last executing test programs: 5m46.763579966s ago: executing program 2 (id=1967): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x4, 0x1, [0x6]}, &(0x7f0000000100)=0xa) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x87cd}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000180)='\x11\'/\x00', 0xc000, &(0x7f00000001c0)={@_ha_fsid={[0x8, 0x2]}, {0x380, 0x1, 0x6, 0x3}}, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000002c0)={r3}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)=0x2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r4, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000095}, 0x40000) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f00000014c0)=0x0, &(0x7f0000001500)=0x4) recvfrom$packet(r5, &(0x7f00000004c0)=""/4096, 0x1000, 0x2000, &(0x7f0000001540)={0x11, 0x1a, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r3) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x76577dba}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r9 = socket(0x3, 0x80000, 0x101) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000001700)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e21, @remote}, 0xc0, 0x0, 0x0, 0x0, 0x60c, &(0x7f00000016c0)='sit0\x00', 0xf, 0xe0000000000, 0x1}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=@setlink={0x38, 0x13, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x40}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xca1}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xffffffc0}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0xee806d361f56c489) sendmmsg$inet(r2, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001880)="d3f734263835f00ff02634ef1a8b7a9b2f3aff62327d1fc1886893543f818975a9d6e48b8a33ee1fb95e4023076be43ff889a5e78cee79b49322947e2428c770c94fa2247decd8f81d87b82b453c7ffce8cd163fa569335763e5c2cf0c3b7ffa62dc7b27e602570451c64db9aa9292272512c6954e", 0x75}, {&(0x7f0000001900)="4e00a240965e640c85cca9c08c417dfaeb5c7609c351ecadac0004a2c5e202732f107acfc36b9ddfa3972380fc513eac3c5d920e80547f6f0fadfbd41ac16892f8cbad5ee7f0f35112f6cd32879ca147d1801c94ff37fb18535635399703e08c8b47c0366da7ae48fb9d573600b33053501394581a66a1b8ff758045802dba8dd96681039d735a54912bbeade427ecc71880ff059e0ced3a3b61", 0x9a}, {&(0x7f00000019c0)="17b8a5c9de974ef4c528ca8314cc99f94fd01ff6c66a0e76c6f8b7b9cc079f2c6516a6a79c5ad8be26c1e72daaebf8c2a0984e5a0ccf21aa6faecc4303e5ad096e0208c21b9df6fe007be53978c15f9252571762d976f689ef49dbf375a630cdd25b1cf3883d7cc9ac5e2560236d17b94f9695ef78031c39b15d37640814b3153fe1c2c320e679724d21cb87824824b6e5b4863a80013279c7d8ff597c608d56445c1589374ce80004770a7e58c925d4a4b47370c47bb61750d608fab618d6c0ccd05ed2ba1d2726ebff2f3c0f1982c4de2739317e9bc3ec6cfe21cdb1878b25ce87", 0xe2}, {&(0x7f0000001ac0)="957784a8f662d790e7fab339392d8c64a5429cf215a20d9d5ad99734f75a91ecb763bd246dcedf6913ccacaada401e22565ba9863bbb45a17b7a2a68214dbb0990e83229fc223d71be754790c20b807cdb570ea7ebafa80ea45d13a1bc52", 0x5e}], 0x4, &(0x7f0000001b80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x7, 0x4, "f4dd"}, @noop]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xdd, 0x3, 0x8, [{@rand_addr=0x64010102, 0x3}, {@loopback, 0x6}, {@empty, 0x4}]}, @noop]}}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001c00)="919fee38fe497b4c2cb6f24a09989dc2ee8de93d176cfd4f0d6ef9c13adbd4a3468fad48addbd7f1f77a922c", 0x2c}], 0x1, &(0x7f0000001c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}, {{&(0x7f0000001cc0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001d00)="1399ab2f41b1df64c7525749ac4d5e2e8a4ca1b8f03184dc647bc353716c15cc04180610d36501bb1bcb32f93ac38c3290442798dbcfe276397bc8dbad81b79ab93cc12515a3abd08d376587df59c40357cf36589dd87c2e5bbc72604f61aa4ed4e2fb97bdb63fa2011e9c72017f78cb68fb7dda66bb8885", 0x78}, {&(0x7f0000001d80)="d221ac8e7e40dd20e309ea0c359a9e47d1c545ff7da94320beecd1d443add20ba6ea03a47c6fcb1dbfb9762d97796299b1d50c6a6ba8941a019afecd9b9d815e3587a4a097f3ce65296db53600a2f6fb1ae7724a2d32d783825afc5540e5009ff1e3f3d9fcb8d4b5af82057018eaca3c361953baa3d8b88dc18a5ca868f0812d7a782f3ec372b4c163ea578ce5f80089dca1c2362f99de202e786567c4194e8dd74bdec7260789a61e187e88c8387905fba0596c1a440e965fdaf839a56f8f3cf675f0dbdd08983edeb1b290ae46984d83f8d4a7a2", 0xd5}, {&(0x7f0000001e80)="d03f98678af7c668e322a3463001789ce8e028fd4bb5519ad0f6c7e5534536b98c7fb86978db2fab0117431c6be10b091a354053bc7c5bfbc28a8469b3eb0fbd89f6d597b70fdabd692821ee86b86589c23a66fc3d64fb8d1436d336ce7991088e7d2ebebe5a84e2168d2c1a1157573c28a6f8116f57f0a305", 0x79}], 0x3, &(0x7f0000001f40)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@cipso={0x86, 0x31, 0x2, [{0x7, 0x12, "f4c3c9dcf7bc5d4eda0755c580941f99"}, {0x5, 0xb, "b3682c0aff4470e25e"}, {0x7, 0xe, "8461db6c1939b170a0743fe5"}]}, @rr={0x7, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x28}]}, @lsrr={0x83, 0x7, 0xbe, [@private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x3, "e4"}, @timestamp_addr={0x44, 0xc, 0x47, 0x1, 0x5, [{@broadcast, 0xfffffffb}]}, @rr={0x7, 0x27, 0x34, [@local, @loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @rand_addr=0x64010101]}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0xd6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @broadcast, @multicast1, @empty, @rand_addr=0x64010102, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0x31, 0x1, 0x0, [{@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0xb, 0x0}, 0x1}, {@multicast2, 0xd7}, {@private=0xa010100, 0x80}, {@broadcast, 0x9}]}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x7, [{@rand_addr=0x64010101, 0x7}]}]}}}], 0xf8}}, {{&(0x7f0000002040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000002080)="11317873faab00fc25d2bb45a7d851a1229d7e005505959d", 0x18}], 0x1, &(0x7f0000002100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@generic={0x94, 0xa, "37f55b43a611ec7c"}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0xa, "587d09e6995c7390"}, @timestamp_addr={0x44, 0x2c, 0x29, 0x1, 0x9, [{@multicast1, 0x9}, {@private=0xa010101, 0x617b}, {@multicast2}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3e}]}, @timestamp_prespec={0x44, 0x1c, 0x93, 0x3, 0x2, [{@private=0xa010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x101}]}, @timestamp_prespec={0x44, 0x34, 0x1b, 0x3, 0x4, [{@empty, 0x2}, {@private=0xa010101, 0x1}, {@private=0xa010101}, {@multicast1, 0x5}, {@local, 0x9}, {@broadcast, 0x40}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffff934}}, @ip_retopts={{0x68, 0x0, 0x7, {[@cipso={0x86, 0x14, 0xa6cb4d27bc00b688, [{0x7, 0xe, "d06c36c488f8b88220954dfc"}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1, @empty]}, @rr={0x7, 0xb, 0xf7, [@local, @local]}, @timestamp={0x44, 0xc, 0x30, 0x0, 0x0, [0x2, 0xcb12]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x188}}], 0x4, 0x4000010) setsockopt$inet_mreqsrc(r5, 0x0, 0x1, &(0x7f00000023c0)={@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002440), r9) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000002580)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0xa8, r11, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x1) socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000025c0)={r1, 0x4, 0x2, 0x2}, &(0x7f0000002600)=0x10) sendto$inet6(r5, &(0x7f0000002640)="ed6f1cf71d43944f3a6f5306b8a90b0c21e7231839e0", 0x16, 0x12, &(0x7f0000002680)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x75b}, 0x1c) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000026c0)={'ip6erspan0\x00', @broadcast}) sendmmsg$inet(r0, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000002700)="8f2a8bfc7531eb46b7c71aac063f0701dbec7101946b7e03b618a881e5d5c0edf17223b494000e9c9393d0527787ae4d8cca554ff0268d6906c20ece5bf926d124a99f90d2ac7a9c99de32684303caf11d8a3060e1e8a5d0a9b9894348e51b9c0fd0872f60235b66c2073a27a2eb285a154bfc667d011be9b181069f3831046bf79b8b5ebcac0d5e3ac0f66b57b0410716a20a1f483f6f4315e4c480aaca11afbd367ad8e0a1b043b49f654e7e01df3f7f41de323de82d4733963a5198d7ad5a235ac679695f0a9f3c3c06f35d0fe3a66d6cb7083e99714037f2ca618055be", 0xdf}, {&(0x7f0000002800)="2e5fccc0db1e58f0fd56e00833f29f809b5fc518ddc4c3962270e78b8383ac28a168c62af979d7351f1c748e615dd958eeda9d5a8f248c577ba3a2f96afa3455a7896e521d1c62d7fbda7bbf555cb114b2c731c79077dceba24e03ca79", 0x5d}, {&(0x7f0000002880)="11c578e3a3bed60787cf86a28605b48c777ed6bd30db76dbe3c8f095a8097396268db6332de4ea14aff61fffeb9352f0743af4e24d8cee37587164916120a3d90b93e7bf5d09f4ef302a7a7fe6b7881ff9959b8ab35b23e0f511c6853027d105c9b37e818a0790205ad2a1a3d16a48ecc8277af80f049f3b1a3940c321300c4fb4a97cba63eac5da15e9356f814c47afe1", 0x91}, {&(0x7f0000002940)="ac13e58b6813997cc704b847f8f8a917a18a279835263a97422e72677b72f31cfb4a725fa9a761ec291b16b8b97ccb3aa6f075031495262d74f902ee9db5be24aca6640bf4ab57002290f0b0ee266ea3e81335caf9d84d1e17bcd27b516740b1b1513705e5c5620d159af69abebb9a2be5069a27ae2f401eb3987a3eecb1b9dfe03d1402fb242e8d82152f4089ecafc103e8a29088e908f79684f5e597baf83536e4fd929595cce0eddd0575a5093b037fe11fbe89cff812dfeeeaf929fbb9752963cc03be8b24a1500a6028afcb4216274c3a5548381591774eb20266", 0xdd}, {&(0x7f0000002a40)="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", 0x1000}, {&(0x7f0000003a40)="33bd91d1ae33d0d9bfa434210b052a1c6949716d95493a34d57fcf77775222ebee3f1f3dd12b42709c35a71e037b0c334672719236ec53a63eea369bbdc0e8f84f72cf2cd8116cac354d1afe326e8673c22905d41aebf06787b0724d755ea3543ae3cdcd3e3c6158", 0x68}, {&(0x7f0000003ac0)="4345778e", 0x4}], 0x7, &(0x7f0000003b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xc8, 0x3, 0x9, [{@private=0xa010102, 0xa66}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x80000001}, {@broadcast, 0xe}, {@private=0xa010102, 0x5}, {@multicast1, 0x7}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}], 0x98}}, {{&(0x7f0000003c40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000003f80)=[{&(0x7f0000003c80)="ddba51c92c0b9be002d29f19c7e9df5fa4511a7d967fae6bc110bafdd1d18d329adbbb5fc78589397fefacc583d556f3900846dc9babb9f2b5ebaa37e905b7cf1afa5c128b2404c1f43d1be853058f1f08dada84f61f67cf1c37c0a0dfa1d70a39dc7e304dd123f6a2fa83e092c174575a122b392edd26bc885717", 0x7b}, {&(0x7f0000003d00)="bdd24490a1e08605e6a1d625d1599f97dbbeefc9982fa4bd21e7670ba9a7f6b4545f3d4f2ff076700261c833248667df6fe75e11ce4b01b07abaa0fb2729665938da08d4c5d92bdef97105e84c97d38a9f6d350322785f4d646f0a468fb64a433df779471e25d02514ccc3c8678248bae0a95282acfba92cb5ed295e24855fb6bb7316dc977736fe1abd5431946974253dc32f36d9a8f4cad1e5c8ed02fc0697d1871f445243239f41b1a6d38a25e4497671f3962119823a2bdcba3dca48ff61025bb931a2cf896fbcc68cb3a09543a9f96e93c59c8c8d88ec7a33", 0xdb}, {&(0x7f0000003e00)="9e9f9378a98957b732371e3b384ff551718dd5a8e4f880b35259d64d130b43f54d280baf8c2f92fbb1a63049a87696374c8c060043e0c549fe8980f2d41d9843ecd6842f652db3cfca617d0adfb77e78d3cfc5c00c729d49efa9df88d48b5d2a5a81cb604ee5c24099760e1e0fdbdff4f7a4959a32f969ca1d705587f8e384332c03bb924322f3f78208a99193e406", 0x8f}, {&(0x7f0000003ec0)="913db021c1ab67b2fc9ce0b323f6e1e9951995b74849854edf288d6d89ed96b4f7c4cc2afab0eba1a9a0796b44f735790dde9e1c2c7c7079293328374a44c442ac21ef475b602dcca6971371dcc966e09ff1aed943a2e62a36a80f7b73baf09e13f9c7deede42a8b05e4c410c1c6029f25d728e48ec9972969ef4cd20d43797dfe37cac407ee37e0a3e04bf24dc623ffc070839f584739dc93563cbfd0c6caa31b9bb7d20b2da76a99e53453ae", 0xad}], 0x4, &(0x7f0000003fc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010100, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x16}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010100, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x124, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xa0, 0x1, 0xa, [{@broadcast, 0x5}, {@remote, 0x5}, {@multicast2, 0x10001}, {@remote, 0x7}, {@empty, 0x5}, {@remote, 0x8}, {@private=0xa010102}]}, @lsrr={0x83, 0x1b, 0x98, [@multicast2, @private=0xa010100, @empty, @local, @loopback, @multicast2]}, @lsrr={0x83, 0x2b, 0x28, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x2e, 0x2, [{0x7, 0x10, "690e31dc4fcf14db4b051d7b1c08"}, {0x0, 0x11, "18310f9970b306a5b9da8265b94e93"}, {0x7, 0x7, "cd5aa2959d"}]}, @timestamp={0x44, 0x10, 0x21, 0x0, 0x7, [0x1, 0x8, 0x5]}, @lsrr={0x83, 0x17, 0x53, [@local, @local, @broadcast, @multicast1, @remote]}, @timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0x0, [{@loopback, 0x7f}, {@rand_addr=0x64010102, 0x1ff}, {@loopback, 0x513}, {@private=0xa010100, 0x80000000}, {@private=0xa010101, 0x1}]}, @timestamp={0x44, 0x10, 0xd, 0x0, 0x0, [0x101, 0x6, 0x7fffffff]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @broadcast}}}, @ip_retopts={{0x50, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0x1c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x5d, [@broadcast, @remote, @remote]}]}}}], 0x258}}, {{&(0x7f0000004240)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000004440)=[{&(0x7f0000004280)="84eeba5c36fe14c9ac5fd65d506578d1d8479d735c8c185c3393353860331c3b30343d2fbc8d9a3b81f9b05aac418bdbc3c626d64f3156a6f0dd41668ab89a4f2ccbf16f2179d009a45b5da4e4144414827b7540bb1b1a62e6c72498f8dec25af4a0943e459d7a430bb59495d3f22c24a7101ad5ce31c638dde7c206b76d6cbb848504baa37c339950e7caca5962d43ef146ad7f560d4827de0c8b82ac069e5b442de85a648069661568087058f59d27d73a6d88c872d284953cffc107c548d3e6ef15ee58", 0xc5}, {&(0x7f0000004380)="90acd503d2030378919e6e20afb523c69ba2fe796338153b1d1815fdcbda33a37f659d2509df221169fc5e4faf90872bf4a41c9c60f8f42db87526191f8bca4426a78fda6b49dea657cea39074680dae395f667b172ae8de8a26dba47a2cb4e55c076090daf6d0806d56cd1218adb8d1ae70df48862d1ae558412fd356f3bc329a8ff4a35e6f99a7bd96b52961eb65c05b62537b", 0x94}], 0x2, &(0x7f0000004480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x48}}, {{&(0x7f0000004500)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000004940)=[{&(0x7f0000004540)="7d1b8e5a60e3f82c166f05bfd1b2d4689f6a544f20700247905a6928f4f45a45ce31da96daaeea1aead9fde5792747c7a77a5b88eb03f21445d0d6610acd798b8194e2cc7a83f88e0fecc0a2d5791e59bb3a6407958af2fe33d37bf3ffbca7e185570bbcf19285c43c26b9", 0x6b}, {&(0x7f00000045c0)="be73c300c2e5a62062629b135db96e344ba5aef62bc1b89f5e3f8149f416", 0x1e}, {&(0x7f0000004600)="f5b0caefdf4dadb3e252b11b0c6658a14013b6fd89342ff37abd3958ecb0c2b730a0ec53f0e266729aefad23bb1bcfa61673c8638c28ae033e07df484355a94ad65e2f2392a6c24f15464559f213f48c341e9677f2eb2776b5112031c0a3", 0x5e}, {&(0x7f0000004680)="317c11a964c8a5d166a516847d5d2904a444a0006a2f36b7454aa9201cc53e872f434264a9923a9e1cf4b16c4a894c23946a5cc47099410becebb80e0c09386fc849a61a51f6c94d01b2fe95dd57e9a2bc470e99cd897d3520fb646c34fdf99e3392afb89bac49306cf6afc75a42e6dade413e1faa11bd8b4e1a9e454c6291e6d2cc048a13ffdaaca248b23cf8c0bd19b7f1e81d4a268ac978041ccd1263d1727de963b48a2b72e2d5bd49", 0xab}, {&(0x7f0000004740)="6231dca0dfdd3709c84872fe861fdf695b1ad2b2251d38ea52ba15", 0x1b}, {&(0x7f0000004780)="50e9d8f34db90251bbbd991519554b49c4fbf1b87f6f26b23bb9352f32acfbe5a44e9d778ed3553cb2318d943bedd5345d5cd3338cec3a0767543525ef7186add8cec93a365757b624907c8b2d6e06a65f732ea971fb12b31817e70765b62af1a74ae023e0717215bb9c4f6c39abe954cab923f4e12a2085255cff02664f3f34f1e5626de3fe51e2a8c529db2d4ccf28a3a6ccfa068df5b035494dcf2de66be91fe06877bac2ec0f9b93d860a071b6807a2eab854532905e90ac594de6b8429239a7a76017ac62df39fe1ac486a02d2c6340", 0xd2}, {&(0x7f0000004880)="1379d4203c3bcf9a4f65279a8bef53075fb6de3783ba81cf96601e2f3c751e6b41a875672908fc1bedf286db864ae171dd6e16afbdae8ee0cfacf2f10e5c9bf3109fa8721e1f3529770fb97d0fa1a0aeab31df5299f9b77927c3510002444e417db2a3e96513e04557f93b8cff9de6e989766e375bcef25e485e376f8ffe6a278a483a1d962b6c3951292175058aa171d5873b61", 0x94}], 0x7, &(0x7f00000049c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@generic={0x7, 0xd, "0318d80ab195b2929dfc49"}, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0xc, [{@remote, 0x1}]}, @rr={0x7, 0x7, 0xf5, [@local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @remote}}}], 0x50}}, {{&(0x7f0000004a40)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000004f40)=[{&(0x7f0000004a80)}, {&(0x7f0000004ac0)="3ff0a1f601f8d1b845399fc64e9c72166faabec7b4d5024b1b7784350b834de344aca3ad465e9e715bcbffbb9a24942a23e6b618518a81b426787e5eba6115165360a960528724b55716b9333ee86d6c1dad", 0x52}, {&(0x7f0000004b40)="168a6a51d7930ca5b3ae28148cdc2de9cefce8973a4545211d4f821e8a125fbb0ac47ccf74c2dee06d623320ef215beaacb2ad86decc76d8a5e7196f980ea6ae598915e452961bae2047824b2329dc03f7b7ab45c1859aee1d67bd0a119887c3f4974b899be2949ece3968af12a83fb54a669eed8287c6fb591c897a2fc560845fe2", 0x82}, {&(0x7f0000004c00)="a945e8b0df88c8ec41accc4626dac4fe87e930c0b5761d6c525aa677c673674843c8aed38f8148092d11e232f1426ba03ea6a8ba2dba336a10271c5ef8d31e9578d3b834fedffa6dfba06f7afede786846add8b24f47e9d1a253e390ab6d9f4137e8da7b8d0be4e5d2c5b4e563e154972fffd8e80c9b5c85f008f0ffe0729c0f594c", 0x82}, {&(0x7f0000004cc0)="cd84ca1055a180314ff0f105bf6fe63b13bc2806b14e2509cc82e69f6ddfad0da3897e40f0973ec4454c65d5e10d1de2819e619796c313b5aec873d152525ff0c88a4d0725566c0718f5b3fe890cbc7de3765cc2d14e2117edd5bcd03e17fdbe076cb54277d95dee4ec5b15e3394a01288aa2dc44b291b5d46e4457cc352faf7027303a53497df2ed52049e1e0b577", 0x8f}, {&(0x7f0000004d80)="52347cc9627193131627a95f364a56e8f2f48dbbc2ceb55a1643c3649ff3ced34b0d46eaece486f5fe3d3beffea86f458b871cd4b87009f5b7a55ae906c693c9ef15b14abd118e5fbc399234a55dc187905e02334f923e877648c09837e325c6e00d68678a185736a5752f099e3a4c8bfe7bf201c1b725ab3bd6a8e8dffcff774291c52aa3cc4cc675271042bcc980c05fd54d0fec96649881a23a9174d730893f96917b18f2eabecac48f42233336e1", 0xb0}, {&(0x7f0000004e40)="1de8c80cc582a70f3abfcc0d7600b5893be0d659ef89bfa43dbbe591705389ab9f4b09ae271a01f15c6780dc917e14fd819ed9bdc3878f3fa0f7d33277cc88aff8dcc8e325b0bc55683a13679b81aa538d21f41228b7648f01fdfafa6dd92f3873810eb65498b015c6c6f45467807ab782520e57513caae1919d08a3e07c8bc390508bd2097dc438950b88229f0bec0b7cb77a718c9efc8d0bc98f8e800b9ce1f77198d68ce7a56a53e91c7a2dd9eb047af9c2fa87cb3ff69328b82c2ef4f2ef9b59cd83f7744b1dea37596db79b259750f995d6ba230f8edde7bff66d72e3013f298244b50c2200c292", 0xea}], 0x7, &(0x7f0000004fc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}}, {{&(0x7f0000005000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000055c0)=[{&(0x7f0000005040)="4fbe90bcd251b2eafe5a651b1ece15f5ca8d50d78655560a6d2fc74bf4482f8a79cfa2ba7604d8d0a9188c95c787e19f690a095ad26eac3c46e3252398689c5c837872940e624bc2ad8a9157f6030fb458039db4a3a600bf9539eac52741704c7ee0715630aa7e598a6ee37325d7c81385ce6009a9f754", 0x77}, {&(0x7f00000050c0)="d309af6f3f82a325b2d0a5c7b5deee967018854017328c0efb26443f84ebaa8d9bba6d7fb105ba1340e1b48766446904abecb49005a09d40046d2167a6c748af1c11ca8ea39687f68c783c3adddc7fdfc28135af3b1c92a79ff93fb7fa50c0038b8d607ef995a37a88e682232dbf50b7e201ef9f57a620538b44b065e60870f9e1abee9003b49944479c24c46dd48f3630edf81dd43bb29c498e38c45274a224", 0xa0}, {&(0x7f0000005180)="c7b7f5f2c90493694b80fad6baf63c72058aeb54f98f0190c414c5670db00e37011956769a9349f064eac42f31a2f0e727abc090b959bb57f980338bb94f13fe063ecf8166799d692ce2e196ee287385cb7e2c321051c4e0db4ac9633995fe7517332f936160df1ea779f2ee2e645b98ee103656d69c7e5854bf91a6d1bb20d4daa95246f3aa7cd097cca5dfbcb5521efd81aeffb5811910edfae7522059449cc957cb94f2a784e7d9e9f8d6a00158bcac20419e2ad70803ffcb2d6852e840466e4447a4b546aae64a33b2cb318f2a8aed8ac22532fb9382641b9f572743c9a659f240c29b81652fb5dfe0cb6b80acebe524", 0xf2}, {&(0x7f0000005280)="733b8f135fc6a1132da43815070b952054e5b4d0154b0a78de29af80a59eb4e83677766b8ba97c1b6f025f72c71df0074af2b549a2d01f9db48078b4b738d632b1ef4e3bdbc8be77b48fba839ffb7f20752c0c0ae37f8ef0d56ee214fc085cd23e00f3c0374f115d391dbbb455f7fbd4cbc8c9b9acf3e1f0cf5d8557b69d399dbc324ecae4bfd61451fcc4354b93aec86babe1a4176c1c3728b124e48f0255e3a84d23d15761dfc982dc938f49ff8f700cb1c48e47855535937e1b65dddc99f5fc517c3bee", 0xc5}, {&(0x7f0000005380)="a9b1c8fb2ec46651fb7ccfb9ddb9c3d86a6d815da1d155a0db8aea6a35de3f66ecfdaa3cf245d66513af1ae8a884a30313f759acfa9080c608a3ccd67c288fe77c4a3b8e7cac22f93eaf766df0dfa56494635474319ab33419939daf20d54f95063fa8a91649193cceb99ba42adc605e1c5ea1b618e8717b4cfa579b5113c90149a3117c68507c1ecfd5b3bb106afeee64acac8ebf5197c8aeadf05f7e85a39491c8369909eed26065a7", 0xaa}, {&(0x7f0000005440)="0d09079aab2246a0a9f08ad65b8cde7e140192fe075e9fad2d37cde6ad96388f14f1780438236ff5db4c0884c3a462d8a2266c4b27b862b31068cf81117a06b3ee4f073d07a712bc7b10e135ed8d0f58aabeeb3309964f94703efad41bf9f52ddc88fd0541a0d831849b03d054d18f4b848b7ff93f482ab0e7c4001dac22b610159af4b90bfa2bebf2fa577f249c15cffba4fc47b0c1b0778f82284bf07db6cf53c8914038f65cd01ad6f90142ae419a58328da4dbd199bbd64f", 0xba}, {&(0x7f0000005500)}, {&(0x7f0000005540)="ec07dec0912c326b3c7b14d0511eb6438203a427c3b894f7db83f2e17cb0377b1c7e4aae348836a7d416ef595fe81381b17d2c939dc1b49a5471ebae637d05ab89fe82bd4148db38bdd708d8dc13d81c3628790af91eea6490b13b7d8ba42eae9e", 0x61}], 0x8, &(0x7f0000005640)=[@ip_retopts={{0x34, 0x0, 0x7, {[@cipso={0x86, 0x21, 0x2, [{0x0, 0xc, "07bfbcc36a74fbc23490"}, {0x0, 0xf, "2d3cb46a10e2a6d075d1b155c4"}]}]}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0xc2, 0x1, 0x0, [{@private=0xa010100, 0x5}, {@private=0xa010100, 0x2}, {@private=0xa010100, 0x9}, {@multicast2, 0x7ff}, {@multicast1}]}, @ssrr={0x89, 0x7, 0x3b, [@multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x5, [{@rand_addr=0x64010100, 0x6}, {@broadcast, 0x80}]}, @rr={0x7, 0xf, 0xad, [@rand_addr=0x64010102, @remote, @multicast1]}, @timestamp_prespec={0x44, 0x4, 0xb1}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xbf, [@private=0xa010102, @local, @local, @remote, @remote, @remote, @remote]}]}}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x110}}, {{&(0x7f0000005780)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000059c0)=[{&(0x7f00000057c0)="44d7abb037d2d50cfe36d526f641789ffa5924f3236653a22fbd70f0f9dcfe3cef51b44e7b15023daa7025f04b0d85fa24c410c745a33c71484e1de88cbe5fcce635463f5ca7fa42263635dd254e05cb9995a7580e79249bf4a8c35a75f3a57cf5121d396dc6b8e9d1ca5415d18b23d307dbe97fd7e895d54d7ec847316767f71c24796057bf3b5c98f496530b8e5911634111b2", 0x94}, {&(0x7f0000005880)="0b599a73bd5947996603b4e2e165a9bc3a3d264761471086dd29dc4450e9592f1194d7a6807b284a950cfed695b911729a21b461000ac2dfe3ccc65e31e642a7a0ed7c13642180289c44348c459320b9c3cf964d11663125b5bbee6182ccca9e47698c5c1d738ae2d8df96ed97559ba066cbf7e129c4bfb721bc089040a71256c8ed7be60ca112c0c34d2ee25a9af87d43fc8ea68471ab5a2bd08c1369e8d086eeec0dee2a9bd50c07b8650decff037a45492561f505c2e7d8d6df5331a3ed5936bfb1db648cc3ffbbde10", 0xcb}, {&(0x7f0000005980)="93d90c582991355bc37e4b83b4cee1a4e2c17b1d6297dcf7381e1fae35189eeae8cb3ba6c250799cf5b3f11c15e1766a", 0x30}], 0x3, &(0x7f0000005a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}], 0x7, 0x20004804) 5m46.530044486s ago: executing program 2 (id=1970): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x28000600) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x35, 0xfee, 0x1, 0x7, 0x3, [0x40, 0x0, 0x9, 0x10001]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000050000000000000700000000001e2e615f61"], 0x0, 0x2d, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r4, 0x38, 0xfffffffffffffffd}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x5}, {0x28, 0x4, 0x5, 0xffbff038}, {0x6, 0x27, 0x2, 0x207}]}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x1c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa}}, 0x1c}}, 0x0) 5m46.434266948s ago: executing program 2 (id=1971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xf11, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x7f}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 5m46.183736092s ago: executing program 2 (id=1975): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) r6 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x4008094) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000010c708fcb5036a2700000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000200010078", 0x7) 5m45.762022929s ago: executing program 2 (id=1980): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="5c00ff7f0206010000000c000780080012407fffffff057fae2200010006000000050005000a00000005000400020073797a31000000001700030068b695899f6e65742c706f72742c6e100fe31d00442bb816d4035f737a00875f633d531b2efac739261194b8c824b0adae3088aba6503ecae9b01506a2cda9b87b9843b7cd190ab3593259fa4debf7cea23df027669597f486208b6ca3042399410f861a31d714ccffc58e9cee0e939b71c8011f329c440f58c6ee929e00000000000000039d03f07113cf53ed193c995f4b239c32c656e921ba955771c76f60d557c96fc3d01095d3"], 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$sock(r0, &(0x7f0000001680)={&(0x7f0000000040)=@ax25={{0x3, @default, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)="99ed651da90f32dbb166a595bcf752c2f6b5b5badff8e34b22cad3aa9da912b01449f6ebe18c9fcc775c0b0f83dd52f646", 0x31}, {&(0x7f0000000180)="0379f4708f143978894cea095b926514a12950f4618074d72ff6d46cbcfaaf2752b510cf49635dde2d", 0x29}, {&(0x7f0000000200)="d7127b5545762eadb14e6e69e7b761302c0969e44f587a743ff91676a66bcdcbd69bc8524d23d95ea05dfd19d3ed5db81bd0962e767e817e3f29c1b10e016585fc6fd8e29207acd7e9109011d7c2817dd87be0d1969ab683db8014a26e362cb951ea3e32caa581a8a0f76918e03f782a8e5fc38eba3132c2d79aa00e50f01494350992c2878e116fb80d99d55f4d80a9d103afeeb587db7865ee1c2ca6d23dc52decff7f6039220fe3f44f1814421cd3b19d201db8f2de038486a1f4085008cfeda231aa6b598d76114847b2a4ac", 0xce}, {&(0x7f0000000300)="6235f58375fbeff6c6d3cbd8111be439822b0296d250dae9ee1ca2af54ad94ebce8a42447690944354805a3b85bdddb6e0eb63cfe9b8fd2cd3eb2132eceaf5e21486a3bb26d8ad65250abccb2279cea610fd", 0x52}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="604ce74eff5fb56a8b610da308c76985615403d9265ffbceffc0e11d5eafbeb5b749741136d32f55ad5c245d9ca7ed033c69e321f4da238e698cfa3d7c5192dc22670763ebd174e2ba51765c8a3e351ec556ac5fa8c8d9a003db11410610db1ed2494fae8f0795144e30731cad02f0a5f2", 0x71}, {&(0x7f0000001400)="ff9fcd6f1c686bfed704014114", 0xd}, {&(0x7f0000001440)="01883f47659faccad3d0776198b307c8542d96e512cc69620d74d80f1d526e64c4e8af34f6fbaa1fa4189751b58d824a32a7838154c100fdc391c2a0e4ff2d80a27aa121da41a5703277fad0b0c80271ed3cca71d9eaba8f88edff00585bc2b92aec961d29e8b56f8e3453713a64a41daa0e5e7d0e33ed3cc63c57f1bc0c3f62257a5ea891b2078691dff2fba7412c819b66ba16bd9a2f2e8dd8d3484a7a", 0x9e}, {&(0x7f0000001500)="1a7d22da02ee7017b5a5486ca67c24a1b1e9d25074e3f9f6ecc9fdeddcda2bcd816e32ade2dd7501a36cb2dd409d8f58281010bb5e166a32bead04c3156b3ff761d29540a29799df4e38289fbe1d1ae9e7eb0226c5008ad852adb8d7736297a3e1f6495d8cf3723e34726c8ee1b6ffe8337656f3e9a042d75fbf5c677e45f8bfb73316717e799d46138b29791d81cb6e94ea54d0478c7cfa246f92a2d290dbcecb257f24d1110234728d50a66e35f37fd3fb9b92431dba90facf8cbc7cf6e457", 0xc0}], 0x9}, 0x1) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 5m45.69947339s ago: executing program 2 (id=1981): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0xa, @in=@local, 0x403502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0)={0x80, 0xb9, 0x5, 0x2, 0x7, 0xb, 0x8, 0x4, 0x9, 0x8, 0x1, 0x6, 0x6, 0x2}, 0xe) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r6, &(0x7f0000007a40)={0x0, 0x0, &(0x7f0000007a00)={&(0x7f0000003100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40000006) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x7, 0xd, 0x7, 0x5, 0xc, 0x5, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000340)={0x0, 0x2, 0x100000004, 0x5}) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) 5m30.647668324s ago: executing program 32 (id=1981): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d4, 0x32}, 0xa, @in=@local, 0x403502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0)={0x80, 0xb9, 0x5, 0x2, 0x7, 0xb, 0x8, 0x4, 0x9, 0x8, 0x1, 0x6, 0x6, 0x2}, 0xe) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r6, &(0x7f0000007a40)={0x0, 0x0, &(0x7f0000007a00)={&(0x7f0000003100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40000006) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x7, 0xd, 0x7, 0x5, 0xc, 0x5, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000340)={0x0, 0x2, 0x100000004, 0x5}) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000060900010073797a310000000014000480100001800c000100636f756e746572000900020073797a320000000005000740f200000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) 5.915299893s ago: executing program 5 (id=4487): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002400)=@bpf_ext={0x1c, 0x13, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018260000", @ANYRESDEC=r0, @ANYBLOB="0b0000526ee1876b74ad7980"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30885, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xd07, 0x1070bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x207c5, 0x6c101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x20, 0xfe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x40080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)=r5}, 0x20) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4040800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r10, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="6f8d8a27f4163f6a18b4a6b85fb5730b00000000000000002f000000"], 0x14}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r13, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "f796b203399b6aecbb1bf69319faf606"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 5.282906212s ago: executing program 3 (id=4497): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000080)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000800000002"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) (async) close(0x3) (async) close(0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = epoll_create1(0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)={0xc}) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8812100}, 0xc, &(0x7f0000000140)={0x0}}, 0xc1) ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f00000000c0)=0x8) pipe(&(0x7f0000000000)) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (async) bind$rds(r2, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x0) 4.911091328s ago: executing program 5 (id=4498): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffd93, 0xb, 0x4}, {0x6}, {0x6a, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040080) 4.407468147s ago: executing program 3 (id=4500): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x10c}}, 0x11) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x40080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2cc, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xd0, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x846}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf3b}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xdc6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff6c}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff8001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa1f3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3743}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfd}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4296}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa}, @NL80211_ATTR_REG_RULES={0x180, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x49c}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x54}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4fa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x800}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff67}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc0000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffff113}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x399a627c}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff}]}]}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb59c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd7b7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}]}]}, 0x2cc}}, 0x8000) sendmsg$nl_generic(r2, 0x0, 0x4) 2.800264435s ago: executing program 5 (id=4510): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4) socket$nl_route(0x10, 0x3, 0x0) 2.624390587s ago: executing program 4 (id=4512): mmap(&(0x7f000001b000/0x2000)=nil, 0x2000, 0x2000000, 0x42073, 0xffffffffffffffff, 0xaba02000) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000280)={0x20000015}) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x80000, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0xf}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r9, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000140)='e', 0x1}], 0x1}}], 0x1, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 2.608256401s ago: executing program 0 (id=4513): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "000000000000a5c3e0bf000000"}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001240)={0x48, 0x2e, 0x1, 0x70bd28, 0x0, "", [@nested={0x4, 0x119}, @nested={0x34, 0x11, 0x0, 0x1, [@nested={0x2f, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @nested={0x4, 0x95}]}]}]}, 0x48}, {&(0x7f0000000140)={0x158, 0x2d, 0x100, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r4}, @nested={0x5c, 0x63, 0x0, 0x1, [@typed={0xc, 0xee, 0x0, 0x0, @u64=0x76f}, @generic="fc0b1ca74f5d3e666d30", @typed={0x8, 0x3a, 0x0, 0x0, @uid=r5}, @generic="29b6a1b4af1d01a1c6ecec46e29503dd9834", @nested={0x4, 0x14a}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x135}, @nested={0x4, 0xcc}, @typed={0x8, 0x153, 0x0, 0x0, @uid=r7}]}, @generic="de523e4b1d4ed62de95a83f4392036534215b248925261c93012c037aa0224dab9abd78f3f93f672acb4a595e59296e951acd50b898787be30b132e3e98fc8a53839a5a584fcb9e753b9b29453403355cdba370699895ba211793aae72c607d22c5e9646f5bda7cab5a5925ee4df69c8852d91fce72df97593024e64c6d119a4af3f57a96a87a04a828702586f3c7fd9364eea6545cff640852a7b12619fdeaf7c3965b4f19d0cc29835147bceacaa51fcef68990bc61f223dfafcbbaf1303a25497ea5a3ad51dba7979a4bd803df2a127b4b78e77a1cf9cb2c5175168ad38ed0081ff"]}, 0x158}, {&(0x7f0000000340)={0x48, 0x1c, 0x400, 0x1, 0x25dfdbfe, "", [@typed={0x14, 0x12c, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@local}, @nested={0x14, 0x37, 0x0, 0x1, [@typed={0x8, 0xca, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x141, 0x0, 0x0, @pid=r8}]}, @typed={0x8, 0x11e, 0x0, 0x0, @uid=r5}]}, 0x48}, {&(0x7f00000003c0)={0x248, 0x2d, 0x200, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0xa3, 0x0, 0x0, @fd=r4}, @nested={0x28, 0xf, 0x0, 0x1, [@nested={0x4, 0xea}, @nested={0x4, 0x7f}, @typed={0xc, 0x151, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xc3}, @typed={0xc, 0x100, 0x0, 0x0, @u64=0x7}]}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x3}, @nested={0x104, 0x120, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="9f72bd75a4e11262db6c9aebbb65efd78ffa828bd8fdbf02c09baa81cc1db8c795667023625a4d86ee74adde4fbfc4ada16d17c0045733b6", @generic="060b89cb957a9b95aad25c3e7f376317c47131d5f8c11a2d26830f88974e27ad1bd79769a882f7f3af95a77249060225cb40d045b56d406537c0be3c5f363edd7aabf02c75f653f7147dffd30d668faa85a0a5f2af2fbc61882d349e04e0bba8efd5c64e14439de6bda6e2cbc224b96d1a4f42533352c7ad6a7877662faaaec42ce06a79dc62a89155cd69d433662b88405f5943af0e5a6ed9aed06fba77cf76f57d729c5918600024a8ec396690e8dce939edf2e9bef67e79eaf207", @nested={0x4, 0x33}, @nested={0x4, 0x11b}]}, @generic="7824b8e4b5b67257f5259083a951099f400c16ef6129755339f96eec557a5a7dc18c10923b867074f83efe115fc419cd38c7efddcc69df60bdb356e25bbdec61de880323527d8f854c43d97ce59637df4bc2b1a7010afbdfcd7975fb8509cb14f0a1e69fa7f48f9fd1b8d7cc9afd68", @generic="899d2fd311badb0989e3fd3866ee7fe1b6a892184b879af520d1bf595fc04df4e1a47373b074f2824f5eeb84fef96df99ca6b835a767ebfe3b8082d852dd6982fdf4f935951a2262e3b4182ee13ffd93f17eb807e042a5ab50574edeb39e13af0d77f0bec1203f8ba961808d41b3a2bb1642379ca39e95e2ca2e405c7bfd30d84770580d69346395"]}, 0x248}, {&(0x7f0000000640)={0x20, 0x23, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x4, 0x0, 0x0, @fd=r4}, @typed={0x8, 0xd3, 0x0, 0x0, @u32=0x6}]}, 0x20}], 0x5, 0x0, 0x0, 0x84}, 0x300) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_getroute={0x44, 0x1a, 0x800, 0x70bd27, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x6, 0xfc, 0x3, 0x0, 0xb}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x4, 0x7, r3}}, @RTA_UID={0x8, 0x19, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x24, 0x4, r3}}, @RTA_OIF={0x8, 0x4, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.543275454s ago: executing program 5 (id=4514): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00g', @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="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", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x10, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x30}, @local, 0x20, 0x8000, 0x6, 0x2}}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x1, 0x6, 0xa, @private2, @remote, 0x700, 0x700, 0x5, 0x5}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xfc, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x4}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@remote, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x1000000004}, {0x0, 0x5}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2c, 0x70bd2c, 0x70bd2a, 0x70bd2d, 0x7f}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r16, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r15, &(0x7f0000002200)=""/87, 0x57, 0xfffd) 2.093405887s ago: executing program 0 (id=4516): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) recvfrom(r0, 0x0, 0x0, 0x10040, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000000c0)={0xffffffff, 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r3, 0x0, 0xc041) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f000000bc80), r3) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f000000c8c0)={0x0, 0x0, &(0x7f000000c880)={&(0x7f000000c800)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}, [@map_fd={0x18, 0xa, 0x1, 0x0, r5}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1006, &(0x7f0000002500)=""/4102, 0x0, 0xc}, 0x94) 1.959569162s ago: executing program 1 (id=4517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) unshare(0x26020480) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x44850, 0x6851}, [@IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_AF_SPEC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x200040d0) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) r6 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r6}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000440)=""/238, 0xee, 0x0, &(0x7f0000000540)=""/133, 0x85}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x80000, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f00000006c0)=""/251, &(0x7f0000000800)=0xfb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000300), &(0x7f0000000280)=r9}, 0x20) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x8001, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x16, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x1a4a, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x9e3ed3c282b78cb6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0xb, 0x8, 0xeabd}, 0x10, r7, r3, 0x8, &(0x7f0000000480)=[r1, r8, r11, r1, r2], &(0x7f00000004c0)=[{0x4, 0x4, 0x2, 0x2}, {0x3, 0x1, 0x10, 0xa}, {0x3, 0x5, 0x2, 0x6}, {0x4, 0x2, 0xb, 0x4}, {0x4, 0x1, 0x1, 0xc}, {0x3, 0x4, 0xd, 0x2}, {0x4, 0x4, 0x10, 0x8}, {0x4, 0x4, 0xf, 0x9}], 0x10, 0x4}, 0x94) 1.859618299s ago: executing program 4 (id=4518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x2}]}}]}, 0x44}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$tun(r0, &(0x7f00000006c0)={@val={0x800e}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x2a, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x16, 0x0, @opaque="38f1fb3b3bcd2265f1e800573a4c"}}}}}}, 0x3c) 1.763718938s ago: executing program 5 (id=4519): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001680), 0x103000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x5452, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}]}}, @TCA_STAB={0x60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x5, 0xf507, 0x2, 0x1, 0x0, 0xfffff6ee, 0xa}}, {0x18, 0x2, [0x7, 0x7, 0xff, 0x7, 0x698e, 0x7, 0x2, 0x5, 0x5, 0x1]}}, {{0x1c, 0x1, {0x3, 0x84, 0x3d, 0xd826, 0x0, 0x6, 0x9, 0x4}}, {0xc, 0x2, [0x754e, 0x100, 0x36, 0x400]}}]}]}, 0xa4}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x2, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0xc, 0xb}, {0xffff, 0xffff}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3a}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) 1.695772684s ago: executing program 1 (id=4520): r0 = socket$inet6(0xa, 0x1, 0xffefeffd) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0)=0x80000000, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x6000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x18}}], 0x1, 0x4) 1.57176292s ago: executing program 0 (id=4521): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="12d03715a316", 'batadv0\x00'}}, 0x1e) (async) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async, rerun: 32) r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e000200114000e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025", 0x9b}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000140)={'batadv_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @loopback}, 'wg0\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f000000a380)=[{{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000004900)="ae26", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000100)="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", 0x5eb}], 0x1}}], 0x1, 0x4000) (async, rerun: 32) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x2}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x4e, 0x2}]}, {0x0, [0x30, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000780)=""/242, 0x46, 0xf2, 0x0, 0x5}, 0x28) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=@base={0xa, 0x16, 0xb7, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r7) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r9, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffff01}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) 1.424941619s ago: executing program 1 (id=4522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)=ANY=[@ANYRES8=r0], 0x20}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_emit_ethernet(0xae, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "020000000400000126000400"}, {0x18, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffffffffffd4a, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfbfffc}]}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff202000000002000aac14140ce011006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c0100001a000700008b161d69cd657d20b863ea9a000000000000fafe8000192bd6a46f2c46670f2e4c0000000000000000000000001be0000002000000000000000000000000ffff000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000300000000000003000000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00ac1e000100000000000000000000000008001d0002000000"], 0x10c}}, 0x0) 1.355660739s ago: executing program 4 (id=4523): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r3, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xfffffe00, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x6}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r3, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xfffffe00, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x6}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) 1.351472658s ago: executing program 5 (id=4524): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0xfd6, 0x20, 0xfffffffffffffff9}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x10) 1.316000482s ago: executing program 3 (id=4525): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff5d}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket(0x840000000002, 0x1, 0x100) sendmsg$FOU_CMD_DEL(r2, &(0x7f000000a180)={0x0, 0x0, &(0x7f000000a140)={0x0}, 0x1, 0x0, 0x0, 0x20044090}, 0x24000804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=r0, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x2404c000) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRES16=r8, @ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r4, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x20000010) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r10, 0x4004743c, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000400)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0xd, 0xb}, {0x7, 0xf}}}, 0x24}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r13, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r12}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r14, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.158643333s ago: executing program 4 (id=4526): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet6(r1, &(0x7f000000a440), 0x52, 0x44051) (async) r2 = socket(0x2b, 0x1, 0x1) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0xd8, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0xffe0, 0xb}, {0x0, 0x7}, {0xffe0, 0xc}}, [@TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x83, 0x4, 0x7, 0x1, 0x0, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x7, 0xf2, 0xfff8, 0x3, 0x2, 0x8, 0x8c21, 0x1}}, {0x6, 0x2, [0x3ff]}}, {{0x1c, 0x1, {0xed, 0xd, 0x4, 0x2, 0x0, 0x6, 0x5, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0xfe, 0x70, 0x1, 0x4, 0x2, 0x186, 0x70f, 0x3}}, {0xa, 0x2, [0x7, 0xa, 0x5]}}, {{0x1c, 0x1, {0xfa, 0x7, 0x0, 0x4, 0x1, 0x401, 0x7f}}, {0x4}}]}]}, 0xd8}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000880)=0x7fff, 0x4) (async) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x99af8e632bfb392d, 0x11, 0xffffffffffffffff, 0x100000000) (async) pipe(0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) sendmsg$nl_generic(r5, 0x0, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r4, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57", 0x46, 0x800, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="080028bd7000fcdbdf2501000000000000000c410000001473797a30000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x24000005) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='b\t'], 0x9) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) 997.380336ms ago: executing program 0 (id=4527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, r1, 0x30d, 0x0, 0xfffffffe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x0, 0x2, 0x9, 0x1, 0x10a00000000000}, {0x6, 0x3ff, 0xfffffffffffffffd, 0x9, 0xe3bf, 0x4}], ['\x00', '\x00', '\x00']}) 980.0348ms ago: executing program 1 (id=4528): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x17, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000080000000000000000300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000030000001800000090490000000000000200000018130000", @ANYRES32, @ANYBLOB="0051ff482a58930e89b4b57c5adb000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xab, &(0x7f0000000240)=""/171, 0x41100, 0x2f, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xb, 0x7, 0x632}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x1, 0x8, 0x7}], 0x10, 0x10000}, 0x94) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000004c0)={0xc, 0x6, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000010003904000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="0198000002000000480012800c0001006d6163766c616e0038000280280005800a000400aaaaaaaaa9957b3c0a000400aaaaaaaaaa0ffaff0a000400aaaaaaaaaa1800000a0006"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x40080) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x8}, 0xffff8000, 0x1, 0x0, 0x2, 0x8001, 0x4}, &(0x7f0000000580)=0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f00000006c0)={r5, &(0x7f00000005c0)='\x00', 0x860000, &(0x7f0000000600)={@align=0x2, {0xe, 0x2, 0x6, 0x9}}, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x8}) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000700)={0x89, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e21, 0x4, 'sh\x00', 0x10, 0x70d9d105, 0x4b}, 0x2c) 976.408024ms ago: executing program 4 (id=4529): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x34, r0, 0x801, 0x401, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x34}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 907.28697ms ago: executing program 3 (id=4530): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000040) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x7a6d, 0x1, 0x1, 0x7}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="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", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x5, 0x1) close(r3) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r8], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@getqdisc={0x38, 0x26, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0xffff, 0x4}, {0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005091}, 0x20000034) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0x4d, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x4e22, 0x4e22, 0x4d, 0x0, @opaque="64ebe114f6ff9df4140f23e2ade56a28ace6c0b8bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a9402e67ce9cafd6b9ed54721cd27bd55e1025c02"}}}}}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x39, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @mcast2={0xff, 0x3}, 0x2000, 0xba08}}) 804.4566ms ago: executing program 0 (id=4531): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) close(0xffffffffffffffff) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000036000000950000000000000005c47c6804afb1f665dd00012ef6ff89ce6646624e1fc097c34bac7278e6c79286468b826de0b0842a2f30ebc87bca3d722fe8c3e92141956edc878ed7bed9ab4af5cfcbfe6e20b9b222dcb8b19e62aaad23c022983e8d0704cde8336e7691b5f389a21f39a4e00f23c201184cd3526f0916c7a10147be718b4bbc77b04a8207ffc796b77410b7725462786ee9f62f43384a14e41b18b0e4cd5d0a9f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xb80b) r3 = socket$xdp(0x2c, 0x3, 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540f2190bea2a8399823f"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="c0ca9d80", 0x4}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000580)={0x0, 'dummy0\x00', {0x3}, 0x2}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="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", 0x4d9}], 0x1}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 803.901074ms ago: executing program 1 (id=4532): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001e008d2a28bd7000ffdbdf250a0000", @ANYRES32=0x0, @ANYBLOB="000000e9bd"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) unshare(0x22020600) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)="b4f7672071979d161b44fbc55fe6513b163c9d9d34fb13bb1581f5ebbb90857d987d6de32304f03d449dc2d5024e38eb5ea1ad87aeb03d1c083b5c2dfa43549c8d951279", 0x44}], 0x1}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) unshare(0x20000400) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xd0002003}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r1], 0x108}, 0x1, 0x0, 0x0, 0x20008000}, 0x20048081) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140d, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x38}}, 0x2400c841) 786.313928ms ago: executing program 4 (id=4533): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x2a}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x2000003, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) shutdown(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00ff00000000850000002b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8500bc7d202e0990"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@ipv6_delroute={0x1c, 0x19, 0x800, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x5, 0xff, 0x2, 0xc8, 0x7, 0x1400}}, 0x1c}}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000000)={0x2, 'dvmrp0\x00', {}, 0x8}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r6) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030273797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r3, 0x4000001b) 626.334837ms ago: executing program 1 (id=4534): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000380)={0x1, 0x28c9, 0x0, 0x8}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$rds(0x15, 0x5, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="698925bd7e2b7067df250800000010000400"], 0x24}}, 0x4004000) (async) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xffffff23, &(0x7f0000000200)}, 0x10) (async) close(0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000000000000720005b6647f816b7113400000000004cf0ee0fb085b5a115c454acb516be230def9b2234d064a894000000000000000056e062404d1c948943f992ce64449cbff41d1214ed4f889be736795dac69476f1a6f108580349db72e84d1ecbbbe59cd61c5c836c19f56ebece516b2c8ed7c7108500c4c3f03d73122ad079cc517a557e171c5a7b2e7d275a29a7050b8417ce8002ce5abc38e9dbfb7aa6b04ba9a871ff0573e4b99dbc5d6275cb7adb533d8156564a09ee66ca60ec6e1a09b3d2adb35817bc5a167ed96d50bac81813f6a"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc1888000) (async) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x12123, 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 515.084856ms ago: executing program 0 (id=4535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd16470600f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40804) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800a000100aaaaaaaaaa00000008000400"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0xd0, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x61, 0x1, 0xb, 0x2, 0x1, 0x8, 0x5, 0x3}}, {0xa, 0x2, [0x3, 0x1, 0x4]}}, {{0x1c, 0x1, {0xd, 0x2, 0x1b, 0x1865, 0x0, 0xa4e, 0xf, 0x6}}, {0x10, 0x2, [0x8, 0x4598, 0x135, 0x6, 0x2bd4, 0x9]}}, {{0x1c, 0x1, {0x75, 0x3, 0x7, 0x1000, 0x0, 0x1ff, 0x9, 0x3}}, {0xa, 0x2, [0x9, 0x2, 0x4ca6]}}, {{0x1c, 0x1, {0xf8, 0x80, 0x8001, 0xae8, 0x2, 0x7f, 0x437, 0x5}}, {0xe, 0x2, [0x2, 0x5, 0x1, 0xb, 0x9]}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x12, "43720705000000004786b89e6fb2be5c3f00"}}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x400}}}]}, 0x3c}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) 514.401217ms ago: executing program 3 (id=4536): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x108}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (fail_nth: 4) 0s ago: executing program 3 (id=4537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x6, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xa, 0xc}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0xc0956febbce12c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) recvmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/232, 0xe8}], 0x1, &(0x7f0000000780)}, 0x40000140) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff010000000000000000000000000001080002"], 0x38}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x46, &(0x7f0000002480)=0x1080, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r5, 0x4, 0x20}, &(0x7f00000001c0)=0xc) kernel console output (not intermixed with test programs): : Can't bind to reserved service type 2 [ 614.903033][T11603] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.920427][T11603] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.940665][T11599] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.963776][T11599] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.234012][T11600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.261321][T11600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.351207][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3130'. [ 615.374878][T11602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.400780][T11602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.775652][T19103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3132'. [ 616.060434][T19126] sctp: [Deprecated]: syz.4.3136 (pid 19126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.060434][T19126] Use struct sctp_sack_info instead [ 616.226553][T19131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3138'. [ 616.559862][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3144'. [ 616.726620][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3145'. [ 616.786997][T14187] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 616.804779][T14187] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 616.815008][T14187] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 616.826307][T14187] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 616.837165][T14187] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 617.249566][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3147'. [ 617.860489][T19154] lo speed is unknown, defaulting to 1000 [ 618.043135][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3150'. [ 618.081812][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3150'. [ 618.651664][T19210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3153'. [ 618.899429][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3153'. [ 618.909834][ T5645] Bluetooth: hci0: command tx timeout [ 619.003875][T19207] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.011660][T19207] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.164846][T19207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.209368][T19207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.438329][T19212] vlan2: entered promiscuous mode [ 619.456108][T19212] bridge0: entered promiscuous mode [ 619.582862][T11603] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.612322][T11603] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.736518][T11603] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.754183][T19236] netlink: 'syz.3.3156': attribute type 178 has an invalid length. [ 619.817705][T11603] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.844767][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3157'. [ 619.935412][T19247] xfrm0: entered allmulticast mode [ 619.963076][T19247] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 620.115923][T19154] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.133873][T19154] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.151717][T19154] bridge_slave_0: entered allmulticast mode [ 620.177958][T19154] bridge_slave_0: entered promiscuous mode [ 620.210579][T19154] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.227976][T19154] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.247926][T19154] bridge_slave_1: entered allmulticast mode [ 620.259352][T19154] bridge_slave_1: entered promiscuous mode [ 620.382541][T19154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.413301][T19154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.529655][T19154] team0: Port device team_slave_0 added [ 620.560864][T19154] team0: Port device team_slave_1 added [ 620.632164][T19154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.641472][T19154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.668647][T19154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.692783][T19154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.707442][T19154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.734697][T19154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.823442][T19268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 620.973874][T19154] hsr_slave_0: entered promiscuous mode [ 620.990399][ T5645] Bluetooth: hci0: command tx timeout [ 620.999614][T19154] hsr_slave_1: entered promiscuous mode [ 621.034470][T19154] debugfs: 'hsr0' already exists in 'hsr' [ 621.069033][T19154] Cannot create hsr debugfs directory [ 621.210996][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 621.353419][T19298] syzkaller0: entered promiscuous mode [ 621.367496][T19298] syzkaller0: entered allmulticast mode [ 621.382848][T19300] syzkaller0: entered promiscuous mode [ 621.391329][T19300] syzkaller0: entered allmulticast mode [ 622.139458][T19308] af_packet: tpacket_rcv: packet too big, clamped from 325 to 4294967272. macoff=96 [ 622.466699][T19345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3177'. [ 622.507581][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 622.528885][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'. [ 622.733570][T19356] netlink: 'syz.3.3181': attribute type 1 has an invalid length. [ 622.751543][T19357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3181'. [ 622.791609][T19356] 8021q: adding VLAN 0 to HW filter on device bond3 [ 623.078330][ T5645] Bluetooth: hci0: command tx timeout [ 623.102638][T19154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 623.124968][T19154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.139948][T19154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 623.156235][T19154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.189318][T19154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 623.212594][T19154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.234555][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 623.235624][T19154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 623.256211][T19154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 623.307109][T19385] netlink: 'syz.5.3189': attribute type 4 has an invalid length. [ 623.369699][T19384] netlink: 'syz.5.3189': attribute type 4 has an invalid length. [ 623.895862][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3190'. [ 623.970439][T19403] Bluetooth: MGMT ver 1.23 [ 624.014503][T19384] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 624.123449][T11603] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 624.185043][T11603] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 624.213803][T11603] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 624.234175][T11603] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 624.334477][T19154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.360548][T19411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3194'. [ 624.384587][T19154] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.388032][T19411] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3194'. [ 624.431221][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.445227][T11603] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.452530][T11603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.501676][T11603] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.508960][T11603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.148612][ T5645] Bluetooth: hci0: command tx timeout [ 625.335462][T19154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.416977][T19154] veth0_vlan: entered promiscuous mode [ 625.419759][T19454] block nbd0: Unsupported socket: should be TCP or UNIX. [ 625.442983][T19154] veth1_vlan: entered promiscuous mode [ 625.511993][T19154] veth0_macvtap: entered promiscuous mode [ 625.530464][T19154] veth1_macvtap: entered promiscuous mode [ 625.579761][T19154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.603779][T19154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.656490][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.674054][T11594] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.685682][T11594] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.695198][T11594] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.862123][ T5873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.876733][ T5873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.945428][ T5873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.962400][ T5873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.122604][T19465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.177030][T19467] netlink: 'syz.3.3207': attribute type 21 has an invalid length. [ 626.231350][T19469] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3208'. [ 626.426604][T19467] syzkaller0: entered promiscuous mode [ 626.437305][T19467] syzkaller0: entered allmulticast mode [ 626.630370][T19490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.756893][T19515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.807312][T19478] lo speed is unknown, defaulting to 1000 [ 629.060978][T19523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3218'. [ 629.099802][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3218'. [ 629.522366][T19549] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3225'. [ 630.378878][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3233'. [ 630.636164][T19593] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 630.774372][T19607] tipc: Enabling not permitted [ 630.780675][T19607] tipc: Enabling of bearer rejected, failed to enable media [ 630.822982][T19609] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3241'. [ 630.841313][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'. [ 630.869200][T19611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.972727][T11594] nci: nci_ntf_packet: unknown ntf opcode 0x125 [ 630.983144][T19611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 631.144704][T19624] lo speed is unknown, defaulting to 1000 [ 631.256213][T19637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3247'. [ 631.324386][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3250'. [ 631.367478][T19642] netlink: 'syz.0.3250': attribute type 20 has an invalid length. [ 631.407688][T19642] netlink: 'syz.0.3250': attribute type 21 has an invalid length. [ 631.473469][T19645] netlink: 'syz.1.3252': attribute type 7 has an invalid length. [ 631.481637][T19645] netlink: 'syz.1.3252': attribute type 8 has an invalid length. [ 631.492928][T19645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3252'. [ 631.680990][T19657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3256'. [ 632.004951][T19669] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 632.013905][T19669] gtp1: left promiscuous mode [ 632.019835][T19669] gtp1: left allmulticast mode [ 632.025538][T19669] gretap1: left allmulticast mode [ 632.032417][T19669] geneve2: left allmulticast mode [ 632.041238][T19669] bond3: left promiscuous mode [ 632.047298][T19669] bond4: left promiscuous mode [ 632.353261][T19681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.819997][T19686] syzkaller1: entered promiscuous mode [ 632.825610][T19686] syzkaller1: entered allmulticast mode [ 633.220498][T19712] nbd: socks must be embedded in a SOCK_ITEM attr [ 633.243816][T19712] block nbd0: shutting down sockets [ 633.692154][T19764] netlink: 'syz.3.3285': attribute type 1 has an invalid length. [ 633.723567][T19762] netlink: 'syz.0.3284': attribute type 4 has an invalid length. [ 633.788112][T19762] netlink: 'syz.0.3284': attribute type 1 has an invalid length. [ 633.796864][T19768] netlink: 'syz.5.3286': attribute type 21 has an invalid length. [ 633.810525][T19765] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 633.833961][T19768] netlink: 'syz.5.3286': attribute type 8 has an invalid length. [ 633.866803][T19768] veth1_to_team: entered promiscuous mode [ 633.875829][ T5645] Bluetooth: hci3: command 0x0405 tx timeout [ 633.898908][T19768] gretap0: entered promiscuous mode [ 633.910267][T19768] veth1_to_team: left promiscuous mode [ 633.922663][T19768] gretap0: left promiscuous mode [ 634.135426][T19782] syzkaller0: entered promiscuous mode [ 634.163453][T19782] syzkaller0: entered allmulticast mode [ 634.239894][T19792] IPVS: ip_vs_add_dest(): server weight less than zero [ 634.263535][T19792] IPVS: sh: FWM 3 0x00000003 - no destination available [ 634.292665][T19792] __nla_validate_parse: 15 callbacks suppressed [ 634.292686][T19792] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3292'. [ 634.313920][T12285] IPVS: starting estimator thread 0... [ 634.320326][T19794] IPVS: sh: FWM 3 0x00000003 - no destination available [ 634.360639][T19782] IPVS: sh: FWM 3 0x00000003 - no destination available [ 634.384645][T19791] lo speed is unknown, defaulting to 1000 [ 634.437515][T19797] IPVS: using max 30 ests per chain, 72000 per kthread [ 634.535618][T19808] netlink: 'syz.0.3294': attribute type 2 has an invalid length. [ 634.543721][T19801] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 634.575742][T19801] batman_adv: batadv0: Adding interface: ip6gretap1 [ 634.584340][T19808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3294'. [ 634.617498][T19801] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.665776][T19801] batman_adv: batadv0: Interface activated: ip6gretap1 [ 634.829306][T19818] tipc: Enabled bearer , priority 0 [ 634.839617][T19818] €Â: renamed from veth0_macvtap [ 635.058036][T19809] tipc: Disabling bearer [ 635.296695][T19836] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3307'. [ 635.316040][T19836] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3307'. [ 635.487599][T19844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3308'. [ 635.527465][T19844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3308'. [ 635.561376][T19841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3308'. [ 635.594160][T19844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3308'. [ 635.634071][T19844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3308'. [ 635.689367][T19844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3308'. [ 635.713413][T19850] tipc: Started in network mode [ 635.718587][T19850] tipc: Node identity ac14140f, cluster identity 4711 [ 635.725733][T19850] tipc: New replicast peer: 255.255.255.255 [ 635.732885][T19850] tipc: Enabled bearer , priority 10 [ 636.576837][T19898] lo speed is unknown, defaulting to 1000 [ 636.764923][T19904] openvswitch: netlink: Flow key attr not present in new flow. [ 636.847472][ T5360] tipc: Node number set to 2886997007 [ 637.024770][T19897] lo speed is unknown, defaulting to 1000 [ 638.076042][T19948] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 638.680588][T19969] tipc: Enabling of bearer rejected, failed to enable media [ 638.699135][T19974] syzkaller0: entered promiscuous mode [ 638.722603][T19974] syzkaller0: entered allmulticast mode [ 638.753200][T19972] tipc: Started in network mode [ 638.769540][T19972] tipc: Node identity 126a45f98ca7, cluster identity 4711 [ 638.790597][T19972] tipc: Enabled bearer , priority 0 [ 638.883371][T19972] tipc: Resetting bearer [ 638.990859][T19972] tipc: Disabling bearer [ 639.315364][T19994] __nla_validate_parse: 66 callbacks suppressed [ 639.315388][T19994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3349'. [ 639.440109][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3348'. [ 639.847219][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 639.918579][T20014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.925945][T20014] IPv6: NLM_F_CREATE should be set when creating new route [ 639.948867][T20020] xt_hashlimit: overflow, rate too high: 0 [ 639.995519][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 640.284753][T20034] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3361'. [ 640.295184][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3362'. [ 640.304191][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3362'. [ 640.461022][T20042] veth1_to_bond: entered allmulticast mode [ 640.467461][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 640.501979][T20042] veth1_to_bond (unregistering): left allmulticast mode [ 640.520452][T20042] bond0: (slave bond_slave_1): Releasing backup interface [ 640.807191][T20056] syzkaller0: entered promiscuous mode [ 640.813023][T20056] syzkaller0: entered allmulticast mode [ 641.238064][T20060] syzkaller0: entered promiscuous mode [ 641.243577][T20060] syzkaller0: entered allmulticast mode [ 642.823445][T20015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 643.021002][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3374'. [ 643.819205][T20100] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20002 [ 645.232792][T20086] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 645.441583][T20105] lo speed is unknown, defaulting to 1000 [ 645.610990][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3386'. [ 645.771600][T20130] xt_hashlimit: size too large, truncated to 1048576 [ 645.899052][T20139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'. [ 645.927118][T20139] netlink: 'syz.0.3390': attribute type 5 has an invalid length. [ 645.941040][T20139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3390'. [ 645.998416][T20139] geneve2: entered promiscuous mode [ 646.037400][T20139] geneve2: entered allmulticast mode [ 646.084726][T11594] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 646.097856][T11600] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 646.144443][T11600] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 646.153141][T11600] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 646.311207][T20145] openvswitch: netlink: Message has 8 unknown bytes. [ 646.335528][T20147] netlink: 'syz.5.3394': attribute type 9 has an invalid length. [ 646.385641][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3395'. [ 646.469268][T20158] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3397'. [ 646.684244][T20158] netlink: 'syz.4.3397': attribute type 49 has an invalid length. [ 646.782248][T20175] netlink: 'syz.0.3399': attribute type 8 has an invalid length. [ 646.828332][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 646.892674][T20174] tipc: Enabled bearer , priority 0 [ 646.906906][T20175] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3399'. [ 646.929285][T20174] syzkaller0: entered promiscuous mode [ 646.956220][T20174] syzkaller0: entered allmulticast mode [ 646.993595][T20162] tipc: Enabled bearer , priority 0 [ 647.014406][T20162] syzkaller0: entered promiscuous mode [ 647.035551][T20162] syzkaller0: entered allmulticast mode [ 647.091126][T20162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3396'. [ 647.134964][T20174] tipc: Resetting bearer [ 647.164452][T20173] tipc: Resetting bearer [ 647.237833][T20173] tipc: Disabling bearer [ 647.351412][T20154] tipc: Resetting bearer [ 647.388957][T20154] tipc: Disabling bearer [ 647.542544][T20196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3407'. [ 647.643122][T20210] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3409'. [ 647.810265][T20210] sctp: [Deprecated]: syz.4.3409 (pid 20210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 647.810265][T20210] Use struct sctp_sack_info instead [ 647.879879][T14572] hsr0: entered promiscuous mode [ 648.022584][T20228] sctp: [Deprecated]: syz.4.3414 (pid 20228) Use of int in max_burst socket option. [ 648.022584][T20228] Use struct sctp_assoc_value instead [ 648.124881][T20231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.155685][T20233] netlink: 'syz.3.3417': attribute type 1 has an invalid length. [ 648.252579][T20233] bond5: entered promiscuous mode [ 648.258308][T20233] 8021q: adding VLAN 0 to HW filter on device bond5 [ 648.288169][T20233] 8021q: adding VLAN 0 to HW filter on device bond5 [ 648.295286][T20233] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 648.346934][T20233] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 648.361072][T20233] bond5: (slave ip6gre1): making interface the new active one [ 648.368969][T20233] ip6gre1: entered promiscuous mode [ 648.376166][T20233] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 648.417710][T20238] netlink: 'syz.0.3418': attribute type 1 has an invalid length. [ 648.478864][T20238] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 648.487153][T20238] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 648.564935][T20245] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 648.572658][T20245] mac80211_hwsim hwsim62 wlan0: entered allmulticast mode [ 648.582384][T20245] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 648.865334][T20263] syzkaller0: entered promiscuous mode [ 648.870868][T20263] syzkaller0: entered allmulticast mode [ 648.903310][T20263] 0: reclassify loop, rule prio 0, protocol 800 [ 649.189208][T20268] netlink: 'syz.1.3428': attribute type 1 has an invalid length. [ 649.703232][T20291] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.309109][T20326] netlink: 'syz.5.3446': attribute type 1 has an invalid length. [ 650.316938][T20326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.663356][T20344] __nla_validate_parse: 17 callbacks suppressed [ 650.663395][T20344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3449'. [ 650.877944][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'. [ 651.257789][T20374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3458'. [ 651.267866][T20368] syzkaller0: entered promiscuous mode [ 651.275408][T20368] syzkaller0: entered allmulticast mode [ 651.485346][T20382] smc: net device wlan0 erased user defined pnetid SYZ0 [ 651.595934][T20387] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3461'. [ 651.684099][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3461'. [ 651.791987][T20397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3464'. [ 651.830140][T20397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3464'. [ 651.853637][T20397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3464'. [ 651.877045][T20397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3464'. [ 651.896576][T20397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3464'. [ 652.105258][T20397] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.113128][T20397] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.133305][T14187] Bluetooth: hci1: command 0x0405 tx timeout [ 652.448454][T20397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.485376][T20397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.620435][T20397] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 652.647718][ T5873] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.656702][ T5873] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.665615][ T5873] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.674527][ T5873] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.862273][T20426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.877954][T20426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.215815][T20445] vlan2: entered promiscuous mode [ 653.220924][T20445] bridge0: entered promiscuous mode [ 653.366989][T20455] netlink: zone id is out of range [ 653.506799][T20457] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.514589][T20457] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.565792][T20470] openvswitch: netlink: Message has 2 unknown bytes. [ 653.660268][T20457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.672530][T20457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.782508][T11594] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.791694][T11594] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 653.803130][T11594] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.835417][T11594] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 653.866356][T11594] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.901064][T11594] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 653.947213][T11594] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.967078][T11594] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 653.986730][T11594] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 654.006549][T11594] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 654.025774][T11594] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 654.060838][T11594] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 654.202589][T20498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.532733][T20523] batadv_slave_1: entered promiscuous mode [ 654.627574][T20524] batadv_slave_1 (unregistering): left promiscuous mode [ 654.634657][T20524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.691783][T20527] netlink: 'syz.3.3500': attribute type 9 has an invalid length. [ 654.955985][T20532] netlink: 'syz.4.3502': attribute type 8 has an invalid length. [ 655.215350][T20548] netlink: 'syz.5.3505': attribute type 12 has an invalid length. [ 655.277888][T20550] netlink: 'syz.4.3506': attribute type 3 has an invalid length. [ 655.285900][T20550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.721008][T20564] tipc: Enabling of bearer rejected, failed to enable media [ 655.766322][T20564] netlink: 'syz.3.3512': attribute type 10 has an invalid length. [ 655.779448][T20566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.857185][T20564] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 655.979274][T20586] __nla_validate_parse: 167 callbacks suppressed [ 655.979296][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3515'. [ 656.062416][ T66] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.071421][ T66] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.080316][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3515'. [ 656.092418][ T66] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.101203][ T66] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.124297][T20590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3518'. [ 656.383412][T20604] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3524'. [ 656.417897][T20599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3522'. [ 656.455258][T20607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3525'. [ 656.500987][T20599] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3522'. [ 656.521109][T20599] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3522'. [ 656.551141][T20599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.578398][T20599] bond0 (unregistering): Released all slaves [ 656.600276][T20617] IPVS: set_ctl: invalid protocol: 115 10.1.1.2:20002 [ 656.690022][T20621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3526'. [ 656.870748][T20632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3530'. [ 656.970134][T20632] bond7: entered promiscuous mode [ 656.979976][T20632] bond7: entered allmulticast mode [ 656.992201][T20635] lo speed is unknown, defaulting to 1000 [ 657.202506][T20644] netlink: 'syz.3.3533': attribute type 1 has an invalid length. [ 657.331631][T20650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.577219][T20655] bond2: option lacp_active: invalid value (8) [ 657.584664][T20655] bond2 (unregistering): Released all slaves [ 657.976210][T20670] syzkaller0: entered promiscuous mode [ 657.981769][T20670] syzkaller0: entered allmulticast mode [ 658.287847][T20684] netlink: 'syz.3.3541': attribute type 1 has an invalid length. [ 658.297384][T20684] netlink: 'syz.3.3541': attribute type 3 has an invalid length. [ 658.375481][T20690] netlink: 'syz.1.3543': attribute type 4 has an invalid length. [ 658.394649][T20681] sctp: [Deprecated]: syz.0.3542 (pid 20681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.394649][T20681] Use struct sctp_sack_info instead [ 658.427588][T20683] netlink: 'syz.1.3543': attribute type 4 has an invalid length. [ 659.615762][T20746] lo speed is unknown, defaulting to 1000 [ 660.230502][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 660.241374][T20762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.306528][T20766] sock: sock_timestamping_bind_phc: sock not bind to device [ 660.445164][T20764] IPv6: NLM_F_CREATE should be specified when creating new route [ 660.453729][T20766] macvtap1: entered allmulticast mode [ 660.459179][T20766] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 660.467569][T20766] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 660.491628][T20766] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 660.565705][T20773] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 660.669399][T20777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.935236][T20795] syzkaller0: entered promiscuous mode [ 660.946996][T20795] syzkaller0: entered allmulticast mode [ 661.035788][T20795] __nla_validate_parse: 13 callbacks suppressed [ 661.035808][T20795] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3575'. [ 661.163241][T20806] netlink: 'syz.1.3578': attribute type 21 has an invalid length. [ 661.171338][T20806] netlink: 'syz.1.3578': attribute type 20 has an invalid length. [ 661.282806][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3579'. [ 661.304880][T20810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3579'. [ 661.466794][T20821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3583'. [ 661.490770][T20821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3583'. [ 661.672074][T20831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3586'. [ 661.716902][T20834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3587'. [ 661.799541][T20838] netlink: 'syz.4.3588': attribute type 10 has an invalid length. [ 661.872821][T20843] netlink: 'syz.4.3588': attribute type 10 has an invalid length. [ 662.042763][T20838] team0: Port device dummy0 added [ 662.053207][T20843] team0: Port device dummy0 removed [ 662.071157][T20843] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 662.410087][T20841] nbd0: detected capacity change from 0 to 63 [ 662.444086][T20853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.459510][T14187] block nbd0: Receive control failed (result -104) [ 662.466211][ T5645] block nbd0: Receive control failed (result -32) [ 662.489243][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3589'. [ 662.584042][T20860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3592'. [ 662.593080][T20860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3592'. [ 663.156733][ T5755] IPVS: starting estimator thread 0... [ 663.289712][T20900] netlink: 'syz.1.3599': attribute type 39 has an invalid length. [ 663.518248][T20888] IPVS: using max 27 ests per chain, 64800 per kthread [ 663.877018][T20910] tipc: Started in network mode [ 663.887521][T20910] tipc: Node identity c69b61714bae, cluster identity 4711 [ 663.908194][T20910] tipc: Enabled bearer , priority 0 [ 663.933119][T20908] tipc: Disabling bearer [ 664.091114][T20922] team0: entered promiscuous mode [ 664.107355][T20922] team_slave_0: entered promiscuous mode [ 664.131022][T20922] team_slave_1: entered promiscuous mode [ 664.164337][ T5873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.237659][ T5873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.255980][ T5873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.280232][ T5873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.438248][T20943] netlink: 'syz.3.3610': attribute type 62 has an invalid length. [ 664.508032][T20947] –: renamed from dummy0 [ 664.652438][T20952] tipc: Enabled bearer , priority 0 [ 664.659589][T20960] tipc: Enabling of bearer rejected, already enabled [ 664.670794][T20952] syzkaller0: entered promiscuous mode [ 664.676470][T20952] syzkaller0: entered allmulticast mode [ 664.690397][T20960] tipc: Resetting bearer [ 664.882189][T20959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.893652][T20959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 664.927621][T20951] tipc: Resetting bearer [ 664.952123][T20951] tipc: Disabling bearer [ 665.003868][ T5645] Bluetooth: hci3: link tx timeout [ 665.014665][ T5645] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 665.044015][T20959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.057706][T20959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 665.205438][T17039] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 665.279854][T20959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.290192][T20959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 665.434298][T17039] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 665.461671][ T5873] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 665.473666][T20975] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 665.489464][T20975] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 665.712734][T20959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.727060][T20959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 665.774802][T20985] netlink: 'syz.0.3621': attribute type 8 has an invalid length. [ 666.142567][T11599] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 666.150909][T11599] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 666.186599][T20998] IPv6: NLM_F_CREATE should be specified when creating new route [ 666.210764][T11594] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 666.219138][T11594] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 666.250655][T20998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 666.258021][T20998] IPv6: NLM_F_CREATE should be set when creating new route [ 666.265302][T20998] IPv6: NLM_F_CREATE should be set when creating new route [ 666.272552][T20998] IPv6: NLM_F_CREATE should be set when creating new route [ 666.346333][T11599] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 666.354667][T11599] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 666.391508][T11599] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 666.399847][T11599] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 666.456757][T15451] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 666.467315][T15451] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 666.590698][T21018] lo speed is unknown, defaulting to 1000 [ 666.627433][T21026] __nla_validate_parse: 10 callbacks suppressed [ 666.628636][T21026] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3631'. [ 666.961290][T21032] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3637'. [ 666.990116][T21032] netlink: 'syz.1.3637': attribute type 5 has an invalid length. [ 667.035043][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3637'. [ 667.087559][T14187] Bluetooth: hci3: command 0x0405 tx timeout [ 667.139730][T21032] netlink: 'syz.1.3637': attribute type 1 has an invalid length. [ 667.141565][T21038] geneve3: entered promiscuous mode [ 667.168715][T21034] lo speed is unknown, defaulting to 1000 [ 667.168805][T11594] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.189498][T11594] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.198299][T11594] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.203829][T21038] xt_hashlimit: size too large, truncated to 1048576 [ 667.229333][T17039] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 667.354227][T21032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.391141][T21041] bond0: (slave geneve2): making interface the new active one [ 667.401055][T21041] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 667.507577][T11594] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.516513][T11594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.579047][T11594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.628796][T11594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.662976][T11594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.779240][T21055] ipt_REJECT: TCP_RESET invalid for non-tcp [ 667.822668][T21055] netlink: 'syz.1.3643': attribute type 1 has an invalid length. [ 667.830828][T21055] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3643'. [ 668.228422][T21071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3649'. [ 668.293317][T21071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3649'. [ 668.333588][T21073] x_tables: duplicate entry at hook 2 [ 668.470956][T21080] bridge0: port 3(syz_tun) entered blocking state [ 668.477824][T21080] bridge0: port 3(syz_tun) entered disabled state [ 668.484500][T21080] syz_tun: entered allmulticast mode [ 668.567797][T21080] syz_tun: entered promiscuous mode [ 668.703998][T21078] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 668.940509][T21087] lo speed is unknown, defaulting to 1000 [ 668.975279][T21097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'. [ 669.297488][T21100] lo speed is unknown, defaulting to 1000 [ 669.429919][T21114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3662'. [ 669.491061][T21114] vlan0: entered promiscuous mode [ 670.257830][T21141] Bluetooth: MGMT ver 1.23 [ 670.595124][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 670.626378][T21143] netlink: 'syz.5.3668': attribute type 13 has an invalid length. [ 670.692663][T21143] syzkaller0: entered promiscuous mode [ 670.698759][T21143] syzkaller0: entered allmulticast mode [ 670.732973][T21151] openvswitch: netlink: IP tunnel dst address not specified [ 671.523431][T21164] lo speed is unknown, defaulting to 1000 [ 671.652756][T21178] netlink: zone id is out of range [ 671.665425][T21178] netlink: zone id is out of range [ 671.677438][T21178] netlink: zone id is out of range [ 671.687201][T21178] netlink: zone id is out of range [ 671.696713][T21178] netlink: zone id is out of range [ 671.702124][T21178] netlink: zone id is out of range [ 671.707847][T21178] netlink: zone id is out of range [ 671.713063][T21178] netlink: zone id is out of range [ 671.726368][T21178] netlink: zone id is out of range [ 672.557629][T21201] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3685'. [ 672.567637][T21201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3685'. [ 672.649014][T21203] Cannot find add_set index 0 as target [ 672.706550][T21207] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3687'. [ 673.325041][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3691'. [ 673.435998][T21218] hsr_slave_1 (unregistering): left promiscuous mode [ 675.820055][T21277] lo speed is unknown, defaulting to 1000 [ 675.887504][T21280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3708'. [ 675.922387][T21282] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3709'. [ 675.971192][T21282] net_ratelimit: 392 callbacks suppressed [ 675.971212][T21282] openvswitch: netlink: Message has 3 unknown bytes. [ 676.117810][T21280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3708'. [ 676.164462][T21293] netlink: 'syz.4.3713': attribute type 13 has an invalid length. [ 676.198121][T21293] netlink: 'syz.4.3713': attribute type 17 has an invalid length. [ 676.327148][T21296] sctp: [Deprecated]: syz.1.3714 (pid 21296) Use of int in max_burst socket option. [ 676.327148][T21296] Use struct sctp_assoc_value instead [ 676.372225][T21293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.381733][T21293] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.395211][T21293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.467428][T21293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.477174][T21293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.490474][T21293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 676.500843][T21293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.541792][T21293] veth1_macvtap: left promiscuous mode [ 676.548817][T21293] veth0_macvtap: left promiscuous mode [ 676.556215][T21293] veth0_macvtap: entered promiscuous mode [ 676.569798][T21293] veth1_macvtap: entered promiscuous mode [ 676.582432][T21293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 676.595056][T21293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.608253][T21293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 676.621167][T21293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 676.715052][T11594] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.722265][T11594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.731940][T11594] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.751933][T11594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.821288][T15451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.840830][T15451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.914694][ T5873] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 676.945314][T15451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.966476][T15451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.015505][T21315] ieee802154 phy0 wpan0: encryption failed: -22 [ 677.081334][T21316] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3718'. [ 677.171832][T21316] 0ªX¹¦À: renamed from batadv0 (while UP) [ 677.185754][T21316] 0ªX¹¦À: entered allmulticast mode [ 677.199975][T21316] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 677.300170][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 677.315168][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 677.657285][T21335] netlink: 'syz.0.3724': attribute type 12 has an invalid length. [ 677.955416][T21349] netlink: 'syz.0.3726': attribute type 16 has an invalid length. [ 677.977432][T21349] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3726'. [ 678.011969][T21347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3726'. [ 678.034822][T21347] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3726'. [ 678.050476][T21347] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3726'. [ 678.059971][T21347] netlink: ct family unspecified [ 678.257862][T21360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3728'. [ 678.288345][T21360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3728'. [ 678.332246][T21360] vti0: entered promiscuous mode [ 678.342093][T21360] vti0: entered allmulticast mode [ 678.423733][T21364] lo speed is unknown, defaulting to 1000 [ 678.821103][ T5873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.828995][ T5873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.909749][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 679.114832][T21383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3736'. [ 679.320698][T21395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3739'. [ 679.365855][T21386] bond0: entered promiscuous mode [ 679.370967][T21386] bond_slave_0: entered promiscuous mode [ 679.376845][T21386] bond_slave_1: entered promiscuous mode [ 679.382701][T21386] dummy0: entered promiscuous mode [ 679.431365][T21391] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 679.437416][T21391] syzkaller1: linktype set to 780 [ 679.485908][T21396] bond5: option downdelay: invalid value (18446744073709547521) [ 679.523688][T21396] bond5: option downdelay: allowed values 0 - 2147483647 [ 679.532611][T21401] netlink: 'syz.4.3741': attribute type 1 has an invalid length. [ 679.554276][T21396] bond5 (unregistering): Released all slaves [ 679.690747][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3741'. [ 679.700168][T21398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3741'. [ 679.710890][T21391] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 679.757596][T21409] netlink: 'syz.1.3742': attribute type 11 has an invalid length. [ 679.773937][T21398] bond0: (slave dummy0): Releasing backup interface [ 679.786936][T21398] bond1: (slave dummy0): making interface the new active one [ 679.796407][T21398] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 679.821709][T21398] dummy0: entered promiscuous mode [ 679.850889][T21398] netlink: 'syz.4.3741': attribute type 16 has an invalid length. [ 679.859100][T21398] netlink: 'syz.4.3741': attribute type 3 has an invalid length. [ 679.899508][T21404] lo speed is unknown, defaulting to 1000 [ 680.586140][T21442] netlink: 'syz.1.3751': attribute type 1 has an invalid length. [ 680.667903][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 680.689468][T21437] xt_CT: No such helper "snmp_trap" [ 680.706605][T21446] netlink: 'syz.0.3749': attribute type 8 has an invalid length. [ 680.954797][T21442] bond1: entered promiscuous mode [ 680.960288][T21442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.967928][T21444] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 681.000823][T21444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 681.135573][T21449] veth3: entered promiscuous mode [ 681.147401][T21449] veth3: entered allmulticast mode [ 681.160581][T21449] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 681.448532][T21487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.528398][T21489] mac80211_hwsim hwsim54 wlan0: entered promiscuous mode [ 681.939049][T11600] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.961054][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.970034][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.978949][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.459479][T21521] __nla_validate_parse: 9 callbacks suppressed [ 683.459503][T21521] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3772'. [ 683.487863][T21521] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3772'. [ 683.502010][T21521] netlink: 'syz.5.3772': attribute type 3 has an invalid length. [ 683.520437][T21521] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3772'. [ 683.605136][T21522] bond2: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 683.652239][T21522] bond2 (unregistering): Released all slaves [ 683.789949][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3776'. [ 683.966437][T21538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3777'. [ 683.975469][T21538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3777'. [ 683.984465][T21538] netlink: 31 bytes leftover after parsing attributes in process `syz.5.3777'. [ 683.993442][T21538] netlink: 'syz.5.3777': attribute type 3 has an invalid length. [ 684.001198][T21538] netlink: 'syz.5.3777': attribute type 2 has an invalid length. [ 684.008950][T21538] netlink: 31 bytes leftover after parsing attributes in process `syz.5.3777'. [ 684.057457][T21538] netlink: 'syz.5.3777': attribute type 2 has an invalid length. [ 684.086291][T21547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3781'. [ 684.118954][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3781'. [ 684.151798][T21546] ip6tnl1: entered allmulticast mode [ 684.353648][T21562] netlink: 'syz.1.3784': attribute type 1 has an invalid length. [ 684.447271][T21562] bond2: (slave bridge3): making interface the new active one [ 684.455957][T21562] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 684.471595][T21567] lo: Caught tx_queue_len zero misconfig [ 684.509948][T21562] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 684.530644][T21562] bond2: entered promiscuous mode [ 684.551366][T21562] bridge3: entered promiscuous mode [ 684.557144][T21562] bond2: entered allmulticast mode [ 684.562514][T21562] bridge3: entered allmulticast mode [ 684.569811][T21562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 684.715397][T21577] openvswitch: netlink: Flow key attr not present in new flow. [ 685.053221][T21580] netlink: 'syz.5.3789': attribute type 12 has an invalid length. [ 685.069641][T21584] netlink: 'syz.0.3790': attribute type 3 has an invalid length. [ 685.106138][T21580] netlink: 'syz.5.3789': attribute type 29 has an invalid length. [ 685.870905][T21587] syzkaller0: entered promiscuous mode [ 685.881076][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.895005][T21587] syzkaller0: entered allmulticast mode [ 685.951232][T21611] bridge1: entered promiscuous mode [ 686.551661][T21621] xt_hashlimit: invalid rate [ 687.367838][T21647] ipvlan2: entered promiscuous mode [ 688.478053][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 688.669419][T21680] netlink: 'syz.4.3815': attribute type 8 has an invalid length. [ 688.704885][T21684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.871778][T21680] __nla_validate_parse: 9 callbacks suppressed [ 688.871799][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3815'. [ 689.495635][T21711] bond3 (unregistering): Released all slaves [ 689.831151][T21734] netlink: 'syz.4.3832': attribute type 1 has an invalid length. [ 689.886876][T21734] 8021q: adding VLAN 0 to HW filter on device bond2 [ 689.899599][T21734] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3832'. [ 689.926954][T21734] bond2: (slave bridge2): making interface the new active one [ 689.935477][T21734] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 690.037412][T21739] bond8: entered promiscuous mode [ 690.048442][T21739] bond8: entered allmulticast mode [ 690.054159][T21739] 8021q: adding VLAN 0 to HW filter on device bond8 [ 690.156368][T21744] netlink: 364 bytes leftover after parsing attributes in process `syz.0.3835'. [ 690.393795][T21757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3840'. [ 690.575328][T21766] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3843'. [ 690.715873][T21777] openvswitch: netlink: IP tunnel dst address not specified [ 690.725279][T21778] netlink: 436 bytes leftover after parsing attributes in process `syz.1.3847'. [ 690.735435][T21777] netlink: 436 bytes leftover after parsing attributes in process `syz.1.3847'. [ 690.751558][T21778] openvswitch: netlink: Flow key attr not present in new flow. [ 690.773856][T21777] openvswitch: netlink: Flow key attr not present in new flow. [ 691.061765][T21788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3849'. [ 691.104673][T21788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3849'. [ 691.451561][T21807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 691.510950][T21807] bond3 (unregistering): Released all slaves [ 691.613550][T21813] netlink: 'syz.3.3856': attribute type 10 has an invalid length. [ 691.820451][T21816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3858'. [ 692.714007][T21833] netlink: 'syz.4.3862': attribute type 1 has an invalid length. [ 692.932637][ T1646] block nbd0: Connection timed out, retrying (0/2 alive) [ 692.945050][ T1646] block nbd0: Connection timed out, retrying (0/2 alive) [ 692.952927][ T1646] block nbd0: Connection timed out, retrying (0/2 alive) [ 692.960369][ T1646] block nbd0: Connection timed out, retrying (0/2 alive) [ 692.967848][ T1646] block nbd0: Dead connection, failed to find a fallback [ 692.976480][ T1646] block nbd0: shutting down sockets [ 692.982209][ T1646] blk_print_req_error: 138 callbacks suppressed [ 692.982232][ T1646] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 692.999486][ T1646] buffer_io_error: 138 callbacks suppressed [ 692.999503][ T1646] Buffer I/O error on dev nbd0, logical block 3, async page read [ 693.014287][ T1646] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.023436][ T1646] Buffer I/O error on dev nbd0, logical block 2, async page read [ 693.032396][ T1646] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.042104][ T1646] Buffer I/O error on dev nbd0, logical block 1, async page read [ 693.050524][ T1646] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.059794][ T1646] Buffer I/O error on dev nbd0, logical block 0, async page read [ 693.072879][T18530] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.082034][T18530] Buffer I/O error on dev nbd0, logical block 0, async page read [ 693.090353][T18530] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.099738][T18530] Buffer I/O error on dev nbd0, logical block 1, async page read [ 693.107957][T18530] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.117061][T18530] Buffer I/O error on dev nbd0, logical block 2, async page read [ 693.125339][T18530] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.134848][T18530] Buffer I/O error on dev nbd0, logical block 3, async page read [ 693.143079][T18530] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.152446][T18530] Buffer I/O error on dev nbd0, logical block 0, async page read [ 693.161920][T18530] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 693.171697][T18530] Buffer I/O error on dev nbd0, logical block 1, async page read [ 693.183681][T18530] ldm_validate_partition_table(): Disk read failed. [ 693.194218][T18530] Dev nbd0: unable to read RDB block 0 [ 693.202121][T18530] nbd0: unable to read partition table [ 693.222125][T18530] ldm_validate_partition_table(): Disk read failed. [ 693.244823][T18530] Dev nbd0: unable to read RDB block 0 [ 693.253413][T18530] nbd0: unable to read partition table [ 693.515389][T21849] smc: removing ib device sqz0 [ 693.703860][T21849] smbdirect: ib_dev[sqz0] removed [ 693.978432][T21865] __nla_validate_parse: 4 callbacks suppressed [ 693.978456][T21865] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3869'. [ 694.222452][T21859] syzkaller0: entered promiscuous mode [ 694.243616][T21859] syzkaller0: entered allmulticast mode [ 694.796241][T21891] bond3: entered allmulticast mode [ 695.702425][T21897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3874'. [ 695.711368][T21897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3874'. [ 695.777118][T21899] xt_bpf: check failed: parse error [ 696.880254][T21909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3878'. [ 698.190942][T21913] batman_adv: batadv0: Adding interface: macvtap1 [ 698.197451][T21913] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.223458][T21913] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 698.432130][T21926] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.443672][T21926] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.516429][T21930] netlink: 'syz.3.3884': attribute type 1 has an invalid length. [ 698.618651][T21930] 8021q: adding VLAN 0 to HW filter on device bond9 [ 698.662335][T21926] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.672674][T21926] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.736436][T21936] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3885'. [ 698.911467][T21942] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3886'. [ 699.116597][T21926] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.126942][T21926] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.168651][T21954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3889'. [ 699.290396][T21960] netlink: 'syz.4.3891': attribute type 11 has an invalid length. [ 699.386297][T21961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3890'. [ 699.806420][T21991] tipc: Enabled bearer , priority 0 [ 699.816433][T21991] syzkaller0: entered promiscuous mode [ 699.865285][T21991] syzkaller0: entered allmulticast mode [ 699.888128][T21991] tipc: Resetting bearer [ 699.920972][T21926] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.933140][T21926] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.968086][T21994] netlink: 'syz.1.3901': attribute type 29 has an invalid length. [ 699.976007][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3901'. [ 699.985688][T21985] tipc: Resetting bearer [ 700.026324][T21985] tipc: Disabling bearer [ 700.042572][T21994] netlink: 'syz.1.3901': attribute type 29 has an invalid length. [ 700.050537][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3901'. [ 700.073711][T22003] hsr0: entered promiscuous mode [ 700.170357][T21993] hsr0: left promiscuous mode [ 700.380920][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3904'. [ 700.495796][T11594] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.529811][T11594] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.568223][T11594] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.576771][T11594] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.616885][T11594] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.640664][T11594] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.658337][T22019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3908'. [ 700.697540][T22020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3908'. [ 700.725880][ T66] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.739557][ T66] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.793654][T22019] bridge0: port 3(vlan2) entered blocking state [ 700.807606][T22019] bridge0: port 3(vlan2) entered disabled state [ 700.814152][T22019] vlan2: entered allmulticast mode [ 700.819325][T22019] bridge0: entered allmulticast mode [ 700.829772][T22019] vlan2: left allmulticast mode [ 700.834695][T22019] bridge0: left allmulticast mode [ 700.941749][T22034] IPv6: Can't replace route, no match found [ 701.023887][T22036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3911'. [ 701.072141][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'. [ 701.206276][T22054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3915'. [ 701.230408][T22054] netlink: 'syz.4.3915': attribute type 18 has an invalid length. [ 701.245557][T22047] geneve2: entered allmulticast mode [ 701.476322][T22061] bond0: (slave –): Releasing backup interface [ 701.486668][T22061] bridge_slave_0: left allmulticast mode [ 701.492386][T22061] bridge_slave_0: left promiscuous mode [ 701.554351][T22066] sctp: [Deprecated]: syz.5.3919 (pid 22066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 701.554351][T22066] Use struct sctp_sack_info instead [ 701.709466][T22061] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.828620][T22072] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 701.860486][T22077] netlink: 'syz.4.3922': attribute type 1 has an invalid length. [ 702.731640][T22061] bridge_slave_1: left allmulticast mode [ 702.740708][T22061] bridge_slave_1: left promiscuous mode [ 702.753348][T22061] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.822977][T22061] bond0: (slave bond_slave_0): Releasing backup interface [ 702.839718][T22061] bond0: (slave bond_slave_1): Releasing backup interface [ 702.855154][T22061] `: Port device team_slave_0 removed [ 702.870607][T22061] `: Port device team_slave_1 removed [ 702.881656][T22061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.909833][T22061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 703.000875][T22077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 703.042608][T22083] bond4: (slave veth5): Enslaving as an active interface with an up link [ 703.335945][T22110] netlink: 'syz.3.3928': attribute type 2 has an invalid length. [ 703.347261][T22109] block nbd0: NBD_DISCONNECT [ 703.352979][T22109] block nbd0: Send disconnect failed -32 [ 703.360125][T22109] block nbd0: Send disconnect failed -32 [ 703.381358][T22111] netlink: 'syz.4.3929': attribute type 21 has an invalid length. [ 703.487806][T22111] netlink: 'syz.4.3929': attribute type 1 has an invalid length. [ 704.448310][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 706.656771][T22127] __nla_validate_parse: 7 callbacks suppressed [ 706.656786][T22127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3936'. [ 706.697187][T22116] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 706.849054][T22132] bond2: entered promiscuous mode [ 706.862923][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3937'. [ 706.871968][T22132] bond2: entered allmulticast mode [ 706.927918][T22141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3939'. [ 706.970357][T22141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3939'. [ 707.015419][T22141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3939'. [ 707.102400][T22149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3940'. [ 707.319793][T22165] erspan1: entered promiscuous mode [ 707.335513][T22165] erspan1: entered allmulticast mode [ 707.532400][T22178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3950'. [ 707.694944][T22181] netlink: 'syz.1.3951': attribute type 1 has an invalid length. [ 707.913137][T22185] bond3: (slave geneve3): making interface the new active one [ 707.921323][T22185] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 707.930125][T11600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 707.939042][T11600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 708.015581][T22187] vlan0: entered promiscuous mode [ 708.022432][T22187] gretap0: entered promiscuous mode [ 708.044262][T11600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 708.121018][T11600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 709.053988][T22208] netlink: 'syz.0.3955': attribute type 1 has an invalid length. [ 709.094463][T22208] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3955'. [ 709.110615][T22208] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3955'. [ 709.140204][T22208] netlink: 'syz.0.3955': attribute type 1 has an invalid length. [ 709.816573][T22226] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3961'. [ 710.095091][T22234] netlink: 'syz.4.3963': attribute type 1 has an invalid length. [ 710.168020][T22235] netlink: 'syz.4.3963': attribute type 1 has an invalid length. [ 710.972854][T22258] bridge0: port 3(syz_tun) entered blocking state [ 710.979481][T22258] bridge0: port 3(syz_tun) entered forwarding state [ 711.008774][T22258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.017485][T22258] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.032108][T22258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.133883][T22258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.143603][T22258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.157661][T22258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 711.168058][T22258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 711.340924][T22258] hsr0: left promiscuous mode [ 711.354053][T22258] veth1_vlan: left promiscuous mode [ 711.360958][T22258] veth0_vlan: left promiscuous mode [ 711.369278][T22258] veth0_vlan: entered promiscuous mode [ 711.378997][T22258] veth1_vlan: entered promiscuous mode [ 711.402702][T22258] veth1_macvtap: left promiscuous mode [ 711.409701][T22258] veth0_macvtap: left promiscuous mode [ 711.416548][T22258] veth0_macvtap: entered promiscuous mode [ 711.423688][T22258] veth1_macvtap: entered promiscuous mode [ 711.457730][T22258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 711.466649][T22258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 711.475518][T22258] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 711.483930][T22258] mac80211_hwsim hwsim62 wlan0: left promiscuous mode [ 711.491117][T22258] mac80211_hwsim hwsim62 wlan0: left allmulticast mode [ 711.502599][T22258] veth0_to_team: entered promiscuous mode [ 711.513540][T22258] geneve2: left promiscuous mode [ 711.518579][T22258] geneve2: left allmulticast mode [ 711.527583][T22258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.535212][T22258] vlan2: left promiscuous mode [ 711.540031][T22258] bridge0: left promiscuous mode [ 711.765468][T22258] geneve3: left promiscuous mode [ 711.789532][T22258] bridge1: left promiscuous mode [ 711.801096][T22258] bond2: left promiscuous mode [ 711.805953][T22258] bond2: left allmulticast mode [ 711.811835][T22258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 711.828214][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.835619][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.845034][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.852216][ T5873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.935692][T22273] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 712.120884][T11600] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.129754][T11600] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 712.138443][T11600] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.147192][T11600] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 712.259323][T11600] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.277797][T11600] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 712.356718][T11600] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.365538][T11600] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 713.011209][T22303] __nla_validate_parse: 1 callbacks suppressed [ 713.011228][T22303] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3980'. [ 713.026463][T22303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3980'. [ 713.049742][T22303] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 713.305713][T22315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3984'. [ 713.332604][T22315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3984'. [ 713.488673][T22324] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.565280][T14187] Bluetooth: hci4: command 0x0406 tx timeout [ 713.655546][T22326] Bluetooth: MGMT ver 1.23 [ 713.754202][T22341] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3993'. [ 713.767853][T22333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3988'. [ 714.106563][T22350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.285190][T22352] netlink: 180568 bytes leftover after parsing attributes in process `syz.5.3998'. [ 714.455688][T22367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4003'. [ 714.501994][T22364] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 714.526413][T22364] bond10 (unregistering): Released all slaves [ 714.663526][T22376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4004'. [ 714.676126][T22376] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4004'. [ 715.220893][T22392] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 715.508738][T22380] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 715.672333][T22392] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 716.010565][T22392] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 716.205443][T22392] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 716.235503][T22443] netlink: 'syz.5.4020': attribute type 3 has an invalid length. [ 716.319458][T22446] sctp: [Deprecated]: syz.0.4022 (pid 22446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 716.319458][T22446] Use struct sctp_sack_info instead [ 716.484886][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 716.554236][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 716.585865][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 716.666312][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 717.392085][T22512] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.560944][T22512] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.820696][T22512] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.136810][T22528] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 718.345577][T22512] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.399705][T22556] __nla_validate_parse: 76 callbacks suppressed [ 718.399733][T22556] netlink: 276 bytes leftover after parsing attributes in process `syz.0.4046'. [ 718.447245][T22553] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 718.707970][T11603] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.740096][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4048'. [ 718.841209][ T5873] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.941906][ T66] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.957821][T22575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4050'. [ 719.049192][T11603] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.277164][T22591] hsr0: entered promiscuous mode [ 719.300317][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4056'. [ 719.391284][T22597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4057'. [ 719.502681][T22597] bridge4: port 1(veth3) entered blocking state [ 719.520025][T22597] bridge4: port 1(veth3) entered disabled state [ 719.530731][T22597] veth3: entered allmulticast mode [ 719.538889][T22607] netlink: 'syz.4.4059': attribute type 1 has an invalid length. [ 719.550976][T22597] veth3: entered promiscuous mode [ 719.565548][T22606] bridge4: port 2(veth0_to_bond) entered blocking state [ 719.587750][T22606] bridge4: port 2(veth0_to_bond) entered disabled state [ 719.595345][T22606] veth0_to_bond: entered allmulticast mode [ 719.604515][T22606] veth0_to_bond: entered promiscuous mode [ 719.612689][T22606] bridge4: port 2(veth0_to_bond) entered blocking state [ 719.619923][T22606] bridge4: port 2(veth0_to_bond) entered forwarding state [ 719.629119][T22612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4060'. [ 719.842790][T22623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4062'. [ 719.859711][ T5360] IPVS: starting estimator thread 0... [ 719.889365][ T30] audit: type=1800 audit(1778484464.156:19): pid=22628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4064" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2017 res=0 errno=0 [ 719.959803][T22627] IPVS: using max 26 ests per chain, 62400 per kthread [ 720.378232][T22644] netlink: 'syz.0.4069': attribute type 1 has an invalid length. [ 720.392136][T22644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4069'. [ 720.702473][T22658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4071'. [ 720.744019][T22656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4070'. [ 721.266310][T22687] netlink: 'syz.1.4075': attribute type 4 has an invalid length. [ 721.298926][T22684] netlink: 'syz.1.4075': attribute type 4 has an invalid length. [ 721.332519][T22690] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 721.479469][T22697] SET target dimension over the limit! [ 721.782512][T22714] bond10 (unregistering): Released all slaves [ 722.051476][T22724] netdevsim0: mtu less than device minimum [ 724.899958][T22752] netlink: 'syz.0.4088': attribute type 4 has an invalid length. [ 725.108136][T22781] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 725.208900][T22779] netlink: 'syz.0.4097': attribute type 1 has an invalid length. [ 725.326748][T22786] __nla_validate_parse: 3 callbacks suppressed [ 725.326768][T22786] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4099'. [ 725.370736][T22786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4099'. [ 725.398463][T22786] netlink: 'syz.3.4099': attribute type 1 has an invalid length. [ 725.446841][T22786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4099'. [ 725.513156][T22790] netlink: 'syz.4.4100': attribute type 1 has an invalid length. [ 725.675748][T22790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 726.134985][T22816] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 726.135303][T22816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4107'. [ 726.251332][T22816] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 726.325016][T22816] netlink: 'syz.0.4107': attribute type 1 has an invalid length. [ 726.355254][T22816] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4107'. [ 726.377814][T22816] netlink: 'syz.0.4107': attribute type 1 has an invalid length. [ 726.385700][T22816] netlink: 'syz.0.4107': attribute type 8 has an invalid length. [ 726.396630][T22816] netlink: 582 bytes leftover after parsing attributes in process `syz.0.4107'. [ 726.407992][T22816] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4107'. [ 726.478373][T22819] syzkaller0: entered promiscuous mode [ 726.495708][T22819] syzkaller0: entered allmulticast mode [ 726.505194][T22826] tc_dump_action: action bad kind [ 729.488446][T22898] netlink: 'syz.4.4128': attribute type 1 has an invalid length. [ 729.518278][T22897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4127'. [ 729.584123][T22897] batman_adv: batadv0: Adding interface: veth5 [ 729.591608][T22908] netlink: 'syz.3.4131': attribute type 1 has an invalid length. [ 729.600734][T22897] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.626242][T22908] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4131'. [ 729.643761][T22897] batman_adv: batadv0: Interface activated: veth5 [ 729.683398][T22903] bond5: entered promiscuous mode [ 729.911715][T22907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4130'. [ 729.928570][T22907] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 729.953715][T22921] vti0: entered promiscuous mode [ 730.262054][T11603] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.275184][T11603] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.291682][T11603] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.300641][T11603] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.317869][T11603] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.337987][T11603] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.349154][T22956] __nla_validate_parse: 1 callbacks suppressed [ 730.349173][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4139'. [ 730.362603][T22942] netlink: 'syz.5.4139': attribute type 4 has an invalid length. [ 730.392398][T11603] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.408618][T11603] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.549243][T22958] bridge5: entered allmulticast mode [ 730.643738][T22965] ip6gretap0: entered promiscuous mode [ 730.662264][T22965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4145'. [ 730.813672][T22982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4149'. [ 730.842688][ T30] audit: type=1804 audit(1778484475.116:20): pid=22983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4149" name="/newroot/185/cgroup.controllers" dev="tmpfs" ino=959 res=1 errno=0 [ 730.903854][ T30] audit: type=1800 audit(1778484475.116:21): pid=22983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4149" name="cgroup.controllers" dev="tmpfs" ino=959 res=0 errno=0 [ 730.931039][ T30] audit: type=1800 audit(1778484475.116:22): pid=22982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4149" name="cgroup.controllers" dev="tmpfs" ino=959 res=0 errno=0 [ 730.953310][ T30] audit: type=1804 audit(1778484475.146:23): pid=22983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4149" name="/newroot/185/cgroup.controllers" dev="tmpfs" ino=959 res=1 errno=0 [ 731.272398][T23007] netlink: 'syz.5.4154': attribute type 9 has an invalid length. [ 731.287878][T23005] netlink: 'syz.1.4155': attribute type 29 has an invalid length. [ 731.288199][T23007] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.4154'. [ 731.308616][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4155'. [ 731.325905][T22999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4153'. [ 731.355572][T23005] hsr0: entered promiscuous mode [ 731.654970][T23003] hsr0: left promiscuous mode [ 732.435279][T23050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4166'. [ 732.490298][T23055] netlink: 'syz.1.4168': attribute type 1 has an invalid length. [ 732.499121][T23055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.139167][T23110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4186'. [ 734.166183][T23110] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4186'. [ 734.186923][T23110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.220404][T23112] netlink: 47 bytes leftover after parsing attributes in process `syz.3.4187'. [ 734.276106][T23114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.618894][T23128] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 734.637479][T23128] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 734.676939][T23131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.874035][T23139] netlink: 'syz.0.4197': attribute type 8 has an invalid length. [ 735.028432][T23151] vlan3: entered promiscuous mode [ 735.033746][T23151] bridge0: entered promiscuous mode [ 736.250194][T23201] __nla_validate_parse: 2 callbacks suppressed [ 736.250222][T23201] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4214'. [ 736.269352][T23201] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4214'. [ 736.551775][T23206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4216'. [ 736.577486][T23206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4216'. [ 736.701879][T23215] v: renamed from ip6_vti0 [ 736.784063][T23221] tc action pedit offset 20 out of bounds [ 736.816305][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4219'. [ 736.900659][T23220] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 736.924747][T23220] bond3: (slave lo): Enslaving as an active interface with an up link [ 736.941820][T23220] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 737.066596][T23228] netlink: 'syz.5.4222': attribute type 1 has an invalid length. [ 737.080169][T23228] netlink: 216 bytes leftover after parsing attributes in process `syz.5.4222'. [ 737.095350][T23233] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4224'. [ 737.353317][T23246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4228'. [ 737.708630][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 737.815637][T23268] netlink: 'syz.0.4234': attribute type 13 has an invalid length. [ 737.823747][T23268] netlink: 'syz.0.4234': attribute type 17 has an invalid length. [ 737.848597][T23270] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4233'. [ 738.116792][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4229'. [ 738.214761][T23268] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 738.321354][T23268] 8021q: adding VLAN 0 to HW filter on device bond3 [ 738.368949][T23273] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.383020][T23273] bridge_slave_1 (unregistering): left allmulticast mode [ 738.390362][T23273] bridge_slave_1 (unregistering): left promiscuous mode [ 738.398299][T23273] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.105633][T23313] mac80211_hwsim hwsim55 syzkaller0: left promiscuous mode [ 739.126214][T23313] mac80211_hwsim hwsim55 syzkaller0: left allmulticast mode [ 742.674795][T23374] __nla_validate_parse: 6 callbacks suppressed [ 742.674817][T23374] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4263'. [ 742.675444][T23378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4265'. [ 742.707266][T23374] atomic_op ffff888055335198 conn xmit_atomic 0000000000000000 [ 742.743154][T23378] netlink: 'syz.0.4265': attribute type 1 has an invalid length. [ 742.769198][T23378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4265'. [ 742.799827][T23386] netlink: 'syz.1.4267': attribute type 1 has an invalid length. [ 742.872368][T23381] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 742.896889][T23390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4268'. [ 742.949985][T23390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4268'. [ 743.007040][T23394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4267'. [ 743.028030][T23387] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 743.041351][T23387] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 743.109108][T23386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4267'. [ 743.198567][T23387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4267'. [ 743.198565][T23394] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 743.248292][T23398] bond1: (slave dummy0): Releasing active interface [ 743.264742][T23398] bridge_slave_0: left allmulticast mode [ 743.271247][T23398] bridge_slave_0: left promiscuous mode [ 743.277246][T23398] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.291832][T23398] bridge_slave_1: left allmulticast mode [ 743.299534][T23398] bridge_slave_1: left promiscuous mode [ 743.305530][T23398] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.328317][T23398] bond0: (slave bond_slave_0): Releasing backup interface [ 743.356708][T23398] bond0: (slave bond_slave_1): Releasing backup interface [ 743.386803][T23398] team0: Port device team_slave_0 removed [ 743.400648][T23398] team0: Port device team_slave_1 removed [ 743.409444][T23398] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 743.417729][T23398] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 743.427173][T23398] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 743.436686][T23398] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 743.449414][T23398] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 743.476699][T23386] 8021q: adding VLAN 0 to HW filter on device bond4 [ 743.512195][T23400] ip6gre1: entered allmulticast mode [ 743.524862][T23400] team0: Port device ip6gre1 added [ 743.707688][T23402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4271'. [ 743.727521][T23402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4271'. [ 743.828645][T23405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.018760][T23393] infiniband syz0: set active [ 744.023862][T23393] infiniband syz0: added bridge_slave_1 [ 744.039887][T23393] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 744.044744][T23393] infiniband syz0: Couldn't open port 1 [ 744.073141][T23393] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 744.104446][T23393] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 744.146036][T23393] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 744.156050][T23419] pimreg: entered allmulticast mode [ 744.212124][T23393] RDS/IB: syz0: added [ 744.219736][T23393] smc: adding ib device syz0 with port count 1 [ 744.235868][T23393] smc: ib device syz0 port 1 has no pnetid [ 744.659222][T23410] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 744.836716][T23434] openvswitch: netlink: Flow actions attr not present in new flow. [ 745.851362][T23480] netlink: 'syz.5.4292': attribute type 1 has an invalid length. [ 745.900358][T23479] netlink: 'syz.4.4291': attribute type 11 has an invalid length. [ 746.687515][T23507] block nbd0: not configured, cannot reconfigure [ 746.893518][T23515] netlink: 'syz.4.4300': attribute type 40 has an invalid length. [ 747.543522][ T66] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.637952][ T66] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.659121][ T66] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.676788][ T66] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.821966][T23534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.834542][T23534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.846918][T23534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 748.043790][T23542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.084819][T23534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.095415][T23534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.108041][T23534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 748.142797][ T5873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.159484][ T5873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.282206][T23534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.292982][T23534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.305996][T23534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 748.420070][T23534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.432530][T23534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.443300][T23534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 748.575317][ T66] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.585220][ T66] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 748.593897][ T66] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 748.690136][T23549] __nla_validate_parse: 14 callbacks suppressed [ 748.690157][T23549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'. [ 748.780805][ T66] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.809132][ T66] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 748.835600][ T66] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 749.062542][ T5873] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.086177][ T5873] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 749.100808][ T5873] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 749.160281][T23559] bond0: left promiscuous mode [ 749.171595][T23559] bond_slave_0: left promiscuous mode [ 749.185216][T23559] bond_slave_1: left promiscuous mode [ 749.191072][T23559] dummy0: left promiscuous mode [ 749.200019][T23559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.208499][T23559] team0: left promiscuous mode [ 749.213389][T23559] team_slave_0: left promiscuous mode [ 749.221360][T23559] team_slave_1: left promiscuous mode [ 749.231369][T23559] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.287102][T23559] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 749.290012][T23566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4313'. [ 749.303529][T12285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.305033][T23566] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4313'. [ 749.331700][T23559] 8021q: adding VLAN 0 to HW filter on device bond4 [ 749.351222][T23559] bond5: left promiscuous mode [ 749.363352][T23559] ip6gre1: left promiscuous mode [ 749.388110][T23559] bond7: left promiscuous mode [ 749.401398][T23559] 8021q: adding VLAN 0 to HW filter on device bond7 [ 749.408668][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.442412][T23559] 8021q: adding VLAN 0 to HW filter on device eth0 [ 749.455017][T23559] 8021q: adding VLAN 0 to HW filter on device eth1 [ 749.469645][T12285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.481495][T23559] 8021q: adding VLAN 0 to HW filter on device eth2 [ 749.495560][T23559] 8021q: adding VLAN 0 to HW filter on device eth3 [ 749.506621][T23559] bond8: left promiscuous mode [ 749.523826][T23559] vti0: left promiscuous mode [ 749.616056][T15451] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.625347][T12285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.640440][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.654903][T15451] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 749.687557][T15451] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 749.745254][ T66] bridge4: port 1(veth3) entered blocking state [ 749.751758][ T66] bridge4: port 1(veth3) entered forwarding state [ 749.829121][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.880547][T23590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.891337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.919942][T23592] netlink: 'syz.0.4318': attribute type 1 has an invalid length. [ 749.923502][T23590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.940413][T11602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.962686][T23589] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 749.975723][T23589] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 750.008179][T23588] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 750.017796][T23588] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 750.027620][T23588] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 750.111244][T23592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 750.197140][T23599] bond4: (slave ip6gretap1): making interface the new active one [ 750.224706][T23599] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 750.311786][T23606] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4322'. [ 750.332729][T23611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4323'. [ 750.344694][T23611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4323'. [ 750.406347][T23589] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 750.416628][T23589] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 750.616805][T23589] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 750.631189][T23589] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 750.808370][T23589] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 750.847187][T23589] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 751.000456][T23636] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4328'. [ 751.060135][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 751.079236][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 751.179322][T23645] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4331'. [ 751.192829][T15451] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 751.222920][T15451] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 751.337917][T15451] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 751.353395][T15451] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 751.418926][T11602] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 751.438428][T11602] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 751.601212][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4336'. [ 751.630632][T23664] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4337'. [ 752.086108][T23680] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 752.178630][T23680] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 752.281111][T23680] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 752.391080][T23680] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 752.527001][T23708] erspan0: entered promiscuous mode [ 752.697729][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 752.822390][ T66] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 752.949743][T11602] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 753.044914][T11600] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 754.168533][T23789] __nla_validate_parse: 9 callbacks suppressed [ 754.168556][T23789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4369'. [ 754.217806][T23793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4370'. [ 754.292472][T23797] netlink: 'syz.5.4372': attribute type 30 has an invalid length. [ 754.390638][T23797] ipip0: entered promiscuous mode [ 754.413213][T23802] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4375'. [ 754.413389][T23804] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4375'. [ 754.447528][T23802] 0ªî{X¹¦: renamed from gretap0 [ 754.485785][T23802] 0ªî{X¹¦: entered allmulticast mode [ 754.515422][T23802] net_ratelimit: 22 callbacks suppressed [ 754.515444][T23802] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 754.538371][T23804] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 754.548898][T23804] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 754.585201][T23811] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 754.649762][T23816] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 754.682639][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.706950][T23815] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 755.181065][T23845] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4383'. [ 755.403857][T23853] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4386'. [ 755.437935][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.651239][T23862] netlink: 'syz.4.4388': attribute type 1 has an invalid length. [ 755.708575][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.721451][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.760036][T23866] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 755.772771][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.823835][T23862] 8021q: adding VLAN 0 to HW filter on device bond7 [ 755.925222][T23862] bond7: (slave bridge4): making interface the new active one [ 755.936047][T23862] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 756.176244][T23880] ip6t_srh: unknown srh match flags 4000 [ 756.243400][T23883] syzkaller0: entered promiscuous mode [ 756.261167][T23883] syzkaller0: entered allmulticast mode [ 759.212331][T23903] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 759.462975][T23926] netlink: 'syz.1.4402': attribute type 10 has an invalid length. [ 759.493009][T23923] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20000 [ 759.514319][T23933] netlink: 'syz.1.4402': attribute type 10 has an invalid length. [ 759.540476][T23923] sctp: [Deprecated]: syz.0.4404 (pid 23923) Use of int in max_burst socket option deprecated. [ 759.540476][T23923] Use struct sctp_assoc_value instead [ 759.614363][T23926] team0: Failed to send options change via netlink (err -105) [ 759.647694][T23926] team0: Port device dummy0 added [ 759.872492][T17039] net_ratelimit: 4 callbacks suppressed [ 759.872512][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.977761][T23960] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4412'. [ 759.980758][T23959] netlink: 'syz.4.4412': attribute type 163 has an invalid length. [ 760.037749][T23960] 0ªî{X¹¦: renamed from gretap0 [ 760.056787][T23960] 0ªî{X¹¦: entered allmulticast mode [ 760.090049][T23960] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 760.119315][T23968] nbd: must specify at least one socket [ 760.297495][T23974] veth0_to_batadv: entered allmulticast mode [ 760.322210][T23974] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 760.730775][T23996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4425'. [ 760.813698][T23995] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4425'. [ 760.910412][T12285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.962047][T24006] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4426'. [ 760.976346][T24002] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 761.154285][T24012] netlink: 'syz.1.4429': attribute type 4 has an invalid length. [ 761.193944][T24012] netlink: 'syz.1.4429': attribute type 4 has an invalid length. [ 761.363538][T24018] netlink: 'syz.4.4418': attribute type 4 has an invalid length. [ 761.868298][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.957722][T12285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.365819][T24068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4443'. [ 762.461617][T24072] netlink: 'syz.5.4445': attribute type 5 has an invalid length. [ 762.651180][T24080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4446'. [ 762.666601][T24080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4446'. [ 762.989583][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.316640][T24092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'. [ 763.506685][T24095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4450'. [ 763.566145][T24097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4451'. [ 763.632663][T24102] syz.3.4453: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 763.675310][T24102] CPU: 0 UID: 0 PID: 24102 Comm: syz.3.4453 Not tainted syzkaller #0 PREEMPT(full) [ 763.675344][T24102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 763.675364][T24102] Call Trace: [ 763.675377][T24102] [ 763.675387][T24102] dump_stack_lvl+0xe8/0x150 [ 763.675422][T24102] warn_alloc+0x249/0x340 [ 763.675457][T24102] ? stack_trace_save+0xa9/0x100 [ 763.675496][T24102] ? __pfx_warn_alloc+0x10/0x10 [ 763.675537][T24102] ? kasan_save_track+0x4f/0x80 [ 763.675566][T24102] ? kasan_save_track+0x3e/0x80 [ 763.675594][T24102] ? __kasan_kmalloc+0x93/0xb0 [ 763.675624][T24102] ? __kmalloc_cache_noprof+0x31c/0x660 [ 763.675655][T24102] ? xskq_create+0x56/0x170 [ 763.675685][T24102] ? xsk_setsockopt+0x54c/0x990 [ 763.675711][T24102] ? do_sock_setsockopt+0x17c/0x1b0 [ 763.675743][T24102] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 763.675774][T24102] ? do_syscall_64+0x15f/0xf80 [ 763.675798][T24102] __vmalloc_node_range_noprof+0x132/0x1750 [ 763.675868][T24102] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 763.675907][T24102] ? __kasan_kmalloc+0x93/0xb0 [ 763.675947][T24102] vmalloc_user_noprof+0xad/0xe0 [ 763.675978][T24102] ? xskq_create+0xbf/0x170 [ 763.676009][T24102] xskq_create+0xbf/0x170 [ 763.676044][T24102] xsk_init_queue+0x8a/0xe0 [ 763.676077][T24102] xsk_setsockopt+0x54c/0x990 [ 763.676123][T24102] ? __pfx_xsk_setsockopt+0x10/0x10 [ 763.676158][T24102] ? __pfx_aa_sk_perm+0x10/0x10 [ 763.676191][T24102] ? aa_sock_opt_perm+0xff/0x1a0 [ 763.676224][T24102] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 763.676255][T24102] ? __pfx_xsk_setsockopt+0x10/0x10 [ 763.676285][T24102] do_sock_setsockopt+0x17c/0x1b0 [ 763.676322][T24102] __x64_sys_setsockopt+0x13d/0x1b0 [ 763.676357][T24102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.676377][T24102] do_syscall_64+0x15f/0xf80 [ 763.676394][T24102] ? trace_irq_disable+0x3b/0x140 [ 763.676423][T24102] ? clear_bhb_loop+0x40/0x90 [ 763.676445][T24102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.676462][T24102] RIP: 0033:0x7ff12059cdd9 [ 763.676481][T24102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.676498][T24102] RSP: 002b:00007ff11e7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 763.676518][T24102] RAX: ffffffffffffffda RBX: 00007ff120815fa0 RCX: 00007ff12059cdd9 [ 763.676531][T24102] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 763.676542][T24102] RBP: 00007ff120632d69 R08: 0000000000000004 R09: 0000000000000000 [ 763.676553][T24102] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.676564][T24102] R13: 00007ff120816038 R14: 00007ff120815fa0 R15: 00007ffdf6d07ec8 [ 763.676592][T24102] [ 763.987989][T24102] Mem-Info: [ 764.003210][T24102] active_anon:8748 inactive_anon:7 isolated_anon:0 [ 764.003210][T24102] active_file:2955 inactive_file:40548 isolated_file:0 [ 764.003210][T24102] unevictable:768 dirty:102 writeback:0 [ 764.003210][T24102] slab_reclaimable:12842 slab_unreclaimable:190511 [ 764.003210][T24102] mapped:33614 shmem:4167 pagetables:1589 [ 764.003210][T24102] sec_pagetables:0 bounce:0 [ 764.003210][T24102] kernel_misc_reclaimable:0 [ 764.003210][T24102] free:1220660 free_pcp:12926 free_cma:0 [ 764.054257][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.069625][T24110] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode [ 764.086911][T24110] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode [ 764.143756][T24102] Node 0 active_anon:34892kB inactive_anon:28kB active_file:11820kB inactive_file:161992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134456kB dirty:408kB writeback:0kB shmem:15132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16164kB pagetables:6028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 764.207515][T24102] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 764.244488][T24102] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 764.275596][T24102] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 764.284943][T24102] Node 0 DMA32 free:941744kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34892kB inactive_anon:28kB active_file:11820kB inactive_file:161992kB unevictable:1536kB writepending:408kB zspages:0kB present:3129332kB managed:2552540kB mlocked:0kB bounce:0kB free_pcp:30864kB local_pcp:10048kB free_cma:0kB [ 764.334901][T24102] lowmem_reserve[]: 0 0 0 0 0 [ 764.357375][T24102] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 764.392051][T24102] lowmem_reserve[]: 0 0 0 0 0 [ 764.397230][T24102] Node 1 Normal free:3925544kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21232kB local_pcp:21232kB free_cma:0kB [ 764.451418][T24102] lowmem_reserve[]: 0 0 0 0 0 [ 764.472128][T24102] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 764.521776][T24102] Node 0 DMA32: 5514*4kB (UME) 4803*8kB (UME) 2774*16kB (UME) 763*32kB (UM) 446*64kB (UM) 589*128kB (UM) 398*256kB (UME) 287*512kB (UME) 195*1024kB (UM) 105*2048kB (UM) 11*4096kB (UM) = 941824kB [ 764.553611][T24102] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 764.565755][T24102] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 957*4096kB (M) = 3925544kB [ 764.583120][T24102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 764.596589][T24102] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 764.607056][T24102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 764.628703][T24102] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 764.638540][T24102] 46841 total pagecache pages [ 764.643376][T24102] 0 pages in swap cache [ 764.647987][T24102] Free swap = 124996kB [ 764.652376][T24102] Total swap = 124996kB [ 764.656654][T24102] 2097051 pages RAM [ 764.695161][T24102] 0 pages HighMem/MovableOnly [ 764.705318][T24102] 427134 pages reserved [ 764.729049][T24102] 0 pages cma reserved [ 764.897445][T24129] pimreg9: entered allmulticast mode [ 764.907914][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.939962][T24133] netlink: 'syz.5.4460': attribute type 29 has an invalid length. [ 765.060202][T24140] __nla_validate_parse: 2 callbacks suppressed [ 765.060223][T24140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4462'. [ 765.089110][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.791247][T24178] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4470'. [ 766.108194][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.116703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.386886][T24208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4476'. [ 766.422721][T24208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.479938][T11602] bond0: (slave geneve2): link status definitely down, disabling slave [ 766.502122][T24213] sctp: [Deprecated]: syz.3.4477 (pid 24213) Use of int in maxseg socket option. [ 766.502122][T24213] Use struct sctp_assoc_value instead [ 766.534094][T11602] bond0: now running without any active interface! [ 766.967049][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4482'. [ 766.987521][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4482'. [ 767.010817][T24233] netlink: 'syz.4.4482': attribute type 11 has an invalid length. [ 767.036630][T24233] netlink: 'syz.4.4482': attribute type 11 has an invalid length. [ 767.053404][T24251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4484'. [ 767.157552][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.166055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.312974][T24266] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4489'. [ 767.334262][T24259] bond6: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 767.355993][T24259] bond6 (unregistering): Released all slaves [ 767.367487][T24266] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4489'. [ 767.728852][T24298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4495'. [ 767.883044][T24307] netlink: 'syz.1.4496': attribute type 1 has an invalid length. [ 767.937683][T24302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4496'. [ 767.947701][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.009904][T24307] 8021q: adding VLAN 0 to HW filter on device bond5 [ 768.166166][T24307] netlink: 'syz.1.4496': attribute type 1 has an invalid length. [ 768.188153][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.196563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.226823][T24307] bond5: (slave batadv1): Opening slave failed [ 768.636646][T24316] bond8 (unregistering): Released all slaves [ 769.269682][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.292220][T24336] netlink: 'syz.4.4503': attribute type 1 has an invalid length. [ 769.548324][T24340] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 769.639648][T24340] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 769.794819][T24345] bond8: (slave gretap0): making interface the new active one [ 769.831395][T24345] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 769.913200][T24336] macvlan0: entered promiscuous mode [ 769.950460][T24336] macvlan0: entered allmulticast mode [ 769.978767][T24336] bond8: entered promiscuous mode [ 769.994465][T24336] gretap0: entered promiscuous mode [ 770.016631][T24336] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 770.072686][T24336] bond8: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap0 [ 770.132641][T24336] bond8: left promiscuous mode [ 770.148985][T24336] gretap0: left promiscuous mode [ 770.200323][T24355] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 770.214031][T24355] syzkaller1: Refused to change device type [ 770.254025][T11600] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.275805][T11600] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.352616][T17039] net_ratelimit: 1 callbacks suppressed [ 770.352636][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.366733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.425518][T11600] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.457513][T11600] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.471917][T24374] netlink: 'syz.1.4509': attribute type 1 has an invalid length. [ 770.593925][T24381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.714103][T24392] __nla_validate_parse: 1 callbacks suppressed [ 770.714125][T24392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4512'. [ 770.746816][T24395] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4514'. [ 770.774618][T24388] netlink: 'syz.0.4513': attribute type 1 has an invalid length. [ 770.869375][T24388] bond5: entered promiscuous mode [ 770.880579][T24388] 8021q: adding VLAN 0 to HW filter on device bond5 [ 770.942429][T24404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4515'. [ 770.988984][ T5360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.397069][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.405601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.853229][T24443] IPv6: NLM_F_CREATE should be specified when creating new route [ 771.898057][T24445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4522'. [ 771.935896][T24449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4525'. [ 771.997142][T24449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.037545][T24449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.056418][T24449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.131682][T24447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.216552][T24459] netlink: 'syz.1.4528': attribute type 6 has an invalid length. [ 772.369344][T24463] syzkaller0: entered promiscuous mode [ 772.383471][T24463] syzkaller0: entered allmulticast mode [ 772.436708][T24471] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 772.549042][T24471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4533'. [ 772.783724][T24487] FAULT_INJECTION: forcing a failure. [ 772.783724][T24487] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 772.821877][T24487] CPU: 1 UID: 0 PID: 24487 Comm: syz.3.4536 Not tainted syzkaller #0 PREEMPT(full) [ 772.821906][T24487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 772.821918][T24487] Call Trace: [ 772.821926][T24487] [ 772.821934][T24487] dump_stack_lvl+0xe8/0x150 [ 772.821961][T24487] should_fail_ex+0x412/0x560 [ 772.821991][T24487] _copy_from_iter+0x1d3/0x1670 [ 772.822021][T24487] ? rcu_is_watching+0x15/0xb0 [ 772.822050][T24487] ? __pfx__copy_from_iter+0x10/0x10 [ 772.822083][T24487] ? netlink_sendmsg+0x650/0xb40 [ 772.822111][T24487] ? skb_put+0x11b/0x210 [ 772.822141][T24487] netlink_sendmsg+0x6c0/0xb40 [ 772.822219][T24487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.822253][T24487] ? aa_sock_msg_perm+0xf1/0x1b0 [ 772.822287][T24487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 772.822322][T24487] ____sys_sendmsg+0x972/0x9f0 [ 772.822354][T24487] ? __might_fault+0xaf/0x130 [ 772.822387][T24487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 772.822427][T24487] ? import_iovec+0x73/0xa0 [ 772.822461][T24487] ___sys_sendmsg+0x2a5/0x360 [ 772.822492][T24487] ? __lock_acquire+0x6b5/0x2cf0 [ 772.822521][T24487] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.822592][T24487] ? __fget_files+0x2a/0x420 [ 772.822618][T24487] ? __fget_files+0x3a0/0x420 [ 772.822654][T24487] __x64_sys_sendmsg+0x1bd/0x2a0 [ 772.822689][T24487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 772.822731][T24487] ? __pfx_ksys_write+0x10/0x10 [ 772.822770][T24487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.822794][T24487] do_syscall_64+0x15f/0xf80 [ 772.822813][T24487] ? trace_irq_disable+0x3b/0x140 [ 772.822845][T24487] ? clear_bhb_loop+0x40/0x90 [ 772.822871][T24487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.822892][T24487] RIP: 0033:0x7ff12059cdd9 [ 772.822912][T24487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.822930][T24487] RSP: 002b:00007ff11e7b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.822952][T24487] RAX: ffffffffffffffda RBX: 00007ff120816180 RCX: 00007ff12059cdd9 [ 772.822966][T24487] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 772.822979][T24487] RBP: 00007ff11e7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 772.822991][T24487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.823004][T24487] R13: 00007ff120816218 R14: 00007ff120816180 R15: 00007ffdf6d07ec8 [ 772.823038][T24487] [ 772.864138][T24478] syzkaller0: entered promiscuous mode [ 773.091215][T24478] syzkaller0: entered allmulticast mode [ 773.185287][ T5645] block nbd0: Receive control failed (result -32) [ 773.192635][ T5645] [ 773.194999][ T5645] ====================================================== [ 773.202036][ T5645] WARNING: possible circular locking dependency detected [ 773.209087][ T5645] syzkaller #0 Not tainted [ 773.213572][ T5645] ------------------------------------------------------ [ 773.220603][ T5645] kworker/u9:6/5645 is trying to acquire lock: [ 773.226771][ T5645] ffff88807a13c360 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 773.236017][ T5645] [ 773.236017][ T5645] but task is already holding lock: [ 773.243394][ T5645] ffff8880371a3668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40 [ 773.252375][ T5645] [ 773.252375][ T5645] which lock already depends on the new lock. [ 773.252375][ T5645] [ 773.262788][ T5645] [ 773.262788][ T5645] the existing dependency chain (in reverse order) is: [ 773.271821][ T5645] [ 773.271821][ T5645] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 773.279525][ T5645] __mutex_lock+0x1a3/0x1550 [ 773.284659][ T5645] nbd_queue_rq+0x37b/0x1100 [ 773.289786][ T5645] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 773.295874][ T5645] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 773.302745][ T5645] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 773.309264][ T5645] blk_mq_run_hw_queue+0x348/0x4f0 [ 773.314934][ T5645] blk_mq_dispatch_list+0xd16/0xe10 [ 773.320674][ T5645] blk_mq_flush_plug_list+0x48d/0x570 [ 773.326593][ T5645] __blk_flush_plug+0x3ed/0x4d0 [ 773.331993][ T5645] __submit_bio+0x28d/0x580 [ 773.337036][ T5645] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 773.343218][ T5645] block_read_full_folio+0x599/0x830 [ 773.349051][ T5645] filemap_read_folio+0x137/0x3b0 [ 773.354624][ T5645] do_read_cache_folio+0x358/0x590 [ 773.360275][ T5645] read_part_sector+0xb6/0x2b0 [ 773.365577][ T5645] adfspart_check_ICS+0xb1/0x960 [ 773.371054][ T5645] bdev_disk_changed+0x817/0x1770 [ 773.376621][ T5645] blkdev_get_whole+0x380/0x510 [ 773.382019][ T5645] bdev_open+0x31e/0xd30 [ 773.386801][ T5645] blkdev_open+0x470/0x610 [ 773.391745][ T5645] do_dentry_open+0x785/0x14e0 [ 773.397047][ T5645] vfs_open+0x3b/0x340 [ 773.401660][ T5645] path_openat+0x2e08/0x3860 [ 773.406783][ T5645] do_file_open+0x23e/0x4a0 [ 773.411821][ T5645] do_sys_openat2+0x113/0x200 [ 773.417031][ T5645] __x64_sys_openat+0x138/0x170 [ 773.422416][ T5645] do_syscall_64+0x15f/0xf80 [ 773.427541][ T5645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.433970][ T5645] [ 773.433970][ T5645] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 773.441202][ T5645] __mutex_lock+0x1a3/0x1550 [ 773.446328][ T5645] nbd_queue_rq+0xc6/0x1100 [ 773.451375][ T5645] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 773.457465][ T5645] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 773.464339][ T5645] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 773.470865][ T5645] blk_mq_run_hw_queue+0x348/0x4f0 [ 773.476611][ T5645] blk_mq_dispatch_list+0xd16/0xe10 [ 773.482361][ T5645] blk_mq_flush_plug_list+0x48d/0x570 [ 773.488277][ T5645] __blk_flush_plug+0x3ed/0x4d0 [ 773.493670][ T5645] __submit_bio+0x28d/0x580 [ 773.498705][ T5645] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 773.504880][ T5645] block_read_full_folio+0x599/0x830 [ 773.510690][ T5645] filemap_read_folio+0x137/0x3b0 [ 773.516251][ T5645] do_read_cache_folio+0x358/0x590 [ 773.521910][ T5645] read_part_sector+0xb6/0x2b0 [ 773.527212][ T5645] adfspart_check_ICS+0xb1/0x960 [ 773.532698][ T5645] bdev_disk_changed+0x817/0x1770 [ 773.538261][ T5645] blkdev_get_whole+0x380/0x510 [ 773.543658][ T5645] bdev_open+0x31e/0xd30 [ 773.548448][ T5645] blkdev_open+0x470/0x610 [ 773.553397][ T5645] do_dentry_open+0x785/0x14e0 [ 773.558699][ T5645] vfs_open+0x3b/0x340 [ 773.563308][ T5645] path_openat+0x2e08/0x3860 [ 773.568437][ T5645] do_file_open+0x23e/0x4a0 [ 773.573486][ T5645] do_sys_openat2+0x113/0x200 [ 773.578697][ T5645] __x64_sys_openat+0x138/0x170 [ 773.584093][ T5645] do_syscall_64+0x15f/0xf80 [ 773.589230][ T5645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.595779][ T5645] [ 773.595779][ T5645] -> #4 (set->srcu){.+.+}-{0:0}: [ 773.602950][ T5645] __synchronize_srcu+0xca/0x300 [ 773.608446][ T5645] elevator_switch+0x1e8/0x7a0 [ 773.613768][ T5645] elevator_change+0x2cc/0x450 [ 773.619081][ T5645] elevator_set_default+0x36c/0x430 [ 773.624825][ T5645] blk_register_queue+0x3e9/0x4e0 [ 773.630394][ T5645] __add_disk+0x677/0xd50 [ 773.635288][ T5645] add_disk_fwnode+0xfb/0x480 [ 773.640505][ T5645] nbd_dev_add+0x72c/0xb50 [ 773.645458][ T5645] nbd_init+0x168/0x1f0 [ 773.650159][ T5645] do_one_initcall+0x250/0x870 [ 773.655466][ T5645] do_initcall_level+0x104/0x190 [ 773.660947][ T5645] do_initcalls+0x59/0xa0 [ 773.665821][ T5645] kernel_init_freeable+0x2a6/0x3e0 [ 773.671563][ T5645] kernel_init+0x1d/0x1d0 [ 773.676437][ T5645] ret_from_fork+0x514/0xb70 [ 773.681587][ T5645] ret_from_fork_asm+0x1a/0x30 [ 773.686910][ T5645] [ 773.686910][ T5645] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 773.694772][ T5645] __mutex_lock+0x1a3/0x1550 [ 773.699912][ T5645] elevator_change+0x1b3/0x450 [ 773.705234][ T5645] elevator_set_none+0xb5/0x140 [ 773.710632][ T5645] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 773.716980][ T5645] nbd_start_device+0x17f/0xb10 [ 773.722451][ T5645] nbd_genl_connect+0x165b/0x1cf0 [ 773.728009][ T5645] genl_family_rcv_msg_doit+0x22a/0x330 [ 773.734091][ T5645] genl_rcv_msg+0x61c/0x7a0 [ 773.739133][ T5645] netlink_rcv_skb+0x232/0x4b0 [ 773.744451][ T5645] genl_rcv+0x28/0x40 [ 773.748976][ T5645] netlink_unicast+0x75c/0x8e0 [ 773.754286][ T5645] netlink_sendmsg+0x813/0xb40 [ 773.759593][ T5645] ____sys_sendmsg+0x972/0x9f0 [ 773.764994][ T5645] ___sys_sendmsg+0x2a5/0x360 [ 773.770223][ T5645] __x64_sys_sendmsg+0x1bd/0x2a0 [ 773.775702][ T5645] do_syscall_64+0x15f/0xf80 [ 773.780835][ T5645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.787296][ T5645] [ 773.787296][ T5645] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 773.795946][ T5645] blk_alloc_queue+0x546/0x680 [ 773.801354][ T5645] __blk_mq_alloc_disk+0x197/0x390 [ 773.807035][ T5645] nbd_dev_add+0x499/0xb50 [ 773.811992][ T5645] nbd_init+0x168/0x1f0 [ 773.816687][ T5645] do_one_initcall+0x250/0x870 [ 773.821993][ T5645] do_initcall_level+0x104/0x190 [ 773.827491][ T5645] do_initcalls+0x59/0xa0 [ 773.832367][ T5645] kernel_init_freeable+0x2a6/0x3e0 [ 773.838191][ T5645] kernel_init+0x1d/0x1d0 [ 773.843068][ T5645] ret_from_fork+0x514/0xb70 [ 773.848198][ T5645] ret_from_fork_asm+0x1a/0x30 [ 773.853500][ T5645] [ 773.853500][ T5645] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 773.860734][ T5645] fs_reclaim_acquire+0x71/0x100 [ 773.866233][ T5645] __kmalloc_cache_noprof+0x40/0x660 [ 773.872061][ T5645] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 773.877834][ T5645] mptcp_sendmsg_fastopen+0x17d/0x580 [ 773.883739][ T5645] mptcp_sendmsg+0x1b0c/0x1dc0 [ 773.889048][ T5645] ____sys_sendmsg+0x80a/0x9f0 [ 773.894363][ T5645] ___sys_sendmsg+0x2a5/0x360 [ 773.899590][ T5645] __x64_sys_sendmsg+0x1bd/0x2a0 [ 773.905074][ T5645] do_syscall_64+0x15f/0xf80 [ 773.910217][ T5645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.916643][ T5645] [ 773.916643][ T5645] -> #0 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 773.924480][ T5645] __lock_acquire+0x15a5/0x2cf0 [ 773.929872][ T5645] lock_acquire+0x106/0x350 [ 773.934910][ T5645] lock_sock_nested+0x41/0x100 [ 773.940218][ T5645] inet_shutdown+0x6a/0x390 [ 773.945255][ T5645] nbd_mark_nsock_dead+0x2e9/0x560 [ 773.950908][ T5645] recv_work+0x1c2e/0x1d40 [ 773.955897][ T5645] process_scheduled_works+0xb5d/0x1860 [ 773.961978][ T5645] worker_thread+0xa53/0xfc0 [ 773.967106][ T5645] kthread+0x388/0x470 [ 773.971718][ T5645] ret_from_fork+0x514/0xb70 [ 773.976937][ T5645] ret_from_fork_asm+0x1a/0x30 [ 773.982238][ T5645] [ 773.982238][ T5645] other info that might help us debug this: [ 773.982238][ T5645] [ 773.992491][ T5645] Chain exists of: [ 773.992491][ T5645] k-sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 773.992491][ T5645] [ 774.005299][ T5645] Possible unsafe locking scenario: [ 774.005299][ T5645] [ 774.012771][ T5645] CPU0 CPU1 [ 774.018161][ T5645] ---- ---- [ 774.023542][ T5645] lock(&nsock->tx_lock); [ 774.028076][ T5645] lock(&cmd->lock); [ 774.034612][ T5645] lock(&nsock->tx_lock); [ 774.041575][ T5645] lock(k-sk_lock-AF_INET); [ 774.046265][ T5645] [ 774.046265][ T5645] *** DEADLOCK *** [ 774.046265][ T5645] [ 774.054416][ T5645] 3 locks held by kworker/u9:6/5645: [ 774.059707][ T5645] #0: ffff888027812940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 774.070974][ T5645] #1: ffffc900046dfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 774.082850][ T5645] #2: ffff8880371a3668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1c19/0x1d40 [ 774.092192][ T5645] [ 774.092192][ T5645] stack backtrace: [ 774.098105][ T5645] CPU: 0 UID: 0 PID: 5645 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 774.098130][ T5645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 774.098143][ T5645] Workqueue: nbd0-recv recv_work [ 774.098168][ T5645] Call Trace: [ 774.098176][ T5645] [ 774.098185][ T5645] dump_stack_lvl+0xe8/0x150 [ 774.098206][ T5645] print_circular_bug+0x2e1/0x300 [ 774.098232][ T5645] check_noncircular+0x12e/0x150 [ 774.098258][ T5645] __lock_acquire+0x15a5/0x2cf0 [ 774.098282][ T5645] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 774.098314][ T5645] ? try_to_wake_up+0x7f2/0x1380 [ 774.098343][ T5645] ? inet_shutdown+0x6a/0x390 [ 774.098360][ T5645] lock_acquire+0x106/0x350 [ 774.098377][ T5645] ? inet_shutdown+0x6a/0x390 [ 774.098396][ T5645] ? __queue_work+0xc42/0xfc0 [ 774.098418][ T5645] lock_sock_nested+0x41/0x100 [ 774.098439][ T5645] ? inet_shutdown+0x6a/0x390 [ 774.098457][ T5645] inet_shutdown+0x6a/0x390 [ 774.098476][ T5645] nbd_mark_nsock_dead+0x2e9/0x560 [ 774.098498][ T5645] recv_work+0x1c2e/0x1d40 [ 774.098518][ T5645] ? ktime_get+0x45/0x220 [ 774.098545][ T5645] ? look_up_lock_class+0x57/0x110 [ 774.098564][ T5645] ? register_lock_class+0x31/0x2e0 [ 774.098589][ T5645] ? __pfx_recv_work+0x10/0x10 [ 774.098609][ T5645] ? do_raw_spin_lock+0x12b/0x2f0 [ 774.098633][ T5645] ? lock_acquire+0x106/0x350 [ 774.098651][ T5645] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 774.098677][ T5645] ? process_scheduled_works+0xa70/0x1860 [ 774.098699][ T5645] ? process_scheduled_works+0xa70/0x1860 [ 774.098716][ T5645] ? process_scheduled_works+0xa70/0x1860 [ 774.098734][ T5645] process_scheduled_works+0xb5d/0x1860 [ 774.098766][ T5645] ? __pfx_process_scheduled_works+0x10/0x10 [ 774.098786][ T5645] ? assign_work+0x3d5/0x5e0 [ 774.098805][ T5645] worker_thread+0xa53/0xfc0 [ 774.098835][ T5645] kthread+0x388/0x470 [ 774.098857][ T5645] ? __pfx_worker_thread+0x10/0x10 [ 774.098874][ T5645] ? __pfx_kthread+0x10/0x10 [ 774.098896][ T5645] ret_from_fork+0x514/0xb70 [ 774.098915][ T5645] ? __pfx_ret_from_fork+0x10/0x10 [ 774.098933][ T5645] ? __switch_to+0xc79/0x1410 [ 774.098959][ T5645] ? __pfx_kthread+0x10/0x10 [ 774.098981][ T5645] ret_from_fork_asm+0x1a/0x30 [ 774.099009][ T5645] [ 774.234649][T24493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4537'. [ 774.300896][T24494] netlink: 'syz.3.4537': attribute type 1 has an invalid length. [ 774.308317][T24493] netlink: 'syz.3.4537': attribute type 1 has an invalid length. [ 776.347570][T12285] net_ratelimit: 9 callbacks suppressed [ 776.347590][T12285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.361547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.307541][ T7114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.387573][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.395964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.027769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.428430][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.436763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.467570][T12285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.475904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.549184][T12285] net_ratelimit: 3 callbacks suppressed [ 781.549200][T12285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.563104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.587760][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.596158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog