ 489.424878][T19892] sock: sock_timestamping_bind_phc: sock not bind to device [ 489.802015][T18498] net_ratelimit: 27 callbacks suppressed [ 489.802036][T18498] bond1: (slave batadv0): failed to get link speed/duplex [ 489.909170][ T83] bond1: (slave batadv0): failed to get link speed/duplex [ 490.017056][ T83] bond1: (slave batadv0): failed to get link speed/duplex [ 490.128603][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 490.239187][T18497] bond1: (slave batadv0): failed to get link speed/duplex [ 490.354113][T19928] __nla_validate_parse: 3 callbacks suppressed [ 490.354132][T19928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3721'. [ 490.371447][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 490.428143][T19904] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3716'. [ 490.478361][ T83] bond1: (slave batadv0): failed to get link speed/duplex [ 490.532265][T19935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3722'. [ 490.586743][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 490.673903][T19939] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3723'. [ 490.673929][T19939] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3723'. [ 490.699510][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 490.725204][T19939] bond0: option min_links: invalid value (18446744073709551615) [ 490.725225][T19939] bond0: option min_links: allowed values 0 - 2147483647 [ 490.757674][T19945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3724'. [ 490.806215][T18497] bond1: (slave batadv0): failed to get link speed/duplex [ 491.017994][T19950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3727'. [ 491.085651][T19963] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.086103][T19963] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.092907][T19963] bridge0: entered allmulticast mode [ 491.107346][T19963] bridge_slave_1: left allmulticast mode [ 491.107368][T19963] bridge_slave_1: left promiscuous mode [ 491.108320][T19963] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.141688][T19963] bridge_slave_0: left allmulticast mode [ 491.141710][T19963] bridge_slave_0: left promiscuous mode [ 491.141900][T19963] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.322503][T19965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3729'. [ 491.920550][T19978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3734'. [ 492.980453][T19912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.422678][T20006] netlink: 'syz.2.3742': attribute type 10 has an invalid length. [ 493.455249][T20006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.467960][T20006] team0: Port device netdevsim1 added [ 493.501356][T20013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3745'. [ 494.415843][T20055] batadv_slave_0: entered promiscuous mode [ 494.516793][T20054] batadv_slave_0: left promiscuous mode [ 494.821892][ T5617] Bluetooth: hci3: link tx timeout [ 494.822071][ T5617] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 494.833529][ T5617] Bluetooth: hci3: link tx timeout [ 494.833543][ T5617] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 494.946014][T18503] net_ratelimit: 33 callbacks suppressed [ 494.946034][T18503] bond1: (slave batadv0): failed to get link speed/duplex [ 495.058103][T18503] bond1: (slave batadv0): failed to get link speed/duplex [ 495.169139][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 495.275930][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 495.389467][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 495.496516][T18503] bond1: (slave batadv0): failed to get link speed/duplex [ 495.519684][T20104] __nla_validate_parse: 5 callbacks suppressed [ 495.519701][T20104] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3766'. [ 495.520166][T20104] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3766'. [ 495.610168][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 495.727151][T20115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3768'. [ 495.747890][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3769'. [ 495.747911][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3769'. [ 495.748020][T20115] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3768'. [ 495.776524][ T83] bond1: (slave batadv0): failed to get link speed/duplex [ 495.848821][T20123] netlink: 'syz.0.3771': attribute type 1 has an invalid length. [ 495.848839][T20123] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3771'. [ 495.877405][T18498] bond1: (slave batadv0): failed to get link speed/duplex [ 495.986587][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 496.136899][T20138] netlink: 'syz.0.3775': attribute type 2 has an invalid length. [ 496.222509][T20143] netlink: 1303 bytes leftover after parsing attributes in process `syz.2.3777'. [ 496.229579][T20143] netlink: 'syz.2.3777': attribute type 1 has an invalid length. [ 496.301573][T20143] 8021q: adding VLAN 0 to HW filter on device bond5 [ 496.453640][T20152] netlink: 'syz.0.3779': attribute type 2 has an invalid length. [ 496.720156][T20159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3781'. [ 496.739854][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3780'. [ 496.804191][T20159] netlink: 'syz.2.3781': attribute type 61 has an invalid length. [ 496.804211][T20159] netlink: 'syz.2.3781': attribute type 62 has an invalid length. [ 496.885853][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 496.932094][T20159] vlan2: entered allmulticast mode [ 496.932120][T20159] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 496.938124][T20159] bridge0: port 1(vlan2) entered blocking state [ 496.938349][T20159] bridge0: port 1(vlan2) entered disabled state [ 496.991003][T20159] vlan2: entered promiscuous mode [ 496.991028][T20159] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 498.632546][T20249] netlink: 'syz.3.3795': attribute type 1 has an invalid length. [ 498.684304][T20225] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.684934][T20225] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.966768][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 499.174134][T20225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.201646][T20225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.575969][T18503] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.576362][T20227] netlink: 'syz.2.3793': attribute type 2 has an invalid length. [ 499.576805][T18503] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.576843][T18503] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.576876][T18503] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.652509][T20249] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 499.669469][T20260] syzkaller0: entered promiscuous mode [ 499.669491][T20260] syzkaller0: entered allmulticast mode [ 500.065875][ T12] net_ratelimit: 18 callbacks suppressed [ 500.065895][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 500.297458][ T83] bond1: (slave batadv0): failed to get link speed/duplex [ 500.468533][T20280] netlink: 'syz.3.3803': attribute type 11 has an invalid length. [ 500.486745][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 500.597987][T18503] bond1: (slave batadv0): failed to get link speed/duplex [ 500.705816][T18502] bond1: (slave batadv0): failed to get link speed/duplex [ 500.816047][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 501.045840][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 501.155830][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 501.267007][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 501.379655][ T83] bond1: (slave batadv0): failed to get link speed/duplex [ 501.381194][T20338] __nla_validate_parse: 153 callbacks suppressed [ 501.381211][T20338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3815'. [ 501.596187][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3816'. [ 502.629566][T20363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3823'. [ 502.961055][T20368] veth3: entered allmulticast mode [ 503.017394][T20370] xt_socket: unknown flags 0x4 [ 503.040860][T20368] bond1: (slave veth3): Enslaving as an active interface with an up link [ 503.086398][T20374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.388944][T20376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3827'. [ 503.914708][T20390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3831'. [ 504.142504][T20395] FAULT_INJECTION: forcing a failure. [ 504.142504][T20395] name failslab, interval 1, probability 0, space 0, times 0 [ 504.142537][T20395] CPU: 0 UID: 0 PID: 20395 Comm: syz.4.3833 Not tainted syzkaller #0 PREEMPT(full) [ 504.142558][T20395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.142570][T20395] Call Trace: [ 504.142579][T20395] [ 504.142588][T20395] dump_stack_lvl+0xe8/0x150 [ 504.142621][T20395] should_fail_ex+0x410/0x560 [ 504.142649][T20395] should_failslab+0xa8/0x100 [ 504.142676][T20395] __kvmalloc_node_noprof+0x176/0x820 [ 504.142701][T20395] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 504.142815][T20395] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 504.142851][T20395] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 504.142883][T20395] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 504.142924][T20395] ? __mutex_unlock_slowpath+0x731/0x900 [ 504.142954][T20395] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 504.142982][T20395] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 504.143012][T20395] ? 0xffffffffa04042c0 [ 504.143077][T20395] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 504.143105][T20395] ? _copy_from_user+0x94/0xb0 [ 504.143130][T20395] ? bpf_test_init+0x113/0x150 [ 504.143155][T20395] ? xdp_convert_md_to_buff+0x5b/0x330 [ 504.143186][T20395] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 504.143230][T20395] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 504.143264][T20395] ? __fget_files+0x2a/0x420 [ 504.143294][T20395] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 504.143324][T20395] bpf_prog_test_run+0x2c5/0x340 [ 504.143358][T20395] __sys_bpf+0xa22/0xd90 [ 504.143390][T20395] ? __pfx___sys_bpf+0x10/0x10 [ 504.143423][T20395] ? __fget_files+0x2a/0x420 [ 504.143472][T20395] ? ksys_write+0x242/0x270 [ 504.143502][T20395] ? __pfx_ksys_write+0x10/0x10 [ 504.143535][T20395] __x64_sys_bpf+0xba/0xd0 [ 504.143558][T20395] do_syscall_64+0x166/0x520 [ 504.143580][T20395] ? trace_irq_disable+0x3b/0x140 [ 504.143599][T20395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.143619][T20395] ? clear_bhb_loop+0x70/0xc0 [ 504.143643][T20395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.143662][T20395] RIP: 0033:0x7fb18dd9e159 [ 504.143679][T20395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.143694][T20395] RSP: 002b:00007fb18ed30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 504.143714][T20395] RAX: ffffffffffffffda RBX: 00007fb18e025fa0 RCX: 00007fb18dd9e159 [ 504.143729][T20395] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 504.143741][T20395] RBP: 00007fb18ed30090 R08: 0000000000000000 R09: 0000000000000000 [ 504.143753][T20395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.143765][T20395] R13: 00007fb18e026038 R14: 00007fb18e025fa0 R15: 00007ffdf8bb3678 [ 504.143797][T20395] [ 504.708021][ T31] audit: type=1804 audit(1790046855.177:13): pid=20416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3837" name="/newroot/179/cgroup.controllers" dev="tmpfs" ino=939 res=1 errno=0 [ 504.708274][ T31] audit: type=1800 audit(1790046855.187:14): pid=20416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3837" name="cgroup.controllers" dev="tmpfs" ino=939 res=0 errno=0 [ 504.896119][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3838'. [ 505.017488][T20420] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3838'. [ 505.136062][T18493] net_ratelimit: 25 callbacks suppressed [ 505.136082][T18493] bond1: (slave batadv0): failed to get link speed/duplex [ 505.247100][T18495] bond1: (slave batadv0): failed to get link speed/duplex [ 505.356267][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 505.466664][T18495] bond1: (slave batadv0): failed to get link speed/duplex [ 505.585859][T18493] bond1: (slave batadv0): failed to get link speed/duplex [ 505.696844][T18493] bond1: (slave batadv0): failed to get link speed/duplex [ 505.806387][T18495] bond1: (slave batadv0): failed to get link speed/duplex [ 505.818151][T20446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3845'. [ 505.915837][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 506.026661][T18495] bond1: (slave batadv0): failed to get link speed/duplex [ 506.032245][T20451] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 506.077024][T20455] syzkaller0: entered promiscuous mode [ 506.077047][T20455] syzkaller0: entered allmulticast mode [ 506.082410][T20455] tipc: Enabled bearer , priority 0 [ 506.083468][T20453] FAULT_INJECTION: forcing a failure. [ 506.083468][T20453] name failslab, interval 1, probability 0, space 0, times 0 [ 506.083499][T20453] CPU: 0 UID: 0 PID: 20453 Comm: syz.4.3847 Not tainted syzkaller #0 PREEMPT(full) [ 506.083522][T20453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.083533][T20453] Call Trace: [ 506.083542][T20453] [ 506.083550][T20453] dump_stack_lvl+0xe8/0x150 [ 506.083582][T20453] should_fail_ex+0x410/0x560 [ 506.083609][T20453] should_failslab+0xa8/0x100 [ 506.083635][T20453] __kvmalloc_node_noprof+0x176/0x820 [ 506.083656][T20453] ? __kvmalloc_node_noprof+0x345/0x820 [ 506.083675][T20453] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 506.083703][T20453] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 506.083738][T20453] bpf_test_run_xdp_live+0x220/0x1c20 [ 506.083769][T20453] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 506.083796][T20453] ? __mutex_unlock_slowpath+0x731/0x900 [ 506.083827][T20453] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 506.083855][T20453] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 506.083884][T20453] ? 0xffffffffa04042c0 [ 506.083949][T20453] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 506.083976][T20453] ? _copy_from_user+0x94/0xb0 [ 506.084001][T20453] ? bpf_test_init+0x113/0x150 [ 506.084026][T20453] ? xdp_convert_md_to_buff+0x5b/0x330 [ 506.084057][T20453] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 506.084101][T20453] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 506.084134][T20453] ? __fget_files+0x2a/0x420 [ 506.084164][T20453] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 506.084194][T20453] bpf_prog_test_run+0x2c5/0x340 [ 506.084221][T20453] __sys_bpf+0xa22/0xd90 [ 506.084251][T20453] ? __pfx___sys_bpf+0x10/0x10 [ 506.084294][T20453] ? __fget_files+0x2a/0x420 [ 506.084336][T20453] ? ksys_write+0x242/0x270 [ 506.084366][T20453] ? __pfx_ksys_write+0x10/0x10 [ 506.084399][T20453] __x64_sys_bpf+0xba/0xd0 [ 506.084421][T20453] do_syscall_64+0x166/0x520 [ 506.084443][T20453] ? trace_irq_disable+0x3b/0x140 [ 506.084462][T20453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.084485][T20453] ? clear_bhb_loop+0x70/0xc0 [ 506.084509][T20453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.084528][T20453] RIP: 0033:0x7fb18dd9e159 [ 506.084545][T20453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.084561][T20453] RSP: 002b:00007fb18ed30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.084582][T20453] RAX: ffffffffffffffda RBX: 00007fb18e025fa0 RCX: 00007fb18dd9e159 [ 506.084596][T20453] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 506.084608][T20453] RBP: 00007fb18ed30090 R08: 0000000000000000 R09: 0000000000000000 [ 506.084621][T20453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.084632][T20453] R13: 00007fb18e026038 R14: 00007fb18e025fa0 R15: 00007ffdf8bb3678 [ 506.084664][T20453] [ 506.129785][T20455] tipc: Resetting bearer [ 506.493165][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3850'. [ 506.493187][T20458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3850'. [ 506.613137][T20455] tipc: Disabling bearer [ 506.654670][T20460] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 506.654702][T20460] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 506.654734][T20460] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 506.674354][T18497] bond1: (slave batadv0): failed to get link speed/duplex [ 506.722066][T20460] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 506.748809][T20465] –: renamed from virt_wifi0 [ 506.892520][T20470] netlink: 'syz.3.3853': attribute type 8 has an invalid length. [ 506.915083][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3853'. [ 507.110308][T20470] veth3: entered allmulticast mode [ 507.507686][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3856'. [ 507.831653][T20502] FAULT_INJECTION: forcing a failure. [ 507.831653][T20502] name failslab, interval 1, probability 0, space 0, times 0 [ 507.831684][T20502] CPU: 0 UID: 0 PID: 20502 Comm: syz.4.3861 Not tainted syzkaller #0 PREEMPT(full) [ 507.831706][T20502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.831718][T20502] Call Trace: [ 507.831726][T20502] [ 507.831734][T20502] dump_stack_lvl+0xe8/0x150 [ 507.831767][T20502] should_fail_ex+0x410/0x560 [ 507.831796][T20502] should_failslab+0xa8/0x100 [ 507.831821][T20502] __kmalloc_cache_node_noprof+0xaa/0x620 [ 507.831843][T20502] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 507.831871][T20502] ? page_pool_create_percpu+0x73/0xc70 [ 507.832017][T20502] ? page_pool_create_percpu+0x73/0xc70 [ 507.832045][T20502] page_pool_create_percpu+0x73/0xc70 [ 507.832065][T20502] ? page_pool_create+0xd/0x20 [ 507.832094][T20502] bpf_test_run_xdp_live+0x23a/0x1c20 [ 507.832126][T20502] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 507.832153][T20502] ? __mutex_unlock_slowpath+0x731/0x900 [ 507.832184][T20502] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 507.832212][T20502] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 507.832242][T20502] ? 0xffffffffa04042c0 [ 507.832307][T20502] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 507.832334][T20502] ? _copy_from_user+0x94/0xb0 [ 507.832359][T20502] ? bpf_test_init+0x113/0x150 [ 507.832384][T20502] ? xdp_convert_md_to_buff+0x5b/0x330 [ 507.832416][T20502] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 507.832460][T20502] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 507.832494][T20502] ? __fget_files+0x2a/0x420 [ 507.832526][T20502] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 507.832555][T20502] bpf_prog_test_run+0x2c5/0x340 [ 507.832583][T20502] __sys_bpf+0xa22/0xd90 [ 507.832612][T20502] ? __pfx___sys_bpf+0x10/0x10 [ 507.832645][T20502] ? __fget_files+0x2a/0x420 [ 507.832688][T20502] ? ksys_write+0x242/0x270 [ 507.832718][T20502] ? __pfx_ksys_write+0x10/0x10 [ 507.832751][T20502] __x64_sys_bpf+0xba/0xd0 [ 507.832774][T20502] do_syscall_64+0x166/0x520 [ 507.832796][T20502] ? trace_irq_disable+0x3b/0x140 [ 507.832816][T20502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.832851][T20502] ? clear_bhb_loop+0x70/0xc0 [ 507.832876][T20502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.832896][T20502] RIP: 0033:0x7fb18dd9e159 [ 507.832914][T20502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.832930][T20502] RSP: 002b:00007fb18ed30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 507.832951][T20502] RAX: ffffffffffffffda RBX: 00007fb18e025fa0 RCX: 00007fb18dd9e159 [ 507.832967][T20502] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 507.832980][T20502] RBP: 00007fb18ed30090 R08: 0000000000000000 R09: 0000000000000000 [ 507.832992][T20502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.833003][T20502] R13: 00007fb18e026038 R14: 00007fb18e025fa0 R15: 00007ffdf8bb3678 [ 507.833035][T20502] [ 508.145952][T20498] dvmrp0: entered allmulticast mode [ 508.420995][T20503] dvmrp1: entered allmulticast mode [ 508.421182][T20504] dvmrp0: left allmulticast mode [ 508.421276][T20504] dvmrp1: left allmulticast mode [ 508.847672][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3868'. [ 508.847693][T20537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3868'. [ 509.475190][T20547] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3873'. [ 509.492764][T20547] netlink: 'syz.1.3873': attribute type 5 has an invalid length. [ 509.587609][T20553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3874'. [ 509.939943][T20559] FAULT_INJECTION: forcing a failure. [ 509.939943][T20559] name failslab, interval 1, probability 0, space 0, times 0 [ 509.939975][T20559] CPU: 0 UID: 0 PID: 20559 Comm: syz.2.3875 Not tainted syzkaller #0 PREEMPT(full) [ 509.939996][T20559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.940008][T20559] Call Trace: [ 509.940015][T20559] [ 509.940024][T20559] dump_stack_lvl+0xe8/0x150 [ 509.940055][T20559] should_fail_ex+0x410/0x560 [ 509.940081][T20559] should_failslab+0xa8/0x100 [ 509.940108][T20559] __kvmalloc_node_noprof+0x176/0x820 [ 509.940133][T20559] ? page_pool_create_percpu+0x2ef/0xc70 [ 509.940154][T20559] ? page_pool_create_percpu+0x2ef/0xc70 [ 509.940181][T20559] page_pool_create_percpu+0x2ef/0xc70 [ 509.940206][T20559] bpf_test_run_xdp_live+0x23a/0x1c20 [ 509.940238][T20559] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 509.940261][T20559] ? __mutex_unlock_slowpath+0x731/0x900 [ 509.940293][T20559] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 509.940321][T20559] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 509.940350][T20559] ? 0xffffffffa04042c0 [ 509.940424][T20559] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 509.940450][T20559] ? _copy_from_user+0x94/0xb0 [ 509.940473][T20559] ? bpf_test_init+0x113/0x150 [ 509.940498][T20559] ? xdp_convert_md_to_buff+0x5b/0x330 [ 509.940530][T20559] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 509.940574][T20559] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 509.940607][T20559] ? __fget_files+0x2a/0x420 [ 509.940637][T20559] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 509.940667][T20559] bpf_prog_test_run+0x2c5/0x340 [ 509.940694][T20559] __sys_bpf+0xa22/0xd90 [ 509.940723][T20559] ? __pfx___sys_bpf+0x10/0x10 [ 509.940757][T20559] ? __fget_files+0x2a/0x420 [ 509.940800][T20559] ? ksys_write+0x242/0x270 [ 509.940830][T20559] ? __pfx_ksys_write+0x10/0x10 [ 509.940862][T20559] __x64_sys_bpf+0xba/0xd0 [ 509.940885][T20559] do_syscall_64+0x166/0x520 [ 509.940908][T20559] ? trace_irq_disable+0x3b/0x140 [ 509.940927][T20559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.940947][T20559] ? clear_bhb_loop+0x70/0xc0 [ 509.940971][T20559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.940990][T20559] RIP: 0033:0x7f8a0ed9e159 [ 509.941008][T20559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.941024][T20559] RSP: 002b:00007f8a0fbb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.941045][T20559] RAX: ffffffffffffffda RBX: 00007f8a0f025fa0 RCX: 00007f8a0ed9e159 [ 509.941059][T20559] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 509.941072][T20559] RBP: 00007f8a0fbb8090 R08: 0000000000000000 R09: 0000000000000000 [ 509.941084][T20559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.941096][T20559] R13: 00007f8a0f026038 R14: 00007f8a0f025fa0 R15: 00007ffe2153fe78 [ 509.941128][T20559] [ 509.941176][T20559] page_pool_create_percpu() gave up with errno -12 [ 510.305939][T18497] net_ratelimit: 17 callbacks suppressed [ 510.305960][T18497] bond1: (slave batadv0): failed to get link speed/duplex [ 510.416520][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 510.609404][T18498] bond1: (slave batadv0): failed to get link speed/duplex [ 510.635249][T20578] pimreg: tun_chr_ioctl cmd 1074025677 [ 510.635341][T20578] pimreg: linktype set to 270 [ 510.665994][T20578] pimreg: tun_chr_ioctl cmd 1074812117 [ 510.671821][T20574] pimreg: tun_chr_ioctl cmd 1074025677 [ 510.671902][T20574] pimreg: linktype set to 270 [ 510.876025][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 511.027797][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 511.175962][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 511.182888][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.183359][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.183708][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.184129][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.184547][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.184955][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.185371][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.205321][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.205731][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.208581][T20596] bridge: RTM_NEWNEIGH with invalid ether address [ 511.212623][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.213047][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.216042][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.216447][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.216852][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.219553][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.219964][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.222980][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.224500][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.224908][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.225308][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.236009][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.240008][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.246439][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.246848][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.252905][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.255853][T20602] bridge: RTM_NEWNEIGH with invalid ether address [ 511.297231][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 512.585420][T20631] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3891'. [ 512.692147][T20632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3890'. [ 512.916343][T20643] xt_hl: Unknown Hop Limit match mode: 4 [ 513.006099][T20642] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3890'. [ 513.006757][T18495] bond1: (slave batadv0): failed to get link speed/duplex [ 513.298677][T20651] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3897'. [ 513.330386][T18495] bond1: (slave batadv0): failed to get link speed/duplex [ 513.436773][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 513.625549][T20656] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3902'. [ 513.808957][T20661] netlink: 'syz.4.3899': attribute type 1 has an invalid length. [ 513.831896][T20663] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3901'. [ 513.887657][T20671] netlink: 'syz.3.3900': attribute type 4 has an invalid length. [ 513.887679][T20671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3900'. [ 513.962071][T20661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.111850][T20669] bond2: (slave geneve2): making interface the new active one [ 514.131259][T20669] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 514.186060][T20678] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 514.186161][T20678] sctp: [Deprecated]: syz.2.3903 (pid 20678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 514.186161][T20678] Use struct sctp_sack_info instead [ 514.197258][T20678] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3903'. [ 514.348258][T20670] tipc: Enabling of bearer rejected, failed to enable media [ 514.350792][T20670] syzkaller1: entered promiscuous mode [ 514.350812][T20670] syzkaller1: entered allmulticast mode [ 514.378809][T20670] af_packet: tpacket_rcv: packet too big, clamped from 4032 to 3952. macoff=96 [ 514.947387][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3906'. [ 515.193362][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3907'. [ 515.317842][T18503] net_ratelimit: 15 callbacks suppressed [ 515.317861][T18503] bond1: (slave batadv0): failed to get link speed/duplex [ 515.427003][T18503] bond1: (slave batadv0): failed to get link speed/duplex [ 515.433725][T20705] xt_LOG: prefix is not null-terminated [ 515.535918][T18494] bond1: (slave batadv0): failed to get link speed/duplex [ 515.648394][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 515.756640][T18494] bond1: (slave batadv0): failed to get link speed/duplex [ 515.869030][T18494] bond1: (slave batadv0): failed to get link speed/duplex [ 515.977451][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 516.090932][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 516.197127][T18503] bond1: (slave batadv0): failed to get link speed/duplex [ 516.260165][T20715] netlink: 'syz.1.3915': attribute type 1 has an invalid length. [ 516.326304][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 516.348203][T20715] netlink: 'syz.1.3915': attribute type 83 has an invalid length. [ 516.680551][ T12] IPVS: starting estimator thread 0... [ 516.743447][T20734] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 516.745145][T20734] IPVS: set_ctl: invalid protocol: 951 8.0.0.0:46852 [ 516.745410][T20734] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 516.781739][T20735] IPVS: using max 30 ests per chain, 72000 per kthread [ 517.161985][T20758] syzkaller0: entered promiscuous mode [ 517.162008][T20758] syzkaller0: entered allmulticast mode [ 518.115101][T20786] netlink: 'syz.2.3938': attribute type 1 has an invalid length. [ 518.205588][T20791] netlink: 'syz.0.3940': attribute type 1 has an invalid length. [ 518.256660][T20786] 8021q: adding VLAN 0 to HW filter on device bond6 [ 518.335036][T20790] bond6: (slave geneve2): making interface the new active one [ 518.348343][T20790] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 519.279347][T20830] __nla_validate_parse: 5 callbacks suppressed [ 519.279366][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3949'. [ 519.416339][T20834] xt_hl: Unknown Hop Limit match mode: 4 [ 519.516794][T20833] netlink: 'syz.2.3947': attribute type 1 has an invalid length. [ 519.920602][T20845] sctp: [Deprecated]: syz.1.3951 (pid 20845) Use of int in max_burst socket option. [ 519.920602][T20845] Use struct sctp_assoc_value instead [ 520.266915][T20850] netlink: 'syz.0.3954': attribute type 1 has an invalid length. [ 520.708297][T20850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.748063][T18498] net_ratelimit: 381 callbacks suppressed [ 520.748883][T18498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.786331][T20851] bond3: (slave geneve2): making interface the new active one [ 520.787560][T20851] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 520.796229][T18500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.796270][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 520.796308][T18500] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.796340][T18500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.796371][T18500] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.890581][T20859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3955'. [ 520.905763][ T12] bond1: (slave batadv0): failed to get link speed/duplex [ 521.036481][T18498] bond1: (slave batadv0): failed to get link speed/duplex [ 521.115250][T20860] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3957'. [ 521.150588][T18498] bond1: (slave batadv0): failed to get link speed/duplex [ 521.177347][T20860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3957'. [ 521.255798][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 521.263488][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3959'. [ 521.287641][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.344661][T20877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.485568][T20874] bond3: entered allmulticast mode [ 521.506023][T18500] bond1: (slave batadv0): failed to get link speed/duplex [ 521.620611][T18498] bond1: (slave batadv0): failed to get link speed/duplex [ 521.725929][T18493] bond1: (slave batadv0): failed to get link speed/duplex [ 522.122743][T20902] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3965'. [ 522.124424][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3965'. [ 522.149315][T20898] xt_hl: Unknown Hop Limit match mode: 4 [ 522.190979][T20902] xt_TCPMSS: Only works on TCP SYN packets [ 522.241090][T20899] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3964'. [ 522.260542][T20904] bridge_slave_0: left allmulticast mode [ 522.260872][T20904] bridge_slave_0: left promiscuous mode [ 522.261717][T20904] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.348290][T20904] bridge_slave_1: left allmulticast mode [ 522.348624][T20904] bridge_slave_1: left promiscuous mode [ 522.349481][T20904] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.404534][T20904] bond0: (slave bond_slave_0): Releasing backup interface [ 522.621225][T20917] netlink: 'syz.1.3967': attribute type 1 has an invalid length. [ 522.825527][T20904] bond0: (slave bond_slave_1): Releasing backup interface [ 522.905209][T20904] team0: Port device team_slave_0 removed [ 522.921571][T20904] team0: Port device team_slave_1 removed [ 522.921926][T20904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.951189][T20904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.249833][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3971'. [ 523.252621][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3970'. [ 523.348652][T20934] netlink: 'syz.0.3974': attribute type 1 has an invalid length. [ 524.135586][T20925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.181254][T20925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.793362][T20947] xt_hl: Unknown Hop Limit match mode: 4 [ 524.905934][T18493] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.905982][T18493] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.906016][T18493] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.906050][T18493] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.909488][T20934] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 524.912301][T20931] __nla_validate_parse: 1 callbacks suppressed [ 524.912320][T20931] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3970'. [ 525.119093][T20955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3980'. [ 525.505593][T20962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3982'. [ 525.839762][T20977] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3988'. [ 525.880326][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3987'. [ 526.066536][T20989] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 526.125056][T20989] 8021q: adding VLAN 0 to HW filter on device bond7 [ 526.340803][T11707] net_ratelimit: 17 callbacks suppressed [ 526.340822][T11707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.451536][T18495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.486826][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.540395][T20998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3992'. [ 526.735235][T20998] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3992'. [ 526.882967][T21002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3994'. [ 527.148180][T21008] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.547637][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.752389][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.779710][T18498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.841302][T21016] bond1: (slave batadv0): Removing an active aggregator [ 527.842001][T21016] bond1: (slave batadv0): Releasing backup interface [ 527.909594][T21016] bond0: (slave bond_slave_0): Releasing backup interface [ 527.934584][T21016] bond0: (slave bond_slave_1): Releasing backup interface [ 527.975576][T21016] team0: Port device team_slave_0 removed [ 528.005316][T21016] team0: Port device team_slave_1 removed [ 528.005884][T21016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.018191][T21016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.071677][T21016] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 528.110362][T21021] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 528.201251][T21009] Bluetooth: hci0: unsupported parameter 5135 [ 528.201270][T21009] Bluetooth: hci0: unsupported parameter 8192 [ 528.201297][T21009] Bluetooth: hci0: unsupported parameter 5135 [ 528.201309][T21009] Bluetooth: hci0: unsupported parameter 8192 [ 528.247991][T11708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.467472][T21032] netlink: 'syz.2.4002': attribute type 1 has an invalid length. [ 528.584558][T21032] 8021q: adding VLAN 0 to HW filter on device bond8 [ 528.591112][T21029] wlan0 speed is unknown, defaulting to 1000 [ 528.675137][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.198323][T21042] geneve3: entered promiscuous mode [ 529.225083][T21036] bridge0: port 2(bond0) entered blocking state [ 529.225213][T21036] bridge0: port 2(bond0) entered disabled state [ 529.225331][T21036] bond0: entered allmulticast mode [ 529.240621][T21036] bond0: entered promiscuous mode [ 529.576333][T21054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 529.605641][T21054] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4007'. [ 530.134725][T21060] __nla_validate_parse: 1 callbacks suppressed [ 530.134746][T21060] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4008'. [ 530.711421][T21086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4013'. [ 530.711446][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4013'. [ 531.500082][T21109] netlink: 'syz.3.4021': attribute type 1 has an invalid length. [ 531.543825][T21111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4019'. [ 531.567748][T21109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 531.602375][T21111] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4019'. [ 531.686780][T21116] netlink: 'syz.2.4022': attribute type 1 has an invalid length. [ 531.725894][T21116] 8021q: adding VLAN 0 to HW filter on device bond9 [ 531.937944][T21128] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4026'. [ 531.980809][T21127] bridge6: entered promiscuous mode [ 532.091831][T11708] net_ratelimit: 8 callbacks suppressed [ 532.091848][T11708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.211135][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.236156][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.343030][T21139] gretap1: entered promiscuous mode [ 532.371507][T21139] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 532.409064][T11706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.611530][T21140] veth0_to_team: entered promiscuous mode [ 532.614004][T21140] ipip0: left promiscuous mode [ 532.642039][T21140] geneve3: left promiscuous mode [ 532.645441][T21140] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 532.646730][T21140] bridge6: left promiscuous mode [ 532.666923][T11708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.934765][T21143] netlink: 540 bytes leftover after parsing attributes in process `syz.0.4028'. [ 532.999679][T11708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.126122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.182228][T21152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4032'. [ 533.259412][T21152] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4032'. [ 533.306338][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.377930][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.400563][T18500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.786943][T21180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4040'. [ 533.952275][T21192] netlink: 'syz.4.4045': attribute type 3 has an invalid length. [ 534.907154][T21233] netlink: 'syz.3.4058': attribute type 1 has an invalid length. [ 536.369049][T21227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.461159][T21227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.292798][T21233] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 537.383213][T21236] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 537.400137][T18497] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.426255][T18493] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.428576][T18495] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.428616][T18495] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.433054][T21245] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 537.687558][ T8084] net_ratelimit: 8 callbacks suppressed [ 537.687577][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.800785][T21274] __nla_validate_parse: 6 callbacks suppressed [ 537.800804][T21274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4064'. [ 537.835883][T21274] netlink: 'syz.4.4064': attribute type 1 has an invalid length. [ 537.835903][T21274] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4064'. [ 537.966275][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.365008][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4069'. [ 538.415324][T21294] bond3: option arp_all_targets: invalid value (3) [ 538.432657][T21294] bond3 (unregistering): Released all slaves [ 538.647572][T11707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.737857][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.965221][T21320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4074'. [ 539.089241][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.149617][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.301185][T21336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.301556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.390487][T21339] netlink: 'syz.4.4077': attribute type 16 has an invalid length. [ 539.390508][T21339] netlink: 'syz.4.4077': attribute type 17 has an invalid length. [ 539.559646][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.609506][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4079'. [ 539.614669][T21339] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.614787][T21339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.628811][T21343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4079'. [ 539.653994][T21339] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.654109][T21339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.767835][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.048305][T21360] netlink: 'syz.3.4081': attribute type 9 has an invalid length. [ 540.583738][T21385] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4085'. [ 542.246699][T21418] netlink: 'syz.1.4091': attribute type 1 has an invalid length. [ 542.343056][T21418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 542.431861][T21418] bond4: (slave geneve3): making interface the new active one [ 542.434766][T21418] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 542.459818][T18495] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.468614][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.468710][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.477880][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.866947][T21436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4094'. [ 542.897022][ T8105] net_ratelimit: 23 callbacks suppressed [ 542.897034][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.897506][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.928514][T18495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.270092][T21375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.445782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.649740][T21453] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 543.776645][T21446] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 544.046318][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.148124][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.381700][T21446] bond10 (unregistering): Released all slaves [ 544.485787][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.567211][T21472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4099'. [ 544.567452][T21472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4099'. [ 544.568585][T21462] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 544.568614][T21462] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 544.568648][T21462] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 544.648630][T21462] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 544.749234][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.753685][T21463] wlan0 speed is unknown, defaulting to 1000 [ 544.894656][T18500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.941724][T21474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4100'. [ 545.000404][T21484] netlink: 34 bytes leftover after parsing attributes in process `syz.3.4100'. [ 545.031192][T21485] netlink: 'syz.4.4104': attribute type 1 has an invalid length. [ 545.089974][T21485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 545.466656][T21507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4110'. [ 545.600126][T21510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4111'. [ 545.600244][T21510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4111'. [ 546.026051][T21523] xt_hashlimit: size too large, truncated to 1048576 [ 546.526884][T21537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4116'. [ 547.115556][T21564] netlink: 'syz.3.4122': attribute type 1 has an invalid length. [ 547.191685][T21564] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4122'. [ 547.942207][T21587] syzkaller0: entered promiscuous mode [ 547.942232][T21587] syzkaller0: entered allmulticast mode [ 548.015972][ C1] net_ratelimit: 20 callbacks suppressed [ 548.015995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.113511][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.266993][T11706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.345747][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.346407][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.419157][T21587] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4130'. [ 548.488222][T11706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.521730][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.920641][T21630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4144'. [ 549.229468][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.380194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.381806][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.464924][T21636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'. [ 551.594441][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4136'. [ 551.767859][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4136'. [ 551.847913][T21650] netlink: 'syz.4.4140': attribute type 5 has an invalid length. [ 551.847934][T21650] netlink: 'syz.4.4140': attribute type 9 has an invalid length. [ 551.847947][T21650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4140'. [ 552.002889][T21651] netlink: 'syz.1.4138': attribute type 11 has an invalid length. [ 552.153278][T18494] IPVS: starting estimator thread 0... [ 552.226912][T21659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.246301][T21664] IPVS: using max 29 ests per chain, 69600 per kthread [ 552.505411][T21672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4146'. [ 553.526544][ C1] net_ratelimit: 23 callbacks suppressed [ 553.526563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.527984][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.529323][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.626159][T21706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.718173][T18498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.904489][T21712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4151'. [ 554.003325][T21719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4154'. [ 554.053100][T21719] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4154'. [ 554.126568][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.253613][T21729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4159'. [ 554.254440][T21729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4159'. [ 554.326112][T11708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.341658][T21730] netlink: 'syz.2.4157': attribute type 4 has an invalid length. [ 554.468002][T21737] netlink: 516 bytes leftover after parsing attributes in process `syz.0.4158'. [ 554.488506][T21735] netlink: 516 bytes leftover after parsing attributes in process `syz.0.4158'. [ 554.488926][T21735] netlink: 516 bytes leftover after parsing attributes in process `syz.0.4158'. [ 554.489340][T21735] netlink: 516 bytes leftover after parsing attributes in process `syz.0.4158'. [ 554.489747][T21735] netlink: 516 bytes leftover after parsing attributes in process `syz.0.4158'. [ 554.565843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.571385][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.575399][T11709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.656301][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 555.975640][T21786] batadv2: entered promiscuous mode [ 555.979025][T21786] batadv2: entered allmulticast mode [ 557.797806][T21840] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '¸ŠŸ>úáÂN9Ü5äx×Ùhˉ½p¡þàn [ 558.029540][T21846] syzkaller0: entered promiscuous mode [ 558.029570][T21846] syzkaller0: entered allmulticast mode [ 558.372440][T21862] syzkaller0: entered promiscuous mode [ 558.372464][T21862] syzkaller0: entered allmulticast mode [ 558.400868][T21856] tipc: Enabled bearer , priority 0 [ 558.529057][T21856] tipc: Resetting bearer [ 558.532029][T21854] tipc: Resetting bearer [ 558.627008][T21854] tipc: Disabling bearer [ 558.657520][ T4018] net_ratelimit: 24 callbacks suppressed [ 558.657536][ T4018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.726789][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.763992][T21870] tc_dump_action: action bad kind [ 558.810028][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.899514][T18495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.899535][T18495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.907115][ T25] wlan0 speed is unknown, defaulting to 1000 [ 558.907134][ T25] syz2: Port: 1 Link ACTIVE [ 558.951977][T21880] __nla_validate_parse: 55 callbacks suppressed [ 558.951994][T21880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4198'. [ 559.068900][T21881] netlink: 'syz.4.4188': attribute type 8 has an invalid length. [ 559.072074][T21881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4188'. [ 559.121444][T21881] veth3: entered allmulticast mode [ 559.376229][ T4018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.396003][T21897] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4190'. [ 559.677756][T21901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.677910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.680008][T21901] xt_hl: Unknown Hop Limit match mode: 4 [ 559.766861][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.785506][ T4018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.846414][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.089958][T21904] netlink: 'syz.1.4192': attribute type 1 has an invalid length. [ 560.173765][T21904] 8021q: adding VLAN 0 to HW filter on device bond5 [ 560.222722][T21904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.224361][T21904] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.245259][T21904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.407007][T11706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.573556][T21904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.591444][T21904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.620157][T21904] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 560.620179][T21904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 560.673336][T21904] veth1_vlan: left promiscuous mode [ 560.693614][T21904] veth0_vlan: left promiscuous mode [ 560.712901][T21904] veth0_vlan: entered promiscuous mode [ 560.730061][T21904] veth1_vlan: entered promiscuous mode [ 560.762083][T21904] veth0_macvtap: left promiscuous mode [ 560.771691][T21904] veth0_macvtap: entered promiscuous mode [ 560.797181][T21904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 560.804346][T21904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 560.822138][T21904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 560.836898][T21904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.843219][T21904] ip6gre1: left promiscuous mode [ 560.843237][T21904] ip6gre1: left allmulticast mode [ 560.868159][T21904] bridge0: port 3(batadv1) entered blocking state [ 560.868285][T21904] bridge0: port 3(batadv1) entered listening state [ 560.868606][T21904] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 560.903743][T21904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 560.927279][T21904] veth3: left allmulticast mode [ 560.948962][T21904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 560.953276][T21904] bond3: left allmulticast mode [ 560.953624][T21904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.032490][T21919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4196'. [ 561.032515][T21919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4196'. [ 561.033045][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4196'. [ 561.033065][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4196'. [ 561.033759][ T4018] bridge0: port 1(1¾x9ÿ) entered blocking state [ 561.033879][ T4018] bridge0: port 1(1¾x9ÿ) entered listening state [ 561.087980][ T4018] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.088103][ T4018] bridge0: port 2(bridge_slave_1) entered listening state [ 561.177834][T21911] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 561.180492][T21911] bond5: (slave batadv2): making interface the new active one [ 561.181823][T21911] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 561.444323][T21932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4201'. [ 561.770531][T21915] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 561.796698][T21943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4204'. [ 561.971431][T21949] netlink: 'syz.4.4204': attribute type 1 has an invalid length. [ 562.386467][T21950] syzkaller0: entered promiscuous mode [ 562.386490][T21950] syzkaller0: entered allmulticast mode [ 562.505326][T21962] xt_hl: Unknown Hop Limit match mode: 4 [ 563.095886][T21977] netlink: 'syz.1.4210': attribute type 11 has an invalid length. [ 563.095906][T21977] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4210'. [ 563.303469][T21985] bond_slave_0: entered promiscuous mode [ 563.303493][T21985] bond_slave_0: entered allmulticast mode [ 563.410870][T21992] netlink: 'syz.4.4216': attribute type 11 has an invalid length. [ 563.768236][T11706] net_ratelimit: 23 callbacks suppressed [ 563.768255][T11706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.826577][T18495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.006269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.007167][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.007795][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.257110][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.402883][T22016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.403107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.425431][T22016] xt_hl: Unknown Hop Limit match mode: 4 [ 564.940251][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.045852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.046305][T22043] __nla_validate_parse: 4 callbacks suppressed [ 566.046324][T22043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4225'. [ 566.047132][T22043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4225'. [ 566.617392][T22074] xt_hl: Unknown Hop Limit match mode: 4 [ 566.851393][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'. [ 567.476977][T22078] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4235'. [ 567.477044][T22078] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4235'. [ 567.690955][T22104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4240'. [ 567.691151][T22104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4240'. [ 567.979165][T22108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4242'. [ 568.190387][T22114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4242'. [ 568.696074][T22122] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4245'. [ 568.967221][T11706] net_ratelimit: 24 callbacks suppressed [ 568.967240][T11706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.007011][T22132] netlink: 'syz.1.4248': attribute type 34 has an invalid length. [ 569.045975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.124432][T22132] bond6: option lacp_strict: invalid value (64) [ 569.140709][T22132] bond6 (unregistering): Released all slaves [ 569.323451][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.324043][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.400233][T18495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.530517][T22100] Bluetooth: hci2: command 0x0405 tx timeout [ 569.736507][T22151] netlink: 'syz.1.4254': attribute type 1 has an invalid length. [ 569.767267][T18495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.846866][T11707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.875257][T22151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 569.889948][T22147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.923186][T22147] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 570.085889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.327635][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.139979][T22190] __nla_validate_parse: 5 callbacks suppressed [ 571.140010][T22190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4266'. [ 571.230987][T22196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4270'. [ 571.400507][T22198] netlink: 'syz.1.4269': attribute type 1 has an invalid length. [ 571.490698][T22210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4283'. [ 571.518744][T22198] 8021q: adding VLAN 0 to HW filter on device bond7 [ 571.659169][T22203] netlink: 'syz.4.4273': attribute type 1 has an invalid length. [ 572.562614][T22240] netlink: 'syz.4.4280': attribute type 2 has an invalid length. [ 572.702914][T22240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4280'. [ 573.084577][T22253] netlink: 'syz.4.4285': attribute type 1 has an invalid length. [ 573.146313][T22253] 8021q: adding VLAN 0 to HW filter on device bond4 [ 573.343047][T22258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4286'. [ 573.661100][T22268] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4291'. [ 573.678121][T22268] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4291'. [ 573.989268][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4293'. [ 573.990328][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4293'. [ 574.246670][ C0] net_ratelimit: 23 callbacks suppressed [ 574.246694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.249272][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.566541][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.567159][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.610580][T22285] netlink: zone id is out of range [ 574.610594][T22285] netlink: zone id is out of range [ 574.610602][T22285] netlink: zone id is out of range [ 574.610610][T22285] netlink: zone id is out of range [ 574.610620][T22285] netlink: zone id is out of range [ 574.610628][T22285] netlink: zone id is out of range [ 574.613356][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4293'. [ 575.134564][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 577.858684][T22311] __nla_validate_parse: 1 callbacks suppressed [ 577.858704][T22311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4302'. [ 578.125264][T22301] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.941021][T22301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.026225][T22301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.558944][T18498] net_ratelimit: 26 callbacks suppressed [ 579.558965][T18498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.659706][T22301] gtp0: left promiscuous mode [ 579.659730][T22301] gtp0: left allmulticast mode [ 579.660275][T22301] veth3: left allmulticast mode [ 579.708095][T22301] gretap1: left promiscuous mode [ 579.767421][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.775789][T18493] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.775834][T18493] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.775890][T18493] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.776494][T18498] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.795054][T18493] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.797111][T18498] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.797147][T18498] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.797179][T18498] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.025263][T22334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4310'. [ 580.637513][T22349] Bluetooth: MGMT ver 1.23 [ 580.656329][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.806673][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.814415][T22355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4315'. [ 581.258774][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4314'. [ 581.265957][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4317'. [ 581.265977][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4317'. [ 581.375968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.425731][T22368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4318'. [ 581.776217][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.857384][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.014670][T11709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.900117][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.947345][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.000783][T22353] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 584.107617][T22378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4319'. [ 584.175970][ T83] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.176015][ T83] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.176049][ T83] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.176083][ T83] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.227470][T22374] netlink: 'syz.4.4318': attribute type 5 has an invalid length. [ 584.227489][T22374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4318'. [ 584.287297][T22380] xt_hl: Unknown Hop Limit match mode: 4 [ 584.292216][T22382] syzkaller0: entered promiscuous mode [ 584.292236][T22382] syzkaller0: entered allmulticast mode [ 584.566816][T18493] net_ratelimit: 2 callbacks suppressed [ 584.566835][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.626651][T22386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4322'. [ 584.666923][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4324'. [ 584.731724][T22390] No such timeout policy "s " [ 584.731743][T22390] netlink: Failed to associated timeout policy 's ' [ 584.863459][T22389] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.864772][T22389] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.987254][T22391] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.987373][T22391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.987729][T22391] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.987859][T22391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.021094][T22391] bridge0: entered promiscuous mode [ 585.021116][T22391] bridge0: entered allmulticast mode [ 585.047308][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.047614][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.132465][T22397] netlink: 'syz.1.4322': attribute type 5 has an invalid length. [ 585.132482][T22397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4322'. [ 585.156475][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.691226][T22417] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 585.827690][ T8084] wlan0 speed is unknown, defaulting to 1000 [ 585.827712][ T8084] syz2: Port: 1 Link DOWN [ 585.848222][T11707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.086869][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.089582][T22429] xt_hl: Unknown Hop Limit match mode: 4 [ 586.154222][T22431] IPVS: length: 48 != 24 [ 586.257296][T18498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.463676][T22437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4338'. [ 586.551163][T22444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4339'. [ 586.577858][T22444] netlink: 'syz.3.4339': attribute type 5 has an invalid length. [ 586.577876][T22444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4339'. [ 586.996362][T22460] netlink: 'syz.4.4342': attribute type 29 has an invalid length. [ 586.996386][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4342'. [ 586.996945][T22460] netlink: 'syz.4.4342': attribute type 29 has an invalid length. [ 586.996961][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4342'. [ 587.126460][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.377902][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.509650][T22464] netlink: 'syz.2.4346': attribute type 8 has an invalid length. [ 587.591705][T22464] veth5: entered allmulticast mode [ 588.001105][T22467] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 588.476158][T22478] syzkaller0: entered promiscuous mode [ 588.476180][T22478] syzkaller0: entered allmulticast mode [ 588.491588][T22478] tipc: Started in network mode [ 588.491614][T22478] tipc: Node identity 5a74cc2b008, cluster identity 4711 [ 588.523828][T22478] tipc: Enabled bearer , priority 0 [ 588.557464][T22478] tipc: Resetting bearer [ 588.624177][T22477] tipc: Resetting bearer [ 588.697257][T22477] tipc: Disabling bearer [ 588.902160][T22496] netlink: 'syz.2.4357': attribute type 8 has an invalid length. [ 588.949408][T22494] veth7: entered allmulticast mode [ 589.677561][T18503] net_ratelimit: 38 callbacks suppressed [ 589.677580][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.689307][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.258997][T22519] __nla_validate_parse: 2 callbacks suppressed [ 590.259017][T22519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4365'. [ 590.329877][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.380804][T22522] netlink: zone id is out of range [ 590.380966][T22522] netlink: zone id is out of range [ 590.381005][T22522] netlink: zone id is out of range [ 590.381013][T22522] netlink: zone id is out of range [ 590.381707][T22522] netlink: zone id is out of range [ 590.381729][T22522] netlink: zone id is out of range [ 590.381737][T22522] netlink: zone id is out of range [ 590.704238][T22532] xt_hl: Unknown Hop Limit match mode: 4 [ 590.888523][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4372'. [ 590.915726][T22537] netlink: 'syz.4.4371': attribute type 8 has an invalid length. [ 590.968022][ C0] bridge0: port 3(batadv1) entered learning state [ 591.042210][T22538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4371'. [ 591.110746][T22538] veth7: entered allmulticast mode [ 591.606649][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 591.606827][ C0] bridge0: port 1(1¾x9ÿ) entered learning state [ 591.863499][T22552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4377'. [ 592.301477][T22568] netlink: 'syz.1.4385': attribute type 1 has an invalid length. [ 592.470078][T22568] 8021q: adding VLAN 0 to HW filter on device bond8 [ 592.539206][T22580] netlink: 'syz.4.4389': attribute type 1 has an invalid length. [ 592.726669][T22580] 8021q: adding VLAN 0 to HW filter on device bond5 [ 592.781482][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4392'. [ 592.847192][T22585] bond5: (slave veth9): Enslaving as an active interface with a down link [ 592.873906][T22599] netlink: 'syz.0.4393': attribute type 1 has an invalid length. [ 592.889322][T22580] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 592.891847][T22580] bond5: (slave batadv2): making interface the new active one [ 592.892954][T22580] batadv2: entered promiscuous mode [ 592.893363][T22580] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 593.572765][T22617] netlink: 'syz.2.4395': attribute type 58 has an invalid length. [ 593.572786][T22617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4395'. [ 593.602565][T22599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 594.165521][T22605] bond9: entered promiscuous mode [ 594.178675][T22605] 8021q: adding VLAN 0 to HW filter on device bond9 [ 594.472569][T22641] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4399'. [ 594.543693][T22643] netlink: 'syz.0.4400': attribute type 1 has an invalid length. [ 594.862030][T22650] netlink: 'syz.2.4402': attribute type 1 has an invalid length. [ 594.989446][T22650] 8021q: adding VLAN 0 to HW filter on device bond10 [ 595.277952][T18497] net_ratelimit: 17 callbacks suppressed [ 595.277972][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.311482][T22665] FAULT_INJECTION: forcing a failure. [ 595.311482][T22665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.311511][T22665] CPU: 1 UID: 0 PID: 22665 Comm: syz.2.4408 Not tainted syzkaller #0 PREEMPT(full) [ 595.311532][T22665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 595.311544][T22665] Call Trace: [ 595.311552][T22665] [ 595.311560][T22665] dump_stack_lvl+0xe8/0x150 [ 595.311595][T22665] should_fail_ex+0x410/0x560 [ 595.311624][T22665] _copy_from_user+0x2d/0xb0 [ 595.311651][T22665] ___sys_sendmsg+0x1c6/0x360 [ 595.311677][T22665] ? __lock_acquire+0x747/0x2de0 [ 595.311703][T22665] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.311734][T22665] ? kstrtouint+0x6e/0xe0 [ 595.311784][T22665] ? __fget_files+0x2a/0x420 [ 595.311810][T22665] ? __fget_files+0x3a2/0x420 [ 595.311853][T22665] __sys_sendmmsg+0x273/0x4d0 [ 595.311884][T22665] ? __pfx___sys_sendmmsg+0x10/0x10 [ 595.311917][T22665] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 595.311958][T22665] ? ksys_write+0x242/0x270 [ 595.311987][T22665] ? __pfx_ksys_write+0x10/0x10 [ 595.312021][T22665] __x64_sys_sendmmsg+0xa0/0xc0 [ 595.312048][T22665] do_syscall_64+0x166/0x520 [ 595.312070][T22665] ? trace_irq_disable+0x3b/0x140 [ 595.312090][T22665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.312110][T22665] ? clear_bhb_loop+0x70/0xc0 [ 595.312133][T22665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.312152][T22665] RIP: 0033:0x7f8a0ed9e159 [ 595.312170][T22665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.312186][T22665] RSP: 002b:00007f8a0fbb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 595.312207][T22665] RAX: ffffffffffffffda RBX: 00007f8a0f025fa0 RCX: 00007f8a0ed9e159 [ 595.312222][T22665] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 595.312235][T22665] RBP: 00007f8a0fbb8090 R08: 0000000000000000 R09: 0000000000000000 [ 595.312247][T22665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.312259][T22665] R13: 00007f8a0f026038 R14: 00007f8a0f025fa0 R15: 00007ffe2153fe78 [ 595.312290][T22665] [ 595.472826][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.490865][T11707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.760886][T22673] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4411'. [ 595.760908][T22673] tc_dump_action: action bad kind [ 595.802097][T22673] xt_TCPMSS: Only works on TCP SYN packets [ 595.863960][T22675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4410'. [ 595.863981][T22675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4410'. [ 595.928624][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.956971][T22677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4412'. [ 596.143529][T22677] netlink: 'syz.4.4412': attribute type 5 has an invalid length. [ 596.143548][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4412'. [ 596.334698][T22697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4416'. [ 596.335517][T22697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4416'. [ 596.451638][T22698] netlink: 1392 bytes leftover after parsing attributes in process `syz.0.4415'. [ 596.505803][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.547446][T22705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4420'. [ 596.549540][T22705] netlink: 'syz.3.4420': attribute type 2 has an invalid length. [ 596.549558][T22705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4420'. [ 596.650754][T22707] netlink: 'syz.3.4421': attribute type 1 has an invalid length. [ 596.652020][T22703] netlink: 'syz.1.4418': attribute type 8 has an invalid length. [ 596.683552][T22709] netlink: 'syz.4.4419': attribute type 1 has an invalid length. [ 596.953410][T22703] veth5: entered allmulticast mode [ 596.981227][ T8084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.114068][T22709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 597.180665][T22711] gtp3: entered promiscuous mode [ 597.180685][T22711] gtp3: entered allmulticast mode [ 597.206534][T11707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.332658][T22724] netlink: 'syz.0.4426': attribute type 5 has an invalid length. [ 597.540835][T22728] syzkaller0: entered promiscuous mode [ 597.540856][T22728] syzkaller0: entered allmulticast mode [ 597.636689][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.739054][T11707] s`z1: Port: 1 Link ACTIVE [ 597.968412][T22753] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 598.016447][ T4018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.306211][T22766] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 598.617857][T22775] netlink: 'syz.0.4435': attribute type 1 has an invalid length. [ 598.779169][T22775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 599.328750][T22800] netlink: 'syz.2.4442': attribute type 29 has an invalid length. [ 599.931875][T22799] netlink: 'syz.0.4438': attribute type 5 has an invalid length. [ 599.948391][T22801] tipc: Enabled bearer , priority 0 [ 600.057605][T22803] bond11 (unregistering): Released all slaves [ 600.098586][T22806] syzkaller0: entered promiscuous mode [ 600.098607][T22806] syzkaller0: entered allmulticast mode [ 600.102618][T22813] tipc: Resetting bearer [ 600.103326][T22794] tipc: Resetting bearer [ 600.151180][T22794] tipc: Disabling bearer [ 600.422684][T22833] netlink: 'syz.3.4449': attribute type 1 has an invalid length. [ 600.482307][T22833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.789335][T22842] __nla_validate_parse: 14 callbacks suppressed [ 600.789355][T22842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4451'. [ 600.812951][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4451'. [ 600.967173][T18494] net_ratelimit: 3 callbacks suppressed [ 600.967192][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.156112][T22846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4453'. [ 601.156139][T22846] FAULT_INJECTION: forcing a failure. [ 601.156139][T22846] name failslab, interval 1, probability 0, space 0, times 0 [ 601.156163][T22846] CPU: 0 UID: 0 PID: 22846 Comm: syz.0.4453 Not tainted syzkaller #0 PREEMPT(full) [ 601.156184][T22846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.156196][T22846] Call Trace: [ 601.156204][T22846] [ 601.156212][T22846] dump_stack_lvl+0xe8/0x150 [ 601.156245][T22846] should_fail_ex+0x410/0x560 [ 601.156270][T22846] ? __alloc_skb+0x1db/0x7a0 [ 601.156293][T22846] should_failslab+0xa8/0x100 [ 601.156320][T22846] ? __alloc_skb+0x1db/0x7a0 [ 601.156339][T22846] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 601.156368][T22846] ? __alloc_skb+0x18d/0x7a0 [ 601.156391][T22846] ? __alloc_skb+0x1db/0x7a0 [ 601.156415][T22846] __alloc_skb+0x1db/0x7a0 [ 601.156439][T22846] netlink_ack+0x136/0xb30 [ 601.156464][T22846] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 601.156552][T22846] ? __lock_acquire+0x747/0x2de0 [ 601.156585][T22846] netlink_rcv_skb+0x2a4/0x4a0 [ 601.156612][T22846] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 601.156636][T22846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.156672][T22846] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.156698][T22846] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.156730][T22846] netlink_unicast+0x7bd/0x940 [ 601.156776][T22846] netlink_sendmsg+0x813/0xb40 [ 601.156814][T22846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.156849][T22846] ? apparmor_socket_sendmsg+0x98/0x360 [ 601.156875][T22846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.156901][T22846] sock_sendmsg_nosec+0x13a/0x180 [ 601.156924][T22846] ____sys_sendmsg+0x54e/0x850 [ 601.156955][T22846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.157014][T22846] ? import_iovec+0x73/0xa0 [ 601.157042][T22846] ___sys_sendmsg+0x2a5/0x360 [ 601.157065][T22846] ? __lock_acquire+0x747/0x2de0 [ 601.157089][T22846] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.157119][T22846] ? kstrtouint+0x6e/0xe0 [ 601.157173][T22846] ? __fget_files+0x2a/0x420 [ 601.157198][T22846] ? __fget_files+0x3a2/0x420 [ 601.157233][T22846] __sys_sendmmsg+0x273/0x4d0 [ 601.157263][T22846] ? __pfx___sys_sendmmsg+0x10/0x10 [ 601.157297][T22846] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 601.157335][T22846] ? ksys_write+0x242/0x270 [ 601.157364][T22846] ? __pfx_ksys_write+0x10/0x10 [ 601.157398][T22846] __x64_sys_sendmmsg+0xa0/0xc0 [ 601.157425][T22846] do_syscall_64+0x166/0x520 [ 601.157447][T22846] ? trace_irq_disable+0x3b/0x140 [ 601.157466][T22846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.157485][T22846] ? clear_bhb_loop+0x70/0xc0 [ 601.157509][T22846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.157528][T22846] RIP: 0033:0x7f435f39e159 [ 601.157546][T22846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.157561][T22846] RSP: 002b:00007f4360240028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 601.157582][T22846] RAX: ffffffffffffffda RBX: 00007f435f625fa0 RCX: 00007f435f39e159 [ 601.157596][T22846] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 601.157609][T22846] RBP: 00007f4360240090 R08: 0000000000000000 R09: 0000000000000000 [ 601.157621][T22846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.157632][T22846] R13: 00007f435f626038 R14: 00007f435f625fa0 R15: 00007ffd748dc3d8 [ 601.157663][T22846] [ 601.165571][T22846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4453'. [ 601.238288][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.788276][T22852] syzkaller1: entered promiscuous mode [ 601.788298][T22852] syzkaller1: entered allmulticast mode [ 601.816230][T22852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.823102][T22852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4457'. [ 601.823154][T22852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4457'. [ 601.916993][T22852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4457'. [ 601.917048][T22852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4457'. [ 601.939931][T22850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.100863][T22856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4456'. [ 602.156661][T18498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.191354][T22856] netlink: 'syz.0.4456': attribute type 5 has an invalid length. [ 602.191372][T22856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4456'. [ 602.318629][T22868] ip6gre1: entered promiscuous mode [ 602.318806][T22868] ip6gre1: entered allmulticast mode [ 602.353655][T18498] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.355637][T18498] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.378165][ T8084] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.814769][T22891] FAULT_INJECTION: forcing a failure. [ 602.814769][T22891] name failslab, interval 1, probability 0, space 0, times 0 [ 602.814802][T22891] CPU: 0 UID: 0 PID: 22891 Comm: syz.4.4467 Not tainted syzkaller #0 PREEMPT(full) [ 602.814823][T22891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.814834][T22891] Call Trace: [ 602.814842][T22891] [ 602.814851][T22891] dump_stack_lvl+0xe8/0x150 [ 602.814884][T22891] should_fail_ex+0x410/0x560 [ 602.814912][T22891] ? __alloc_skb+0x1db/0x7a0 [ 602.814935][T22891] should_failslab+0xa8/0x100 [ 602.814960][T22891] ? __alloc_skb+0x1db/0x7a0 [ 602.814979][T22891] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 602.815008][T22891] ? __alloc_skb+0x18d/0x7a0 [ 602.815031][T22891] ? __alloc_skb+0x1db/0x7a0 [ 602.815059][T22891] __alloc_skb+0x1db/0x7a0 [ 602.815084][T22891] netlink_ack+0x136/0xb30 [ 602.815109][T22891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 602.815131][T22891] ? ref_tracker_free+0x689/0x830 [ 602.815245][T22891] ? __pfx_ref_tracker_free+0x10/0x10 [ 602.815278][T22891] netlink_rcv_skb+0x2a4/0x4a0 [ 602.815307][T22891] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 602.815332][T22891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.815372][T22891] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.815399][T22891] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.815431][T22891] netlink_unicast+0x7bd/0x940 [ 602.815467][T22891] netlink_sendmsg+0x813/0xb40 [ 602.815504][T22891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.815540][T22891] ? apparmor_socket_sendmsg+0x98/0x360 [ 602.815564][T22891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.815597][T22891] sock_sendmsg_nosec+0x13a/0x180 [ 602.815619][T22891] ____sys_sendmsg+0x54e/0x850 [ 602.815649][T22891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.815681][T22891] ? import_iovec+0x73/0xa0 [ 602.815707][T22891] ___sys_sendmsg+0x2a5/0x360 [ 602.815730][T22891] ? __lock_acquire+0x747/0x2de0 [ 602.815754][T22891] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.815783][T22891] ? kstrtouint+0x6e/0xe0 [ 602.815838][T22891] ? __fget_files+0x2a/0x420 [ 602.815861][T22891] ? __fget_files+0x3a2/0x420 [ 602.815897][T22891] __sys_sendmmsg+0x273/0x4d0 [ 602.815927][T22891] ? __pfx___sys_sendmmsg+0x10/0x10 [ 602.815962][T22891] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 602.816001][T22891] ? ksys_write+0x242/0x270 [ 602.816031][T22891] ? __pfx_ksys_write+0x10/0x10 [ 602.816065][T22891] __x64_sys_sendmmsg+0xa0/0xc0 [ 602.816092][T22891] do_syscall_64+0x166/0x520 [ 602.816113][T22891] ? trace_irq_disable+0x3b/0x140 [ 602.816131][T22891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.816151][T22891] ? clear_bhb_loop+0x70/0xc0 [ 602.816175][T22891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.816194][T22891] RIP: 0033:0x7fb18dd9e159 [ 602.816212][T22891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.816228][T22891] RSP: 002b:00007fb18ed30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 602.816249][T22891] RAX: ffffffffffffffda RBX: 00007fb18e025fa0 RCX: 00007fb18dd9e159 [ 602.816263][T22891] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 602.816277][T22891] RBP: 00007fb18ed30090 R08: 0000000000000000 R09: 0000000000000000 [ 602.816289][T22891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.816300][T22891] R13: 00007fb18e026038 R14: 00007fb18e025fa0 R15: 00007ffdf8bb3678 [ 602.816332][T22891] [ 602.897931][ T8105] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.907988][ T8105] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 603.304317][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.597272][T11707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.783100][T18498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.871278][T22922] ip_tables: iptables: counters copy to user failed while replacing table [ 604.216035][ T4018] batadv2: left promiscuous mode [ 604.419091][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.772610][T22953] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 604.779086][T22953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.271317][T22961] netlink: 'syz.4.4486': attribute type 5 has an invalid length. [ 605.429651][T22973] syz_tun: entered allmulticast mode [ 605.646288][T22984] netlink: 'syz.3.4492': attribute type 11 has an invalid length. [ 605.696944][T22985] netlink: 'syz.3.4492': attribute type 11 has an invalid length. [ 606.324668][T23003] __nla_validate_parse: 16 callbacks suppressed [ 606.324687][T23003] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4497'. [ 606.336415][T18497] net_ratelimit: 67 callbacks suppressed [ 606.336429][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.485895][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 606.626152][T18498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.646230][T11707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.654219][T23016] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4500'. [ 607.043743][T23029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4503'. [ 607.074550][T23029] netlink: 'syz.4.4503': attribute type 1 has an invalid length. [ 607.618133][T23040] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4507'. [ 607.679837][T23038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.680475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.729483][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.113189][T23051] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4508'. [ 608.274922][T23056] ip6t_hbh: Not strict - not implemented [ 608.830629][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.927081][T23079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4516'. [ 608.928388][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4516'. [ 609.225995][T23086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4518'. [ 609.249894][T23087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4518'. [ 609.442410][T23096] ip_tables: iptables: counters copy to user failed while replacing table [ 609.443026][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4521'. [ 609.470964][T23096] tipc: Started in network mode [ 609.470991][T23096] tipc: Node identity ac1414aa, cluster identity 4711 [ 609.473849][T23096] tipc: Enabled bearer , priority 10 [ 609.508574][T23096] geneve3: entered promiscuous mode [ 609.532116][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.687168][T11709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.978472][T23117] team0: Device xfrm0 is of different type [ 610.010934][T23116] team0: Device xfrm0 is of different type [ 610.586083][T11709] tipc: Node number set to 2886997162 [ 611.570861][T23182] __nla_validate_parse: 4 callbacks suppressed [ 611.570882][T23182] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4537'. [ 612.088630][ T83] net_ratelimit: 2 callbacks suppressed [ 612.088648][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.136753][ T4018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.260884][T23207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4544'. [ 612.728048][T11707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.148980][T23206] tipc: Enabled bearer , priority 0 [ 613.151153][T23200] syzkaller0: entered promiscuous mode [ 613.151185][T23200] syzkaller0: entered allmulticast mode [ 613.200822][T23205] netlink: 'syz.0.4543': attribute type 6 has an invalid length. [ 613.237159][T18498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.285113][T23203] wlan0 speed is unknown, defaulting to 1000 [ 613.320897][T23200] tipc: Resetting bearer [ 613.363291][T23200] tipc: Disabling bearer [ 613.711447][T23225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4549'. [ 614.367745][T18500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.649239][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.108339][T23278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4554'. [ 615.269778][T23284] netlink: 'syz.4.4556': attribute type 10 has an invalid length. [ 615.286113][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 615.293514][T18495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.316012][T23284] team0: Port device dummy0 added [ 615.466888][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.704270][T23293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4559'. [ 615.766979][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.055011][T23304] veth1_vlan: left promiscuous mode [ 616.055192][T23304] veth1_vlan: entered promiscuous mode [ 616.055363][T23304] veth1_vlan: entered allmulticast mode [ 616.411182][T23317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4570'. [ 616.505038][T23317] veth7: entered allmulticast mode [ 616.596864][T18495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.165106][T23326] vlan2: entered promiscuous mode [ 617.165126][T23326] bridge0: entered promiscuous mode [ 617.392736][T23334] syzkaller1: entered promiscuous mode [ 617.392907][T23334] syzkaller1: entered allmulticast mode [ 617.521163][T23349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4579'. [ 617.537658][T23349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4579'. [ 617.727612][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.848698][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.149842][T23364] xt_connbytes: Forcing CT accounting to be enabled [ 618.541986][T23377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4583'. [ 618.650513][T23377] netlink: 'syz.2.4583': attribute type 5 has an invalid length. [ 618.650534][T23377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4583'. [ 618.813298][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.826734][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.828418][T23388] xt_hl: Unknown Hop Limit match mode: 4 [ 618.971957][T23392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4588'. [ 619.345038][T23400] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 619.392967][T23406] netlink: 'syz.3.4593': attribute type 1 has an invalid length. [ 619.417227][T23397] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4590'. [ 619.486863][T23406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 619.487800][T23411] syzkaller0: entered promiscuous mode [ 619.487819][T23411] syzkaller0: entered allmulticast mode [ 619.927026][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.007908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.409154][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.681037][T23431] ip6tnl2: entered allmulticast mode [ 620.726014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.026898][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.049378][ C0] bridge0: port 3(batadv1) entered forwarding state [ 621.049397][ C0] bridge0: topology change detected, propagating [ 621.110241][ T5743] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4094 [ 621.296192][T23441] wlan0 speed is unknown, defaulting to 1000 [ 621.328854][T18494] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 621.329080][T18494] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 621.357357][ T5743] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 621.486039][ T5743] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 621.543641][T23453] vxcan1: entered allmulticast mode [ 621.685821][ C0] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 621.685843][ C0] bridge0: topology change detected, propagating [ 621.686054][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.686070][ C0] bridge0: topology change detected, propagating [ 621.749870][ T5743] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 621.970394][ T12] IPVS: starting estimator thread 0... [ 622.055860][T23460] IPVS: using max 28 ests per chain, 67200 per kthread [ 622.059387][T23462] netlink: 'syz.3.4606': attribute type 1 has an invalid length. [ 622.511948][T23462] 8021q: adding VLAN 0 to HW filter on device bond5 [ 623.232987][ T12] net_ratelimit: 6 callbacks suppressed [ 623.233004][ T12] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4094 [ 623.235177][ T12] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4094 [ 623.236512][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.297342][ T8105] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4094 [ 623.608177][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.706606][T23507] netlink: 'syz.1.4619': attribute type 1 has an invalid length. [ 623.780651][T23507] 8021q: adding VLAN 0 to HW filter on device bond10 [ 623.788446][T23515] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4620'. [ 624.170913][T23527] bridge0: port 4(syz_tun) entered blocking state [ 624.171020][T23527] bridge0: port 4(syz_tun) entered disabled state [ 624.192679][T23527] syz_tun: entered promiscuous mode [ 624.193755][T23527] bridge0: port 4(syz_tun) entered blocking state [ 624.193867][T23527] bridge0: port 4(syz_tun) entered listening state [ 624.248447][T19742] IPVS: ip_vs_send_async error -101 [ 624.248709][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.255182][T23528] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4623'. [ 624.291341][T23530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4627'. [ 624.347904][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.859858][T23525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4623'. [ 624.912143][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.984415][T23546] bond6: option lp_interval: invalid value (0) [ 624.984437][T23546] bond6: option lp_interval: allowed values 1 - 2147483647 [ 625.004858][T23546] bond6 (unregistering): Released all slaves [ 625.046076][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 625.278545][T23555] tipc: Enabling of bearer rejected, failed to enable media [ 625.446999][T18498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.508857][T23564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4632'. [ 625.530289][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.661043][T23563] netlink: 'syz.0.4633': attribute type 1 has an invalid length. [ 625.963956][T23580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4635'. [ 626.349854][T23600] netlink: 'syz.2.4638': attribute type 1 has an invalid length. [ 626.852475][T23610] netlink: 'syz.0.4642': attribute type 1 has an invalid length. [ 626.957961][T23610] 8021q: adding VLAN 0 to HW filter on device bond6 [ 627.906076][T23637] netlink: 'syz.2.4650': attribute type 8 has an invalid length. [ 627.914511][T23637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4650'. [ 628.068421][T23645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4652'. [ 628.070664][T23637] veth9: entered allmulticast mode [ 628.093241][T23645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4652'. [ 628.207567][T23649] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.4651'. [ 628.375403][T23644] wlan0 speed is unknown, defaulting to 1000 [ 628.422452][T23655] netlink: 'syz.2.4654': attribute type 1 has an invalid length. [ 628.585370][T23655] 8021q: adding VLAN 0 to HW filter on device bond11 [ 628.656951][T23660] ip6gre2: entered allmulticast mode [ 628.901684][T18494] net_ratelimit: 5 callbacks suppressed [ 628.901703][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.070733][T23664] netlink: 'syz.2.4656': attribute type 13 has an invalid length. [ 629.070753][T23664] __nla_validate_parse: 2 callbacks suppressed [ 629.070765][T23664] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4656'. [ 629.085845][T23672] netlink: Invalid conntrack timeout [ 629.085872][T23672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.140424][T23675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4658'. [ 629.368076][T18493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.685324][T23686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4662'. [ 629.968887][T23697] netlink: 'syz.1.4666': attribute type 1 has an invalid length. [ 630.022172][T23697] 8021q: adding VLAN 0 to HW filter on device bond11 [ 630.078431][T18498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.099620][T23695] xt_hl: Unknown Hop Limit match mode: 4 [ 630.421385][T23705] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4668'. [ 630.478025][ T31] audit: type=1107 audit(1790046980.947:15): pid=23710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='”Æ‹Úsrcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 644.732514][T24155] [ 644.732514][T24155] but task is already holding lock: [ 644.739874][T24155] ffff88802920d958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 644.749393][T24155] [ 644.749393][T24155] which lock already depends on the new lock. [ 644.749393][T24155] [ 644.759796][T24155] [ 644.759796][T24155] the existing dependency chain (in reverse order) is: [ 644.768806][T24155] [ 644.768806][T24155] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 644.776688][T24155] __mutex_lock+0x19d/0x1550 [ 644.781813][T24155] elevator_change+0x1af/0x480 [ 644.787101][T24155] elevator_set_none+0xb5/0x140 [ 644.792471][T24155] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 644.798880][T24155] nbd_start_device+0x189/0xb30 [ 644.804328][T24155] nbd_genl_connect+0x167d/0x1cd0 [ 644.809871][T24155] genl_family_rcv_msg_doit+0x233/0x340 [ 644.815945][T24155] genl_rcv_msg+0x614/0x7a0 [ 644.820967][T24155] netlink_rcv_skb+0x226/0x4a0 [ 644.826253][T24155] genl_rcv+0x28/0x40 [ 644.830754][T24155] netlink_unicast+0x7bd/0x940 [ 644.836038][T24155] netlink_sendmsg+0x813/0xb40 [ 644.841334][T24155] sock_sendmsg_nosec+0x13a/0x180 [ 644.846881][T24155] ____sys_sendmsg+0x54e/0x850 [ 644.852174][T24155] ___sys_sendmsg+0x2a5/0x360 [ 644.857384][T24155] __x64_sys_sendmsg+0x1b1/0x290 [ 644.862856][T24155] do_syscall_64+0x166/0x520 [ 644.867971][T24155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.874387][T24155] [ 644.874387][T24155] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 644.883021][T24155] blk_alloc_queue+0x544/0x690 [ 644.888313][T24155] __blk_mq_alloc_disk+0x194/0x390 [ 644.893950][T24155] nbd_dev_add+0x494/0xb60 [ 644.898889][T24155] nbd_init+0x168/0x1f0 [ 644.903683][T24155] do_one_initcall+0x250/0x870 [ 644.908985][T24155] do_initcall_level+0x10a/0x1a0 [ 644.914486][T24155] do_initcalls+0x59/0xa0 [ 644.919345][T24155] kernel_init_freeable+0x29d/0x3e0 [ 644.925065][T24155] kernel_init+0x22/0x1d0 [ 644.929922][T24155] ret_from_fork+0x514/0xb70 [ 644.935059][T24155] ret_from_fork_asm+0x1a/0x30 [ 644.940353][T24155] [ 644.940353][T24155] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 644.947566][T24155] fs_reclaim_acquire+0x71/0x100 [ 644.953029][T24155] __kmalloc_cache_node_noprof+0x66/0x620 [ 644.959285][T24155] create_worker+0x112/0x7c0 [ 644.964425][T24155] workqueue_prepare_cpu+0xe4/0x170 [ 644.970146][T24155] cpuhp_invoke_callback+0x434/0x810 [ 644.975973][T24155] _cpu_up+0x2ce/0x5b0 [ 644.980581][T24155] cpu_up+0x1d2/0x220 [ 644.985092][T24155] cpuhp_bringup_mask+0xb2/0x1a0 [ 644.990652][T24155] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 644.996990][T24155] bringup_nonboot_cpus+0x17/0x30 [ 645.002557][T24155] smp_init+0x32/0x110 [ 645.007214][T24155] kernel_init_freeable+0x27f/0x3e0 [ 645.012941][T24155] kernel_init+0x22/0x1d0 [ 645.017804][T24155] ret_from_fork+0x514/0xb70 [ 645.022915][T24155] ret_from_fork_asm+0x1a/0x30 [ 645.028209][T24155] [ 645.028209][T24155] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 645.035943][T24155] cpus_read_lock+0x42/0x160 [ 645.041057][T24155] static_key_slow_inc+0x12/0x30 [ 645.046532][T24155] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 645.052783][T24155] nbd_genl_foreach_sock+0x265/0x450 [ 645.058596][T24155] nbd_genl_reconfigure+0xbbb/0x1040 [ 645.064398][T24155] genl_family_rcv_msg_doit+0x233/0x340 [ 645.070467][T24155] genl_rcv_msg+0x614/0x7a0 [ 645.075492][T24155] netlink_rcv_skb+0x226/0x4a0 [ 645.080789][T24155] genl_rcv+0x28/0x40 [ 645.085293][T24155] netlink_unicast+0x7bd/0x940 [ 645.090587][T24155] netlink_sendmsg+0x813/0xb40 [ 645.095881][T24155] sock_sendmsg_nosec+0x13a/0x180 [ 645.101427][T24155] ____sys_sendmsg+0x54e/0x850 [ 645.106713][T24155] ___sys_sendmsg+0x2a5/0x360 [ 645.111914][T24155] __x64_sys_sendmsg+0x1b1/0x290 [ 645.117378][T24155] do_syscall_64+0x166/0x520 [ 645.122488][T24155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.128899][T24155] [ 645.128899][T24155] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 645.136544][T24155] __mutex_lock+0x19d/0x1550 [ 645.141656][T24155] nbd_queue_rq+0x373/0xff0 [ 645.146688][T24155] blk_mq_try_issue_directly+0x3f4/0x880 [ 645.152848][T24155] blk_mq_submit_bio+0x1d7a/0x2a70 [ 645.158488][T24155] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 645.164717][T24155] block_read_full_folio+0x581/0x810 [ 645.170551][T24155] filemap_read_folio+0x12c/0x3a0 [ 645.176104][T24155] do_read_cache_folio+0x354/0x590 [ 645.181742][T24155] read_part_sector+0xb6/0x2b0 [ 645.187085][T24155] adfspart_check_ICS+0xb1/0x960 [ 645.192548][T24155] bdev_disk_changed+0x851/0x17a0 [ 645.198102][T24155] blkdev_get_whole+0x372/0x510 [ 645.203475][T24155] bdev_open+0x324/0xd70 [ 645.208235][T24155] blkdev_open+0x461/0x600 [ 645.213170][T24155] do_dentry_open+0x816/0x1380 [ 645.218449][T24155] vfs_open+0x3b/0x340 [ 645.223027][T24155] path_openat+0x1443/0x1d60 [ 645.228124][T24155] do_file_open+0x23e/0x4a0 [ 645.233140][T24155] do_sys_openat2+0x115/0x200 [ 645.238339][T24155] __x64_sys_openat+0x138/0x170 [ 645.243702][T24155] do_syscall_64+0x166/0x520 [ 645.248804][T24155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.255210][T24155] [ 645.255210][T24155] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 645.262405][T24155] __mutex_lock+0x19d/0x1550 [ 645.267503][T24155] nbd_queue_rq+0xc1/0xff0 [ 645.272423][T24155] blk_mq_try_issue_directly+0x3f4/0x880 [ 645.278559][T24155] blk_mq_submit_bio+0x1d7a/0x2a70 [ 645.284176][T24155] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 645.290311][T24155] block_read_full_folio+0x581/0x810 [ 645.296110][T24155] filemap_read_folio+0x12c/0x3a0 [ 645.301657][T24155] do_read_cache_folio+0x354/0x590 [ 645.307281][T24155] read_part_sector+0xb6/0x2b0 [ 645.312550][T24155] adfspart_check_ICS+0xb1/0x960 [ 645.318006][T24155] bdev_disk_changed+0x851/0x17a0 [ 645.323536][T24155] blkdev_get_whole+0x372/0x510 [ 645.328903][T24155] bdev_open+0x324/0xd70 [ 645.333649][T24155] blkdev_open+0x461/0x600 [ 645.338572][T24155] do_dentry_open+0x816/0x1380 [ 645.343845][T24155] vfs_open+0x3b/0x340 [ 645.348417][T24155] path_openat+0x1443/0x1d60 [ 645.353510][T24155] do_file_open+0x23e/0x4a0 [ 645.358520][T24155] do_sys_openat2+0x115/0x200 [ 645.363702][T24155] __x64_sys_openat+0x138/0x170 [ 645.369056][T24155] do_syscall_64+0x166/0x520 [ 645.374154][T24155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.380557][T24155] [ 645.380557][T24155] -> #0 (set->srcu){.+.+}-{0:0}: [ 645.387674][T24155] __lock_acquire+0x164c/0x2de0 [ 645.393035][T24155] lock_sync+0xb3/0x130 [ 645.397695][T24155] __synchronize_srcu+0xc9/0x2f0 [ 645.403144][T24155] elevator_switch+0x1e8/0x7b0 [ 645.408413][T24155] elevator_change+0x2fa/0x480 [ 645.413680][T24155] elevator_set_default+0x375/0x440 [ 645.419387][T24155] blk_register_queue+0x3f3/0x4e0 [ 645.424920][T24155] __add_disk+0x6b8/0xdb0 [ 645.429758][T24155] add_disk_fwnode+0x100/0x3a0 [ 645.435034][T24155] nbd_dev_add+0x733/0xb60 [ 645.439952][T24155] nbd_genl_connect+0x96c/0x1cd0 [ 645.445395][T24155] genl_family_rcv_msg_doit+0x233/0x340 [ 645.451449][T24155] genl_rcv_msg+0x614/0x7a0 [ 645.456463][T24155] netlink_rcv_skb+0x226/0x4a0 [ 645.461735][T24155] genl_rcv+0x28/0x40 [ 645.466220][T24155] netlink_unicast+0x7bd/0x940 [ 645.471491][T24155] netlink_sendmsg+0x813/0xb40 [ 645.476766][T24155] sock_sendmsg_nosec+0x13a/0x180 [ 645.482296][T24155] ____sys_sendmsg+0x54e/0x850 [ 645.487568][T24155] ___sys_sendmsg+0x2a5/0x360 [ 645.492753][T24155] __x64_sys_sendmsg+0x1b1/0x290 [ 645.498196][T24155] do_syscall_64+0x166/0x520 [ 645.503297][T24155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.509696][T24155] [ 645.509696][T24155] other info that might help us debug this: [ 645.509696][T24155] [ 645.519905][T24155] Chain exists of: [ 645.519905][T24155] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 645.519905][T24155] [ 645.533537][T24155] Possible unsafe locking scenario: [ 645.533537][T24155] [ 645.540965][T24155] CPU0 CPU1 [ 645.546313][T24155] ---- ---- [ 645.551662][T24155] lock(&q->elevator_lock); [ 645.556238][T24155] lock(&q->q_usage_counter(io)#49); [ 645.564115][T24155] lock(&q->elevator_lock); [ 645.571204][T24155] sync(set->srcu); [ 645.575081][T24155] [ 645.575081][T24155] *** DEADLOCK *** [ 645.575081][T24155] [ 645.583205][T24155] locks held by syz.3.4795/24155: 6, last CPU#0: [ 645.589509][T24155] #0: ffffffff902c46a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 645.597675][T24155] #1: ffffffff902c44e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 645.606624][T24155] #2: ffff888078fc29c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 645.616966][T24155] #3: ffff88802920d9e0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 645.626779][T24155] #4: ffff88802920d468 (&q->q_usage_counter(queue)#57){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 645.637666][T24155] #5: ffff88802920d958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 645.647488][T24155] [ 645.647488][T24155] stack backtrace: [ 645.653362][T24155] CPU: 0 UID: 0 PID: 24155 Comm: syz.3.4795 Not tainted syzkaller #0 PREEMPT(full) [ 645.662728][T24155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 645.672769][T24155] Call Trace: [ 645.676041][T24155] [ 645.678956][T24155] dump_stack_lvl+0xe8/0x150 [ 645.683538][T24155] print_circular_bug+0x2e2/0x300 [ 645.688552][T24155] check_noncircular+0x12f/0x150 [ 645.693477][T24155] __lock_acquire+0x164c/0x2de0 [ 645.698320][T24155] ? lockdep_unlock+0x5c/0xd0 [ 645.702989][T24155] ? __lock_acquire+0x1511/0x2de0 [ 645.708000][T24155] lock_sync+0xb3/0x130 [ 645.712140][T24155] ? __synchronize_srcu+0xb5/0x2f0 [ 645.717236][T24155] ? __synchronize_srcu+0xb5/0x2f0 [ 645.722330][T24155] __synchronize_srcu+0xc9/0x2f0 [ 645.727252][T24155] ? __pfx___synchronize_srcu+0x10/0x10 [ 645.732784][T24155] ? do_raw_spin_lock+0x12b/0x2f0 [ 645.737801][T24155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 645.743591][T24155] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 645.749155][T24155] ? synchronize_srcu+0x20a/0x260 [ 645.754168][T24155] elevator_switch+0x1e8/0x7b0 [ 645.758917][T24155] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 645.764365][T24155] elevator_change+0x2fa/0x480 [ 645.769113][T24155] ? do_raw_spin_unlock+0xf5/0x200 [ 645.774215][T24155] elevator_set_default+0x375/0x440 [ 645.779397][T24155] ? __pfx_elevator_set_default+0x10/0x10 [ 645.785102][T24155] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 645.792181][T24155] ? blk_crypto_sysfs_register+0x11c/0x170 [ 645.798006][T24155] blk_register_queue+0x3f3/0x4e0 [ 645.803024][T24155] __add_disk+0x6b8/0xdb0 [ 645.807346][T24155] add_disk_fwnode+0x100/0x3a0 [ 645.812097][T24155] nbd_dev_add+0x733/0xb60 [ 645.816497][T24155] ? __pfx_nbd_dev_add+0x10/0x10 [ 645.821425][T24155] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 645.827213][T24155] ? bpf_lsm_capable+0x9/0x20 [ 645.831890][T24155] ? security_capable+0x7e/0x2c0 [ 645.836853][T24155] ? radix_tree_lookup+0x25c/0x290 [ 645.841993][T24155] nbd_genl_connect+0x96c/0x1cd0 [ 645.846920][T24155] ? __pfx_nbd_genl_connect+0x10/0x10 [ 645.852278][T24155] ? rcu_is_watching+0x16/0xb0 [ 645.857031][T24155] ? trace_kmalloc+0x2a/0xf0 [ 645.861605][T24155] ? __kmalloc_noprof+0x38c/0x720 [ 645.866610][T24155] ? __nla_parse+0x40/0x60 [ 645.871020][T24155] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 645.877335][T24155] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 645.883651][T24155] genl_family_rcv_msg_doit+0x233/0x340 [ 645.889184][T24155] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 645.895241][T24155] ? __lock_acquire+0x747/0x2de0 [ 645.900171][T24155] genl_rcv_msg+0x614/0x7a0 [ 645.904663][T24155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.909674][T24155] ? __pfx_nbd_genl_connect+0x10/0x10 [ 645.915032][T24155] netlink_rcv_skb+0x226/0x4a0 [ 645.919786][T24155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.924793][T24155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.930072][T24155] ? down_read+0x2be/0x330 [ 645.934478][T24155] genl_rcv+0x28/0x40 [ 645.938447][T24155] netlink_unicast+0x7bd/0x940 [ 645.943201][T24155] netlink_sendmsg+0x813/0xb40 [ 645.947959][T24155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.953240][T24155] ? apparmor_socket_sendmsg+0x98/0x360 [ 645.958781][T24155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.964057][T24155] sock_sendmsg_nosec+0x13a/0x180 [ 645.969070][T24155] ____sys_sendmsg+0x54e/0x850 [ 645.973824][T24155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.979097][T24155] ? import_iovec+0x73/0xa0 [ 645.983586][T24155] ___sys_sendmsg+0x2a5/0x360 [ 645.988251][T24155] ? __lock_acquire+0x747/0x2de0 [ 645.993176][T24155] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.998363][T24155] ? futex_wait+0x2a2/0x390 [ 646.002870][T24155] ? __fget_files+0x2a/0x420 [ 646.007446][T24155] ? __fget_files+0x3a2/0x420 [ 646.012114][T24155] __x64_sys_sendmsg+0x1b1/0x290 [ 646.017040][T24155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.022493][T24155] do_syscall_64+0x166/0x520 [ 646.027069][T24155] ? trace_irq_disable+0x3b/0x140 [ 646.032075][T24155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.038127][T24155] ? clear_bhb_loop+0x70/0xc0 [ 646.042794][T24155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.048669][T24155] RIP: 0033:0x7f118659e159 [ 646.053068][T24155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.072657][T24155] RSP: 002b:00007f11873dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.081052][T24155] RAX: ffffffffffffffda RBX: 00007f1186825fa0 RCX: 00007f118659e159 [ 646.089004][T24155] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 646.096955][T24155] RBP: 00007f118663506b R08: 0000000000000000 R09: 0000000000000000 [ 646.104910][T24155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.112863][T24155] R13: 00007f1186826038 R14: 00007f1186825fa0 R15: 00007ffd5ec349f8 [ 646.120825][T24155] [ 646.140692][T18497] net_ratelimit: 11 callbacks suppressed [ 646.140707][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.154718][ T2005] block nbd4: Connection timed out, retrying (0/1 alive) [ 646.154769][ T2005] block nbd4: Connection timed out, retrying (0/1 alive) [ 646.154800][ T2005] block nbd4: Connection timed out, retrying (0/1 alive) [ 646.154829][ T2005] block nbd4: Connection timed out, retrying (0/1 alive) [ 646.154873][ T2005] block nbd4: Dead connection, failed to find a fallback [ 646.154887][ T2005] block nbd4: shutting down sockets [ 646.154901][ T2005] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.154936][ T2005] Buffer I/O error on dev nbd4, logical block 3, async page read [ 646.154958][ T2005] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.154979][ T2005] Buffer I/O error on dev nbd4, logical block 2, async page read [ 646.154996][ T2005] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.155017][ T2005] Buffer I/O error on dev nbd4, logical block 1, async page read [ 646.155033][ T2005] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.155053][ T2005] Buffer I/O error on dev nbd4, logical block 0, async page read [ 646.225365][ T5623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.225395][ T5623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 646.225423][ T5623] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.225445][ T5623] Buffer I/O error on dev nbd4, logical block 1, async page read [ 646.225468][ T5623] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.225492][ T5623] Buffer I/O error on dev nbd4, logical block 2, async page read [ 646.225514][ T5623] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.225534][ T5623] Buffer I/O error on dev nbd4, logical block 3, async page read [ 646.225564][ T5623] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.225584][ T5623] Buffer I/O error on dev nbd4, logical block 0, async page read [ 646.225606][ T5623] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.225626][ T5623] Buffer I/O error on dev nbd4, logical block 1, async page read [ 646.226482][ T5623] ldm_validate_partition_table(): Disk read failed. [ 646.226693][ T5623] Dev nbd4: unable to read RDB block 0 [ 646.227017][ T5623] nbd4: unable to read partition table [ 646.623115][T24155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4795'. [ 646.693904][T24155] vti0: entered promiscuous mode [ 646.693926][T24155] vti0: entered allmulticast mode [ 646.788706][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.790522][ T5623] ldm_validate_partition_table(): Disk read failed. [ 646.790756][ T5623] Dev nbd4: unable to read RDB block 0 [ 646.791069][ T5623] nbd4: unable to read partition table [ 647.226907][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.925969][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 647.926399][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.326708][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.426941][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.846450][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.526986][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.626640][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.766456][T18494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.727788][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.886484][T11709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.046451][T18497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.048086][T11709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.837678][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.325885][ C1] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4094 [ 654.325920][ C0] bridge0: port 4(syz_tun) entered learning state