last executing test programs: 3.181271169s ago: executing program 3 (id=10987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000c40)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[], 0xd80}}, 0x2004c880) accept4$tipc(r2, 0x0, 0x0, 0x800) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000300)={'ip6gre0\x00', @ifru_data=&(0x7f0000000440)="1a4cf331728a2ab98f4b19a5a033e412b2a11fbbb6a3a9c9e6bea5f37dbca046"}) (async, rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000a40)={0x0, 0x0}, 0x0) (rerun: 64) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a80)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000ac0)={r6, 0xffffffffffffffff, 0x4}, 0x10) ioctl$sock_netdev_private(r4, 0x89f1, &(0x7f0000000480)) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r7, 0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=""/73, 0x4}, 0x20) (async, rerun: 64) r9 = socket$inet(0x2, 0x2, 0x0) (rerun: 64) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000800)=0x3, 0x4) (async) bind$inet(r9, &(0x7f0000000840)={0x2, 0x5e21, @empty}, 0x10) r10 = socket$inet(0x2, 0x2, 0x0) r11 = accept$unix(r2, &(0x7f0000000b40), &(0x7f0000000dc0)=0x6e) ioctl$FS_IOC_SETVERSION(r11, 0x40087602, &(0x7f0000000e00)=0xfffffffffffffff8) (async, rerun: 64) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000880)=0x9, 0x4) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="620ac4ff00000000711019000000000095"], &(0x7f0000000a00)='GPL\x00'}, 0x90) (async) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000d40)={0x48, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x6, 0x1, ']\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0xc, 0x1, 'ip6gre0\x00'}]}, 0x48}}, 0x0) (async) bind$inet(r10, &(0x7f00000008c0)={0x2, 0x5e21, @broadcast}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x0, 0x71, 0xd0, &(0x7f0000000480)="6205c2cb1f23aecef913008f9a13bb02f166006efc7f8f2207532f672b60e7643d1ce7cc2b7f5a396bfd5e50c3794d99cc807e1a471fba2b82cafae4ed54dfbedde441734cce2a5bc02b5ad75d26cf648ab1fad58e655fb8fcde8a1dd0f24eacfc1428bd1068682f3e46e814f058de5a1e", &(0x7f0000000500)=""/208, 0x9, 0x0, 0xac, 0x96, &(0x7f0000000600)="7cb11bf12e394ba73e6140351c4c6f9861d5a504ba7928b191e3f19f0ca941ffbcf1357cdce02b5dc361478425e1804ec2440ebd303d331006be522454871215e880750b15b6883de04b827f94af4494885a555edb99c0eecfb2b7b62743966b149fb752c1495a587bc3a7ab7326b3fe7994c20d7743c5d346e4d0ca894298ace74d13e82c9c9f910dce10dec8d396b26c1d64287f3ce581fffc2f995e367bff9c37ac95a589e80d08aa2029", &(0x7f00000006c0)="2cd73c2ab72413221a7fec8116d804cd815f056c23f7ee396b5f2e0b998600009380476c3782c8357fb22bc6f35a72558212a0940547df6010af455e4029070688de787bb2596f01bed1215c745e772d97ad04d03cb337dbca2cf836b4875a2a1d2e7dac1c09ab49f5691b2e90f29b98a8ca7f43d00b7f52e9c45edc88dd97c4cd247089b737ab2fed1f29b3c190debcb4a9b1b588a6", 0x4, 0x0, 0x7}, 0x50) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 2.862407806s ago: executing program 3 (id=10993): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x256, &(0x7f0000000200)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x220, 0x3a, 0x1, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "8cd86ff706598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x19, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}]}}}}}}, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000700)={{'\x00', 0x3}, {0x5}, 0xcb, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="92d787f5bcb3f8929cd435f8646472fc1cb9d949921fe48bd149839914eaa45e9c79", 0x22, 0x0, &(0x7f0000000480)={0x2, 0x1ab, {0x0, 0xc, 0xe8, "282a6c219b775cf939b657ae96bd1a41c0b839860daf8210e01cd15697a3cd7555078b8dd27386338d242a42194406987d962d4f251e7114b09af592864c08934e66c1664cf145fb8493b2d1a46ed5901cee0d95522c19a658b943b1590b96623e7ac3305ce218954de582fd67e616c6c4e2609c2c9e4de3a64ac1f54aaee588af39f61971aace537376618d4a269000c8d6add19e90018ea0a8b37a4ecf7668c86f45e92d9829450e4e3e064c1b8928c160343462463ed1c1f2d28fc416f094711fd0d48298ae5cc6bf6c7903a36f1b1f8070235dd9be18a01f0642b8d93b558ca0f4a8e5630ac0", 0xb6, "5e977a6c211a0dc2793ad4573283a7abdc2defb63129e3fe5cc355dde858e9cd1331b783b157cb98d508f17a562fbafc8748b91c66e166a16e1e5fdee260999ea02ed492423e159a88f61e20b038c96570aea0bd1e0690f50d3788e3a102a388fd3d5f010a70c25da0b4898ef1f6344d769f6cdc40a6577138fd4a6f121813f12f36ca1c21f54c8944f2edc7ebd8012d4d16b8bea06ee47b8240cd9345db43c6d821724dfcc1d1aab44da7427a26b8d93e3aeaf1156a"}, 0xaf, "e9bba7cbffce75899b58178b8351d752f9d52adbaa30c5bb6ce4f1e05157e5754c2a0ab1dd4a34178d0f028a400f5f0400114b6d2ab7977e5c98b75c57c26f0f2a4be67e16245f1498febfa9e358c66c6a8d2f939ada0af28f69b5215cb536ec72b96d032cb2a3aec9a3f7ccf7a863226e166f3549da166b8ffd193db8bd5ad96618d4add07a0fa99d26bfabdcbe5683d12545e471bae78e5b5427662f17730efeed681b3c6a1113f78f932c8e678a"}, 0x266}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x37) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 2.479686217s ago: executing program 0 (id=10999): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x9}, 0x0, 0x0, 0xf, 0x6, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, {}, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 'wlan1\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="24e42909e863", @empty, @dev={0xac, 0x14, 0x14, 0x18}, @empty, 0x18}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000200)={r1, &(0x7f00000000c0)='batadv\x00', 0x60240, &(0x7f0000000140)={@_ha_fsid={[0xd]}, {0x101, 0xff00, 0x0, 0x6}}, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)={0x30, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14, 0x19, {0x0, 0x0, 0xffffffff, 0xfffffffc}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x17, 0xd, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040001}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r5, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) 2.338286317s ago: executing program 0 (id=11000): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}}, 0x0, 0x4e}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x7ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x80, r0}, 0x38) r1 = socket(0x25, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newneigh={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000180)={0x4a1dfa2d, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) 2.162568238s ago: executing program 0 (id=11002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000002c0)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x20, 0x0, 0x0, 0xfffff00a}]}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000003e00070100001a000500f2ff037c000004"], 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000440)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x200000000000}) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f00000004c0)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000340)={@mcast1, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x9}, 0x20) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000380)=0x1, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000003c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) close(r8) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56343, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x8, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0xa, 0x8, 0xfffffff8, 0xd6, 0xbc3, 0xfffb, 0x40000007, 0x0, 0x3, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x4000009, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x3ff, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x3, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x8, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x1, 0x3, 0x1, 0x4, 0x7, 0x394, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0x100, 0x9, 0xa7, 0x7, 0x1, 0x0, 0x3, 0x3001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x9, 0x80485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x5, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x9, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x81, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8003, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x2000008, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x19b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x1, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x1, 0x6, 0xfad, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x80000001, 0xfffffffd, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x4, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x1000000, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x1, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x800003, 0xfffffff5, 0xc9, 0x5, 0x1, 0x10001, 0x400, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xffb, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x100007, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x300, 0x3f0a, 0x4, 0x9, 0x6, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0xb, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0xe, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x55e, 0x0, 0x2, 0x440, 0x1b8c, 0x9, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x3, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0x591, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x3, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x8, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x9, 0x2, 0x2d, 0x7, 0x7, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0xffff, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000001100)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001140)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000001180)={&(0x7f00000011c0)=@xdp={0x2c, 0xdd86, r13, 0x3e}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001280)="80", 0x1}], 0x1}, 0x4) 1.934000852s ago: executing program 2 (id=11007): socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000200"], 0x0, 0x44}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, r0, 0x4, 0x0, 0x1}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x7, &(0x7f00000001c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @exit, @jmp={0x5, 0x0, 0x9, 0x7, 0x9, 0x100, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', 0x0, r2, 0x4, 0x1, 0x3}, 0x50) connect$inet6(r0, &(0x7f00000009c0)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r0, &(0x7f0000000f40)={0x0, 0x953a, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.888789413s ago: executing program 2 (id=11008): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@migrate={0x50, 0x15, 0x1, 0x0, 0x1, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x1400000}}, 0x50}}, 0x0) (async) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000300), 0x4) (async) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0xfdef) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x40, 0xd, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, r3, 0x121, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "33638c2db505f61a26151c81bd"}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x7840}, 0x0) (async) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) close(r5) (async) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="58c3f52d693359e86df64acb1f9a37231bff66579c45b7a92b2ff88ebfbfbf7e912ff4e9300a63b6d7341b10c55325fde2815f493e", 0x35}, {&(0x7f00000001c0)="418437dc1dd1d4acaa60eab26a0c00f3ff79e54c51c629ba046d204b4970183790073c955691b591de12dcf7253dec0aeb23a0d48bdb3a61876f373aeca8bf504c112dbe2430420ea425577241a07691846a146a966246bd41af68680798b04fb734ac850d5ea21bf7977b6e20e8f6f9248533011fa364f4ec172c4c9781458e829ad953dfececda121a3427b267e2983e1dc88a7c1c62", 0x97}, {&(0x7f0000000340)="cb462cf47fa8191d4622318d391b0485f8849ad2e88f86c984458a6d7903bcf5cf25c710c92fb5dff1a9a982c0debeec6a458655c80a0929499a5b6e03dae7507226db5b366a9840937696376f5f179cd006ffc554738c20f6bfc5eb46a582f924fb64fbeb03932b2272e0b40303d59b940154c638bab869d7c34ff603e46f78d450a08aa78d4c8419274d79000879f496f18b380725f95a8a762e6da8454456d8692fe52cd3bf0d2b555b527505509df71084df68ba467ff48aba03f11aa6f8610e90748c1388cbe81060917e54ca55155bb2f363e3852e69c55e33875f326428cac7ebff09dd2fcc3ee850b91a22", 0xef}, {&(0x7f0000000440)="1a03a8c42327e6812ceb8b2726b67e1da527d66ef71f42d850386d6dd7b853fed16ec001c6", 0x25}], 0x4, &(0x7f00000004c0)=[{0x48, 0x29, 0x1, "89903d982bfb92cf2d3712ac92c5b317d763c8bc5201b5a402d67c05ead4b62d835e8b6d36ed4912a5586f90d5b3cf725c7102"}], 0x48}, 0x4000004) 1.887998627s ago: executing program 3 (id=11009): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa, 0x0, 0x8}, {0xfffffffffffffffc, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x1001000, 0x33}, 0xa, @in=@empty, 0x3507, 0x4, 0x1, 0x0, 0x5, 0x7c, 0xfffffffe}}, 0xe8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x2457, 0x3, 0x8, 0x5b, 0xe, 0x8, 0x54a, 0x2, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000280)=0x10) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.629885677s ago: executing program 1 (id=11011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040), 0x10) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @empty, 0x3}, 0x1c) shutdown(r0, 0x1) 1.62840426s ago: executing program 1 (id=11012): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async, rerun: 64) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x17, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES8=r1], 0x30}}, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100)={0x0, 0xffffffffffffffff}, &(0x7f00000003c0)=0xc) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000400)={0x8001, {{0xa, 0x4e23, 0x6, @local, 0x1}}, 0x1, 0x5, [{{0xa, 0x5, 0x0, @mcast2, 0x2}}, {{0xa, 0x4e24, 0x68f, @private2, 0x2}}, {{0xa, 0x4e22, 0x7e6d, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}}, {{0xa, 0x4e21, 0xc, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}}, {{0xa, 0x4e23, 0x3, @private2, 0x100}}]}, 0x310) 1.377616178s ago: executing program 4 (id=11015): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x800002}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'mh\x00'}]}]}, 0x30}}, 0x20000800) 1.352781722s ago: executing program 4 (id=11016): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffff8, 0x0, r0}, 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000007c0)={{r0, &(0x7f0000000000)='\x00', 0xc0100, &(0x7f00000000c0)={@align=0x7, {0xfffe, 0xfff, 0x0, 0x4}}, 0xfffffff9, &(0x7f0000000100), &(0x7f0000000140)=0x10000}, 0x6, &(0x7f0000000700)=[{0x2, 0x100, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="a7217dd78c17c9c348887f955ec7791f64ac874e9e1b31677033435c9b71852e4b288cea9c9d9e0f0bdea168ab1cf957c7c09fae5bd98af2cfbcc0cc52ade6720d7aa05cf0de021b1a7eb727f5e7f97def0b6374ca88621dce0e0272d770dab0c215c28d788cc18c52ec3fc0d6e82d3fe2b5341f719fe8e7be8a09", 0x7b, 0x20}, {0x0, 0x8, &(0x7f0000000240)='/#)$@\x06%\xba\x00', &(0x7f0000000280)="5cc10eff847a4d3a8fbd58627ce367b09017ca6bb6d416acc3c08d9e608dc64a67167e283b5f97d0ce68", 0x2a, 0x10}, {0x3, 0x2, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="8390b676444d1fa05bbac1e2e46ff791f8b9cfdd44ecd56473bed5981b6d0fec3adf357826c879ebdd2ddc4c37546be376d46ccc1f3f63b6a61d7321e2cdb2cea83f4ee34fb98cf4fbfe9d359752cdfd9fd9229961542941c7d8b3160d7d38f5aacba527d36b66d29465706f173fff0ce695b932edb49da3022813ad7abd5b2c6e1f34", 0x83, 0x12}, {0x1, 0x4, &(0x7f00000003c0)='\x00', &(0x7f00000004c0)="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", 0xfd}, {0x2, 0x7, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="92977015da307730515f5633fc651c3885c8d792", 0x14, 0x8}, {0x2, 0x3, &(0x7f0000000640)='\x00', &(0x7f0000000680)="e0259ea08716eecc303b23dadc3a2d07d051e22e2ab69dfa72ccd39d55a144d2ae01d52ce8c7dd22d739cbd7bc8676447955f1bed30658d271f7314cd3880ca198dc2018e1dccd5b3caedeed9fb59ec7d35c966434aa501706df9e6037a9e0a1fcaab2ed954fb03d6caf5eff17624510c797296d3f556a640e6b3dc17a75784a", 0x80, 0x22}]}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000900)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r5, @ANYBLOB="2700ee050a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x14040080}, 0x20000044) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x40888) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wg0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000b40)={@rand_addr, 0x0}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c00)={0x0, @multicast1, @empty}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x1, 0x1, 0x7, 0xffffffd2, {{0x14, 0x4, 0x2, 0x0, 0x50, 0x66, 0x0, 0x3, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x27}, {[@cipso={0x86, 0x27, 0xffffffffffffffff, [{0x0, 0x12, "65c59b12134e43ceb8a67d4677e45b3c"}, {0xec121bcd94673465, 0xf, "9fc3c3eb092ac49fd677615c0e"}]}, @ssrr={0x89, 0x13, 0xa6, [@multicast2, @loopback, @private=0xa010100, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'batadv0\x00', 0x0}) r16 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000dc0)={'bond0\x00', 0x0}) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket(0x1, 0x803, 0x0) getsockname$packet(r19, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000e40)=0x14) sendmsg$nl_route(r18, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r17, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r17, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r20], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r21, 0x8933, &(0x7f0000000f80)={'gretap0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000012c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001280)={&(0x7f0000001080)={0x1d0, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40}, 0x8080) 1.132727208s ago: executing program 0 (id=11017): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x2400c8c4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ff"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, r3, 0x25, 0x0, @val=@tracing={0x0, 0x9ac}}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000580)) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000040)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x20061, @private0, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="14", 0x1}], 0x1}}], 0x1, 0x48000) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000600)={0x0, 0xe1a3, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x8001, 0x0, 0x6, 0x6, 0xa}, 0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet6(r8, &(0x7f00000008c0)={&(0x7f0000000900)={0xa, 0x4e24, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x31}, 0x9}, 0x1c, 0x0}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000980)={'team_slave_1\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x5c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r12}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r0, 0x58, &(0x7f0000000b40)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'ip6_vti0\x00', &(0x7f0000000c00)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x4, 0x4, 0x2, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x2, 0x9}}) 1.06995618s ago: executing program 4 (id=11018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@ipv6_newroute={0x84, 0x18, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x9, 0xfd, 0x3, 0xfd, 0x2, 0x2200}, [@RTA_NH_ID={0x8, 0x1e, 0x2}, @RTA_PRIORITY={0x8, 0x6, 0x7fff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_PREF={0x5}, @RTA_ENCAP={0x48, 0x16, 0x0, 0x1, @ila=[@ILA_ATTR_CSUM_MODE={0x5}, @ILA_ATTR_HOOK_TYPE={0x5}, @ILA_ATTR_HOOK_TYPE={0x5}, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x3}, @ILA_ATTR_IDENT_TYPE={0x5}, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c840}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xb, 0xffc0, 0x9, 0x1, 0x6, 0x7, 0x4}}, {0xc, 0x2, [0x0, 0xf273, 0x10, 0x5]}}]}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x30, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x7}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in6={0xa, 0x4e21, 0x5, @private1, 0xa7d}]}, &(0x7f0000000180)=0x10) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f0000000600)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) 879.131343ms ago: executing program 2 (id=11019): r0 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) close(r0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "255997ca22b732c1542c50bbc9996f534ea92f5210ae32f2ebccd0bfb74fcdc990d375d1e5fdb057d9c84b503e3ef18e7be03e4a83202631564da34f5dae7c5a1fe8e1b4b6b291d1cbc35209b0123cfb6be3fa2ab694f723f98a6839134e650374d07ce13c2bf7227e612bb4c14a0f36e62fbb8949393e36138ddd74c6f8586769fe0164db1a30823bf0d8c936c6df64031db34caed881dcdab1cc755b15ec888604a4398d994c883488269a436490c44f41503c6edeabe2daa5e6abf805cb014ff54e0738c7823ab4f538eeb123974b06aa0c98913dc999168e61d3d018f515e44f9bcfba8618e0073c676b2c1dc047fcb45b9a334e4630ec436ed8cd9cc8b040bec55c3508e0831bcbe9b20960ff23f06e9c6147af8167ee1751ad5e569c4f3f86d9d35325c6f4f5797d3ce81e0c1c173bf169c4b883b936923ac8c9f9237f4b2ab1175023b87eb2f80af0f942c319ef355831f2837abea217b5819881f63881cf98473b689ba3a5399309969c1235e938d1d9075bdae3ef8c131ac65862545e4a90acdde13e1091ec56cd2ec2947569588c5c2ae9e19a1f8c59a3a699b576e9ecb294decf26a7259becb98e009814ae765e72f67422ff0fc7d52033926044211197e5c10062bb47a096d47f57c5a8e0525e87e7bab7c36479bff512bbc95569f855c2381ab37734ebd873bde2943db86a46748390b57f045ab5f548872627959be7fbbe6e62530e1c0b23d9850c676a942ac5a9b3f1112b3eba56ea3d4c5cb5f30c24f1c90a4af49de87ad4aef8901a52a370087e77f034f975c29d41fb1fd13a5d245c791cc1639ec4621b590e7fbe94c47cab7b0fc4ae36e31d8d7ce7e97387007be82544cfebf2d27e1a07d445e1b021a9f66e5a867076f94a596365a3085e09b7d7b7b2b3ab3bdd5259b7e7dd359d9413cd0412955d343bb37bab1cb35d4a0d430fbcbbac5d729609b5e3942159e3166928d6f320318ed40007f3040ce42b589b9eed97a0613b7b976a43c94773dc9ae01e0037754825145dccd8be2ea7e2b63aa1183cf3b43c42f5bcf11fcd731c44049abaf68d2901613488a96a1b415ca3d30ecf19ea072bf4f85ad94b7569e6d756d969503df9f5c70328a4875b5cb89b638c2ceda506642c6b7982895307c28c9d62ba6320d85671b993cac4dce0b6215df7215e7f2d9c64a1e05d89f7d42dd49072a2a90905d27692fee3094f3e84f1fa848cff2b9097e8ec7e8c9fd8570fe8472a6a8c33e73da031d4b65714cbbb8475cebd624f00edb2e16965807cdefac8ce6f5a71e946e603a64c7c373307e7b4e5378582c58d672535f53ec40ce9b67cffc78a7b5ec412f32e8bac1b16f0f12b51d1c37a9859c5986b9c1a28ed44b6045ff678d1862d745542f0cc972892048877c15d11c8619ff2421f614e2787343ee12382b25c800ddfe98e716708b926b123d3c1611c2916bbef3521be1992a0cf9a4830ce29b1dd4b288bba1e6d8600cb99563b2498dd90ca475aed4d68adba3f831e44f0521fc6593f2643d7f24b5c84c5b81632970cb1c92e9b28077d46272aa4edada063d9e291ad2907851e93bc2893ffd5f6b82510f54f180a4b73e468499bad769d2a694aeed22acae955cc6434da1134b481d1cfb774e0cc4771666f2c8cf346ae974875b05023648551b73c1f24488c1bd5870a481fff5bfbf6c8cc636060474a31fb7085b2b1dd283793e93165240c59665097910e3660f1fdc7129b21c02b4aea0e520ff1cf01be314c4e6ddc17a92b7dc20bc7aefad7aaccc52717557bd4f26efd9d526eee3c15ab7294774e9edf2f0fce161795cc2393c1ebd08fdafac7e293aafd16c2e3392ea244ea3c6d88dfd12f642d74b66b5402924921e1ea9a8eb16dbdf1ed9620191cf54a64f5e19b5a38a48f61bb163146104b0f90611f7fafa45c996ee552d8064349d9eafa38730697a88fcedbec87757cee056b1201fc5012f0aded141df49f65a72c7fccd6c89b1ba48e96b56754b41ef0175802979474548dd742894b3ea5a9282788cd24ae52c5db33ad1791aeac5b5a7f8ccd92c6f19521a7fd9d460309aa397ab9c6e7ec6072dac8e35d043f51b57f477c315bcfb13f40a3f0c966c58e74bdb94b8769de227b4ad8c13379574f7e9c2b141ddd3688927163c6b1132b310bb2b3790c4fdbfe9a80d622d248adb349fe62ee933ed8193df422c245a242e83984b31722609e755f3b584269b2dd0b267359484932e55966fea4b9706483027c9496d298a348ab56120cb0340df86e40a32a884618644eb7b8b26e4a4a88984fca71c1b434e1e1cbcd72545e1a73961fd5eaa8844369422f4986daf666a7a5e203efd004693d21e9ef8077346f0b420813626c03ea1bb8ee3b6ae8d5dcab2ca7694d9c1ebaadc60c613ea07125734622f04f522cbbd14eb69ebec55b409833cbef16a71fcd67bdaabb319c4db5514e7d8ea2c455745e8a8bdc24b7b588cf29a681e47c564290843210105b65a9330d00db2de6d87baf8db9c4bf891156dddca036d94a386569525e197cabe5b16e2628d37e17d96d96252f95f05cd58425d5ebdde79354b84a327f8e8bb3d07b0333e500964e38e28ce8606e8e683438b49b3d73c2c62561db11d629096b686a3c2ecf42bbae2814783a1a54b05e1e224a0d1ab237a1d6e4f8945d85cec904176e1b593b9b009baffcc37476cb89174153a13963c026160d233a729477fa9161bba9372c24d1bb9ef7ee8ea7e06d0e558828385278574d9f45545d7d9c25ff0623bb77b7faaebb9e695122a5cf24f2492bb790fcda4a8ba0c169f7456d9ab1e2b61522d05a29a91c1d79ad57a846ba4255b6f5a90e6f9b1d10792e1a72da1e0a3ced1abedae613ebb6e51209539aa6a44fdc352864fa0a86ce7468ed72d61abf0339361fc2a7ddff57ff73051719f2e9ba1960a28d45ffc6cd0900f8784e6115d5da55335a18ef23698a72237f5419950a78f19f4c1eb7170408323930c2e18b8733386887dfa35bea6e823aefbb7f939c47e083bbc7fd031312baf17782a7ccd6930b7ca1cbe0affd35888048146c4600a89f0d52bd6139245cffcdb8343cf44d7a1592ac0a59fc678a39164de75f1564383ecdfebd74034a4e019a57147b06c3c9cb62dbbf70b2edfd0c0fece770879f7286e878aee39c7f351e95f92d3e65df4b8d7ba55f8ef5e3f1b37d2064015988991812a05e93e63d07692dcfddb5c6845dc95815125ab7d5feb4980348b7c936e457675af8a1c1b2c34650a9c4bf1aeb72cc857a91b5dcd5841327b3cd17b3f3ce284dc7e27444bd01baa5a264cf433738a70367e2b95d5058e625af2ed6303e7c5c39afb15a80a89b9a837ee4fe4ca20a531e85259a66a4becdf2c24119be68286911b3c0450dae4887fee5d56dedbac41a5e9a9534942943a7ab4e4c06cca1c171f210f5842be17dc3143318906f7ae6a9365b8b9fee2185ca8e35ed6cf18f8aedd758d16b350d3eb34382b5519c43347af97b26d2ec3e65a2b1f97637c614dd7c0304b1a368474b83dbd9f0ffdea2f9ad21e9135ddf60f4abea1f116e920718ae4da1bb6db13055852a78b1c6bc02c0c53de35cfd8ad5cbaf4a9bde323eeebcb042af63b19f0b337b51be024fda85ad9b511616970b12d46915749b0dead17b6ea7cf06317746cdc981c165b0cec8159e827771fe92bd6a5962eb5da624f92de1b67203ffc9d77e7358ffce38131e583b3720c39c1165baa5ed1d24894e29d732b8188fac68db0dac3fc9dc011cf89f482bb990bf9d0d224e9e18d7be28061a67a7a39a5c029e293c20f9af62dba7f6f4cb0aff19eeb554a042694cad9ae76c85f55512a3a4f754befa501679f424c8f375b7fc2d55a39078a3ff0149ede323b836c1792ae5fff8561a33a1420d591f5a1ecfe561a19dcfcbcbef4537ff864206ffdf4b4d823b5fc1641e5b05bb0c1cab5b57fbb7d43c696bd312d8c62bf5408dc3fa575f48d9d666075e17e5f607ba1e8b011f169f9c174367382e89ee4c0c961300f9b31640316a6343b301ed355ef613075dfb1569f94be9e5c3be3967e1283fe10a573b9927982940a1232b82c385f7c8ccbad5c78c1776a1b6986ef775c09530c1844ed5ab0b4eb1dc3f74c0f55cad49ce6c82edef355f0de190f5eb20ec100e2dd47d9fc8c7f003e71bf560ae1ece8a5df7ac5b844eec4ed0e0a0580430a47c657fc28a50d71e27689950a53b8a0a1bf0794863c446803c6ad5e11d8ddaa635fc0adc9e2a8f5e786cef03b2fe8253ccf60e5329a7a4a467396ee4cfcb116a135310421e61e4ffe37fb5b1e52f79618a7e396f0706edf6518b4c9546faf4042dc230c512f0adee896474095f703a09eacc449dad7c87607d96ddf9d383be233da4885dea1ff31c58380c2be8f92e7f275dd9130aeb1b8974b1450906e4ac98cf740f2b6aef24c49bab80c0f92c1e0b9bde952c074871340772df11e73205345a796cc50843ddd578f0901e1c93c7d6acc7cc96233ec180eabfc710f02f9d2cb37a45b24fb670f7c4beaf590b8aa264810cbf92e7f82bb34da90c1422416490d28926ce2bcedd4ebb86e3fff9933b50671977e57d2f3ef543b0b6c228d7f3a39ac75955560f03105d3e87cd8065b99337f59a18feecc9a7353694f61e19a625ed28f8ac7d65c79d54c91515dbc3961c6a2d41c696bfa34d4c901a9c1e6a25ce742e2330c3c5003e0dca80715d396fab005b18d3558a93acf0d252582d17a6fc8314b244960396ba02c0a437182ea18d089e46252cb6eae3628f37926eeef90dcb75e01473cb503ae5796d5225b13f039387484b95d6c2379c61d6750187f01963fb276e036e50d04bed68e7cb06bd0754701809dd4baa160301dfdd2ab2a7c7cf5fdd0dc88ea10434ebacfd6fe742a58aaf8faeac9aa056ba83f7163a33c9846ed94859b980216b5470d48ed8a8382d5d8c5eee5a42447e0553f5db75b9296b11eb684c91897ef0d2822577b885853c71074946448b6f10f1ed3372ee6d75c7c00c7239e0c5ddcc8f512cf5a53ce73083e5d45330cc52166d34696e1a0b681382eaf0cc176ddecbb5e5e1bfd8a87540bfee7686f40a463da8e2ac9dfe37e0a4a80b37b6fee4e80b19dfd50456af6a72f29167dbeb3aa8fdf470a573022a98b5e119e0658711b5ce6317411cc2e750848c04e4e71b60c1a1c6320fb34d1ab56dc6c44c5b3b42c44c9b116b36e53c91dae5a899d4ea8acfcd6629e63c6a8a2afbacdccd0329d168024e102dc7d75932ce25a973e8f8e41815b67af5b2e11b80121999dafa9dd15e3b013a43f043593e6563030650a22ab429dd3482bcc1dedd93a6ca5267313818bd6e9671116e3c8fd532de828b8b520968af999316a656b139b7b7b999fdb58234cea0463efc91d1f7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001040)={r1, 0x0, "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", "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"}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000002180)={0x2, 0x7}, &(0x7f00000021c0)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000002040)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002140)=[{&(0x7f0000002080)="2b7fb797c11db198a3de8d8bddd3b04f0f66bf5b75b3bf4e48af0590087e4212ca0ac01f058351c832a7817279db6380f9573fd3cea864b1d625af2dc0f49b6a8a663c54f78f9f346477783fb9cd9fe57c7dcc08385932c8d17846f06a5ed5390a2e00cc22d6ea9e4b0e254a15ddca07782d4b91ec5013bf0461648bf413b14d3293", 0x82}], 0x1, &(0x7f0000002200)=[@sndrcv={0x30, 0x84, 0x1, {0xfd2, 0xcacf, 0x203, 0x7, 0x10, 0x5, 0x8, 0x22be, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x6, 0x1, 0x4b, 0x3, 0x3, 0xfffffffd, 0x8}}], 0x78, 0x20008881}, 0x20004004) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f00000022c0)={0x3, {0xc, 0x41a, 0x7, 0x3, 0x8}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000024c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)={0x88, r4, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x400, 0x73}}}}, [@NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "63386e8d7139488c6377c686e8"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e34e58b8f1"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "97cb39a813b184dabc663f7e6e"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "994613e883"}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000001) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000002500)=""/223, &(0x7f0000002600)=0xdf) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000002680)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @multicast1}, 0x2a0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002640)='bridge_slave_0\x00', 0xb6db, 0x1, 0x10}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002740)=@filter={'filter\x00', 0xe, 0x4, 0x4f0, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, &(0x7f0000002700), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff, 0xff, 'pimreg\x00', 'gre0\x00', {0xff}, {0xff}, 0xc, 0x3, 0x40}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip6gretap0\x00', {0x1}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0x0, 0xffffff00], 0x4e22, 0x4e23, 0x4e24, 0x4e21, 0xa9, 0x6, 0x8, 0xef9d, 0x4}}}, {{@ip={@remote, @remote, 0x0, 0xff, 'veth0_to_hsr\x00', 'lo\x00', {}, {}, 0x8, 0x2, 0x1}, 0x0, 0x228, 0x288, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'erspan0\x00', 'netpci0\x00', 0x2, 0x0, 0xfffffff9, 0x5, 0x2, 0xb, {0x6}, {0x5}}}, @common=@inet=@hashlimit2={{0x150}, {'macsec0\x00', {0x6, 0xffff, 0x8, 0xf2b2, 0xfffffffe, 0x80000001, 0xffff028e, 0x20, 0x80}, {0xffffffffffffffff}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, 0xc898, 0x4, [0x10, 0x16, 0x1b, 0x33, 0x10, 0x39, 0x1d, 0x25, 0x3b, 0x2d, 0xe, 0xb, 0x1, 0x3d, 0x3f, 0x2b], 0x2, 0x751, 0x401}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d00), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x24, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xd}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000051}, 0x800) r7 = accept$inet(r0, &(0x7f0000002e00)={0x2, 0x0, @private}, &(0x7f0000002e40)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000002e80)=@sack_info={r2, 0xa76, 0x6223}, 0xc) r8 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000002ec0), &(0x7f0000002f00)=0x10) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000002f40)=0x0, &(0x7f0000002f80)=0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003000), r3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000003040)={@private0, 0x0}, &(0x7f0000003080)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000032c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003280)={&(0x7f00000030c0)={0x194, r10, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4008000}, 0x8080) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000003300)={0x0, 0x1, 0x7, r11, 0x10}, 0xc) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000003340)={0xfffffffd, 0x2, 0x8, 0xfffffc01, 0x6}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000003380)=0x2, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000034c0)={r7, &(0x7f00000033c0)='filter\x00', 0x400000, &(0x7f0000003400)={@align=0x8, {0x0, 0xfff, 0x200, 0x8}}, 0x4, &(0x7f0000003440)={@_ha_fsid}, &(0x7f0000003480)=0x10001}) setsockopt$MRT6_ADD_MFC_PROXY(r12, 0x29, 0xd2, &(0x7f0000003500)={{0xa, 0x4e23, 0x3, @empty, 0x2}, {0xa, 0x4e22, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x0, {[0x80, 0x4, 0x2, 0x1, 0xfff, 0x0, 0x23, 0x8]}}, 0x5c) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000003580)) 860.207375ms ago: executing program 3 (id=11020): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)="c930000307dc72d6", 0x8}, 0x1, 0x0, 0x0, 0x20000800}, 0x4810) 778.240952ms ago: executing program 4 (id=11021): r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80c0) sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r1, 0x7, 0x4b8, 0x1d134d2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@delqdisc={0x30, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x90}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r7, 0x20, 0x8000, 0x5, 0x1, {{0x25, 0x4, 0x0, 0x2, 0x94, 0x66, 0x0, 0x3, 0x2b, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0x8, "d047e48d003c"}, @end, @rr={0x7, 0xb, 0x4d, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x4b, 0x3, [{0x2, 0xb, "3e4ad4fe1249b148ed"}, {0x2, 0xb, "f923f1b278992fb919"}, {0x2, 0xd, "a0dba341c334db8d1707ba"}, {0x0, 0x5, "b3d083"}, {0x4, 0x3, "96"}, {0x1, 0xf, "f1374a22ebd5f87a598b2ab989"}, {0x1, 0xb, "86e5d1b21ecfceeb79"}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x9c, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @rr={0x7, 0x7, 0xfc, [@loopback]}, @noop, @timestamp_prespec={0x44, 0xc, 0xab, 0x3, 0xf, [{@multicast1, 0x6}]}]}}}}}) 639.775252ms ago: executing program 1 (id=11022): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001000000800000003535b3d215ee0169395f"], 0x48) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x1cf7, 0x1000, 0xdb, 0x4, 0xffffffff]}, &(0x7f0000000200)=0x54) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1401000036000100000000000000000001ce39800c00af000400000008000000140004000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fa82a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348d16c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0eb43d9621dc08c029d1608a487f26fbe8101000000011000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce47009d678e2d65027d9e5f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd00000000"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="c713c6985528a30edf8642c12ea6eaa5760a00000000183961f10f81adc23ea90ebb043edbc59bb5109800000100001800"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) 606.379704ms ago: executing program 2 (id=11023): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="1000018004"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f0000000300), 0x40000000000009f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x96f, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'gre0\x00'}) pipe(&(0x7f0000000e80)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0x10000008ec0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESHEX=r2, @ANYRES64=r6, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xa, 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xe, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x6, 0xc, &(0x7f0000001440)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000001540)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002", 0x2f}, {&(0x7f0000000540)="f80aa072aef8f193fa8d08f16bf75ff963a413616d9f83c04b9af360b2c1094b1142f2b5a11e93ead5578843779567323c45e3fdef398819cf", 0x39}], 0x2}, 0x4004) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000580)=0x100000001, 0x4) connect$inet6(r11, &(0x7f00000005c0)={0xa, 0x4e22, 0x1, @empty, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r11, 0x1, 0x19, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000e40)=[{{&(0x7f0000000680)=@isdn={0x22, 0xd, 0x4, 0x8d, 0x4}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000700)="71a735cdd2ee747c15e979bcff41d4a8d755b0", 0x13}, {&(0x7f0000000740)="e09b0a418f85bda779ca12711951db3c86801eed4bde131084b2f98cadb653b7fcca400a85bfad3a0d2592963c0b9c30d84593cc66731c2ca5f54cfeca0096770a64989ecbbd972af20c594365008f7651ace4da698e11268673d994f1049e1930f58c8616c0ccf4c4e80bb92d148916be355d0f057c8e12b665fa3f7b3263a379bb9ed2d7770a2cf20374e088a58f3823699103ecd1ed0c2ebe226c17a6b7b125c5e228d88eb2e73590186aec4bc872a9a7073bd9e89e881664f464f6b872651b645ac77e7b787f45", 0xc9}, {&(0x7f0000000840)="b28c6b61a755c39e1213c38034ab3c6f6be67ea6e84818a961bb086fdc1ab8a6a136", 0x22}, {&(0x7f0000000880)="213efd538a37bf5375fbae60a16e777cba372ed27cab6dd36336c576a7060226b6ecc4dee644ece06b06bedbc38bf0fccd860eb729952c7b55fd15efc54d9f5b560c14475fa0ede0a2b81e65f2307487e6b067f458814e40b27562a61cfce657de177b6049ca3dbad57b9c80791c52548297e5d1f4a3348ae1deb1baeafee23792a640e1df9aecc4f19908ee23b21aee59fdf53f9ddec5b282e5c44fb1a00c89b205ae96c4fcf0534aec615bb7cb7935ee8365be8487462b138b0bf285845f1d290ea89cb18f53004c078d6085886be16bc5", 0xd2}, {&(0x7f0000000980)="8b969e1bdccc252e5c66ea18c00c23297e3f16bbc88e22d62d7ea36a45bdde8900963f7aa52c94327090a018fe9af4286dc47f1b2313805982224a31cbc29d102d100b6aec946e84e98986a701400da3d5bcb93baa451d2a902517cbb80229f47207deda52cb4fb96e30d7845d461bfebe2a66131d83142c5caae134e06518903bb1015149eeec38e0a4f19dcf2924f39a55f7180726cd63e5dc81611fa7001df04307cc4795ee5cb5a2d27370e2", 0xae}], 0x5, &(0x7f0000000ac0)=[{0xc0, 0x101, 0x7, "789c2b008f1aa7125687d5148a538b60822663685bc983bafe81b0c5e629ab712150d06b2eefeefcac8e5162ea2d1d2519c9ecf3d0aa0db904a87d10909eb555a9af256968a5543c0c0535a1ea9c46a13f7bcbf64bc141fb985a57ff89d1d62189eb97832d5570438a9b5033b10f50e7356e318ecb952f5461e7bcd34ce496568340d728a710a25498850f5f48cb2cc9526da4ab3b99437500cfe34de0e905eee16f80bb86231b0f855d5cd289"}, {0xb8, 0x84, 0x6, "b21b49bdb1ce605779f02ebf02236e9a441fb9bfba65082fcb1f3133ef504f8e27fcffaa8f5bb05d5f28cca1a6d0606eb82edd7eced3660c936d25fe8e440ad0af0e8a2259794cb1705981270b5811817ee49a5d51b5adfe50b98de48aa07dfa4aca75edc845ffdb7110e91abce9aa0a36306127ccc1cc8089899db019366baac478490fcb7e3d82a0bdff9ae1970435ef98b662670e73d647fbea900404556a45d515f4595405"}, {0x70, 0x10b, 0x10, "aa09a0965b882737815c801da8bb2fecf607ff2b453f6b9a2db51611c043df6cd94257ac01bf642cdc89b8fb11ee5c25e695e7b4ad988fcc2a5336d1385e51cdf412a947d41dafee92a93ac539d6d7138033ff072ea2c09747541682b3"}, {0xf8, 0x10d, 0x96f, "6fe8eeb6673339183d87536197e2ce441c605bf814916d2f79e436046068da457b8c1aa96374fba85ef97dd74c704ef2004ce9ab01d9dadcc7aa2436cd9f9d26ca8278949c68ae89ad608e32311fa674c5517e4c94b86126a8e9f078403a0e0e573fa2223e562e8bb29e4de2a9319dce0a7973760b0e376b812110f5109fc37fe6c0ecba5c231e700a09214ee326ea1f1fab67c0ccab297facdf650dc7029d173258cb7145912290324b087dd8f7a3af4c6e1a5549814ee1341d515f08578efd6023cbc5eb5c7c6ae00c01ab6e8996452f0c371df491c7d1312e55ec135ac3761577ccd0b9a8cc7e"}, {0x88, 0x109, 0x2, "2747324350ef6411f22612ea45d61508151b2bd3b8b484af50b3caf9123c873c779282e36951a5ce3c8d09dd5fd55bc7f7df4e197ed31873e0246068969c9f07c04684349674574117853b66a7ff04f5bf8ba83c1e2315658ca1c09564c7974e5b231492dd2cad63640ef6c454797b4c3f"}], 0x368}}], 0x1, 0x400e0c0) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000600), 0x3) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="0303350051edef7214e4ff9342630400000003a25f42121e467e102d"], 0x28) 558.088463ms ago: executing program 3 (id=11024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@deltaction={0x13c, 0x31, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x52}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'ct\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff75a}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x13c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (async) close(r0) 452.405308ms ago: executing program 1 (id=11025): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r3 = socket(0x1d, 0x2, 0x6) accept$inet(r3, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x1, {[@mss={0x2, 0x4, 0x7}]}}}}}}}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="06"], 0x9) 326.934812ms ago: executing program 0 (id=11026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x1820, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x12, 0x80000) recvmmsg(r3, &(0x7f0000002dc0)=[{{&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/80, 0x50}, {&(0x7f0000001340)=""/193, 0xc1}, {&(0x7f0000001440)=""/223, 0xdf}, {&(0x7f0000001540)=""/113, 0x71}], 0x5, &(0x7f0000001640)=""/119, 0x77}, 0x7fff}, {{&(0x7f00000016c0)=@nl, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001740)=""/26, 0x1a}, {&(0x7f0000001780)=""/127, 0x7f}, {&(0x7f0000001800)=""/34, 0x22}, {&(0x7f0000001840)=""/178, 0xb2}, {&(0x7f0000001900)=""/73, 0x49}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/226, 0xe2}, {&(0x7f0000002a80)=""/136, 0x88}, {&(0x7f0000002b40)=""/237, 0xed}], 0x9, &(0x7f0000002d00)=""/143, 0x8f}, 0x35f4b0f7}], 0x2, 0x40, &(0x7f0000002e40)) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) 278.346307ms ago: executing program 4 (id=11027): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xe833ef9e8655e174}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x16, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x40040) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) 175.103618ms ago: executing program 1 (id=11028): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000001010100000500010008000000080004"], 0x2c}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000500), 0x4000000000001f2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000480)='\x00', 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="10005e80080005006000000004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 168.811365ms ago: executing program 3 (id=11029): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x2, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x20, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x13, 0x0, 0x0, @fd=r1}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="d78bdc9f"]}]}, 0x20}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x194, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1db}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7cd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (rerun: 32) 162.663606ms ago: executing program 2 (id=11030): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000060000000000000700000000020000000000001201000000002e5f00000030dc30"], 0x0, 0x3a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x2, 0x8, 0x8}], 0x10, 0x10001}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075b, 0xffffffff}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) syz_emit_ethernet(0x76, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000004000403a00fe0000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 54.139498ms ago: executing program 0 (id=11031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000005200000008000300", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x0) (async) r3 = socket$kcm(0x29, 0x5, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x4, 0x9, 0x9}, 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r6}, 0x50) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xd, &(0x7f0000000840)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x0, 0xe, 0x0, &(0x7f0000000980)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000240)=0x100) sendmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x44080) (async) pipe(&(0x7f0000000100)) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000440009012dbd7000fedbdf25057c00000800028004004d00"], 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000020000000a0000000000000c0400000002000000000100000000000000000000000000030065596c7100000005000001020000060700d53b3de77ce1d5d0b3ac353c1f9f7bdf39780bef082c4b6d568931a4d44866ed9421ee84c5e103e71b1d33bfdce5c30137f6fc13513a6aaf2914036f2e4be32fea4dff239969ddfb70"], &(0x7f0000000080)=""/43, 0x4a, 0x2b, 0x0, 0xfd, 0x10000, @value=r10}, 0x28) sendmsg(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 53.544675ms ago: executing program 4 (id=11032): socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}, 0x1, 0x0, 0x0, 0x8805}, 0x400400c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000140)=0x2, 0x4) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x2, 0x1}, 0x10) sendmsg$tipc(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) 31.812806ms ago: executing program 1 (id=11033): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000600)={0x40, 0x2, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0x6, 0x5, 0xae3}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80000}, 0x4) sendmsg$tipc(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001980)=""/180, 0xb4}, 0x4}, {{&(0x7f0000001a40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001ac0)=""/112, 0x70}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/95, 0x5f}, {&(0x7f0000002bc0)=""/54, 0x36}, {&(0x7f0000002c00)=""/65, 0x41}], 0x5, &(0x7f0000002d00)=""/62, 0x3e}, 0x6}], 0x2, 0x100, &(0x7f0000002dc0)={0x77359400}) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000280)='j&[^\x00', 0x1, &(0x7f00000002c0)={@_ha_fsid={[0x10000, 0x7]}, {0xff, 0x5, 0x8, 0x5}}, 0xfffffe00, &(0x7f0000000340), &(0x7f0000000380)=0x8}, {[0xe, 0x1ff, 0xd, 0x5]}, 0xb, 0xc1, &(0x7f00000003c0)=""/193}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000540)={0x1}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000700)={0x84, @remote, 0x4e24, 0x2, 'rr\x00', 0x22, 0x3, 0x2c}, 0x2c) 0s ago: executing program 2 (id=11034): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000700)={{r1, &(0x7f0000000080)='\\\x00', 0x2, &(0x7f00000000c0)={@align=0x400, {0x9, 0x7, 0x0, 0x200}}, 0x7, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xffff1716}, 0x5, &(0x7f0000000640)=[{0x1, 0x7df, &(0x7f00000001c0)=']:\x00', &(0x7f0000000200)="e09f85f047", 0x5, 0x1a}, {0x2, 0x1, &(0x7f00000002c0)=')(-\\{,,[^%^\\)\\-}!\\\x00', &(0x7f0000000300)="f4d80ab764e61ff9b994b2625e04e80aa3b0dc4e3f241e3d167e8c0e47363dede2b9db35d973c74c8a59", 0x2a, 0x2a}, {0x1, 0x3, &(0x7f0000000340)='&@-\x00', &(0x7f0000000380)="55bd1770ada12218f719f7bd072352d4f76ad5614063746da144cb9b177f50921db9d04f8c6def98ec85b055fe5b8af4a95078506dc12425a1d82eeac7746f312930679d19422c7e6c7530b92ba70a2d", 0x50, 0x30}, {0x1, 0x65, &(0x7f0000000400)='[,\x00', &(0x7f0000000440)="19af1223dba6d7650746f66a9e7b2380cd4644b33dc508e9a1a3a2513d4d645f8c50c2ed0880f9bcf151aa24e08dc106c8ae17b88f829cd863b4a8e40ee959906a77b11e914618d00bb24ae7be64b711b6f9ab36b8e986f5ed2e93ce4c6547da3334dfa9c25de77e3fe0aac9650e8b13ab36fb1057bedaf40fbd4c1346a3202dc471f0536ae2672c434d19676093108fce3014e037df5abfb913a5241ddb8edcf1e7286b469fb59fa378c3cc72160fb197b243b9cf9cafcd", 0xb8, 0x8}, {0x2, 0x28, &(0x7f0000000500)='}#[+-]-}\x00', &(0x7f0000000540)="72c5c387b68360f4a8052745209e81df7e4550f936c5f5d2629d9912f182b8d6d99965bf68e767c07f8c585c00fb27edac2e9981a99b9dc718b16f5b3b8e071b12e961a53e27fddca0f7c9660338222429c12c47f6107b579f190f67583ff226e915b9083586cadd52f3aa3e3adca99ba45c42d31e1859a55864123c18d911d4978fd6856b6a4a5a0be436423c01e56bd56516afa3302dd6b67d9b0375b56d0521f6ab5bb3ee66c95e22464e4c3c07ad19c2f21577d9d3c4bc861f7edef72924b02b22c419dfc9e2477b792966ef021cdafae32f3efd7a9cc42a01643cabaf7aed", 0xe1, 0x3c}]}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0x9, 0x1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000780)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000007c0)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000800), 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000b70000000200000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r5, 0x0, 0xe, 0x0, &(0x7f0000000dc0)="0100000500cd960002c85df0e900", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): ed [ 1351.419935][T11144] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9298'. [ 1351.441730][T11140] xt_CT: No such helper "pptp" [ 1351.581372][T11154] netlink: 'syz.3.9300': attribute type 1 has an invalid length. [ 1351.945296][T11154] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1351.998158][T11159] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9301'. [ 1352.124269][T11157] bond10: (slave geneve3): making interface the new active one [ 1352.162591][T11157] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 1353.019110][T11159] team0: Port device team_slave_1 removed [ 1354.064333][ T13] IPVS: starting estimator thread 0... [ 1354.147120][T11203] IPVS: using max 26 ests per chain, 62400 per kthread [ 1354.183107][T11198] ip_tables: iptables: counters copy to user failed while replacing table [ 1354.276210][T11206] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1354.295411][T11195] syzkaller0: entered promiscuous mode [ 1354.295434][T11195] syzkaller0: entered allmulticast mode [ 1354.328332][T11209] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1354.395265][T10823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.395704][T10823] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.396022][T10823] bridge_slave_0: entered allmulticast mode [ 1354.404203][T10823] bridge_slave_0: entered promiscuous mode [ 1354.640936][T10823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.641581][T10823] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.641913][T10823] bridge_slave_1: entered allmulticast mode [ 1354.665010][T10823] bridge_slave_1: entered promiscuous mode [ 1354.721091][T11207] syzkaller1: entered promiscuous mode [ 1354.721114][T11207] syzkaller1: entered allmulticast mode [ 1354.758757][T10823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.762064][T10823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1354.814087][T10823] team0: Port device team_slave_0 added [ 1354.823306][T10823] team0: Port device team_slave_1 added [ 1354.902482][T10823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.902502][T10823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.902529][T10823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1355.351840][T10823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1355.351859][T10823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.351886][T10823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.722171][T10823] hsr_slave_0: entered promiscuous mode [ 1355.727478][T10823] hsr_slave_1: entered promiscuous mode [ 1355.729162][T10823] debugfs: 'hsr0' already exists in 'hsr' [ 1355.729179][T10823] Cannot create hsr debugfs directory [ 1356.645221][T11263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.645919][T11263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.827524][T11263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.833568][T11263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1357.086497][ T3393] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.086565][ T3393] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.086600][ T3393] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.086643][ T3393] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.331601][T11280] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1357.453631][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1357.535185][T11292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9327'. [ 1357.619185][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1357.624121][T10823] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1357.624157][T10823] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.697827][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9330'. [ 1357.705238][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9330'. [ 1357.854955][T11288] netlink: 19 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1357.922310][T11293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1358.034989][T10823] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1358.035026][T10823] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.178640][T11313] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1358.215234][T11288] batadv1: entered promiscuous mode [ 1358.215415][T11288] batadv1: entered allmulticast mode [ 1358.313985][T10823] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1358.314039][T10823] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.624943][T11329] netlink: 'syz.2.9336': attribute type 3 has an invalid length. [ 1358.694931][T11329] tipc: Trying to set illegal importance in message [ 1358.815883][T11325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.093570][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9338'. [ 1359.093604][T11338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9338'. [ 1359.714966][T11357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1359.839161][T10823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1359.869988][T10823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1359.878391][T10823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1359.929144][T10823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1359.937732][T10823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1359.976215][T10823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1359.981800][T10823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1359.993363][T11371] netlink: 'syz.1.9345': attribute type 11 has an invalid length. [ 1360.055958][T10823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1360.083160][T11373] macvtap0: entered allmulticast mode [ 1360.083184][T11373] veth0_macvtap: entered allmulticast mode [ 1360.425196][T10823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1360.462042][T10823] 8021q: adding VLAN 0 to HW filter on device team0 [ 1360.479602][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.479705][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.494551][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.494654][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.722811][T11404] xt_CONNSECMARK: invalid mode: 0 [ 1360.792983][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9352'. [ 1361.283839][T11441] syzkaller1: entered promiscuous mode [ 1361.283864][T11441] syzkaller1: entered allmulticast mode [ 1361.739619][T10823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.353100][T10823] veth0_vlan: entered promiscuous mode [ 1362.372151][T10823] veth1_vlan: entered promiscuous mode [ 1362.450424][T10823] veth0_macvtap: entered promiscuous mode [ 1362.468091][T10823] veth1_macvtap: entered promiscuous mode [ 1362.494853][T10823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.518048][T10823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.558539][T26144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.697843][T12145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.697891][T12145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.697925][T12145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.444621][T11393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1363.640368][T26148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.640390][T26148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.641151][T26148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.641166][T26148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.918659][T11480] netlink: 'syz.1.9359': attribute type 1 has an invalid length. [ 1364.181653][T11480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1364.344284][T11483] bond2: (slave geneve2): making interface the new active one [ 1364.361851][T11483] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1364.385171][T11498] netlink: 'syz.4.9220': attribute type 4 has an invalid length. [ 1364.398802][T11499] netlink: 'syz.4.9220': attribute type 4 has an invalid length. [ 1364.642305][T11487] team0: No ports can be present during mode change [ 1365.053336][T11512] sctp: [Deprecated]: syz.0.9365 (pid 11512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1365.053336][T11512] Use struct sctp_sack_info instead [ 1365.364332][T11526] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1365.459529][T11530] __nla_validate_parse: 1 callbacks suppressed [ 1365.459550][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9369'. [ 1365.485336][T11528] can: request_module (can-proto-0) failed. [ 1366.049155][T11544] openvswitch: netlink: EtherType 50a is less than min 600 [ 1366.065100][T11545] openvswitch: netlink: EtherType 50a is less than min 600 [ 1366.253148][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9377'. [ 1366.505436][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1366.527409][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1366.528708][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1366.530215][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1366.532314][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1367.136668][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9383'. [ 1367.250377][T11579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9385'. [ 1367.289577][T11576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1367.318269][T11580] macvlan2: entered promiscuous mode [ 1367.318292][T11580] macvlan2: entered allmulticast mode [ 1367.332762][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9383'. [ 1367.858293][T11592] netlink: 'syz.4.9389': attribute type 1 has an invalid length. [ 1368.021298][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9389'. [ 1368.162992][T26148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.163032][T26148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.522257][T11596] syzkaller1: entered promiscuous mode [ 1368.522281][T11596] syzkaller1: entered allmulticast mode [ 1368.593460][T11610] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9391'. [ 1368.639879][ T5642] Bluetooth: hci4: command tx timeout [ 1368.729331][T26148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.729367][T26148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.973638][T11618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9393'. [ 1368.984793][T11556] tunl0 speed is unknown, defaulting to 1000 [ 1369.168254][T26148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1369.168290][T26148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.420749][T26148] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1369.467964][T11627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1369.522223][T11631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1369.655674][T11634] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1369.658283][T26148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1369.658314][T26148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.701219][T11556] lo speed is unknown, defaulting to 1000 [ 1369.716743][T11632] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1369.716864][T11556] rxe_eth0 speed is unknown, defaulting to 1000 [ 1369.772419][T11637] Set syz1 is full, maxelem 2 reached [ 1370.125052][ T152] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1370.169448][T26144] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1370.362015][ T152] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 19999 - 0 [ 1370.362084][ T152] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 19999 - 0 [ 1370.438989][T26148] wg1: left allmulticast mode [ 1370.439089][T26148] pimreg: left allmulticast mode [ 1370.439206][T26148] pimreg3: left allmulticast mode [ 1370.761675][ T5642] Bluetooth: hci4: command tx timeout [ 1371.355469][ T3390] smc: removing ib device syz1 [ 1371.383544][T26148] bond10 (unregistering): (slave geneve3): Releasing active interface [ 1371.405003][ T3390] smbdirect: ib_dev[syz1] removed [ 1371.958925][T26148] bond1 (unregistering): Released all slaves [ 1372.035382][T26148] bond2 (unregistering): Released all slaves [ 1372.110712][T26148] bond0 (unregistering): Released all slaves [ 1372.174356][T26148] bond3 (unregistering): Released all slaves [ 1372.250849][T26148] bond4 (unregistering): Released all slaves [ 1372.340230][T26148] bond5 (unregistering): Released all slaves [ 1372.414096][T26148] bond6 (unregistering): Released all slaves [ 1372.497250][T26148] bond7 (unregistering): Released all slaves [ 1372.574700][T26148] bond8 (unregistering): Released all slaves [ 1372.655335][T26148] bond9 (unregistering): Released all slaves [ 1372.745706][T26148] bond10 (unregistering): Released all slaves [ 1372.797497][ T5642] Bluetooth: hci4: command tx timeout [ 1373.085342][ T7376] infiniband syz1: ib_query_port failed (-19) [ 1373.131818][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1373.458565][T11685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9410'. [ 1373.464537][T11685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9410'. [ 1373.529264][T11686] smc: net device lo erased user defined pnetid SYZ0 [ 1373.530515][T11686] netlink: 'syz.2.9409': attribute type 83 has an invalid length. [ 1373.633120][T11691] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1374.179967][T11706] x_tables: duplicate underflow at hook 2 [ 1374.667554][T11710] batman_adv: batadv0: Adding interface: syz_tun [ 1374.667572][T11710] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.667600][T11710] batman_adv: batadv0: Interface activated: syz_tun [ 1374.876814][ T5642] Bluetooth: hci4: command tx timeout [ 1375.386140][T11556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.386254][T11556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.391313][T11556] bridge_slave_0: entered allmulticast mode [ 1375.405256][T11556] bridge_slave_0: entered promiscuous mode [ 1375.421931][T11556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.422045][T11556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.422177][T11556] bridge_slave_1: entered allmulticast mode [ 1375.498455][T11556] bridge_slave_1: entered promiscuous mode [ 1375.993948][T11556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.041277][T11556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.389649][T11556] team0: Port device team_slave_0 added [ 1376.419407][T11556] team0: Port device team_slave_1 added [ 1376.419681][T11761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9422'. [ 1376.515696][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9422'. [ 1376.683137][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1376.705372][T11556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.705391][T11556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.705418][T11556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.751327][T11556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.751345][T11556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.751371][T11556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.215776][T11768] netlink: 'syz.1.9425': attribute type 16 has an invalid length. [ 1377.215800][T11768] netlink: 'syz.1.9425': attribute type 17 has an invalid length. [ 1377.232411][T11769] ipt_ah: unknown flags FF [ 1377.232531][T11769] ipt_ah: unknown flags FF [ 1377.232625][T11769] ipt_ah: unknown flags FF [ 1377.232707][T11769] ipt_ah: unknown flags FF [ 1377.232817][T11769] ipt_ah: unknown flags FF [ 1377.233095][T11769] ipt_ah: unknown flags FF [ 1377.233183][T11769] ipt_ah: unknown flags FF [ 1377.233274][T11769] ipt_ah: unknown flags FF [ 1377.233356][T11769] ipt_ah: unknown flags FF [ 1377.233438][T11769] ipt_ah: unknown flags FF [ 1377.300489][T11556] hsr_slave_0: entered promiscuous mode [ 1377.301625][T11556] hsr_slave_1: entered promiscuous mode [ 1377.324434][T11556] debugfs: 'hsr0' already exists in 'hsr' [ 1377.324455][T11556] Cannot create hsr debugfs directory [ 1377.480112][T11781] netlink: 'syz.4.9424': attribute type 1 has an invalid length. [ 1377.543154][T11768] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.715826][T11768] macvlan1: left promiscuous mode [ 1377.716021][T11768] macvlan1: left allmulticast mode [ 1377.716035][T11768] veth1_vlan: left allmulticast mode [ 1377.732708][T11768] macvtap0: left allmulticast mode [ 1377.732749][T11768] veth0_macvtap: left allmulticast mode [ 1377.879774][T11768] batadv1: left promiscuous mode [ 1377.879937][T11768] batadv1: left allmulticast mode [ 1377.884598][T11768] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1378.040880][T11788] netlink: 'syz.2.9426': attribute type 1 has an invalid length. [ 1378.156203][T11785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9426'. [ 1378.223651][T11783] macvlan2: entered promiscuous mode [ 1378.223675][T11783] macvlan2: entered allmulticast mode [ 1378.733215][T11785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1379.324453][T11821] ip_tables: iptables: counters copy to user failed while replacing table [ 1379.469810][T11826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9432'. [ 1379.825219][T11837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9435'. [ 1379.935097][T26148] ovs-dp0: left promiscuous mode [ 1380.070631][T26148] tipc: Left network mode [ 1380.356141][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9437'. [ 1380.383423][T11556] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1380.751665][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1380.941063][T11556] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1381.090965][T11860] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1381.280417][T11556] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1381.820314][T11556] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1382.116414][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9446'. [ 1382.768816][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9447'. [ 1383.321081][T26148] vlan0: left allmulticast mode [ 1383.321105][T26148] veth0_vlan: left allmulticast mode [ 1383.321365][T26148] veth1_macvtap: left promiscuous mode [ 1383.321394][T26148] veth0_macvtap: left promiscuous mode [ 1383.321621][T26148] veth1_vlan: left promiscuous mode [ 1383.430214][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1383.430299][T11935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1383.430309][T11935] IPv6: NLM_F_CREATE should be set when creating new route [ 1383.430333][T11935] IPv6: NLM_F_CREATE should be set when creating new route [ 1383.526318][T11937] netlink: 4337 bytes leftover after parsing attributes in process `syz.4.9455'. [ 1383.535420][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1383.535504][T11939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1383.572927][T11937] openvswitch: netlink: Actions may not be safe on all matching packets [ 1383.663952][T11937] netlink: 4337 bytes leftover after parsing attributes in process `syz.4.9455'. [ 1383.663996][T11937] openvswitch: netlink: Actions may not be safe on all matching packets [ 1384.155836][T11955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9458'. [ 1385.325121][T11556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1385.367549][T11556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1385.368540][T11556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1385.412553][T11556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1385.557860][T11556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1385.601283][T11556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1385.602106][T11556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1385.644679][T11556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1386.314381][T11556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.415858][T11556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.444040][T26137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.444148][T26137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.495810][T26137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.495908][T26137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.543937][T26148] IPVS: stop unused estimator thread 0... [ 1387.119410][T12028] SET target dimension over the limit! [ 1387.153913][T12028] SET target dimension over the limit! [ 1387.171339][T12022] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1387.192040][T12022] bond1 (unregistering): Released all slaves [ 1387.388580][T12035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1387.392978][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9472'. [ 1387.393003][T12034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9472'. [ 1387.393019][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9472'. [ 1387.393205][T12034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9472'. [ 1387.393221][T12034] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9472'. [ 1387.687337][T12046] netlink: 'syz.0.9474': attribute type 4 has an invalid length. [ 1387.881519][T12059] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1388.340899][T12071] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9478'. [ 1388.479068][T12078] netlink: 'syz.1.9480': attribute type 9 has an invalid length. [ 1388.830972][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9484'. [ 1389.358573][T11556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1389.521531][T11556] veth0_vlan: entered promiscuous mode [ 1389.547598][T11556] veth1_vlan: entered promiscuous mode [ 1389.612979][T12125] netlink: 13 bytes leftover after parsing attributes in process `syz.4.9492'. [ 1389.627041][T12125] atomic_op ffff88802e1401e0 conn xmit_atomic 0000000000000000 [ 1389.715332][T11556] veth0_macvtap: entered promiscuous mode [ 1389.743573][T11556] veth1_macvtap: entered promiscuous mode [ 1389.799152][T11556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.833829][T11556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.888163][T26148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.888799][T26148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.888922][T26148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.888955][T26148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.203238][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9496'. [ 1390.230444][T12140] syz_tun: left allmulticast mode [ 1390.230781][T12140] syz_tun: left promiscuous mode [ 1390.231647][T12140] bridge0: port 3(syz_tun) entered disabled state [ 1390.265289][T12140] bridge_slave_1: left allmulticast mode [ 1390.274302][T12140] bridge_slave_1: left promiscuous mode [ 1390.284420][T12140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.305278][T12140] bridge_slave_0: left allmulticast mode [ 1390.305304][T12140] bridge_slave_0: left promiscuous mode [ 1390.305508][T12140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.543331][T12155] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 1390.592161][T12143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.592184][T12143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.855876][T26144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.855900][T26144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.957908][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9499'. [ 1391.015123][T12173] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1391.104449][T12165] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1391.111915][T12165] team0: Device ipvlan2 is already an upper device of the team interface [ 1391.461240][T12181] netlink: 'syz.3.9375': attribute type 29 has an invalid length. [ 1391.507687][T12179] netlink: 'syz.4.9502': attribute type 29 has an invalid length. [ 1391.509109][T12179] netlink: 'syz.4.9502': attribute type 29 has an invalid length. [ 1391.666370][T12191] sctp: [Deprecated]: syz.0.9504 (pid 12191) Use of int in maxseg socket option. [ 1391.666370][T12191] Use struct sctp_assoc_value instead [ 1391.911567][T12202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.912345][T12202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.963415][T12208] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1391.964008][T12208] netlink: 'syz.0.9508': attribute type 21 has an invalid length. [ 1391.964028][T12208] IPv6: NLM_F_CREATE should be specified when creating new route [ 1391.964117][T12208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1391.964127][T12208] IPv6: NLM_F_CREATE should be set when creating new route [ 1391.964168][T12208] IPv6: NLM_F_CREATE should be set when creating new route [ 1391.964191][T12208] IPv6: NLM_F_CREATE should be set when creating new route [ 1391.965934][T12143] IPVS: starting estimator thread 0... [ 1392.047360][T12210] IPVS: using max 32 ests per chain, 76800 per kthread [ 1392.103448][T12202] bridge_slave_0: left allmulticast mode [ 1392.103476][T12202] bridge_slave_0: left promiscuous mode [ 1392.103701][T12202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.141674][T12202] bridge_slave_1: left allmulticast mode [ 1392.141701][T12202] bridge_slave_1: left promiscuous mode [ 1392.141955][T12202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.185163][T12202] bond0: (slave bond_slave_0): Releasing backup interface [ 1392.203070][T12202] bond0: (slave bond_slave_1): Releasing backup interface [ 1392.253944][T12202] team0: Port device team_slave_0 removed [ 1392.305376][T12202] team0: Port device team_slave_1 removed [ 1392.320196][T12202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.325962][T12202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.340409][T12202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.344434][T12202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.405060][T12202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1392.423237][T12207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1392.754289][T12219] __nla_validate_parse: 36 callbacks suppressed [ 1392.754310][T12219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9509'. [ 1392.948923][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9513'. [ 1392.948970][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9513'. [ 1392.974248][T12232] Bluetooth: hci0: unsupported parameter 5161 [ 1392.974271][T12232] Bluetooth: hci0: unsupported parameter 8192 [ 1392.974283][T12232] Bluetooth: hci0: unsupported parameter 5161 [ 1392.974295][T12232] Bluetooth: hci0: unsupported parameter 8192 [ 1393.253800][T12243] tipc: Started in network mode [ 1393.253832][T12243] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 1393.254099][T12243] tipc: Enabled bearer , priority 10 [ 1393.279533][T12244] netlink: 'syz.3.9517': attribute type 11 has an invalid length. [ 1393.279555][T12244] netlink: 'syz.3.9517': attribute type 5 has an invalid length. [ 1393.279568][T12244] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9517'. [ 1393.294407][T12247] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1393.300269][T12244] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9517'. [ 1393.311737][T12244] syzkaller0: entered promiscuous mode [ 1393.311758][T12244] syzkaller0: entered allmulticast mode [ 1393.491884][T12244] ip_tables: iptables: counters copy to user failed while replacing table [ 1394.015548][T12275] netlink: 'syz.4.9523': attribute type 1 has an invalid length. [ 1394.229371][T12284] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1394.298327][ T5767] tipc: Node number set to 10070698 [ 1394.664810][T12305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9529'. [ 1395.229025][T12324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9532'. [ 1395.229051][T12324] IPv6: NLM_F_CREATE should be specified when creating new route [ 1395.417054][T12327] netlink: 'syz.1.9533': attribute type 1 has an invalid length. [ 1395.418232][T12327] netlink: 'syz.1.9533': attribute type 1 has an invalid length. [ 1395.418826][T12327] netlink: 'syz.1.9533': attribute type 1 has an invalid length. [ 1395.419359][T12327] netlink: 'syz.1.9533': attribute type 1 has an invalid length. [ 1395.419844][T12327] netlink: 'syz.1.9533': attribute type 1 has an invalid length. [ 1395.420546][T12327] netlink: 'syz.1.9533': attribute type 1 has an invalid length. [ 1395.421131][T12327] netlink: 'syz.1.9533': attribute type 1 has an invalid length. [ 1395.421722][T12327] netlink: 'syz.1.9533': attribute type 1 has an invalid length. [ 1395.520999][T12336] sch_fq: defrate 0 ignored. [ 1395.523111][T12337] sch_fq: defrate 0 ignored. [ 1396.011642][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9541'. [ 1396.014632][T12355] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9541'. [ 1396.267431][T12352] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1396.580498][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9549'. [ 1397.854943][T12444] __nla_validate_parse: 7 callbacks suppressed [ 1397.854962][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9563'. [ 1397.951811][T12447] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9563'. [ 1398.704059][T12484] Bluetooth: MGMT ver 1.23 [ 1398.738934][T12484] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9575'. [ 1398.810663][T12487] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9576'. [ 1398.901777][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9576'. [ 1399.005610][T12487] team0 (unregistering): Port device team_slave_0 removed [ 1399.060282][T12497] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9578'. [ 1399.063940][T12487] team0 (unregistering): Port device team_slave_1 removed [ 1399.320404][T12500] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9579'. [ 1400.098779][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9585'. [ 1400.135240][T12540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9586'. [ 1400.135492][T12540] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9586'. [ 1400.169391][T12535] validate_nla: 19 callbacks suppressed [ 1400.169412][T12535] netlink: 'syz.4.9585': attribute type 2 has an invalid length. [ 1400.220496][T12535] !;: entered promiscuous mode [ 1400.790870][T12554] dvmrp0: entered allmulticast mode [ 1401.760111][T12604] netlink: 'syz.0.9600': attribute type 3 has an invalid length. [ 1401.775594][T12604] netlink: 'syz.0.9600': attribute type 5 has an invalid length. [ 1401.962545][T12602] veth0_virt_wifi: entered promiscuous mode [ 1402.882291][T12654] netlink: 'syz.4.9614': attribute type 3 has an invalid length. [ 1402.906222][T12656] __nla_validate_parse: 75 callbacks suppressed [ 1402.906241][T12656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9614'. [ 1402.915692][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9614'. [ 1403.463050][ T3387] team0: Port device xfrm0 removed [ 1403.590618][ T3387] bond1 (unregistering): (slave gretap2): Releasing active interface [ 1403.654833][ T3387] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1403.810800][ T3387]  (unregistering): Released all slaves [ 1403.853213][ T3387] bond0 (unregistering): Released all slaves [ 1403.871498][ T3387] bond1 (unregistering): Released all slaves [ 1403.888781][ T3387] bond2 (unregistering): Released all slaves [ 1403.913370][ T3387] bond3 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1403.915821][ T3387] bond3 (unregistering): Released all slaves [ 1403.950973][ T3387] bond4 (unregistering): Released all slaves [ 1403.973487][ T3387] bond5 (unregistering): Released all slaves [ 1404.095304][T26148] tipc: Resetting bearer [ 1404.304736][T12668] ip_tables: iptables: counters copy to user failed while replacing table [ 1404.338949][ T3387] tipc: Disabling bearer [ 1404.354031][ T3387] tipc: Left network mode [ 1404.545769][T12676] tap0: tun_chr_ioctl cmd 1074025676 [ 1404.545794][T12676] tap0: owner set to 0 [ 1404.823092][T12691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9626'. [ 1405.375949][T12703] ipt_REJECT: ECHOREPLY no longer supported. [ 1405.640298][T12709] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9630'. [ 1405.729797][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9631'. [ 1405.729820][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9631'. [ 1405.729833][T12711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9631'. [ 1406.102357][T12730] netlink: 'syz.1.9636': attribute type 1 has an invalid length. [ 1406.150282][T12733] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9635'. [ 1406.211135][T12738] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9637'. [ 1406.224708][T12739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9637'. [ 1406.267852][ T3387] veth1_macvtap: left promiscuous mode [ 1406.267888][ T3387] veth0_macvtap: left promiscuous mode [ 1406.267983][ T3387] veth1_vlan: left promiscuous mode [ 1406.268043][ T3387] veth0_vlan: left promiscuous mode [ 1407.361927][T12145] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 1407.943837][ T3387] IPVS: stop unused estimator thread 0... [ 1408.027843][T12784] __nla_validate_parse: 1 callbacks suppressed [ 1408.027864][T12784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9646'. [ 1408.041184][T12784] FAULT_INJECTION: forcing a failure. [ 1408.041184][T12784] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.041213][T12784] CPU: 0 UID: 0 PID: 12784 Comm: syz.0.9646 Not tainted syzkaller #0 PREEMPT(full) [ 1408.041234][T12784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1408.041246][T12784] Call Trace: [ 1408.041254][T12784] [ 1408.041262][T12784] dump_stack_lvl+0xe8/0x150 [ 1408.041297][T12784] should_fail_ex+0x3eb/0x540 [ 1408.041327][T12784] should_failslab+0xa8/0x100 [ 1408.041357][T12784] __kmalloc_cache_noprof+0x9e/0x600 [ 1408.041383][T12784] ? rtnl_newlink+0x147/0x1c30 [ 1408.041403][T12784] ? rtnl_newlink+0x147/0x1c30 [ 1408.041429][T12784] rtnl_newlink+0x147/0x1c30 [ 1408.041454][T12784] ? __lock_acquire+0x747/0x2de0 [ 1408.041482][T12784] ? __pfx_rtnl_newlink+0x10/0x10 [ 1408.041500][T12784] ? __lock_acquire+0x747/0x2de0 [ 1408.041533][T12784] ? __lock_acquire+0x747/0x2de0 [ 1408.041563][T12784] ? __lock_acquire+0x747/0x2de0 [ 1408.041600][T12784] ? lock_acquire+0x115/0x350 [ 1408.041630][T12784] ? lock_acquire+0x115/0x350 [ 1408.041662][T12784] ? __lock_acquire+0x747/0x2de0 [ 1408.041688][T12784] ? is_bpf_text_address+0x292/0x2b0 [ 1408.041710][T12784] ? __pfx_hook_capable+0x10/0x10 [ 1408.041733][T12784] ? kernel_text_address+0xa5/0xe0 [ 1408.041757][T12784] ? __pfx_hook_capable+0x10/0x10 [ 1408.041775][T12784] ? unwind_get_return_address+0x4d/0x90 [ 1408.041809][T12784] ? lock_acquire+0x115/0x350 [ 1408.041832][T12784] ? __pfx_rtnl_newlink+0x10/0x10 [ 1408.041863][T12784] ? __pfx_rtnl_newlink+0x10/0x10 [ 1408.041882][T12784] rtnetlink_rcv_msg+0x802/0xc00 [ 1408.041906][T12784] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1408.041926][T12784] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1408.041947][T12784] ? __lock_acquire+0x747/0x2de0 [ 1408.041982][T12784] netlink_rcv_skb+0x226/0x4a0 [ 1408.042011][T12784] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1408.042033][T12784] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1408.042073][T12784] ? netlink_deliver_tap+0x2e/0x1b0 [ 1408.042099][T12784] ? netlink_deliver_tap+0x2e/0x1b0 [ 1408.042132][T12784] netlink_unicast+0x8ef/0xa80 [ 1408.042180][T12784] netlink_sendmsg+0x7f0/0xb20 [ 1408.042214][T12784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.042245][T12784] ? aa_sock_msg_perm+0x144/0x210 [ 1408.042277][T12784] ? apparmor_socket_sendmsg+0x98/0x360 [ 1408.042305][T12784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.042331][T12784] sock_sendmsg_nosec+0x14e/0x190 [ 1408.042360][T12784] ____sys_sendmsg+0x54e/0x850 [ 1408.042386][T12784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1408.042417][T12784] ? import_iovec+0x73/0xa0 [ 1408.042444][T12784] ___sys_sendmsg+0x2a5/0x360 [ 1408.042462][T12784] ? __lock_acquire+0x747/0x2de0 [ 1408.042489][T12784] ? __pfx____sys_sendmsg+0x10/0x10 [ 1408.042549][T12784] ? __fget_files+0x3a2/0x420 [ 1408.042571][T12784] ? __fget_files+0x2a/0x420 [ 1408.042603][T12784] __x64_sys_sendmsg+0x1b1/0x290 [ 1408.042627][T12784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1408.042670][T12784] do_syscall_64+0x166/0x520 [ 1408.042693][T12784] ? trace_irq_disable+0x3b/0x140 [ 1408.042717][T12784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.042736][T12784] ? clear_bhb_loop+0x70/0xc0 [ 1408.042759][T12784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.042777][T12784] RIP: 0033:0x7f759e3a8f19 [ 1408.042795][T12784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.042811][T12784] RSP: 002b:00007f759f31f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1408.042832][T12784] RAX: ffffffffffffffda RBX: 00007f759e625fa0 RCX: 00007f759e3a8f19 [ 1408.042846][T12784] RDX: 0000000000008000 RSI: 0000200000000240 RDI: 0000000000000006 [ 1408.042857][T12784] RBP: 00007f759f31f090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.042870][T12784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.042881][T12784] R13: 00007f759e626038 R14: 00007f759e625fa0 R15: 00007ffde79e4838 [ 1408.042912][T12784] [ 1408.061909][ T5642] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1408.061970][ T5642] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1408.633643][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9649'. [ 1408.633704][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9649'. [ 1408.634414][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9649'. [ 1408.655833][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9649'. [ 1408.674500][T12794] netlink: 'syz.0.9649': attribute type 1 has an invalid length. [ 1408.674522][T12794] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9649'. [ 1408.761530][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1408.765914][T12802] netlink: 'syz.0.9649': attribute type 11 has an invalid length. [ 1408.873235][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1408.999867][T12798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1409.002721][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1409.075873][T12811] x_tables: duplicate underflow at hook 2 [ 1409.083777][T12816] x_tables: duplicate underflow at hook 2 [ 1409.300918][T12833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1409.344953][T12837] netlink: 'syz.3.9661': attribute type 6 has an invalid length. [ 1409.345078][T12837] netlink: 'syz.3.9661': attribute type 5 has an invalid length. [ 1409.373921][T12838] netlink: 'syz.2.9662': attribute type 1 has an invalid length. [ 1409.449010][T12838] bond3: (slave bridge2): making interface the new active one [ 1409.449921][T12838] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1410.003981][T12874] syzkaller1: entered promiscuous mode [ 1410.004006][T12874] syzkaller1: entered allmulticast mode [ 1410.025282][T12874] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1410.033306][T12874] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1410.077334][T12881] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1410.079069][T12887] FAULT_INJECTION: forcing a failure. [ 1410.079069][T12887] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.079098][T12887] CPU: 1 UID: 0 PID: 12887 Comm: syz.4.9679 Not tainted syzkaller #0 PREEMPT(full) [ 1410.079119][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1410.079130][T12887] Call Trace: [ 1410.079138][T12887] [ 1410.079147][T12887] dump_stack_lvl+0xe8/0x150 [ 1410.079181][T12887] should_fail_ex+0x3eb/0x540 [ 1410.079209][T12887] should_failslab+0xa8/0x100 [ 1410.079241][T12887] __kmalloc_cache_noprof+0x9e/0x600 [ 1410.079266][T12887] ? __sta_info_destroy_part2+0x27e/0x410 [ 1410.079415][T12887] ? __sta_info_destroy_part2+0x27e/0x410 [ 1410.079447][T12887] __sta_info_destroy_part2+0x27e/0x410 [ 1410.079478][T12887] __sta_info_flush+0x5b6/0x700 [ 1410.079515][T12887] ? __pfx___sta_info_flush+0x10/0x10 [ 1410.079541][T12887] ? queue_delayed_work_on+0x171/0x1e0 [ 1410.079567][T12887] ieee80211_ibss_disconnect+0x316/0x800 [ 1410.079650][T12887] ieee80211_ibss_leave+0x47/0x140 [ 1410.079675][T12887] cfg80211_leave_ibss+0x1d7/0x410 [ 1410.079712][T12887] cfg80211_leave+0x186/0x200 [ 1410.079797][T12887] cfg80211_netdev_notifier_call+0x208/0x14b0 [ 1410.079825][T12887] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1410.079854][T12887] ? __lock_acquire+0x747/0x2de0 [ 1410.079882][T12887] ? __lock_acquire+0x747/0x2de0 [ 1410.079918][T12887] ? update_cfs_rq_load_avg+0x426/0x4e0 [ 1410.079960][T12887] ? __lock_acquire+0x747/0x2de0 [ 1410.080021][T12887] ? inetdev_event+0x376/0x1610 [ 1410.080094][T12887] ? ipmr_device_event+0x1f6/0x220 [ 1410.080152][T12887] notifier_call_chain+0x1a5/0x3d0 [ 1410.080184][T12887] __dev_close_many+0x114/0x6e0 [ 1410.080247][T12887] ? preempt_schedule_thunk+0x16/0x40 [ 1410.080276][T12887] ? __pfx___dev_close_many+0x10/0x10 [ 1410.080301][T12887] ? __dev_change_flags+0x2e2/0x820 [ 1410.080335][T12887] __dev_change_flags+0x3f5/0x820 [ 1410.080363][T12887] ? __pfx___dev_change_flags+0x10/0x10 [ 1410.080394][T12887] netif_change_flags+0x7c/0x1b0 [ 1410.080419][T12887] do_setlink+0xdd6/0x47a0 [ 1410.080440][T12887] ? unwind_get_return_address+0x4d/0x90 [ 1410.080485][T12887] ? __pfx_do_setlink+0x10/0x10 [ 1410.080507][T12887] ? __lock_acquire+0x747/0x2de0 [ 1410.080545][T12887] ? kasan_save_track+0x4f/0x80 [ 1410.080569][T12887] ? kasan_save_track+0x3e/0x80 [ 1410.080592][T12887] ? __kasan_kmalloc+0x93/0xb0 [ 1410.080617][T12887] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1410.080652][T12887] ? __mutex_trylock_common+0x15f/0x270 [ 1410.080681][T12887] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1410.080711][T12887] ? rcu_is_watching+0x16/0xb0 [ 1410.080748][T12887] ? trace_contention_end+0x3d/0x140 [ 1410.080778][T12887] ? __mutex_lock+0x305/0x15a0 [ 1410.080803][T12887] ? __pfx_hook_capable+0x10/0x10 [ 1410.080829][T12887] ? rtnl_newlink+0xc1d/0x1c30 [ 1410.080849][T12887] ? __pfx___mutex_lock+0x10/0x10 [ 1410.080884][T12887] ? full_name_hash+0x92/0xe0 [ 1410.080915][T12887] rtnl_newlink+0x15b0/0x1c30 [ 1410.080947][T12887] ? __pfx_rtnl_newlink+0x10/0x10 [ 1410.080965][T12887] ? __lock_acquire+0x747/0x2de0 [ 1410.081011][T12887] ? __lock_acquire+0x747/0x2de0 [ 1410.081056][T12887] ? lock_acquire+0x115/0x350 [ 1410.081085][T12887] ? lock_acquire+0x115/0x350 [ 1410.081120][T12887] ? __lock_acquire+0x747/0x2de0 [ 1410.081153][T12887] ? is_bpf_text_address+0x292/0x2b0 [ 1410.081175][T12887] ? __pfx_hook_capable+0x10/0x10 [ 1410.081193][T12887] ? kernel_text_address+0xa5/0xe0 [ 1410.081215][T12887] ? __pfx_hook_capable+0x10/0x10 [ 1410.081231][T12887] ? unwind_get_return_address+0x4d/0x90 [ 1410.081264][T12887] ? lock_acquire+0x115/0x350 [ 1410.081288][T12887] ? __pfx_rtnl_newlink+0x10/0x10 [ 1410.081323][T12887] ? __pfx_rtnl_newlink+0x10/0x10 [ 1410.081341][T12887] rtnetlink_rcv_msg+0x802/0xc00 [ 1410.081364][T12887] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1410.081384][T12887] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1410.081404][T12887] ? __lock_acquire+0x747/0x2de0 [ 1410.081437][T12887] netlink_rcv_skb+0x226/0x4a0 [ 1410.081463][T12887] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1410.081481][T12887] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1410.081517][T12887] ? netlink_deliver_tap+0x2e/0x1b0 [ 1410.081539][T12887] ? netlink_deliver_tap+0x2e/0x1b0 [ 1410.081566][T12887] netlink_unicast+0x8ef/0xa80 [ 1410.081607][T12887] netlink_sendmsg+0x7f0/0xb20 [ 1410.081640][T12887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.081670][T12887] ? aa_sock_msg_perm+0x144/0x210 [ 1410.081699][T12887] ? apparmor_socket_sendmsg+0x98/0x360 [ 1410.081723][T12887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1410.081745][T12887] sock_sendmsg_nosec+0x14e/0x190 [ 1410.081770][T12887] ____sys_sendmsg+0x54e/0x850 [ 1410.081794][T12887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1410.081820][T12887] ? import_iovec+0x73/0xa0 [ 1410.081844][T12887] ___sys_sendmsg+0x2a5/0x360 [ 1410.081860][T12887] ? __lock_acquire+0x747/0x2de0 [ 1410.081884][T12887] ? __pfx____sys_sendmsg+0x10/0x10 [ 1410.081935][T12887] ? __fget_files+0x3a2/0x420 [ 1410.081955][T12887] ? __fget_files+0x2a/0x420 [ 1410.081982][T12887] __x64_sys_sendmsg+0x1b1/0x290 [ 1410.082003][T12887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1410.082048][T12887] do_syscall_64+0x166/0x520 [ 1410.082067][T12887] ? trace_irq_disable+0x3b/0x140 [ 1410.082088][T12887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.082104][T12887] ? clear_bhb_loop+0x70/0xc0 [ 1410.082124][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.082140][T12887] RIP: 0033:0x7fb5179a8f19 [ 1410.082156][T12887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.082170][T12887] RSP: 002b:00007fb5187e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1410.082188][T12887] RAX: ffffffffffffffda RBX: 00007fb517c25fa0 RCX: 00007fb5179a8f19 [ 1410.082200][T12887] RDX: 0000000000008000 RSI: 0000200000000240 RDI: 0000000000000006 [ 1410.082210][T12887] RBP: 00007fb5187e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.082221][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.082231][T12887] R13: 00007fb517c26038 R14: 00007fb517c25fa0 R15: 00007ffc9f14e8d8 [ 1410.082259][T12887] [ 1410.384410][T12887] mac80211_hwsim hwsim83 wlan1: entered promiscuous mode [ 1410.400055][T12894] netlink: 'syz.1.9680': attribute type 5 has an invalid length. [ 1410.991699][T12919] tipc: Enabled bearer , priority 10 [ 1411.270792][T12939] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1411.273492][T12939] bond1 (unregistering): Released all slaves [ 1411.350619][T12940] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1411.354472][T12940] bond1 (unregistering): Released all slaves [ 1412.096954][T29323] tipc: Node number set to 2886997039 [ 1412.514741][T13009] dvmrp0: left allmulticast mode [ 1412.514853][T13009] pimreg: left allmulticast mode [ 1412.514937][T13009] batadv_slave_1: left allmulticast mode [ 1412.948901][T13027] mac80211_hwsim hwsim84 wlan0: entered promiscuous mode [ 1413.040228][T13035] __nla_validate_parse: 10 callbacks suppressed [ 1413.040248][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9720'. [ 1413.105233][T13035] netlink: 'syz.3.9720': attribute type 49 has an invalid length. [ 1413.194356][T13045] ebt_limit: overflow, try lower: 4278190080/255 [ 1413.241762][T13035] ip6gretap0: entered promiscuous mode [ 1413.241785][T13035] ip6gretap0: entered allmulticast mode [ 1413.271973][T13033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9718'. [ 1413.273614][T13048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1413.293227][T13039] syzkaller1: entered promiscuous mode [ 1413.293249][T13039] syzkaller1: entered allmulticast mode [ 1413.447879][T13054] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1413.630957][T13069] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1413.653789][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9727'. [ 1413.801753][T13077] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9731'. [ 1413.804401][T13070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9727'. [ 1413.906850][T13086] netlink: 'syz.4.9732': attribute type 4 has an invalid length. [ 1413.906873][T13086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9732'. [ 1414.044942][T13086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9732'. [ 1414.063648][T13086] openvswitch: netlink: Actions may not be safe on all matching packets [ 1414.297544][T13105] netlink: 'syz.1.9736': attribute type 4 has an invalid length. [ 1414.518460][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9741'. [ 1414.574956][T13128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9743'. [ 1414.619475][T13128] mac80211_hwsim hwsim75 wlan1: entered promiscuous mode [ 1414.983230][T13147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9746'. [ 1414.983265][T13147] macsec0: entered promiscuous mode [ 1414.983282][T13147] macsec0: entered allmulticast mode [ 1415.097411][T13153] syzkaller0: entered promiscuous mode [ 1415.097447][T13153] syzkaller0: entered allmulticast mode [ 1415.205670][T13163] nbd: must specify a device to reconfigure [ 1415.225572][T13165] nbd: must specify a device to reconfigure [ 1415.358012][T13172] netlink: 'syz.4.9754': attribute type 21 has an invalid length. [ 1415.358473][T13172] netlink: 'syz.4.9754': attribute type 6 has an invalid length. [ 1415.670993][T13194] veth1_to_hsr: entered allmulticast mode [ 1415.889326][T13204] ip_tables: iptables: counters copy to user failed while replacing table [ 1415.966154][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1416.435660][T13239] netlink: 'syz.4.9775': attribute type 1 has an invalid length. [ 1416.435686][T13239] netlink: 'syz.4.9775': attribute type 2 has an invalid length. [ 1416.505140][T13242] macvtap1: entered promiscuous mode [ 1416.505163][T13242] vlan0: entered promiscuous mode [ 1416.507547][T13242] macvtap1: entered allmulticast mode [ 1416.507567][T13242] vlan0: entered allmulticast mode [ 1416.507579][T13242] veth0_vlan: entered allmulticast mode [ 1416.636245][T13249] netlink: 'syz.4.9777': attribute type 1 has an invalid length. [ 1416.788398][T13264] tipc: Started in network mode [ 1416.788428][T13264] tipc: Node identity ac1414aa, cluster identity 4711 [ 1416.788653][T13264] tipc: New replicast peer: 172.20.20.187 [ 1416.796217][T13264] tipc: Enabled bearer , priority 10 [ 1416.891400][T13271] bond4: entered promiscuous mode [ 1416.891459][T13271] bond4: entered allmulticast mode [ 1416.891767][T13271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1416.971348][T13279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1417.012444][T13278] ipvlan2: entered allmulticast mode [ 1417.012458][T13278] virt_wifi0: entered allmulticast mode [ 1417.017071][T13278] batman_adv: batadv0: Adding interface: ipvlan2 [ 1417.017085][T13278] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.017372][T13278] batman_adv: batadv0: Interface activated: ipvlan2 [ 1417.105648][T13285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.105854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.125040][T13290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1417.358250][T19757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.917047][T15041] tipc: Node number set to 2886997162 [ 1418.398749][ T5767] net_ratelimit: 1 callbacks suppressed [ 1418.398768][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.438572][T19756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.184274][T13296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1420.421467][T13384] __nla_validate_parse: 15 callbacks suppressed [ 1420.421487][T13384] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9810'. [ 1420.454644][T13378] xfrm1: entered allmulticast mode [ 1420.481158][T19757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.531391][T13390] ip_tables: iptables: counters copy to user failed while replacing table [ 1420.719915][T29323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.828747][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9816'. [ 1421.199230][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9823'. [ 1421.239208][T13434] netlink: 'syz.4.9824': attribute type 3 has an invalid length. [ 1421.240640][T13436] netlink: 'syz.0.9825': attribute type 1 has an invalid length. [ 1421.334021][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9829'. [ 1421.334100][T13436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1421.435122][T13446] IPVS: Scheduler module ip_vs_sip not found [ 1421.455509][T13454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9831'. [ 1421.542947][T13452] netlink: 'syz.1.9830': attribute type 2 has an invalid length. [ 1421.981272][T13484] bridge1: entered allmulticast mode [ 1422.000363][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9840'. [ 1422.050538][T13442] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1422.062943][T13484] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.245946][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9845'. [ 1422.367678][T13508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9848'. [ 1422.367704][T13508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9848'. [ 1422.401646][T13509] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1422.454334][T13509] bond5: (slave lo): Enslaving as an active interface with an up link [ 1422.475345][T13509] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1422.557439][T13522] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1422.730543][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9851'. [ 1423.174472][T13547] : renamed from dummy0 (while UP) [ 1423.200020][T13545] tipc: New replicast peer: 172.20.20.187 [ 1423.202760][T13545] tipc: Enabled bearer , priority 10 [ 1423.989981][ T5296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1424.082038][T13610] netlink: 'syz.0.9864': attribute type 21 has an invalid length. [ 1424.146002][T13610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.666161][T13651] can: request_module (can-proto-3) failed. [ 1424.700140][T13658] netlink: 'syz.4.9872': attribute type 2 has an invalid length. [ 1424.700165][T13658] netlink: 'syz.4.9872': attribute type 11 has an invalid length. [ 1424.828454][T13671] ������: renamed from virt_wifi0 [ 1425.019340][T13679] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1425.045132][T13685] x_tables: duplicate underflow at hook 1 [ 1425.350945][T13708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1425.351302][T13708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1425.351754][T13708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1425.352095][T13708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1425.352401][T13708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1425.352826][T13708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1425.353163][T13708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1425.353485][T13708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1425.353855][T13708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1425.354174][T13708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1425.425313][T13646] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1425.648678][T13717] __nla_validate_parse: 12 callbacks suppressed [ 1425.648722][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9892'. [ 1425.776874][T13722] netlink: 'syz.0.9893': attribute type 2 has an invalid length. [ 1425.888314][T13730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.910304][T13730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.154646][T13759] netlink: 'syz.1.9902': attribute type 1 has an invalid length. [ 1426.154721][T13759] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9902'. [ 1426.164905][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9902'. [ 1426.379770][T13767] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1426.944013][T13791] netlink: 666 bytes leftover after parsing attributes in process `syz.4.9916'. [ 1427.214326][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9921'. [ 1427.214401][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9921'. [ 1427.291654][T13822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9921'. [ 1427.291718][T13822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9921'. [ 1427.334036][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9923'. [ 1427.338617][T13812] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1427.428033][T13812] batman_adv: batadv0: Removing interface: ipvlan2 [ 1427.523353][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9923'. [ 1428.001457][T13862] Bluetooth: ISO socket layer initialized [ 1428.382299][T12084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.382412][T12084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.605763][T13956] Cannot find set identified by id 4 to match [ 1430.872865][T14037] netlink: 'syz.4.9975': attribute type 83 has an invalid length. [ 1430.888102][T14039] __nla_validate_parse: 70 callbacks suppressed [ 1430.888123][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9975'. [ 1430.888148][T14039] netlink: 'syz.4.9975': attribute type 7 has an invalid length. [ 1430.888159][T14039] netlink: 'syz.4.9975': attribute type 8 has an invalid length. [ 1430.888171][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9975'. [ 1430.907501][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9977'. [ 1430.937009][ T3388] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.937051][ T3388] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.937083][ T3388] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.937114][ T3388] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1430.943000][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9977'. [ 1431.025207][T14040] NFSD: Failed to start, no listeners configured. [ 1431.579749][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9984'. [ 1431.616010][T14075] netlink: 'syz.2.9982': attribute type 39 has an invalid length. [ 1431.797703][T14089] net_ratelimit: 92 callbacks suppressed [ 1431.797721][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.803479][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.803635][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.803764][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.803913][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.804039][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.804162][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.804285][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.804411][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.867529][T14089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1432.053488][T14101] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9987'. [ 1432.359766][T14114] bond1: (slave bond_slave_0): Device is not bonding slave [ 1432.359791][T14114] bond1: option active_slave: invalid value (bond_slave_0) [ 1432.361310][T14114] bond1 (unregistering): Released all slaves [ 1432.510609][T14117] bond1: (slave bond_slave_0): Device is not bonding slave [ 1432.510632][T14117] bond1: option active_slave: invalid value (bond_slave_0) [ 1432.513629][T14117] bond1 (unregistering): Released all slaves [ 1432.610887][T14130] nbd: must specify an index to disconnect [ 1432.815518][T14135] macvlan0: entered promiscuous mode [ 1432.861586][T14142] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10000'. [ 1432.862230][T14143] netlink: 'syz.0.10001': attribute type 1 has an invalid length. [ 1432.935362][T14143] bond2: entered promiscuous mode [ 1432.935862][T14143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1433.175797][T14160] tipc: Started in network mode [ 1433.175826][T14160] tipc: Node identity ac14140f, cluster identity 4711 [ 1433.176072][T14160] tipc: New replicast peer: 255.255.255.255 [ 1433.202572][T14160] tipc: Enabled bearer , priority 10 [ 1433.422817][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10012'. [ 1433.799158][T14193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10015'. [ 1433.799186][T14193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10015'. [ 1433.843034][T14174] syzkaller1: entered promiscuous mode [ 1433.843058][T14174] syzkaller1: entered allmulticast mode [ 1433.958588][T14199] netlink: 'syz.3.10017': attribute type 12 has an invalid length. [ 1434.013308][T14199] bond1: option primary_reselect: invalid value (255) [ 1434.030749][T14199] bond1 (unregistering): Released all slaves [ 1434.288148][T29323] tipc: Node number set to 2886997007 [ 1434.382741][T14210] netlink: 'syz.3.10021': attribute type 25 has an invalid length. [ 1434.585425][T14236] netlink: 'syz.2.10029': attribute type 8 has an invalid length. [ 1434.585449][T14236] sch_fq: defrate 0 ignored. [ 1434.772276][T14243] xt_hashlimit: size too large, truncated to 1048576 [ 1434.949173][T14242] syzkaller0: entered promiscuous mode [ 1434.950290][T14242] syzkaller0: entered allmulticast mode [ 1434.952786][T14252] netlink: 'syz.4.10031': attribute type 83 has an invalid length. [ 1435.441819][T14180] Bluetooth: hci3: command 0x0406 tx timeout [ 1435.441906][T14180] Bluetooth: hci2: command 0x0406 tx timeout [ 1437.429557][T14259] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1437.972027][T14307] __nla_validate_parse: 2 callbacks suppressed [ 1437.972049][T14307] netlink: 124 bytes leftover after parsing attributes in process `syz.0.10040'. [ 1438.297649][T14312] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1438.456013][T14317] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1438.495986][T14326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10047'. [ 1438.716165][T14332] net_ratelimit: 57 callbacks suppressed [ 1438.716185][T14332] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1438.785955][T14332] syzkaller1: entered promiscuous mode [ 1438.785978][T14332] syzkaller1: entered allmulticast mode [ 1438.927689][T14346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10053'. [ 1439.275820][T14365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1439.374570][T14371] netlink: 'syz.0.10059': attribute type 1 has an invalid length. [ 1439.442641][T14371] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1439.650418][T14384] netlink: 'syz.3.10062': attribute type 34 has an invalid length. [ 1439.650441][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10062'. [ 1439.740904][T14391] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1439.770357][T14390] ksmbd: Unknown IPC event: 4, ignore. [ 1439.806080][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10064'. [ 1439.806270][T14390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10064'. [ 1439.812376][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10064'. [ 1440.073573][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10068'. [ 1440.073655][T14401] bridge_slave_1: left allmulticast mode [ 1440.073675][T14401] bridge_slave_1: left promiscuous mode [ 1440.073897][T14401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.115319][T14401] bridge_slave_0: left allmulticast mode [ 1440.115346][T14401] bridge_slave_0: left promiscuous mode [ 1440.115592][T14401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.300574][T14411] sctp: [Deprecated]: syz.0.10069 (pid 14411) Use of int in maxseg socket option. [ 1440.300574][T14411] Use struct sctp_assoc_value instead [ 1440.637497][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10076'. [ 1440.768118][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10077'. [ 1440.961347][T14439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1440.961366][T14439] IPv6: NLM_F_CREATE should be set when creating new route [ 1440.961393][T14439] IPv6: NLM_F_CREATE should be set when creating new route [ 1441.083741][T14445] netlink: 'syz.0.10082': attribute type 1 has an invalid length. [ 1441.390456][T14459] netlink: 'syz.1.10087': attribute type 1 has an invalid length. [ 1441.505869][T14459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1441.587066][T14460] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1441.775183][T14482] xt_IDLETIMER: timeout value is too big [ 1442.029838][T14492] batman_adv: batadv0: Adding interface: syzkaller0 [ 1442.029855][T14492] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.029883][T14492] batman_adv: batadv0: Interface activated: syzkaller0 [ 1442.555409][T14536] hsr0: entered promiscuous mode [ 1442.591779][T14538] bridge0: port 3(gretap0) entered blocking state [ 1442.591960][T14538] bridge0: port 3(gretap0) entered disabled state [ 1442.592277][T14538] gretap0: entered allmulticast mode [ 1442.593884][T14538] gretap0: entered promiscuous mode [ 1442.843744][T14491] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1442.952768][T14491] batman_adv: batadv0: Removing interface: syzkaller0 [ 1443.024746][T14561] __nla_validate_parse: 9 callbacks suppressed [ 1443.024769][T14561] netlink: 232 bytes leftover after parsing attributes in process `syz.2.10110'. [ 1443.262403][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10114'. [ 1443.381081][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10119'. [ 1443.381141][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10119'. [ 1443.382869][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10119'. [ 1443.383093][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10119'. [ 1443.430347][T14584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10117'. [ 1443.569793][T14598] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10122'. [ 1443.572702][T14598] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10122'. [ 1443.677140][T14602] netlink: 'syz.3.10125': attribute type 4 has an invalid length. [ 1443.677162][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10125'. [ 1443.744909][T14606] ip_tables: iptables: counters copy to user failed while replacing table [ 1443.848022][T14617] openvswitch: netlink: Multiple metadata blocks provided [ 1443.873852][T14619] netlink: 'syz.3.10129': attribute type 4 has an invalid length. [ 1443.874238][T14619] netlink: 'syz.3.10129': attribute type 4 has an invalid length. [ 1443.874563][T14619] netlink: 'syz.3.10129': attribute type 4 has an invalid length. [ 1443.875818][T14619] netlink: 'syz.3.10129': attribute type 4 has an invalid length. [ 1443.891288][T14619] netlink: 'syz.3.10129': attribute type 4 has an invalid length. [ 1444.085900][T14627] sctp: [Deprecated]: syz.4.10130 (pid 14627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1444.085900][T14627] Use struct sctp_sack_info instead [ 1444.430453][T14646] ip_tables: iptables: counters copy to user failed while replacing table [ 1444.430843][T14646] ip_tables: iptables: counters copy to user failed while replacing table [ 1444.433839][T14646] ip_tables: iptables: counters copy to user failed while replacing table [ 1444.434187][T14646] ip_tables: iptables: counters copy to user failed while replacing table [ 1444.446743][T14646] ip_tables: iptables: counters copy to user failed while replacing table [ 1444.447099][T14646] ip_tables: iptables: counters copy to user failed while replacing table [ 1444.447392][T14646] ip_tables: iptables: counters copy to user failed while replacing table [ 1444.447741][T14646] ip_tables: iptables: counters copy to user failed while replacing table [ 1444.945533][T14690] syzkaller0: left promiscuous mode [ 1444.945557][T14690] syzkaller0: left allmulticast mode [ 1444.968109][T14695] validate_nla: 61 callbacks suppressed [ 1444.968130][T14695] netlink: 'syz.4.10146': attribute type 1 has an invalid length. [ 1444.991475][T14695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1445.000365][T14695] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1445.026239][T14698] macsec2: entered allmulticast mode [ 1445.030606][T14698] batman_adv: batadv0: Adding interface: macsec2 [ 1445.030622][T14698] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.030649][T14698] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active [ 1445.071658][T14702] IPVS: length: 238 != 24 [ 1445.195399][T14708] netlink: 'syz.3.10149': attribute type 3 has an invalid length. [ 1445.198133][T26147] IPVS: starting estimator thread 0... [ 1445.287100][T14712] IPVS: using max 52 ests per chain, 124800 per kthread [ 1445.577398][T14670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1445.578260][T14679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1445.883503][T14735] netlink: 'syz.0.10155': attribute type 3 has an invalid length. [ 1446.061805][T14743] Bluetooth: hci0: unsupported parameter 5161 [ 1446.061828][T14743] Bluetooth: hci0: unsupported parameter 8192 [ 1446.061844][T14743] Bluetooth: hci0: unsupported parameter 5161 [ 1446.061856][T14743] Bluetooth: hci0: unsupported parameter 8192 [ 1446.795519][T14798] netlink: 'syz.1.10173': attribute type 1 has an invalid length. [ 1446.971606][T14802] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1446.974554][T14802] bond4: (slave bond5): making interface the new active one [ 1446.975147][T14802] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1447.036289][T14805] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 1447.637148][T14844] netlink: 'syz.2.10182': attribute type 3 has an invalid length. [ 1448.267266][T14890] tc_dump_action: action bad kind [ 1448.360330][T14904] __nla_validate_parse: 86 callbacks suppressed [ 1448.360350][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1448.908442][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10200'. [ 1449.055428][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10202'. [ 1449.055480][T14932] net_ratelimit: 98 callbacks suppressed [ 1449.055493][T14932] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1449.254505][T14945] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1449.316002][T14941] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1449.362722][T14959] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1449.499822][T14959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10208'. [ 1449.704784][T14974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10210'. [ 1449.885859][T14984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1449.965951][T14991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10216'. [ 1449.990113][T14994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1449.990239][T14994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1449.990343][T14994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1449.990447][T14994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10217'. [ 1450.051893][T14997] netlink: 'syz.0.10218': attribute type 4 has an invalid length. [ 1450.054798][T14997] netlink: 'syz.0.10218': attribute type 4 has an invalid length. [ 1450.203753][T15008] netlink: 'syz.4.10222': attribute type 1 has an invalid length. [ 1450.407552][T15017] IPv6: Can't replace route, no match found [ 1450.934257][T15060] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1450.936114][T15057] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1451.063963][T15067] netlink: 'syz.3.10241': attribute type 11 has an invalid length. [ 1451.083973][T15067] netlink: 'syz.3.10241': attribute type 64 has an invalid length. [ 1451.087417][T15067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.088068][T15067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.483486][T15091] Cannot find add_set index 2 as target [ 1451.676647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.676908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.677105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.805504][T15114] netlink: 'syz.1.10254': attribute type 1 has an invalid length. [ 1452.132828][T15135] netlink: 'syz.1.10260': attribute type 1 has an invalid length. [ 1452.336710][T15146] netlink: 'syz.1.10264': attribute type 1 has an invalid length. [ 1452.839035][T15174] Bluetooth: hci0: unsupported parameter 5135 [ 1452.839057][T15174] Bluetooth: hci0: unsupported parameter 8192 [ 1452.839069][T15174] Bluetooth: hci0: unsupported parameter 5135 [ 1452.839081][T15174] Bluetooth: hci0: unsupported parameter 8192 [ 1452.928997][T15174] hsr_slave_1 (unregistering): left promiscuous mode [ 1453.100499][T15184] netlink: 'syz.0.10275': attribute type 1 has an invalid length. [ 1453.262540][T15195] bond5: (slave geneve3): making interface the new active one [ 1453.274170][T15195] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1453.316610][T26148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1453.316668][T26148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1453.316732][T26148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1453.378113][T12084] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1453.382950][T15194] netlink: 'syz.2.10278': attribute type 1 has an invalid length. [ 1453.833842][T15228] __nla_validate_parse: 114 callbacks suppressed [ 1453.833862][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10284'. [ 1453.861058][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10284'. [ 1453.905325][T15233] x_tables: duplicate underflow at hook 3 [ 1454.041549][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10280'. [ 1454.041884][T15210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10280'. [ 1454.259294][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10290'. [ 1454.309596][T15256] x_tables: duplicate entry at hook 2 [ 1454.379546][T15258] No such timeout policy "syz1" [ 1454.399252][T15258] xt_CONNSECMARK: invalid mode: 0 [ 1454.674963][T15270] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1454.675184][T26149] IPVS: starting estimator thread 0... [ 1454.675902][T15270] IPv6: NLM_F_CREATE should be specified when creating new route [ 1454.676003][T15270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1454.676013][T15270] IPv6: NLM_F_CREATE should be set when creating new route [ 1454.676053][T15270] IPv6: NLM_F_CREATE should be set when creating new route [ 1454.676076][T15270] IPv6: NLM_F_CREATE should be set when creating new route [ 1454.742338][T15273] gre0: entered promiscuous mode [ 1454.742360][T15273] gre0: entered allmulticast mode [ 1454.745719][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10299'. [ 1454.745752][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10299'. [ 1454.777656][T15275] IPVS: using max 32 ests per chain, 76800 per kthread [ 1454.780571][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10299'. [ 1454.780602][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10299'. [ 1454.798527][ C1] net_ratelimit: 11 callbacks suppressed [ 1454.798548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.798788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.798971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.799172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.799387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.859457][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10300'. [ 1455.091498][T15304] x_tables: unsorted underflow at hook 4 [ 1455.252084][T15312] IPVS: Error connecting to the multicast addr [ 1455.266243][T15315] TC_ACT_REPEAT abuse ? [ 1455.272873][T15314] TC_ACT_REPEAT abuse ? [ 1455.631860][T15335] validate_nla: 3 callbacks suppressed [ 1455.631880][T15335] netlink: 'syz.3.10316': attribute type 28 has an invalid length. [ 1455.631893][T15335] netlink: 'syz.3.10316': attribute type 3 has an invalid length. [ 1456.065779][T15357] macvlan0: entered promiscuous mode [ 1456.488568][T15391] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1456.753302][T15394] netlink: 'syz.1.10333': attribute type 10 has an invalid length. [ 1456.802758][T15394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1456.804832][T15394] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1457.378567][T15434] 8021q: VLANs not supported on syzkaller0 [ 1457.536832][T15438] netlink: 'syz.2.10346': attribute type 4 has an invalid length. [ 1457.543940][T15438] netlink: 'syz.2.10346': attribute type 4 has an invalid length. [ 1457.610427][T15441] gretap0: entered promiscuous mode [ 1457.658456][T15441] 0{X功: renamed from gretap0 [ 1457.671464][T15441] 0{X功: left promiscuous mode [ 1457.671488][T15441] 0{X功: entered allmulticast mode [ 1457.682137][T15441] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1457.923061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.923296][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.142593][T15467] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1459.155556][T15551] __nla_validate_parse: 85 callbacks suppressed [ 1459.155577][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10375'. [ 1459.155599][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10375'. [ 1459.155637][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10375'. [ 1459.215626][T15551] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1459.285585][T15559] netlink: 'syz.4.10379': attribute type 21 has an invalid length. [ 1459.285609][T15559] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10379'. [ 1459.305353][T15559] netlink: 'syz.4.10379': attribute type 4 has an invalid length. [ 1459.305375][T15559] netlink: 'syz.4.10379': attribute type 5 has an invalid length. [ 1459.305388][T15559] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10379'. [ 1459.335594][T15559] netlink: 'syz.4.10379': attribute type 21 has an invalid length. [ 1459.335616][T15559] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10379'. [ 1459.364157][T15559] netlink: 'syz.4.10379': attribute type 4 has an invalid length. [ 1459.364182][T15559] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10379'. [ 1459.388615][T15560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1459.405421][T15564] netlink: 188 bytes leftover after parsing attributes in process `syz.3.10378'. [ 1459.591212][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10381'. [ 1459.659420][T15586] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10381'. [ 1459.913097][T15598] net_ratelimit: 2 callbacks suppressed [ 1459.913118][T15598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1459.941348][T15596] team0 (unregistering): Port device team_slave_0 removed [ 1460.392776][ T29] audit: type=1804 audit(1794283696.570:12): pid=15632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10402" name="/newroot/254/cgroup.controllers" dev="tmpfs" ino=1308 res=1 errno=0 [ 1460.395562][ T29] audit: type=1800 audit(1794283696.570:13): pid=15632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10402" name="cgroup.controllers" dev="tmpfs" ino=1308 res=0 errno=-22 [ 1460.594453][T15641] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1460.656200][T15637] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1460.699561][T15637] validate_nla: 3 callbacks suppressed [ 1460.699581][T15637] netlink: 'syz.2.10400': attribute type 4 has an invalid length. [ 1460.704384][T15638] gre1: entered promiscuous mode [ 1460.925823][T15659] 0{X功: renamed from gretap0 [ 1460.945297][T15659] bridge0: port 3(30{X功) entered blocking state [ 1460.945430][T15659] bridge0: port 3(30{X功) entered forwarding state [ 1460.963507][T15659] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1460.990446][T15668] xt_socket: unknown flags 0x8 [ 1461.036640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.036884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.037121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.037313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.037535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.037751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.331839][T15682] netlink: 'syz.2.10415': attribute type 1 has an invalid length. [ 1461.451635][T15691] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1461.453736][T15691] bond7: (slave bond8): making interface the new active one [ 1461.454249][T15691] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1461.508009][T15682] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 1461.674650][T15706] netlink: 'syz.3.10421': attribute type 1 has an invalid length. [ 1461.700988][T15706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1461.872811][T15712] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1461.874685][T15712] bond2 (unregistering): Released all slaves [ 1462.082990][T15725] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1462.101514][T15725] bond2 (unregistering): Released all slaves [ 1462.336686][T15755] sctp: [Deprecated]: syz.2.10433 (pid 15755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1462.336686][T15755] Use struct sctp_sack_info instead [ 1462.645934][T15782] sch_fq: defrate 0 ignored. [ 1462.871915][T15787] pimreg: entered allmulticast mode [ 1463.072918][T15806] netlink: 'syz.1.10446': attribute type 2 has an invalid length. [ 1463.072941][T15806] netlink: 'syz.1.10446': attribute type 8 has an invalid length. [ 1463.472988][T15826] tipc: Enabled bearer , priority 0 [ 1463.476291][T15826] xt_ipcomp: unknown flags 1D [ 1463.489984][T15826] syzkaller0: MTU not usable for tipc bearer [ 1463.490003][T15826] tipc: Disabling bearer [ 1464.734888][T15902] __nla_validate_parse: 15 callbacks suppressed [ 1464.734909][T15902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10468'. [ 1464.782374][T15902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10468'. [ 1464.906085][T15911] tipc: Bearer : already 2 bearers with priority 10 [ 1464.906108][T15911] tipc: Bearer : trying with adjusted priority [ 1464.906186][T15911] tipc: Enabling of bearer rejected, failed to enable media [ 1465.221209][T15930] netlink: 'syz.2.10476': attribute type 23 has an invalid length. [ 1465.301263][T15932] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10478'. [ 1465.467272][T15935] x_tables: duplicate entry at hook 4 [ 1466.573140][T15968] bond5: (slave lo): Releasing backup interface [ 1466.573915][T15968] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1466.577744][T15968] net_ratelimit: 64 callbacks suppressed [ 1466.577760][T15968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1466.605318][T15965] smc: net device lo applied user defined pnetid SYZ0 [ 1466.678140][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10490'. [ 1467.260088][T16016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10506'. [ 1467.298231][T16016] veth1_to_team: entered promiscuous mode [ 1467.303558][T16016] veth1_to_team: left promiscuous mode [ 1467.352589][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10508'. [ 1467.356661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.356934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.357137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.357335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.540752][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10510'. [ 1467.758225][T16035] xt_addrtype: ipv6 does not support BROADCAST matching [ 1468.288339][T16066] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10519'. [ 1468.306945][T16067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10520'. [ 1468.367795][ T29] audit: type=1800 audit(1794283704.540:14): pid=16068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10520" name="memory.events" dev="tmpfs" ino=1776 res=0 errno=-22 [ 1468.379305][ T29] audit: type=1804 audit(1794283704.560:15): pid=16071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.10520" name="/newroot/345/memory.events" dev="tmpfs" ino=1776 res=1 errno=0 [ 1468.444558][T16066] bond0 (unregistering): Released all slaves [ 1468.583593][T16075] pimreg3: entered allmulticast mode [ 1468.700752][T16084] syz_tun: entered allmulticast mode [ 1468.755451][T16082] syz_tun: left allmulticast mode [ 1469.288646][T16123] bond3: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 1469.291959][T16123] bond3 (unregistering): Released all slaves [ 1469.523251][T16134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10533'. [ 1469.650262][T16139] Bluetooth: MGMT ver 1.23 [ 1470.048431][T16161] netlink: 'syz.1.10541': attribute type 12 has an invalid length. [ 1470.135410][T16166] bridge0: entered promiscuous mode [ 1470.135470][T16166] bridge0: entered allmulticast mode [ 1470.326986][T16173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10544'. [ 1470.438351][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1470.439628][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1470.461354][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1470.462440][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1470.475927][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1470.476826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.477021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.477195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.477395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.495762][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1470.539774][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1470.540843][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1470.567144][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10546'. [ 1470.598402][T16185] netlink: 'syz.4.10547': attribute type 9 has an invalid length. [ 1470.624135][T16185] netlink: 'syz.4.10547': attribute type 4 has an invalid length. [ 1470.745675][T16194] netlink: 'syz.4.10550': attribute type 1 has an invalid length. [ 1470.745697][T16194] netlink: 'syz.4.10550': attribute type 3 has an invalid length. [ 1470.745714][T16194] NCSI netlink: No device for ifindex 813332851 [ 1471.458036][T16251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.465045][T16251] bond0: entered allmulticast mode [ 1471.465068][T16251] bond_slave_0: entered allmulticast mode [ 1471.465085][T16251] bond_slave_1: entered allmulticast mode [ 1471.609527][T16257] smc: net device lo erased user defined pnetid SYZ0 [ 1471.619023][T16257] netlink: 'syz.3.10568': attribute type 83 has an invalid length. [ 1471.678953][ T8470] Bluetooth: hci4: command 0x0405 tx timeout [ 1471.812659][ T8470] Bluetooth: hci2: Malformed Event: 0x02 [ 1471.825342][T16275] net_ratelimit: 1 callbacks suppressed [ 1471.825361][T16275] ip_tables: iptables: counters copy to user failed while replacing table [ 1471.875115][T16279] bond1: (slave veth0_to_bond): Releasing active interface [ 1471.903280][T16281] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1471.903329][T16279] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1472.013380][T16283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1472.364560][T16309] netlink: 'syz.3.10581': attribute type 1 has an invalid length. [ 1472.428527][T16312] xt_connbytes: Forcing CT accounting to be enabled [ 1472.428572][T16312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1472.486911][T16303] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1472.508191][T16304] bridge4: entered promiscuous mode [ 1472.532385][T16304] bond3: (slave bridge4): making interface the new active one [ 1472.540729][T16304] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1473.009250][T16344] IPv6: NLM_F_CREATE should be specified when creating new route [ 1473.242409][T16356] ip_tables: iptables: counters copy to user failed while replacing table [ 1473.338114][T16361] bond0: entered promiscuous mode [ 1473.432317][T16364] ip_tables: iptables: counters copy to user failed while replacing table [ 1474.699302][T16428] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1475.568705][T16464] ip_tables: iptables: counters copy to user failed while replacing table [ 1475.668638][T16471] __nla_validate_parse: 42 callbacks suppressed [ 1475.668660][T16471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10629'. [ 1475.668706][T16471] netlink: 'syz.3.10629': attribute type 6 has an invalid length. [ 1475.996624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.996850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.997046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.102864][T16494] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1476.130537][ T9157] syzkaller1: tun_net_xmit 90 [ 1476.171286][T16498] wireguard2: entered promiscuous mode [ 1476.218603][T16476] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1476.218627][T16476] syzkaller1: Linktype set failed because interface is up [ 1476.301886][T16508] sctp: [Deprecated]: syz.4.10637 (pid 16508) Use of int in maxseg socket option. [ 1476.301886][T16508] Use struct sctp_assoc_value instead [ 1476.413820][T12143] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1476.499924][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10638'. [ 1476.942110][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10643'. [ 1477.005125][T16537] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1477.020596][T16537] bond4 (unregistering): Released all slaves [ 1477.041907][T16543] net_ratelimit: 1 callbacks suppressed [ 1477.041925][T16543] ip_tables: iptables: counters copy to user failed while replacing table [ 1477.331577][T16554] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1477.355540][T16555] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1479.253963][T16510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1479.280691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.280906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.281108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.483352][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10651'. [ 1480.102026][T16637] netlink: 'syz.4.10663': attribute type 8 has an invalid length. [ 1480.218584][T16642] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10666'. [ 1480.461567][T16653] xt_hashlimit: size too large, truncated to 1048576 [ 1480.513494][T16655] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.10670'. [ 1480.513576][T16655] 0猉功D龌: renamed from gretap0 (while UP) [ 1480.521117][T16655] 0猉功D龌: entered allmulticast mode [ 1480.529619][T16658] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.10670'. [ 1480.529760][T16658] 1猉功D龌: renamed from 00猉功D龌 (while UP) [ 1480.530368][T16657] xt_hashlimit: size too large, truncated to 1048576 [ 1480.736271][T16662] Cannot find map_set index 135 as target [ 1480.795878][T16663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1482.396553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.396791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.908436][T16619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1483.165551][T16682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10677'. [ 1483.243274][T16691] syz_tun: entered allmulticast mode [ 1483.392737][T16680] dvmrp3: entered allmulticast mode [ 1483.433781][T16698] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1483.435339][T16698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.457594][T16676] syz_tun: left allmulticast mode [ 1483.486152][T16694] syzkaller0: entered promiscuous mode [ 1483.486177][T16694] syzkaller0: entered allmulticast mode [ 1483.628754][T16704] bond4: option downdelay: invalid value (18446744073709551615) [ 1483.628780][T16704] bond4: option downdelay: allowed values 0 - 2147483647 [ 1483.633700][T16704] bond4 (unregistering): Released all slaves [ 1483.759008][T16712] bond4: option downdelay: invalid value (18446744073709551615) [ 1483.759033][T16712] bond4: option downdelay: allowed values 0 - 2147483647 [ 1483.769538][T16712] bond4 (unregistering): Released all slaves [ 1484.120183][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10690'. [ 1484.170440][T16740] bond4: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1484.174781][T16745] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1484.269941][T16745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10691'. [ 1484.271983][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10691'. [ 1484.272004][T16745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10691'. [ 1484.310089][T16752] netlink: 'syz.3.10693': attribute type 1 has an invalid length. [ 1484.394875][T16752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1484.442021][T16757] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1484.884610][T16787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10704'. [ 1484.885060][T16787] netlink: 'syz.3.10704': attribute type 1 has an invalid length. [ 1484.950764][T16787] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1485.048728][T16802] veth0_macvtap: left promiscuous mode [ 1485.162151][T16811] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 1485.212285][T16816] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10708'. [ 1485.231971][T16816] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10708'. [ 1485.644059][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10718'. [ 1485.645282][T16838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10718'. [ 1485.711001][T16844] netlink: 'syz.2.10721': attribute type 9 has an invalid length. [ 1486.110281][T16872] netlink: 'syz.0.10728': attribute type 15 has an invalid length. [ 1486.510473][T16895] syzkaller0: entered promiscuous mode [ 1486.510496][T16895] syzkaller0: entered allmulticast mode [ 1486.720991][ C1] vcan0: j1939_tp_rxtimer: 0xffff888037f79000: rx timeout, send abort [ 1486.721233][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888037f79000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1486.940528][T16920] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1486.956557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.956803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.957004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.957376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.963075][T16923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1487.185149][T16931] syzkaller0: entered promiscuous mode [ 1487.185171][T16931] syzkaller0: entered allmulticast mode [ 1487.267445][T16937] IPv6: NLM_F_CREATE should be specified when creating new route [ 1487.269432][T16937] xt_NETMAP: bad MAP_IPS. [ 1487.893235][T16970] netlink: 'syz.2.10754': attribute type 2 has an invalid length. [ 1487.893260][T16970] nbd: couldn't find a device at index -2147221500 [ 1488.010978][T16980] ip6t_REJECT: ECHOREPLY is not supported [ 1488.011836][T16981] ip6t_REJECT: ECHOREPLY is not supported [ 1488.122903][T16985] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 1488.221132][T16989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1488.528790][T17004] __nla_validate_parse: 8 callbacks suppressed [ 1488.528808][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10765'. [ 1488.719451][T17022] netlink: 116 bytes leftover after parsing attributes in process `syz.1.10770'. [ 1488.808403][ T8470] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 1489.340920][T17058] 8021q: VLANs not supported on syzkaller0 [ 1489.341700][T17058] syzkaller0: left promiscuous mode [ 1489.341719][T17058] syzkaller0: left allmulticast mode [ 1489.405071][T17059] netlink: 'syz.0.10781': attribute type 1 has an invalid length. [ 1489.450399][T17059] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1489.461592][T17067] tc mirred to Houston: device syzkaller1 is down [ 1489.461614][T17067] tc mirred to Houston: device syzkaller1 is down [ 1489.461629][T17067] tc mirred to Houston: device syzkaller1 is down [ 1489.461684][T17067] tc mirred to Houston: device syzkaller1 is down [ 1489.461698][T17067] tc mirred to Houston: device syzkaller1 is down [ 1489.461712][T17067] tc mirred to Houston: device syzkaller1 is down [ 1489.461726][T17067] tc mirred to Houston: device syzkaller1 is down [ 1489.461740][T17067] tc mirred to Houston: device syzkaller1 is down [ 1489.464072][T17059] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10781'. [ 1489.464740][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10781'. [ 1489.464758][T17059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10781'. [ 1489.571374][T17078] ip6gre2: entered promiscuous mode [ 1489.571398][T17078] ip6gre2: entered allmulticast mode [ 1489.709075][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10787'. [ 1489.709189][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10787'. [ 1489.709288][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10787'. [ 1489.709388][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10787'. [ 1489.709516][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10787'. [ 1489.886059][T17097] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1490.124889][T17117] x_tables: duplicate underflow at hook 1 [ 1490.422831][T17135] xt_IDLETIMER: label is empty or not nul-terminated [ 1490.424063][T17135] xt_IDLETIMER: label is empty or not nul-terminated [ 1490.444704][T17135] xt_IDLETIMER: label is empty or not nul-terminated [ 1490.449083][T17135] xt_IDLETIMER: label is empty or not nul-terminated [ 1490.450092][T17135] xt_IDLETIMER: label is empty or not nul-terminated [ 1490.457770][T17135] xt_IDLETIMER: label is empty or not nul-terminated [ 1490.465279][T17135] xt_IDLETIMER: label is empty or not nul-terminated [ 1490.471312][T17135] xt_IDLETIMER: label is empty or not nul-terminated [ 1490.478046][T17136] syzkaller0: entered promiscuous mode [ 1490.478064][T17136] syzkaller0: entered allmulticast mode [ 1490.480567][T17135] xt_IDLETIMER: label is empty or not nul-terminated [ 1490.485027][T17135] xt_IDLETIMER: label is empty or not nul-terminated [ 1491.035479][T17177] netlink: 'syz.1.10808': attribute type 10 has an invalid length. [ 1492.694376][T17228] rxe_eth0 speed is unknown, defaulting to 1000 [ 1492.856767][T17251] dvmrp1: entered allmulticast mode [ 1493.418242][T17269] xt_addrtype: ipv6 does not support BROADCAST matching [ 1493.894267][T17295] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1493.894334][T17295] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1493.894375][T17295] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1494.009981][T17300] net_ratelimit: 17 callbacks suppressed [ 1494.010002][T17300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.010309][T17300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.010602][T17300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.010918][T17300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.011230][T17300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.011524][T17300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.011801][T17300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.012099][T17300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.012411][T17300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.012887][T17300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1494.591968][T17326] __nla_validate_parse: 69 callbacks suppressed [ 1494.591990][T17326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10840'. [ 1494.719078][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10843'. [ 1494.762139][T17296] lo speed is unknown, defaulting to 1000 [ 1494.762200][T17296] lo speed is unknown, defaulting to 1000 [ 1494.762945][T17296] lo speed is unknown, defaulting to 1000 [ 1494.779619][T17296] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1494.779689][T17296] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1494.779727][T17296] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1495.017303][T17289] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.415872][T26149] bond3 (unregistering): (slave ip6gre2): Releasing backup interface [ 1495.415899][T26149] ip6gre2 (unregistering): left promiscuous mode [ 1495.579393][T26149] bond18 (unregistering): (slave geneve4): Releasing active interface [ 1495.612971][T26149] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1495.748821][T26149] bond1 (unregistering): Released all slaves [ 1495.766993][T26149] bond2 (unregistering): Released all slaves [ 1495.792143][T26149] bond3 (unregistering): Released all slaves [ 1495.812510][T26149] bond4 (unregistering): Released all slaves [ 1495.830238][T26149] bond5 (unregistering): Released all slaves [ 1495.845944][T26149] bond6 (unregistering): Released all slaves [ 1495.867997][T26149] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1495.869290][T26149] bond7 (unregistering): Released all slaves [ 1495.894289][T26149] bond8 (unregistering): Released all slaves [ 1495.914135][T26149] bond9 (unregistering): Released all slaves [ 1495.933841][T26149] bond10 (unregistering): Released all slaves [ 1495.951413][T26149] bond11 (unregistering): Released all slaves [ 1495.965498][T26149] bond12 (unregistering): Released all slaves [ 1495.986742][T26149] bond13 (unregistering): Released all slaves [ 1495.995501][T26149] bond14 (unregistering): Released all slaves [ 1496.017878][T26149] bond15 (unregistering): Released all slaves [ 1496.026119][T26149] bond16 (unregistering): Released all slaves [ 1496.057363][T26149] bond17 (unregistering): Released all slaves [ 1496.065576][T26149] bond18 (unregistering): Released all slaves [ 1496.089700][T26149] bond19 (unregistering): Released all slaves [ 1496.110700][T17296] lo speed is unknown, defaulting to 1000 [ 1496.117827][T17296] lo speed is unknown, defaulting to 1000 [ 1496.122858][T17296] lo speed is unknown, defaulting to 1000 [ 1496.129414][T17296] lo speed is unknown, defaulting to 1000 [ 1496.132830][T17296] lo speed is unknown, defaulting to 1000 [ 1496.139107][T17296] lo speed is unknown, defaulting to 1000 [ 1496.144126][T17296] lo speed is unknown, defaulting to 1000 [ 1496.352877][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10848'. [ 1496.367668][T17289] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.433705][T26149] tipc: Left network mode [ 1496.533149][T17289] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.543396][T17359] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10850'. [ 1496.797192][T17289] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.119845][ T3388] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.151731][T17387] geneve0: entered allmulticast mode [ 1497.231064][ T3388] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.250098][ T3388] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.566910][ T3388] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.643125][T17398] geneve4: entered allmulticast mode [ 1497.882943][T17405] netlink: 'syz.2.10861': attribute type 4 has an invalid length. [ 1498.042472][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10868'. [ 1498.113102][T17427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1498.127861][T17427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1498.143334][T17430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10868'. [ 1498.379867][T26149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.379892][T26149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.389385][T26149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.389409][T26149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.428262][T17437] IPVS: length: 186 != 8 [ 1498.448484][T26149] veth1_macvtap: left promiscuous mode [ 1498.448520][T26149] veth0_macvtap: left allmulticast mode [ 1498.448537][T26149] veth0_macvtap: left promiscuous mode [ 1498.459012][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10869'. [ 1498.547378][T17441] netlink: 'syz.4.10871': attribute type 1 has an invalid length. [ 1498.559907][T17441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10871'. [ 1499.401855][T17463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10875'. [ 1499.970124][T17446] ip6gre1: entered allmulticast mode [ 1500.156708][ C0] net_ratelimit: 16 callbacks suppressed [ 1500.156731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.156944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.284154][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10878'. [ 1500.293810][T17483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10882'. [ 1500.449080][T17485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10881'. [ 1500.515142][T17489] batadv0: entered promiscuous mode [ 1500.519608][T17489] macsec1: entered promiscuous mode [ 1500.530025][T17489] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1500.534552][T17489] batadv0: left promiscuous mode [ 1500.620445][T26149] IPVS: stop unused estimator thread 0... [ 1500.764190][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10887'. [ 1500.779498][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10889'. [ 1500.905440][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10890'. [ 1500.968357][T17529] netlink: 666 bytes leftover after parsing attributes in process `syz.1.10891'. [ 1501.257634][T17549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10896'. [ 1501.285929][T17549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1501.591919][T17569] netlink: 'syz.1.10901': attribute type 33 has an invalid length. [ 1501.662945][T17569] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1501.665005][T17569] bond8 (unregistering): Released all slaves [ 1501.840286][T17579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10904'. [ 1501.970203][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10908'. [ 1501.985933][T17590] syzkaller0: entered promiscuous mode [ 1502.010374][T17590] tipc: Bearer : already 2 bearers with priority 10 [ 1502.010396][T17590] tipc: Bearer : trying with adjusted priority [ 1502.010451][T17590] tipc: Enabling of bearer rejected, failed to enable media [ 1502.341393][T17618] sctp: [Deprecated]: syz.1.10912 (pid 17618) Use of int in max_burst socket option. [ 1502.341393][T17618] Use struct sctp_assoc_value instead [ 1502.693096][T17648] ip_tables: iptables: counters copy to user failed while replacing table [ 1505.512282][T17631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1505.547936][T17680] __nla_validate_parse: 7 callbacks suppressed [ 1505.547959][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10924'. [ 1505.547973][T17680] netlink: 5740 bytes leftover after parsing attributes in process `syz.4.10924'. [ 1505.729498][T17691] netlink: 'syz.4.10931': attribute type 8 has an invalid length. [ 1505.782919][T17699] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10928'. [ 1505.810919][T17696] syzkaller0: entered promiscuous mode [ 1505.810946][T17696] syzkaller0: entered allmulticast mode [ 1506.282141][T17728] netlink: 'syz.0.10940': attribute type 39 has an invalid length. [ 1506.505944][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10944'. [ 1506.701274][T17763] netlink: 'syz.4.10949': attribute type 1 has an invalid length. [ 1506.840471][T17766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.840793][T17766] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10950'. [ 1507.188959][T17792] vlan2: entered promiscuous mode [ 1507.188982][T17792] hsr0: entered promiscuous mode [ 1507.191587][T17799] netlink: 'syz.0.10960': attribute type 1 has an invalid length. [ 1507.193535][T17799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1507.231363][T17803] netlink: 'syz.0.10960': attribute type 1 has an invalid length. [ 1507.231949][T17802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1507.587058][T17822] macsec1: entered promiscuous mode [ 1507.587082][T17822] batadv0: entered promiscuous mode [ 1507.591930][T17822] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1507.593484][T17822] batadv0: left promiscuous mode [ 1507.621968][T17826] netlink: 'syz.2.10964': attribute type 10 has an invalid length. [ 1507.699704][T17827] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10965'. [ 1507.720458][T17834] netlink: 'syz.3.10968': attribute type 1 has an invalid length. [ 1507.720482][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10968'. [ 1507.721197][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10965'. [ 1507.737385][T17832] netlink: 244 bytes leftover after parsing attributes in process `syz.4.10967'. [ 1507.768678][T17834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1508.057458][T17845] Bluetooth: hci0: unsupported parameter 5134 [ 1508.057481][T17845] Bluetooth: hci0: unsupported parameter 8192 [ 1508.057496][T17845] Bluetooth: hci0: unsupported parameter 5134 [ 1508.057508][T17845] Bluetooth: hci0: unsupported parameter 8192 [ 1508.331227][T17857] x_tables: duplicate underflow at hook 2 [ 1508.974626][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10981'. [ 1508.994303][T17888] vlan3: entered promiscuous mode [ 1508.994325][T17888] bond0: entered promiscuous mode [ 1508.994337][T17888] bond_slave_0: entered promiscuous mode [ 1508.994535][T17888] bond_slave_1: entered promiscuous mode [ 1508.994793][T17888] macvlan1: entered promiscuous mode [ 1508.995179][T17888] batadv0: entered promiscuous mode [ 1509.053790][T17888] xfrm1: entered promiscuous mode [ 1509.053813][T17888] xfrm1: entered allmulticast mode [ 1509.221194][T17912] ip_tables: iptables: counters copy to user failed while replacing table [ 1509.629520][ T29] audit: type=1107 audit(1794283745.810:16): pid=17931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1510.001956][ T5642] Bluetooth: hci3: unexpected event 0x0f length: 0 < 4 [ 1510.128897][T17945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1510.145681][T17923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1510.304171][T17958] syzkaller0: entered promiscuous mode [ 1510.304192][T17958] syzkaller0: entered allmulticast mode [ 1510.863544][T17994] __nla_validate_parse: 6 callbacks suppressed [ 1510.863574][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11014'. [ 1511.014098][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11016'. [ 1511.014114][T17998] bridge_slave_0: default FDB implementation only supports local addresses [ 1511.109730][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11016'. [ 1511.109753][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11016'. [ 1511.109783][T18000] bond0: left promiscuous mode [ 1511.273830][ T8470] Bluetooth: hci4: link tx timeout [ 1511.273849][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.278968][ T8470] Bluetooth: hci4: link tx timeout [ 1511.278984][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.281979][ T8470] Bluetooth: hci4: link tx timeout [ 1511.281993][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.282025][ T8470] Bluetooth: hci4: link tx timeout [ 1511.282036][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.282321][ T8470] Bluetooth: hci4: link tx timeout [ 1511.282331][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.331521][ T8470] Bluetooth: hci4: link tx timeout [ 1511.331539][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.340558][ T8470] Bluetooth: hci4: link tx timeout [ 1511.340576][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.353024][ T8470] Bluetooth: hci4: link tx timeout [ 1511.353043][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.368145][ T8470] Bluetooth: hci4: link tx timeout [ 1511.368162][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.386920][ T8470] Bluetooth: hci4: link tx timeout [ 1511.386938][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.387163][ T8470] Bluetooth: hci4: link tx timeout [ 1511.387175][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.387271][ T8470] Bluetooth: hci4: link tx timeout [ 1511.387282][ T8470] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.813892][T18027] netlink: 'syz.1.11022': attribute type 4 has an invalid length. [ 1511.813915][T18027] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11022'. [ 1511.953943][T18040] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11023'. [ 1511.956047][T18040] tls_set_device_offload_rx: netdev not found [ 1512.023305][T18041] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1512.125404][T18045] gtp0: entered promiscuous mode [ 1512.134434][T18045] gtp0: entered allmulticast mode [ 1512.411968][T18061] [ 1512.414365][T18061] ====================================================== [ 1512.421379][T18061] WARNING: possible circular locking dependency detected [ 1512.428410][T18061] syzkaller #0 Not tainted [ 1512.432818][T18061] ------------------------------------------------------ [ 1512.439848][T18061] syz.4.11032/18061 is trying to acquire lock: [ 1512.445986][T18061] ffff88802798d958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1512.455449][T18061] [ 1512.455449][T18061] but task is already holding lock: [ 1512.462884][T18061] ffff88802798d430 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 1512.473079][T18061] [ 1512.473079][T18061] which lock already depends on the new lock. [ 1512.473079][T18061] [ 1512.483478][T18061] [ 1512.483478][T18061] the existing dependency chain (in reverse order) is: [ 1512.492489][T18061] [ 1512.492489][T18061] -> #6 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1512.501094][T18061] blk_alloc_queue+0x544/0x690 [ 1512.506462][T18061] __blk_mq_alloc_disk+0x194/0x390 [ 1512.512148][T18061] nbd_dev_add+0x494/0xb60 [ 1512.517138][T18061] nbd_init+0x168/0x1f0 [ 1512.521898][T18061] do_one_initcall+0x250/0x870 [ 1512.527177][T18061] do_initcall_level+0x10a/0x1a0 [ 1512.532721][T18061] do_initcalls+0x59/0xa0 [ 1512.537572][T18061] kernel_init_freeable+0x29d/0x3e0 [ 1512.543293][T18061] kernel_init+0x22/0x1d0 [ 1512.548147][T18061] ret_from_fork+0x514/0xb70 [ 1512.553291][T18061] ret_from_fork_asm+0x1a/0x30 [ 1512.558571][T18061] [ 1512.558571][T18061] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1512.565775][T18061] fs_reclaim_acquire+0x71/0x100 [ 1512.571239][T18061] __kmalloc_cache_node_noprof+0x66/0x620 [ 1512.577477][T18061] create_worker+0x112/0x7c0 [ 1512.582596][T18061] workqueue_prepare_cpu+0xe4/0x170 [ 1512.588312][T18061] cpuhp_invoke_callback+0x434/0x810 [ 1512.594119][T18061] _cpu_up+0x2ce/0x5b0 [ 1512.598714][T18061] cpu_up+0x1d2/0x220 [ 1512.603215][T18061] cpuhp_bringup_mask+0xb2/0x1a0 [ 1512.608765][T18061] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1512.615098][T18061] bringup_nonboot_cpus+0x17/0x30 [ 1512.620643][T18061] smp_init+0x32/0x110 [ 1512.625597][T18061] kernel_init_freeable+0x27f/0x3e0 [ 1512.631314][T18061] kernel_init+0x22/0x1d0 [ 1512.636161][T18061] ret_from_fork+0x514/0xb70 [ 1512.641268][T18061] ret_from_fork_asm+0x1a/0x30 [ 1512.646557][T18061] [ 1512.646557][T18061] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 1512.654291][T18061] cpus_read_lock+0x3d/0x160 [ 1512.659421][T18061] static_key_slow_inc+0x12/0x30 [ 1512.664880][T18061] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1512.671120][T18061] nbd_genl_foreach_sock+0x265/0x450 [ 1512.676921][T18061] nbd_genl_reconfigure+0xbbb/0x1040 [ 1512.682722][T18061] genl_family_rcv_msg_doit+0x233/0x340 [ 1512.688802][T18061] genl_rcv_msg+0x614/0x7a0 [ 1512.693824][T18061] netlink_rcv_skb+0x226/0x4a0 [ 1512.699158][T18061] genl_rcv+0x28/0x40 [ 1512.703661][T18061] netlink_unicast+0x8ef/0xa80 [ 1512.708946][T18061] netlink_sendmsg+0x7f0/0xb20 [ 1512.714245][T18061] sock_sendmsg_nosec+0x14e/0x190 [ 1512.719796][T18061] ____sys_sendmsg+0x54e/0x850 [ 1512.725088][T18061] ___sys_sendmsg+0x2a5/0x360 [ 1512.730287][T18061] __x64_sys_sendmsg+0x1b1/0x290 [ 1512.735741][T18061] do_syscall_64+0x166/0x520 [ 1512.740854][T18061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.747267][T18061] [ 1512.747267][T18061] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1512.754905][T18061] __mutex_lock+0x197/0x15a0 [ 1512.760021][T18061] nbd_queue_rq+0x373/0xff0 [ 1512.765044][T18061] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1512.771186][T18061] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1512.778077][T18061] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1512.784576][T18061] blk_mq_run_work_fn+0x167/0x2f0 [ 1512.790121][T18061] process_scheduled_works+0xc3d/0x1630 [ 1512.796190][T18061] worker_thread+0xa47/0xfb0 [ 1512.801319][T18061] kthread+0x38b/0x480 [ 1512.805907][T18061] ret_from_fork+0x514/0xb70 [ 1512.811043][T18061] ret_from_fork_asm+0x1a/0x30 [ 1512.816327][T18061] [ 1512.816327][T18061] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1512.823538][T18061] __mutex_lock+0x197/0x15a0 [ 1512.828657][T18061] nbd_queue_rq+0xc1/0xff0 [ 1512.833588][T18061] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1512.839655][T18061] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1512.846493][T18061] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1512.852985][T18061] blk_mq_run_work_fn+0x167/0x2f0 [ 1512.858533][T18061] process_scheduled_works+0xc3d/0x1630 [ 1512.864599][T18061] worker_thread+0xa47/0xfb0 [ 1512.869715][T18061] kthread+0x38b/0x480 [ 1512.874296][T18061] ret_from_fork+0x514/0xb70 [ 1512.879396][T18061] ret_from_fork_asm+0x1a/0x30 [ 1512.884672][T18061] [ 1512.884672][T18061] -> #1 (set->srcu){.+.+}-{0:0}: [ 1512.891785][T18061] __synchronize_srcu+0xca/0x2f0 [ 1512.897245][T18061] elevator_switch+0x1e8/0x7b0 [ 1512.902523][T18061] elevator_change+0x2fa/0x480 [ 1512.907799][T18061] elevator_set_default+0x375/0x440 [ 1512.913522][T18061] blk_register_queue+0x404/0x4f0 [ 1512.919052][T18061] __add_disk+0x6b8/0xdb0 [ 1512.923891][T18061] add_disk_fwnode+0x100/0x3a0 [ 1512.929162][T18061] nbd_dev_add+0x733/0xb60 [ 1512.934086][T18061] nbd_init+0x168/0x1f0 [ 1512.938762][T18061] do_one_initcall+0x250/0x870 [ 1512.944036][T18061] do_initcall_level+0x10a/0x1a0 [ 1512.949527][T18061] do_initcalls+0x59/0xa0 [ 1512.954366][T18061] kernel_init_freeable+0x29d/0x3e0 [ 1512.960075][T18061] kernel_init+0x22/0x1d0 [ 1512.964916][T18061] ret_from_fork+0x514/0xb70 [ 1512.970016][T18061] ret_from_fork_asm+0x1a/0x30 [ 1512.975289][T18061] [ 1512.975289][T18061] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1512.983096][T18061] __lock_acquire+0x164c/0x2de0 [ 1512.988459][T18061] lock_acquire+0x115/0x350 [ 1512.993479][T18061] __mutex_lock+0x197/0x15a0 [ 1512.998585][T18061] elevator_change+0x1af/0x480 [ 1513.003862][T18061] elevator_set_none+0xb5/0x140 [ 1513.009224][T18061] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 1513.015538][T18061] nbd_start_device+0x189/0xb30 [ 1513.020896][T18061] nbd_genl_connect+0x167d/0x1cd0 [ 1513.026428][T18061] genl_family_rcv_msg_doit+0x233/0x340 [ 1513.032489][T18061] genl_rcv_msg+0x614/0x7a0 [ 1513.037501][T18061] netlink_rcv_skb+0x226/0x4a0 [ 1513.042780][T18061] genl_rcv+0x28/0x40 [ 1513.047268][T18061] netlink_unicast+0x8ef/0xa80 [ 1513.052541][T18061] netlink_sendmsg+0x7f0/0xb20 [ 1513.057992][T18061] sock_sendmsg_nosec+0x14e/0x190 [ 1513.063534][T18061] ____sys_sendmsg+0x54e/0x850 [ 1513.068807][T18061] ___sys_sendmsg+0x2a5/0x360 [ 1513.073995][T18061] __x64_sys_sendmsg+0x1b1/0x290 [ 1513.079439][T18061] do_syscall_64+0x166/0x520 [ 1513.084548][T18061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.090950][T18061] [ 1513.090950][T18061] other info that might help us debug this: [ 1513.090950][T18061] [ 1513.101168][T18061] Chain exists of: [ 1513.101168][T18061] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 1513.101168][T18061] [ 1513.114888][T18061] Possible unsafe locking scenario: [ 1513.114888][T18061] [ 1513.122328][T18061] CPU0 CPU1 [ 1513.128029][T18061] ---- ---- [ 1513.133377][T18061] lock(&q->q_usage_counter(io)#49); [ 1513.138741][T18061] lock(fs_reclaim); [ 1513.145235][T18061] lock(&q->q_usage_counter(io)#49); [ 1513.153115][T18061] lock(&q->elevator_lock); [ 1513.157691][T18061] [ 1513.157691][T18061] *** DEADLOCK *** [ 1513.157691][T18061] [ 1513.165821][T18061] locks held by syz.4.11032/18061: 6, last CPU#0: [ 1513.172217][T18061] #0: ffffffff916f7b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1513.180391][T18061] #1: ffffffff916f7960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1513.189369][T18061] #2: ffff8880275c21c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x1b70 [ 1513.200760][T18061] #3: ffff8880275c20d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x1b70 [ 1513.211711][T18061] #4: ffff88802798d430 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 1513.222336][T18061] #5: ffff88802798d468 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1513.233232][T18061] [ 1513.233232][T18061] stack backtrace: [ 1513.239119][T18061] CPU: 0 UID: 0 PID: 18061 Comm: syz.4.11032 Not tainted syzkaller #0 PREEMPT(full) [ 1513.248565][T18061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1513.258611][T18061] Call Trace: [ 1513.261883][T18061] [ 1513.264803][T18061] dump_stack_lvl+0xe8/0x150 [ 1513.269408][T18061] print_circular_bug+0x2e2/0x300 [ 1513.274445][T18061] check_noncircular+0x12f/0x150 [ 1513.279390][T18061] __lock_acquire+0x164c/0x2de0 [ 1513.284276][T18061] lock_acquire+0x115/0x350 [ 1513.288808][T18061] ? elevator_change+0x1af/0x480 [ 1513.293760][T18061] __mutex_lock+0x197/0x15a0 [ 1513.298345][T18061] ? elevator_change+0x1af/0x480 [ 1513.303283][T18061] ? irqentry_exit+0x2a0/0x9b0 [ 1513.308043][T18061] ? lockdep_hardirqs_on+0x7b/0x110 [ 1513.313235][T18061] ? irqentry_exit+0x2a0/0x9b0 [ 1513.317991][T18061] ? trace_irq_disable+0x3b/0x140 [ 1513.323010][T18061] ? elevator_change+0x1af/0x480 [ 1513.327943][T18061] ? __pfx___mutex_lock+0x10/0x10 [ 1513.332967][T18061] ? blk_mq_cancel_work_sync+0x6e/0xe0 [ 1513.338415][T18061] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1513.343862][T18061] elevator_change+0x1af/0x480 [ 1513.348624][T18061] elevator_set_none+0xb5/0x140 [ 1513.353470][T18061] ? __pfx_elevator_set_none+0x10/0x10 [ 1513.358925][T18061] ? xa_load+0x1db/0x210 [ 1513.363165][T18061] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 1513.368963][T18061] ? kernfs_add_one+0xfc/0x510 [ 1513.373764][T18061] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1513.380004][T18061] ? sysfs_add_file_mode_ns+0x258/0x300 [ 1513.385635][T18061] nbd_start_device+0x189/0xb30 [ 1513.390483][T18061] ? device_create_file+0xf4/0x1b0 [ 1513.395619][T18061] nbd_genl_connect+0x167d/0x1cd0 [ 1513.400637][T18061] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1513.406002][T18061] ? rcu_is_watching+0x16/0xb0 [ 1513.410765][T18061] ? __nla_parse+0x40/0x60 [ 1513.415177][T18061] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1513.421500][T18061] genl_family_rcv_msg_doit+0x233/0x340 [ 1513.427040][T18061] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1513.433101][T18061] ? __lock_acquire+0x747/0x2de0 [ 1513.438032][T18061] genl_rcv_msg+0x614/0x7a0 [ 1513.442527][T18061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1513.447540][T18061] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1513.452905][T18061] netlink_rcv_skb+0x226/0x4a0 [ 1513.457667][T18061] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1513.462683][T18061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1513.467967][T18061] ? down_read+0x2b9/0x320 [ 1513.472380][T18061] genl_rcv+0x28/0x40 [ 1513.476349][T18061] netlink_unicast+0x8ef/0xa80 [ 1513.481115][T18061] netlink_sendmsg+0x7f0/0xb20 [ 1513.485874][T18061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1513.491158][T18061] ? aa_sock_msg_perm+0x144/0x210 [ 1513.496181][T18061] ? apparmor_socket_sendmsg+0x98/0x360 [ 1513.501719][T18061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1513.506997][T18061] sock_sendmsg_nosec+0x14e/0x190 [ 1513.512019][T18061] ____sys_sendmsg+0x54e/0x850 [ 1513.516773][T18061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1513.522055][T18061] ? import_iovec+0x73/0xa0 [ 1513.526554][T18061] ___sys_sendmsg+0x2a5/0x360 [ 1513.531227][T18061] ? __lock_acquire+0x747/0x2de0 [ 1513.536158][T18061] ? __pfx____sys_sendmsg+0x10/0x10 [ 1513.541347][T18061] ? futex_wake+0x51b/0x5f0 [ 1513.545880][T18061] ? __fget_files+0x3a2/0x420 [ 1513.550549][T18061] ? __fget_files+0x2a/0x420 [ 1513.555132][T18061] __x64_sys_sendmsg+0x1b1/0x290 [ 1513.560065][T18061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1513.565521][T18061] do_syscall_64+0x166/0x520 [ 1513.570104][T18061] ? trace_irq_disable+0x3b/0x140 [ 1513.575122][T18061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.581179][T18061] ? clear_bhb_loop+0x70/0xc0 [ 1513.585844][T18061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.591726][T18061] RIP: 0033:0x7fb5179a8f19 [ 1513.596133][T18061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1513.615727][T18061] RSP: 002b:00007fb5187e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1513.624132][T18061] RAX: ffffffffffffffda RBX: 00007fb517c25fa0 RCX: 00007fb5179a8f19 [ 1513.632090][T18061] RDX: 000000000400400c RSI: 0000200000000200 RDI: 0000000000000006 [ 1513.640052][T18061] RBP: 00007fb517a37f6d R08: 0000000000000000 R09: 0000000000000000 [ 1513.648010][T18061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1513.655965][T18061] R13: 00007fb517c26038 R14: 00007fb517c25fa0 R15: 00007ffc9f14e8d8 [ 1513.663936][T18061] [ 1513.677351][ T8470] Bluetooth: hci4: command 0x0405 tx timeout [ 1513.751692][ T5642] block nbd0: Receive control failed (result -32) [ 1513.751724][ T5632] block nbd0: Receive control failed (result -32)