last executing test programs: 3.194629609s ago: executing program 3 (id=2114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800140000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='@\x00\x00\x00']}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@generic="1ca81cbaaaac12eb"]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r10 = socket$kcm(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340", @ANYRES64=r8, @ANYRES8=r2, @ANYRES16=r10, @ANYRES64=r5, @ANYRES16=r4, @ANYRES64=r8, @ANYBLOB="49785cd18f8306760a27e6d58cdc8d9d7be15d15a6b638643bf267a26dbc07cb30870ffff02484027cbc99fd125de4d71bf4920cedffbdc930fb0cbcfe6522a41e8188157a9d8dc11fe2e23d9810172769a316740af71705f275924930c12561f9e7bdb18f8fe6ac06caf92f9b958b1833739e5e8650417a6f33f7935ad79953812879366f2e7a2682c523cdaa5345fac160406b1789ddbb516e9c532555822ba05b3233803c37ab9ba0d23e7448d761d456e3736c5ba122af9f5ce29adf907302f124f99d90bcfd23608b65a493da492be62ee71e7aeb27626081b2ca7f1aac3c6895691e59a992afbac106cb671dd29f"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500010700000000002f9078ac1e0001e0000001000086dd00f39078a102000034cb6dcdd2bc08508f3e2edd0d265b8bc0497d01ee697d19758303462c8c7aea2c"], 0x119) (async) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000190003012dbd7000ffdbdf251d01020008000900", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="40d230b908448678053f7fbf8bd8af677db4098daad167cec36ff7d8245604d4e9701a841f49cc6df41077b792b62f282f736ec0f6a09d170c9ca476ed24e729ef948d4cf07e83c1374358ea700a1499932e045c7ba9b77ece91e98d9b76410c9dbfaf746437458e992927ee71b22b11a0183f16da1df57aa9a78b00d91903836a59ddf48b3f33ae7869d33dab303bfb6fab71fb20d4eddc39fb49b1c7681aa3fed8"], 0x24}}, 0x4040000) 2.836002189s ago: executing program 3 (id=2117): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, r2, 0xffffffff}, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000240), &(0x7f0000000380)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0xf8}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r11, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 2.348096461s ago: executing program 1 (id=2121): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)={0x84, 0x1, '\x00', [@ra={0x5, 0x2, 0x800}, @jumbo={0xc2, 0x4, 0xb}]}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r2) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000000002fe00"], 0x1c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000041400282cbd7010fedbdf250800010401000000080001000100000008000100b254da56b8bbf8e200000000eddcebfda87004a6df8043f64f586442"], 0x30}, 0x1, 0x0, 0x0, 0x44014}, 0x4049055) r6 = socket$kcm(0xa, 0x3, 0x3a) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="00bc49eb00000009cecefb5d97e5a3", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r8}, 0x4) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$OCFS2_IOC_REFLINK(r9, 0x40186f04, &(0x7f0000000140)={&(0x7f00000000c0)='nbd\x00', &(0x7f0000000100)='nbd\x00', 0x6}) 2.153393683s ago: executing program 4 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000a00000005"], 0x1c}}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000002, 0x8032, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="607eaf92cfc61f489ac89a50606c8521cc13c29c8aabef6f5d3e6c9dc858e3025d6c863196628b4c8f852aea44647dd4c01bcf1ef4c44355e061045d64554cf78e8339867a584b322aa65f90b35d11cae61b9ba24ced76c5b4786193e33c123e73f5036c8d082b58eb6578fb28756028bb2a8d13a66b72bf95cd8bcbb32086011f2fd4d70c5b77640b2d0313fa0355e5d7e1826db5723076463da7c5159c3d", 0x9f}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) close(r7) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, 0x12, 0x400, 0x70bd2b, 0x25dfdbfb, {0x12, 0xd, 0xf7, 0xfb, {0x4e23, 0x4e20, [0x5, 0x101, 0x6, 0x80000000], [0x3ed, 0x1000, 0xff, 0x5], r10, [0x2, 0xffff0001]}, 0x9, 0xeaa}, [@INET_DIAG_REQ_BYTECODE={0x33, 0x1, "9101e8b28e281a40fe65cb47016ff24d346ca3c654d6c52faf2cd50b3e1d2a49c5cbf6df62810138119a9e59447b7a"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "a431db62c7b95d4c92f4df5a798ea8521d48263110f943a1b01da9da080282d84d"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) sendmmsg$inet(r8, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="4a84324eda", 0x5}], 0x1}}], 0x2, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) 2.141180345s ago: executing program 3 (id=2124): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x2, 0x8, 0xe, 0x1025, 0x1, 0x9, '\x00', r2, r3, 0x4, 0x1, 0x2, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 1.928415285s ago: executing program 0 (id=2125): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x59, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000140)="242b2aec80a58aaa1af9338ab930", 0xe}], 0x1}}], 0x1, 0x2090) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0xc0, 0xc0, 0x278, 0xc0, 0x190, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'wg0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x7, 0x1100, 0x11]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x1, 0x4, 0x1}, {0x8, 0x100000000}, {0xe}, 0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 1.924492679s ago: executing program 3 (id=2127): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x590) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) accept(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f08000440000000370800024000000002240001800a0001007265646972000000140002800800014000000004080002400600000c0900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ed}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0) syz_extract_tcp_res(0x0, 0x8001, 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800010003000000000000000a80000000030007000000000800040001000000"], 0x24}}, 0x20000000) sendmsg$nl_route(r9, &(0x7f0000000140)={0xfffffffffffffffe, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delrule={0x70, 0x21, 0x100, 0x70bd25, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x6, 0x6, 0x0, 0x0, 0x4}, [@FRA_DST={0x8, 0x1, @broadcast}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}, @FRA_FLOW={0x8, 0xb, 0xfffffffc}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8}, @FRA_FLOW={0x8, 0xb, 0x1fffc0}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xc}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x654}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x40050}, 0x8000) 1.897388638s ago: executing program 4 (id=2128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000580)=0x0) (rerun: 64) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4804}, 0xc0040) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x141}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) (async) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r11 = socket$packet(0x11, 0x2, 0x300) r12 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r13 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x20, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) accept4$vsock_stream(r13, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10, 0x80000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (rerun: 64) setsockopt$packet_int(r11, 0x107, 0x5, &(0x7f00000000c0)=0x9, 0x4) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) 1.602119237s ago: executing program 4 (id=2131): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r3, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000040)=0xb, 0x12) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x12, r4}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1}, 0x10}}, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=r3], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r7, r5, 0x2f}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r10 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet(r10, &(0x7f0000000100)="1fcc0a4d810135509922dd934fa147db4ad0559f9a5e543778b0957b0cbac8aa431b138759bbba48e879e10b0e96b01eaecc7ea0ee52fadec8b75b924302ea6c47e90389482b2c252c5da458a9a200225049b818589202bd331fa1528f6b88384e62568d397e5e102cc155ff207b67f939d8d1cf8022aab956a70e12d7df1a33", 0x80, 0x40000, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') 1.403213227s ago: executing program 4 (id=2133): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r4, 0x26}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)='Q', 0x1}], 0x1}, 0x8014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getaddr={0x6c, 0x16, 0x200, 0x70bd27, 0x25dfdbff, {0xa, 0x3f, 0x98, 0x0, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1cb8}, @IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8}, @IFA_FLAGS={0x8, 0x8, 0xc}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x28}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x68010) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_generic(r5, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xac, 0x20, 0x800, 0x70bd2c, 0x25dfdbfb, {0x2}, [@generic="bf54e07e24d59f336e963f9934d87d7ba9d1337eea0adca091be3d063f894c49a04116ee9316b057a4983b29050c028acb35398ceddef693a0626fa7d69aee1b3897024095e96b41b3f222c21c279965747c971cf5cce5ead95280b93e2869698d6b5a411153bb8d23f84b44018186daea155b3559f63b208f43ca5d003414cf6cbf7efd9220ab3061780f036129f71d633d983c3f8efd02"]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x20008004) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, 0x2e, 0x200, 0x70bd2a, 0x25dfdbfb, {0xb}, [@generic="ce9ea02cb11fb43c4ee2e9a610ce1fcc1b5b8f1270632c83529986c1d61d75e4d672ee7f69fce437e59b9eb784d01bece27a5ec04983c9609eed55e695538c54b62a1da487b271a7e08a35a4d8844ba923feea879e0b461782fe7a1555099abf01f9a730cd", @nested={0x18, 0xec, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @pid=r1}, @typed={0x8, 0xee, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xbf}]}, @generic="db4173caf7f659887755ed7ff0e8f150d9e617b7e1ce68a75b5dc1b21ac08b8d3b1c2e52f4237c50cfce75d05d", @generic="b1e2fb7d91f3c0628993be533d6b6e"]}, 0xd0}, 0x1, 0x0, 0x0, 0x4010}, 0x4040) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r8, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r9, 0x0, 0xd0, &(0x7f0000002700)=0x3, 0x4) 1.392724366s ago: executing program 1 (id=2134): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f00000000c0)='cmac(des3_ede-generic)\x00', 0x400000, &(0x7f0000000100)={@_ha_fsid={[0x401000, 0x9]}, {0x800, 0x3, 0x5, 0x101}}, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4}) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x28011, r0, 0x4f346000) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$MRT_PIM(r3, 0x0, 0xd0, &(0x7f0000002700)=0x3, 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) (async) r4 = accept4(r0, 0x0, 0x0, 0x80000) sendto$packet(r4, &(0x7f00000001c0)="171859dc8c38917d4125207a207ca3c7373ae5b3646f62cf1980571fe263dcebd47627afc59711a7857412d93bec0f002087835e8f5c69075e22dd9928d14f419a6ef907bf5e4c08b2ca4728fe9fc74604b882170e730e00"/100, 0x64, 0x9e990919bee3881f, 0x0, 0x0) 1.214509152s ago: executing program 1 (id=2136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x100, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100000000000000000000000000002000000000000000840000000800000000000000000000000004ffff0a010100be1ec153fa31aa0cb4f461dfcea2ff552de2e1f8deeddccd66f956cbb1727fecb0ccbf2cc3b08d33a32d23d5dede95fb6c4521d3489263b8e2818a7921e2ab00c15a8344efd21bd6864a95b6e6684df46375d0e0ec35dd0752b03ef754ab72b79ff99e2ee11f66778aa8c8ba7ffe459fc99c3f7019d4d6443457753452ca0d9a729186c940864bd332e8336ad445c4cfd546204cd9580a87761e941a51e2ac96836ce2128450e7f4aa73e0850a3a804a298ab8da9f47c857c5e902e44c0015ff8b852a5a35b64f904149448fba432a50bc275147fd072a13d0a261334fe7f39a25c9cc8d878ecd23a058b2b605d56185b46d338344b9b09ffe40a12b419f00000000000000000000000000bf99e3ef8fb84241fc31a763d770ae77a17629c77bb63d1eaf9250aa621a863528ecbd581f20bcc62269f6c5dff877e0abf53db8678822b745288e83d3b635f0ce53c722aa33be3d591b9814f4aacba53a37f7e08385a72f75fb0ff4ccfadd6e9712cf0853e9297c807812df9dbc236426d9406493fb369fb2ed45b26b0ce1d36b9d067edbff510ca4eb07cfcfe685964ba92a95a6d460ecdefeda5f194b9361f8e26f9c707641fd5bab17ac"], 0x58, 0x4855}, 0x24000052) close(0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000805}, 0x8000) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x9, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000055) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000088) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r10, 0x5, 0x0, 0x40000000, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x100}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2754a724e20e", @ANYRES16=r1, @ANYBLOB="00042dbd7000ffdbdf254c00000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd29, 0x4, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9e}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x80) 1.12686038s ago: executing program 2 (id=2137): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000400)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0x15, 0x0, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x288, r2, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*-$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{(+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x5c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "913cd198b2f217215b19f02cc80adef44dbd43a2c61aae5f1156dac01d72c37c7ffd065408a3d46d66df0180443b4078ae71e191105a6c7d40c522b4ebd8cf31f6a7b2b88b8804c8ee"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x288}}, 0x0) 1.077285076s ago: executing program 4 (id=2138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x1}}, 0x10, 0x0}, 0xf5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) recvmsg(r0, &(0x7f0000001fc0)={&(0x7f0000000100)=@caif=@dbg, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/48, 0x30}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/88, 0x58}], 0x3, &(0x7f0000000fc0)=""/4096, 0x1000}, 0x120) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000080) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x80, 0x7e, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) 984.349364ms ago: executing program 2 (id=2139): unshare(0x20000400) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000100), 0x12d) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, 0x0, 0x0) 980.08788ms ago: executing program 0 (id=2140): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000040)="3a56b81a9387f7822bad05d4c14f4266fcfc6b88f515f2ca5992b2cae34a3b5f379fbc86210896224fcc06e96ae782d242957695121412ea788b98e23be1d028d2b25abae1cab0ed35a9ec25557e49c87951ac649fc1161f730eadb28ff6222d1936a347498f399c49cd2aa8ba9ee7ee23", 0x71, 0x20000050, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xffff}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0d}]}, 0x3c}}, 0x20000000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000c40)={r3, &(0x7f0000000b40)='\x00', 0x4ac43, &(0x7f0000000b80)={@align=0x9, {0x3, 0x1, 0x20, 0x5}}, 0xfff, &(0x7f0000000bc0), &(0x7f0000000c00)=0xffff}) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0xb, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x20004411) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x21, 0x5, 0x4, 0x2, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xe, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x8, 0x2, 0x9, 0x40020, r5, 0x9, '\x00', r7, r5, 0x4, 0x1, 0x1, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r9}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xb}]}, &(0x7f00000005c0)='syzkaller\x00', 0x7, 0x2, &(0x7f0000000600)=""/2, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xe, 0x5, 0xea}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x3, 0xf, 0x6}, {0x5, 0x2, 0xa, 0x1}, {0x1, 0x5, 0x4, 0x9}, {0x2, 0x5, 0xf, 0x1}, {0x1, 0x2, 0x6, 0x9}, {0x2, 0x5, 0x8, 0x3}], 0x10, 0xc5c2}, 0x94) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x10, r3}, 0x18) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x17, 0x2, 0x5, 0x0, 0x20, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00'}, 0x18) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xb, 0x11, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000002c0)='GPL\x00', 0x3, 0xf8, &(0x7f0000000300)=""/248, 0x41100, 0x4a, '\x00', r7, @fallback=0x27, r8, 0x8, &(0x7f0000000480)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x9, 0x6, 0x2}, 0x10, r10, r11, 0x0, &(0x7f0000000a40)=[r12, r13, r14, r15], 0x0, 0x10, 0x5}, 0x94) 909.535414ms ago: executing program 3 (id=2141): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x810) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x6, @empty}, 0x1c) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) 894.064507ms ago: executing program 4 (id=2142): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8a}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00', 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) socket$inet6(0xa, 0x1, 0x58) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) 861.331492ms ago: executing program 2 (id=2143): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000080)={&(0x7f0000000000)='\x00', &(0x7f0000000040)='^^.$%+]:+-@{#{}\'\\:{-\x00', 0xf84}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 772.536353ms ago: executing program 1 (id=2144): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001240)={r1, &(0x7f00000001c0)="63770cd4a7be0b80f59ed3e753bf76a72e3db5e57c5b0e069298f1b8a3fdb950e02536b67a1fea5bbe8ff077f9fe3b66500dbc51909d28f94bad144096877e1a4eef7ad74e0260a7dea6cf1f", &(0x7f0000000240)=""/4096}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r1, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001600)={'ip6_vti0\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x29, 0x4, 0xa, 0x10, 0x3, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x782a, 0x0, 0x10000}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x1c, &(0x7f0000001400)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x6, 0x2, 0x7, 0x8, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @generic={0x10, 0x7, 0x5, 0x7, 0xef}, @exit, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000001500)='GPL\x00', 0x3, 0x39, &(0x7f0000001540)=""/57, 0x40f00, 0x56, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x0, 0xc, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000001780)={0xa, 0x0, 0x0, @private1}, &(0x7f00000017c0)=0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001800)={'ip6gre0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001880), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x30, r8, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000001980)=0xffffffffffffffff, 0x4) getsockopt$inet6_tcp_int(r6, 0x6, 0x1, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x2c, r8, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001bc0)={r3, 0x58, &(0x7f0000001b40)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r5}, 0x20) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) r9 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000001cc0), 0x100000) sendmsg$inet(r9, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d00)="8b78889d30855134d150fbfae72ea217a37aeb013fbfa74a687b74469c22af5f6ddaafc106da6f42d5d21d9b3da49e44e922cf2d8147717bda812c27becd965bb02f68f1a599f591b861e87c36bf8675e8b5680ef3", 0x55}], 0x1}, 0x55) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001e80)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x3c, r11, 0x703, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r9, 0xc0385868, &(0x7f00000020c0)={r3, &(0x7f0000001fc0)='syztnl2\x00', 0x640000, &(0x7f0000002000)={@_ha_fsid={[0x7, 0x81]}, {0x6, 0x3, 0x9, 0x62}}, 0xfffeffff, &(0x7f0000002040)={@_ha_fsid}, &(0x7f0000002080)=0x6}) setsockopt$packet_fanout_data(r14, 0x107, 0x16, &(0x7f0000002180)={0xa, &(0x7f0000002100)=[{0x3, 0xa8, 0x81, 0x80}, {0x8000, 0xa2, 0x3, 0x14}, {0x0, 0x9, 0xd, 0x2}, {0xa, 0x9, 0x8, 0x75}, {0x69, 0x1, 0x5, 0x3}, {0x7ff, 0x8, 0xb, 0x80000001}, {0x0, 0x81, 0x2, 0x2}, {0x3, 0x7, 0x4}, {0x7, 0x9, 0x9}, {0xfff9, 0x6, 0x8, 0x5}]}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000021c0)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f00000022c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000002300)={{{@in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x80, 0x4e20, 0x9, 0xa, 0x20, 0x80, 0x73, r7, r15}, {0x4, 0xe067, 0x6, 0x100000000, 0x7, 0x3, 0xffff, 0xffffffffffffffff}, {0xed9e, 0x2, 0x2, 0x1}, 0x1, 0x0, 0x0, 0x1, 0x2, 0x2}, {{@in=@local, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x3502, 0x3, 0x0, 0xf, 0x6, 0x0, 0x82}}, 0xe8) sendmsg$TIPC_NL_NET_SET(r10, &(0x7f0000002600)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002480)={0x130, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5ca4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3b4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf18}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xea5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbac}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x62461812}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000010}, 0x40800) 761.243522ms ago: executing program 0 (id=2145): r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, &(0x7f0000000000)="c5d017d8f65b5e574640b79a08aaf2ca831cb36ee1b19839323371d167e21d9b882e1ac52c5a552c62c3fe9f2aedb09d99ebe2bc002480e1f02bf375f20f9f0384ce8d5d4df6a194d5a2df95943d866bf428eb59b2e69250265514d86847d7bfd0cbef7ae2637be5208a916f64731113b86ad7ee6d32b7d8d2db2b77ad3c7099ff22dc") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000100)={0x1, 0x3, 0x7}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r4, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/52, 0x34, 0x0, &(0x7f0000000400)=""/231, 0xe7}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x23, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xedda, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0x5, 0x3, 0xa, 0x30, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x10, &(0x7f00000002c0)=""/16, 0x40f00, 0x3, '\x00', r5, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xf, 0x8, 0xfffffffe}, 0x10, r6, r3, 0x0, &(0x7f0000000580)=[r3, r3], &(0x7f00000005c0)}, 0x94) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000700)={0x7fffffffffffffff, 0x8, [0x2, 0x0, 0x10000, 0x98], &(0x7f00000006c0)=[0x0]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000880)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@loopback}}, &(0x7f0000000980)=0xe8) r10 = getgid() sendmsg$unix(r3, &(0x7f0000000a00)={&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0), 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38, 0x20040000}, 0x40004) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a40)={{0x2, 0x4e24, @loopback}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x5, {0x2, 0x4e23, @broadcast}, 'dummy0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000ac0)={0x8, 'virt_wifi0\x00', {'veth0_to_bridge\x00'}, 0x2}) sendmsg$nl_route(r3, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@RTM_NEWNSID={0x34, 0x58, 0x315, 0x70bd2a, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40041}, 0x10) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000c80)={&(0x7f0000000c00)='}&\x00', &(0x7f0000000c40)='veth0_to_bridge\x00', 0x7}) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000cc0)) socket$inet(0x2, 0x1, 0x8) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000d00)=0x7a9, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe36e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c0}, 0x40000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r4}, &(0x7f0000000e80), &(0x7f0000000ec0)='%pI4 \x00'}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@newtfilter={0x34, 0x2c, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x1, 0x10}, {0x4, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x51, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) r13 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$XFS_IOC_BULKSTAT(r13, 0x8040587f, &(0x7f0000001400)={{0x8, 0x6, 0x7, 0x4, 0x9}, &(0x7f0000001040)=[{}, {}, {}, {}, {}]}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r13, 0x84, 0x75, &(0x7f0000001480)={0x0, 0x5}, 0x8) 617.953783ms ago: executing program 2 (id=2146): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x3117, 0x2, {{0x6, 0x4, 0x0, 0x33, 0x18, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast1, @remote, {[@generic={0x7, 0x2}]}}}}}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007f000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91210000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0xc0, &(0x7f0000000340)=""/192, 0x41100, 0x21, '\x00', r1, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x1, 0x93, 0x77ce67d}, 0x10, 0xffffffffffffffff, r2, 0x1, 0x0, &(0x7f0000000500)=[{0x0, 0x4, 0xe, 0xb}], 0x10, 0x8000}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff2, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088e4}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="05db71b8", 0x4, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e00000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 457.172037ms ago: executing program 1 (id=2147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30b800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vxcan1\x00', 0x4000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x7f}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 445.425607ms ago: executing program 2 (id=2148): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000400)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 422.618227ms ago: executing program 0 (id=2149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}, 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x67b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010801080000000000040000800000010908000073797a3100000000ec49b3e95af8df600a79944fc4a06990b14c597d773dcdbc1d3d479631ba72bcc81a6b260325a2ba4d325977100fe7e8f4183eb7ea8ba5db6c1ae3af064f7a81e45014106eff7cb0e903a0a5ae6507710274504384a529b0616786ca5f64b71c54b3b986cfa46bc47e4c805600bfaece9487c5d2a947c6680dc36625b45bd55cde94ee77577177f87d4b8a79e8edd11063ffa28666a63ef29857d9ff050a3881de5e"], 0x20}, 0x1, 0x0, 0x0, 0x448c1}, 0x4000000) 268.554177ms ago: executing program 0 (id=2150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x51c, 0x13, 0x0, 0x70bd2d, 0x25dfdbfb, {0x26, 0x6, 0x5c, 0x7, {0x4e21, 0x4e21, [0x65314b0f, 0x5, 0x6, 0x8], [0x7, 0xf, 0x400, 0x10000], r2, [0x0, 0x8000]}, 0x15, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x50, 0x1, "a6cf9ed8415b2f2603c4086439bffebbdf212fd757fe6c74e89ce694a0bc35e3652328cfcacccde026d7bf5a3cdeaf71a8fc605196f7110e4cb3c0f65cae89a0b19a3beb74afaf53cbac1669"}, @INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "f12e53369e44669746de9676c910472b928a6d90263bcbbad2371cf97ec3f960aaf513be292f14b1056609076b789664b9a61ddd96e8f5dc7e1584a7c5c2e08adf917702968cd75a0cb740d02c7857f7753ab2ccc42643646975b09298aa17eea24fcb5c9d3492ae764e916519a9ed166a0cda9798294af1ad9bb98c6007130e6708d66b0fee921c68ff22c7c7c4eb8224c57046f5d9"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "97d7820a9953b75998ce3ec74df108531e518a9da4674648259c5210cfb894b97adf7542edd1baa01057b48f77401171620eef69a7cbb64b84ed0697fbaaa67d6f137cdfa793ecfac469d169384f27bf7c3baed5b1b241830ea815864e823433be64eea0181c76c0350bdadc47323561c31c90170d31dec32d6e3dfdfffe19d2033cdba83488c28ffaa008815b75658ba6da2e4ac2df422e88c863fd2a3db682cfa6fceb4ddceda8d91fd6079ec0f01f046d9fbee9"}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "ca2922f741dc2261ab574bdf583c1553392dfebc0d85667639d567d1dd14cf5bea78f432fdd784da1e70f34ad5dba2734162b4c61b2af6d4a1bb4c87e2de331264b2783e1ed05ed97f73ed237075fe14ba82b759257d492e370e2b89ffbb1d801e4cfc5045fb46062d44b759c0c810b7d2db2c888b0b4b9dc33bd26d1d4cbb620fac8b28c029f0cb32073eac62baee222ec62929f70f6f9009fe2a66401f1008f977bce553b6528a67801988ca5a43bf48969168318064348c785977a6e738cfe34080f1"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "64304a37150a23929fba4fb5685f0377ff55906f2077c7db975414fc4ed68f9b58d6543cd47b24f487eb3f22804138d7c18c9dfca4cced703b185fed750490ed3cb716e5ba770ba9c099c052244ef436c5dc059307cf267149f83bd17ec6212ee825fa0c2980605081fc9d756ee994c58dd1e1bed17ef257e65c8bde0a80b433334f1d6eb58d1f1bf3486b9628564eba26b9e796b8627d2f324af2d09438d086d98726344eccf76cdd626aefe95c70391f4ff2e91202656e95b9e8921e5a05cb123e7d0cded8ca0ecf53f0851473eff77885a23b2cb5e8d1e0dec1cf917a2a5cb584fe0f5dd855ea801003a441ef2e"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "538f002b4be211f6a7215d33fa88fd9bc8472451f254410c0de58ba6afb4373ead06ce381d2a633147079764fa19f9408ab0170356d050aa248741dddce4fc525acaa728bba9a4112159554e82c1a8d780131fa69ddc7b7d8c11c2cc00e58422b87609c3929cfd2dcc827df954d7a69b892b9bd7d49e15ffc888007116aec37027ab9d0604cb4472593770b335aa0095d81cb3480660f97dc96a35abd3a3fe3380b6421235258ef8d3ad9a9a"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "7beb40cf5947cd0d3857b79cf58f3844eb9eda39efca07cc6384f52b945d54641934b1e3df67c0155252f51cb01f428b434dee244f5e94e6dc1ae8faa04fe637a02b065b0afdc98855e5b4401c907b24523bc50b4aaa6e34e6298729be1e7f2fbc89b7562eaeb9e2f4cb51464460ab75d34d121b450d3e152337086aa2596c732ff7302c99f33a4532fda51929013a"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "db12a4a1caa83727bc9af15c0f5a3b0ed99d9ab3ccf469fa77bac09410dab97fb93d"}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008044) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xa, 0x7fff, 0x4, 0x20, r0, 0x71e5, '\x00', r2, r1, 0x0, 0x0, 0x2, 0x5}, 0x50) 230.027046ms ago: executing program 1 (id=2151): syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x0) 172.939534ms ago: executing program 2 (id=2152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "64ebd6725fa2348d93477d11f9133d2f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "64cefefe80931c98a334c3e66050df6b"}]}, 0x44}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x94, r6, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x40}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xb73d}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x94}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10000000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x7}, {0xffff, 0xffff}, {0x7, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4404c}, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r14, &(0x7f0000000300)={0x1f, 0x4}, 0x6) write$bt_hci(r14, &(0x7f0000002740)={0x1, @write_remote_amp_assoc={{0x140b, 0x5}, {0xc9, 0x9, 0x5}}}, 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r11}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x0, 0x1000, {}, {r12, r13/1000+60000}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x2c, 0x0, 0x0, 0x0, "526712501a5ee08def7d39b36415f13ee06cf19274e0974c9ccec57c70a3256debd8599748b989bcb053bb2f0372d7912b5d290e33813eec9c79f5e5293d0da3"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000340)=0x6, 0x4) 125.513657ms ago: executing program 0 (id=2153): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="af166ae88a09e433ab6e00000000000000000000000000000000000000000ccff24a849c2b594f00250202c9769cdfd5c24a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000000)=0x8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100050026bd7000feffffff07000000", @ANYRES32=r6, @ANYBLOB="00000000000000000c001a800800048004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r8], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r7, 0x89e8) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44015}, 0x1080) r10 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000180)) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f12}, [@IFLA_OPERSTATE={0x5, 0x10, 0x7}, @IFLA_MAP={0x24, 0xe, {0x1, 0xc5, 0x1, 0x4, 0x3, 0x7}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 0s ago: executing program 3 (id=2154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="74000000020601020000000000000000060000020500050002000000240007800500070002000000060004404e210000080009400000000708000640000000010c000780080012400010000014000300686173683a69702c706f72741e69700005000100070000000900020073797a3000000000"], 0x74}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040014) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000068000100030000000000008000000000000000000e0002"], 0x28}}, 0x40000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0xb4, r5, 0x20, 0x7, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6e73, 0x74}}}}, [@chandef_params, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x700000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x40fdbee40a2eacf0}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfa2}], @NL80211_ATTR_OPER_CLASS={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc4}, 0x0) kernel console output (not intermixed with test programs): EMPT(full) [ 109.656128][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 109.656144][ T6905] Call Trace: [ 109.656151][ T6905] [ 109.656162][ T6905] dump_stack_lvl+0xe8/0x150 [ 109.656191][ T6905] should_fail_ex+0x412/0x560 [ 109.656215][ T6905] should_failslab+0xa8/0x100 [ 109.656233][ T6905] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 109.656254][ T6905] ? __alloc_skb+0x186/0x7d0 [ 109.656274][ T6905] ? __alloc_skb+0x1d0/0x7d0 [ 109.656292][ T6905] ? __local_bh_enable_ip+0xd0/0x130 [ 109.656312][ T6905] __alloc_skb+0x1d0/0x7d0 [ 109.656332][ T6905] ? netlink_ack_tlv_len+0x6c/0x210 [ 109.656356][ T6905] netlink_ack+0x146/0xa50 [ 109.656407][ T6905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.656426][ T6905] ? ref_tracker_free+0x693/0x840 [ 109.656446][ T6905] ? __pfx_ref_tracker_free+0x10/0x10 [ 109.656461][ T6905] ? __asan_memcpy+0x40/0x70 [ 109.656479][ T6905] ? __skb_clone+0x63/0x7a0 [ 109.656500][ T6905] netlink_rcv_skb+0x2b6/0x4b0 [ 109.656522][ T6905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.656544][ T6905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.656576][ T6905] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.656597][ T6905] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.656621][ T6905] netlink_unicast+0x75c/0x8e0 [ 109.656651][ T6905] netlink_sendmsg+0x813/0xb40 [ 109.656681][ T6905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.656704][ T6905] ? aa_sock_msg_perm+0xf1/0x1b0 [ 109.656727][ T6905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.656750][ T6905] ____sys_sendmsg+0x972/0x9f0 [ 109.656766][ T6905] ? __might_fault+0xaf/0x130 [ 109.656790][ T6905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.656814][ T6905] ? import_iovec+0x73/0xa0 [ 109.656835][ T6905] ___sys_sendmsg+0x2a5/0x360 [ 109.656849][ T6905] ? __lock_acquire+0x6b5/0x2cf0 [ 109.656868][ T6905] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.656912][ T6905] ? __fget_files+0x2a/0x420 [ 109.656929][ T6905] ? __fget_files+0x3a0/0x420 [ 109.656956][ T6905] __x64_sys_sendmsg+0x1bd/0x2a0 [ 109.656972][ T6905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.656994][ T6905] ? __pfx_ksys_write+0x10/0x10 [ 109.657021][ T6905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.657036][ T6905] do_syscall_64+0x174/0x580 [ 109.657049][ T6905] ? trace_irq_disable+0x3b/0x140 [ 109.657069][ T6905] ? clear_bhb_loop+0x40/0x90 [ 109.657087][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.657100][ T6905] RIP: 0033:0x7f710f59ce59 [ 109.657129][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.657141][ T6905] RSP: 002b:00007f7110481028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.657158][ T6905] RAX: ffffffffffffffda RBX: 00007f710f815fa0 RCX: 00007f710f59ce59 [ 109.657169][ T6905] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 109.657178][ T6905] RBP: 00007f7110481090 R08: 0000000000000000 R09: 0000000000000000 [ 109.657186][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.657195][ T6905] R13: 00007f710f816038 R14: 00007f710f815fa0 R15: 00007ffefe175e28 [ 109.657220][ T6905] [ 109.662602][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 109.685533][ T6908] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.312'. [ 109.723101][ T6915] x_tables: duplicate underflow at hook 2 [ 110.235634][ T6933] Bluetooth: MGMT ver 1.23 [ 110.649957][ T6962] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 112.477024][ T7069] IPv6: sit1: Disabled Multicast RS [ 112.896135][ T7094] __nla_validate_parse: 11 callbacks suppressed [ 112.896151][ T7094] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.354'. [ 112.987195][ T7104] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 112.987195][ T7104] Please contact the netfilter-devel mailing list or update your nftables rules. [ 113.038112][ T7108] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 113.319546][ T7118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.362'. [ 113.364022][ T7118] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.362'. [ 113.375538][ T7118] openvswitch: netlink: Message has 16 unknown bytes. [ 113.764909][ T7144] vcan1: entered promiscuous mode [ 113.777015][ T7144] vcan1: entered allmulticast mode [ 113.824390][ T29] audit: type=1804 audit(1780622186.892:2): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.371" name="/newroot/56/cgroup.controllers" dev="tmpfs" ino=301 res=1 errno=0 [ 113.849466][ T29] audit: type=1800 audit(1780622186.892:3): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.371" name="cgroup.controllers" dev="tmpfs" ino=301 res=0 errno=0 [ 113.925532][ T7151] netlink: 60 bytes leftover after parsing attributes in process `syz.4.372'. [ 113.986146][ T7153] validate_nla: 59 callbacks suppressed [ 113.986163][ T7153] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 114.008689][ T7153] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.158059][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.179044][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.220346][ T7156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.276198][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.288240][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.304715][ T7156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.315385][ T7156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.333540][ T7156] veth1_vlan: left promiscuous mode [ 114.341640][ T7156] veth0_vlan: left promiscuous mode [ 114.350715][ T7156] veth0_vlan: entered promiscuous mode [ 114.363096][ T7156] veth1_vlan: entered promiscuous mode [ 114.375747][ T7156] veth1_macvtap: left promiscuous mode [ 114.384002][ T7156] veth0_macvtap: left promiscuous mode [ 114.390904][ T7156] veth0_macvtap: entered promiscuous mode [ 114.403218][ T7156] veth1_macvtap: entered promiscuous mode [ 114.417123][ T7156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.426169][ T7156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.438377][ T7156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.447172][ T7156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.458581][ T7156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.488730][ T7168] hsr0: entered allmulticast mode [ 114.493948][ T7168] hsr_slave_0: entered allmulticast mode [ 114.505319][ T7168] hsr_slave_1: entered allmulticast mode [ 114.513434][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.520655][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.544549][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.551796][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.668374][ T7162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.699522][ T1102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.782020][ T1102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.814491][ T1102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.870438][ T1102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.882691][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 114.920650][ T7190] ip6tnl1: entered allmulticast mode [ 115.027907][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 115.072979][ T7173] syzkaller0: entered promiscuous mode [ 115.089814][ T7173] syzkaller0: entered allmulticast mode [ 115.207263][ T7200] trusted_key: syz.3.385 sent an empty control message without MSG_MORE. [ 115.439525][ T7215] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 115.450468][ T7215] netlink: 224 bytes leftover after parsing attributes in process `syz.4.388'. [ 115.470235][ T7216] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 115.480873][ T7216] netlink: 224 bytes leftover after parsing attributes in process `syz.4.388'. [ 115.519310][ T7221] netlink: 'syz.3.387': attribute type 7 has an invalid length. [ 115.583519][ T7221] netlink: 'syz.3.387': attribute type 8 has an invalid length. [ 115.945956][ T7232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.390'. [ 117.183024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 117.505629][ T7256] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 117.545609][ T7247] xt_policy: output policy not valid in PREROUTING and INPUT [ 117.604112][ T7260] tap0: tun_chr_ioctl cmd 1074025676 [ 117.615301][ T7260] tap0: owner set to 0 [ 117.649575][ T7263] netlink: 'syz.2.401': attribute type 2 has an invalid length. [ 117.799129][ T7274] netlink: 'syz.4.404': attribute type 3 has an invalid length. [ 118.076483][ T7295] xt_hashlimit: size too large, truncated to 1048576 [ 118.130298][ T7287] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 118.150523][ T7287] bond1 (unregistering): Released all slaves [ 118.184668][ T7284] syzkaller1: entered promiscuous mode [ 118.191209][ T7284] syzkaller1: entered allmulticast mode [ 118.250622][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.265408][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.407706][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.519178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 131.478375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 132.758871][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.766218][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.822513][ T7333] syz.3.413 (7333) used obsolete PPPIOCDETACH ioctl [ 137.839236][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.412'. [ 138.210959][ T7375] block nbd1: not configured, cannot reconfigure [ 138.435424][ T7385] No such timeout policy "syz1" [ 138.481468][ T7385] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 138.489361][ T7385] netlink: 'syz.1.423': attribute type 2 has an invalid length. [ 138.509918][ T7385] netlink: 'syz.1.423': attribute type 1 has an invalid length. [ 138.527519][ T7385] netlink: 'syz.1.423': attribute type 3 has an invalid length. [ 138.537452][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 138.672025][ T7394] tc action pedit offset must be on 32 bit boundaries [ 138.680038][ T7394] tc action pedit offset must be on 32 bit boundaries [ 138.686880][ T7394] tc action pedit offset must be on 32 bit boundaries [ 138.693728][ T7394] tc action pedit offset must be on 32 bit boundaries [ 138.700542][ T7394] tc action pedit offset must be on 32 bit boundaries [ 138.707353][ T7394] tc action pedit offset must be on 32 bit boundaries [ 138.714103][ T7394] tc action pedit offset must be on 32 bit boundaries [ 138.720882][ T7394] tc action pedit offset must be on 32 bit boundaries [ 138.727648][ T7394] tc action pedit offset must be on 32 bit boundaries [ 138.734395][ T7394] tc action pedit offset must be on 32 bit boundaries [ 138.741174][ T7394] 0: reclassify loop, rule prio 0, protocol 800 [ 138.807528][ T7398] netlink: 'syz.0.429': attribute type 1 has an invalid length. [ 139.008483][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 139.082795][ T7409] netlink: 52 bytes leftover after parsing attributes in process `syz.3.431'. [ 139.132997][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 139.443163][ T7424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.438'. [ 139.532152][ T7434] nbd: socks must be embedded in a SOCK_ITEM attr [ 139.575669][ T7434] block nbd0: shutting down sockets [ 139.856784][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 139.884719][ T7454] netlink: 176 bytes leftover after parsing attributes in process `syz.3.443'. [ 139.916452][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.443'. [ 139.954088][ T7461] netlink: 52 bytes leftover after parsing attributes in process `syz.1.445'. [ 140.330466][ T7474] netlink: 'syz.4.449': attribute type 10 has an invalid length. [ 140.468708][ T7474] team0 (unregistering): Port device team_slave_0 removed [ 140.506254][ T7474] team0 (unregistering): Port device team_slave_1 removed [ 140.605806][ T7478] syzkaller0: entered promiscuous mode [ 140.611738][ T7478] syzkaller0: entered allmulticast mode [ 140.630507][ T7490] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 140.653829][ T7490] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 140.662742][ T7491] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 140.684619][ T7491] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 140.825626][ T7508] netlink: 'syz.1.458': attribute type 5 has an invalid length. [ 140.849790][ T7508] netlink: 'syz.1.458': attribute type 6 has an invalid length. [ 142.898043][ T7563] __nla_validate_parse: 15 callbacks suppressed [ 142.898060][ T7563] netlink: 4804 bytes leftover after parsing attributes in process `syz.1.467'. [ 142.932989][ T153] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.969174][ T153] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.993150][ T153] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.028111][ T153] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.264776][ T7579] syzkaller0: entered promiscuous mode [ 143.277976][ T7579] syzkaller0: entered allmulticast mode [ 143.318549][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.327478][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.335921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.736658][ T7602] validate_nla: 1 callbacks suppressed [ 143.736677][ T7602] netlink: 'syz.2.479': attribute type 29 has an invalid length. [ 143.792525][ T7602] netlink: 'syz.2.479': attribute type 29 has an invalid length. [ 143.809339][ T7602] netlink: 'syz.2.479': attribute type 32 has an invalid length. [ 143.809489][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.480'. [ 143.844734][ T7602] netlink: 500 bytes leftover after parsing attributes in process `syz.2.479'. [ 143.974078][ T7612] erspan0: entered promiscuous mode [ 144.004134][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 144.071964][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 144.097187][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 144.253306][ T7630] netlink: 'syz.2.486': attribute type 4 has an invalid length. [ 144.293574][ T7630] netlink: 17 bytes leftover after parsing attributes in process `syz.2.486'. [ 144.357782][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.366158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.417187][ T7632] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 144.455104][ T7639] xt_hashlimit: size too large, truncated to 1048576 [ 144.474895][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 144.498381][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 144.498660][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 144.980291][ T7665] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 145.106870][ T7679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.117128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.349683][ T7690] netlink: 'syz.2.504': attribute type 5 has an invalid length. [ 145.374829][ T7693] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 145.421626][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.430193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.515958][ T7693] vlan2: entered promiscuous mode [ 145.521171][ T7693] bridge0: entered promiscuous mode [ 146.198549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.359331][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.215187][ T7806] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 147.307070][ T7806] bond2: entered promiscuous mode [ 147.313964][ T7806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.385634][ T7817] netlink: 'syz.1.543': attribute type 4 has an invalid length. [ 147.511036][ T7806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.545556][ T7806] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 147.565166][ T7806] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 147.588018][ T7806] bond2: (slave vti0): making interface the new active one [ 147.596153][ T7806] vti0: entered promiscuous mode [ 147.605349][ T7806] bond2: (slave vti0): Enslaving as an active interface with an up link [ 147.625013][ T7815] syzkaller1: entered promiscuous mode [ 147.716358][ T7825] bond0: entered promiscuous mode [ 147.732311][ T7825] bond0: entered allmulticast mode [ 147.739778][ T7825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.828180][ T7835] netlink: 'syz.4.548': attribute type 1 has an invalid length. [ 147.975808][ T7835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.018591][ T7841] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.035751][ T7841] bond2: (slave batadv1): making interface the new active one [ 148.045977][ T7841] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 148.163973][ T7858] __nla_validate_parse: 9 callbacks suppressed [ 148.163990][ T7858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.554'. [ 148.230750][ T7850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.456553][ T7855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.562246][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.557'. [ 148.750253][ T7890] netlink: 88 bytes leftover after parsing attributes in process `syz.3.560'. [ 148.901048][ T7902] netlink: 100 bytes leftover after parsing attributes in process `syz.1.558'. [ 148.938679][ T7904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.561'. [ 149.181312][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.567'. [ 149.312340][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 149.341139][ T7918] veth1_macvtap: left promiscuous mode [ 149.400411][ T5366] net_ratelimit: 12 callbacks suppressed [ 149.400428][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.565108][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.573639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.680730][ T7938] tipc: Started in network mode [ 149.693302][ T7938] tipc: Node identity ac14140f, cluster identity 4711 [ 149.702828][ T7938] tipc: New replicast peer: 255.255.255.255 [ 149.710692][ T7938] tipc: Enabled bearer , priority 10 [ 149.731149][ T7936] tipc: Enabling of bearer rejected, already enabled [ 149.788135][ T7948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.866722][ T7950] netlink: 'syz.1.580': attribute type 28 has an invalid length. [ 149.876704][ T7950] netlink: 'syz.1.580': attribute type 3 has an invalid length. [ 149.885021][ T7950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.580'. [ 149.900954][ T7950] netlink: 'syz.1.580': attribute type 3 has an invalid length. [ 149.921338][ T7950] Cannot find set identified by id 1 to match [ 150.040030][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.140389][ T7956] : entered promiscuous mode [ 150.253910][ T7964] sock: sock_set_timeout: `syz.1.585' (pid 7964) tries to set negative timeout [ 150.352808][ T7969] netlink: 36 bytes leftover after parsing attributes in process `syz.2.586'. [ 150.404458][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.412361][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.442075][ T7973] netlink: 32 bytes leftover after parsing attributes in process `syz.3.588'. [ 150.482129][ T7976] syz_tun: entered allmulticast mode [ 150.598453][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.606842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.632156][ T7982] netlink: 'syz.2.589': attribute type 1 has an invalid length. [ 150.815362][ T7993] x_tables: unsorted underflow at hook 3 [ 150.832007][ T5759] tipc: Node number set to 2886997007 [ 150.871992][ T7993] bridge_slave_1: left allmulticast mode [ 150.890439][ T7993] bridge_slave_1: left promiscuous mode [ 150.922327][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.923324][ T7997] netlink: 'syz.4.594': attribute type 1 has an invalid length. [ 150.944291][ T7993] bridge_slave_0: left allmulticast mode [ 150.954632][ T7993] bridge_slave_0: left promiscuous mode [ 150.969759][ T7993] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.023238][ T7997] xt_CT: No such helper "pptp" [ 151.638150][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.646514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.318168][ T8032] netlink: 'syz.3.608': attribute type 10 has an invalid length. [ 152.994766][ T8056] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 153.390202][ T8062] syzkaller0: entered promiscuous mode [ 153.408775][ T8062] syzkaller0: entered allmulticast mode [ 153.471415][ T8073] __nla_validate_parse: 8 callbacks suppressed [ 153.471431][ T8073] netlink: 176 bytes leftover after parsing attributes in process `syz.3.620'. [ 153.717241][ T8081] netlink: 'syz.3.621': attribute type 1 has an invalid length. [ 154.762482][ T808] net_ratelimit: 8 callbacks suppressed [ 154.762498][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.776457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.806040][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.814438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.124348][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.844627][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.852998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.079129][ T1102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.088911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.378112][ T8081] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 157.380515][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 157.565825][ T8124] SET target dimension over the limit! [ 157.762454][ T8131] bond3: entered promiscuous mode [ 157.792665][ T8131] bond3: entered allmulticast mode [ 157.824293][ T8131] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.853722][ T8139] netlink: 'syz.2.633': attribute type 11 has an invalid length. [ 157.878282][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.914178][ T8139] netlink: 228 bytes leftover after parsing attributes in process `syz.2.633'. [ 158.031732][ T8144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.635'. [ 158.354740][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 158.723120][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.645'. [ 158.780286][ T8181] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 158.803367][ T8181] bond3: option packets_per_slave: allowed values 0 - 65535 [ 158.822907][ T8181] bond3 (unregistering): Released all slaves [ 159.410941][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 159.739331][ T8202] bond3: Unable to set down delay as MII monitoring is disabled [ 159.752319][ T8202] bond3 (unregistering): Released all slaves [ 159.957903][ T5767] net_ratelimit: 4 callbacks suppressed [ 159.957920][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.971915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.277738][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.997586][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.005863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.484030][ T8165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.708275][ T8223] netlink: 48 bytes leftover after parsing attributes in process `syz.3.657'. [ 161.809067][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'. [ 161.810128][ T8222] netlink: 'syz.4.658': attribute type 1 has an invalid length. [ 161.990125][ T8238] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 162.024477][ T8238] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 162.049748][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.059241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.199467][ T1102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.208104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.296157][ T8251] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.665'. [ 162.346783][ T8250] ip6t_srh: unknown srh invflags 4000 [ 162.348097][ T8247] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.665'. [ 162.465823][ T8256] netlink: 48 bytes leftover after parsing attributes in process `syz.0.664'. [ 162.556780][ T8264] tipc: Started in network mode [ 162.591754][ T8264] tipc: Node identity 4, cluster identity 4711 [ 162.636627][ T8264] tipc: Node number set to 4 [ 162.908401][ T8275] nbd: must specify an index to disconnect [ 163.001356][ T8279] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.673'. [ 163.050761][ T8279] xt_limit: Overflow, try lower: 604147548/4200216962 [ 163.077898][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.092696][ T8279] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 163.206247][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 163.403748][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 163.462750][ T8294] netlink: 'syz.1.679': attribute type 2 has an invalid length. [ 163.496876][ T8294] netlink: 'syz.1.679': attribute type 8 has an invalid length. [ 163.595690][ T8294] dvmrp0: entered allmulticast mode [ 163.792079][ T8307] __nla_validate_parse: 1 callbacks suppressed [ 163.792095][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.683'. [ 164.052049][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 164.149220][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.690'. [ 164.416711][ T8338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'. [ 164.493999][ T8344] netlink: 'syz.2.694': attribute type 58 has an invalid length. [ 164.537354][ T8344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.694'. [ 164.953422][ T8364] syz.4.698: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 165.002575][ T8364] CPU: 1 UID: 0 PID: 8364 Comm: syz.4.698 Not tainted syzkaller #0 PREEMPT(full) [ 165.002600][ T8364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.002610][ T8364] Call Trace: [ 165.002616][ T8364] [ 165.002624][ T8364] dump_stack_lvl+0xe8/0x150 [ 165.002649][ T8364] warn_alloc+0x249/0x340 [ 165.002675][ T8364] ? stack_trace_save+0xa9/0x100 [ 165.002700][ T8364] ? __pfx_warn_alloc+0x10/0x10 [ 165.002729][ T8364] ? kasan_save_track+0x4f/0x80 [ 165.002749][ T8364] ? kasan_save_track+0x3e/0x80 [ 165.002766][ T8364] ? __kasan_kmalloc+0x93/0xb0 [ 165.002786][ T8364] ? __kmalloc_cache_noprof+0x31c/0x660 [ 165.002806][ T8364] ? xskq_create+0x56/0x170 [ 165.002826][ T8364] ? xsk_setsockopt+0x54c/0x990 [ 165.002844][ T8364] ? do_sock_setsockopt+0x17c/0x1b0 [ 165.002864][ T8364] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 165.002884][ T8364] ? do_syscall_64+0x174/0x580 [ 165.002904][ T8364] __vmalloc_node_range_noprof+0x132/0x1750 [ 165.002957][ T8364] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 165.002985][ T8364] ? __kasan_kmalloc+0x93/0xb0 [ 165.003012][ T8364] vmalloc_user_noprof+0xad/0xe0 [ 165.003033][ T8364] ? xskq_create+0xbf/0x170 [ 165.003055][ T8364] xskq_create+0xbf/0x170 [ 165.003087][ T8364] xsk_init_queue+0x8a/0xe0 [ 165.003112][ T8364] xsk_setsockopt+0x54c/0x990 [ 165.003136][ T8364] ? __pfx_xsk_setsockopt+0x10/0x10 [ 165.003156][ T8364] ? __pfx_aa_sk_perm+0x10/0x10 [ 165.003182][ T8364] ? aa_sock_opt_perm+0xff/0x1a0 [ 165.003208][ T8364] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 165.003229][ T8364] ? __pfx_xsk_setsockopt+0x10/0x10 [ 165.003250][ T8364] do_sock_setsockopt+0x17c/0x1b0 [ 165.003277][ T8364] __x64_sys_setsockopt+0x13d/0x1b0 [ 165.003305][ T8364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.003323][ T8364] do_syscall_64+0x174/0x580 [ 165.003338][ T8364] ? trace_irq_disable+0x3b/0x140 [ 165.003360][ T8364] ? clear_bhb_loop+0x40/0x90 [ 165.003381][ T8364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.003397][ T8364] RIP: 0033:0x7f710f59ce59 [ 165.003423][ T8364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.003437][ T8364] RSP: 002b:00007f711041e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 165.003455][ T8364] RAX: ffffffffffffffda RBX: 00007f710f816270 RCX: 00007f710f59ce59 [ 165.003468][ T8364] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 165.003477][ T8364] RBP: 00007f710f632d6f R08: 0000000000000004 R09: 0000000000000000 [ 165.003488][ T8364] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.003498][ T8364] R13: 00007f710f816308 R14: 00007f710f816270 R15: 00007ffefe175e28 [ 165.003527][ T8364] [ 165.009237][ T8364] Mem-Info: [ 165.290962][ T46] net_ratelimit: 5 callbacks suppressed [ 165.290979][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.305048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.335735][ T8364] active_anon:5740 inactive_anon:22 isolated_anon:0 [ 165.335735][ T8364] active_file:2314 inactive_file:40276 isolated_file:0 [ 165.335735][ T8364] unevictable:768 dirty:57 writeback:0 [ 165.335735][ T8364] slab_reclaimable:10105 slab_unreclaimable:97511 [ 165.335735][ T8364] mapped:34089 shmem:1290 pagetables:2083 [ 165.335735][ T8364] sec_pagetables:0 bounce:0 [ 165.335735][ T8364] kernel_misc_reclaimable:0 [ 165.335735][ T8364] free:875731 free_pcp:24371 free_cma:0 [ 165.457655][ T8364] Node 0 active_anon:22912kB inactive_anon:88kB active_file:9256kB inactive_file:160900kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140956kB dirty:228kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12492kB pagetables:7440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 165.548476][ T8364] Node 1 active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 165.609775][ T8364] Node 0 DMA free:10200kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:96kB free_cma:0kB [ 165.677564][ T8364] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 165.683405][ T8364] Node 0 DMA32 free:298732kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22912kB inactive_anon:88kB active_file:9256kB inactive_file:160900kB unevictable:1536kB writepending:228kB zspages:0kB present:3129332kB managed:2552800kB mlocked:0kB bounce:0kB free_pcp:31856kB local_pcp:14880kB free_cma:0kB [ 165.749649][ T8364] lowmem_reserve[]: 0 0 0 0 0 [ 165.760397][ T8364] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 165.817661][ T8364] lowmem_reserve[]: 0 0 0 0 0 [ 165.827352][ T8364] Node 1 Normal free:3017052kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57424kB local_pcp:10264kB free_cma:0kB [ 165.907458][ T8364] lowmem_reserve[]: 0 0 0 0 0 [ 165.912269][ T8364] Node 0 DMA: 0*4kB 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10200kB [ 165.980867][ T8364] Node 0 DMA32: 653*4kB (UME) 358*8kB (UME) 1054*16kB (UME) 1392*32kB (UME) 802*64kB (UME) 479*128kB (UME) 205*256kB (UM) 99*512kB (UM) 36*1024kB (UM) 4*2048kB (UME) 0*4096kB = 327748kB [ 166.047789][ T8364] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 166.078889][ T8364] Node 1 Normal: 2*4kB (U) 3*8kB (UM) 3*16kB (UME) 4*32kB (U) 3*64kB (UM) 2*128kB (U) 3*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (E) 735*4096kB (M) = 3017104kB [ 166.124796][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 166.130579][ T8364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.158916][ T8364] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.186094][ T8364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.206974][ T8364] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.227678][ T8364] 43926 total pagecache pages [ 166.237960][ T8364] 0 pages in swap cache [ 166.247173][ T8364] Free swap = 124996kB [ 166.257436][ T8364] Total swap = 124996kB [ 166.266089][ T8364] 2097051 pages RAM [ 166.274789][ T8364] 0 pages HighMem/MovableOnly [ 166.284760][ T8364] 427066 pages reserved [ 166.293495][ T8364] 0 pages cma reserved [ 166.324770][ T8362] netlink: 136 bytes leftover after parsing attributes in process `syz.3.699'. [ 166.349117][ T8376] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.701'. [ 166.364530][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.373713][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.382141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.624206][ T8386] Bluetooth: MGMT ver 1.23 [ 166.654138][ T8388] netlink: 'syz.4.705': attribute type 29 has an invalid length. [ 166.844327][ T8396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.706'. [ 166.949570][ T8398] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 167.121209][ T8398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.147526][ T8414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.711'. [ 167.159960][ T8399] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 167.398150][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.406517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.541139][ T8417] vlan2: entered promiscuous mode [ 167.569621][ T8417] hsr0: entered promiscuous mode [ 167.607525][ T8417] vlan2: entered allmulticast mode [ 167.623245][ T8417] hsr0: entered allmulticast mode [ 167.652732][ T8417] hsr_slave_0: entered allmulticast mode [ 167.679886][ T8417] hsr_slave_1: entered allmulticast mode [ 167.961389][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.969848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.438899][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.566237][ T8438] syzkaller0: entered promiscuous mode [ 168.619917][ T8438] syzkaller0: entered allmulticast mode [ 169.045796][ T8456] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 169.446911][ T8469] netlink: 808 bytes leftover after parsing attributes in process `syz.4.725'. [ 169.504865][ T8469] netlink: 'syz.4.725': attribute type 10 has an invalid length. [ 169.603942][ T8480] netlink: 'syz.3.727': attribute type 4 has an invalid length. [ 170.042141][ T8491] netlink: 'syz.3.728': attribute type 18 has an invalid length. [ 170.096352][ T8498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.729'. [ 170.131059][ T8491] netlink: 'syz.3.728': attribute type 18 has an invalid length. [ 170.215917][ T8495] syzkaller0: entered promiscuous mode [ 170.235138][ T8495] syzkaller0: entered allmulticast mode [ 170.261601][ T1102] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.287599][ T1102] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.317588][ T8496] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 170.353835][ T1102] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.393978][ T1102] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.517716][ T5766] net_ratelimit: 4 callbacks suppressed [ 170.517734][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.531868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.559158][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.567538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.442974][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.609618][ T5767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.617974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.232325][ T8530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.738'. [ 173.487849][ T8548] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 173.532297][ T8548] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 173.637816][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.646212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.720795][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.750265][ T8560] netlink: 'syz.4.745': attribute type 2 has an invalid length. [ 174.167713][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 174.319787][ T8574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.320487][ T8585] netlink: 'syz.3.751': attribute type 9 has an invalid length. [ 174.371263][ T8584] syzkaller0: entered promiscuous mode [ 174.385152][ T8584] syzkaller0: entered allmulticast mode [ 174.462047][ T8582] sit1: entered promiscuous mode [ 174.476716][ T8582] sit1: entered allmulticast mode [ 175.300741][ T8634] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 175.684657][ T8660] netlink: 5 bytes leftover after parsing attributes in process `syz.2.769'. [ 175.762761][ T8664] syzkaller0: entered promiscuous mode [ 175.794821][ T8664] syzkaller0: entered allmulticast mode [ 175.808469][ T5740] net_ratelimit: 5 callbacks suppressed [ 175.808484][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.822630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.462271][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 176.483819][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 176.571876][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 176.641488][ T8705] netlink: 2 bytes leftover after parsing attributes in process `syz.0.779'. [ 176.678154][ T8705] veth1_to_bridge: entered allmulticast mode [ 176.690369][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 176.724706][ T8705] netlink: 2 bytes leftover after parsing attributes in process `syz.0.779'. [ 176.837561][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.846057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.911594][ T8733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.784'. [ 176.923541][ T8726] netlink: 96 bytes leftover after parsing attributes in process `syz.1.782'. [ 177.150498][ T8735] bond2 (unregistering): Released all slaves [ 177.288786][ T8752] wireguard: wg0: Could not create IPv4 socket [ 177.550762][ T8748] syzkaller0: entered promiscuous mode [ 177.580310][ T8748] syzkaller0: entered allmulticast mode [ 177.882138][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.890575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.114652][ T8801] syzkaller0: entered promiscuous mode [ 178.145356][ T8801] syzkaller0: entered allmulticast mode [ 178.187809][ T8801] openvswitch: netlink: Invalid VLAN frame [ 178.336357][ T8814] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 178.364735][ T8814] netlink: 224 bytes leftover after parsing attributes in process `syz.2.799'. [ 178.517921][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.920128][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.928680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.226383][ T8860] : renamed from gretap0 (while UP) [ 179.274798][ T8859] netlink: 'syz.0.808': attribute type 2 has an invalid length. [ 179.366875][ T8868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.457182][ T8874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.786820][ T8889] lo: entered allmulticast mode [ 180.134929][ T8907] xt_SECMARK: invalid mode: 9 [ 180.181540][ T8904] syzkaller0: entered promiscuous mode [ 180.213015][ T8904] syzkaller0: entered allmulticast mode [ 180.732556][ T8945] __nla_validate_parse: 6 callbacks suppressed [ 180.732587][ T8945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.831'. [ 180.761525][ T8945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.831'. [ 180.843111][ T8952] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 180.973028][ T8962] netlink: 64 bytes leftover after parsing attributes in process `syz.2.837'. [ 180.998599][ T808] net_ratelimit: 4 callbacks suppressed [ 180.998628][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.012639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.025748][ T8965] netlink: 'syz.1.832': attribute type 4 has an invalid length. [ 181.036818][ T8962] xt_hashlimit: size too large, truncated to 1048576 [ 181.201178][ T8979] syzkaller0: entered promiscuous mode [ 181.210423][ T8979] syzkaller0: entered allmulticast mode [ 181.225679][ T8979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.840'. [ 181.546209][ T8993] ipt_REJECT: TCP_RESET invalid for non-tcp [ 181.558479][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.636903][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.846'. [ 181.664141][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.847'. [ 181.681967][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.847'. [ 181.712916][ T8998] veth5: entered allmulticast mode [ 181.746931][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 181.788662][ T8995] netlink: 'syz.3.846': attribute type 1 has an invalid length. [ 181.798593][ T9007] netlink: 1116 bytes leftover after parsing attributes in process `syz.3.846'. [ 181.814356][ T8995] netlink: 224 bytes leftover after parsing attributes in process `syz.3.846'. [ 181.841456][ T9004] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 182.042389][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.050794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.144113][ T9022] syzkaller0: entered promiscuous mode [ 182.168047][ T9022] syzkaller0: entered allmulticast mode [ 182.355140][ T9039] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 182.622266][ T9051] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 182.636997][ T9051] bond4 (unregistering): Released all slaves [ 182.920565][ T9064] syzkaller1: entered promiscuous mode [ 182.935652][ T9064] syzkaller1: entered allmulticast mode [ 183.077803][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.086256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.215219][ T9081] syzkaller0: entered promiscuous mode [ 183.232791][ T9081] syzkaller0: entered allmulticast mode [ 183.399590][ T9093] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 183.513825][ T9093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.631265][ T9101] smbdirect: ib_dev[s}z0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 183.671205][ T9101] smbdirect: ib_dev[s}z0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 183.710379][ T9101] smbdirect: ib_dev[s}z0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 183.753103][ T9101] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 183.774796][ T9101] infiniband s}z0: RDMA CMA: cma_listen_on_dev, error -98 [ 183.799248][ T9109] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 183.812193][ T9109] bond4 (unregistering): Released all slaves [ 184.099992][ T9118] block nbd0: not configured, cannot reconfigure [ 184.117764][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.126195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.323850][ T9136] netlink: 'syz.4.890': attribute type 3 has an invalid length. [ 184.373500][ T9141] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 184.598536][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.695428][ T9151] xt_hl: Unknown TTL match mode: 255 [ 184.955964][ T9177] syzkaller1: entered promiscuous mode [ 184.976767][ T9177] syzkaller1: entered allmulticast mode [ 185.048627][ T9184] netlink: 'syz.0.905': attribute type 1 has an invalid length. [ 185.278850][ T9205] netlink: 'syz.1.908': attribute type 1 has an invalid length. [ 185.375433][ T9201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.659776][ T9220] erspan0: entered promiscuous mode [ 185.983170][ T9238] __nla_validate_parse: 22 callbacks suppressed [ 185.983187][ T9238] netlink: 14 bytes leftover after parsing attributes in process `syz.0.920'. [ 186.025215][ T9243] ipt_REJECT: TCP_RESET invalid for non-tcp [ 186.209470][ T808] net_ratelimit: 5 callbacks suppressed [ 186.209486][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.223542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.413593][ T9263] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 186.532574][ T9263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.927'. [ 186.781344][ T9280] netlink: 'syz.0.932': attribute type 29 has an invalid length. [ 186.821836][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'. [ 186.863608][ T9284] netlink: 'syz.0.932': attribute type 12 has an invalid length. [ 186.916887][ T9280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.932'. [ 186.972105][ T9282] syzkaller0: entered promiscuous mode [ 186.977817][ T9282] syzkaller0: entered allmulticast mode [ 186.995539][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'. [ 187.010949][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'. [ 187.029787][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 187.039664][ T9294] block nbd0: not configured, cannot reconfigure [ 187.051969][ T9295] xt_hl: Unknown TTL match mode: 255 [ 187.062754][ T9294] xt_hl: Unknown TTL match mode: 255 [ 187.249882][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.258406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.335233][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a224400: rx timeout, send abort [ 187.638565][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.836146][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ab59800: rx timeout, send abort [ 187.846825][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a224400: abort rx timeout. Force session deactivation [ 188.015654][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 188.024883][ T9305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.939'. [ 188.289763][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.298954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.344718][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806ab59800: abort rx timeout. Force session deactivation [ 188.793001][ T9298] veth0: entered promiscuous mode [ 188.808147][ T9298] veth0: left promiscuous mode [ 188.917672][ T5640] Bluetooth: hci2: command tx timeout [ 189.072506][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.943'. [ 189.205240][ T9323] syzkaller1: entered promiscuous mode [ 189.214820][ T9323] syzkaller1: entered allmulticast mode [ 189.319884][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.328274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.951014][ T9375] syzkaller0: entered promiscuous mode [ 189.956741][ T9375] syzkaller0: entered allmulticast mode [ 190.258780][ T9386] 0·: renamed from hsr0 [ 190.279384][ T9386] 0·: left promiscuous mode [ 190.284133][ T9386] 0·: entered allmulticast mode [ 190.300011][ T9386] hsr_slave_0: entered allmulticast mode [ 190.325471][ T9386] hsr_slave_1: entered allmulticast mode [ 190.342152][ T9387] 1·: renamed from c0· (while UP) [ 190.379095][ T9392] syzkaller0: entered promiscuous mode [ 190.384912][ T9392] syzkaller0: entered allmulticast mode [ 190.886491][ T9419] netlink: 'syz.1.973': attribute type 3 has an invalid length. [ 191.020118][ T9424] netlink: 'syz.4.976': attribute type 12 has an invalid length. [ 191.055173][ T9424] bond3: option primary_reselect: invalid value (255) [ 191.068713][ T9427] netlink: 'syz.3.977': attribute type 2 has an invalid length. [ 191.076704][ T9427] netlink: 'syz.3.977': attribute type 2 has an invalid length. [ 191.096049][ T9424] bond3 (unregistering): Released all slaves [ 191.314657][ T9435] syzkaller0: entered promiscuous mode [ 191.321815][ T9435] syzkaller0: entered allmulticast mode [ 191.398363][ T5740] net_ratelimit: 8 callbacks suppressed [ 191.398380][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.412495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.455612][ T9442] __nla_validate_parse: 2 callbacks suppressed [ 191.455628][ T9442] netlink: 80 bytes leftover after parsing attributes in process `syz.4.982'. [ 191.675310][ T9458] netlink: 316 bytes leftover after parsing attributes in process `syz.4.988'. [ 191.708617][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 192.164416][ T9491] x_tables: duplicate underflow at hook 3 [ 192.257392][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 192.371534][ T9506] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.999'. [ 192.437946][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.446385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.614773][ T9519] netlink: 'syz.0.1004': attribute type 2 has an invalid length. [ 192.641160][ T9523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'. [ 192.707898][ T9526] veth1_to_bond: entered promiscuous mode [ 192.725826][ T9526] xt_connbytes: Forcing CT accounting to be enabled [ 192.821691][ T9524] veth1_to_bond: left promiscuous mode [ 193.065138][ T9551] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1012'. [ 193.146088][ T9555] pim6reg: entered allmulticast mode [ 193.172442][ T9555] pim6reg: left allmulticast mode [ 193.352903][ T9562] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.382544][ T9562] bridge0: port 3(bond5) entered blocking state [ 193.412443][ T9562] bridge0: port 3(bond5) entered disabled state [ 193.422237][ T9562] bond5: entered allmulticast mode [ 193.431622][ T9562] bond5: entered promiscuous mode [ 193.477512][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.485857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.498429][ T9576] openvswitch: netlink: EtherType 0 is less than min 600 [ 193.571653][ T9580] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 193.584078][ T9580] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1019'. [ 193.667057][ T9585] netlink: 'syz.4.1018': attribute type 32 has an invalid length. [ 193.676797][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1020'. [ 193.719088][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.825996][ T9598] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.897104][ T9602] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.924089][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 194.202524][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.211657][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.295907][ T9628] netlink: 'syz.1.1033': attribute type 1 has an invalid length. [ 194.690130][ T9663] netlink: 'syz.2.1041': attribute type 11 has an invalid length. [ 194.769071][ T9663] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 194.782717][ T9663] syzkaller1: Refused to change device type [ 195.214225][ T9681] syzkaller1: entered promiscuous mode [ 195.222142][ T9681] syzkaller1: entered allmulticast mode [ 195.252335][ T9681] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 195.990734][ T9727] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 196.002314][ T9727] bond3 (unregistering): Released all slaves [ 196.032542][ T9734] netlink: 'syz.2.1066': attribute type 1 has an invalid length. [ 196.349189][ T9747] netlink: 'syz.1.1070': attribute type 1 has an invalid length. [ 196.483323][ T9758] net_ratelimit: 4 callbacks suppressed [ 196.483341][ T9758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.600041][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.608484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.730741][ T9772] __nla_validate_parse: 17 callbacks suppressed [ 196.730759][ T9772] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1077'. [ 196.759237][ T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.767951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.776315][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.777228][ T9772] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1077'. [ 196.827631][ T9772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1077'. [ 196.848229][ T9782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1081'. [ 196.870102][ T9777] pim6reg527: entered allmulticast mode [ 197.142787][ T9799] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 197.167751][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'. [ 197.182089][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'. [ 197.442550][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1091'. [ 197.453951][ T9816] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1091'. [ 197.464925][ T9816] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1091'. [ 197.638154][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.646570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.652900][ T9816] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1091'. [ 198.036349][ T9839] Unsupported ieee802154 address type: 0 [ 198.050127][ T9843] xt_socket: unknown flags 0x8 [ 198.066280][ T9839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.170938][ T9852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.520424][ T9871] netlink: 'syz.2.1111': attribute type 21 has an invalid length. [ 198.534292][ T9869] 8021q: VLANs not supported on ip6tnl0 [ 198.540958][ T9871] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 198.551331][ T9869] syzkaller0: entered promiscuous mode [ 198.556895][ T9869] syzkaller0: entered allmulticast mode [ 198.585354][ T9869] xt_hashlimit: size too large, truncated to 1048576 [ 198.596750][ T9877] tipc: Cannot configure node identity twice [ 199.236331][ T9887] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 199.945990][ T9958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.027706][ T9958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.486819][ T9984] syzkaller0: entered promiscuous mode [ 200.528800][ T9984] syzkaller0: entered allmulticast mode [ 200.711615][ T9993] bond6: option xmit_hash_policy: invalid value (64) [ 200.739023][ T9993] bond6 (unregistering): Released all slaves [ 201.404162][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 201.412213][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 201.418828][ T4949] Bluetooth: hci3: command 0x0406 tx timeout [ 201.446085][T10004] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 201.807710][ T5740] net_ratelimit: 8 callbacks suppressed [ 201.807728][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.821623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.519088][ T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.529234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.837976][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.846114][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.854501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.481127][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 203.878945][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.887332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.022045][T10038] netlink: 'syz.2.1152': attribute type 2 has an invalid length. [ 204.093082][T10046] xt_hashlimit: size too large, truncated to 1048576 [ 204.140163][T10048] __nla_validate_parse: 14 callbacks suppressed [ 204.140187][T10048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1156'. [ 204.215131][T10052] netlink: 640 bytes leftover after parsing attributes in process `syz.2.1158'. [ 204.252794][T10052] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 204.299123][T10052] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1158'. [ 204.349394][T10062] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1158'. [ 204.357853][T10064] SET target dimension over the limit! [ 204.573021][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1164'. [ 204.584619][T10078] netlink: 64999 bytes leftover after parsing attributes in process `syz.3.1161'. [ 204.594083][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1164'. [ 204.726425][T10088] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1167'. [ 204.739418][T10090] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1167'. [ 204.853715][T10094] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1169'. [ 205.463468][T10127] syzkaller0: entered promiscuous mode [ 205.469045][T10127] syzkaller0: entered allmulticast mode [ 205.612494][T10134] xfrm1: entered promiscuous mode [ 205.619046][T10134] xfrm1: entered allmulticast mode [ 206.525425][T10192] syzkaller1: entered promiscuous mode [ 206.551653][T10192] syzkaller1: entered allmulticast mode [ 207.001722][ T5740] net_ratelimit: 6 callbacks suppressed [ 207.001737][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.015924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.341612][T10241] syzkaller0: entered promiscuous mode [ 207.358565][T10243] x_tables: duplicate underflow at hook 1 [ 207.361231][T10241] syzkaller0: entered allmulticast mode [ 207.584068][T10257] netlink: 'syz.0.1222': attribute type 21 has an invalid length. [ 207.620930][T10257] netlink: 'syz.0.1222': attribute type 22 has an invalid length. [ 207.655486][T10257] netlink: 'syz.0.1222': attribute type 23 has an invalid length. [ 207.694872][T10257] netlink: 'syz.0.1222': attribute type 25 has an invalid length. [ 207.710733][T10257] netlink: 'syz.0.1222': attribute type 26 has an invalid length. [ 207.819211][T10278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.050410][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.058834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.101355][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807891dc00: rx timeout, send abort [ 208.175928][T10302] netlink: 'syz.0.1233': attribute type 10 has an invalid length. [ 208.184445][T10302] veth1_macvtap: left promiscuous mode [ 208.195319][T10302] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 208.223606][ T5759] IPVS: starting estimator thread 0... [ 208.278574][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.287024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.327543][T10304] IPVS: using max 34 ests per chain, 81600 per kthread [ 208.380129][T10311] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.504436][T10320] openvswitch: netlink: nsh attr 0 has unexpected len 12 expected 0 [ 208.526316][T10320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.601533][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807891f000: rx timeout, send abort [ 208.610814][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807891dc00: abort rx timeout. Force session deactivation [ 208.724260][T10332] nftables ruleset with unbound chain [ 208.921927][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.109977][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807891f000: abort rx timeout. Force session deactivation [ 209.195151][T10356] netlink: 'syz.1.1247': attribute type 5 has an invalid length. [ 209.294532][T10361] __nla_validate_parse: 18 callbacks suppressed [ 209.294550][T10361] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1249'. [ 209.380874][T10361] 0·: renamed from hsr0 (while UP) [ 209.518540][ T5640] Bluetooth: hci4: link tx timeout [ 209.527755][ T5640] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.728262][T10371] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1251'. [ 209.862539][ T5639] Bluetooth: hci4: link tx timeout [ 209.868078][ T5639] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.882727][T10385] syzkaller1: entered promiscuous mode [ 209.910225][ T5639] Bluetooth: hci4: link tx timeout [ 209.915414][ T5639] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.929189][T10385] syzkaller1: entered allmulticast mode [ 210.510093][T10417] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 210.563743][T10417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1262'. [ 210.599195][ T5639] Bluetooth: hci4: link tx timeout [ 210.604387][ T5639] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.622967][T10419] tipc: Enabling of bearer rejected, failed to enable media [ 210.690513][ T5639] Bluetooth: hci4: link tx timeout [ 210.696944][ T5639] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.783997][T10432] Bluetooth: MGMT ver 1.23 [ 210.989628][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1267'. [ 211.186371][T10458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1268'. [ 211.558209][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 211.893686][T10493] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 211.913310][T10495] ipt_REJECT: TCP_RESET invalid for non-tcp [ 211.914431][T10493] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1280'. [ 211.935667][T10497] netlink: 'syz.2.1282': attribute type 6 has an invalid length. [ 211.949363][T10493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.949710][T10495] ipt_REJECT: TCP_RESET invalid for non-tcp [ 211.963834][T10493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.983172][T10493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.004029][T10493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.084126][T10502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1283'. [ 212.094598][T10502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1283'. [ 212.128380][T10504] netlink: 'syz.0.1284': attribute type 2 has an invalid length. [ 212.148392][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 212.184793][T10504] netlink: 'syz.0.1284': attribute type 3 has an invalid length. [ 212.210534][ T5766] net_ratelimit: 12 callbacks suppressed [ 212.210552][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.224713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.351732][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1287'. [ 212.441641][T10520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.450459][T10520] IPv6: NLM_F_CREATE should be set when creating new route [ 212.457859][T10520] IPv6: NLM_F_CREATE should be set when creating new route [ 212.684701][T10533] syzkaller0: entered promiscuous mode [ 212.722827][T10533] syzkaller0: entered allmulticast mode [ 213.088005][T10554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.237816][ T5766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.246254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.583032][T10585] Unsupported ieee802154 address type: 0 [ 213.839215][T10608] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 213.899643][T10613] netlink: 'syz.2.1313': attribute type 1 has an invalid length. [ 213.969103][T10617] netlink: 'syz.3.1316': attribute type 7 has an invalid length. [ 214.042365][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.051933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.115996][T10620] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.125802][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.230235][T10620] netlink: 'syz.4.1317': attribute type 7 has an invalid length. [ 214.244580][T10632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.279517][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.285734][T10632] macvlan3: entered promiscuous mode [ 214.287937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.304080][T10632] macvlan3: entered allmulticast mode [ 214.423336][T10641] __nla_validate_parse: 13 callbacks suppressed [ 214.423348][T10641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1323'. [ 214.615382][T10649] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1326'. [ 214.688786][ T5759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.265900][T10670] netem: change failed [ 215.404729][T10692] bridge_slave_0: left allmulticast mode [ 215.411296][T10692] bridge_slave_0: left promiscuous mode [ 215.420688][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.447978][T10692] bridge_slave_1: left allmulticast mode [ 215.466818][T10692] bridge_slave_1: left promiscuous mode [ 215.475759][T10692] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.496493][T10692] .`: (slave bond_slave_0): Releasing backup interface [ 215.520918][T10692] .`: (slave bond_slave_1): Releasing backup interface [ 215.545701][T10692] team0: Port device team_slave_0 removed [ 215.567170][T10692] team0: Port device team_slave_1 removed [ 215.574123][T10692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.582823][T10692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.854949][T10708] bond6: option lp_interval: invalid value (0) [ 215.879797][T10708] bond6: option lp_interval: allowed values 1 - 2147483647 [ 215.940565][T10708] bond6 (unregistering): Released all slaves [ 216.150588][T10734] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 216.208988][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1354'. [ 216.546841][T10755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1362'. [ 216.563415][T10757] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1363'. [ 216.586945][T10755] netlink: 'syz.0.1362': attribute type 11 has an invalid length. [ 216.639712][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 216.702199][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 216.754157][T10773] netlink: 'syz.4.1367': attribute type 21 has an invalid length. [ 216.788425][T10773] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1367'. [ 216.807724][T10773] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1367'. [ 216.833686][T10776] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1369'. [ 217.083850][T10792] batman_adv: batadv0: Adding interface: wlan0 [ 217.101246][T10792] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.137418][T10792] batman_adv: batadv0: Interface activated: wlan0 [ 217.498633][T10813] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 217.511687][T10813] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 218.122954][T10860] ip6t_rpfilter: unknown options [ 218.434250][T10879] tipc: Invalid UDP bearer configuration [ 218.434299][T10879] tipc: Enabling of bearer rejected, failed to enable media [ 218.513863][T10882] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.664873][T10900] netlink: 'syz.3.1403': attribute type 3 has an invalid length. [ 218.746343][T10908] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 218.773225][T10907] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 218.952261][T10917] netlink: 'syz.2.1410': attribute type 2 has an invalid length. [ 218.999410][T10917] IPv6: sit1: Disabled Multicast RS [ 219.012756][T10917] sit1: entered allmulticast mode [ 219.250804][T10938] netlink: 'syz.0.1415': attribute type 8 has an invalid length. [ 219.313524][T10942] netlink: 'syz.1.1417': attribute type 30 has an invalid length. [ 219.344317][T10947] netlink: 'syz.1.1417': attribute type 30 has an invalid length. [ 219.366952][ T3379] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 219.377061][ T3379] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.402998][ T3379] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.412889][ T3379] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.421223][T10946] nbd0: detected capacity change from 0 to 127 [ 219.522498][T10963] atomic_op ffff888025c58198 conn xmit_atomic 0000000000000000 [ 219.530631][T10945] nbd1: detected capacity change from 0 to 127 [ 219.542185][ T5640] block nbd0: Receive control failed (result -104) [ 219.543475][ T5639] block nbd1: Receive control failed (result -32) [ 219.564253][ T8170] block nbd1: Dead connection, failed to find a fallback [ 219.571800][ T8170] block nbd1: shutting down sockets [ 219.579401][ T8170] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.591200][ T8170] Buffer I/O error on dev nbd1, logical block 0, async page read [ 219.600626][ T8170] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.610099][ T8170] Buffer I/O error on dev nbd1, logical block 1, async page read [ 219.618071][ T8170] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.629502][ T8170] Buffer I/O error on dev nbd1, logical block 2, async page read [ 219.638660][ T8170] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.648081][ T8170] Buffer I/O error on dev nbd1, logical block 3, async page read [ 219.656135][ T8170] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.665551][ T8170] Buffer I/O error on dev nbd1, logical block 0, async page read [ 219.673902][ T8170] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.683433][ T8170] Buffer I/O error on dev nbd1, logical block 1, async page read [ 219.692716][ T8170] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.703264][ T8170] Buffer I/O error on dev nbd1, logical block 2, async page read [ 219.740675][ T8170] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.774130][ T8170] Buffer I/O error on dev nbd1, logical block 3, async page read [ 219.792492][ T8170] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.800225][T10971] netlink: 'syz.2.1424': attribute type 32 has an invalid length. [ 219.864391][ T8170] Buffer I/O error on dev nbd1, logical block 0, async page read [ 219.884835][T10971] __nla_validate_parse: 13 callbacks suppressed [ 219.884850][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 219.902181][T10979] netlink: 'syz.1.1425': attribute type 18 has an invalid length. [ 219.914646][ T8170] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.977975][ T8170] Buffer I/O error on dev nbd1, logical block 1, async page read [ 219.993399][ T8170] ldm_validate_partition_table(): Disk read failed. [ 220.002665][ T8170] Dev nbd1: unable to read RDB block 0 [ 220.011945][ T8170] nbd1: unable to read partition table [ 220.029585][ T8170] ldm_validate_partition_table(): Disk read failed. [ 220.041590][ T8170] Dev nbd1: unable to read RDB block 0 [ 220.049962][ T8170] nbd1: unable to read partition table [ 220.055325][T10971] bond1: Setting coupled_control to off (0) [ 220.169709][T10979] netlink: 'syz.1.1425': attribute type 18 has an invalid length. [ 220.322491][T10988] syzkaller0: entered promiscuous mode [ 220.338341][T10988] syzkaller0: entered allmulticast mode [ 220.829856][T11029] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1436'. [ 221.083929][T11049] tipc: Enabling of bearer rejected, failed to enable media [ 221.234744][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 221.310255][T11063] netlink: 'syz.2.1446': attribute type 1 has an invalid length. [ 221.429826][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1447'. [ 221.444750][T11063] bond2: entered promiscuous mode [ 221.461717][T11063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.516794][T11068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.544214][T11068] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 221.563700][T11068] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 221.590014][T11068] bond2: (slave vti0): making interface the new active one [ 221.607370][T11068] vti0: entered promiscuous mode [ 221.619469][T11068] bond2: (slave vti0): Enslaving as an active interface with an up link [ 221.635121][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1447'. [ 221.695815][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1447'. [ 222.082520][T11105] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1456'. [ 222.084971][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 222.092354][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1455'. [ 222.113372][T11113] netlink: 'syz.3.1458': attribute type 25 has an invalid length. [ 222.138338][T11109] netlink: 'syz.1.1457': attribute type 3 has an invalid length. [ 222.237009][T11113] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1458'. [ 222.393499][T11127] net_ratelimit: 3 callbacks suppressed [ 222.393514][T11127] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 222.485400][T11134] veth1_to_bridge: entered allmulticast mode [ 223.133660][T11166] syzkaller1: entered promiscuous mode [ 223.152740][T11166] syzkaller1: entered allmulticast mode [ 223.489798][T11193] syzkaller0: entered promiscuous mode [ 223.506074][T11193] syzkaller0: entered allmulticast mode [ 225.690339][T11237] __nla_validate_parse: 10 callbacks suppressed [ 225.690356][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 225.733227][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 225.753152][T11238] xt_hashlimit: size too large, truncated to 1048576 [ 225.754823][T11246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1488'. [ 226.054133][T11261] sctp: [Deprecated]: syz.0.1493 (pid 11261) Use of int in maxseg socket option. [ 226.054133][T11261] Use struct sctp_assoc_value instead [ 226.434943][T11287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1501'. [ 226.482099][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 226.544539][T11289] syzkaller0: entered promiscuous mode [ 226.561938][T11295] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 226.565098][T11289] syzkaller0: entered allmulticast mode [ 226.576289][T11295] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 226.588889][T11295] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 226.627959][T11289] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1502'. [ 226.632233][T11295] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 226.652449][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1502'. [ 226.658403][T11293] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 226.676825][T11295] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 226.701123][T11295] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 226.709425][T11299] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1505'. [ 226.724379][T11303] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 ! [ 226.742486][T11295] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 226.777176][T11295] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 226.818720][T11295] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 226.930385][T11310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1509'. [ 226.979067][T11310] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.1509'. [ 249.881772][ T5015] block nbd0: Possible stuck request ffff888027e8e000: control (read@0,1024B). Runtime 30 seconds [ 249.893312][ T5015] block nbd0: Possible stuck request ffff888027e8e1c0: control (read@1024,1024B). Runtime 30 seconds [ 249.904572][ T5015] block nbd0: Possible stuck request ffff888027e8e380: control (read@2048,1024B). Runtime 30 seconds [ 249.915558][ T5015] block nbd0: Possible stuck request ffff888027e8e540: control (read@3072,1024B). Runtime 30 seconds [ 251.143676][T11338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1515'. [ 251.342971][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'. [ 251.375812][T11340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.459318][T11340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.509966][ T64] tipc: Subscription rejected, illegal request [ 251.831540][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1532'. [ 251.861292][T11372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1529'. [ 252.278373][T11393] validate_nla: 40 callbacks suppressed [ 252.278390][T11393] netlink: 'syz.0.1536': attribute type 21 has an invalid length. [ 252.302371][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 252.398578][T11399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1538'. [ 252.550402][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 252.557119][T11413] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.573387][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 252.590699][T11412] netlink: 'syz.2.1541': attribute type 14 has an invalid length. [ 252.602220][T11416] netlink: 'syz.0.1543': attribute type 49 has an invalid length. [ 252.608803][T11412] netlink: 'syz.2.1541': attribute type 13 has an invalid length. [ 252.661851][T11413] netlink: 'syz.4.1542': attribute type 7 has an invalid length. [ 252.842242][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1546'. [ 253.008016][T11439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1549'. [ 253.094331][T11448] syzkaller0: entered promiscuous mode [ 253.131413][T11448] syzkaller0: entered allmulticast mode [ 253.240737][T11454] tipc: Enabling of bearer rejected, failed to enable media [ 253.305438][T11458] vlan0: entered allmulticast mode [ 253.326948][T11458] bond0: entered allmulticast mode [ 253.338723][T11458] bond_slave_0: entered allmulticast mode [ 253.344523][T11458] bond_slave_1: entered allmulticast mode [ 253.626091][T11472] bond4 (unregistering): Released all slaves [ 254.033669][T11506] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 254.086889][T11506] syz.2.1568: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 254.122216][T11513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.143578][T11506] CPU: 1 UID: 0 PID: 11506 Comm: syz.2.1568 Not tainted syzkaller #0 PREEMPT(full) [ 254.143604][T11506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.143615][T11506] Call Trace: [ 254.143622][T11506] [ 254.143629][T11506] dump_stack_lvl+0xe8/0x150 [ 254.143656][T11506] warn_alloc+0x249/0x340 [ 254.143680][T11506] ? stack_trace_save+0xa9/0x100 [ 254.143705][T11506] ? __pfx_warn_alloc+0x10/0x10 [ 254.143733][T11506] ? kasan_save_track+0x4f/0x80 [ 254.143753][T11506] ? kasan_save_track+0x3e/0x80 [ 254.143771][T11506] ? __kasan_kmalloc+0x93/0xb0 [ 254.143790][T11506] ? __kmalloc_cache_noprof+0x31c/0x660 [ 254.143810][T11506] ? xskq_create+0x56/0x170 [ 254.143834][T11506] ? xsk_setsockopt+0x54c/0x990 [ 254.143853][T11506] ? do_sock_setsockopt+0x17c/0x1b0 [ 254.143873][T11506] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 254.143893][T11506] ? do_syscall_64+0x174/0x580 [ 254.143912][T11506] __vmalloc_node_range_noprof+0x132/0x1750 [ 254.143960][T11506] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 254.143988][T11506] ? __kasan_kmalloc+0x93/0xb0 [ 254.144013][T11506] vmalloc_user_noprof+0xad/0xe0 [ 254.144034][T11506] ? xskq_create+0xbf/0x170 [ 254.144056][T11506] xskq_create+0xbf/0x170 [ 254.144080][T11506] xsk_init_queue+0x8a/0xe0 [ 254.144102][T11506] xsk_setsockopt+0x54c/0x990 [ 254.144125][T11506] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.144146][T11506] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.144169][T11506] ? aa_sock_opt_perm+0xff/0x1a0 [ 254.144193][T11506] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 254.144213][T11506] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.144241][T11506] do_sock_setsockopt+0x17c/0x1b0 [ 254.144271][T11506] __x64_sys_setsockopt+0x13d/0x1b0 [ 254.144295][T11506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.144313][T11506] do_syscall_64+0x174/0x580 [ 254.144327][T11506] ? trace_irq_disable+0x3b/0x140 [ 254.144350][T11506] ? clear_bhb_loop+0x40/0x90 [ 254.144370][T11506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.144386][T11506] RIP: 0033:0x7f5f5439ce59 [ 254.144403][T11506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.144417][T11506] RSP: 002b:00007f5f55316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 254.144435][T11506] RAX: ffffffffffffffda RBX: 00007f5f54616090 RCX: 00007f5f5439ce59 [ 254.144446][T11506] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 254.144455][T11506] RBP: 00007f5f54432d6f R08: 0000000000000004 R09: 0000000000000000 [ 254.144465][T11506] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.144475][T11506] R13: 00007f5f54616128 R14: 00007f5f54616090 R15: 00007ffedb3038e8 [ 254.144500][T11506] [ 254.144591][T11506] Mem-Info: [ 254.420816][T11506] active_anon:5990 inactive_anon:29 isolated_anon:0 [ 254.420816][T11506] active_file:2311 inactive_file:40307 isolated_file:0 [ 254.420816][T11506] unevictable:768 dirty:87 writeback:0 [ 254.420816][T11506] slab_reclaimable:10378 slab_unreclaimable:102095 [ 254.420816][T11506] mapped:30320 shmem:1293 pagetables:2307 [ 254.420816][T11506] sec_pagetables:0 bounce:0 [ 254.420816][T11506] kernel_misc_reclaimable:0 [ 254.420816][T11506] free:1295154 free_pcp:24494 free_cma:0 [ 254.466287][T11506] Node 0 active_anon:24152kB inactive_anon:116kB active_file:9244kB inactive_file:161024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122980kB dirty:344kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13008kB pagetables:8436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 254.502104][T11506] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 254.542473][T11506] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 254.594470][T11506] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 254.600921][T11506] Node 0 DMA32 free:1273568kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23952kB inactive_anon:116kB active_file:9244kB inactive_file:161024kB unevictable:1536kB writepending:344kB zspages:0kB present:3129332kB managed:2552800kB mlocked:0kB bounce:0kB free_pcp:44576kB local_pcp:23564kB free_cma:0kB [ 254.641745][T11506] lowmem_reserve[]: 0 0 0 0 0 [ 254.646660][T11506] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 254.702422][T11506] lowmem_reserve[]: 0 0 0 0 0 [ 254.711940][T11506] Node 1 Normal free:3895800kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:53788kB local_pcp:25256kB free_cma:0kB [ 254.787151][T11533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.807670][T11506] lowmem_reserve[]: 0 0 0 0 0 [ 254.824136][T11506] Node 0 DMA: 4*4kB (U) 2*8kB (U) 3*16kB (U) 3*32kB (U) 3*64kB (U) 3*128kB (U) 3*256kB (U) 3*512kB (U) 2*1024kB (U) 1*2048kB (M) 1*4096kB (U) = 11248kB [ 254.919865][T11506] Node 0 DMA32: 5457*4kB (UME) 4042*8kB (UME) 2691*16kB (UME) 1329*32kB (UME) 1629*64kB (UME) 1187*128kB (UME) 910*256kB (UM) 617*512kB (UM) 313*1024kB (UE) 6*2048kB (UM) 0*4096kB = 1277604kB [ 254.946619][T11543] sctp: [Deprecated]: syz.4.1577 (pid 11543) Use of int in maxseg socket option. [ 254.946619][T11543] Use struct sctp_assoc_value instead [ 254.955292][T11506] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 254.996952][T11506] Node 1 Normal: 207*4kB (U) 211*8kB (UM) 210*16kB (UME) 242*32kB (U) 225*64kB (UM) 209*128kB (U) 201*256kB (UME) 166*512kB (UME) 138*1024kB (UE) 30*2048kB (UE) 855*4096kB (UM) = 3896052kB [ 255.035746][T11506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.068986][T11506] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.092788][T11506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.098486][T11551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.113413][T11506] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.151305][T11506] 43910 total pagecache pages [ 255.163153][T11506] 0 pages in swap cache [ 255.175055][T11506] Free swap = 124996kB [ 255.196044][T11506] Total swap = 124996kB [ 255.209737][T11506] 2097051 pages RAM [ 255.216712][T11506] 0 pages HighMem/MovableOnly [ 255.234536][T11506] 427066 pages reserved [ 255.247324][T11506] 0 pages cma reserved [ 255.629028][T11581] syzkaller0: entered promiscuous mode [ 255.640608][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.648484][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.654033][T11586] netlink: 'syz.0.1593': attribute type 12 has an invalid length. [ 255.661728][T11581] syzkaller0: entered allmulticast mode [ 255.726189][T11586] bond4: option primary_reselect: invalid value (255) [ 255.739653][T11586] bond4 (unregistering): Released all slaves [ 255.754460][T11593] sctp: [Deprecated]: syz.3.1595 (pid 11593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.754460][T11593] Use struct sctp_sack_info instead [ 255.910701][T11598] syzkaller0: entered promiscuous mode [ 255.916757][T11598] syzkaller0: entered allmulticast mode [ 256.129626][T11615] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 256.156132][T11615] __nla_validate_parse: 11 callbacks suppressed [ 256.156147][T11615] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1602'. [ 256.198352][T11615] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1602'. [ 256.222217][T11618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1604'. [ 256.231534][T11618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1604'. [ 256.235859][T11615] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1602'. [ 256.325641][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 256.372548][T11624] vti1: entered promiscuous mode [ 256.396540][T11624] vti1: entered allmulticast mode [ 256.473776][T11624] netlink: 'syz.3.1605': attribute type 21 has an invalid length. [ 256.505724][T11639] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 256.872791][T11654] syzkaller0: entered promiscuous mode [ 256.886570][T11654] syzkaller0: entered allmulticast mode [ 256.954718][T11659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1615'. [ 257.025261][T11662] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1616'. [ 257.048374][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 257.064981][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'. [ 257.080426][T11662] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 257.641176][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880780eac00: rx timeout, send abort [ 257.833924][T11705] tipc: Invalid UDP bearer configuration [ 257.833974][T11705] tipc: Enabling of bearer rejected, failed to enable media [ 257.913079][T11705] vlan2: entered promiscuous mode [ 257.939937][T11705] bridge0: entered promiscuous mode [ 257.975216][T11720] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 258.179841][T11729] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 258.384054][T11729] bond5: entered promiscuous mode [ 258.395544][T11729] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.415099][T11744] tipc: Started in network mode [ 258.434833][T11744] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 258.466077][T11744] tipc: Enabled bearer , priority 0 [ 258.579278][T11758] xt_connbytes: Forcing CT accounting to be enabled [ 258.937162][T11777] bond6: option mode: invalid value (133) [ 258.963214][T11777] bond6 (unregistering): Released all slaves [ 258.994953][T11781] netem: change failed [ 259.389960][T11808] IPv6: Can't replace route, no match found [ 259.398761][T11808] IPv6: Can't replace route, no match found [ 259.492184][T11814] netlink: 'syz.2.1659': attribute type 4 has an invalid length. [ 259.596248][T11791] syz.0.1653 (11791) used greatest stack depth: 17408 bytes left [ 259.608839][ T5839] tipc: Node number set to 11578026 [ 260.033771][T11858] pim6reg: entered allmulticast mode [ 260.061841][T11857] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 260.085747][T11846] x_tables: duplicate underflow at hook 1 [ 262.807980][T11839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.986720][T11887] __nla_validate_parse: 20 callbacks suppressed [ 262.986739][T11887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1683'. [ 263.105359][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 263.118541][T11894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1685'. [ 263.326076][ T5839] IPVS: starting estimator thread 0... [ 263.422445][T11916] : entered promiscuous mode [ 263.437379][T11915] IPVS: using max 27 ests per chain, 64800 per kthread [ 263.491334][T11924] xfrm1: entered allmulticast mode [ 263.514840][T11924] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.1694'. [ 263.704845][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1698'. [ 263.871991][T11938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1700'. [ 263.912334][T11938] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.1700'. [ 263.930887][T11941] netlink: 'syz.2.1701': attribute type 8 has an invalid length. [ 263.949720][T11938] veth0: entered promiscuous mode [ 263.951372][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 263.966552][T11944] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.1703'. [ 263.988815][T11937] veth0: left promiscuous mode [ 264.470803][T11972] x_tables: duplicate underflow at hook 1 [ 264.530531][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 265.229869][T12001] 8021q: VLANs not supported on ip_vti0 [ 265.265606][T12001] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20002 [ 265.307062][T12002] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20002 [ 265.596364][T12019] veth0_macvtap: left promiscuous mode [ 265.935492][T12032] netlink: zone id is out of range [ 265.949785][T12032] netlink: zone id is out of range [ 265.962040][T12032] netlink: zone id is out of range [ 265.978507][T12032] netlink: zone id is out of range [ 266.003883][T12032] netlink: zone id is out of range [ 266.018216][T12032] netlink: zone id is out of range [ 266.046808][T12032] netlink: zone id is out of range [ 266.052276][T12032] netlink: zone id is out of range [ 266.060017][T12032] netlink: zone id is out of range [ 266.066095][T12032] netlink: zone id is out of range [ 266.306121][T12041] syzkaller0: entered promiscuous mode [ 266.312209][T12041] syzkaller0: entered allmulticast mode [ 266.374544][T12057] netlink: 'syz.0.1740': attribute type 8 has an invalid length. [ 268.387399][T12080] vlan2: entered allmulticast mode [ 268.410873][T12080] gretap0: entered allmulticast mode [ 268.429236][T12086] netlink: 'syz.0.1744': attribute type 29 has an invalid length. [ 268.760602][T12107] netlink: 'syz.4.1752': attribute type 1 has an invalid length. [ 268.770129][T12107] netlink: 'syz.4.1752': attribute type 2 has an invalid length. [ 269.031655][T12121] __nla_validate_parse: 3 callbacks suppressed [ 269.031672][T12121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'. [ 269.047747][T12121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1757'. [ 269.072604][T12121] gretap1: entered promiscuous mode [ 269.091780][T12121] gretap1: entered allmulticast mode [ 269.240844][T12107] nbd2: detected capacity change from 0 to 63 [ 269.258055][ T5639] block nbd2: Receive control failed (result -104) [ 269.266067][ T5640] block nbd2: Receive control failed (result -32) [ 269.563463][T12144] tipc: Invalid UDP bearer configuration [ 269.563509][T12144] tipc: Enabling of bearer rejected, failed to enable media [ 269.754945][T12156] netlink: 'syz.1.1771': attribute type 5 has an invalid length. [ 269.784474][T12156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1771'. [ 269.856914][T12158] bond3: Removing last ns target with arp_interval on [ 270.239380][T12195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1780'. [ 270.250708][T12195] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1780'. [ 270.333649][T12200] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.674494][T12226] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1790'. [ 270.723836][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 270.875700][T12238] netlink: 'syz.1.1792': attribute type 1 has an invalid length. [ 270.899475][T12223] team0: Port device team_slave_0 removed [ 270.959847][T12238] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.041747][T12231] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 271.122648][T12254] netlink: 'syz.3.1798': attribute type 1 has an invalid length. [ 271.142866][T12238] bond6: entered promiscuous mode [ 271.145003][T12254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1798'. [ 271.173352][T12231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1792'. [ 271.191567][T12238] bond6: entered allmulticast mode [ 271.485459][ T5639] Bluetooth: hci4: link tx timeout [ 271.491024][ T5639] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 271.623266][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 271.638579][T12279] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 271.650878][T12285] x_tables: unsorted entry at hook 2 [ 271.658289][T12279] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 271.677887][T12279] gretap2: entered promiscuous mode [ 271.688976][T12279] gretap2: entered allmulticast mode [ 272.065360][T12307] net_ratelimit: 786 callbacks suppressed [ 272.065381][T12307] netlink: zone id is out of range [ 272.102410][T12307] netlink: set zone limit has 8 unknown bytes [ 272.165830][T12314] tunl0: entered promiscuous mode [ 272.191997][T12314] netlink: 'syz.0.1818': attribute type 3 has an invalid length. [ 272.525608][T12287] infiniband syz0: set active [ 272.551835][T12287] infiniband syz0: added bridge_slave_1 [ 272.659111][T12287] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 272.686270][T12350] netlink: 'syz.0.1830': attribute type 1 has an invalid length. [ 272.707735][T12287] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 272.729038][T12287] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 272.784015][T12356] xt_bpf: check failed: parse error [ 272.790253][T12356] xt_ecn: cannot match TCP bits for non-tcp packets [ 272.798161][T12356] netlink: 'syz.4.1829': attribute type 21 has an invalid length. [ 272.837000][T12287] RDS/IB: syz0: added [ 272.878186][T12287] smc: adding ib device syz0 with port count 1 [ 272.905025][T12287] smc: ib device syz0 port 1 has no pnetid [ 272.915113][T12354] bond4: (slave veth7): Enslaving as an active interface with a down link [ 273.121290][T12371] dvmrp0: left allmulticast mode [ 273.146308][T12371] syz_tun: left allmulticast mode [ 273.265226][T12382] nbd: illegal input index 2958377 [ 273.285904][T12384] netlink: 'syz.0.1840': attribute type 1 has an invalid length. [ 273.334631][T12384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.339177][T12387] netlink: 'syz.0.1840': attribute type 1 has an invalid length. [ 273.341942][T12384] IPv6: NLM_F_CREATE should be set when creating new route [ 273.352452][T12386] netlink: 'syz.1.1841': attribute type 10 has an invalid length. [ 273.392790][T12387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.483623][T12391] ieee802154 phy0 wpan0: encryption failed: -90 [ 273.542398][T12395] syzkaller0: entered promiscuous mode [ 273.564196][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 273.573058][T12395] syzkaller0: entered allmulticast mode [ 273.861538][T12412] netlink: 'syz.0.1848': attribute type 11 has an invalid length. [ 273.882009][T12412] netlink: 'syz.0.1848': attribute type 4 has an invalid length. [ 274.451054][T12444] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.845586][T12460] validate_nla: 1 callbacks suppressed [ 274.845604][T12460] netlink: 'syz.0.1858': attribute type 8 has an invalid length. [ 275.129415][T12477] __nla_validate_parse: 6 callbacks suppressed [ 275.129435][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 275.213328][T12477] veth1_macvtap: left promiscuous mode [ 275.847121][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1869'. [ 275.927445][T12512] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 276.790691][T12543] netlink: 'syz.4.1877': attribute type 29 has an invalid length. [ 276.805604][T12543] netlink: 'syz.4.1877': attribute type 29 has an invalid length. [ 276.816371][T12544] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1876'. [ 276.828216][T12543] netlink: 'syz.4.1877': attribute type 32 has an invalid length. [ 276.993249][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1878'. [ 277.025398][T12551] block nbd3: Unsupported socket: should be TCP or UNIX. [ 277.055590][T12554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1880'. [ 277.085084][T12561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1881'. [ 277.117404][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1881'. [ 277.165547][T12561] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1881'. [ 277.219944][T12561] netlink: 'syz.0.1881': attribute type 3 has an invalid length. [ 277.249472][T12561] netlink: 'syz.0.1881': attribute type 2 has an invalid length. [ 277.279772][T12561] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1881'. [ 277.726413][T12587] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.931843][T12600] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1891'. [ 279.121985][T12667] netlink: 'syz.2.1908': attribute type 62 has an invalid length. [ 279.301729][T12676] hsr0: entered promiscuous mode [ 279.756758][T12704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.850454][T12709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.925710][T12714] tap0: tun_chr_ioctl cmd 1074025676 [ 279.927722][T12704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.948507][T12714] tap0: owner set to 0 [ 279.971200][ T5015] block nbd0: Possible stuck request ffff888027e8e000: control (read@0,1024B). Runtime 60 seconds [ 279.990755][ T5015] block nbd0: Possible stuck request ffff888027e8e1c0: control (read@1024,1024B). Runtime 60 seconds [ 280.002451][T12716] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 280.002470][T12716] netlink: 'syz.4.1920': attribute type 4 has an invalid length. [ 280.020103][ T5015] block nbd0: Possible stuck request ffff888027e8e380: control (read@2048,1024B). Runtime 60 seconds [ 280.031376][ T5015] block nbd0: Possible stuck request ffff888027e8e540: control (read@3072,1024B). Runtime 60 seconds [ 280.743900][T12759] macvlan0: entered promiscuous mode [ 280.799850][T12764] netlink: 'syz.3.1930': attribute type 12 has an invalid length. [ 280.902813][T12766] netlink: 'syz.3.1930': attribute type 1 has an invalid length. [ 280.987070][T12777] __nla_validate_parse: 11 callbacks suppressed [ 280.987088][T12777] netlink: 32808 bytes leftover after parsing attributes in process `syz.1.1931'. [ 281.045462][T12779] xt_hashlimit: size too large, truncated to 1048576 [ 281.962143][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1942'. [ 281.994032][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1941'. [ 282.330655][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'. [ 282.376750][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'. [ 282.537432][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'. [ 282.577072][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'. [ 282.732559][T12849] syzkaller0: entered promiscuous mode [ 282.740408][T12849] syzkaller0: entered allmulticast mode [ 283.470917][T12894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1958'. [ 285.162101][T12907] netlink: 'syz.4.1961': attribute type 2 has an invalid length. [ 285.191942][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 285.202354][T12907] xt_time: unknown flags 0xf4 [ 285.211385][T12911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1962'. [ 285.443769][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.475304][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.562435][T12933] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 285.655172][T12937] bond7: entered promiscuous mode [ 285.672334][T12937] bond7: entered allmulticast mode [ 285.692236][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 285.740615][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 285.743752][T12942] netlink: 'syz.3.1970': attribute type 3 has an invalid length. [ 285.798453][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 285.868917][T12948] netlink: 'syz.0.1971': attribute type 1 has an invalid length. [ 286.073377][T12962] __nla_validate_parse: 6 callbacks suppressed [ 286.073394][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 286.213309][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 286.395876][T12978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1979'. [ 286.441821][T12978] netlink: 75 bytes leftover after parsing attributes in process `syz.0.1979'. [ 286.627594][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1984'. [ 286.709924][T12933] infiniband syz1: set active [ 286.716158][ T5759] xfrm0 speed is unknown, defaulting to 1000 [ 286.735690][T12933] infiniband syz1: added xfrm0 [ 286.753883][T12933] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 286.763968][T12933] infiniband syz1: Couldn't open port 1 [ 286.781191][T12933] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 286.799739][T12933] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 286.817708][T12933] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 286.989392][T12933] RDS/IB: syz1: added [ 287.008769][T12933] smc: adding ib device syz1 with port count 1 [ 287.026489][T12933] smc: ib device syz1 port 1 has no pnetid [ 287.055626][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 287.120546][ T5759] xfrm0 speed is unknown, defaulting to 1000 [ 287.191786][T13032] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 287.531979][T13041] netlink: 'syz.2.1995': attribute type 3 has an invalid length. [ 287.556816][T13041] netlink: 'syz.2.1995': attribute type 1 has an invalid length. [ 287.578813][T13041] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1995'. [ 287.714757][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 287.722120][T13061] netlink: 'syz.1.1997': attribute type 2 has an invalid length. [ 287.751352][T13061] netlink: 'syz.1.1997': attribute type 2 has an invalid length. [ 287.776071][T13061] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1997'. [ 287.791202][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'. [ 287.960153][T13066] batadv0: entered promiscuous mode [ 287.977669][T13066] macsec1: entered promiscuous mode [ 287.989202][T13066] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 287.997013][T13069] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 288.017463][T13068] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 288.027341][T13066] batadv0: left promiscuous mode [ 288.154393][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2002'. [ 288.262972][T13078] bond6: (slave veth0_to_bond): Releasing active interface [ 288.287176][ T5366] IPVS: starting estimator thread 0... [ 288.322422][T13078] bridge5: port 1(veth0_to_bond) entered blocking state [ 288.341869][T13078] bridge5: port 1(veth0_to_bond) entered disabled state [ 288.350801][T13078] veth0_to_bond: entered allmulticast mode [ 288.361682][T13078] veth0_to_bond: entered promiscuous mode [ 288.371665][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 288.397309][T13083] IPVS: using max 39 ests per chain, 93600 per kthread [ 288.588026][T13095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'. [ 288.813592][T13106] Cannot find del_set index 4 as target [ 289.438102][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 290.524861][T12933] xfrm0 speed is unknown, defaulting to 1000 [ 290.770562][T13206] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 290.828989][T13208] netlink: 'syz.1.2033': attribute type 1 has an invalid length. [ 291.013425][T13211] netlink: 'syz.3.2034': attribute type 21 has an invalid length. [ 291.273466][T13231] __nla_validate_parse: 6 callbacks suppressed [ 291.273484][T13231] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2038'. [ 291.315501][ T5839] IPVS: starting estimator thread 0... [ 291.408465][T13233] IPVS: using max 28 ests per chain, 67200 per kthread [ 291.443633][T13239] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2040'. [ 291.474832][T13239] unsupported nlmsg_type 40 [ 291.925866][T13271] ip6_vti0: entered promiscuous mode [ 292.078439][T13284] IPv6: addrconf: prefix option has invalid lifetime [ 292.153105][T13273] syzkaller0: entered promiscuous mode [ 292.159256][T13273] syzkaller0: entered allmulticast mode [ 292.165900][T13295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2053'. [ 292.341618][T13306] netlink: 'syz.4.2058': attribute type 29 has an invalid length. [ 292.592039][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2061'. [ 292.714378][T13324] netlink: 'syz.1.2063': attribute type 1 has an invalid length. [ 294.219813][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2057'. [ 294.229330][T13303] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2057'. [ 294.275783][T13324] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 294.388660][T13332] vlan1: entered allmulticast mode [ 294.413165][T13332] veth0_vlan: entered allmulticast mode [ 294.448447][T13332] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2064'. [ 294.519292][T13338] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 294.526085][T13341] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20003 [ 294.544620][T13334] syzkaller0: entered promiscuous mode [ 294.555578][T13334] syzkaller0: entered allmulticast mode [ 294.588925][T13340] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 296.812031][T13358] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 296.866699][T13383] gre2: entered promiscuous mode [ 296.884149][T13383] gre2: entered allmulticast mode [ 297.036965][T13391] syzkaller0: entered promiscuous mode [ 297.072638][T13391] syzkaller0: entered allmulticast mode [ 297.095604][T13399] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.2082'. [ 297.099910][T13391] : entered promiscuous mode [ 297.202707][T13405] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2083'. [ 297.468005][T13410] tipc: Enabled bearer , priority 10 [ 297.508436][T13420] gtp3: entered allmulticast mode [ 297.615528][T13420] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2088'. [ 297.832309][T13436] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.852357][T13441] netlink: 'syz.3.2096': attribute type 21 has an invalid length. [ 297.924642][T13445] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2097'. [ 297.956202][T13445] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2097'. [ 298.004091][T13444] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2097'. [ 298.016500][T13452] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2100'. [ 298.027491][T13444] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2097'. [ 298.037404][T13453] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2100'. [ 298.112970][T13457] netlink: 'syz.4.2099': attribute type 11 has an invalid length. [ 298.139384][T13457] netlink: 139332 bytes leftover after parsing attributes in process `syz.4.2099'. [ 298.157045][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.173046][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.198101][T13461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.237170][T13457] ip6_vti0: left promiscuous mode [ 298.390241][T13469] netlink: 'syz.1.2103': attribute type 1 has an invalid length. [ 298.449681][T13457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.467097][T13457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.573238][T13457] bond1: left promiscuous mode [ 298.578600][T13457] bond1: left allmulticast mode [ 298.664695][T13457] vlan2: left promiscuous mode [ 298.670438][T13457] 0·: left promiscuous mode [ 298.675397][T13457] vlan2: left allmulticast mode [ 298.681505][T13457] 0·: left allmulticast mode [ 298.686368][T13457] hsr_slave_0: left allmulticast mode [ 298.693993][T13457] hsr_slave_1: left allmulticast mode [ 298.782692][T13467] veth0_to_bond (unregistering): left allmulticast mode [ 298.794906][T13467] veth0_to_bond (unregistering): left promiscuous mode [ 298.810508][T13467] bridge5: port 1(veth0_to_bond) entered disabled state [ 298.831855][ T5767] xfrm0 speed is unknown, defaulting to 1000 [ 298.853357][ T5767] syz1: Port: 1 Link DOWN [ 298.862753][ T1167] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 298.889954][ T1167] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.912339][ T1167] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 298.931544][ T1167] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.971115][ T5746] tipc: Node number set to 2833238336 [ 298.995242][T13488] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 299.036112][ T5740] xfrm0 speed is unknown, defaulting to 1000 [ 299.043815][ T1167] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 299.074161][ T1167] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.104316][ T1167] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 299.123890][ T1167] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.265523][T13493] team1: entered promiscuous mode [ 299.289314][T13493] team1: entered allmulticast mode [ 299.368644][T13497] syzkaller1: entered promiscuous mode [ 299.392854][T13497] syzkaller1: entered allmulticast mode [ 299.433984][T13510] 1·: renamed from c0· [ 299.467564][T13510] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.494024][T13510] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.516866][T13510] 1·: entered allmulticast mode [ 299.524717][T13510] hsr_slave_0: entered allmulticast mode [ 299.539210][T13510] hsr_slave_1: entered allmulticast mode [ 299.546050][T13510] 8021q: adding VLAN 0 to HW filter on device c1· [ 299.557097][T13510] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 299.800134][ T1710] block nbd2: Connection timed out, retrying (0/2 alive) [ 299.809294][ T1710] block nbd2: Connection timed out, retrying (0/2 alive) [ 299.817030][ T1710] block nbd2: Connection timed out, retrying (0/2 alive) [ 299.825534][ T1710] block nbd2: Connection timed out, retrying (0/2 alive) [ 299.834066][ T1710] block nbd2: Dead connection, failed to find a fallback [ 299.845280][ T1710] block nbd2: shutting down sockets [ 299.853931][ T1710] blk_print_req_error: 138 callbacks suppressed [ 299.853949][ T1710] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.874169][ T1710] buffer_io_error: 138 callbacks suppressed [ 299.874186][ T1710] Buffer I/O error on dev nbd2, logical block 3, async page read [ 299.889861][ T1710] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.899465][ T1710] Buffer I/O error on dev nbd2, logical block 2, async page read [ 299.907869][ T1710] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.918931][ T1710] Buffer I/O error on dev nbd2, logical block 1, async page read [ 299.926774][ T1710] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.936417][ T1710] Buffer I/O error on dev nbd2, logical block 0, async page read [ 299.948939][ T8170] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.967110][ T8170] Buffer I/O error on dev nbd2, logical block 0, async page read [ 299.976447][ T8170] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 299.986083][ T8170] Buffer I/O error on dev nbd2, logical block 1, async page read [ 299.994154][ T8170] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.003529][ T8170] Buffer I/O error on dev nbd2, logical block 2, async page read [ 300.018554][ T8170] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.022573][T13544] pim6reg: entered allmulticast mode [ 300.028925][ T8170] Buffer I/O error on dev nbd2, logical block 3, async page read [ 300.043852][ T8170] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.054498][ T8170] Buffer I/O error on dev nbd2, logical block 0, async page read [ 300.063046][ T8170] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 300.074182][ T8170] Buffer I/O error on dev nbd2, logical block 1, async page read [ 300.085914][ T8170] ldm_validate_partition_table(): Disk read failed. [ 300.095676][ T8170] Dev nbd2: unable to read RDB block 0 [ 300.121197][ T8170] nbd2: unable to read partition table [ 300.134726][T13546] tipc: Enabling not permitted [ 300.169729][ T8170] ldm_validate_partition_table(): Disk read failed. [ 300.170152][T13546] tipc: Enabling of bearer rejected, failed to enable media [ 300.189477][ T8170] Dev nbd2: unable to read RDB block 0 [ 300.214854][T13517] syzkaller0: entered promiscuous mode [ 300.221270][ T8170] nbd2: unable to read partition table [ 300.221557][T13517] syzkaller0: entered allmulticast mode [ 300.498670][ T5640] block nbd3: Receive control failed (result -107) [ 300.854323][T13598] Cannot find add_set index 0 as target [ 300.875860][T13600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.883185][T13600] IPv6: NLM_F_CREATE should be set when creating new route [ 300.890967][T13600] IPv6: NLM_F_CREATE should be set when creating new route [ 301.592719][T13637] netlink: 'syz.2.2137': attribute type 2 has an invalid length. [ 301.838616][T13649] 0·: renamed from hsr0 (while UP) [ 301.868589][T13649] 0·: entered allmulticast mode [ 301.880374][T13649] hsr_slave_0: entered allmulticast mode [ 301.888786][T13649] hsr_slave_1: entered allmulticast mode [ 301.908361][T13649] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 302.231452][T13674] netlink: 'syz.2.2148': attribute type 32 has an invalid length. [ 302.245690][T13675] __nla_validate_parse: 9 callbacks suppressed [ 302.245707][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2149'. [ 302.270163][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'. [ 302.349678][T13674] bond3: Setting coupled_control to off (0) [ 302.463811][T13686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.515263][T13688] netlink: 'syz.0.2153': attribute type 1 has an invalid length. [ 302.558141][T13688] 8021q: adding VLAN 0 to HW filter on device bond5 [ 302.612513][T13692] [ 302.614883][T13692] ====================================================== [ 302.621923][T13692] WARNING: possible circular locking dependency detected [ 302.628950][T13692] syzkaller #0 Not tainted [ 302.633354][T13692] ------------------------------------------------------ [ 302.640350][T13692] syz.2.2152/13692 is trying to acquire lock: [ 302.646398][T13692] ffffffff8ea855c0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 302.655699][T13692] [ 302.655699][T13692] but task is already holding lock: [ 302.663048][T13692] ffff88804c150260 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 302.672607][T13692] [ 302.672607][T13692] which lock already depends on the new lock. [ 302.672607][T13692] [ 302.683002][T13692] [ 302.683002][T13692] the existing dependency chain (in reverse order) is: [ 302.692001][T13692] [ 302.692001][T13692] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 302.699811][T13692] lock_sock_nested+0x41/0x100 [ 302.705091][T13692] __inet_bind+0x392/0xa90 [ 302.710015][T13692] mptcp_bind+0x128/0x1d0 [ 302.714882][T13692] __sys_bind+0x2e3/0x410 [ 302.719719][T13692] __x64_sys_bind+0x7a/0x90 [ 302.724729][T13692] do_syscall_64+0x174/0x580 [ 302.729826][T13692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.736257][T13692] [ 302.736257][T13692] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 302.743888][T13692] lock_sock_nested+0x41/0x100 [ 302.749159][T13692] inet_shutdown+0x6a/0x390 [ 302.754169][T13692] nbd_mark_nsock_dead+0x2e9/0x560 [ 302.759790][T13692] recv_work+0x1c2e/0x1d40 [ 302.764716][T13692] process_scheduled_works+0xb5d/0x1860 [ 302.770765][T13692] worker_thread+0xa53/0xfc0 [ 302.775868][T13692] kthread+0x389/0x470 [ 302.780449][T13692] ret_from_fork+0x514/0xb70 [ 302.785545][T13692] ret_from_fork_asm+0x1a/0x30 [ 302.790814][T13692] [ 302.790814][T13692] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 302.798442][T13692] __mutex_lock+0x1a3/0x1550 [ 302.803568][T13692] nbd_queue_rq+0x37b/0x1100 [ 302.808667][T13692] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 302.814718][T13692] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 302.821578][T13692] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 302.828066][T13692] blk_mq_run_hw_queue+0x348/0x4f0 [ 302.833682][T13692] blk_mq_dispatch_list+0xd16/0xe10 [ 302.839388][T13692] blk_mq_flush_plug_list+0x48d/0x570 [ 302.845269][T13692] __blk_flush_plug+0x3ed/0x4d0 [ 302.850631][T13692] __submit_bio+0x28d/0x580 [ 302.855642][T13692] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 302.861792][T13692] block_read_full_folio+0x599/0x830 [ 302.867600][T13692] filemap_read_folio+0x137/0x3b0 [ 302.873144][T13692] do_read_cache_folio+0x358/0x590 [ 302.878770][T13692] read_part_sector+0xb6/0x2b0 [ 302.884045][T13692] adfspart_check_ICS+0xb1/0x960 [ 302.889492][T13692] bdev_disk_changed+0x817/0x1770 [ 302.895023][T13692] blkdev_get_whole+0x380/0x510 [ 302.900383][T13692] bdev_open+0x31e/0xd30 [ 302.905133][T13692] blkdev_open+0x470/0x610 [ 302.910055][T13692] do_dentry_open+0x822/0x13a0 [ 302.915326][T13692] vfs_open+0x3b/0x340 [ 302.919901][T13692] path_openat+0x2e08/0x3860 [ 302.925021][T13692] do_file_open+0x23e/0x4a0 [ 302.930032][T13692] do_sys_openat2+0x113/0x200 [ 302.935214][T13692] __x64_sys_openat+0x138/0x170 [ 302.940570][T13692] do_syscall_64+0x174/0x580 [ 302.945665][T13692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.952065][T13692] [ 302.952065][T13692] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 302.959265][T13692] __mutex_lock+0x1a3/0x1550 [ 302.964361][T13692] nbd_queue_rq+0xc6/0x1100 [ 302.969373][T13692] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 302.975451][T13692] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 302.982292][T13692] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 302.988869][T13692] blk_mq_run_hw_queue+0x348/0x4f0 [ 302.994510][T13692] blk_mq_dispatch_list+0xd16/0xe10 [ 303.000214][T13692] blk_mq_flush_plug_list+0x48d/0x570 [ 303.006095][T13692] __blk_flush_plug+0x3ed/0x4d0 [ 303.011463][T13692] __submit_bio+0x28d/0x580 [ 303.016495][T13692] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 303.022653][T13692] block_read_full_folio+0x599/0x830 [ 303.028452][T13692] filemap_read_folio+0x137/0x3b0 [ 303.033986][T13692] do_read_cache_folio+0x358/0x590 [ 303.039605][T13692] read_part_sector+0xb6/0x2b0 [ 303.044874][T13692] adfspart_check_ICS+0xb1/0x960 [ 303.050322][T13692] bdev_disk_changed+0x817/0x1770 [ 303.055854][T13692] blkdev_get_whole+0x380/0x510 [ 303.061213][T13692] bdev_open+0x31e/0xd30 [ 303.065964][T13692] blkdev_open+0x470/0x610 [ 303.070889][T13692] do_dentry_open+0x822/0x13a0 [ 303.076164][T13692] vfs_open+0x3b/0x340 [ 303.080737][T13692] path_openat+0x2e08/0x3860 [ 303.085853][T13692] do_file_open+0x23e/0x4a0 [ 303.090862][T13692] do_sys_openat2+0x113/0x200 [ 303.096048][T13692] __x64_sys_openat+0x138/0x170 [ 303.101411][T13692] do_syscall_64+0x174/0x580 [ 303.106507][T13692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.112905][T13692] [ 303.112905][T13692] -> #3 (set->srcu){.+.+}-{0:0}: [ 303.120012][T13692] __synchronize_srcu+0xca/0x300 [ 303.125467][T13692] elevator_switch+0x1e8/0x7a0 [ 303.130739][T13692] elevator_change+0x2cc/0x450 [ 303.136023][T13692] elevator_set_default+0x36c/0x430 [ 303.141746][T13692] blk_register_queue+0x3e9/0x4e0 [ 303.147290][T13692] __add_disk+0x677/0xd50 [ 303.152142][T13692] add_disk_fwnode+0xfb/0x480 [ 303.157340][T13692] nbd_dev_add+0x72c/0xb50 [ 303.162267][T13692] nbd_init+0x168/0x1f0 [ 303.166934][T13692] do_one_initcall+0x250/0x870 [ 303.172204][T13692] do_initcall_level+0x104/0x190 [ 303.177675][T13692] do_initcalls+0x59/0xa0 [ 303.182511][T13692] kernel_init_freeable+0x2a6/0x3e0 [ 303.188215][T13692] kernel_init+0x1d/0x1d0 [ 303.193049][T13692] ret_from_fork+0x514/0xb70 [ 303.198145][T13692] ret_from_fork_asm+0x1a/0x30 [ 303.203427][T13692] [ 303.203427][T13692] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 303.211250][T13692] __mutex_lock+0x1a3/0x1550 [ 303.216361][T13692] elevator_change+0x1b3/0x450 [ 303.221633][T13692] elevator_set_none+0xb5/0x140 [ 303.226991][T13692] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 303.233308][T13692] nbd_start_device+0x17f/0xb10 [ 303.238667][T13692] nbd_genl_connect+0x165b/0x1cf0 [ 303.244199][T13692] genl_family_rcv_msg_doit+0x22a/0x330 [ 303.250253][T13692] genl_rcv_msg+0x61c/0x7a0 [ 303.255265][T13692] netlink_rcv_skb+0x232/0x4b0 [ 303.260559][T13692] genl_rcv+0x28/0x40 [ 303.265048][T13692] netlink_unicast+0x75c/0x8e0 [ 303.270323][T13692] netlink_sendmsg+0x813/0xb40 [ 303.275596][T13692] ____sys_sendmsg+0x972/0x9f0 [ 303.280862][T13692] ___sys_sendmsg+0x2a5/0x360 [ 303.286043][T13692] __x64_sys_sendmsg+0x1bd/0x2a0 [ 303.291487][T13692] do_syscall_64+0x174/0x580 [ 303.296583][T13692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.302979][T13692] [ 303.302979][T13692] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 303.311567][T13692] blk_alloc_queue+0x546/0x680 [ 303.316835][T13692] __blk_mq_alloc_disk+0x197/0x390 [ 303.322463][T13692] nbd_dev_add+0x499/0xb50 [ 303.327390][T13692] nbd_init+0x168/0x1f0 [ 303.332055][T13692] do_one_initcall+0x250/0x870 [ 303.337324][T13692] do_initcall_level+0x104/0x190 [ 303.342767][T13692] do_initcalls+0x59/0xa0 [ 303.347601][T13692] kernel_init_freeable+0x2a6/0x3e0 [ 303.353305][T13692] kernel_init+0x1d/0x1d0 [ 303.358157][T13692] ret_from_fork+0x514/0xb70 [ 303.363249][T13692] ret_from_fork_asm+0x1a/0x30 [ 303.368521][T13692] [ 303.368521][T13692] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 303.375724][T13692] __lock_acquire+0x15a5/0x2cf0 [ 303.381081][T13692] lock_acquire+0x106/0x350 [ 303.386130][T13692] fs_reclaim_acquire+0x71/0x100 [ 303.391577][T13692] __kmalloc_cache_noprof+0x40/0x660 [ 303.397372][T13692] tcp_fastopen_defer_connect+0x250/0x390 [ 303.403598][T13692] tcp_v4_connect+0x10ac/0x19b0 [ 303.408964][T13692] __inet_stream_connect+0x25a/0xdd0 [ 303.414754][T13692] inet_stream_connect+0x66/0xa0 [ 303.420200][T13692] __sys_connect+0x312/0x450 [ 303.425300][T13692] __x64_sys_connect+0x7a/0x90 [ 303.430572][T13692] do_syscall_64+0x174/0x580 [ 303.435666][T13692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.442061][T13692] [ 303.442061][T13692] other info that might help us debug this: [ 303.442061][T13692] [ 303.452270][T13692] Chain exists of: [ 303.452270][T13692] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 303.452270][T13692] [ 303.465051][T13692] Possible unsafe locking scenario: [ 303.465051][T13692] [ 303.472482][T13692] CPU0 CPU1 [ 303.477873][T13692] ---- ---- [ 303.483222][T13692] lock(k-sk_lock-AF_INET); [ 303.487809][T13692] lock(sk_lock-AF_INET); [ 303.494729][T13692] lock(k-sk_lock-AF_INET); [ 303.501822][T13692] lock(fs_reclaim); [ 303.505789][T13692] [ 303.505789][T13692] *** DEADLOCK *** [ 303.505789][T13692] [ 303.513911][T13692] 1 lock held by syz.2.2152/13692: [ 303.519008][T13692] #0: ffff88804c150260 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 303.529004][T13692] [ 303.529004][T13692] stack backtrace: [ 303.534879][T13692] CPU: 1 UID: 0 PID: 13692 Comm: syz.2.2152 Not tainted syzkaller #0 PREEMPT(full) [ 303.534894][T13692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.534914][T13692] Call Trace: [ 303.534920][T13692] [ 303.534927][T13692] dump_stack_lvl+0xe8/0x150 [ 303.534945][T13692] print_circular_bug+0x2e1/0x300 [ 303.534962][T13692] check_noncircular+0x12e/0x150 [ 303.534979][T13692] __lock_acquire+0x15a5/0x2cf0 [ 303.534996][T13692] ? __tcp_get_metrics+0x7ec/0x870 [ 303.535014][T13692] ? __kmalloc_cache_noprof+0x40/0x660 [ 303.535030][T13692] lock_acquire+0x106/0x350 [ 303.535042][T13692] ? __kmalloc_cache_noprof+0x40/0x660 [ 303.535058][T13692] ? tcp_fastopen_cache_get+0x2f/0x4c0 [ 303.535075][T13692] fs_reclaim_acquire+0x71/0x100 [ 303.535091][T13692] ? __kmalloc_cache_noprof+0x40/0x660 [ 303.535106][T13692] __kmalloc_cache_noprof+0x40/0x660 [ 303.535122][T13692] ? tcp_fastopen_defer_connect+0x250/0x390 [ 303.535139][T13692] tcp_fastopen_defer_connect+0x250/0x390 [ 303.535155][T13692] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 303.535170][T13692] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 303.535188][T13692] ? __pfx_secure_tcp_seq_and_ts_off+0x10/0x10 [ 303.535204][T13692] ? sk_setup_caps+0x9ef/0xc40 [ 303.535216][T13692] ? sk_setup_caps+0x29/0xc40 [ 303.535226][T13692] tcp_v4_connect+0x10ac/0x19b0 [ 303.535248][T13692] ? __pfx_tcp_v4_connect+0x10/0x10 [ 303.535265][T13692] __inet_stream_connect+0x25a/0xdd0 [ 303.535280][T13692] ? do_raw_spin_lock+0x12b/0x2f0 [ 303.535296][T13692] ? lock_sock_nested+0x6a/0x100 [ 303.535310][T13692] ? __pfx___inet_stream_connect+0x10/0x10 [ 303.535323][T13692] ? inet_stream_connect+0x51/0xa0 [ 303.535336][T13692] ? __local_bh_enable_ip+0xd0/0x130 [ 303.535350][T13692] inet_stream_connect+0x66/0xa0 [ 303.535362][T13692] __sys_connect+0x312/0x450 [ 303.535379][T13692] ? __pfx___sys_connect+0x10/0x10 [ 303.535397][T13692] ? rcu_is_watching+0x15/0xb0 [ 303.535413][T13692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.535425][T13692] __x64_sys_connect+0x7a/0x90 [ 303.535446][T13692] do_syscall_64+0x174/0x580 [ 303.535459][T13692] ? trace_irq_disable+0x3b/0x140 [ 303.535475][T13692] ? clear_bhb_loop+0x40/0x90 [ 303.535488][T13692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.535500][T13692] RIP: 0033:0x7f5f5439ce59 [ 303.535513][T13692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.535523][T13692] RSP: 002b:00007f5f55337028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 303.535536][T13692] RAX: ffffffffffffffda RBX: 00007f5f54615fa0 RCX: 00007f5f5439ce59 [ 303.535545][T13692] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000007 [ 303.535553][T13692] RBP: 00007f5f54432d6f R08: 0000000000000000 R09: 0000000000000000 [ 303.535560][T13692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.535567][T13692] R13: 00007f5f54616038 R14: 00007f5f54615fa0 R15: 00007ffedb3038e8 [ 303.535582][T13692] [ 306.037771][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 307.179319][ T4999] udevd[4999]: worker [8550] /devices/virtual/block/nbd0 is taking a long time [ 310.037401][ T5015] block nbd0: Possible stuck request ffff888027e8e000: control (read@0,1024B). Runtime 90 seconds [ 310.048226][ T5015] block nbd0: Possible stuck request ffff888027e8e1c0: control (read@1024,1024B). Runtime 90 seconds [ 310.059255][ T5015] block nbd0: Possible stuck request ffff888027e8e380: control (read@2048,1024B). Runtime 90 seconds [ 310.070305][ T5015] block nbd0: Possible stuck request ffff888027e8e540: control (read@3072,1024B). Runtime 90 seconds