last executing test programs: 2.616445315s ago: executing program 4 (id=5090): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r2, 0x0, 0x18, 0x0, &(0x7f0000000080)) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000170a0108f70000000396ae9641bb75a2cfb817854300020000010900020073797a32000000000900"], 0x2c}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x41, 0x9, 0xfff, 0xb, 0x2, 0x96e, 0x4, 0x8, 0x40, 0x6a, 0x798, 0x6, 0x8, 0xfffffffffffffffc}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000000c0)={{r3, 0x400, 0xe77, 0xfc, 0x2, 0xa, 0xb532, 0xffffffff, 0x315a, 0x8, 0xa99, 0x1, 0x8000, 0x7, 0x1}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0083e4da13a95091c0000800000000000000fb00", @ANYRES32=0x0, @ANYBLOB="00000000a8880000200012800b00010065727370616e00100002800400120006000e0000000000"], 0x40}}, 0x0) 2.415712098s ago: executing program 4 (id=5092): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0xfffffffffffffe2d) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x40003, @empty, 0x10}, 0x1c) listen(r0, 0x0) listen(r1, 0x4) 2.317716018s ago: executing program 4 (id=5093): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="183000000100000000000000030000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff070000000000003eb7030000652b0000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0xa}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01e1ff0001000000140003007665746830000000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100242233445500112233445504ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES8=r3], 0x34}, 0x1, 0x0, 0x0, 0x2044}, 0x880) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x8917}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4000, 0x0, 0x11, 0x0, @multicast1, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x4, 0x100, @void}}}}}}}}, 0x32) 2.311606384s ago: executing program 3 (id=5094): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f00000014c0)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="80d7d028d176899ed527737642b4c53c61d8095f5a68ec419f3c6511be3f0d759c4ae9956a6a", 0x26}, {&(0x7f00000000c0)="d15a5aa4e0c51396270d6bff632c8983496fd9b4a0f3f991cb608e3fa98fb08ced03d1cd923cba0aeb7c0be1b7fecfc4cd654d08b5d114227d2e6411afb7538902103f1ef777cfd71d8c6fad05d4ef576ae81f3fc3534a5e52416e0f38c98f2bd774c1d3e83bd7700c5a18110b0bff7ac544f0f7a1a8c9cc2e00cc06f3e3b57eb8d92d5327ee72ca861dcead4a2b6d1917507d28fa8294596c1e2e9afb8b6b235ea41d5e1c898591106b67d07dc117e95ac9b5ec9c8a77cd7d8b3fa6a0b241557d60de63058d3355eb330ab7cbd6f3a82860816c9d0ba865bd77d7e15f3dd1436acd94f0", 0xe4}, {&(0x7f00000001c0)="413ee83b17187353453339266c7fd91de4be8b3ced92486b75db387d80904bf550bc81e24e8ad9dfb121e06f16e566f7a1a1ddf036b7dced4609cf6b297491a22dee80c48d2086c5e15160f729549215b650f7389e4f71887e02e01c8bdf5a874c3ee85e089ade300dc6fd7c4d83e970bb845315ae8a1e1b3589849858a6edf60a318b22095c36d355dc8142bfc1d7dbc6f3df54be109cdd8e2fe629dc6297523e578a83109f0578f38462e560b3b8d861f031b4c3d806f87e521853cbe8572d4b106523533aaed24030ca49b22f2b", 0xcf}, {&(0x7f00000002c0)="720b32ccf1cb48a49f3af5cd78ec5c1e57435f510efc30cbec5083c26c5b8d345c3b6d2a6233cb18c3fa0cd411e11c59aeef36e387c76bf552cad61fd517b40577168887505c79ea916fb93bc54c9e18d9de0162fd008e2cd70266d01dab606d961a166bfe053e165ad03330b0f3388b78fc0f1d3fa4757bd60eda599a1179fe16523a16bf5ced55c7a3acee91f3eebfb051a08b9111c4e4139e5c9954f7d135d453c83da4c2026721a25d13978097c8f05279db13a165a46239394c9f7fc16abfcacb990dc2c058ae4ed4fb7be1c643ffc00bbddf61aaf47ceedead77b9cf6cbc9b33c7f28f7b04c380dcd78290f5ee5fdeba97c75d62667157", 0xfa}, {&(0x7f00000003c0)="b67f8c7e755b1dc9daa9b4f29e32ed079ce2d11383173dcc6c908c9497dc9e96451b5dea5d3743078cb409f94077723537e2", 0x32}, {&(0x7f0000000400)="8599977c4a1c95ebf58e", 0xa}], 0x6, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x48}}, {{&(0x7f0000000540)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80, &(0x7f0000000900)=[{&(0x7f00000005c0)="807eb3a4537eef0b3a08f303729694784de5ed5ea62e9e97c76d3fd915b0b0625a5b4cee820e4310c74ccb28dc50613a2d6bae6a048f267b3422860c76b279fc9de4e8f606edfd62942ea78ea5b3531823dea11d55e4e3d7", 0x58}, {&(0x7f0000000640)="0a392175b8260a56c859ab34108cadcbeecd6d422e4ceb525fef132150d7a366113232be7b9e107d455e638a1108cd3935c3f8b8cbc43511f8ff5679811104c6483d1549040e68d8b3fde7e7ffc9fe04153ce70bae88d291f01eb72af7b25f09c9cd90c225d194b31b5b9b77b671fa74f0d59ca5e0fbfd3dbcfa1016ee59f3304b9728135fc6e28c9116ce637061d34dbbb47bb35edb8299938fdcef59c5df12361b619b2b9e158515e7dd567d954b85300fb2206eb8d28db0d41f6b3f8ffd744f91a7", 0xc3}, {&(0x7f0000000740)="7848202abef199a39c7e21f56e5e9f993de3135a78600de6e622e3dce1c877c3b5bb0ae3ef2196346fe8d2ab8e8c57fdffe1e98533c4ffc8644c52ee13496d2e8edca75b6b3fb30a6937b643c49a71c7434afa3ed58243ebe548dc67cc84956963abae4c44dac5fdc6345afff2e2101b29a18e0a4277296da1213007f9cd0b9302dad4fb67781bde249b46e006059c7de97c7a18a24a2039169e83d6a6a7d67a22df54b1776679cbaddbea90108f83308e7314c54f1865951e722ec042594013c2f0cc38ffd497cb3175c1408587f11a5eaaeaf47d3fba877f06033b41f929b9f94b733c44ce", 0xe6}, {&(0x7f0000000840)="e6af19ec741f42dce1f1a67472ee5a34e2ca4b6d9d7ea5fbd91965de18abb70232ac313caafc55800fc46b4654dd8f3205e86e30f6a78a5a8c8f38698b11f4468a890cfc4e100b0d55f4c1268f9ea278227c9bd6e60cd6b0a43567753eff07bc68bfe8838b97531bec83d5fa0306204a424d67f327f5cd1432cc0981e54990b70e242cc906b20017cdb03e73bf0fe883d3aa0c78ee80f40420a87c07a40b58142fc7e35a11f0e9341f30b8de3eb0a2a22ed468", 0xb3}], 0x4}}, {{&(0x7f0000000940)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x3}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000009c0)="3d1d32bf0d1d4e8c2d93add4d17850602033ce533526790d1e7625bbf022b180e59b9179b3d6898a955af311a7d1db7c09b98c9443ea46f082fb4bea6a2b673b80ec957cb43fdc1146b3f6f83c8d1d2ae3e8ce24b767f14d987be2b8d42a7ccc729fe84dcad4449c70dfe1112693ceb7b5b1dceeb963228fd22a24ed1c6b28c350f1067da5eaa727ed2590223cd218a424ea28a9322ebc449ede63617854d2b4cdfc7c0bf966db52720f9c3c1741c694a7a29f6b37bbc693c032b1288c44698fcb2fb29aeb06f4", 0xc7}, {&(0x7f0000000ac0)="bc22b19f5f09f47fd1557f3998d0ec80d6eda6db41076d6fa4671eda2dc8407fc6dc7b9bf7914919da59719902c78670f1cef0aba7909ebb16e16c3875ae3e576d7bcf134399c404528cbf00ff5fa757343cde14ef79cec155fe5a2ef484a02050f9b6579bcd5e", 0x67}, {&(0x7f0000000b40)="5ab9dc26087ed66d2a4a1bfcb61f57106bea921d6ba5daa09be191e1062ec8800cc5ce5f42d4260abd8ca683c0025afce5f9c031615a6caff0d4fe1398a315a98d505c36b6cf8acb06a3d2893e35b7e029fa5d4b49cb76972a603ab64f04d8b597915ec66aca0682c9b14407fe59ccf2f59fcb3ae99ab87dc6566d7e6ccf2f293d3610d8a7f21f61a75e96a424d9a888da68b26d1e1bbf4160f6d07b8312ba3ba6e754044bd7bcb0e4d72efdac6da14df0551fa5a69d240c541b1a400e2ad76350a166c51c5b6b49b1769ffeb2935b27c065c1f8949ba3bd", 0xd8}], 0x3}}, {{&(0x7f0000000c80)=@isdn={0x22, 0x19, 0x5, 0xe, 0x5}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000d00)="e6b9fad2e3f11ce2b540e56ed53f80b294964b7001380c41af7808cddc30ac9377fdf2cabb24c30185bf86df3827a9086fa9cffe39edd59d5b51fbf2efa9f8830eedc7b68e5590235e06dfa886165cd2a254e3af2a1dc87f17daf291a9e0329de120dc42cbcafbcb70ebe04794b5e0c3929bbaa3e4808cf473a3a47960c24310e6db27f0cc7d8459e6ed63b6cc528da84323df1d541df9fe82d281b8890446f475154b5501c761ecfcf785974208dbad89ba216c898f5f26", 0xb8}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)="f983fd7b53e7d416d47bad99bd840afe9c6027d0e73c8b36d1ca2cf4d8d5b898838b780b46a152ff93e386f9812a45c3300241015c20d3f0b5410275098f6b79d6bd194bc7d1529d58363208dbff2a991eb8faed266a764a10f70f7d806434b1bb1caa26df644a5aaaa54476ff78beaa21573b089baee19c90fb7634fedd4db3f6bc4b086dd450c6acd69dbbf953272c880c7288bb890c8cb0bf17e3a6fff87fccb36d6fb3ede70377825b3de27168170b7cb9ded6fc99db36e55d8d5685223551c15473a2e96b648d52c3d2e579a06b80cfb66a9c294bc8637d1a184ebe227b4261a657bc8332feaa495ab9895042550ae9c7fe54810de1f1", 0xf9}, {&(0x7f0000000f00)="41510dd9333be73f0925443f26f18414790c305ec3aac7057aacb4c60c7447e783573c88c5f3cda53db76cb47308db059bcaf51940e1211c2f1f49dad9fc96f4179ce9862426d3bc", 0x48}, {&(0x7f0000000f80)="0e969c9507c1e04c1c5daeec16f73473a08ead55d8af782337ee3ad23afb5042da9bb25dd59adcd07e6331bba8d873bf721b0f673c0b9a1b7b8293e82c29f1781caac63a9ee454026b6d388f9e89b6ac4e5fe4c51c0fa5cb04e56ec66d5a9e7b286f6600fc517c3f79316149b8dfb425f34427fa640abfa214ab8279aca991205cdcbca5e36d8faccb3dc16a2372dbd74102e9a3bec4d52299ee8ebc7e212a7fdcebc184fac0d4d47e4ee5b58a07e6a0fa7dc2244d4a333175f2ec0aa3401f4b08ad6247298fd507ed9cc5d7a2e3eea5d1349995298ed9ce736e", 0xda}, {&(0x7f0000001080)="f5462a3820f262aa9e50aac9300917adc291d465b2f6db5dbd25ce3b0eb6f76d7231e7abc6d5f41b8c59a5c433ade0f4290efe3a34e4abd7319dda459f5b2a3ffecb4b481b3b47135cb977c097150bba77878614a4c7a735aa52745309db3c014a2a735356a208e866515e4b7ec395444dfce12d5dac3b432d4fcdd9288683566fdc53048492eca11c3a3feabddf5becd8d1e98b1f7fe38060862dfa95dc87291c2a0fcf99889efaddc96ac36ce78b155a8a2eb15753f0a3c1ba42a28889c9d8f7c3a183179fa49d12ec01aba6601777072db7309b03a52bf9b954a132bb546978eee9187dd90007beb24b3cf1acca", 0xef}, {&(0x7f0000001180)="fb81ee0af09eafb20b58aff1397a8b4e533324f76b7aa22f444e4225142219400f8eb63b0bb068c1cced2bd760d330f48f7faf0daf64ae007ad825d5b44bef7f13d9070f1e356c9933d9001bedea196d4e242cb9f925e361fc9def6660a4ecb39257bc6223cb6b99423cb465bb4972e33bfa1c7fcc43009f6cb4342bf86c2194054c4fec961f8550d88272518019b3280b78caf3b4fd24796b2b87149d7b8be37ce2b2da6a9c1940712d258f1a573d1bab843e7d547e5c3004902c5184609ddc9d2adf00c5a995f845ec575514b406d2a7d87792f1d4f7c325b0", 0xda}], 0x7, &(0x7f0000001300)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)="969c00f6a7393286027c73341e9ee12d40783e0ac660c7f7bf6a587473c036d73e93ee5d2d5b", 0x26}, {&(0x7f00000013c0)="1a14ac55638f551cc7b6304fc5c832ddffa3364c991cfb503b35", 0x1a}], 0x2, &(0x7f0000001440)=[@txtime={{0x18, 0x1, 0x3d, 0xcf}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x48}}], 0x5, 0x40010) recvmsg(r0, &(0x7f0000002b40)={&(0x7f0000001600)=@qipcrtr, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/226, 0xe2}, {&(0x7f0000002780)=""/178, 0xb2}, {&(0x7f0000002840)=""/71, 0x47}, {&(0x7f00000028c0)=""/86, 0x56}, {&(0x7f0000002940)=""/236, 0xec}, {&(0x7f0000002a40)=""/30, 0x1e}], 0x7, &(0x7f0000002b00)=""/21, 0x15}, 0x10060) shutdown(r0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000002b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002bc0)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000002c40)={0x0, @can={0x1d, r1}, @tipc=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x1}}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, 0x7fff, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000002c00)='macsec0\x00', 0x0, 0x8, 0x8}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000002cc0), &(0x7f0000002d00)=0x4) r2 = accept4(r0, &(0x7f0000002d40)=@sco={0x1f, @none}, &(0x7f0000002dc0)=0x80, 0x80800) sendto$unix(r2, &(0x7f0000002e00)="6d7ab6de721bd4302434de4b7fb3fea1718e2b2e36af1870fe06d2e4f30c6ff7e6a7f4c165c81d51706e93f477", 0x2d, 0xd0, 0x0, 0x0) r3 = accept4$x25(r2, &(0x7f0000002e40), &(0x7f0000002e80)=0x12, 0x1800) r4 = accept4(r3, &(0x7f0000002ec0)=@generic, &(0x7f0000002f40)=0x80, 0x0) getsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000002f80), &(0x7f0000002fc0)=0x4) r5 = accept4$llc(r2, &(0x7f0000003000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000003040)=0x10, 0x800) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000003080)={'batadv_slave_0\x00', {0x2, 0x0, @local}}) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000003340), 0x80, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003380)={0xffffffffffffffff, 0x0, 0x8}, 0xc) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000033c0)='devices.deny\x00', 0x2, 0x0) r10 = getpid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000003400)={0x0, 0x0}, &(0x7f0000003440)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003480)={0x0, 0x0, 0x0}, &(0x7f00000034c0)=0xc) sendmmsg$unix(r4, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f00000030c0)="4cd01828b39e3d86b93864d57463905d7fdf63076f7cd376b7152f064d89bc5fcbf839b0fa9990f02463d4dafa7aacc45b6ffef198195fafed3ee1cc96c1ee834cf3faf8789180656118e7ea436dfc584d7b7b880714191c7c89f2008685a57ae8201c032d733e21d91efa3882b080f94f85b074a7a60e398ada62668d2dba2b6054feeb0e68b75fe1ef495b687837d129e5264da07a74dbdcd1720384d9063efa09b88a1b44de5ee651d684a7adaf810f2b305b8b4a7f76de173492e509b3", 0xbf}], 0x1, 0x0, 0x0, 0x40020000}}, {{&(0x7f00000031c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003300)=[{&(0x7f0000003240)="e7437ca4ede5ee161f56f99451dcde9a611c02e425c83d42573c8b79060803e26ec30a1281817c5503be08af43ada2918179b9f1e4d1cf737da25b7fc2e786809a92dfa60a5bd82ffeecfcbc41c31e4bf9589b76d7b77121d1a645e2565dc647281a68f21e8872ab5af13ecf32a5f9c949168ed1ca6bb675549df0263464a783fb59dc", 0x83}], 0x1, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r5]}}, @rights={{0x30, 0x1, 0x1, [r2, r3, r3, 0xffffffffffffffff, r3, r0, r6, r7]}}, @rights={{0x28, 0x1, 0x1, [r2, r5, r8, r9, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x24, 0x1, 0x1, [r2, r5, r4, r5, r5]}}, @rights={{0x28, 0x1, 0x1, [r2, r4, r5, r4, r3, r5]}}], 0x100, 0x91}}], 0x2, 0x4000) accept4$inet6(r2, &(0x7f0000003680)={0xa, 0x0, 0x0, @remote}, &(0x7f00000036c0)=0x1c, 0x0) r13 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r5, &(0x7f0000003700)={0x60000014}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003740)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000037c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000003880)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x28, r14, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4d}, @void, @val={0xc, 0x99, {0x7fffffff, 0xa}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8000) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000038c0), &(0x7f0000003900)=0x4) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000003940)={0x1, 'batadv_slave_0\x00', {}, 0x4}) 2.198185921s ago: executing program 0 (id=5096): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "00ff00", "000000d900"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b400000000000000631123000000000000000095007400000000000000000000ed8a61d455c41fdf0e781afb77e43f3931f2ee4bf14ed53e717f902d3b718ef68dfb0e36f9b2a8a97f0b102b2a02a72c3556f9847ab6f5ff20d727fb6fd27dd3d96a72c735f6cf0f830c8466499aef2eee4d856d0648868dfeced615dd459c55b468386adbdd"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330f70000008000100", @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x48081}, 0x0) 2.176964181s ago: executing program 3 (id=5097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000c00)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0xfac, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "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"}}}}, 0xfce) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x80000) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x15, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@void, {0x8864, 0x0, 0x1}}, {@llc={0x4, {@llc={0xe, 0xf4, "99"}}}}}, 0x0) 1.963826587s ago: executing program 2 (id=5099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x158, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x144, 0x1, [@m_skbedit={0x140, 0x12, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x2}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0xf3, 0x6, "f8468d1acddb817c15685d0e2460f9a6f3157930651c35520a10eb3ece732ec57d6495e08c363396bc330e364390194d0a046086dcd4bd245c0ef742e15c6d3c83080af676e0259334b415611edf55a2cf47299694be7261358ee1897cb64533ab090f14c334d28de02f0000000000000006320004db98e2a1177f2d44f589f21e2a16ace35035b5f904e09889f6861821bc81f132eacb1658971d35882188939d6f1601297ba5a4bce3edeff86c13eb1b635425dcf80e507cb629f47d6030dd0a9baa221cef4af717bf8b05b15248ebcb7ea57f650395f4599fd5de475c68c03f41a20e32e7242ca5edf1563cb71b"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc, 0x18, 0xffffffffffffffff, 0x5}, 0x50) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002f00000018000380100003800c00018005000208000000000400010018000180140002007369743000"], 0x44}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x19, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc0d4) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r10, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) (async) sendto(r9, &(0x7f0000000100)="61c7dd4e51a89aeb5a70963fe087f8f7de45fbb5141bbf94b518986b4de98b4902e43a073b1a871e757a267e1d58c9dffe5a9cdf48fc1a1c6df3c789b89f4c2bcbdd9b69e38b240eb570d0ff8ab6ca967ef41c2cc53a39b077ff58c5c07ef6976a2a85cae8e2cde3f86c903f7e50c9aad4582785ed1eb64881f6c9d031a17fdf4b65ede141519fa65d58b5325dbf38e8260dc77f61ec4e47f81263ccdc7ddf89327ac03cab5dc18b5b93cd", 0xab, 0x1, &(0x7f0000000280)=@l2={0x1f, 0xbfb2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb, 0x3}, 0x80) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async, rerun: 32) write(r9, &(0x7f0000000500)="240000001e005f02141f00fffffffff801000000080000000000000008000902009ea5b1", 0x24) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x470bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000016}, 0x2000400c) 1.685511269s ago: executing program 0 (id=5101): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x40) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r6, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$packet(r4, &(0x7f0000000640)="01", 0x54, 0x4004855, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x4, @none, 0x7d, 0x2}, 0xe) socket$igmp6(0xa, 0x3, 0x2) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="10", 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="890325bd7000ffdbdf2567000000080001005000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009700060900005e000000ab1ca017d21d02f36bb8c679ce8c6b4a6453356b862a5b65031a5e9fc12e14ca42a5742930345bc04982f1b6393d5becf177d99319bcca37a5870ed3e96e4cf5959ed2a8e75bf5471f7fa671805e51812ecfd3b5bc8d0c2b409c8f1825ae56295bd769f116c2bda420326ea5c52bb365f70000"], 0x30}, 0x1, 0x0, 0x0, 0x4c841}, 0x91) 1.415726242s ago: executing program 4 (id=5102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0) 1.284253531s ago: executing program 1 (id=5104): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000000)="b06b", 0x2) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x4048002, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) close(0x3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x218, 0x206, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr=0xffffffff, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0xc0, 0x108, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0x1}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x2, 0xb, [0x1d, 0x7, 0x17, 0x13, 0x2b, 0x18, 0x14, 0x2022, 0x2e, 0x5, 0x24, 0x36, 0x13, 0x13, 0xd85, 0x31], 0x1, 0xb406, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 1.274222436s ago: executing program 3 (id=5105): r0 = socket(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) 1.219771054s ago: executing program 0 (id=5106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x2d0, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2b4, 0x3, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x90, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x66, 0x1, "dd39b248b164f6d7c4d49f2614371c88de9b158b66f20b070c0a4ccdb669ef3c3d7f0e5ee0a5ab78e815f0fddf1b9de950cf17e66fae7e4e8e01af232d2ed9f12702e4e4fd2af3c6e55a74a13639f1ece56b7c438141b9a283a3509239962181d780"}, @NFTA_DATA_VALUE={0x23, 0x1, "baee941bff8b1ca39343a7e5099535ebb7cbee9215f1ade81ca41dcad87109"}]}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xd4, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x93}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc4}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "abe7038648a19921d732ad44789b7ae42a893865038186e589ae402b10ca12a90335cba0ea926966bdae8a6b3422f2024245725643668db163d4b528de6666d33c7aaafd6ec9a68cb8e19d6d44fcb8d605d21d8711b5eae36d36df0d67a13ed4cd40db33546c38a9161a82af2c56bc9535ce14fcd75e48ea6314f8e5c16fc137603ab7bc89762e921734021fedf1f48d396fd2ff86e0737b88651b7403cb8e73cfa170aa51ae21c0d1f7cfd0717f01de9400cbfadc52f5b94db0ba86bb39fe"}, @NFTA_DATA_VALUE={0x24, 0x1, "a9170a7445977a203ff73741a3ce021ea87a3bf5cd26237dfbc9f93fbfbbb151"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x344}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2d3, 0x66, 0x71c1, 0x0, 0x7ff, 0x400000a0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x28, r3, 0x3, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1a0, r1, 0x600, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x4a}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xd}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x134, 0x84, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="fbf0e10aaf66e20f019470f8fae01a5ddfa33b6e5e35"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffffffc8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffff2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="6a916cd828f8"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x14}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x16}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x800}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x40}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x101}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xe0}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x401}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}]}]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_IE={0x33, 0x2a, [@cf={0x4, 0x6, {0x7, 0x3, 0x4fb, 0xac}}, @prep={0x83, 0x1f, {{}, 0x5, 0x40, @device_a, 0x5, @void, 0x8, 0x400, @broadcast, 0x6}}, @chsw_timing={0x68, 0x4, {0x7ff, 0x26}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x5}, 0x8010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSETELEM={0x2d0, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2b4, 0x3, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x90, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x66, 0x1, "dd39b248b164f6d7c4d49f2614371c88de9b158b66f20b070c0a4ccdb669ef3c3d7f0e5ee0a5ab78e815f0fddf1b9de950cf17e66fae7e4e8e01af232d2ed9f12702e4e4fd2af3c6e55a74a13639f1ece56b7c438141b9a283a3509239962181d780"}, @NFTA_DATA_VALUE={0x23, 0x1, "baee941bff8b1ca39343a7e5099535ebb7cbee9215f1ade81ca41dcad87109"}]}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xd4, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x93}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc4}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc3, 0x1, "abe7038648a19921d732ad44789b7ae42a893865038186e589ae402b10ca12a90335cba0ea926966bdae8a6b3422f2024245725643668db163d4b528de6666d33c7aaafd6ec9a68cb8e19d6d44fcb8d605d21d8711b5eae36d36df0d67a13ed4cd40db33546c38a9161a82af2c56bc9535ce14fcd75e48ea6314f8e5c16fc137603ab7bc89762e921734021fedf1f48d396fd2ff86e0737b88651b7403cb8e73cfa170aa51ae21c0d1f7cfd0717f01de9400cbfadc52f5b94db0ba86bb39fe"}, @NFTA_DATA_VALUE={0x24, 0x1, "a9170a7445977a203ff73741a3ce021ea87a3bf5cd26237dfbc9f93fbfbbb151"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x344}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2d3, 0x66, 0x71c1, 0x0, 0x7ff, 0x400000a0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x28, r3, 0x3, 0x70bd2b, 0x25dfdc00, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1a0, r1, 0x600, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x4a}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xd}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x134, 0x84, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1a, 0x1, @random="fbf0e10aaf66e20f019470f8fae01a5ddfa33b6e5e35"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffffffc8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffff2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="6a916cd828f8"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x14}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x16}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x800}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x40}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x101}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xe0}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x401}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xb}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}]}]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_IE={0x33, 0x2a, [@cf={0x4, 0x6, {0x7, 0x3, 0x4fb, 0xac}}, @prep={0x83, 0x1f, {{}, 0x5, 0x40, @device_a, 0x5, @void, 0x8, 0x400, @broadcast, 0x6}}, @chsw_timing={0x68, 0x4, {0x7ff, 0x26}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x5}, 0x8010) (async) 1.218865547s ago: executing program 2 (id=5107): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000300)="01154e0001000011221e4455892fca01000188fbf17583f76970", 0x1a, 0x0, &(0x7f0000000040)={0x11, 0xf4, r3}, 0x14) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) close(r5) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200000000310000000008000a40fffffffc08000340000000140c0009800800014000000081140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) close(0x3) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010129bd7000fbdbdf251500000008000100", @ANYRES32=r7, @ANYBLOB="0500144b0d4179db"], 0x6f}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@ssrr={0x89, 0xf, 0x5b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @private=0xa010102]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1=0xe000002f}, {@multicast1}, {@private}, {@dev={0xac, 0x14, 0x14, 0x4}}, {@private, 0x8000}]}]}}}}}}}, 0x0) 1.141094327s ago: executing program 4 (id=5108): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000006040000000100000000000041005f5fa000"/49], &(0x7f0000000200)=""/146, 0x31, 0x92, 0x1}, 0x20) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x1a8, 0x0, 0x1a8, 0x90, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) syz_emit_ethernet(0x17, &(0x7f0000001b00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0x88a8, "3410a22c75"}}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="9000000020000100fe02f6e111fbf8020a8010000000000118000100050015000200000034000100ff02000056df00007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x5c}}, 0x0) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000000c0)=']#\f\x00', 0x8000, &(0x7f0000000140)={@align=0x1, {0x35, 0x6, 0x9, 0x9}}, 0x7fffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x9}) 1.04548704s ago: executing program 1 (id=5109): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x1, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x60}, 0x4001084) 907.989446ms ago: executing program 3 (id=5110): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000fc0), 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x60441, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x60441, 0x0) close(r6) (async) close(r6) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x400, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xb, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x8, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xd2f7}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xd89c}]}}]}, 0x48}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa29000008000300", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e002000028008000100100000000a000400aaaaaaaaaa29000008000300", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES8=r9, @ANYRES32=r11, @ANYBLOB="000000000000000010011a801000f480040005800800090000000000080003803000018005", @ANYRESDEC=0x0], 0x270}}, 0x0) 860.113006ms ago: executing program 4 (id=5111): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x66) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000140)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r6) close(r4) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r7, &(0x7f0000000180)=0x2, 0x12) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000240), 0x4) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) write$rfkill(r1, 0x0, 0x700) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @sched_cls=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000080), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 829.135464ms ago: executing program 1 (id=5112): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x20, 0x10, 0x0, 0xf, {{0x4c, 0x4, 0x1, 0x9, 0x130, 0x65, 0x0, 0xb8, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@cipso={0x86, 0x40, 0x1, [{0x2, 0xf, "f79d3cabded645f82b3e53754f"}, {0x7, 0xc, "6427c9ec6d24f033e18c"}, {0x0, 0x3, "ce"}, {0x1, 0x6, "f5b22aab"}, {0x5, 0xa, "ce31bf2216152a3b"}, {0x0, 0xc, "4f1320e761f760f4d3d9"}]}, @end, @timestamp_prespec={0x44, 0x44, 0x8b, 0x3, 0xc, [{@loopback, 0x100}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@loopback, 0x9}, {@broadcast, 0x4}]}, @rr={0x7, 0x17, 0x83, [@local, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010100, @empty, @broadcast]}, @lsrr={0x83, 0xf, 0xc6, [@broadcast, @private=0xa010101, @empty]}, @timestamp_prespec={0x44, 0xc, 0xef, 0x3, 0x1, [{@loopback, 0x7}]}, @cipso={0x86, 0x1e, 0x0, [{0x1, 0xb, "90830990910984ae8e"}, {0x2, 0xd, "64323f36660cfbb5cb6588"}]}, @timestamp_prespec={0x44, 0x34, 0xa4, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast1}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @generic={0x83, 0x10, "313dc7c097d6699b93ab57e190e6"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x20, 0x10, 0x0, 0xf, {{0x4c, 0x4, 0x1, 0x9, 0x130, 0x65, 0x0, 0xb8, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@cipso={0x86, 0x40, 0x1, [{0x2, 0xf, "f79d3cabded645f82b3e53754f"}, {0x7, 0xc, "6427c9ec6d24f033e18c"}, {0x0, 0x3, "ce"}, {0x1, 0x6, "f5b22aab"}, {0x5, 0xa, "ce31bf2216152a3b"}, {0x0, 0xc, "4f1320e761f760f4d3d9"}]}, @end, @timestamp_prespec={0x44, 0x44, 0x8b, 0x3, 0xc, [{@loopback, 0x100}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@loopback, 0x9}, {@broadcast, 0x4}]}, @rr={0x7, 0x17, 0x83, [@local, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010100, @empty, @broadcast]}, @lsrr={0x83, 0xf, 0xc6, [@broadcast, @private=0xa010101, @empty]}, @timestamp_prespec={0x44, 0xc, 0xef, 0x3, 0x1, [{@loopback, 0x7}]}, @cipso={0x86, 0x1e, 0x0, [{0x1, 0xb, "90830990910984ae8e"}, {0x2, 0xd, "64323f36660cfbb5cb6588"}]}, @timestamp_prespec={0x44, 0x34, 0xa4, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast1}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @generic={0x83, 0x10, "313dc7c097d6699b93ab57e190e6"}]}}}}}) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="33864526967c81d4851871434d784e4ed6c90d128268caa2fcb3658e2002fa6c92e10d8b3f608575c56022f2ac0b5b446f153aa7c8ec8eef3a617245ff4559019221581c3ca3ed97e016970fd716f3f21f7c66cd30726e7fe9f62c49c00a66a014c67fbe5445d60550c76bcb3e903845a817285bf3096ee1d41b823fdd32adcc171cb22bd230a3b0e116227f4c4bcf00adfbb0a6bccd3a10a919251dbd1a0585bd3ab526a96774fca59e09e4730b85e515a85ac3ba25bfb39856e2e8e2128d4b8d0692152f5fcfa46708027b856753586f90590554114e935c589b", 0xdb}, {&(0x7f0000000240)="e3fdf86081fdee754de64d7bcd0a784c0b18c2bd83c36a48d9d6a02bfb32c921d2524b56e2d5a39cf823157041fa75a96afae65f6c3a76466307554283bb4d5a27c3f31ab9b8", 0x46}, {&(0x7f00000002c0)="b0e490a313ff5cd287350039b802940b86f2ab693adcf465807f5e7d2b6e216c2854aa1d16fdc1759e126ba7ce05ada97873c9d97451f04db3a011b76150dffbead71cbed44b8c985c46e910d630bc82834452b81b6ea8fe0fb58b199f6a488f881e50c289fdf8a0472aa45152c593ca98afa8ae5630c6aeb45854e6a3bcbbacea4503eab197affe5a67a2a31a1dcd8871fcfc4aad80c562a5a0d5571261e16b08da7dd72b48296699b41a4e1c52add17f9eca15dd317dd5ae06826f372019c3ec213012a8e40c821170aefce362037f95897a256093a1b00f63c606bc8cb40063905dec100bce671ab02ca2", 0xec}], 0x3, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x68}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) 762.295237ms ago: executing program 0 (id=5113): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_vlan\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0xb}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x40, 0x1, 0x6f600000, 0xfaf5}, 0x8000, 0x0, 0xd5, 0x30000, 0x200, 0x1b, 0x16, 0x12, 0x1, 0x80000000, {0x2, 0x2, 0x4, 0x101, 0x2, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) 757.086714ms ago: executing program 2 (id=5114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x110, r1, 0x8, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x100000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xa9}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x10}, {0xc, 0x90, 0x3}}]}, 0x110}, 0x1, 0x0, 0x0, 0x5014}, 0x20008881) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x228, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2da}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8c0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @local, 0x80}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9e}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff800000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x101, @local, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000540)=0x7, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r2}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xc0c, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24008045}, 0x40) bind$pptp(r2, &(0x7f0000000700)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x1e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}, @NFC_ATTR_LLC_PARAM_RW={0x5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x621}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x30c}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xd}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x41) sendmsg$nl_xfrm(r3, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)=@getsadinfo={0x1cc, 0x23, 0x20, 0x70bd2c, 0x25dfdbfe, 0x0, [@policy_type={0xa, 0x10, {0x1}}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, 0xa, 0x2}}, @algo_crypt={0xf3, 0x2, {{'cbc(serpent)\x00'}, 0x558, "8281669af3e7014091e06ac8757342713e522bba36afad883db4f4ebb895dabcf870665f50b1268a81321d797e84f0bf11e6317875365311bd5479751f4d1ad3a3cb3136c60fcc7c79880a95289b6f57019bf16ec81ea577214ede4c598c13fa9f2c4d3393fa5ebf483606311a2affbf04489a8a7003bacc4c144f50739d3dc043c7c4eefb5441c57d7c3cd1c0d751cb093f63d4fa7dca77e422b2c3303d232fdb6edf2d1744a3e03c1f43"}}, @iptfs_pkt_size={0x8}, @algo_auth={0x69, 0x1, {{'blake2s-128-arm\x00'}, 0x108, "06ffaadd599e31cecebff03e40b7af5b937b6b1066daa84e426f0a501c894dd9e8"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e22, @in=@multicast1}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r8, 0xc0205866, &(0x7f00000011c0)={&(0x7f0000000cc0)=0xfff, 0x8, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001180)}) connect$inet(r3, &(0x7f0000001200)={0x2, 0x4e22, @private=0xa010101}, 0x10) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xb4, 0x4, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x262b8641}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x77f8a796}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_USERDATA={0x2a, 0xc, "9262cc4e68a7c206abb7af8e6b785c4e1670c79d7dce3f749731e4ff5d1bcb1160842aa335e9"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001400), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001580)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000001540)={&(0x7f0000001440)={0xcc, r9, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd48}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf64}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x521}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x33, 0x8}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r10, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x38, r11, 0x0, 0x70bd2c, 0x6, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x40884) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x1a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001880)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001900)={0x15c, r11, 0x12, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x144, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x890}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x60}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffe496}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe53}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x800}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe63e}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa9ab}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5e9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000000}, 0x401c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001b80)={0x0, 0x7, 0x8, "26939acf716766dd"}, 0x10) 597.04403ms ago: executing program 1 (id=5115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000095280500400012800c0001006d6163766c616e003000028008000100100000001c000580fffe0400aaaaaaaaaa3b00000a000400aaaaaaaaaabb000008000300030000000800f600", @ANYRES32=r2, @ANYBLOB], 0x68}}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000100)) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 511.876961ms ago: executing program 0 (id=5116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x8863}, @val={0x0, 0x0, 0x3, 0x0, 0x1}, @mpls={[], @ipv4=@esp={{0x5, 0x4, 0x2, 0x3, 0xfc0, 0x68, 0x0, 0x6, 0x32, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x4d4, 0x1, @cc={0x1, 0x0, 0x400, 0x6, 0x5, 0x7, 0x0, [@ipv4=@gre={{0x5, 0x4, 0x0, 0x2, 0xf87, 0x66, 0x8001, 0x1, 0x2f, 0x0, @loopback, @rand_addr=0x64010100}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd30, 0x0, [], "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"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x1, 0xdd, 0xa189], "87798038145b10dccdea72360d280d6ad54ae8437e2d3c27b4d5b17587bbb93890faed9fb03d3f24739105c58f0c7865dc590eccb54a3fc5b94841890537e6b833be9b67ad70d2d1e27f7ca0f06444e6bb27e84aadf387166d5600da5f7e9da3b85f0adc208e79c8e44e6c09626da657c12804568516b297bb2db692d4165aeccde1514217d094161a1118beb958bec2c9783f9f03cab3c2977d0b21a85c4ab66988134550e039bf420775a0294df3790a32393533cbbbf866b09514e7"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0xfff, 0x200], "6447df2efe64da2b5f5ba6e32ee3064c587d8d23f9711d97cc0a74c426eac7322c41d57619f67c1035b4347f4a9add1ff9a6cbb6dbcd3ffa7b6fce434dda074e80ca1157e1a7accf0648562ec91e9298a8b8c225da43b8dfb00d2eb4369464ecaef09e986327a790a0ea32bc2376a8635ee389f973c12a27c6fcbc006934e97ff906"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x1, 0x3, 0x1, 0x2, 0x2, 0x8}, 0x1, {0x4aeede21}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x7, 0x2, 0x1, 0x1, 0x6, 0x9}, 0x2, {0x6, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "60cd1c87cf4e2245efc98bc4f71eae2a6b53bc9ffdfc5b308b3cc7240f17130e538de08dca8b223685f89510efff0481641baefea1068324a7d5280e8847222ad71b5a768554f43e7698be794933c5d525c4daedab8c1bffb436cdcd64e1c07f934c683120134756ab819be1fd22e397f7e40a4f8f1499fd09e50dd40a33683d84704941523edd515cdc8503f705c26968c18fe998855d10ff5d5f3bfb1806d5235eb9775ff3fbea66cfb0349cf744465764433d"}}}]}, 'DK`', 0x3}}}}, 0xfce) 510.391544ms ago: executing program 2 (id=5117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000001800200000000000000000000000600120002"], 0x24}}, 0x0) socketpair(0x28, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1401000036000100004f2600000000000c000080"], 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x82e6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x20002044) 411.545865ms ago: executing program 2 (id=5118): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xe, 0x50, r1, 0x4b838000) (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000ec0)='%){:-\x00', 0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x68}, 0x9, 0x0, 0x0, 0x20004080}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a780100001a0a010800000000000000000a0000000c000440"], 0x3c0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000100)={r6}) 395.030684ms ago: executing program 3 (id=5119): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000003200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x8}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r2, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}]}, 0x3c}, 0x1, 0x620b}, 0x0) close(0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x218, 0x206, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr=0xffffffff, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0xc0, 0x108, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0x1}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x2, 0xb, [0x1d, 0x7, 0x17, 0x13, 0x2b, 0x18, 0x14, 0x2022, 0x2e, 0x5, 0x24, 0x36, 0x13, 0x13, 0xd85, 0x31], 0x1, 0xb406, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 274.632459ms ago: executing program 1 (id=5120): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x8044) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)='[:!#+\x00', 0x4180, &(0x7f0000000140)={@align=0x7, {0x6, 0x8, 0x80, 0x7}}, 0xfffffff8, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xfffffffd}) sendmmsg$sock(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="ed07e1f1787d02dd71b3795a20f82e70db9178b4623b7d08a187a1535d14ea1c8ec368e2befacef3b2e86917695f20a98fd356a0741300c697d9439bb1fb992f2a378a4beeaf4dd9ced337cd0481bf9c77219b38d63f64004a5bf5d6792e2ade0ca356a8f4d67314cb68705d40e08dba089975fe83f1244e912b7e37bd5dd7a3d047ccfe6cf109a0aac3033f80a4d39d17439c5e5ead7b8537603c6710dea4a18688df336bc1817cdb494c90d86a53c73ce854a57bf2cc058d8c2270202ff684a78bdf787457e7d2baab10c3", 0xcc}, {&(0x7f0000000380)="9b547ad9fbf49f05bcc83beaa6ab6c893f8b72aaf87c6212a7dab2e17c8e2fbc24ce9497dfa80ba6aeae73aa6a0fdc545f7fe80c5f3fe2bcdaef2bf0f3a88f24786cb26a6ded3c0c6ff530ff20b6fe335809db81ce5c1b7b4a980ea0127775d3d7a6982a623d62ef7101e45c29de61ddc6afa4f8e2480c756952652e65e9d6d0554898e0d3efaa342733c902558f43910962df9ffdb1d80d014bddeab53b6f2d6913c059b70ce96a62dd10358e3c0b29e9ea4177cf1583018929fd27a0aef33b4bd8983765bb865ccb3272bac9975188", 0xd0}, {&(0x7f0000000480)="13975c333aebf086df9cf5d86308489b52be7ebe6efc5ca13042d1198ed48890ad7c51508e08ed91c0337941ae3fd95ecaf7e09033df58f07049d5fca1ab0868c287a4fce7720ed4f497cabc72318dc05c698de72812a8ec3d28931f95674b99f158baa43b7ba501127f59be54c7ee245efbeff093f5d2fca853f8fedd50cb65f59633b5822e0d52735c2f4b8e06e2157784db82791a9740df6cea7d47a8fb2626fa96be2cc9d55cde587403ade013b624b5f7dcf44cb99fb209640ca2be5c29895851f288a5daad23224dbeb46c9bda9402392fe0af89ed3148ca268cbb2d7ca317b2dadd1c4b46279fed5db4b8bd40e1ebe2154998636d99d89c472365", 0xfe}, {&(0x7f0000000580)="2514085f2a9f6a3fbf4b56ed00171c36e9d7c0338446e55d58cb20b76fac9e434695f2d33965ccff70225ed4966dfd8f316d769e20336bc97d9150e47e87a55c36e9ea31dea35b2ff0eda899b9efa5c6203520811ed34a3b05756e5ef8b96df4c82b0e64045cf47c1592e6e6d1509f3f6d4a87a9c807c77232ae4f43fc52ce9cd353d7c24ea0e2bf458ec89a32caa461ea3639724b69f7f81fc8b98a19788c0df3e7ee2a54cc78bc6e9ca6a2153d9306ce053c6cdb3c80c6ee34c9622cc920156498b4b7e377aa935a9889840f71c69677955e627ed6daceda208116be471da8f11db579", 0xe4}, {&(0x7f0000000680)="00a8be9dfd325457dee07aa14bde01a86f0501ca23645cb52329f7587f9bfd91d383af6d9d6cfd6237", 0x29}], 0x6, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14}}], 0x60}}], 0x1, 0x10) sendmsg$kcm(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000800)="4b47bfd8e4cda4b56e00c81e5a0c7871cc9bbd17be0b18bd45b664505e25c741759d1ab7023d23536f0b72a4b2e731ddd977a6930c2b7386990bc0a68c364e2f20ba6f62fd1c91bdd98f965ac7fbeb735d8f1c5a1dc67c6386b61b3e112b94422f74a29a8c2b05e61dac801f5e8ec2db3aea17dad5f69ada0f00d241", 0x7c}, {&(0x7f0000000880)="8e310eedae2febc07241b811dc4fff1fac88905151271c05542ca989df20fd8c5975d95074675dca2c178c6fd04936fe25ae87f8d3bfa1847497cf10b99d95ea260546f9597a52749ea66b213bdf00e4", 0x50}, {&(0x7f0000000900)="371a806b1a06eca4383bb09a388f512bf99587bb89c659ee0b4118c30c8db749fc2975b85418a3944b6d937964be54b4b747d31c082a0d1ca1f7713a4898310304ffbad0b0bafe076336b733a8c094321d20fbe31f211d7055ce901d701e2e76b436edec14e487f45157010bb25294492345d753c06659d3708ca5fd59ac04b7286df12f89075cfac20223458d3c58db16c2b754af6695655a776e02183ddbe8634861ac6125683b7fcb5b", 0xab}, {&(0x7f00000009c0)="3a33a484ce9d21a93f145cc7be1f333674035e8dee9d36471c09bfd94f81ad6fef85e21fedfa6fdc177a4a6c9f668b55f3", 0x31}, {&(0x7f0000000a00)="d55193049f62f667c869ffb7afc80084e0b289729eeb9c89760c3191c81a838d5f4958b10b81a7a102cd34ae6adb745730e403cebecf1ce3cf0a33c114609dc02cfe50e728d7c4e50ff2e48ea3769119d266d509921c51746e3c3702bc87080f25b496aa76ec1e4967763b13bc9560ba23e4c808399a05f4093be2155d00308058cfb46851b164f68d5f204d7f7e566b51d6aef9a6075782f19ad3abdc5f7a299c2783c0bb0a1d0be7e179a4f4c38f0d3a96e4f80825181d0e9bb65ad715f3d4cdcf11f51cf9b6b89c35438edaf59f66858500d030dadf32b38d41dea9e0c7b1b04224bab4ffbbe9fe0c4f53f1e4655ca97f5b0fd6", 0xf5}, {&(0x7f0000000b00)="d53af50aff0cdf00e5695ef69332b85c9734a8bbc996422f21db38b0b01f8255f58b4539a1c7a2d57b7a8d9873712da72ac69a639fb5c9b27820bb99691d5ef7a0217abd3ebb2c9c7335382f7847af3ce05b64a99b65d4041df72b687497a70e1c0d1893159c4950bb57da6cd9a2d6ee0a58623d48b6e1836299533d159727fd494b7ee9bff4af", 0x87}, {&(0x7f0000000bc0)="eab4ad72d6b58f41cb34415696b73be1950d575cf37cba9aedd8977ba8cb23a5ee518df174ebfb5659286094a64d45a45291dd5c018e45307aaba8f9c3", 0x3d}], 0x7}, 0x64840) sendmsg$sock(r0, &(0x7f0000001280)={&(0x7f0000000cc0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2}, 0x4, 0x2, 0x0, 0x2}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000d40)="98b587cc63774ee615", 0x9}, {&(0x7f0000000d80)="95d0f45beda9265eb07183a32ddea4dc8200a1ec30ebdeb9fabd7f6d464c71739c24ccadcf38ebc65dfd0f66fd43b750ae67d8a329f7ad784e916a4321db1997e31250aac3b34fa26bb058513f5aaa56b1fbcacb", 0x54}, {&(0x7f0000000e00)="781bc4c85b1621290344c97958762c4cfa3cea2b57cb4341ccba4a5ebfbd3929cb7efae9c4344ce0c52a0ca883c955a5bfc303df94df16c3b58cc9bde41c42026f9f28914e29957a32f9af806edf66e227335915b069a4cc02dc4ec87dfba568048043364009b3e62ea5f48a7e046064", 0x70}, {&(0x7f0000000e80)="b94bbc758fbe6d5642e0ca6855a6f65ad2f15bfb7e6301930f8f1c04247b1111bc35a2f6c2c687326388aa31734260fbad169b278ced702b8fdd22b6c32383bd4e63daea9c66668aeded11a6465ca23f4c7943946429dc53317ccc629e6bfad8666034f7fdb39856d8cb69b936f715b1eff3cc59ec36abbe3e8b07b0cce86e5990762321c083f5d9a682621f4b834b267aee946f7b858f62ace94dbff4fcbd546690feec9ca490dd3cea851d5713949f8ae1207ebb618854b37c1db4da4b453c38a5f0d0c015fe5985f03305", 0xcc}, {&(0x7f0000000f80)="6c9e4569e334bae0f43d558c2b5e1088323e2d977951d10d66882344ce713b8a70a1cb91", 0x24}, {&(0x7f0000000fc0)="551a6460a4f9efb4836a032bf0eada241859a1fc55b9f0a6d7670e0fe273b171547bae9ed34723f094cef24e99271e23525321010407ff7ad53a7150dcf03b66191810c0893976a4bc0ba4a6d9e505783d542afb39f2067a7fce4a449ac9a38a5795ef5fb5", 0x65}, {&(0x7f0000001040)="b01544dca6d1e6fe936518b3aeada0044ad0003386d3fb6f5c16e4fe58caa08eb069bc094423e51fbe63c8d7408f7d305fbd40a646ba765554e934942b897dfcf5cecaa7cd394bfd86314edcd52b79eeb93dc2", 0x53}, {&(0x7f00000010c0)="6038c95c8b0c2370e4b411a3068724d8ce6ac960f7dc73cb2d28dcaf7f5a810a67a3284f0448a482a8a1b07cbedd9f133ae6b6aabfa754fda379d5508d544ec17d959b86befe4f91c8ad26b5c86d0ed3b8c0afb4d92199cdc46eae6d2e3777d0b00431c1dd6a52fa79b3a9b7fbed26a5", 0x70}, {&(0x7f0000001140)="1260cae1d6b6c218251c1be3135918d2d2c10168e72f32d4eaeadaf4a8f218b5e1950b66f23df7e8f34cad5abf13aa6cc8d22f5b9efe3a46381a", 0x3a}, {&(0x7f0000001180)="8810e19976bac80bff72ae8306a0d72535e892a2f435b7d229b1150705a229489a82a1bf9e8f2fcb0c", 0x29}], 0xa}, 0x8000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r1, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x1d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) ioctl$int_in(r0, 0x5452, &(0x7f0000001440)=0x3) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20044002) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x30, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001740), r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000001880)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x50, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0xc841) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001940)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, r9, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008000) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000001a40), &(0x7f0000001a80)=0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001bc0)={@fallback=r8, 0xe, 0x0, 0x2, &(0x7f0000001ac0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001b00)=[0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c00)={@fallback=r7, r0, 0x25, 0x8, 0x0, @void, @value=r0, @void, @void, r12}, 0x20) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r0) sendmsg$NL80211_CMD_GET_SURVEY(r11, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r13, 0x208, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000011) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000001d80)={'wpan3\x00'}) getpeername$llc(r0, &(0x7f0000001dc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001e00)=0x10) setsockopt$inet_int(r0, 0x0, 0x1a, &(0x7f0000001e40)=0xfffffffb, 0x4) 272.914014ms ago: executing program 3 (id=5121): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000640)=""/4096, &(0x7f0000001640)=0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x80, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "69ae8a872034e937ee690c"}, @NL80211_ATTR_KEY={0x48}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "000000f1ff"}]}, 0x80}, 0x1, 0x0, 0x0, 0x8}, 0x8010) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendto(r0, &(0x7f0000000340)="75ae6433958c99acecf547b0e156857e8e08e7c394703a4fb706ec5d754ec8d9069a9b2dfc6498fbf9546e278febd22b160d3d7851ee203bb3cbcbd2b8daacdac1b3ba38a4e47767efe6b05b7641e641c3780952674743bd76441050976a6e546f583fb5486beba3228dbae624fb5f18f89e283cf1e2373db25513e77e2f", 0x7e, 0x40800, &(0x7f00000003c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 156.449672ms ago: executing program 1 (id=5122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001000000800000003535b3d215ee0169395f"], 0x48) 118.246996ms ago: executing program 0 (id=5123): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r2 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21, @local}, {0x6, @broadcast}, 0x40, {0x2, 0x4e20, @multicast1}, 'veth0\x00'}) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000080), 0x4) (rerun: 32) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x8010}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0x1}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x8001, 0x4e24, 0x0, 0x2, 0xa0, 0xa0, 0x87, r5, r6}, {0x2820000000, 0x7, 0x400, 0x9, 0x7, 0xfffffffffffffff0, 0xfff, 0x4}, {0x0, 0x9, 0x79, 0x1}, 0x80000000, 0x6e6bb9, 0x2, 0x0, 0x7}, {{@in6=@private2, 0x4d3, 0xff}, 0xa, @in=@private=0xa010100, 0x3501, 0x0, 0x0, 0x0, 0xd, 0x0, 0x3}}, 0xe8) 0s ago: executing program 2 (id=5124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)=0x28) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0103000000000000000008"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x48, r6, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async) r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0x2, 0x925, {{0x22, 0x4, 0x2, 0x21, 0x88, 0x64, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x54, 0x1c, 0x1, 0x1, [{@multicast1, 0x1}, {@multicast1, 0x3}, {@rand_addr=0x64010102, 0x6}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@rand_addr=0x80000000, 0x2}, {@loopback, 0x1}, {@remote, 0x5}, {@remote, 0x31}, {@private=0xa010102, 0xfff}]}, @timestamp_prespec={0x44, 0x14, 0x2a, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x5b}]}, @cipso={0x86, 0xb, 0x0, [{0x6, 0x5, "79d06e"}]}]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x2, 0x1, [0x8, 0xff, 0x10, 0x1, 0x2800, 0xc, 0xfffb, 0xff93, 0x7, 0x0, 0x81, 0x6, 0x0, 0x5, 0x7f, 0x200], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r13 = socket(0x40000000015, 0x6, 0x2ad) connect$inet(r13, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r13, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$SO_TIMESTAMP(r13, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffcf}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x68}}, 0x20040000) (async) sendto$inet(r13, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(r13, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) (async, rerun: 64) bind$can_j1939(r11, &(0x7f0000000280)={0x1d, r12, 0x2, {0x0, 0x1, 0x2}, 0xfe}, 0x18) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="34000000b20800000000000000bf0849ead5c0bf3596a41aedb9521c4555280155a08b2a336795c6585f8bde71a64d7eac9b020975aee40fdd033ab552efa71bb95b7ac6856e807874a8ee7d3667863d2996e20a9e0fa41bb78f0dbe5389bad57cb86f26883ce1ca4151ef04de6559d2566a3e61712e88827defde33d2a940c8e1f5b6e52e7992b8926b65eec6fc3db041f4b9247b4010f7bc3dd7f1af2261693991e9dde48920803b67a8210abbd1506e0013a6957fe8c36f3ea58765c3fe701fa731f80346587f4604d7ce57750fcc679a3c901017ebe1068c3c7849fa4010c6633f01be1b396fdeba717f0d2170df863cf9e35377ebc37c6b59666b989e57cad329690802f49db1c0143d430ad4220676f6504f36829b", @ANYRES16=r8, @ANYBLOB="00032bbd7000ffdbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="0800090000000000080005000a01010005000d0006000000"], 0x34}, 0x1, 0x0, 0x0, 0xaca46bc72788b027}, 0xc040) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): x0 after dequeue, screwing up backlog [ 440.409981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.412516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.487461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.487580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.487877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.488394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.488574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.499001][ T1014] smbdirect: ib_dev[syz2] removed [ 440.577958][T20151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.145227][T20171] siw: device registration error -23 [ 442.275010][T20200] __nla_validate_parse: 7 callbacks suppressed [ 442.275030][T20200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3673'. [ 442.513175][T20218] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3678'. [ 442.555622][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3675'. [ 442.679471][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3680'. [ 442.881537][T20225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3681'. [ 442.901701][T20229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3681'. [ 443.511581][T20238] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 443.562929][T20238] bond2 (unregistering): Released all slaves [ 443.746322][T20240] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 443.750580][T20240] bond2 (unregistering): Released all slaves [ 444.104577][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3686'. [ 444.104616][T20247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3686'. [ 444.105990][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3686'. [ 444.106025][T20247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3686'. [ 445.304829][T20206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.447766][ C0] net_ratelimit: 14 callbacks suppressed [ 445.447787][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.448039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.448254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.448817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.449459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.449706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.450793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.451805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.527665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.528484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.381518][T20304] ip6t_srh: unknown srh match flags 5F28 [ 446.422257][T20303] ip6gre1: entered allmulticast mode [ 446.590954][T20309] macvlan0: entered promiscuous mode [ 446.860425][T20313] syzkaller0: entered promiscuous mode [ 446.860447][T20313] syzkaller0: entered allmulticast mode [ 447.214774][T20326] netlink: 'syz.4.3709': attribute type 2 has an invalid length. [ 447.564228][T20333] __nla_validate_parse: 2 callbacks suppressed [ 447.564265][T20333] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3712'. [ 447.660020][T20336] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3711'. [ 447.669258][T20336] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3711'. [ 447.999799][T20354] netlink: 'syz.0.3717': attribute type 2 has an invalid length. [ 448.597468][T20366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.863450][T20384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'. [ 449.055384][T20390] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3728'. [ 449.150871][T20394] netlink: 'syz.4.3729': attribute type 23 has an invalid length. [ 449.455980][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3729'. [ 449.673574][T20409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3734'. [ 449.980910][T20420] netlink: 'syz.0.3737': attribute type 3 has an invalid length. [ 450.444955][T20430] netlink: 'syz.4.3740': attribute type 10 has an invalid length. [ 450.444993][T20430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3740'. [ 450.487406][ C0] net_ratelimit: 23 callbacks suppressed [ 450.487423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.488637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.488828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.490305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.491317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.567366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.567465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.567725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.568629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.569549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.259994][T20454] vcan0: tx address claim with dest, not broadcast [ 452.123873][T20479] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3756'. [ 452.139670][T20479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3756'. [ 452.225917][T20489] netlink: 'syz.1.3757': attribute type 7 has an invalid length. [ 452.525104][T20501] netlink: 'syz.3.3759': attribute type 1 has an invalid length. [ 453.006590][T20519] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 453.025943][T20519] bond2 (unregistering): Released all slaves [ 453.064768][T20527] siw: device registration error -23 [ 453.279657][T20533] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 453.317805][T20533] bond2 (unregistering): Released all slaves [ 453.741500][T20561] netlink: 'syz.4.3774': attribute type 1 has an invalid length. [ 454.023387][T20561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3774'. [ 454.050477][T20566] bond2: (slave geneve2): making interface the new active one [ 454.056106][T20566] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 454.086811][T20561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.100035][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 454.100196][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 454.100462][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 454.121934][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 454.686435][T20578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3779'. [ 454.865015][T20597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3784'. [ 454.985950][T20599] vlan2: entered promiscuous mode [ 454.986005][T20599] bridge0: entered promiscuous mode [ 455.101693][T20603] vlan2: entered allmulticast mode [ 455.101712][T20603] bridge1: entered allmulticast mode [ 455.502523][ T31] audit: type=1107 audit(1790368236.880:9): pid=20624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 455.528351][ C0] net_ratelimit: 28 callbacks suppressed [ 455.528369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.534561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.534753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.535487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.536628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.607204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.607601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.607714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.608215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.608481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.834401][T20635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3792'. [ 455.863069][T20628] syzkaller0: entered promiscuous mode [ 455.863089][T20628] syzkaller0: entered allmulticast mode [ 456.088167][T20641] netlink: 'syz.3.3797': attribute type 2 has an invalid length. [ 456.088206][T20641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3797'. [ 456.646092][T20651] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 456.789910][T20651] bond2: (slave lo): Enslaving as an active interface with an up link [ 457.040663][ T5625] Bluetooth: hci3: link tx timeout [ 457.040799][ T5625] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 457.061564][T20689] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3801'. [ 457.222893][T20694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3802'. [ 457.571916][ T5625] Bluetooth: hci3: link tx timeout [ 457.571935][ T5625] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 457.600923][ T5625] Bluetooth: hci3: link tx timeout [ 457.600939][ T5625] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 457.891853][ T5625] Bluetooth: hci1: ACL packet too small [ 457.934574][T20714] syzkaller1: entered promiscuous mode [ 457.934626][T20714] syzkaller1: entered allmulticast mode [ 458.228802][T20714] pim6reg1: entered promiscuous mode [ 458.228823][T20714] pim6reg1: entered allmulticast mode [ 458.596069][ T5625] Bluetooth: hci3: link tx timeout [ 458.596104][ T5625] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 458.675990][ T5625] Bluetooth: hci3: link tx timeout [ 458.676024][ T5625] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 458.902934][T20749] set match dimension is over the limit! [ 459.048080][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 459.158526][T20754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3816'. [ 459.179073][T20752] syzkaller0: entered promiscuous mode [ 459.179093][T20752] syzkaller0: entered allmulticast mode [ 459.227856][T20756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3814'. [ 459.489520][T20762] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3817'. [ 459.490943][T20763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3814'. [ 459.775572][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3819'. [ 460.119573][T20780] netlink: 'syz.4.3818': attribute type 3 has an invalid length. [ 460.119610][T20780] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3818'. [ 460.568009][ C0] net_ratelimit: 22 callbacks suppressed [ 460.568031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.569034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.569230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.569999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.570905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.647125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.647240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.647565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.648224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.648464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.901285][T20775] mac80211_hwsim hwsim25 syzkaller0: entered promiscuous mode [ 461.901313][T20775] mac80211_hwsim hwsim25 syzkaller0: entered allmulticast mode [ 462.259268][T20789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3822'. [ 462.428992][T20788] netlink: 'syz.0.3823': attribute type 1 has an invalid length. [ 462.434178][T20800] tun0: tun_chr_ioctl cmd 1074025675 [ 462.434197][T20800] tun0: persist enabled [ 462.490886][T20800] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 462.920043][T20825] xt_hashlimit: size too large, truncated to 1048576 [ 462.920080][T20825] xt_hashlimit: max too large, truncated to 1048576 [ 462.920331][T20825] xt_hashlimit: overflow, rate too high: 0 [ 463.056028][T20830] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3832'. [ 463.434900][T20848] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 463.446320][T20848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3835'. [ 463.747454][T20858] netlink: 'syz.3.3837': attribute type 1 has an invalid length. [ 463.747492][T20858] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.3837'. [ 464.256672][T20870] netlink: 'syz.0.3841': attribute type 3 has an invalid length. [ 464.569552][T20885] bond2: entered allmulticast mode [ 464.570070][T20885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.773153][T20896] __nla_validate_parse: 2 callbacks suppressed [ 464.773170][T20896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3849'. [ 464.804345][T20896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3849'. [ 465.453551][T20876] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3843'. [ 465.556201][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058eec800: rx timeout, send abort [ 465.607535][ C0] net_ratelimit: 29 callbacks suppressed [ 465.607552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.608108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.608809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.609003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.609682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.610693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.685513][T20925] sctp: [Deprecated]: syz.2.3855 (pid 20925) Use of int in max_burst socket option. [ 465.685513][T20925] Use struct sctp_assoc_value instead [ 465.687170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.687480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.687569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.688401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.760632][T20932] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3856'. [ 466.056262][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058eec800: abort rx timeout. Force session deactivation [ 466.056547][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058eedc00: rx timeout, send abort [ 466.468788][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3859'. [ 466.556605][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058eedc00: abort rx timeout. Force session deactivation [ 466.622768][T20949] @: entered promiscuous mode [ 466.634803][T20949] @: entered allmulticast mode [ 466.662553][T20949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3859'. [ 466.714701][T20962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3864'. [ 467.311265][T20997] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 467.380955][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 467.380989][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 467.403082][T20989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3868'. [ 467.403428][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3868'. [ 467.618069][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3871'. [ 467.852758][ T1292] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.301827][T21078] can: request_module (can-proto-0) failed. [ 469.363105][T21081] bond3: option resend_igmp: invalid value (23932) [ 469.363138][T21081] bond3: option resend_igmp: allowed values 0 - 255 [ 469.390022][T21081] bond3 (unregistering): Released all slaves [ 469.651744][T21094] netlink: 'syz.1.3899': attribute type 7 has an invalid length. [ 470.048577][T21102] netlink: 'syz.4.3901': attribute type 12 has an invalid length. [ 470.048631][T21102] netlink: 'syz.4.3901': attribute type 29 has an invalid length. [ 470.048645][T21102] __nla_validate_parse: 3 callbacks suppressed [ 470.048672][T21102] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3901'. [ 470.048735][T21102] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3901'. [ 470.174022][T21106] syzkaller1: entered promiscuous mode [ 470.174042][T21106] syzkaller1: entered allmulticast mode [ 470.601610][T21126] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 470.647395][ C0] net_ratelimit: 28 callbacks suppressed [ 470.647413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.647652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.647824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.648515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.649527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.727079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.727188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.727488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.728161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.728441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.083398][T21139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3908'. [ 471.272018][T21150] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3911'. [ 471.374090][T21154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3912'. [ 471.751462][T21169] wg1: entered promiscuous mode [ 471.751483][T21169] wg1: entered allmulticast mode [ 471.786347][T21164] tap0: tun_chr_ioctl cmd 1074025676 [ 471.786385][T21164] tap0: owner set to 0 [ 472.202337][T21181] bond3: entered promiscuous mode [ 472.202425][T21181] bond3: entered allmulticast mode [ 472.207605][T21181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.232112][T21189] netlink: 'syz.1.3921': attribute type 12 has an invalid length. [ 472.232129][T21189] netlink: 'syz.1.3921': attribute type 29 has an invalid length. [ 472.232142][T21189] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3921'. [ 472.440781][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3923'. [ 472.586784][T21202] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3925'. [ 472.711376][T21199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3922'. [ 473.584800][T21247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3934'. [ 473.584873][T21247] netlink: 'syz.4.3934': attribute type 7 has an invalid length. [ 473.633638][T21244] vxcan1: Master is either lo or non-ether device [ 473.646100][T21244] vxcan1: Master is either lo or non-ether device [ 473.742089][T21244] vxcan1: Master is either lo or non-ether device [ 473.765726][T21244] vxcan1: Master is either lo or non-ether device [ 473.767554][T21244] vxcan1: Master is either lo or non-ether device [ 473.790297][T21244] vxcan1: Master is either lo or non-ether device [ 473.818650][T21244] vxcan1: Master is either lo or non-ether device [ 473.819830][T21244] vxcan1: Master is either lo or non-ether device [ 473.849871][T21244] vxcan1: Master is either lo or non-ether device [ 473.851035][T21244] vxcan1: Master is either lo or non-ether device [ 473.882538][T21244] vxcan1: Master is either lo or non-ether device [ 473.883828][T21244] vxcan1: Master is either lo or non-ether device [ 473.916062][T21244] vxcan1: Master is either lo or non-ether device [ 473.936448][T21244] vxcan1: Master is either lo or non-ether device [ 473.949139][T21244] vxcan1: Master is either lo or non-ether device [ 473.953215][T21244] vxcan1: Master is either lo or non-ether device [ 473.956420][T21244] vxcan1: Master is either lo or non-ether device [ 474.016642][T21244] vxcan1: Master is either lo or non-ether device [ 474.034258][T21244] vxcan1: Master is either lo or non-ether device [ 474.059947][T21244] vxcan1: Master is either lo or non-ether device [ 474.087184][T21244] vxcan1: Master is either lo or non-ether device [ 474.180782][T21244] vxcan1: Master is either lo or non-ether device [ 474.182809][T21244] vxcan1: Master is either lo or non-ether device [ 474.184715][T21244] vxcan1: Master is either lo or non-ether device [ 474.186786][T21244] vxcan1: Master is either lo or non-ether device [ 474.222706][T21244] vxcan1: Master is either lo or non-ether device [ 474.224579][T21244] vxcan1: Master is either lo or non-ether device [ 474.226478][T21244] vxcan1: Master is either lo or non-ether device [ 474.261114][T21244] vxcan1: Master is either lo or non-ether device [ 474.263598][T21244] vxcan1: Master is either lo or non-ether device [ 474.265570][T21244] vxcan1: Master is either lo or non-ether device [ 474.289515][T21244] vxcan1: Master is either lo or non-ether device [ 474.291498][T21244] vxcan1: Master is either lo or non-ether device [ 474.346521][T21256] tipc: Started in network mode [ 474.346615][T21256] tipc: Node identity f67ff4b927ac, cluster identity 4711 [ 474.374080][T21256] tipc: Enabled bearer , priority 0 [ 475.306572][T21255] tipc: Disabling bearer [ 475.697649][ C1] net_ratelimit: 32 callbacks suppressed [ 475.697683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.697873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.699558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.700656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.721649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.767354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.768208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.770260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.770559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.770853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.871208][T21296] bridge_slave_0: left allmulticast mode [ 475.871231][T21296] bridge_slave_0: left promiscuous mode [ 475.871441][T21296] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.922339][T21296] bridge_slave_1: left allmulticast mode [ 475.922362][T21296] bridge_slave_1: left promiscuous mode [ 475.922590][T21296] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.982133][T21296] bond0: (slave bond_slave_0): Releasing backup interface [ 476.068674][T21296] bond0: (slave bond_slave_1): Releasing backup interface [ 476.079502][T21296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.079557][T21296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.108132][T21296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.108152][T21296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.183132][T21305] No such timeout policy "syz1" [ 476.526442][T21326] netlink: 'syz.0.3954': attribute type 9 has an invalid length. [ 476.617903][T21334] netlink: 'syz.0.3954': attribute type 9 has an invalid length. [ 476.770403][T21324] netlink: 'syz.2.3952': attribute type 14 has an invalid length. [ 476.849586][T21341] __nla_validate_parse: 3 callbacks suppressed [ 476.849604][T21341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3955'. [ 476.944036][T21339] tap0: tun_chr_ioctl cmd 2148553947 [ 477.002484][T21347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'. [ 477.002571][T21347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3958'. [ 477.181472][T21350] netlink: 'syz.0.3959': attribute type 1 has an invalid length. [ 477.181491][T21350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 477.382770][T21356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.408614][T21356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.429309][T21369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3963'. [ 477.432282][T21370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.436705][T21367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.441730][T21362] sctp: [Deprecated]: syz.4.3961 (pid 21362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.441730][T21362] Use struct sctp_sack_info instead [ 477.441801][T21362] sctp: [Deprecated]: syz.4.3961 (pid 21362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.441801][T21362] Use struct sctp_sack_info instead [ 477.441857][T21362] sctp: [Deprecated]: syz.4.3961 (pid 21362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.441857][T21362] Use struct sctp_sack_info instead [ 477.441918][T21362] sctp: [Deprecated]: syz.4.3961 (pid 21362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.441918][T21362] Use struct sctp_sack_info instead [ 477.441979][T21362] sctp: [Deprecated]: syz.4.3961 (pid 21362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.441979][T21362] Use struct sctp_sack_info instead [ 477.442037][T21362] sctp: [Deprecated]: syz.4.3961 (pid 21362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.442037][T21362] Use struct sctp_sack_info instead [ 477.442099][T21362] sctp: [Deprecated]: syz.4.3961 (pid 21362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.442099][T21362] Use struct sctp_sack_info instead [ 477.442151][T21362] sctp: [Deprecated]: syz.4.3961 (pid 21362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.442151][T21362] Use struct sctp_sack_info instead [ 477.442207][T21362] sctp: [Deprecated]: syz.4.3961 (pid 21362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.442207][T21362] Use struct sctp_sack_info instead [ 477.442262][T21362] sctp: [Deprecated]: syz.4.3961 (pid 21362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.442262][T21362] Use struct sctp_sack_info instead [ 477.608388][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 477.845122][T21373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3964'. [ 478.056455][T21379] Bluetooth: hci0: unsupported parameter 5134 [ 478.056477][T21379] Bluetooth: hci0: unsupported parameter 8192 [ 478.056489][T21379] Bluetooth: hci0: unsupported parameter 5134 [ 478.056500][T21379] Bluetooth: hci0: unsupported parameter 8192 [ 478.382249][T21385] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3969'. [ 478.433515][T21390] netlink: 'syz.3.3970': attribute type 9 has an invalid length. [ 478.720004][T21400] IPVS: length: 221 != 24 [ 479.285813][T21419] syz_tun: entered allmulticast mode [ 479.316794][T21418] syz_tun: left allmulticast mode [ 479.639858][T21435] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2 [ 479.639928][T21435] netdevsim netdevsim0: Falling back to sysfs fallback for: ÿ [ 480.066286][T21442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3985'. [ 480.216273][T21447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3986'. [ 480.643977][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3989'. [ 480.727227][ C0] net_ratelimit: 24 callbacks suppressed [ 480.727245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.728284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.728509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.729156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.730286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.807219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.807537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.807642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.807959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.808097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.706345][T21483] netlink: 'syz.1.3998': attribute type 2 has an invalid length. [ 482.280199][T21524] __nla_validate_parse: 3 callbacks suppressed [ 482.280247][T21524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4007'. [ 482.435503][T21533] Bluetooth: hci0: unsupported parameter 5135 [ 482.435524][T21533] Bluetooth: hci0: unsupported parameter 8192 [ 482.435536][T21533] Bluetooth: hci0: unsupported parameter 5135 [ 482.435549][T21533] Bluetooth: hci0: unsupported parameter 8192 [ 482.516582][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4011'. [ 482.635529][T21537] netlink: 'syz.2.4012': attribute type 1 has an invalid length. [ 482.802814][T21537] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20004 [ 483.054535][T21554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4016'. [ 483.120685][T21551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4017'. [ 483.544623][T21575] syzkaller0: entered promiscuous mode [ 483.544644][T21575] syzkaller0: entered allmulticast mode [ 483.705700][T21581] netlink: 'syz.0.4025': attribute type 1 has an invalid length. [ 483.723985][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079d02000: rx timeout, send abort [ 483.724642][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079d02000: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 483.872855][T21581] bond4: entered promiscuous mode [ 483.873610][T21581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.908389][T21587] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4026'. [ 483.933670][T21584] ipvlan2: entered allmulticast mode [ 483.933705][T21584] bond4: entered allmulticast mode [ 484.016350][T21584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4025'. [ 484.056526][T21585] bond4: (slave bridge3): making interface the new active one [ 484.056545][T21585] bridge3: entered promiscuous mode [ 484.056910][T21585] bridge3: entered allmulticast mode [ 484.078611][T21585] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 484.086235][T21590] bond0: invalid NS target ff00:: specified for addition [ 484.086297][T21590] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 484.134731][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4027'. [ 484.478763][T21606] x_tables: duplicate entry at hook 4 [ 484.907654][T21622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4037'. [ 485.015580][T21625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4039'. [ 485.265290][T21633] sit0: entered promiscuous mode [ 485.286792][T21633] netlink: 'syz.4.4040': attribute type 1 has an invalid length. [ 485.286810][T21633] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4040'. [ 485.771299][ C0] net_ratelimit: 32 callbacks suppressed [ 485.771337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.771613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.787383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.787575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.790200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.791227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.847270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.847990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.848242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.851240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.099651][T21694] syzkaller1: entered promiscuous mode [ 487.099673][T21694] syzkaller1: entered allmulticast mode [ 487.403184][T21717] __nla_validate_parse: 4 callbacks suppressed [ 487.403202][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 487.644672][T21723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4065'. [ 487.757780][T21725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4066'. [ 488.689718][T21759] netlink: 'syz.3.4077': attribute type 1 has an invalid length. [ 488.824546][T21768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4080'. [ 488.862261][T21759] bond2: entered promiscuous mode [ 488.863052][T21759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.935351][T21765] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.950060][T21765] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 488.950080][T21765] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 489.003756][T21765] bond2: (slave wireguard0): making interface the new active one [ 489.003777][T21765] wireguard0: entered promiscuous mode [ 489.006749][T21765] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 489.323072][T21782] netlink: 'syz.3.4085': attribute type 1 has an invalid length. [ 489.492877][T21782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 489.568217][T21784] bond3: (slave gretap1): making interface the new active one [ 489.569887][T21784] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 489.571850][T21789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4086'. [ 489.571874][T21789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4086'. [ 489.636154][T21793] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4086'. [ 490.175223][T21819] netlink: 'syz.0.4095': attribute type 1 has an invalid length. [ 490.175245][T21819] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4095'. [ 490.221851][T21815] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4094'. [ 490.509457][T21830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4099'. [ 490.677581][T21833] netlink: 'syz.2.4100': attribute type 3 has an invalid length. [ 490.778499][T21838] net_ratelimit: 42 callbacks suppressed [ 490.778532][T21838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.784525][T21830] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 490.810916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.819688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.819872][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.820017][ T9345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.820837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.821777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.826356][T21836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.828394][T20985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.941220][T21830] netlink: 'syz.0.4099': attribute type 1 has an invalid length. [ 491.544929][T21867] xt_bpf: check failed: parse error [ 491.566392][T21861] netlink: 'syz.0.4108': attribute type 1 has an invalid length. [ 492.084152][T21882] can: request_module (can-proto-0) failed. [ 492.086379][T21880] veth5: entered allmulticast mode [ 492.533400][T21911] __nla_validate_parse: 7 callbacks suppressed [ 492.533418][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4121'. [ 492.983238][T21929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4128'. [ 493.276353][T21936] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4131'. [ 493.304655][T21936] IPVS: length: 1152 != 8 [ 493.699233][T21956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4136'. [ 494.043650][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4139'. [ 494.549218][T21985] syzkaller1: entered promiscuous mode [ 494.549246][T21985] syzkaller1: entered allmulticast mode [ 494.554978][T21985] x_tables: duplicate underflow at hook 1 [ 494.945729][T22001] syzkaller0: entered promiscuous mode [ 494.945751][T22001] syzkaller0: entered allmulticast mode [ 495.185290][T22006] netlink: 'syz.2.4152': attribute type 2 has an invalid length. [ 495.185331][T22006] netlink: 'syz.2.4152': attribute type 2 has an invalid length. [ 495.211398][T22006] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 495.342164][T22011] syzkaller1: entered promiscuous mode [ 495.342230][T22011] syzkaller1: entered allmulticast mode [ 495.359147][T22011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4153'. [ 495.359174][T22011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4153'. [ 495.504831][T22016] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4155'. [ 495.531735][T22015] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4155'. [ 495.532261][T22016] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4155'. [ 495.847240][ C0] net_ratelimit: 40 callbacks suppressed [ 495.847256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.848876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.849072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.852120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.853261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.927211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.927551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.927655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.928846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.929012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.336116][T22043] Bluetooth: hci0: unsupported parameter 5161 [ 496.336137][T22043] Bluetooth: hci0: unsupported parameter 8192 [ 496.336149][T22043] Bluetooth: hci0: unsupported parameter 5161 [ 496.336161][T22043] Bluetooth: hci0: unsupported parameter 8192 [ 496.484558][T22058] xt_NFQUEUE: number of total queues is 0 [ 497.980779][T22092] netlink: 'syz.0.4177': attribute type 24 has an invalid length. [ 499.292430][T22043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.512973][T22099] vlan3: entered allmulticast mode [ 499.512995][T22099] bond0: entered allmulticast mode [ 499.582817][T22102] bond0: (slave bond_slave_0): Releasing backup interface [ 499.598713][T22104] netlink: 'syz.3.4182': attribute type 64 has an invalid length. [ 499.611566][T22105] netlink: 'syz.3.4182': attribute type 64 has an invalid length. [ 499.635124][T22102] bond0: (slave bond_slave_1): Releasing backup interface [ 499.684116][T22107] __nla_validate_parse: 6 callbacks suppressed [ 499.684147][T22107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4181'. [ 499.684162][T22107] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4181'. [ 499.692213][T22109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4181'. [ 499.692255][T22109] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4181'. [ 499.747684][T22102] team0: Port device team_slave_0 removed [ 499.822283][T22102] team0: Port device team_slave_1 removed [ 499.834006][T22102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.835271][T22102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.854195][ T1292] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 499.872078][T22102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.872099][T22102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.884939][T22118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4183'. [ 499.912358][T22104] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.913032][T22104] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.009965][T22108] team0: Port device xfrm0 added [ 500.013841][T22115] tipc: Enabled bearer , priority 0 [ 500.235300][T22126] netlink: 'syz.0.4185': attribute type 1 has an invalid length. [ 500.553497][T22142] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4190'. [ 500.553522][T22142] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4190'. [ 500.624476][T22142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4190'. [ 500.885453][T22154] bond3: option resend_igmp: invalid value (32767) [ 500.885477][T22154] bond3: option resend_igmp: allowed values 0 - 255 [ 500.887362][ C0] net_ratelimit: 26 callbacks suppressed [ 500.887378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.905947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.906219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.911058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.912330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.967232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.967360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.967648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.968570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.968703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.088840][T22154] bond3 (unregistering): Released all slaves [ 501.125726][T20985] tipc: Node number set to 3520328889 [ 501.140899][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.141915][ T1311] ieee802154 phy3 wpan0: encryption failed: -22 [ 501.313909][T22160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4194'. [ 501.314555][T22160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4194'. [ 501.314592][T22160] netlink: 'syz.3.4194': attribute type 3 has an invalid length. [ 501.776820][T22186] netlink: 'syz.0.4201': attribute type 1 has an invalid length. [ 501.851616][T22186] 8021q: adding VLAN 0 to HW filter on device bond6 [ 501.854511][T22186] bond5: (slave bond6): making interface the new active one [ 501.854921][T22186] bond5: (slave bond6): Enslaving as an active interface with an up link [ 501.899002][T22186] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 501.922594][T22186] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.052083][T22191] netlink: 'syz.0.4202': attribute type 1 has an invalid length. [ 502.083372][T22191] bond7: entered promiscuous mode [ 502.083895][T22191] 8021q: adding VLAN 0 to HW filter on device bond7 [ 502.125109][T22191] 8021q: adding VLAN 0 to HW filter on device bond7 [ 502.125648][T22191] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 502.125674][T22191] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 502.131011][T22191] bond7: (slave xfrm1): making interface the new active one [ 502.131050][T22191] xfrm1: entered promiscuous mode [ 502.180504][T22191] xfrm1: left promiscuous mode [ 504.321248][T22162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.321503][T22164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.322050][T22180] netlink: 'syz.1.4199': attribute type 23 has an invalid length. [ 505.003426][T22238] __nla_validate_parse: 4 callbacks suppressed [ 505.003473][T22238] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4216'. [ 505.003508][T22238] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4216'. [ 505.436003][T22259] batman_adv: batadv0: Adding interface: veth0 [ 505.436041][T22259] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.436096][T22259] batman_adv: batadv0: Interface activated: veth0 [ 505.861817][T22240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.929273][ C1] net_ratelimit: 23 callbacks suppressed [ 505.929304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.929470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.930357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.931266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.932520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.009347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.009637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.009740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.011252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.011477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.967271][ C0] net_ratelimit: 23 callbacks suppressed [ 510.967311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.967583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.968087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.968191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.968359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.969429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.970052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.970374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.993218][T10331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.052800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.007213][ C0] net_ratelimit: 23 callbacks suppressed [ 516.007236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.008364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.008482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.008748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.009266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.087227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.087552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.087705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.088474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.088648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.542147][ T5625] Bluetooth: hci3: link tx timeout [ 519.542167][ T5625] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 521.038592][ T3347] net_ratelimit: 21 callbacks suppressed [ 521.038620][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.047251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.071297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.071402][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.075965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.077259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.127194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.127323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.127626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.127787][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.609483][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 521.625220][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 526.087404][ C0] net_ratelimit: 20 callbacks suppressed [ 526.087425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.101466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.101729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.103373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.104696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.167086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.167405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.167505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.168425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.168501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.440413][T22391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4230'. [ 526.447203][T22391] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4230'. [ 526.579361][T22388] netlink: 'syz.0.4227': attribute type 6 has an invalid length. [ 526.795190][T22399] vlan2: entered allmulticast mode [ 526.795210][T22399] bond0: entered allmulticast mode [ 526.795224][T22399] bond_slave_0: entered allmulticast mode [ 526.795241][T22399] bond_slave_1: entered allmulticast mode [ 526.847973][T22406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4232'. [ 526.872853][T22406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 527.140633][T22407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4232'. [ 527.143370][T22414] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 527.494101][T22427] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4237'. [ 529.087932][T22477] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4247'. [ 529.755791][T22512] syzkaller0: entered promiscuous mode [ 529.755828][T22512] syzkaller0: entered allmulticast mode [ 529.867803][T22513] netlink: 'syz.2.4255': attribute type 17 has an invalid length. [ 529.867840][T22513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4255'. [ 529.867899][T22513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4255'. [ 529.959192][T22512] netlink: 'syz.3.4254': attribute type 32 has an invalid length. [ 529.959229][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4254'. [ 530.060316][T22512] bond4: option coupled_control: invalid value (192) [ 530.061912][T22512] bond4 (unregistering): Released all slaves [ 531.127832][ C0] net_ratelimit: 26 callbacks suppressed [ 531.127851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.128169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.128484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.128786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.131174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.132326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.152484][T10326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.208034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.208243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.208667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.170171][T22581] xfrm1: entered promiscuous mode [ 534.170230][T22581] xfrm1: entered allmulticast mode [ 534.450946][T22615] __nla_validate_parse: 6 callbacks suppressed [ 534.450965][T22615] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4278'. [ 534.678685][T22626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4280'. [ 534.919677][T22640] tap0: tun_chr_ioctl cmd 1074025672 [ 534.919699][T22640] tap0: ignored: set checksum disabled [ 535.006689][T22650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4286'. [ 535.006862][T22650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4286'. [ 535.336229][T22660] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4288'. [ 535.536883][T22668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4291'. [ 536.162136][T22686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4299'. [ 536.167607][ C0] net_ratelimit: 23 callbacks suppressed [ 536.167651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.180667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.180813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.185014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.190078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.247420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.247757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.247883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.248960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.249146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.555991][T22702] Bluetooth: hci0: unsupported parameter 5135 [ 536.556011][T22702] Bluetooth: hci0: unsupported parameter 8192 [ 536.556023][T22702] Bluetooth: hci0: unsupported parameter 5135 [ 536.556035][T22702] Bluetooth: hci0: unsupported parameter 8192 [ 536.692274][T22714] macvlan0: left promiscuous mode [ 536.692475][T22714] netlink: 'syz.4.4303': attribute type 2 has an invalid length. [ 536.694332][T22710] netlink: 'syz.4.4303': attribute type 2 has an invalid length. [ 536.806450][T22717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4306'. [ 537.299823][T22731] xt_CT: No such helper "netbios-ns" [ 537.497367][T22747] xt_l2tp: v2 doesn't support IP mode [ 537.497598][T22747] xt_l2tp: v2 doesn't support IP mode [ 537.498028][T22747] xt_l2tp: v2 doesn't support IP mode [ 537.498247][T22747] xt_l2tp: v2 doesn't support IP mode [ 537.498424][T22747] xt_l2tp: v2 doesn't support IP mode [ 537.498641][T22747] xt_l2tp: v2 doesn't support IP mode [ 537.498913][T22747] xt_l2tp: v2 doesn't support IP mode [ 537.499343][T22747] xt_l2tp: v2 doesn't support IP mode [ 537.499538][T22747] xt_l2tp: v2 doesn't support IP mode [ 537.499727][T22747] xt_l2tp: v2 doesn't support IP mode [ 537.642493][T22755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4316'. [ 537.642524][T22755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4316'. [ 537.856756][T22762] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 537.871539][T22762] bond2 (unregistering): Released all slaves [ 538.033839][T22765] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 538.084563][T22767] xt_connbytes: Forcing CT accounting to be enabled [ 538.090460][T22767] set match dimension is over the limit! [ 538.313104][T22778] netlink: 'syz.1.4322': attribute type 3 has an invalid length. [ 538.313124][T22778] netlink: 'syz.1.4322': attribute type 1 has an invalid length. [ 539.177985][ T1292] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.371127][T22839] xt_hashlimit: size too large, truncated to 1048576 [ 539.526068][ T5625] block nbd0: Receive control failed (result -107) [ 539.539632][T22846] block nbd0: reconnected socket [ 539.916120][T22859] x_tables: unsorted entry at hook 2 [ 540.073824][T22863] batadv_slave_0: entered promiscuous mode [ 540.074194][T22863] batadv_slave_0: left promiscuous mode [ 540.116507][T22874] __nla_validate_parse: 2 callbacks suppressed [ 540.116557][T22874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4345'. [ 540.911320][T22910] netlink: 'syz.0.4353': attribute type 32 has an invalid length. [ 540.911342][T22910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4353'. [ 541.019429][T22905] IPVS: Scheduler module ip_vs_sip not found [ 541.162726][T22910] bond8: option coupled_control: invalid value (2) [ 541.179607][T22910] bond8 (unregistering): Released all slaves [ 541.207113][ C0] net_ratelimit: 29 callbacks suppressed [ 541.207130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.207569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.207763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.209241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.210317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.248455][T22914] netlink: 2416 bytes leftover after parsing attributes in process `syz.3.4355'. [ 541.288636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.289524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.291225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.291527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.291813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.296867][T22916] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 541.815168][T22929] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 541.815193][T22929] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 542.850707][T22965] ip6t_hbh: unknown flags 38 [ 543.793640][T22900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.976770][T22971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4363'. [ 544.176411][T22980] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4364'. [ 544.332724][T22971] macvtap1: entered promiscuous mode [ 544.332782][T22971] vlan0: entered promiscuous mode [ 544.334946][T22971] macvtap1: entered allmulticast mode [ 544.334980][T22971] vlan0: entered allmulticast mode [ 544.335008][T22971] veth0_vlan: entered allmulticast mode [ 544.462057][T22995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4369'. [ 544.607870][T22997] tipc: Enabling of bearer rejected, failed to enable media [ 545.191506][T23024] bridge0: port 1(bridge_slave_0) entered listening state [ 545.508220][T23037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4378'. [ 545.625684][T23037] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.635571][T23043] netlink: 'syz.0.4381': attribute type 2 has an invalid length. [ 545.698096][T23037] macvlan2: entered promiscuous mode [ 545.698116][T23037] macvlan2: entered allmulticast mode [ 545.705264][T23037] bond5: entered promiscuous mode [ 545.706135][T23037] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 545.741737][T23037] bond5: left promiscuous mode [ 545.762306][ T1292] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 545.764673][T23047] xt_socket: unknown flags 0x4 [ 546.247608][ C0] net_ratelimit: 32 callbacks suppressed [ 546.247629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.257464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.257638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.264553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.268146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.327159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.327188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.327611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.327772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.328340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.158742][T23102] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4398'. [ 547.183418][T23102] Bluetooth: MGMT ver 1.23 [ 547.297206][T23107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4400'. [ 547.590566][T23120] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'. [ 547.590767][T23120] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'. [ 547.592848][T23120] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'. [ 547.593722][T23118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'. [ 547.594121][T23118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'. [ 547.594838][T23120] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'. [ 547.595044][T23120] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4403'. [ 547.690589][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 548.193836][T23143] netlink: 'syz.4.4410': attribute type 2 has an invalid length. [ 548.448341][T23150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 548.448356][T23150] IPv6: NLM_F_CREATE should be set when creating new route [ 548.448392][T23150] IPv6: NLM_F_CREATE should be set when creating new route [ 548.448414][T23150] IPv6: NLM_F_CREATE should be set when creating new route [ 548.502347][T23154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 548.843361][T23167] netlink: 'syz.3.4417': attribute type 16 has an invalid length. [ 548.843380][T23167] netlink: 'syz.3.4417': attribute type 17 has an invalid length. [ 548.929835][T23167] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.929949][T23167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.931975][T23167] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.932120][T23167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.490956][T23195] bond3: (slave bond_slave_0): Device is not bonding slave [ 549.491011][T23195] bond3: option active_slave: invalid value (bond_slave_0) [ 549.520216][T23195] bond3 (unregistering): Released all slaves [ 549.865178][T23202] bond3: (slave bond_slave_0): Device is not bonding slave [ 549.865233][T23202] bond3: option active_slave: invalid value (bond_slave_0) [ 549.923175][T23202] bond3 (unregistering): Released all slaves [ 550.399941][T23241] xt_socket: unknown flags 0x4 [ 550.544539][T23250] netlink: 'syz.2.4436': attribute type 1 has an invalid length. [ 550.582750][T23249] __nla_validate_parse: 75 callbacks suppressed [ 550.582766][T23249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4436'. [ 550.582780][T23249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4436'. [ 550.630209][T23250] bond2: entered promiscuous mode [ 550.630595][T23250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 550.914795][T23269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.932581][T23269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.975880][T23277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4441'. [ 551.280141][T23292] xt_socket: unknown flags 0x4 [ 551.287242][ C0] net_ratelimit: 9 callbacks suppressed [ 551.287257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.297405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.297597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.303567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.304746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.367132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.367229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.367361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.367674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.368019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.793595][T23312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4452'. [ 551.794715][T23313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4452'. [ 551.975969][T23312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4452'. [ 551.976129][T23325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4452'. [ 552.006653][T23312] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4452'. [ 552.128466][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4456'. [ 552.128489][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4456'. [ 552.246256][T23334] xt_socket: unknown flags 0x4 [ 552.311766][T23331] xt_cgroup: path and classid specified [ 552.364135][T23331] netlink: 'syz.4.4455': attribute type 64 has an invalid length. [ 552.411530][T23340] netlink: 'syz.3.4461': attribute type 13 has an invalid length. [ 552.866779][T23356] netlink: 'syz.0.4465': attribute type 5 has an invalid length. [ 552.893220][T23354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.090262][T23362] netlink: 'syz.1.4467': attribute type 1 has an invalid length. [ 553.090298][T23362] netlink: 'syz.1.4467': attribute type 2 has an invalid length. [ 553.099964][T23371] xt_socket: unknown flags 0x4 [ 553.125941][T23372] team0: No ports can be present during mode change [ 553.296280][T23376] sock: sock_timestamping_bind_phc: sock not bind to device [ 553.390368][T23380] veth2: entered allmulticast mode [ 553.459640][T23380] veth3: entered promiscuous mode [ 553.459699][T23380] veth3: entered allmulticast mode [ 553.673128][T23392] netlink: 'syz.1.4476': attribute type 10 has an invalid length. [ 553.777782][T23392] team0: Port device dummy0 added [ 553.778025][T23394] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 553.829821][T23394] sctp_getsockopt_delayed_ack: 55 callbacks suppressed [ 553.829839][T23394] sctp: [Deprecated]: syz.2.4477 (pid 23394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 553.829839][T23394] Use struct sctp_sack_info instead [ 553.906049][T23398] xt_socket: unknown flags 0x4 [ 554.069650][T23400] netlink: 'syz.0.4479': attribute type 4 has an invalid length. [ 554.420776][T23424] netlink: 'syz.1.4488': attribute type 1 has an invalid length. [ 554.695463][T23424] bond3: entered promiscuous mode [ 554.700359][T23424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 555.493099][T23467] netlink: 'syz.1.4500': attribute type 33 has an invalid length. [ 555.738733][T23484] __nla_validate_parse: 23 callbacks suppressed [ 555.738752][T23484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4506'. [ 556.020768][T23512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4509'. [ 556.203018][T23516] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4511'. [ 556.327663][ C0] net_ratelimit: 8 callbacks suppressed [ 556.327679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.328434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.336760][T23518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.337638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.337830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.340414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.341412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.385684][T23518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4512'. [ 556.408413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.408884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.408988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.409933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.640155][T23526] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4514'. [ 556.786164][T23532] netlink: 'syz.3.4516': attribute type 1 has an invalid length. [ 556.935051][T23543] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4519'. [ 557.282767][T23560] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.4523'. [ 557.283850][T23560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4523'. [ 557.522656][T23570] x_tables: duplicate underflow at hook 2 [ 558.236101][T23597] x_tables: duplicate underflow at hook 2 [ 558.472433][T23604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4536'. [ 558.567503][T23606] netlink: 'syz.0.4537': attribute type 29 has an invalid length. [ 558.569670][T23606] netlink: 'syz.0.4537': attribute type 29 has an invalid length. [ 558.746652][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4541'. [ 559.301031][T23647] xt_socket: unknown flags 0x4 [ 559.883249][T23658] xt_cgroup: path and classid specified [ 559.964079][T23662] syz.0.4551: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 559.964204][T23662] CPU: 0 UID: 0 PID: 23662 Comm: syz.0.4551 Not tainted syzkaller #0 PREEMPT(full) [ 559.964226][T23662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 559.964246][T23662] Call Trace: [ 559.964258][T23662] [ 559.964266][T23662] dump_stack_lvl+0xe8/0x150 [ 559.964355][T23662] warn_alloc+0x24d/0x270 [ 559.964402][T23662] ? kasan_save_track+0x4f/0x80 [ 559.964423][T23662] ? kasan_save_track+0x3e/0x80 [ 559.964446][T23662] ? __pfx_warn_alloc+0x10/0x10 [ 559.964463][T23662] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 559.964587][T23662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.964646][T23662] __vmalloc_node_range_noprof+0x127/0x1540 [ 559.964705][T23662] ? rcu_is_watching+0x16/0xb0 [ 559.964758][T23662] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 559.964788][T23662] ? __kmalloc_cache_noprof+0x321/0x600 [ 559.964809][T23662] ? __kmalloc_cache_noprof+0x14d/0x600 [ 559.964828][T23662] ? xskq_create+0x56/0x220 [ 559.964941][T23662] xskq_create+0x148/0x220 [ 559.964964][T23662] ? xsk_init_queue+0x8a/0xe0 [ 559.964988][T23662] xsk_init_queue+0x8a/0xe0 [ 559.965013][T23662] xsk_setsockopt+0x52a/0x960 [ 559.965038][T23662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 559.965059][T23662] ? __pfx_aa_sk_perm+0x10/0x10 [ 559.965124][T23662] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 559.965168][T23662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 559.965192][T23662] do_sock_setsockopt+0x17c/0x1b0 [ 559.965223][T23662] __x64_sys_setsockopt+0x13d/0x1b0 [ 559.965255][T23662] do_syscall_64+0x166/0x520 [ 559.965312][T23662] ? trace_irq_disable+0x3b/0x140 [ 559.965348][T23662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.965368][T23662] ? clear_bhb_loop+0x70/0xc0 [ 559.965393][T23662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.965413][T23662] RIP: 0033:0x7f752099e159 [ 559.965431][T23662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.965448][T23662] RSP: 002b:00007f751ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 559.965468][T23662] RAX: ffffffffffffffda RBX: 00007f7520c26090 RCX: 00007f752099e159 [ 559.965482][T23662] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 559.965500][T23662] RBP: 00007f7520a3506b R08: 0000000000000004 R09: 0000000000000000 [ 559.965513][T23662] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.965525][T23662] R13: 00007f7520c26128 R14: 00007f7520c26090 R15: 00007ffe40dcbef8 [ 559.965558][T23662] [ 560.035720][T23662] Mem-Info: [ 560.035748][T23662] active_anon:6796 inactive_anon:0 isolated_anon:0 [ 560.035748][T23662] active_file:0 inactive_file:43183 isolated_file:0 [ 560.035748][T23662] unevictable:0 dirty:87 writeback:0 [ 560.035748][T23662] slab_reclaimable:12389 slab_unreclaimable:132219 [ 560.035748][T23662] mapped:29302 shmem:1107 pagetables:1309 [ 560.035748][T23662] sec_pagetables:0 bounce:0 [ 560.035748][T23662] kernel_misc_reclaimable:0 [ 560.035748][T23662] free:1285349 free_pcp:8558 free_cma:0 [ 560.035879][T23662] Node 0 active_anon:27184kB inactive_anon:0kB active_file:0kB inactive_file:172532kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117208kB dirty:348kB writeback:0kB shmem:4428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17424kB pagetables:5080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 560.035997][T23662] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 560.036118][T23662] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.036319][T23662] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 560.036415][T23662] Node 0 DMA32 free:1189304kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27184kB inactive_anon:0kB active_file:0kB inactive_file:172532kB unevictable:0kB writepending:348kB zspages:0kB present:3129332kB managed:2546900kB mlocked:0kB bounce:0kB free_pcp:34232kB local_pcp:11464kB free_cma:0kB [ 560.036571][T23662] lowmem_reserve[]: 0 0 0 0 0 [ 560.036664][T23662] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.036831][T23662] lowmem_reserve[]: 0 0 0 0 0 [ 560.039670][T23662] Node 1 Normal free:3936732kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 560.043082][T23662] lowmem_reserve[]: 0 0 0 0 0 [ 560.043171][T23662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 560.043498][T23662] Node 0 DMA32: 2592*4kB (UME) 1051*8kB (UME) 438*16kB (UME) 310*32kB (UME) 85*64kB (UME) 22*128kB (UME) 8*256kB (ME) 3*512kB (UM) 1*1024kB (U) 9*2048kB (UME) 274*4096kB (UM) = 1189304kB [ 560.043869][T23662] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 560.044095][T23662] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 6*16kB (UM) 7*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3936732kB [ 560.044540][T23662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.044583][T23662] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.044628][T23662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.044663][T23662] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.044698][T23662] 44286 total pagecache pages [ 560.044725][T23662] 0 pages in swap cache [ 560.044742][T23662] Free swap = 124996kB [ 560.044759][T23662] Total swap = 124996kB [ 560.044778][T23662] 2097051 pages RAM [ 560.099314][T23662] 0 pages HighMem/MovableOnly [ 560.099341][T23662] 428710 pages reserved [ 560.099365][T23662] 0 pages cma reserved [ 560.778963][T23678] xt_socket: unknown flags 0x4 [ 561.270669][T23699] __nla_validate_parse: 4 callbacks suppressed [ 561.270688][T23699] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4559'. [ 561.367142][ C0] net_ratelimit: 10 callbacks suppressed [ 561.367161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.368395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.368584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.369577][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.370756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.447163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.447295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.447617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.448292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.448464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.821859][T23690] ip6gre1: entered promiscuous mode [ 562.581646][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.582499][ T1311] ieee802154 phy3 wpan0: encryption failed: -22 [ 562.646543][T23750] bridge4: entered promiscuous mode [ 562.646645][T23750] bridge4: entered allmulticast mode [ 562.856308][T23764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4580'. [ 562.861060][T23765] netlink: 141 bytes leftover after parsing attributes in process `syz.0.4580'. [ 563.246183][T23773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4582'. [ 563.274868][T23764] hsr_slave_1 (unregistering): left promiscuous mode [ 563.562325][T23786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'. [ 563.580962][T23788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4589'. [ 563.583405][T23790] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 563.586073][T23788] netlink: 'syz.0.4589': attribute type 1 has an invalid length. [ 563.730253][T23788] 8021q: adding VLAN 0 to HW filter on device bond8 [ 563.798612][T23793] bond8: (slave gretap2): making interface the new active one [ 563.801697][T23793] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 564.519564][T23824] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 564.649117][T23823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4597'. [ 564.649137][T23823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4597'. [ 565.509768][T23857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4605'. [ 565.512525][T23859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4605'. [ 566.407324][ C0] net_ratelimit: 42 callbacks suppressed [ 566.407344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.407385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.407551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.409740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.487199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.487238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.487586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.487696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.488020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.488040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.784310][T23893] netlink: 'syz.0.4616': attribute type 1 has an invalid length. [ 566.863690][T23894] __nla_validate_parse: 1 callbacks suppressed [ 566.863707][T23894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4616'. [ 566.983877][T23893] bond9: entered promiscuous mode [ 566.984241][T23893] 8021q: adding VLAN 0 to HW filter on device bond9 [ 566.984886][T23894] bond9: entered allmulticast mode [ 567.116883][T23899] bond9: (slave bridge5): making interface the new active one [ 567.116905][T23899] bridge5: entered promiscuous mode [ 567.136842][T23899] bridge5: entered allmulticast mode [ 567.150993][T23899] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 567.717391][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4626'. [ 567.723095][T23929] netlink: 60507 bytes leftover after parsing attributes in process `syz.2.4626'. [ 567.835911][T23932] nbd3: detected capacity change from 0 to 63 [ 567.843582][ T5625] block nbd3: Receive control failed (result -32) [ 567.855616][ T1933] block nbd3: Dead connection, failed to find a fallback [ 567.855636][ T1933] block nbd3: shutting down sockets [ 567.855648][ T1933] blk_print_req_error: 62 callbacks suppressed [ 567.855668][ T1933] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.855698][ T1933] buffer_io_error: 138 callbacks suppressed [ 567.855725][ T1933] Buffer I/O error on dev nbd3, logical block 0, async page read [ 567.855893][ T1933] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.855920][ T1933] Buffer I/O error on dev nbd3, logical block 1, async page read [ 567.856033][ T1933] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.856061][ T1933] Buffer I/O error on dev nbd3, logical block 2, async page read [ 567.856171][ T1933] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.856199][ T1933] Buffer I/O error on dev nbd3, logical block 3, async page read [ 567.856341][ T1933] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.856368][ T1933] Buffer I/O error on dev nbd3, logical block 0, async page read [ 567.856473][ T1933] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.856499][ T1933] Buffer I/O error on dev nbd3, logical block 1, async page read [ 567.856599][ T1933] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.856626][ T1933] Buffer I/O error on dev nbd3, logical block 2, async page read [ 567.856739][ T1933] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.856766][ T1933] Buffer I/O error on dev nbd3, logical block 3, async page read [ 567.856880][ T1933] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.867882][ T1933] Buffer I/O error on dev nbd3, logical block 0, async page read [ 567.868029][ T1933] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 567.868053][ T1933] Buffer I/O error on dev nbd3, logical block 1, async page read [ 567.921434][T22416] ldm_validate_partition_table(): Disk read failed. [ 567.925854][T22416] Dev nbd3: unable to read RDB block 0 [ 567.949873][T22416] nbd3: unable to read partition table [ 567.999068][T22416] ldm_validate_partition_table(): Disk read failed. [ 568.000725][T22416] Dev nbd3: unable to read RDB block 0 [ 568.015489][T22416] nbd3: unable to read partition table [ 568.286667][T23946] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 568.375077][T23948] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4633'. [ 568.464372][T23952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4636'. [ 568.465664][T23952] bridge_slave_0: invalid flags given to default FDB implementation [ 568.566611][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4638'. [ 568.590416][T23958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4638'. [ 568.675520][T23964] tipc: New replicast peer: 172.20.20.187 [ 568.675992][T23964] tipc: Enabled bearer , priority 10 [ 568.866462][T23955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.929027][T23972] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4643'. [ 568.963366][T23955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.001589][T23955] bond0 (unregistering): Released all slaves [ 569.182222][T23981] x_tables: unsorted entry at hook 4 [ 569.198999][T23980] netlink: 'syz.2.4645': attribute type 2 has an invalid length. [ 569.199023][T23980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4645'. [ 569.206096][T23980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4645'. [ 569.339652][T23981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.364159][T23989] Bluetooth: MGMT ver 1.23 [ 569.423286][T23981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 569.546516][T23981] 8021q: adding VLAN 0 to HW filter on device bond5 [ 569.628315][T23981] 8021q: adding VLAN 0 to HW filter on device bond6 [ 569.794933][T23981] 8021q: adding VLAN 0 to HW filter on device bond7 [ 569.851615][T23981] 8021q: adding VLAN 0 to HW filter on device bond8 [ 569.933598][T23981] 8021q: adding VLAN 0 to HW filter on device bond9 [ 570.000699][T23981] 8021q: adding VLAN 0 to HW filter on device bond10 [ 570.139022][T24025] x_tables: duplicate underflow at hook 3 [ 570.515761][T24031] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 570.676209][T24047] netlink: 'syz.4.4660': attribute type 7 has an invalid length. [ 570.676229][T24047] netlink: 'syz.4.4660': attribute type 8 has an invalid length. [ 571.452512][ C0] net_ratelimit: 10 callbacks suppressed [ 571.452533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.458468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.461120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.465444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.468257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.527734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.527852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.528195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.528576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.529438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.046613][T24104] __nla_validate_parse: 1 callbacks suppressed [ 572.046633][T24104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'. [ 572.453042][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4680'. [ 572.595673][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4681'. [ 572.641900][T24123] bond2: (slave lo): Releasing backup interface [ 572.643689][T24123] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 572.792190][T24123] bridge_slave_0: left allmulticast mode [ 572.792256][T24123] bridge_slave_0: left promiscuous mode [ 572.794383][T24123] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.836575][T24123] bridge_slave_1: left allmulticast mode [ 572.836595][T24123] bridge_slave_1: left promiscuous mode [ 572.836777][T24123] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.990437][T24123] team0: Port device team_slave_0 removed [ 573.088568][T24123] team0: Port device team_slave_1 removed [ 573.090388][T24123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.090413][T24123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.124041][T24123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.124061][T24123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.056372][T24162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4688'. [ 574.098032][T24167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4688'. [ 574.270381][T24169] 8021q: adding VLAN 0 to HW filter on device bond11 [ 574.344079][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4689'. [ 574.344098][T24169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4689'. [ 574.395523][T24169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.427860][T24169] bond11: (slave bond0): Enslaving as an active interface with a down link [ 574.749539][T24196] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4694'. [ 574.848240][T24189] h: entered promiscuous mode [ 574.996358][T24213] xt_TCPMSS: Only works on TCP SYN packets [ 575.337061][ T5625] Bluetooth: hci1: ACL packet too small [ 575.379176][T24224] lo: entered promiscuous mode [ 575.400340][T24224] lo: left promiscuous mode [ 575.569531][T24230] netlink: 'syz.0.4701': attribute type 1 has an invalid length. [ 575.633228][T24227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4701'. [ 575.658173][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4703'. [ 575.672958][T24227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.487311][ C0] net_ratelimit: 8 callbacks suppressed [ 576.487331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.488433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.488623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.489285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.490307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.567099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.567421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.567521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.567834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.568367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.921116][T24206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.244449][T24259] __nla_validate_parse: 3 callbacks suppressed [ 578.244467][T24259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4708'. [ 578.283712][T24258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4706'. [ 578.367232][T24250] netlink: 'syz.4.4708': attribute type 17 has an invalid length. [ 578.367250][T24250] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4708'. [ 578.371343][T24264] netlink: 'syz.4.4708': attribute type 17 has an invalid length. [ 578.371361][T24264] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4708'. [ 578.479364][T24269] netlink: 'syz.4.4708': attribute type 11 has an invalid length. [ 579.083418][T24293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4716'. [ 579.659719][T24316] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 580.272195][T24343] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4734'. [ 580.383844][T24349] tc action pedit offset must be on 32 bit boundaries [ 580.551891][T24357] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4737'. [ 580.555260][T24358] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4737'. [ 580.615299][T24363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4740'. [ 580.673780][T24363] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.685177][T24363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4740'. [ 580.815078][T24365] netlink: 'syz.1.4739': attribute type 10 has an invalid length. [ 580.973331][T24363] 8021q: adding VLAN 0 to HW filter on device team1 [ 581.285104][T24388] sctp: [Deprecated]: syz.0.4744 (pid 24388) Use of int in max_burst socket option deprecated. [ 581.285104][T24388] Use struct sctp_assoc_value instead [ 581.316622][T24395] xt_TCPMSS: Only works on TCP SYN packets [ 581.527333][ C0] net_ratelimit: 9 callbacks suppressed [ 581.527349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.528855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.529047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.529808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.530883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.607253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.607380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.607698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.608321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.608910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.748901][T24408] netlink: 'syz.4.4750': attribute type 1 has an invalid length. [ 581.890875][T24408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 581.966628][T24421] FAULT_INJECTION: forcing a failure. [ 581.966628][T24421] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 581.966658][T24421] CPU: 0 UID: 0 PID: 24421 Comm: syz.1.4753 Not tainted syzkaller #0 PREEMPT(full) [ 581.966687][T24421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 581.966699][T24421] Call Trace: [ 581.966707][T24421] [ 581.966715][T24421] dump_stack_lvl+0xe8/0x150 [ 581.966749][T24421] should_fail_ex+0x410/0x560 [ 581.966858][T24421] _copy_from_user+0x2d/0xb0 [ 581.966925][T24421] do_ipt_set_ctl+0x743/0xe20 [ 581.967024][T24421] ? rcu_is_watching+0x16/0xb0 [ 581.967050][T24421] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 581.967090][T24421] ? __mutex_unlock_slowpath+0x731/0x900 [ 581.967174][T24421] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 581.967214][T24421] nf_setsockopt+0x26f/0x290 [ 581.967359][T24421] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 581.967425][T24421] do_sock_setsockopt+0x17c/0x1b0 [ 581.967457][T24421] __x64_sys_setsockopt+0x13d/0x1b0 [ 581.967489][T24421] do_syscall_64+0x166/0x520 [ 581.967514][T24421] ? trace_irq_disable+0x3b/0x140 [ 581.967535][T24421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.967555][T24421] ? clear_bhb_loop+0x70/0xc0 [ 581.967579][T24421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.967598][T24421] RIP: 0033:0x7fe99cf9e159 [ 581.967616][T24421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.967633][T24421] RSP: 002b:00007fe99de8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 581.967653][T24421] RAX: ffffffffffffffda RBX: 00007fe99d225fa0 RCX: 00007fe99cf9e159 [ 581.967669][T24421] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 581.967688][T24421] RBP: 00007fe99de8c090 R08: 0000000000000310 R09: 0000000000000000 [ 581.967701][T24421] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.967713][T24421] R13: 00007fe99d226038 R14: 00007fe99d225fa0 R15: 00007ffe930e06f8 [ 581.967746][T24421] [ 582.790497][T24449] xt_socket: unknown flags 0x4 [ 583.001276][T24462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.065172][T24462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.099335][T24467] netlink: 'syz.2.4767': attribute type 1 has an invalid length. [ 583.099356][T24467] netlink: 'syz.2.4767': attribute type 1 has an invalid length. [ 583.099488][T24467] netlink: 'syz.2.4767': attribute type 1 has an invalid length. [ 583.099503][T24467] netlink: 'syz.2.4767': attribute type 1 has an invalid length. [ 583.099644][T24467] netlink: 'syz.2.4767': attribute type 1 has an invalid length. [ 583.099658][T24467] netlink: 'syz.2.4767': attribute type 1 has an invalid length. [ 583.099783][T24467] netlink: 'syz.2.4767': attribute type 1 has an invalid length. [ 583.099797][T24467] netlink: 'syz.2.4767': attribute type 1 has an invalid length. [ 583.266113][T24465] ip_vti0: entered promiscuous mode [ 583.285668][T24465] __nla_validate_parse: 60 callbacks suppressed [ 583.285727][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4765'. [ 583.484777][T24486] FAULT_INJECTION: forcing a failure. [ 583.484777][T24486] name failslab, interval 1, probability 0, space 0, times 1 [ 583.484806][T24486] CPU: 0 UID: 0 PID: 24486 Comm: syz.0.4769 Not tainted syzkaller #0 PREEMPT(full) [ 583.484827][T24486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 583.484839][T24486] Call Trace: [ 583.484847][T24486] [ 583.484855][T24486] dump_stack_lvl+0xe8/0x150 [ 583.484892][T24486] should_fail_ex+0x410/0x560 [ 583.484921][T24486] should_failslab+0xa8/0x100 [ 583.484949][T24486] __kvmalloc_node_noprof+0x176/0x820 [ 583.484977][T24486] ? xt_alloc_table_info+0x40/0xb0 [ 583.485118][T24486] ? xt_alloc_table_info+0x40/0xb0 [ 583.485152][T24486] xt_alloc_table_info+0x40/0xb0 [ 583.485179][T24486] do_ipt_set_ctl+0x962/0xe20 [ 583.485213][T24486] ? rcu_is_watching+0x16/0xb0 [ 583.485238][T24486] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 583.485279][T24486] ? __mutex_unlock_slowpath+0x731/0x900 [ 583.485313][T24486] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 583.485353][T24486] nf_setsockopt+0x26f/0x290 [ 583.485381][T24486] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 583.485407][T24486] do_sock_setsockopt+0x17c/0x1b0 [ 583.485437][T24486] __x64_sys_setsockopt+0x13d/0x1b0 [ 583.485470][T24486] do_syscall_64+0x166/0x520 [ 583.485494][T24486] ? trace_irq_disable+0x3b/0x140 [ 583.485514][T24486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.485541][T24486] ? clear_bhb_loop+0x70/0xc0 [ 583.485565][T24486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.485585][T24486] RIP: 0033:0x7f752099e159 [ 583.485603][T24486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.485620][T24486] RSP: 002b:00007f7521787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 583.485641][T24486] RAX: ffffffffffffffda RBX: 00007f7520c25fa0 RCX: 00007f752099e159 [ 583.485656][T24486] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 583.485668][T24486] RBP: 00007f7521787090 R08: 0000000000000310 R09: 0000000000000000 [ 583.485681][T24486] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.485693][T24486] R13: 00007f7520c26038 R14: 00007f7520c25fa0 R15: 00007ffe40dcbef8 [ 583.485725][T24486] [ 583.530202][T24488] xt_socket: unknown flags 0x4 [ 583.994635][T24502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4774'. [ 584.016219][T24502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4774'. [ 584.235233][T24516] xt_socket: unknown flags 0x4 [ 584.332156][T24515] 8021q: adding VLAN 0 to HW filter on device bond12 [ 584.370657][T24522] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4780'. [ 584.419711][T24515] bond12: (slave bridge1): making interface the new active one [ 584.422003][T24515] bond12: (slave bridge1): Enslaving as an active interface with an up link [ 584.586345][T24532] bond12: (slave bridge2): Enslaving as an active interface with a down link [ 584.822872][T24548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4782'. [ 584.923661][T24553] Bluetooth: hci0: unsupported parameter 5134 [ 584.923681][T24553] Bluetooth: hci0: unsupported parameter 8192 [ 584.923693][T24553] Bluetooth: hci0: unsupported parameter 5134 [ 584.923705][T24553] Bluetooth: hci0: unsupported parameter 8192 [ 585.174047][T24562] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 585.320175][T24568] xt_socket: unknown flags 0x4 [ 585.345732][T24570] sctp: [Deprecated]: syz.0.4790 (pid 24570) Use of int in max_burst socket option deprecated. [ 585.345732][T24570] Use struct sctp_assoc_value instead [ 585.790466][T24587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4794'. [ 585.853113][T24556] validate_nla: 98 callbacks suppressed [ 585.853130][T24556] netlink: 'syz.1.4785': attribute type 4 has an invalid length. [ 586.298563][T24606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4799'. [ 586.330494][T24606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4799'. [ 586.331733][T24606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4799'. [ 586.368888][T24606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4799'. [ 586.567116][ C0] net_ratelimit: 9 callbacks suppressed [ 586.567135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.591392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.591510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.592729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.593214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.647142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.647466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.647569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.648003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.648203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.804353][T24623] syzkaller1: entered promiscuous mode [ 586.804371][T24623] syzkaller1: entered allmulticast mode [ 586.878106][T24625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 586.878121][T24625] IPv6: NLM_F_CREATE should be set when creating new route [ 587.131498][T24633] netlink: 'syz.2.4808': attribute type 1 has an invalid length. [ 587.326776][T24640] netlink: 'syz.2.4809': attribute type 5 has an invalid length. [ 587.442488][T24642] sctp: [Deprecated]: syz.2.4810 (pid 24642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.442488][T24642] Use struct sctp_sack_info instead [ 588.590157][T24581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.819881][T24646] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 588.918605][T10331] IPVS: starting estimator thread 0... [ 588.989648][T24658] __nla_validate_parse: 1 callbacks suppressed [ 588.989665][T24658] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4816'. [ 589.016666][T24654] IPVS: using max 30 ests per chain, 72000 per kthread [ 589.195041][T24666] netlink: 'syz.2.4817': attribute type 4 has an invalid length. [ 589.227951][T24666] bond13: option all_slaves_active: invalid value (179) [ 589.234572][T24666] bond13 (unregistering): Released all slaves [ 589.244726][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ec4c00: rx timeout, send abort [ 589.741210][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d568000: rx timeout, send abort [ 589.744769][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058ec4c00: abort rx timeout. Force session deactivation [ 589.955248][T24692] Bluetooth: hci0: unsupported parameter 5135 [ 589.955289][T24692] Bluetooth: hci0: unsupported parameter 8192 [ 589.955302][T24692] Bluetooth: hci0: unsupported parameter 5135 [ 589.955314][T24692] Bluetooth: hci0: unsupported parameter 8192 [ 590.037139][T24696] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4825'. [ 590.241257][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d568000: abort rx timeout. Force session deactivation [ 590.798364][T24714] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4830'. [ 590.835293][T24718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4833'. [ 591.411422][T24740] netlink: 'syz.0.4840': attribute type 11 has an invalid length. [ 591.607188][ C0] net_ratelimit: 9 callbacks suppressed [ 591.607208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.617975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.618199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.625375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.629750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.687046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.687160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.687507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.688248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.688428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.778414][T24752] bridge6: entered promiscuous mode [ 591.778467][T24752] bridge6: entered allmulticast mode [ 591.886970][T24752] team0: Port device bridge6 added [ 591.900110][T24753] bridge0: port 1(team0) entered blocking state [ 591.900309][T24753] bridge0: port 1(team0) entered disabled state [ 591.900531][T24753] team0: entered allmulticast mode [ 591.950381][T24753] team0: entered promiscuous mode [ 592.076345][T24741] netlink: 'syz.2.4841': attribute type 4 has an invalid length. [ 592.178746][T24764] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4849'. [ 592.186089][T24764] netlink: 'syz.4.4849': attribute type 4 has an invalid length. [ 592.186106][T24764] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4849'. [ 592.433471][T24772] bridge0: port 1(syzkaller0) entered blocking state [ 592.434104][T24772] bridge0: port 1(syzkaller0) entered disabled state [ 592.453930][T24773] bridge0: port 1(syzkaller0) entered blocking state [ 592.454098][T24773] bridge0: port 1(syzkaller0) entered disabled state [ 592.474722][T24772] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4852'. [ 592.474823][T24772] 0·: renamed from hsr0 (while UP) [ 592.500198][T24772] 0·: entered allmulticast mode [ 592.500214][T24772] hsr_slave_0: entered allmulticast mode [ 592.500225][T24772] hsr_slave_1: entered allmulticast mode [ 592.505863][T24772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4852'. [ 592.538723][T24772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4852'. [ 592.571756][T24775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4851'. [ 593.125456][T24802] xt_socket: unknown flags 0x4 [ 593.447465][T24823] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 594.150062][T24856] xt_socket: unknown flags 0x4 [ 594.552843][T24877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 595.146174][T24899] __nla_validate_parse: 4 callbacks suppressed [ 595.146209][T24899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4887'. [ 595.330823][T24905] ip6t_ah: unknown flags 5 [ 595.330939][T24905] ip6t_ah: unknown flags 5 [ 595.331042][T24905] ip6t_ah: unknown flags 5 [ 595.331142][T24905] ip6t_ah: unknown flags 5 [ 595.331259][T24905] ip6t_ah: unknown flags 5 [ 595.331380][T24905] ip6t_ah: unknown flags 5 [ 595.331489][T24905] ip6t_ah: unknown flags 5 [ 595.331598][T24905] ip6t_ah: unknown flags 5 [ 595.335129][T24905] ip6t_ah: unknown flags 5 [ 595.335240][T24905] ip6t_ah: unknown flags 5 [ 595.491755][T24904] 8021q: adding VLAN 0 to HW filter on device bond13 [ 595.493169][T24904] bridge0: port 1(bond13) entered blocking state [ 595.493456][T24904] bridge0: port 1(bond13) entered disabled state [ 595.493689][T24904] bond13: entered allmulticast mode [ 595.508391][T24904] bond13: entered promiscuous mode [ 595.770005][T24918] xt_socket: unknown flags 0x4 [ 596.444543][T24941] bond14: (slave bond_slave_0): Device is not bonding slave [ 596.444565][T24941] bond14: option active_slave: invalid value (bond_slave_0) [ 596.466074][T24941] bond14 (unregistering): Released all slaves [ 596.573784][T24947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4903'. [ 596.647489][ C0] net_ratelimit: 11 callbacks suppressed [ 596.647507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.648468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.648666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.650009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.651155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.727047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.727376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.727473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.727909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.728066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.871819][T24955] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4905'. [ 597.245981][T24961] Bluetooth: hci0: unsupported parameter 5161 [ 597.246019][T24961] Bluetooth: hci0: unsupported parameter 8192 [ 597.246050][T24961] Bluetooth: hci0: unsupported parameter 5161 [ 597.246077][T24961] Bluetooth: hci0: unsupported parameter 8192 [ 597.695770][T24972] netlink: 'syz.2.4911': attribute type 21 has an invalid length. [ 598.082439][T24989] xt_socket: unknown flags 0x4 [ 598.200830][T24991] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.206496][T24993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4918'. [ 598.227645][T24993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4918'. [ 599.156864][T25015] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 599.181308][T25015] bond14 (unregistering): Released all slaves [ 599.256062][T25020] netlink: 'syz.4.4923': attribute type 12 has an invalid length. [ 599.637660][T25037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4926'. [ 599.669014][T25037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4926'. [ 599.694329][T10330] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.694368][T10330] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.694400][T10330] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.694430][T10330] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.765319][T25040] netlink: 'syz.4.4927': attribute type 3 has an invalid length. [ 599.765647][T25040] netlink: 'syz.4.4927': attribute type 3 has an invalid length. [ 599.851652][T25046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4929'. [ 599.913477][T25049] Cannot find add_set index 34 as target [ 599.942482][T25050] Cannot find add_set index 34 as target [ 600.387547][T25059] netlink: 'syz.1.4933': attribute type 1 has an invalid length. [ 600.873248][T25075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4935'. [ 601.687412][ C0] net_ratelimit: 9 callbacks suppressed [ 601.687433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.687748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.698238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.698472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.705611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.706973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.767059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.767172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.767483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.768850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.020972][T25117] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 602.022390][T25121] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4947'. [ 602.022772][T25117] netlink: 'syz.2.4947': attribute type 1 has an invalid length. [ 602.108706][T25123] netlink: 'syz.4.4945': attribute type 2 has an invalid length. [ 602.426675][T25132] netlink: 'syz.4.4950': attribute type 21 has an invalid length. [ 602.426751][T25132] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4950'. [ 602.478041][T25132] netlink: 'syz.4.4950': attribute type 23 has an invalid length. [ 602.594573][T25135] netlink: 'syz.2.4951': attribute type 9 has an invalid length. [ 602.614805][ T5625] Bluetooth: hci5: unexpected event for opcode 0x0c12 [ 602.757301][T25133] nbd: socks must be embedded in a SOCK_ITEM attr [ 603.456196][T25153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4956'. [ 603.474571][T25153] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4956'. [ 603.639237][T25155] netlink: 'syz.4.4955': attribute type 7 has an invalid length. [ 604.008418][T25159] netlink: 'syz.3.4957': attribute type 29 has an invalid length. [ 604.009471][T25159] netlink: 'syz.3.4957': attribute type 29 has an invalid length. [ 604.147538][T25162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4959'. [ 604.491251][T25180] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4964'. [ 605.982950][T25219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4973'. [ 606.252761][T25222] ieee802154 phy1 wpan1: encryption failed: -22 [ 606.255418][T25222] netlink: 'syz.0.4974': attribute type 32 has an invalid length. [ 606.255453][T25222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'. [ 606.312511][T25222] bond10: option coupled_control: invalid value (209) [ 606.314119][T25222] bond10 (unregistering): Released all slaves [ 606.374369][T25226] vcan0: tx address claim with different name [ 606.727539][ C0] net_ratelimit: 8 callbacks suppressed [ 606.727561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.742253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.742493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.745016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.746566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.808198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.809181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.809926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.810202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.810497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.880649][T25186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.882109][T25210] netlink: 'syz.3.4971': attribute type 1 has an invalid length. [ 607.882129][T25210] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4971'. [ 608.341645][T25256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4984'. [ 608.395524][T25256] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 608.834874][T25278] dvmrp1: entered allmulticast mode [ 609.241845][T25298] ovs-dp0: entered promiscuous mode [ 609.243168][T25295] netlink: 404 bytes leftover after parsing attributes in process `syz.2.4998'. [ 609.243188][T25295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4998'. [ 609.243206][T25295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4998'. [ 609.243221][T25295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4998'. [ 609.315197][T25298] netlink: 'syz.3.4997': attribute type 1 has an invalid length. [ 609.315248][T25298] netlink: 500 bytes leftover after parsing attributes in process `syz.3.4997'. [ 609.340701][T25302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5001'. [ 609.946708][T25325] xt_socket: unknown flags 0x4 [ 610.015752][T25324] bond11: option mode: unable to set because the bond device has slaves [ 610.590971][T25354] lo: entered promiscuous mode [ 610.592837][T25354] tunl0: entered promiscuous mode [ 610.594545][T25354] gre0: entered promiscuous mode [ 610.661476][T25354] gretap0: entered promiscuous mode [ 610.771065][T25354] erspan0: entered promiscuous mode [ 610.805123][T25354] ip_vti0: entered promiscuous mode [ 611.274447][T25367] __nla_validate_parse: 9 callbacks suppressed [ 611.274483][T25367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5022'. [ 611.714319][T25387] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 611.767042][ C0] net_ratelimit: 9 callbacks suppressed [ 611.767067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.777419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.778253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.784613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.785836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.847080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.847191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.847494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.848397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.848756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.285399][T25397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5030'. [ 612.789648][T25421] xt_bpf: check failed: parse error [ 612.930477][T22416] udevd[22416]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 612.949366][T22416] udevd[22416]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 613.110210][T25423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5034'. [ 613.431573][T25443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5039'. [ 614.247867][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 614.664341][T25451] xt_socket: unknown flags 0x4 [ 614.698720][T25492] netlink: 'syz.3.5057': attribute type 1 has an invalid length. [ 614.978071][T25500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5060'. [ 615.084829][T25508] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5059'. [ 615.353724][T25517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5064'. [ 615.423457][T25519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5064'. [ 616.075759][T25534] x_tables: duplicate underflow at hook 1 [ 616.130762][T25538] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 616.807112][ C0] net_ratelimit: 8 callbacks suppressed [ 616.807131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.807822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.807989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.808766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.809809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.839614][T25571] 8021q: VLANs not supported on sit0 [ 616.882092][T25569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5076'. [ 616.882164][T25569] bridge_slave_1: left allmulticast mode [ 616.882183][T25569] bridge_slave_1: left promiscuous mode [ 616.882416][T25569] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.887166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.887564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.887693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.888715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.888917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.984776][T25569] bridge_slave_0: left allmulticast mode [ 616.984829][T25569] bridge_slave_0: left promiscuous mode [ 616.985195][T25569] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.043205][T25576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5074'. [ 617.140386][T25570] netlink: 'syz.2.5077': attribute type 14 has an invalid length. [ 617.270784][T25585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5080'. [ 617.295691][ T5625] block nbd4: Wrong magic (0x30783030) [ 617.693172][T25604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5085'. [ 617.718901][T25604] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5085'. [ 617.724043][T25604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5085'. [ 617.878001][T25615] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5087'. [ 617.945617][T25616] xt_socket: unknown flags 0x4 [ 617.986805][T25618] netlink: 'syz.2.5088': attribute type 24 has an invalid length. [ 618.013324][T25618] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 618.099086][T25620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5089'. [ 618.455867][T25637] batman_adv: batadv0: Adding interface: veth0 [ 618.455885][T25637] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.456140][T25637] batman_adv: batadv0: Interface activated: veth0 [ 618.502522][T25637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5093'. [ 618.502541][T25637] batman_adv: batadv0: Interface deactivated: veth0 [ 618.502557][T25637] batman_adv: batadv0: Removing interface: veth0 [ 618.698301][T25658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5099'. [ 618.698934][T25658] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 619.013071][T25659] syzkaller1: entered promiscuous mode [ 619.013093][T25659] syzkaller1: entered allmulticast mode [ 619.104234][T25662] syzkaller1: entered promiscuous mode [ 619.104275][T25662] syzkaller1: entered allmulticast mode [ 619.415869][T25682] xt_socket: unknown flags 0x4 [ 619.535809][T25694] x_tables: duplicate entry at hook 3 [ 620.005793][T25707] syzkaller0: entered promiscuous mode [ 620.005815][T25707] syzkaller0: entered allmulticast mode [ 620.282157][T25731] xt_socket: unknown flags 0x4 [ 620.442774][T25737] netlink: 'syz.3.5121': attribute type 1 has an invalid length. [ 620.498308][T25737] bond6: entered promiscuous mode [ 620.498732][T25737] 8021q: adding VLAN 0 to HW filter on device bond6 [ 620.579466][T25739] bond6: (slave bridge0): making interface the new active one [ 620.579487][T25739] bridge0: entered promiscuous mode [ 620.583507][T25739] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 620.711922][T25748] [ 620.714277][T25748] ====================================================== [ 620.721315][T25748] WARNING: possible circular locking dependency detected [ 620.728350][T25748] syzkaller #0 Not tainted [ 620.732767][T25748] ------------------------------------------------------ [ 620.739793][T25748] syz.2.5124/25748 is trying to acquire lock: [ 620.745863][T25748] ffff888027cc1828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 620.755374][T25748] [ 620.755374][T25748] but task is already holding lock: [ 620.762735][T25748] ffff888027cc1300 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 620.772930][T25748] [ 620.772930][T25748] which lock already depends on the new lock. [ 620.772930][T25748] [ 620.783346][T25748] [ 620.783346][T25748] the existing dependency chain (in reverse order) is: [ 620.792366][T25748] [ 620.792366][T25748] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 620.800997][T25748] blk_alloc_queue+0x544/0x690 [ 620.806332][T25748] __blk_mq_alloc_disk+0x194/0x390 [ 620.812024][T25748] nbd_dev_add+0x494/0xb60 [ 620.817034][T25748] nbd_init+0x168/0x1f0 [ 620.821803][T25748] do_one_initcall+0x250/0x870 [ 620.827109][T25748] do_initcall_level+0x10a/0x1a0 [ 620.832630][T25748] do_initcalls+0x59/0xa0 [ 620.837483][T25748] kernel_init_freeable+0x29d/0x3e0 [ 620.843225][T25748] kernel_init+0x22/0x1d0 [ 620.848080][T25748] ret_from_fork+0x514/0xb70 [ 620.853213][T25748] ret_from_fork_asm+0x1a/0x30 [ 620.858510][T25748] [ 620.858510][T25748] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 620.865739][T25748] fs_reclaim_acquire+0x71/0x100 [ 620.871203][T25748] __kmalloc_cache_node_noprof+0x66/0x620 [ 620.877449][T25748] create_worker+0x112/0x7c0 [ 620.882584][T25748] workqueue_prepare_cpu+0xe4/0x170 [ 620.888333][T25748] cpuhp_invoke_callback+0x434/0x810 [ 620.894153][T25748] _cpu_up+0x2ce/0x5b0 [ 620.898757][T25748] cpu_up+0x1d2/0x220 [ 620.903277][T25748] cpuhp_bringup_mask+0xb2/0x1a0 [ 620.908823][T25748] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 620.915163][T25748] bringup_nonboot_cpus+0x17/0x30 [ 620.920718][T25748] smp_init+0x32/0x110 [ 620.925363][T25748] kernel_init_freeable+0x27f/0x3e0 [ 620.931096][T25748] kernel_init+0x22/0x1d0 [ 620.935952][T25748] ret_from_fork+0x514/0xb70 [ 620.941070][T25748] ret_from_fork_asm+0x1a/0x30 [ 620.946369][T25748] [ 620.946369][T25748] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 620.954111][T25748] cpus_read_lock+0x42/0x160 [ 620.959234][T25748] static_key_slow_inc+0x12/0x30 [ 620.964698][T25748] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 620.971006][T25748] nbd_genl_foreach_sock+0x265/0x450 [ 620.976815][T25748] nbd_genl_reconfigure+0xbbb/0x1040 [ 620.982627][T25748] genl_family_rcv_msg_doit+0x233/0x340 [ 620.988774][T25748] genl_rcv_msg+0x614/0x7a0 [ 620.993806][T25748] netlink_rcv_skb+0x226/0x4a0 [ 620.999126][T25748] genl_rcv+0x28/0x40 [ 621.003633][T25748] netlink_unicast+0x7bd/0x940 [ 621.008934][T25748] netlink_sendmsg+0x813/0xb40 [ 621.014217][T25748] sock_sendmsg_nosec+0x13a/0x180 [ 621.019765][T25748] ____sys_sendmsg+0x54e/0x850 [ 621.025074][T25748] ___sys_sendmsg+0x2a5/0x360 [ 621.030293][T25748] __x64_sys_sendmsg+0x1b1/0x290 [ 621.035786][T25748] do_syscall_64+0x166/0x520 [ 621.040907][T25748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.047329][T25748] [ 621.047329][T25748] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 621.054977][T25748] __mutex_lock+0x19d/0x1550 [ 621.060097][T25748] nbd_queue_rq+0x373/0xff0 [ 621.065130][T25748] blk_mq_dispatch_rq_list+0x499/0x1990 [ 621.071208][T25748] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 621.078111][T25748] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 621.084668][T25748] blk_mq_run_work_fn+0x16c/0x300 [ 621.090222][T25748] process_scheduled_works+0xc3d/0x1630 [ 621.096295][T25748] worker_thread+0xa47/0xfb0 [ 621.101412][T25748] kthread+0x38b/0x480 [ 621.106000][T25748] ret_from_fork+0x514/0xb70 [ 621.111112][T25748] ret_from_fork_asm+0x1a/0x30 [ 621.116441][T25748] [ 621.116441][T25748] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 621.123673][T25748] __mutex_lock+0x19d/0x1550 [ 621.128800][T25748] nbd_queue_rq+0xc1/0xff0 [ 621.133746][T25748] blk_mq_dispatch_rq_list+0x499/0x1990 [ 621.139821][T25748] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 621.146670][T25748] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 621.153194][T25748] blk_mq_run_work_fn+0x16c/0x300 [ 621.158765][T25748] process_scheduled_works+0xc3d/0x1630 [ 621.164843][T25748] worker_thread+0xa47/0xfb0 [ 621.169965][T25748] kthread+0x38b/0x480 [ 621.174554][T25748] ret_from_fork+0x514/0xb70 [ 621.179669][T25748] ret_from_fork_asm+0x1a/0x30 [ 621.184968][T25748] [ 621.184968][T25748] -> #1 (set->srcu){.+.+}-{0:0}: [ 621.192097][T25748] __synchronize_srcu+0xc9/0x2f0 [ 621.197561][T25748] elevator_switch+0x1e8/0x7b0 [ 621.202849][T25748] elevator_change+0x2fa/0x480 [ 621.208138][T25748] elevator_set_default+0x375/0x440 [ 621.213872][T25748] blk_register_queue+0x3f3/0x4e0 [ 621.219429][T25748] __add_disk+0x6b8/0xdb0 [ 621.224300][T25748] add_disk_fwnode+0x100/0x3a0 [ 621.229594][T25748] nbd_dev_add+0x733/0xb60 [ 621.234530][T25748] nbd_init+0x168/0x1f0 [ 621.239212][T25748] do_one_initcall+0x250/0x870 [ 621.244500][T25748] do_initcall_level+0x10a/0x1a0 [ 621.249967][T25748] do_initcalls+0x59/0xa0 [ 621.254815][T25748] kernel_init_freeable+0x29d/0x3e0 [ 621.260534][T25748] kernel_init+0x22/0x1d0 [ 621.265391][T25748] ret_from_fork+0x514/0xb70 [ 621.270508][T25748] ret_from_fork_asm+0x1a/0x30 [ 621.275814][T25748] [ 621.275814][T25748] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 621.283641][T25748] __lock_acquire+0x164c/0x2de0 [ 621.289043][T25748] lock_acquire+0x115/0x350 [ 621.294082][T25748] __mutex_lock+0x19d/0x1550 [ 621.299201][T25748] elevator_change+0x1af/0x480 [ 621.304492][T25748] elevator_set_none+0xb5/0x140 [ 621.309864][T25748] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 621.316196][T25748] nbd_start_device+0x189/0xb30 [ 621.321567][T25748] nbd_genl_connect+0x167d/0x1cd0 [ 621.327129][T25748] genl_family_rcv_msg_doit+0x233/0x340 [ 621.333206][T25748] genl_rcv_msg+0x614/0x7a0 [ 621.338237][T25748] netlink_rcv_skb+0x226/0x4a0 [ 621.343530][T25748] genl_rcv+0x28/0x40 [ 621.348037][T25748] netlink_unicast+0x7bd/0x940 [ 621.353342][T25748] netlink_sendmsg+0x813/0xb40 [ 621.358628][T25748] sock_sendmsg_nosec+0x13a/0x180 [ 621.364181][T25748] ____sys_sendmsg+0x54e/0x850 [ 621.369480][T25748] ___sys_sendmsg+0x2a5/0x360 [ 621.374696][T25748] __x64_sys_sendmsg+0x1b1/0x290 [ 621.380172][T25748] do_syscall_64+0x166/0x520 [ 621.385297][T25748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.391719][T25748] [ 621.391719][T25748] other info that might help us debug this: [ 621.391719][T25748] [ 621.401944][T25748] Chain exists of: [ 621.401944][T25748] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 621.401944][T25748] [ 621.415684][T25748] Possible unsafe locking scenario: [ 621.415684][T25748] [ 621.423135][T25748] CPU0 CPU1 [ 621.428505][T25748] ---- ---- [ 621.433869][T25748] lock(&q->q_usage_counter(io)#54); [ 621.439252][T25748] lock(fs_reclaim); [ 621.445757][T25748] lock(&q->q_usage_counter(io)#54); [ 621.453670][T25748] lock(&q->elevator_lock); [ 621.458265][T25748] [ 621.458265][T25748] *** DEADLOCK *** [ 621.458265][T25748] [ 621.466406][T25748] locks held by syz.2.5124/25748: 6, last CPU#0: [ 621.472738][T25748] #0: ffffffff902c5cc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.480945][T25748] #1: ffffffff902c5b00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 621.489936][T25748] #2: ffff888027db49c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 621.501342][T25748] #3: ffff888027db48d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 621.512316][T25748] #4: ffff888027cc1300 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 621.522946][T25748] #5: ffff888027cc1338 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 621.533839][T25748] [ 621.533839][T25748] stack backtrace: [ 621.539734][T25748] CPU: 0 UID: 0 PID: 25748 Comm: syz.2.5124 Not tainted syzkaller #0 PREEMPT(full) [ 621.549145][T25748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.559203][T25748] Call Trace: [ 621.562489][T25748] [ 621.565424][T25748] dump_stack_lvl+0xe8/0x150 [ 621.570034][T25748] print_circular_bug+0x2e2/0x300 [ 621.575077][T25748] check_noncircular+0x12f/0x150 [ 621.580036][T25748] __lock_acquire+0x164c/0x2de0 [ 621.584906][T25748] lock_acquire+0x115/0x350 [ 621.589426][T25748] ? elevator_change+0x1af/0x480 [ 621.594374][T25748] __mutex_lock+0x19d/0x1550 [ 621.598974][T25748] ? elevator_change+0x1af/0x480 [ 621.603923][T25748] ? rcu_is_watching+0x16/0xb0 [ 621.608698][T25748] ? elevator_change+0x1af/0x480 [ 621.613634][T25748] ? __pfx___mutex_lock+0x10/0x10 [ 621.618666][T25748] ? enable_work+0x17f/0x230 [ 621.623285][T25748] ? lockdep_hardirqs_on+0x7b/0x110 [ 621.628506][T25748] ? __cancel_work_sync+0xf8/0x110 [ 621.633642][T25748] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 621.639118][T25748] elevator_change+0x1af/0x480 [ 621.643914][T25748] elevator_set_none+0xb5/0x140 [ 621.648769][T25748] ? __pfx_elevator_set_none+0x10/0x10 [ 621.654236][T25748] ? xa_load+0x1db/0x210 [ 621.658552][T25748] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 621.664386][T25748] ? kernfs_add_one+0xfc/0x6f0 [ 621.669208][T25748] ? nbd_start_device+0x17d/0xb30 [ 621.674256][T25748] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 621.680522][T25748] ? sysfs_add_file_mode_ns+0x258/0x300 [ 621.686081][T25748] nbd_start_device+0x189/0xb30 [ 621.690934][T25748] ? device_create_file+0xf4/0x1b0 [ 621.696120][T25748] nbd_genl_connect+0x167d/0x1cd0 [ 621.701151][T25748] ? __pfx_nbd_genl_connect+0x10/0x10 [ 621.706533][T25748] ? rcu_is_watching+0x16/0xb0 [ 621.711307][T25748] ? __nla_parse+0x40/0x60 [ 621.715770][T25748] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 621.722108][T25748] genl_family_rcv_msg_doit+0x233/0x340 [ 621.727666][T25748] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 621.733757][T25748] ? __lock_acquire+0x747/0x2de0 [ 621.738706][T25748] genl_rcv_msg+0x614/0x7a0 [ 621.743221][T25748] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.748272][T25748] ? __pfx_nbd_genl_connect+0x10/0x10 [ 621.753674][T25748] netlink_rcv_skb+0x226/0x4a0 [ 621.758459][T25748] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.763494][T25748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 621.768820][T25748] ? down_read+0x2be/0x330 [ 621.773257][T25748] genl_rcv+0x28/0x40 [ 621.777257][T25748] netlink_unicast+0x7bd/0x940 [ 621.782046][T25748] netlink_sendmsg+0x813/0xb40 [ 621.786822][T25748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.792117][T25748] ? apparmor_socket_sendmsg+0x98/0x360 [ 621.797674][T25748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.802967][T25748] sock_sendmsg_nosec+0x13a/0x180 [ 621.808023][T25748] ____sys_sendmsg+0x54e/0x850 [ 621.812812][T25748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.818114][T25748] ? import_iovec+0x73/0xa0 [ 621.822683][T25748] ___sys_sendmsg+0x2a5/0x360 [ 621.827374][T25748] ? __lock_acquire+0x747/0x2de0 [ 621.832332][T25748] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.837539][T25748] ? futex_wake+0x51b/0x5f0 [ 621.842081][T25748] ? __fget_files+0x2a/0x420 [ 621.846696][T25748] ? __fget_files+0x3a2/0x420 [ 621.851407][T25748] __x64_sys_sendmsg+0x1b1/0x290 [ 621.856361][T25748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.861842][T25748] do_syscall_64+0x166/0x520 [ 621.866441][T25748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.872513][T25748] ? clear_bhb_loop+0x70/0xc0 [ 621.873193][ C1] net_ratelimit: 10 callbacks suppressed [ 621.873280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.873745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.875946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.879057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.915067][T25748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.920969][T25748] RIP: 0033:0x7f504c79e159 [ 621.925399][T25748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.945014][T25748] RSP: 002b:00007f504d6ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.953437][T25748] RAX: ffffffffffffffda RBX: 00007f504ca25fa0 RCX: 00007f504c79e159 [ 621.961416][T25748] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000009 [ 621.969396][T25748] RBP: 00007f504c83506b R08: 0000000000000000 R09: 0000000000000000 [ 621.977379][T25748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.984145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.986733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.993720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.994052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.994369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.994684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.033680][T25748] R13: 00007f504ca26038 R14: 00007f504ca25fa0 R15: 00007fff30c12d08 [ 622.041678][T25748] [ 622.229558][ T5626] block nbd5: Receive control failed (result -32) [ 622.229570][ T5625] block nbd5: Receive control failed (result -32) [ 624.018090][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.018700][ T1311] ieee802154 phy3 wpan0: encryption failed: -22 [ 626.887305][ C1] net_ratelimit: 6 callbacks suppressed [ 626.887336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.887433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.887709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.888105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.888887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.048453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.048815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.049111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.049230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.049378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog