last executing test programs: 4.280066982s ago: executing program 2 (id=4766): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xfffc, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x20) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000d1fbffff00", "1d1cbe23", "ffba06893bcdc493"}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc9, &(0x7f00000000c0)=""/201, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 4.190198929s ago: executing program 2 (id=4768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540100001900010000000000000000001d01000008000500f880000015010400010000800202000031171e44b2b50e8f0400"], 0x154}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0801000016000104fdfffffffeffffffe0000002000000000000000000000000fe80000000000000000000000000000f000400004e2000000000802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000102000000033000000fc0100000000000000000000000000010400000000000000feffffffffffffff0500000000000000000000000000000003000000000000000000000000000000000000000000000002000000000000000400000000000000000000000000000000000000000000000200000000000000000000100000000003000000feffffff000000000a00050090000000000000000c000000fdffffff05001900330000000800220000000080"], 0x108}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xdc9b, 0x7}, 0x50) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) (rerun: 32) write$cgroup_subtree(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="75ca7fb5"], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="18000000010003", 0x7) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000000000001d00000008000300", @ANYRES32=r6, @ANYBLOB="30002f800c00020000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000010000000180001801400fbff766c616e31000000000000000000000008000800000000000800070000000000"], 0x3c}}, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r10, 0x0, 0xd, &(0x7f0000000100)="dc4764d7", 0x4) (async) setsockopt$inet_opts(r10, 0x0, 0xc, &(0x7f00000000c0)="e0", 0x1) (async) getsockopt$inet_opts(r10, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "000000000000a5c3e0bf000000"}]}, 0x28}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3.975523437s ago: executing program 2 (id=4771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4", 0xc5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x58, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8008081) 3.795222558s ago: executing program 2 (id=4775): ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0xfffffffffffeffff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x9}, @IFLA_LINKMODE={0x5, 0x11, 0x8e}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 3.78177687s ago: executing program 4 (id=4776): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000000015af28310000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x20, 0x5, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xd}, {0xa, 0xffed}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xf, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0xfffffffb}}}}]}, 0x58}}, 0x20040084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="30f5ffff1c000100000c00060000e20800000000b65e40f194d56fce5647b8e5ed61a7f6cc5067632f6388", @ANYRES32=r5, @ANYBLOB="400096b2904f5000aaaaaaaaaa0c00000640050003000000", @ANYRESHEX=r1, @ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="952beebba1e8914b49eab27b6380e1c04754e4bb2ed9a0ab20bab051504885a8553a4dac9b6b2d7ed067745593ca4d1cbcf69dcbb052977626dc76dedfb971af88dc7936eb5281f20bc19f5ac529d531517686090904ee380fe5d4a335e42e8626e8fb68f201cdd7eebfe71be9f3b93c03d2377e9689ca10f45a35890c314ca63e0c44b6601cbd6d96019667fd0f32a2bed7a5dc4fa969af4db5bbf7403286fe617a5a02dbf7ba7877fa315b2164f9836d44287b207a2209857cc5ecb39f4f8c328d4d376e51ed229c7196"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x4, 0x4d5, 0x3, 0x81, 0x8000, r1, 0x860, '\x00', r5, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @value=r2}, 0x50) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)=0x80000001, 0x4) listen(r0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000160001000000000000080000190000001800ca9514000180e0c364b6f371cad21b0bfd2f17736c06"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x2194362b35d5d3c3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2001}, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f, 0x7, 0x6, 0x0, 0x2, 0x81000004, r11}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1707000000000000040000000000000000000700", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd53}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f00000003c0)=0x392, 0x4) sendfile(r6, r0, 0x0, 0x9) 3.647035105s ago: executing program 2 (id=4778): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map, r0, 0x37, 0x2038}, 0x20) socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x17}, @TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffff9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r8, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r7, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x51, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x700, 0x7, 0x10, 0x10001}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) 3.569534467s ago: executing program 4 (id=4779): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0600000014000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="529e248652b20e1a5951e554e13d89fcf8a981a12a51811050c20b5527563327a29c9ba970799e2f02d5f8c9efb725c0d5277e92b77e9b5124c675f049e5ba2ed92a5f6b9afead8222a8587a91", @ANYRES64=0x0], 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfefbfff, 0x1000, 0x5, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) r4 = socket$inet(0x2, 0x3, 0x9) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x1, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x8, [{@multicast1, 0x9}]}]}}}], 0x20}, 0x24000800) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000014) 3.219480571s ago: executing program 1 (id=4781): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000670000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800f04000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x6, 0x6, 0x7a7abf8faa027e8e, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000670000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800f04000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) (async) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x6, 0x6, 0x7a7abf8faa027e8e, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x0) (async) 3.025499293s ago: executing program 1 (id=4782): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) unshare(0x8040480) socket$inet6_sctp(0xa, 0x5, 0x84) connect$qrtr(r0, &(0x7f0000000240)={0x2a, 0xffffffffffffffff, 0x4000}, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x1}, 0x8) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 2.730552599s ago: executing program 2 (id=4785): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x1, 0x2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x784687b38d901839, &(0x7f0000000100)={@initdev}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r4, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xfffffffffffffd8a, 0x1, [0xb, 0x9, 0x30, 0xc, 0x9, 0x1b, 0xc, 0x3, 0xc, 0x3, 0x18, 0x3, 0x0, 0x1, 0x30, 0xb, 0x36, 0x5, 0x48, 0x48, 0x16, 0xb, 0x24, 0x36, 0x1b, 0x0]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r9 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000001c0)=':', 0x0}, 0x20) sendmsg$inet(r9, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x890b, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0x5, 0x3}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETLINK(r11, 0x400454cd, 0x339) 1.603885838s ago: executing program 3 (id=4794): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r3, 0x1}, &(0x7f0000000140)=0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000101010100000000000000000a000401180001801400018006d60100e000000208000200e00000010c0019800800010001"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20048000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x71, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, 0x0, 0x0, 0x28, 0x0, "e541bd3d3aa6a0bf75e9671e8aa4b31c134f3a9db8f52e7300fe6e079f35ac2318dc045b4b9f54061f9f15abd9fd7e5550345bce05c13ed90158fbdeb70322ea3188f81890e3d200"}, 0xd8) listen(r7, 0x7c2) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100060808004149014006040800", 0x58}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@mpls_delroute={0x30, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_VIA={0x5, 0x12, {0x29, "498eb9b3372d0000000000004000"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.119945151s ago: executing program 0 (id=4797): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000040a0500000000000000000007000004eab563baeb34c6ee8f8d91a63adb20b6a515c6201dea7483cb9a8eefcf0b0988537bda03e492c76bbbc490237bffc1d5791c8ab7fb2179597511c8864228830b0286ab9370e4dedbbeac97"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x7c}}, 0x20064440) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=r4, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x6000c084) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCGMRU(r6, 0x80047453, &(0x7f0000000200)) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'bond0\x00', 0x20}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000b}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000000000050000083c"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, 0x0, 0x1}, 0x1c}}, 0x24008091) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r9, @ANYBLOB="00012dbd7000ffdbdf258900000008000300", @ANYRES32=r10, @ANYBLOB], 0x25c}, 0x1, 0x0, 0x0, 0x8800}, 0xcdda48e8b32cdd86) ioctl$sock_ifreq(r8, 0x8917, &(0x7f0000000080)={'bridge_slave_1\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) 1.022757561s ago: executing program 1 (id=4798): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x4c080) 902.79118ms ago: executing program 1 (id=4799): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000400)="e09d89cdc2862da7bc9c270ddf312725cf2386aa6cc67d29949a46b8c82c77b00951c2aac4cd1f62edad77f4c937e45973f1590c5f90fb3f196bbef3000ad3e097", 0x41}], 0x1}, 0x20000004) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x24, 0x0, &(0x7f00000000c0)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000002c0)={0x3}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6d}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x82, 0x8}, {0x10, 0x84}], 0x20}, 0x41) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x13, &(0x7f0000000080)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 900.526942ms ago: executing program 4 (id=4800): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x9}}, 0x0, 0x0, 0x6020, 0x0, "bb02a3c344ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(r0, 0x800) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d6188ce88368c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554", 0xba}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{0x0}, {0x0}, {&(0x7f0000001700)="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", 0xfd}], 0x3}}, {{&(0x7f0000001880)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f00000019c0)}}], 0x3, 0x40) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 807.681003ms ago: executing program 0 (id=4801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000004900000226bd6500fcdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="faffffff14000100fe80000000000000000000000000002c14000100fe8000000000000000000000000000bb"], 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x80) socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xf89, 0x8, 0x49}, 0x10) socketpair(0x11, 0x2, 0x8, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0xfd, 0x4}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x6a5f}}, @common=@frag={{0x30}, {[0x2d, 0x200], 0x0, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x2, 0x9c, 0x5, 'syz0\x00', 'syz1\x00', {0x159c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0xfd, 0x4}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x6a5f}}, @common=@frag={{0x30}, {[0x2d, 0x200], 0x0, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x2, 0x9c, 0x5, 'syz0\x00', 'syz1\x00', {0x159c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a", 0xa}], 0x2}, 0x4000000) unshare(0x2c020400) unshare(0x1e030300) (async) unshare(0x1e030300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x40b942b37d0000) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@loopback, @rand_addr=0x64010100, r9}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010270b7357000000925e4a4400000000", @ANYRESDEC=r5, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) 752.383903ms ago: executing program 1 (id=4802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=r0, @ANYRESDEC=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x24000840) (async) getgid() (async) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000001000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6f3ffffb702000008000000b70300000000000885000000a000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x10, &(0x7f0000000040)=""/16, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 721.337628ms ago: executing program 3 (id=4803): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000206010100000000000000000a00000005000400020000000900020073797a32000000002c00078008000640000000da08001340000007ff0800134000001000050015000c00000008001240000000050500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x78}, 0x1, 0x0, 0x0, 0x80820}, 0x80) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req3={0xff, 0x0, 0x3878, 0x2, 0x1, 0x9, 0x6}, 0x1c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40, 0x2200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, 0x40}}, 0x0) 593.968704ms ago: executing program 3 (id=4804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x0, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_NAT={0xac, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40045}, 0x20040001) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x1, 'bridge0\x00', {}, 0xff81}) r1 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000280)) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000002c0)={'raw\x00', 0x7b, "faa2277558d0bdc7b6fa5908e1267f69e22cd6db98931a293862b62ad521d88cc0e190e77dd3dfc61c305f7149c9de2e72193b1fb46469c7b63fd253678a1800fedc3afa0e1aac093e53cbf1e1ed759a6452ad6ab06d2bb6744e155573c921c46447e9c2c7ca1e51435e697978b3e2a7d850146b338ddf3120a80a"}, &(0x7f0000000380)=0x9f) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r0}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x144, r5, 0x20, 0x401, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @private0, 0xa43b}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x7}}}}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x60024184}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x4}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x48c0}, 0x4840) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000640)={0x1, 'ip6tnl0\x00', {}, 0x6}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x2) recvmsg(r0, &(0x7f00000029c0)={&(0x7f0000000680)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000700)=""/68, 0x44}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000880)=""/92, 0x5c}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/23, 0x17}], 0x5, &(0x7f00000019c0)=""/4096, 0x1000}, 0x80010121) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000002a00)={0x2, 0x4, 0x3}) bind$netlink(r7, &(0x7f0000002a40)={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000002a80)={{r6}, "fdb97676a178a06478bbee13a2747640e7f45177322d407329fb68f45e394ae9b1223f3b17cd675874048b3ba04527cd677d27377612830cbfa93ab91f2b9cfbdea7c07872293dfab49efc413bd261c54794b787f0e5e66b179b0bfc536fc3971d23a88debf08626b23cf4934f8511b8bbf50c7b320fc887fa345bd33ea856d8912916e7faef8f82afaedb980b1467eb53a7f498f3763a5d70443ed67904db4f669674f47d17cfa4546ecdedf4d167524f8c9ac37f9f8740b27a375db5f49ec979f7b31827182db126828f027259abb08326943a0193970eb7a210f2c8bf6b5fba71216af980a6c57ce5d1cb91a50fe75c8583a1ee3a5c77ab752fd5364fae34e21642d70c4ad31bdc44a9c2e99c557c78632b87e45df11af06cd08359f0ba9fe18643aba2433f8934d0fb02536c4958daec5e697ad3bdaad6a5df33cde0f5dbb1a32dc376c9159cc030f9957d674a27ff3a0d196472383232886d1d50f1a15519e28cebba4962d894b82e53654eaa4b71068d0a44d539d43d9fc6e44653cbc97bab825c3774b0207e54ea0df786a456c0b987d4f067c5fc5d48df4ce8de89e1390ffc10f140365f5f4c7dc90053cb8411229b09f4073051a07e71031e784d0f948c79f754fcd41364b57aa0efb1ea26041a0698263f52a35572a7eacd3677ebbf03d3ee3f9a64ea6a9fa476f8a0fd913730b770c38fb20788a29e15f6e986ff13b89b97ab820374272164b2c094f071e6e0be0eab6ae375565ab0c5ee7a6c178d679dc5acf6b3b5c352019e0c134a5f447cc8b97c26240f98ac7254a594a0d8d1ad54706f5022c9168c39700534417d1c56c06e4733f0f77c90d2a8628a7947e076b1ae9104d7b0ed209b1091c63289496a5abf19fbbc8bd4fcad8d8daf375b6eb142a4d8ab2dadd8c9da672a6d213346a2e2f96fba8070cab80e0939938182fe8132fafe2e61799a5a891b1e4aa4d075f196ecf5d8ab4dfa6a48d038c3ebe8a7baaf87fa7a2ee28e9412c18830300805a108ac071c83ce47c089b84845897c4f1a010188b6c10252300ab2ff3522cb92b49bc7647af8d52ea9761e7bd3f06327ab25358792330675558f92e75e3cd68bad7b1b3733c3b5ee5f7f1aa75f5d6a689af8e527d81b09f8e65d231e9a2aef3d21a19e5844046b57d345c95d787304d065e7c23a22eca1f46a7803fab47cfc5d544f42aaccc7cd3e46616fc0b46923935e2ecdb81b4ecc3c2552bb44b707f2aa0cfd950b821fc71dbea3f4004c6613108d16fd035884f05ccfff01f9d6081148cd1abc7795550452b8fda8471f49d3d7746658c2845640a0c34e8b7183bb80bd0b9a966c376094020877da0cc0a0bdb302dd513558b03f0529beae1fe30f5def35c4f35d334e6c825479591554faabb387fd3f20b83d012332ce813eec9c4936d7eff2684eb21f4a327df39088175cda8ec48c079ad95721ac73767246570285c3b41a3cb8e4d485e759ae0b346dd16205a5d0170b46286b68ff6ecb918562846f331e257a7c717b9fd02b599685eaf2110fe139bd2e6f0afc493d6a5a09aa3588d6aa51ed29744393806fed80b490b4f9ebfac5ad40eeefa2f92204b1265004516dd9379b90a527ecea4136b0cf945948d1aa8bbf38e21a1f5cb0084aabab90d847922327681d9dce23a49599aedabe9c3d890c9a5e6b908c2802dd899d652a97e2ad8cb37cd3d0736bb016ebcb9bf66eb92c9b43e74eb49d1808a13e4ae9270dc2f64cf2e3843cb3b74b5e563f7e0e32da9c9f8be127355cbba4c63687414e95806cfaa12807ba313b0714c06f9aca68d1ee20cac84d79d44d9b3e35588c4e707aba65b2e8d4c26a7dac3a5d2fffbc344aae946a9a726897a9e1df3b3c73726bb1adec9bd98ee8f42148b3540ed47c8570bcd4e77ccea28651d0607c61189e8dd8745b31935c18801bc5115bbd31555abd5e3d85f39fcad32668cd2956403e3014232d88632e4e6ebca081611b8eeafc3795b253a4888b850f09db609f0db6fbe62aee902b8fb660e8ba287c4f7c11779b81b40fc85d8816d21d5911950c2e0ddfe755d4679cb2f2fbe9b746ac30c458659ac8da80b8f8232eaf681ede76a8f403c5aeba0b050c5892185508525a773e0ac54fd1e23f533cb4b0216668874b28ef5132f48f34df320503c4100a5eb5b4ee43f151e2c9ca08bdad8bd0402ca665ff3d25805eca55f1af5a5cdef20b8f2bc2b01215f2edfe80189c8f4aba1f358128a7e1e3d61cc7e2f0be36d9e7f0fa70abd265299dfdc0b6756034509e44ab6c78d90a8706c7001f7ae25877d93ba6631ae00f3589b5098cf78d0c695d42f40975fa16215979872382319c3bfab945e3002c2e74b0ce964ddc873106c3a0fe1e1b5c0f2ec520275cb0699f614a911ec6dc1fe81cff368c009d531431268504e721ec6ede840cf00885bf9e0ea14a051a08a49595c3573fab14009add96b18232329d35597fa7a4e364646038b337be7a9e8f85e79d262469089b6301b3e233bed12eedb7ee800e77e1494acf40262489b2fcec91601fc00835e28c617634f698617af66d24b33c35b9d398566b369b60919a810dcf13676efa5098a6c81a1952210ea2f69a2fa0b5cc76f3cfc9c8510f1ec732c30b0c798386b7f5be1b35857bdda5748e31572efcbe8a20a4eb69ad7d5a98a4d2d4809c4ebbb817b10427ac211d7f92f80a4b1f863832ea3b691a773eb70a65b193c2113005616cd9ae6d24f790edc8080399c3b89590dc3fdb40266fdbf0448cfd67a7792c10e60079e91ff73a37517c7918b7a8c5afaed1627ce0c2465e72627d4edf167153e9f54edf7a1a3d362df9c411c6fb4b9561b66c81aebac7e4f1dae10a2db4ed40c5ff456932a5a48d1fb17753860d243017b37dc559ce3f863eb5157697e0943a5be0dc6f34037008d0532e1211bcf1ed2939923a8c5c322a5576261dd76be522f276cd142b9e2640558c12dc6bfa874f58eb013f58231771df8536ee6b5566eddd5b5714f1406151bcc1f7eb3f7e864ac8001cd0ea74becef75757fb60eca9495a60d091ceacba8019039d2a714ba8179709bd94536ed2309585e508cc3823c87ca55b9e9ca0e699ee3ccd5ba402ef3b3b54c9a9decfcaf6176505c4503818cae17a8486ac9e49e5784a53fe86215b8587bf3b1f4c39d74a6cda3183a4ae35d1180c14578555bc5c80cbdb047161480d8ee4ae94c37b466babdec75a5fa3837d9c24566ba0c917d713b6fa0967dd1d8ca11091642f0fc58daa1fe70353246038623e3881ac7bbbae64c2c2057f1da03248fd2ae2893da8069d93ab6dbd26bc8ccbbfea156dbff96883d41eca013cd0455aa5ae8c8eca2dab27f2b336467496eb500cce34fd29510428ce0644654d9eb0bd1e827b9da33c4de21ce1b7f4746112ab3e3413684cefb53c1b0a94311ac042a0c6976bf260473c8de81605986b9c41be5f24d6e6747c75272fb586be98af1697456eacaeba68195df94847de2bb9e4f9568a4f25bb753f8448bd34c00ec3396ecce332040736edb84ccbef4c41da73368ce6e8416ab96a427625510adde0200d82268b953d5f220d148dec3576c3b5e73d52d38c54680f74af778b13f53360bd77647cda7bba5b63101da18293ed038d1af9b05c6a46160924379eab19d30f0ac5ba1844f3da2d10e210a11cf0708a2897dda5fcc673d5ff61a4716909bc1d42384199cf34a3ea4265df4b7eee7c9545a00ee13132574d5c9e4639436aa4ad9ecdd128023db08fba3e449d25f987fa909a8db67e0eab0da1102ef374e6618a4c3e79c16f9b76442c6239e1ff173cb2b96ddac30a18a09cc99fc582ff20bbf42cbf9f7dfafde65cfa5d1d20db24868c72ee5a60ed0f0b24db54e587c6647582e4162774c4e38a6c96db441e206a581e9a3f5eb1dfbf8750f055773d3bf559717df3203956139b4ef0287ff28a2ea55dc56821c22b7cd74d5edb6f32ee24b1fe09b1e630a3574a7f747973c7c42bbf15da42fe111a236132a6b60fa3c3de1875c2c93a45ea33b4b3f13ba7dc4de1eaec1b1e1c3f6e004f5bf8ece6810365feff6ed62ca12043321fb3c7bc0414ed86584298a3e162e60bb6a13d6e46299c7b1ea6d6043df0f6c0016c44a2995da4a207ebd74f7ea4bdeb14517c43c4bbc62cd0f7bb7c17f3261549a04c7dec1930722d4a3753e6806803fa184b2d3a1dd05d965768f9688d38c3c88f7cd50bf6950b0c01faf39ca74b020e2a01a2836d7ad544abf469f8032a5cee40bc0cd9fc277721c0192990c0b399c688a1707638e0adf8e431ab501226fb1439075a10a9d73617d1a1ca06aed388c27da5af3d8a39443da23415cf7d93953446a6224d5da809aa5594000beb1896cec832ad34d687642ee1bd7402185111197f71a65be59d514f01a9b17bb0a39ef72a178cb2b92e01f86e42aab27dcd225d6f86d81cf8c71ae53cc1aab8f58952a7ce2b52cff9484d44cfa7147e5c1d426ec7bedef1da179f08389f8760a7370dca26a4e24eb331b3accca6f093717eebfcf6611e60b42b505468d56178de67fc14ab45bee7f5d54eb4658bd0221b24534660f897ac289a65a23665492b9be4862067d5b619759b43a9dad223f6da57dbbc4c6f9ec77df57566de39aae807af37fdfe6faf80bf5eb2c35f3ada992b37f7c629c1826f8d75926766bff5b668b3c3c4b4fe895a3064cc63d6701ec403942f83209bc68b6211c6b72bfd9402de89b770892c2ee8b2d22aeec17c08c5ef75852daa0c50ce9f2ea5fe6e3f6f53c1a0a2016ff6aee2503e0fce4322e3078f4bf28e1fa90916e05f8bc6619005d52e551a8138deb8c740a9c6239623f14d0f3f09c72041f316fbb95d2786ceb82fa2bd50e825d662a2cff28c62d273e572945ceafe05ce80302f9e1ecfcbe9e65e94c1dae3e8dde322c5b22bbf2b947682bc1186b0db6849d2d47c2d904d086c330926daf483cf3ec048a4b80c793ba33a225ce6f264096f14bd18a22f812950c7b4c66b2c3990335a8eaac66d215a509e0f1cf9d74a7c5bc8b1318bfcfbb2215b022f31101156fca03fea0ceacf602882ef2c7b5241890980f03b70cd5eca0dc61006a35984c21e3306375571ab95f5982d3b77f82d96052a1029f4eb07ea0dc978893c0dce1a8289ae4c268a301a908279bcb4db09ca0657b98756e06f0d2892da170e7033cfe79450259c2dfb765f8369c38a61275b2c157049541bb7972fdc66a60ed1f9ce76c99e60e83fe5fad0d180b3d7cf5acc32484020428e0c83ee96163253141692803a5e31968c11759b632bb71e4969c1f9dbe9e0986780d64c6b0b0eb854db2e38431b21c0fd376287c8504c95a2b362c019d8e8adf1ab019c4b7130260d974758224570c46fd571bdc2459fc2618e58f1e785defe2e4283d32e050c30a51d0863519effe6f088cbd53c7f56759208a902253aa58d4350198bc467754de227f7a37e1b33e54a9f81c1e71debc2f0c8238a9c297b9d33ab567efc4864387667dc17c588c3ed5426e2843900704f65cf508a10fe41b38d4a25d1f9353c8168da922537bc85ea2d508ed22c260a9b2e0bf95a49a516dcc72b8f793e0c2134148d5543dee89b371598c05c1e52ebd3b9dd4a9c15f8435f567f554d927222b547c608ae83864fee85b1ef8b7ee108c073be1fa96099e9f8f71d174bc9b84638562822893985b0032f8a71245cab14d5d996ce4534fc794946ccf0912986a134bb791504900b654b7f64917330a75b2f2cdb187787c0633f9058bbcf52831f83aa3f727ab7"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003b00)={{r1, 0xffffffffffffffff}, &(0x7f0000003a80), &(0x7f0000003ac0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003d80)={{0x1, 0xffffffffffffffff}, &(0x7f0000003d00), &(0x7f0000003d40)}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003dc0)={0x0, 0x7}, 0xc) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003e80)={0x18, 0x8, &(0x7f0000003b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0xd, 0x7, 0xb, 0xc, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000003b80)='GPL\x00', 0x3, 0x81, &(0x7f0000003bc0)=""/129, 0x41100, 0x22, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003c80)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000003cc0)={0x4, 0x4, 0x8, 0x8000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003e00)=[r9, r10, r6], &(0x7f0000003e40)=[{0x0, 0x5, 0xa, 0xa}, {0x4, 0x2, 0x1, 0xb}], 0x10, 0x40}, 0x94) recvmsg(r6, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000003f40)=""/53, 0x35}, {&(0x7f0000003f80)=""/183, 0xb7}, {&(0x7f0000004040)=""/98, 0x62}, {&(0x7f00000040c0)=""/87, 0x57}], 0x4, &(0x7f0000004180)=""/185, 0xb9}, 0x2000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000004280)={0x0, 'veth1_to_bridge\x00', {0x2}, 0x7fff}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000004340)=@nat={'nat\x00', 0x1b, 0x5, 0x740, 0x0, 0x2e8, 0xffffffff, 0x0, 0x2e8, 0x670, 0x670, 0xffffffff, 0x670, 0x670, 0x5, &(0x7f00000042c0), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xffffffff], 'bridge_slave_1\x00', 'netdevsim0\x00', {0xff}, {}, 0xc, 0x21, 0x1, 0x26}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x7ff, 0x6, 0x2}}, @common=@srh1={{0x90}, {0x5e, 0x8, 0x7, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x3e}, [0xffffff00, 0xff, 0x7fffff80, 0xff], [0x807fffff, 0xff, 0x0, 0xff], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 0x120, 0x1028}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@rand_addr=' \x01\x00', @gre_key=0x10, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x3, 0x0, [0x401, 0x5b, 0x2, 0xfff7, 0x3, 0xf, 0x5, 0x0, 0x0, 0x8, 0x1, 0x9, 0x837, 0x2, 0x7fff, 0x5], 0x6}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv4=@rand_addr=0x64010100, @ipv6=@empty, @gre_key=0x8, @port=0x4e23}}}, {{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x0, 0x0, [0x1, 0x7, 0x6, 0x8, 0x7, 0x2, 0x74, 0x100, 0x3, 0x5dbe, 0x68, 0x100, 0x3, 0x0, 0xd, 0x8000], 0xf}}, @common=@rt={{0x138}, {0xb76, [0x2, 0x9], 0x18, 0x10, 0x5, [@mcast2, @empty, @remote, @remote, @private2, @private2, @private1, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @dev={0xfe, 0x80, '\x00', 0x34}, @empty, @empty, @remote, @local, @mcast1], 0x6}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@multicast1, @gre_key=0x5, @gre_key=0x81}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"9091", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key=0x5, @gre_key=0xf3f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000004b00)={'wg1\x00'}) ioctl$FIOCLEX(r11, 0x5451) openat$rfkill(0xffffffffffffff9c, &(0x7f0000004b40), 0x40202, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000004b80)={0xfffffffc, 0xfffffff8, 0x7, 0x9}, 0x10) 569.819201ms ago: executing program 1 (id=4805): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x75, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500002000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x1, '\x00', r3, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0xffffffffffffffe8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800de4d13e000000000fe00"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x17, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) 563.25605ms ago: executing program 0 (id=4806): syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x4, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x37}}, @redirect={0x5, 0xbfea782ca9645394, 0x0, @remote, {0x5, 0x4, 0x3, 0x3f, 0x505, 0x66, 0x8, 0x48, 0x1, 0x9, @broadcast, @loopback}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000000)='@-\x00', 0x80040, &(0x7f0000000040)={@_ha_fsid={[0x4]}, {0xad7, 0x1, 0x6}}, 0x0, &(0x7f0000000080), &(0x7f0000000140)=0xebb2}, 0x1, &(0x7f0000000200)=[{0x2, 0x1, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="7da89b749b07057841a602d14f1c35c3040e533874", 0x15, 0x2}]}) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000400)) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0xfbfb}, @void, @ipv6=@icmpv6={0x1, 0x6, "ee6fd8", 0xe1, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x3c}, @loopback, {[@routing={0xa302556b6cfc19d4, 0xa, 0x1, 0x8, 0x0, [@mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x19}, @private0, @loopback]}, @dstopts={0x73, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x6}]}, @routing={0x3c, 0xc, 0x1, 0x8, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x65}, @empty, @private1]}], @echo_reply={0x81, 0x0, 0x0, 0x2, 0xd7, "a5"}}}}, 0x10d) 461.948834ms ago: executing program 3 (id=4807): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002b80)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000100)={0x5, @remote}) 461.509042ms ago: executing program 0 (id=4808): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r0, 0x89e0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}, {0x6, 0xfc}]}) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000000c0)) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000540)=0xfff) write$ppp(r1, &(0x7f0000000480)="1e08", 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x80, 0x1, 0x5}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x81}, &(0x7f0000000200)=0x8) 450.36353ms ago: executing program 4 (id=4809): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000800) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000800) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r1 = socket$tipc(0x1e, 0x7, 0x0) r2 = accept4$tipc(r1, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10, 0x800) socket$l2tp6(0xa, 0x2, 0x73) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x7fffffff, @private1, 0xffffffc0, 0x2}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r5, r6, r7}, 0xc) accept4$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000003c0)=0x1c, 0xc00) (async) r8 = accept4$inet6(r3, &(0x7f0000000380)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000003c0)=0x1c, 0xc00) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000400)={0x3, 'veth0_to_hsr\x00', {0x2}, 0x2}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$inet6_buf(r8, 0x29, 0x45, &(0x7f00000004c0)=""/11, &(0x7f0000000500)=0xb) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, &(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000005c0)=0x80, 0x800) (async) r9 = accept4(r0, &(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000005c0)=0x80, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) getsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f00000007c0)={@local, @initdev}, &(0x7f0000000800)=0xc) (async) getsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f00000007c0)={@local, @initdev, 0x0}, &(0x7f0000000800)=0xc) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x10000, 0x0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x5, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd0000000}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='syzkaller\x00', 0x10000, 0x6b, &(0x7f00000009c0)=""/107, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0xc, 0x7fffffff, 0x100}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x0, 0x3, 0x0, 0x1}, {0x4, 0x2, 0x10, 0xb}, {0x4, 0x5, 0x2, 0xb}, {0x1, 0x2, 0x4, 0x1}, {0xf8b, 0x5, 0x0, 0x4}, {0x0, 0x3, 0x1, 0x9}, {0x2, 0x4, 0xd, 0x7}, {0x2, 0x4, 0xe, 0x8}, {0x1, 0x4, 0xe, 0x4}, {0x0, 0x4, 0xd, 0x2}], 0x10, 0x2}, 0x94) (async) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x5, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd0000000}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='syzkaller\x00', 0x10000, 0x6b, &(0x7f00000009c0)=""/107, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0xc, 0x7fffffff, 0x100}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000ac0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x0, 0x3, 0x0, 0x1}, {0x4, 0x2, 0x10, 0xb}, {0x4, 0x5, 0x2, 0xb}, {0x1, 0x2, 0x4, 0x1}, {0xf8b, 0x5, 0x0, 0x4}, {0x0, 0x3, 0x1, 0x9}, {0x2, 0x4, 0xd, 0x7}, {0x2, 0x4, 0xe, 0x8}, {0x1, 0x4, 0xe, 0x4}, {0x0, 0x4, 0xd, 0x2}], 0x10, 0x2}, 0x94) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0xde14, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000f40)={r9, &(0x7f0000000e40)='\x00', 0x1, &(0x7f0000000e80)={@align=0x6, {0x400, 0x9, 0x6, 0x3ff}}, 0x0, &(0x7f0000000ec0)={@_ha_fsid}, &(0x7f0000000f00)=0x2}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000f40)={r9, &(0x7f0000000e40)='\x00', 0x1, &(0x7f0000000e80)={@align=0x6, {0x400, 0x9, 0x6, 0x3ff}}, 0x0, &(0x7f0000000ec0)={@_ha_fsid}, &(0x7f0000000f00)=0x2}) r20 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000fc0)=@o_path={&(0x7f0000000f80)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r21 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001040)=@generic={&(0x7f0000001000)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x13, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @ldst={0x2, 0x1, 0x4, 0x9, 0xb, 0x10, 0xfffffffffffffffc}, @generic={0x6, 0xe, 0x2, 0x6d}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000740)='syzkaller\x00', 0x3, 0x3c, &(0x7f0000000780)=""/60, 0x41100, 0x10, '\x00', r12, @fallback=0x23, r13, 0x8, &(0x7f0000000880)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x6, 0xb, 0xfffffff7}, 0x10, r14, r15, 0x4, &(0x7f0000001080)=[r16, r17, r18, r19, r20, 0xffffffffffffffff, r21], &(0x7f00000010c0)=[{0x5, 0x2, 0x8, 0x1}, {0x4, 0x1, 0x1, 0xb}, {0x1, 0x3, 0xc, 0xc}, {0x4, 0x2, 0x2, 0x3}], 0x10, 0x8}, 0x94) 306.911319ms ago: executing program 3 (id=4810): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@private=0xa010100, @empty, 0xffffffffffffffff, "0f6201bdc45fdec8ab640f1a1597fb23063460ccc94b671103e6e95b9c1913bd", 0x7fffffff, 0x0, 0x6}, 0x3c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e22, @rand_addr=0x64010100}}) ioctl$sock_ifreq(r0, 0x8994, &(0x7f00000000c0)={'veth1_to_hsr\x00', @ifru_flags=0x2000}) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000001540)={&(0x7f0000000100)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000300)=""/146, 0x92}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001440)=""/230, 0xe6}, 0x60002042) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000001580), 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000016c0)={&(0x7f00000015c0), 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x38b40295cc2f014d) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000001700)=0xfffffff8, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000001740)="401e1eb34446c7c8f6009a1074516d37d5bc05bbd39574335450e82d550266b720dc5a9668055b9e1474da976b07065381460b28cc81c9de194e8b5eea0f0690e1d12000f54e473ba5b3f2c9960b858fa9b9d402e78f63f2b3cae04fe8d92f95b52fa667c68d67e4c82d76198541ac7dcbcae44e5de73d585c6a87c7623bb7959514c0ca6ccd5d34c9", 0x89, 0x40800, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001800)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x1, 0x1, 0x401, 0x0, 0x0, {0xd, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x8014) sendmmsg$inet(r2, &(0x7f0000001c80)=[{{&(0x7f00000019c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001a00)="589785eca2607bf3f679755d0b71f6318251607a73eacf7ea350a2bc7754f9fc9c2f7161fc47ec08f8ff5aa1478df54377d1427e0c061c99d27f4f733e13a4a818885265241d4c8b61623e66f89dd0020cdc7eee70d28020c6a2b839a4fc5d980751353af5186a2812e77eb7d9d6e5cbdf60f7c6a5cb9f0ae32d18e5296940b918c1dfaa5b2b0d41d1b7e5e684b3204fb5ecd66deb91d54299a0edb88a45884ea0a562ba72812dedef56dff3d412bf1b6e419d3cd6cf88e721d39b4ac8948690afe7b90e2d926afb55527f1fd64307e55b190093c81dd851cb252aecdd8a", 0xde}, {&(0x7f0000001b00)="dd6181dd190a3252c5aa51c9dcd9d6f50115f98f2c06f5946cc4693270014024b6c043e1a414674a0592afe017cce8a838e76ec6d2f530239de03ceb7255be5ff86be6bb20689a48889effa4b4ad566623f7d39cb4dc821db9c9c66ea4c2be478070c7d8cff6aa92ff196a3954fb133ab9fdfa0d218acd9a1acfb2eb05f3acf70583d645748c06", 0x87}, {&(0x7f0000001bc0)="0b64faad4b3a29fb21733e6768cee420a81bc6b01c573abd8772a4112d5b599655632f0733ddc1ca04203699d46e88f5c81616", 0x33}, {&(0x7f0000001c00)="d7c7a05f3269179095e93b967a8f1e5921772ece37154fdf227b9b9e78e629b1792c", 0x22}], 0x4}}], 0x1, 0xc0c2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001cc0)={0x0, @multicast1, @remote}, &(0x7f0000001d00)=0xc) bind$xdp(r0, &(0x7f0000001d40)={0x2c, 0x0, r5, 0x26}, 0x10) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$inet(r6, &(0x7f0000002a00)=[{{&(0x7f0000001d80)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000002240)=[{&(0x7f0000001dc0)="4561837122febbe5fe9e8ef7c1c1c3a7760fa1f286598875ce7e9c6d2d221ccdcfb1fa625b230d75a31d48b0762846909df38c0a1586b6f4568f4c9660273a5a50ce446e3253aac0a6a05b881481461077db23e23775fe587ff7c115f23056a675aa605ef6497bab8bf7685f47606728856835110a28ed9ab8c98e8e3de3adaaccd46907d71fbc3027ef226dc2fb36aceeed65e618f8", 0x96}, {&(0x7f0000001e80)="3772e05330ba49ce8e38f313976f8f5b6c47385f27365dd954718344c68aa940d12a4e94ed32ad43d379fb29390a40f64d84e8801241313f0578e4d2f17e61e28112250066959732db0e6e49594510f94309e4c202a7a3efa7a3a2c6f2c138e5725d811d508d78e5b626ae5dcf35a3ccbf77e20292b3acb51ba58b577d17bb79c7bc67488ce6ed93549aa50e0d36e9f7ac97a69f7fe8c71f998dd4395125226e324a4fa60b940bfad0638e4b3a3c7737373360feaa2dcc0a30e51057db8c912e6c7251b8371f", 0xc6}, {&(0x7f0000001f80)="4d78a0976e6a3e3b1829af3bb8f5a61a5e0eb45d6d737f28ac45e2641931eef40df7d051a85e6290998539cfe3c6150629641a12d9ba2a3410ac3a5c16065edaf2599310fe72770cacfee657e8ed553388e53f4dc16bb0ceabaea12d0c5705f51a22", 0x62}, {&(0x7f0000002000)}, {&(0x7f0000002040)="763c7cf046c802a602812f07fad44517841ebcee9a36fa551b64f6f4c9460242b37c3d91fc7ed2c8559d8ca37bbc3fc77a1e34a124223e8d1f8acc776cee9894fd6786b2ad3789a02646f7be1b27fba7feb76b4dea3471799ee01ee2f3ad3cc985895bf10637b6784f5345bc4c0771ae81aaf7637bba5803431254d4f9c1b067687a0983a6829d229d83dd35f8cf5caf3e70c12b40722e8ea2080e12c18a30bd6333127cde9537ee55d3d2280c3ce8dba845", 0xb2}, {&(0x7f0000002100)="88a6a07cba32c1d311", 0x9}, {&(0x7f0000002140)="236d29f5b7247bff237e8645feedae27f9ac742a34945a755cb8c5d27f5a86bd252e816d8ee181bc2acf91687d6938219e2f3dfd5e98b5917f2fbbf94c63182ef20f085691bf3b06244a8d36b911bf41b420299a139d6baedaa0ec3722c467844619f39b8923603c335de695907e742207acf7dacb0d0bbc6835fc32d7298600d9466bfffe77af1163505621adc0c2e29154b95ff10a039c4f8001ff12757f8f7ecaad7e2939e95d70d29d44d52e4fef85eff1883812c5e698ad8acd464a7a9244ac9f066a61fba50905160dde340de985ca96fb8b38c3d1", 0xd8}], 0x7, &(0x7f00000022c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x75}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}], 0xa0}}, {{&(0x7f0000002380)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002880)=[{&(0x7f00000023c0)="6bcc38445700eccdd7765d4da8baf02ffa5cc13dfba7b98162d1dae732a378f6c446dc9d2e78740f5d1156293a4486cc33d776f2eb984aaa447b8403f0b019c7d0c9ec79a66257d514bfa330f9f96316b9cf435b590c9c2a73095e95e52ffe95f0fbb6f668e2a5d535a10752c205f392d1b1ff519d526037ff5f", 0x7a}, {&(0x7f0000002440)="62970d84cc577bd6442af99d4c6c64e3797f554d54659be34617e2cb2d16ec705b006863733b29470c0dc498c7e5d1c245f8808571817105a57231756f3878ce852b5e0ac8b96e3ad46c8c8cfd8dedaa486f2db438db79d40a04d776809dc63121eb3824d8202e0f84b26a2b79ac40eeec2c6446c98a051894a9ac552002d483d212", 0x82}, {&(0x7f0000002500)="80558a5a2c7491d150e44c6fc406827adef9cf87bd4f01eaf23ce2dfa84603cc85ce7ae48262c6ad9ee36fd944f4b1f608afaebf404d32cb3a4ce05ec085efb25ebbf1d84771a4f1efaf38850b8e24888ebef901e814fb424011beda7b20408861acd9c245bec9a2475cf37de5901520b6af43cbfad4c744aa5de48240fab71c3e360aaf11a1eb1f881cae1fcd46e724b88e9d9bacae40b73f08ee07d9bb88ab3afa2c62bb3ae97824f1b77d66bcd098706e0071930e9ede32e5cf3af509e4d6c8a21fc56855c2ca299769d888c8ae8acab880af54fc0a56aa0c16e431cc9d87d5204f0259f35c", 0xe7}, {&(0x7f0000002600)="fe44e6d2d1d263ee745afe45aed819b3aa4fe8d16e4be097e44da2923220b7fe5fbb95e31f5e", 0x26}, {&(0x7f0000002640)="182fbdb4944628dbdb43de0009a0ac332174e2fbc1e45caeccb13b", 0x1b}, {&(0x7f0000002680)="98d2636404aa8be1320c900db9a9bd4eebf1f39a57cc61cc6f3c67e6cad04d6d5c3827f9569648cb30e49cff765b5ccde5bfe5cebf8a588fe8cbae09767d02c65c539344a790a48a7a006c74aad6f1bde427b8db58e61e6ee4a26a4f74d12d0e2ace545a561d6f2379cdc8e79e0fd39e5ef0f470c06ee4e73901521d928acc079307c98d2e43470d0a20b51357b8868fd850a646c8b0a531f5eac3ccc7bae42765f47ffd67b44366abf901e50c940506a1fdaba8f14877bb8e8596397f200322b96666e525217352e282ffac49450dfbabfb821e97", 0xd5}, {&(0x7f0000002780)="dcf8a3d06e43efbde53c577e17026a9885838b1aa0acd8cc342e87a5bbbb4281f0704a08f817db8275b637f8ea629988157e9905d614cb12e51c84ce907e57cbd01f38f5548233c267809aa0f077cf3550414e8cf2b151a3f8b7649b8a28e72d189fa9a382f039559c6c7d34d0aa7d9572c873f50c4302d04041d6f50b552e87fa53446025a0dea16ca368050e24206a4f4362f03f262fe8000216c6fe470c1f5bfed8570c269d9297", 0xa9}, {&(0x7f0000002840)="6b02aef5a5137d725e", 0x9}], 0x8, &(0x7f0000002900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5b2c}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@rr={0x7, 0xb, 0xb, [@dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010101]}, @rr={0x7, 0x1f, 0x10, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x2a}]}, @rr={0x7, 0xb, 0xd2, [@loopback, @broadcast]}, @timestamp={0x44, 0x14, 0x38, 0x0, 0x0, [0x7f, 0x80000000, 0x4, 0x5]}, @timestamp={0x44, 0xc, 0x61, 0x0, 0x0, [0x10, 0x7]}, @ssrr={0x89, 0x1b, 0xc6, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}, @multicast1, @local]}, @noop, @timestamp_addr={0x44, 0x24, 0x5b, 0x1, 0x0, [{@loopback, 0x401}, {@empty, 0x8}, {@local, 0x6}, {@private=0xa010101, 0x61f4}]}, @lsrr={0x83, 0xb, 0x82, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x2d, 0x2, [{0x2, 0x6, "c49297c0"}, {0x1, 0xf, "cd749af518fb5c05a46dfbb01d"}, {0x0, 0x12, "612c7c3fa57fc79f8fb1f223e9866f5c"}]}]}}}], 0xf8}}], 0x2, 0x85) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), r2) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x2c, r7, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x8001) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000002bc0)={r4, 0xffffffff}) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002c00)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) poll(&(0x7f0000002c40)=[{r0, 0x4098}, {r8, 0x8000}, {r2, 0x1}], 0x3, 0x81) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002c80)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002e00), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003180)={r4, 0xe0, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000002f00)=[0x0, 0x0], &(0x7f0000002f40)=[0x0], 0x0, 0x91, &(0x7f0000002f80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002fc0), &(0x7f0000003000), 0x8, 0xab, 0x8, 0x8, &(0x7f0000003040)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x7, 0x16, &(0x7f0000002cc0)=@raw=[@map_fd={0x18, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x9, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}], &(0x7f0000002d80)='syzkaller\x00', 0x3ff, 0x34, &(0x7f0000002dc0)=""/52, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, r10, 0x8, &(0x7f0000002e40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002e80)={0x2, 0x6, 0x7, 0x8}, 0x10, r11, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000031c0)=[{0x1, 0x4, 0xf, 0xb}, {0x4, 0x1, 0xa, 0x7}], 0x10, 0x6}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000032c0)=[@in6={0xa, 0x4e23, 0xfffffffb, @private1, 0x4}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x2}, @in6={0xa, 0x4e23, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0xcf, @ipv4={'\x00', '\xff\xff', @local}}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x1ff}], 0xcc) 305.205799ms ago: executing program 0 (id=4811): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_emit_ethernet(0x3b6, &(0x7f0000000880)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x22, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000dd8600000007000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0xe, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f00000001c0)=""/22, 0x16}], 0x2}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000"], 0x1e8}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) socket$inet6(0xa, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) syz_emit_ethernet(0x3b6, &(0x7f0000000880)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x22, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000dd8600000007000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0xe, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) accept4(r1, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f00000001c0)=""/22, 0x16}], 0x2}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000"], 0x1e8}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) (async) 291.866908ms ago: executing program 4 (id=4812): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) listen(r1, 0x3) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000740)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x38, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x38}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc0000001300010100000000000000006401010200000000000000000000000000000000000000000000ffff7f0000010000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000000)=[{r8, 0x400}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) 138.504849ms ago: executing program 0 (id=4813): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001300)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000140)=0x11, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r8) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r8) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000804) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000804) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0xffe0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601fcff00000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000030000000000000000000000bb060004400e1f0000050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44008000}, 0x4000052) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x50, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44008000}, 0x4000052) r11 = socket$inet6(0xa, 0x3, 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="11000000700001002abd70000000000007"], 0x24}}, 0x80) setsockopt$inet6_buf(r11, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r13, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="28000000000000002900000039000000ff02000700000000fe880000000000000000000000000101880000000000000029000000390000003c0e010500000000fc000000000000000000000000000001ff010000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000bbff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000b80000000000000029000000390000000614010b0000000000000000000000000000000000000001fe880000000000000000000000000001fe8000000000000000000000000000aa20010000000000000000000000000002fe88000000000000000000000000000100000000000000000000ffff00000000fc000000000000000000000000000001fe880000000000000000000000000101fe8000000000000000000000000000aafe8000000000000000000000000000bb1400000000000000290000003e0000000400000000000000500000000000000029000000360000009e06000000000000010900000000000000000001000718000000000409090006000000000000000400000000000000c2040000000305026e1a0000000000000058000000000000002900000039000000110802050000000000000000000000000000ffff0a01010120010000000000000000000000000000fe80000000000000000000000000003e000000000000000000000000ff00000028000000000000002900000004000000020100000000000005020001c2040001000000010000000014000000000000002900000008000000050000000000000014"], 0x280}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x6ee, @local, 0x5}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000300)="83", 0x1}], 0x1}}], 0x2, 0x240048d1) setsockopt$inet_sctp6_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000140)={0x10, 0x0, 0xc9, 0x2, 0xb, 0x8, 0x9, 0x4, 0x9, 0x8, 0x9, 0x3, 0xef, 0xb6}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000140)={0x10, 0x0, 0xc9, 0x2, 0xb, 0x8, 0x9, 0x4, 0x9, 0x8, 0x9, 0x3, 0xef, 0xb6}, 0xe) 136.117522ms ago: executing program 4 (id=4814): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r3, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="010000000080000000000800000008000300", @ANYRES32=r5, @ANYBLOB="0600eb000100000006009800090000006c002d800a000000020202020202000005000000320000000a00000002020202020200000a00000002020202020200000a00000001010101010100000a00000001010101010100000a00000002020202020200000a00000001010101010100000a00000001010101010100000600f70008080000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000001100)=ANY=[@ANYBLOB="28100000", @ANYRES16=r2, @ANYBLOB="0400ada3f900080008000000000000000000", @ANYRES32=r5, @ANYBLOB="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"], 0x1028}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa5b1900069078ac4714aa070f0476bc4bf54194f8d64c9e3e260cbfad990444140b01e0009e6200000000e0000001000000000000000300fcb254cc3fad1e687385b300"/86, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000b39000/0x3000)=nil, 0x3000, 0x300000c, 0x810, 0xffffffffffffffff, 0x0) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) r8 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="63bd822e37cfabeb060d39e48100fffffffb00000000010000000c00050063010000000000000c0002000700000000000000", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20040081}, 0x20000000) (async) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c20000debb45e216c58bbcc34208430ebbe8859b9218a0f1aa002800000000000102008314e7fc83008900000d009078ecda3f7655f1aa57c077fcc34ada2c357353a957bb832c20f78ebd92a776d2eeaf35cc7484a3afb551c513d6a28addebb954ef136ef04cba0cb7e6ebfcc320a8e123a3963a429d48a7d84c892ea04ab01d28d1636d53f22b985a7bef1b4242b35c98d67c472ecc4b7714540f82b2abdd3541e88a48d3cfb997d934bada76bfc2fabbe1beff9dfd7d292757c240"], 0x0) r11 = socket(0x10, 0x3, 0x0) (async) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mmap(&(0x7f0000437000/0xe000)=nil, 0xe000, 0x0, 0x4000010, 0xffffffffffffffff, 0xaf3bb000) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newqdisc={0x498, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x468, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c, 0xe}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x20}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x498}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xc4}}, 0x4c050) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 0s ago: executing program 3 (id=4815): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xba, &(0x7f0000000300)=""/186, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, &(0x7f0000000080)="e10c57941dd9abf2b2e38d4926ca39cd89f36ee5706bf7ddfab0e058defade4561bc303b18f3cd6dc5521c838c4c5f3d935615c6d7bec3bbee0168eed22000539f", 0x41, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@ll={0x11, 0x17, r5, 0x1, 0x50, 0x6, @broadcast}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="4f0a4db82c206c944463c55ed4d65b3cc1e5b593", 0x14}], 0x1}}], 0x1, 0x4000054) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) kernel console output (not intermixed with test programs): 41256][T19668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.858318][T19675] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3348'. [ 514.934100][T19668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.126414][T19686] tipc: Enabled bearer , priority 0 [ 515.161143][T19686] syzkaller0: entered promiscuous mode [ 515.167075][T19684] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3350'. [ 515.187415][T19686] syzkaller0: entered allmulticast mode [ 515.230212][T19689] tipc: Resetting bearer [ 515.264369][T19686] tipc: Resetting bearer [ 515.331189][T19686] tipc: Disabling bearer [ 515.694394][T19710] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3357'. [ 515.884174][T19412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.105531][T19412] veth0_vlan: entered promiscuous mode [ 516.161866][T19412] veth1_vlan: entered promiscuous mode [ 516.333453][T19412] veth0_macvtap: entered promiscuous mode [ 516.363609][T19412] veth1_macvtap: entered promiscuous mode [ 516.417475][T19412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.427428][T16101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.427650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.460588][T19742] netlink: 'syz.0.3364': attribute type 3 has an invalid length. [ 516.464911][T19412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.524007][T16100] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.550161][T16100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.589601][T16100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.636838][T16100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.062077][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 517.241713][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.265578][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.445709][ T5954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.480381][ T5954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.512287][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.621251][T19783] netlink: 'syz.2.3375': attribute type 1 has an invalid length. [ 517.853226][T19783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 517.901125][T19786] bond3: (slave geneve2): making interface the new active one [ 517.918379][T19786] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 517.982538][T19789] bridge0: port 3(vlan2) entered blocking state [ 518.012475][T19789] bridge0: port 3(vlan2) entered disabled state [ 518.044219][T19789] vlan2: entered allmulticast mode [ 518.055038][T19789] geneve0: entered allmulticast mode [ 518.077088][T19789] vlan2: entered promiscuous mode [ 518.087766][T19789] geneve0: entered promiscuous mode [ 518.119542][T19793] bridge0: port 3(vlan2) entered blocking state [ 518.126283][T19793] bridge0: port 3(vlan2) entered disabled state [ 518.134163][T19793] vlan2: entered allmulticast mode [ 518.141098][T19793] geneve0: entered allmulticast mode [ 518.151261][T19793] vlan2: entered promiscuous mode [ 518.157932][T19793] geneve0: entered promiscuous mode [ 518.178512][T19792] bridge0: port 4(vlan3) entered blocking state [ 518.189422][T19792] bridge0: port 4(vlan3) entered disabled state [ 518.196327][T19792] vlan3: entered allmulticast mode [ 518.204843][T19792] vlan3: entered promiscuous mode [ 518.231489][T19766] geneve2: entered allmulticast mode [ 518.301733][ T30] audit: type=1107 audit(1777930882.680:11): pid=19805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 518.632438][T19818] veth1_to_team: entered promiscuous mode [ 518.644685][T19818] gretap0: entered promiscuous mode [ 518.663680][T19818] hsr1: entered promiscuous mode [ 519.156984][T19841] netlink: 'syz.4.3389': attribute type 11 has an invalid length. [ 519.251520][T19843] bridge0: port 3(vlan0) entered blocking state [ 519.306020][T19843] bridge0: port 3(vlan0) entered disabled state [ 519.314348][T19843] vlan0: entered allmulticast mode [ 519.330219][T19843] geneve0: entered allmulticast mode [ 519.338374][T19843] vlan0: entered promiscuous mode [ 519.352490][T19843] geneve0: entered promiscuous mode [ 519.420046][T19847] bridge0: port 4(vlan1) entered blocking state [ 519.447695][T19847] bridge0: port 4(vlan1) entered disabled state [ 519.460298][T19847] vlan1: entered allmulticast mode [ 519.482175][T19847] vlan1: entered promiscuous mode [ 519.507097][T19824] __nla_validate_parse: 10 callbacks suppressed [ 519.507121][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3384'. [ 519.708017][T19859] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3393'. [ 519.855796][T19862] netlink: 'syz.4.3395': attribute type 13 has an invalid length. [ 520.159725][T19876] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 520.587738][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.652139][T19892] bridge0: port 1(vlan2) entered blocking state [ 520.674180][T19892] bridge0: port 1(vlan2) entered disabled state [ 520.689046][T19892] vlan2: entered allmulticast mode [ 520.705873][T19892] geneve0: entered allmulticast mode [ 520.744127][T19892] vlan2: entered promiscuous mode [ 520.763571][T19892] geneve0: entered promiscuous mode [ 520.831323][T19895] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3405'. [ 520.831957][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3402'. [ 520.841636][T19893] bridge0: port 3(vlan3) entered blocking state [ 520.858389][T19893] bridge0: port 3(vlan3) entered disabled state [ 520.867098][T19893] vlan3: entered allmulticast mode [ 520.875932][T19893] vlan3: entered promiscuous mode [ 521.210362][T19902] syzkaller0: entered promiscuous mode [ 521.233487][T19902] syzkaller0: entered allmulticast mode [ 521.258385][T19915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.278223][T19906] netlink: 'syz.1.3408': attribute type 21 has an invalid length. [ 521.324276][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'. [ 521.618372][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3410'. [ 521.650920][T19929] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 521.745471][T19932] syzkaller1: entered promiscuous mode [ 521.764894][T19932] syzkaller1: entered allmulticast mode [ 521.795079][T19932] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.876715][T19935] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3413'. [ 521.927224][T19937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3414'. [ 522.195456][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.203922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.213629][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'. [ 522.239717][T19950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.397016][T19955] bridge0: port 3(vlan2) entered blocking state [ 522.433616][T19955] bridge0: port 3(vlan2) entered disabled state [ 522.471483][T19955] vlan2: entered allmulticast mode [ 522.499953][T19955] geneve0: entered allmulticast mode [ 522.533925][T19955] vlan2: entered promiscuous mode [ 522.554934][T19955] geneve0: entered promiscuous mode [ 522.785812][T19971] tc_dump_action: action bad kind [ 522.812724][T19972] veth2: entered allmulticast mode [ 522.915587][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3424'. [ 523.251631][T19991] netlink: 'syz.0.3427': attribute type 5 has an invalid length. [ 523.619708][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.850283][T20050] vti0: entered promiscuous mode [ 525.847068][T20081] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x17 [ 526.584879][T20109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.617961][T20113] syzkaller0: entered promiscuous mode [ 526.661997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 526.676274][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.099149][T20133] __nla_validate_parse: 2 callbacks suppressed [ 527.099171][T20133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3460'. [ 527.137607][T20127] can: request_module (can-proto-0) failed. [ 527.181246][T20133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3460'. [ 527.632843][T20155] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3465'. [ 527.643110][T20155] openvswitch: netlink: Flow key attr not present in new flow. [ 527.943108][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.951708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.056449][T20169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3468'. [ 528.454405][T20196] netlink: 'syz.0.3473': attribute type 10 has an invalid length. [ 528.477351][T20196] syz_tun: entered promiscuous mode [ 528.509880][T20196] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 528.977761][T20215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3477'. [ 529.075115][T20194] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3471'. [ 529.085748][T20194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3471'. [ 529.091155][T20220] xt_TCPMSS: Only works on TCP SYN packets [ 529.101862][T20215] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3477'. [ 529.142460][T20215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.182511][T20215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.247269][T20215] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 529.294100][T20215] bond0 (unregistering): Released all slaves [ 529.482724][T20230] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3481'. [ 529.503346][T20228] syzkaller0: entered promiscuous mode [ 529.513671][T20228] syzkaller0: entered allmulticast mode [ 529.520027][T20234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'. [ 529.531796][T20228] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 529.556518][T20234] tipc: Enabled bearer , priority 0 [ 529.666172][ T5642] block nbd4: Receive control failed (result -1) [ 529.699461][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.901822][T20234] syzkaller0: entered promiscuous mode [ 529.947700][T20234] syzkaller0: entered allmulticast mode [ 529.974042][T20234] tipc: Resetting bearer [ 530.214037][T20246] syzkaller0: entered promiscuous mode [ 530.232599][T20246] syzkaller0: entered allmulticast mode [ 532.749388][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.713738][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.725627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.082267][ T5946] tipc: Resetting bearer [ 534.090817][T20232] tipc: Resetting bearer [ 535.780308][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.261863][T20232] tipc: Disabling bearer [ 537.271575][T20263] batadv_slave_0: Caught tx_queue_len zero misconfig [ 537.278968][T20264] syzkaller0: entered promiscuous mode [ 537.284715][T20264] syzkaller0: entered allmulticast mode [ 537.751693][T20296] tipc: Enabled bearer , priority 0 [ 537.787064][T20296] tipc: Enabling of bearer rejected, already enabled [ 537.821282][T20296] tipc: Enabling of bearer rejected, already enabled [ 537.883335][T20298] lo: Caught tx_queue_len zero misconfig [ 537.912501][T20296] tipc: Enabling of bearer rejected, already enabled [ 537.947438][T20306] syzkaller0: entered promiscuous mode [ 537.967403][T20306] syzkaller0: entered allmulticast mode [ 538.013250][T20311] netlink: 'syz.2.3493': attribute type 21 has an invalid length. [ 538.072287][T20315] __nla_validate_parse: 4 callbacks suppressed [ 538.072308][T20315] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3493'. [ 538.362448][T20306] tipc: Resetting bearer [ 538.407351][T20322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3499'. [ 538.512105][T20306] tipc: Disabling bearer [ 538.821923][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.997538][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3507'. [ 539.037540][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 539.088110][T20344] ip6_vti0: Caught tx_queue_len zero misconfig [ 539.323656][T20358] tipc: Enabled bearer , priority 0 [ 539.354034][T20360] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 539.372448][T20360] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3510'. [ 539.462142][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.470986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.573880][T20354] syzkaller0: entered promiscuous mode [ 539.605026][T20354] syzkaller0: entered allmulticast mode [ 539.628390][T20354] tipc: Resetting bearer [ 539.640852][T20367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.670645][T20358] tipc: Resetting bearer [ 539.722678][T20374] openvswitch: netlink: Duplicate or invalid key (type 0). [ 539.753038][T20374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.779707][T20379] openvswitch: netlink: Flow key attr not present in new flow. [ 541.382216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 541.861848][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.659197][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.374398][T20358] tipc: Disabling bearer [ 543.393306][T20367] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 543.402337][T20367] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 543.658045][T20402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'. [ 543.709543][T20395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.782579][T20395] tipc: Enabling of bearer rejected, failed to enable media [ 543.971553][T20420] FAULT_INJECTION: forcing a failure. [ 543.971553][T20420] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 544.020999][T20412] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 544.046572][T20422] netlink: 1504 bytes leftover after parsing attributes in process `syz.1.3527'. [ 544.076902][T20412] bond2 (unregistering): Released all slaves [ 544.089646][T20420] CPU: 0 UID: 0 PID: 20420 Comm: syz.2.3525 Not tainted syzkaller #0 PREEMPT(full) [ 544.089674][T20420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 544.089685][T20420] Call Trace: [ 544.089693][T20420] [ 544.089702][T20420] dump_stack_lvl+0xe8/0x150 [ 544.089732][T20420] should_fail_ex+0x412/0x560 [ 544.089764][T20420] prepare_alloc_pages+0x22a/0x650 [ 544.089803][T20420] __alloc_frozen_pages_noprof+0x12f/0x380 [ 544.089839][T20420] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 544.089873][T20420] ? __pfx_policy_nodemask+0x10/0x10 [ 544.089903][T20420] ? __lock_acquire+0x6b5/0x2cf0 [ 544.089937][T20420] alloc_pages_mpol+0x235/0x490 [ 544.089973][T20420] alloc_pages_noprof+0xac/0x2a0 [ 544.090007][T20420] pte_alloc_one+0x22/0x370 [ 544.090037][T20420] do_pte_missing+0x1214/0x33f0 [ 544.090070][T20420] ? mtree_range_walk+0x6f9/0x8b0 [ 544.090112][T20420] handle_mm_fault+0x1bd7/0x3170 [ 544.090164][T20420] ? handle_mm_fault+0xee/0x3170 [ 544.090196][T20420] ? __pfx_handle_mm_fault+0x10/0x10 [ 544.090235][T20420] ? __lock_acquire+0x6b5/0x2cf0 [ 544.090261][T20420] ? lock_mm_and_find_vma+0xa7/0x340 [ 544.090293][T20420] do_user_addr_fault+0x75b/0x1340 [ 544.090334][T20420] exc_page_fault+0x6a/0xc0 [ 544.090360][T20420] asm_exc_page_fault+0x26/0x30 [ 544.090380][T20420] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 544.090409][T20420] Code: c4 10 e9 54 54 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 544.090427][T20420] RSP: 0018:ffffc9000d4ffcd8 EFLAGS: 00050202 [ 544.090447][T20420] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 544.090461][T20420] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffc9000d4ffd60 [ 544.090475][T20420] RBP: ffffc9000d4ffe48 R08: 0000000000000003 R09: 0000000000000004 [ 544.090487][T20420] R10: dffffc0000000000 R11: fffff52001a9ffac R12: ffff888047a5c130 [ 544.090502][T20420] R13: 1ffff11008f4b826 R14: ffffc9000d4ffd60 R15: 00002000000000c0 [ 544.090535][T20420] _copy_from_user+0x7a/0xb0 [ 544.090566][T20420] do_tcp_setsockopt+0x4f3/0x2060 [ 544.090598][T20420] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 544.090625][T20420] ? __pfx_aa_sk_perm+0x10/0x10 [ 544.090652][T20420] ? __fget_files+0x2a/0x420 [ 544.090682][T20420] ? aa_sock_opt_perm+0xff/0x1a0 [ 544.090709][T20420] ? sock_common_setsockopt+0x36/0xc0 [ 544.090729][T20420] ? tcp_setsockopt+0x3d/0xe0 [ 544.090750][T20420] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 544.090773][T20420] do_sock_setsockopt+0x17c/0x1b0 [ 544.090804][T20420] __x64_sys_setsockopt+0x13d/0x1b0 [ 544.090833][T20420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.090855][T20420] do_syscall_64+0x15f/0xf80 [ 544.090878][T20420] ? trace_irq_disable+0x3b/0x140 [ 544.090905][T20420] ? clear_bhb_loop+0x40/0x90 [ 544.090932][T20420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.090951][T20420] RIP: 0033:0x7f480c79cdd9 [ 544.090970][T20420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.090986][T20420] RSP: 002b:00007f480d66b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 544.091007][T20420] RAX: ffffffffffffffda RBX: 00007f480ca15fa0 RCX: 00007f480c79cdd9 [ 544.091021][T20420] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 544.091032][T20420] RBP: 00007f480d66b090 R08: 0000000000000004 R09: 0000000000000000 [ 544.091045][T20420] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 544.091058][T20420] R13: 00007f480ca16038 R14: 00007f480ca15fa0 R15: 00007ffe9f8f0288 [ 544.091093][T20420] [ 544.543996][T20431] openvswitch: netlink: EtherType 0 is less than min 600 [ 544.600479][T20431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3530'. [ 544.894968][T20440] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3533'. [ 544.908317][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.072071][T20444] team0: No ports can be present during mode change [ 545.226448][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.235242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.498857][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3544'. [ 545.872691][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3547'. [ 545.942154][T20487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.974779][T20487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.008380][T20487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.055462][T20487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.274390][T20510] netlink: 'syz.1.3552': attribute type 12 has an invalid length. [ 546.334594][T20510] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3552'. [ 546.447318][T20500] syzkaller0: entered promiscuous mode [ 546.461253][T20500] syzkaller0: entered allmulticast mode [ 546.753365][T20522] sctp: [Deprecated]: syz.4.3554 (pid 20522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 546.753365][T20522] Use struct sctp_sack_info instead [ 546.856739][T20525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3555'. [ 546.888603][T20526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3555'. [ 547.222944][T20543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3560'. [ 547.469805][T20552] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 547.952045][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.716353][T20546] tipc: Enabling of bearer rejected, failed to enable media [ 550.732366][T20554] syz.1.3560 (20554) used obsolete PPPIOCDETACH ioctl [ 550.981451][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.989820][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.998037][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.105431][T20567] __nla_validate_parse: 4 callbacks suppressed [ 551.105454][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3563'. [ 551.137847][T20568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'. [ 551.149650][T20571] xt_socket: unknown flags 0x8 [ 551.204854][T20574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3566'. [ 551.294069][T20577] netlink: 'syz.4.3567': attribute type 1 has an invalid length. [ 551.304028][T20577] nbd: couldn't find device at index -427251215 [ 551.317311][T20577] xt_TPROXY: Can be used only with -p tcp or -p udp [ 551.467299][T20580] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3569'. [ 551.558297][T20587] hsr0: entered promiscuous mode [ 551.654948][T20590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3572'. [ 551.810727][T20590] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 551.833782][T20590] bond1 (unregistering): Released all slaves [ 551.932637][T20611] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3576'. [ 552.151579][T20617] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 552.729512][T20640] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 553.191070][T20657] netlink: 'syz.3.3586': attribute type 1 has an invalid length. [ 553.418204][T20665] netlink: 'syz.0.3588': attribute type 1 has an invalid length. [ 553.541841][T20667] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 553.627722][T20667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3588'. [ 553.700920][T20665] veth3: entered promiscuous mode [ 553.720794][T20665] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 553.830734][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3592'. [ 553.872302][T20678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 553.891353][T16101] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 553.903553][T20667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.926353][T20678] netlink: 'syz.4.3592': attribute type 15 has an invalid length. [ 554.000277][T20678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3592'. [ 554.020106][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.048791][T20678] netlink: 'syz.4.3592': attribute type 15 has an invalid length. [ 554.059512][T16100] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 554.127703][T20678] netlink: 'syz.4.3592': attribute type 15 has an invalid length. [ 554.157817][T20678] netlink: 'syz.4.3592': attribute type 15 has an invalid length. [ 554.169719][T20678] netlink: 'syz.4.3592': attribute type 15 has an invalid length. [ 554.184225][T20676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.190345][T20678] netlink: 'syz.4.3592': attribute type 15 has an invalid length. [ 554.226040][T20678] netlink: 'syz.4.3592': attribute type 15 has an invalid length. [ 554.954161][T20710] sctp: [Deprecated]: syz.3.3601 (pid 20710) Use of int in maxseg socket option. [ 554.954161][T20710] Use struct sctp_assoc_value instead [ 555.356667][T20717] syzkaller0: entered promiscuous mode [ 555.388676][T20717] syzkaller0: entered allmulticast mode [ 555.485393][T20727] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 555.510673][T20736] netlink: 'syz.4.3607': attribute type 11 has an invalid length. [ 555.523247][T20727] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 555.584040][T20728] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 555.606231][T20731] macvlan0: entered promiscuous mode [ 555.613351][T20731] macvlan0: entered allmulticast mode [ 555.620326][T20731] bond2: entered promiscuous mode [ 555.625915][T20731] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 555.634803][T20731] bond2: left promiscuous mode [ 556.750681][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.759348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.062291][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.072058][T20739] geneve3: entered promiscuous mode [ 559.085685][T16100] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 58263 - 0 [ 559.138991][T16100] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 58263 - 0 [ 559.173727][T16100] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 58263 - 0 [ 559.198891][T16100] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 58263 - 0 [ 559.290790][T20748] __nla_validate_parse: 121 callbacks suppressed [ 559.290814][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'. [ 559.470788][T20759] syz_tun: entered allmulticast mode [ 559.691666][T20766] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 559.703497][T20771] x_tables: duplicate underflow at hook 1 [ 559.745375][T20766] bond4 (unregistering): Released all slaves [ 559.798228][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3616'. [ 560.111392][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.740934][T20817] validate_nla: 55 callbacks suppressed [ 560.740958][T20817] netlink: 'syz.2.3629': attribute type 1 has an invalid length. [ 560.745747][T20818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3628'. [ 560.805850][T20817] bond4: entered promiscuous mode [ 560.837051][T20817] 8021q: adding VLAN 0 to HW filter on device bond4 [ 560.945812][T20817] 8021q: adding VLAN 0 to HW filter on device bond4 [ 560.955493][T20817] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 560.966593][T20817] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 560.983049][T20817] bond4: (slave ip6gre2): making interface the new active one [ 560.990827][T20817] ip6gre2: entered promiscuous mode [ 560.998033][T20817] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 561.214671][T20822] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3623'. [ 561.303918][T20840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 561.789540][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.797930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.742804][T20775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.758851][T20841] netlink: 'syz.2.3632': attribute type 1 has an invalid length. [ 562.791933][T20841] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3632'. [ 563.147720][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.285074][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'. [ 563.288258][T20861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3639'. [ 564.031259][T20893] bond3: entered allmulticast mode [ 564.074346][T20896] macvlan0: entered promiscuous mode [ 564.080140][T20896] macvlan0: entered allmulticast mode [ 564.087513][T20896] bond3: entered promiscuous mode [ 564.093645][T20896] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 564.112408][T20896] bond3: left promiscuous mode [ 564.374763][T20921] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3652'. [ 564.809015][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3653'. [ 565.314097][T20948] netlink: 'syz.1.3661': attribute type 10 has an invalid length. [ 565.323177][T20948] ipvlan0: entered allmulticast mode [ 565.337223][T20948] veth0_vlan: entered allmulticast mode [ 565.361945][T20948] team0: Device ipvlan0 failed to register rx_handler [ 565.677319][T20961] netlink: 428 bytes leftover after parsing attributes in process `syz.1.3665'. [ 565.710153][T20961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3665'. [ 566.178966][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.752619][T20987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3670'. [ 567.033464][T20992] syzkaller0: entered promiscuous mode [ 567.053604][T20992] syzkaller0: entered allmulticast mode [ 567.111776][T21009] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 567.122209][T21009] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 567.131675][T21009] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 567.277430][T21016] netlink: 'syz.0.3676': attribute type 1 has an invalid length. [ 567.317419][T21016] netlink: 'syz.0.3676': attribute type 2 has an invalid length. [ 567.367356][T21015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3676'. [ 567.514456][T21019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 567.630949][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.647578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.226452][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.189632][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 571.249156][T21047] netlink: 'syz.0.3684': attribute type 3 has an invalid length. [ 571.420814][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3691'. [ 571.427982][T21064] netlink: 'syz.0.3690': attribute type 1 has an invalid length. [ 571.505385][T21064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.521125][T21067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3690'. [ 572.260681][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.753973][T21113] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20001 [ 572.763314][T21113] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 572.925192][T21125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 572.936626][T21126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 573.023667][T21125] veth1_to_team: entered promiscuous mode [ 573.051772][T21125] gretap0: entered promiscuous mode [ 573.070381][T21125] debugfs: 'hsr1' already exists in 'hsr' [ 573.077383][T21125] Cannot create hsr debugfs directory [ 573.084310][T21125] hsr1: entered promiscuous mode [ 573.392685][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.401316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.301163][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.460073][ T5646] Bluetooth: hci5: command 0x0419 tx timeout [ 577.593769][T21173] netlink: 'syz.1.3719': attribute type 5 has an invalid length. [ 577.623010][T21176] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3720'. [ 577.654569][T21176] netlink: 'syz.3.3720': attribute type 1 has an invalid length. [ 577.688488][T21176] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3720'. [ 577.714949][T21176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3720'. [ 577.778273][T21178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3721'. [ 577.829136][T21183] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3722'. [ 577.871777][T21178] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3721'. [ 577.908045][T21178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3721'. [ 577.957128][T21178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.340631][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.362601][T16100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.373839][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.386088][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.499641][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 578.790848][T21220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3731'. [ 579.143374][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.151851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.792929][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3743'. [ 580.035301][T21260] openvswitch: netlink: IP tunnel TTL not specified. [ 580.040463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 580.578678][ T5642] Bluetooth: hci1: command 0x0406 tx timeout [ 580.624714][T21274] netlink: 'syz.4.3748': attribute type 13 has an invalid length. [ 580.659033][T21274] netlink: 'syz.4.3748': attribute type 17 has an invalid length. [ 581.049275][T21272] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.059437][T21272] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.068509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 581.403544][T21296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3753'. [ 581.475766][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.300323][T21274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.313380][T21274] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.363401][T21274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.374769][T21274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.387801][T21274] hsr0: left promiscuous mode [ 582.402442][T21274] veth1_vlan: left promiscuous mode [ 582.410236][T21274] veth0_vlan: left promiscuous mode [ 582.416403][T21274] veth0_vlan: entered promiscuous mode [ 582.426197][T21274] veth1_vlan: entered promiscuous mode [ 582.436133][T21274] veth1_macvtap: left promiscuous mode [ 582.443086][T21274] veth0_macvtap: left promiscuous mode [ 582.450373][T21274] veth0_macvtap: entered promiscuous mode [ 582.462872][T21274] veth1_macvtap: entered promiscuous mode [ 582.472417][T21274] bridge0: port 3(vlan2) entered blocking state [ 582.479193][T21274] bridge0: port 3(vlan2) entered forwarding state [ 582.492412][T21274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 582.504877][T21274] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 582.516831][T21274] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 582.528141][T21274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 582.542401][T21274] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 582.553374][T21274] hsr1: left promiscuous mode [ 582.571930][T21274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.584474][T21280] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.738068][ T137] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 582.774894][ T137] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 582.784482][T21314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3755'. [ 582.844839][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.854584][ T5946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.105494][ T5984] IPVS: starting estimator thread 0... [ 583.155184][T21333] sctp: [Deprecated]: syz.1.3759 (pid 21333) Use of int in max_burst socket option deprecated. [ 583.155184][T21333] Use struct sctp_assoc_value instead [ 583.213452][T21334] IPVS: using max 23 ests per chain, 55200 per kthread [ 583.234354][ T137] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 583.243593][ T137] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 583.269019][T21335] sctp: [Deprecated]: syz.1.3759 (pid 21335) Use of int in max_burst socket option deprecated. [ 583.269019][T21335] Use struct sctp_assoc_value instead [ 583.627573][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.641094][ T5994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.650830][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.907382][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.915860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.434365][T21311] syzkaller0: entered promiscuous mode [ 585.440315][T21311] syzkaller0: entered allmulticast mode [ 585.461103][T21350] tipc: Started in network mode [ 585.466040][T21350] tipc: Node identity 101, cluster identity 4711 [ 585.472896][T21350] tipc: Node number set to 257 [ 585.478203][T21350] tipc: Cannot configure node identity twice [ 585.598323][T21360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3764'. [ 585.688506][T21368] IPv6: NLM_F_REPLACE set, but no existing node found! [ 586.680670][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.219358][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 587.388202][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 587.709807][ T5642] Bluetooth: hci3: command 0x0405 tx timeout [ 589.123966][T21385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.183259][T21390] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 589.213664][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3769'. [ 589.297297][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 589.304731][T21398] xt_hashlimit: max too large, truncated to 1048576 [ 589.334025][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 589.354682][T21398] xt_ecn: cannot match TCP bits for non-tcp packets [ 589.381365][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.392119][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.405742][ T5634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.710790][ T5954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.741101][ T5954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.742559][T21419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.903399][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 590.011052][T21429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.033348][T21429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.332527][T21438] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3785'. [ 590.475324][T21447] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3787'. [ 590.486336][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 590.515660][T21448] bond2: entered allmulticast mode [ 590.527215][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3787'. [ 590.670554][ T5944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.679125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.745607][T21454] bond2 (unregistering): Released all slaves [ 590.907277][T21463] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 590.939049][T21463] syzkaller1: linktype set to 769 [ 590.988350][T21474] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3792'. [ 591.081450][T21474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 591.458467][T21491] netlink: 'syz.1.3799': attribute type 5 has an invalid length. [ 591.782688][T21503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3801'. [ 591.978240][T21522] netlink: 'syz.1.3806': attribute type 29 has an invalid length. [ 591.987848][T21522] netlink: 'syz.1.3806': attribute type 29 has an invalid length. [ 591.999266][T21522] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3806'. [ 592.091367][T21525] netlink: zone id is out of range [ 592.095115][T21528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3807'. [ 592.096654][T21525] netlink: zone id is out of range [ 592.116894][T21525] netlink: zone id is out of range [ 592.121706][T21531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3808'. [ 592.122454][T21525] netlink: zone id is out of range [ 592.137097][T21525] netlink: zone id is out of range [ 592.152020][T21525] netlink: zone id is out of range [ 592.157382][T21525] netlink: zone id is out of range [ 592.555698][T21503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.779672][T21550] netlink: 'syz.1.3812': attribute type 2 has an invalid length. [ 593.227020][T21569] bond4: entered allmulticast mode [ 593.240568][T21569] ip6gre2: entered allmulticast mode [ 593.652936][T21551] bond4: left allmulticast mode [ 593.667822][T21551] ip6gre2: left allmulticast mode [ 594.284395][T21600] veth2: entered promiscuous mode [ 594.291385][T21600] veth2: entered allmulticast mode [ 594.470256][T21623] __nla_validate_parse: 6 callbacks suppressed [ 594.470277][T21623] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3834'. [ 594.844646][T21640] netlink: 'syz.2.3841': attribute type 3 has an invalid length. [ 594.910756][T21640] nbd: must specify a size in bytes for the device [ 594.934247][T21640] block nbd2: NBD_DISCONNECT [ 594.944317][T21640] block nbd2: Send disconnect failed -32 [ 594.967380][T21640] block nbd2: Send disconnect failed -32 [ 594.980878][T21640] block nbd2: shutting down sockets [ 594.988049][T21653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3846'. [ 595.010570][T21647] siw: device registration error -23 [ 595.039652][ T1155] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 595.039768][T21653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3846'. [ 595.086094][ T1155] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 595.139065][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 595.186818][ T1155] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 595.223626][T21663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3843'. [ 595.263813][ T1155] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 595.415284][T21671] netlink: 'syz.2.3848': attribute type 1 has an invalid length. [ 595.560128][T21671] 8021q: adding VLAN 0 to HW filter on device bond5 [ 595.667313][T21674] bond5: (slave veth5): Enslaving as an active interface with a down link [ 595.762802][T21675] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 595.779136][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 595.788214][ T137] net_ratelimit: 10 callbacks suppressed [ 595.788235][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.799119][T21675] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 595.802902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.175227][T21670] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 596.186961][T21670] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 596.199584][T21670] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.288151][T21693] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3851'. [ 596.343241][T21693] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 596.381207][T21693] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 596.483837][T21670] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 596.513798][T21670] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 596.548115][T21670] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.786689][T21670] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 596.799965][T21670] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 596.826010][T21670] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.013945][T21670] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 597.040467][T21670] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 597.052847][T21670] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.390907][ T1155] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.405406][T21727] netlink: 'syz.2.3862': attribute type 1 has an invalid length. [ 597.421293][ T1155] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 597.438828][ T1155] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.457497][ T5992] bridge0: entered promiscuous mode [ 597.532845][T21731] tipc: Can't bind to reserved service type 1 [ 597.547481][T21727] 8021q: adding VLAN 0 to HW filter on device bond6 [ 597.596457][ T5954] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.599663][T21731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3864'. [ 597.637385][ T5954] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 597.668127][ T5954] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.705615][T21740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3866'. [ 597.712972][T21727] netlink: 'syz.2.3862': attribute type 11 has an invalid length. [ 597.742189][ T5946] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.743304][T21727] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.3862'. [ 597.752183][ T5946] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 597.789204][ T5946] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.015284][ T5946] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.028118][ T5946] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 598.045021][ T5946] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.125967][T21760] netlink: 'syz.2.3871': attribute type 39 has an invalid length. [ 598.186405][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.382439][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3875'. [ 598.435182][T21771] veth0_macvtap: Caught tx_queue_len zero misconfig [ 598.448092][T21772] lo speed is unknown, defaulting to 1000 [ 598.607749][T21772] lo speed is unknown, defaulting to 1000 [ 598.627103][T21772] lo speed is unknown, defaulting to 1000 [ 598.879364][T21787] netlink: 'syz.0.3881': attribute type 1 has an invalid length. [ 599.001419][T21794] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 599.320967][T21801] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3885'. [ 599.592565][T21772] infiniband sqz0: set active [ 599.601653][ T5984] lo speed is unknown, defaulting to 1000 [ 599.613955][T21772] infiniband sqz0: added lo [ 599.696344][T21784] scsi_nl_rcv_msg: discarding partial skb [ 599.701416][T21772] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 599.717971][T21772] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 599.736207][T21772] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 599.804325][T21772] RDS/IB: sqz0: added [ 599.811252][T21772] smc: adding ib device sqz0 with port count 1 [ 599.818000][T21772] smc: ib device sqz0 port 1 has no pnetid [ 599.820203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 599.996850][T21813] bridge0: port 3(vlan2) entered blocking state [ 600.003459][T21813] bridge0: port 3(vlan2) entered forwarding state [ 600.017869][T21820] netlink: 'syz.0.3891': attribute type 1 has an invalid length. [ 600.044421][T21813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.101253][T16101] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 600.120195][ T5984] lo speed is unknown, defaulting to 1000 [ 600.164252][T21823] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3891'. [ 600.260799][T21830] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3894'. [ 600.265788][T21829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3891'. [ 600.325954][T21820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.355386][T21821] vlan4: entered promiscuous mode [ 600.361255][T21821] bond3: entered promiscuous mode [ 600.367908][T21821] vlan4: entered allmulticast mode [ 600.374053][T21821] bond3: entered allmulticast mode [ 600.374474][T21836] netlink: zone id is out of range [ 600.384197][T21772] lo speed is unknown, defaulting to 1000 [ 600.413652][T21823] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 600.426289][T21823] bond3: (slave batadv1): making interface the new active one [ 600.434130][T21823] batadv1: entered promiscuous mode [ 600.440022][T21823] batadv1: entered allmulticast mode [ 600.447412][T21823] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 600.457941][T21809] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 600.581104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 600.880926][T21844] hmó3)ó: entered promiscuous mode [ 600.936995][T21841] veth0: entered promiscuous mode [ 600.958789][T21772] lo speed is unknown, defaulting to 1000 [ 601.223264][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.544908][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 601.558356][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.567156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.941442][T21846] veth0: left promiscuous mode [ 601.974331][T21772] lo speed is unknown, defaulting to 1000 [ 602.827324][T21863] lo speed is unknown, defaulting to 1000 [ 603.027023][T21885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3905'. [ 603.067868][T21887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3905'. [ 603.457465][T21772] lo speed is unknown, defaulting to 1000 [ 603.837405][T21900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3909'. [ 604.179058][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 604.232500][T21772] lo speed is unknown, defaulting to 1000 [ 604.258987][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.700660][T21772] lo speed is unknown, defaulting to 1000 [ 605.307475][T21772] lo speed is unknown, defaulting to 1000 [ 605.904476][T21772] lo speed is unknown, defaulting to 1000 [ 606.279710][T21950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3927'. [ 606.483790][T21950] team0: Port device team_slave_0 removed [ 606.679530][T21772] lo speed is unknown, defaulting to 1000 [ 607.143634][T21981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.299389][ T5634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.309670][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.318187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.450206][T21989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.728130][T22000] netlink: 'syz.2.3945': attribute type 1 has an invalid length. [ 607.758921][T22000] netlink: 'syz.2.3945': attribute type 3 has an invalid length. [ 607.774257][T22000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3945'. [ 607.963908][T22008] netlink: 'syz.2.3948': attribute type 21 has an invalid length. [ 607.991366][T22008] IPv6: NLM_F_CREATE should be specified when creating new route [ 608.014960][T22008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.022390][T22008] IPv6: NLM_F_CREATE should be set when creating new route [ 608.030008][T22008] IPv6: NLM_F_CREATE should be set when creating new route [ 608.037391][T22008] IPv6: NLM_F_CREATE should be set when creating new route [ 608.067684][T22013] netlink: 'syz.0.3950': attribute type 1 has an invalid length. [ 608.088428][T22013] netlink: 'syz.0.3950': attribute type 1 has an invalid length. [ 608.241391][T22014] veth0_macvtap: entered allmulticast mode [ 608.269147][T22014] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 608.559889][T22029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3956'. [ 608.815267][T22039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3960'. [ 608.865977][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3960'. [ 608.987189][T22039] team1: entered promiscuous mode [ 609.003225][T22039] team1: entered allmulticast mode [ 609.021963][T22039] 8021q: adding VLAN 0 to HW filter on device team1 [ 609.146347][T22041] team2: entered promiscuous mode [ 609.161632][T22041] team2: entered allmulticast mode [ 609.186287][T22041] 8021q: adding VLAN 0 to HW filter on device team2 [ 609.439346][T22062] netlink: 'syz.4.3966': attribute type 49 has an invalid length. [ 609.692455][T22073] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 609.695606][T22062] ip6gretap0: entered promiscuous mode [ 609.734468][T22062] ip6gretap0: entered allmulticast mode [ 609.843896][T22068] bridge0: port 5(vlan2) entered blocking state [ 609.862069][T22068] bridge0: port 5(vlan2) entered disabled state [ 609.884068][T22068] vlan2: entered allmulticast mode [ 609.911515][T22068] vlan2: entered promiscuous mode [ 609.992409][T22077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3971'. [ 610.070937][T22080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3968'. [ 610.157590][T22095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3973'. [ 610.338983][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.498868][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 610.576551][T22085] lo speed is unknown, defaulting to 1000 [ 611.017851][T22116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3976'. [ 611.107934][T22116] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3976'. [ 611.305542][ T5646] Bluetooth: hci4: command 0x0406 tx timeout [ 611.503036][T22125] macsec2: entered promiscuous mode [ 611.707723][T22135] bond5: entered allmulticast mode [ 611.730195][T22135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 611.779256][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 612.418999][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 612.440588][T22178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3992'. [ 612.472668][T22178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3992'. [ 612.498224][T22178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3992'. [ 612.515883][T22180] bridge0: port 4(vlan3) entered blocking state [ 612.523250][T22180] bridge0: port 4(vlan3) entered disabled state [ 612.530749][T22180] vlan3: entered allmulticast mode [ 612.537510][T22180] vlan3: entered promiscuous mode [ 612.577161][ T137] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.599645][ T137] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.660287][ T137] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.677765][ T137] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.721839][T22182] lo speed is unknown, defaulting to 1000 [ 613.061197][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.069820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.380702][ T5634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.887156][T22207] netlink: 'syz.3.4002': attribute type 1 has an invalid length. [ 613.905025][T22207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4002'. [ 614.107135][T22217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4005'. [ 614.146978][T22217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4005'. [ 614.339991][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 614.470510][T22219] lo speed is unknown, defaulting to 1000 [ 614.873077][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4008'. [ 614.892109][T22235] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4008'. [ 615.092839][T22239] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4010'. [ 616.275181][T22264] lo speed is unknown, defaulting to 1000 [ 616.437276][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.648326][T22288] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.656113][T22288] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.940715][T22288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.966954][T22288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.226260][ T5950] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.249426][ T5950] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.252835][T22312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4025'. [ 617.260708][ T5950] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.277960][ T5950] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.322659][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 617.386972][T22314] sctp: [Deprecated]: syz.3.4026 (pid 22314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.386972][T22314] Use struct sctp_sack_info instead [ 617.416115][T22293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.419589][T22314] sctp: [Deprecated]: syz.3.4026 (pid 22314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.419589][T22314] Use struct sctp_sack_info instead [ 617.431252][T22293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.493506][ T5950] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.506396][ T5950] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.516455][ T5950] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.538652][ T5950] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.551593][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 617.570220][T22316] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 617.652453][T22293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.663425][T22293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.881252][T22293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.946557][T22293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.976310][T22325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4028'. [ 618.040826][T22331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4029'. [ 618.077274][T22331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4029'. [ 618.123427][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 618.139264][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 618.156197][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 618.464066][T22293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.485402][T22293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.543015][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 618.819842][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.828276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.986226][T22350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4032'. [ 619.019198][ T5950] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.051086][ T5950] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.061786][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 619.094199][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4032'. [ 619.219272][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4032'. [ 619.256816][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4032'. [ 619.270609][T16098] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.280238][T16098] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.307498][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4032'. [ 619.322200][T16098] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.338051][T16098] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.384905][T22354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4034'. [ 619.385984][T16098] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.426950][T16098] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.483571][ T5634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.575813][T22353] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 619.849389][T22370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4037'. [ 620.707207][T22400] bridge0: port 3(vlan2) entered disabled state [ 620.715275][T22400] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.914135][ T808] lo speed is unknown, defaulting to 1000 [ 621.933088][ T808] sqz0: Port: 1 Link DOWN [ 621.938289][T22406] lo speed is unknown, defaulting to 1000 [ 621.955218][ T808] lo speed is unknown, defaulting to 1000 [ 621.964109][T22406] lo speed is unknown, defaulting to 1000 [ 621.968047][T16098] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.001354][T16098] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 256 - 0 [ 622.022556][T16098] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.042874][T16098] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.064510][T16098] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 256 - 0 [ 622.085134][T16098] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.114440][T22406] lo speed is unknown, defaulting to 1000 [ 622.123482][T16098] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.148732][T22406] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 622.164008][T16098] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 256 - 0 [ 622.173696][T16098] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.183107][T22406] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 622.206170][T16098] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.225226][T16098] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 256 - 0 [ 622.240132][T22406] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 622.254348][T16098] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.304086][T22406] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 622.347985][T22406] lo speed is unknown, defaulting to 1000 [ 622.363003][T22406] lo speed is unknown, defaulting to 1000 [ 622.371537][T22406] lo speed is unknown, defaulting to 1000 [ 622.391637][T22406] lo speed is unknown, defaulting to 1000 [ 622.416136][T22406] lo speed is unknown, defaulting to 1000 [ 622.425009][T22431] netlink: 'syz.4.4051': attribute type 12 has an invalid length. [ 622.435346][T22431] netlink: 'syz.4.4051': attribute type 29 has an invalid length. [ 622.443884][T22431] netlink: 'syz.4.4051': attribute type 3 has an invalid length. [ 622.452759][T22431] netlink: 'syz.4.4051': attribute type 2 has an invalid length. [ 622.474089][T22406] lo speed is unknown, defaulting to 1000 [ 622.493982][T22406] lo speed is unknown, defaulting to 1000 [ 622.501014][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.536168][T22406] lo speed is unknown, defaulting to 1000 [ 622.572795][T22406] lo speed is unknown, defaulting to 1000 [ 622.973599][T22443] syzkaller1: entered promiscuous mode [ 623.000383][T22443] syzkaller1: entered allmulticast mode [ 623.023020][T22443] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 623.103398][T22450] syzkaller0: entered promiscuous mode [ 623.132238][T22450] syzkaller0: entered allmulticast mode [ 623.741381][T22468] __nla_validate_parse: 7 callbacks suppressed [ 623.741405][T22468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4060'. [ 623.881361][T22474] xt_TPROXY: Can be used only with -p tcp or -p udp [ 623.942510][T16098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.951045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.081961][T22476] bridge0: port 5(vlan4) entered blocking state [ 624.108278][T22476] bridge0: port 5(vlan4) entered disabled state [ 624.134235][T22476] vlan4: entered allmulticast mode [ 624.167017][T22476] vlan4: entered promiscuous mode [ 624.190413][T22481] tipc: Enabling of bearer rejected, failed to enable media [ 624.253953][T22483] pim6reg1: entered promiscuous mode [ 624.283168][T22483] pim6reg1: entered allmulticast mode [ 624.451401][T22485] tipc: Started in network mode [ 624.465802][T22485] tipc: Node identity 52b8cb5660db, cluster identity 4711 [ 624.480336][T22485] tipc: Enabled bearer , priority 0 [ 624.506193][T22483] syzkaller0: entered promiscuous mode [ 624.531543][T22483] syzkaller0: entered allmulticast mode [ 624.605906][T22485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4063'. [ 624.852098][T22482] tipc: Resetting bearer [ 624.956427][T22482] tipc: Disabling bearer [ 625.182536][T22513] TCP: TCP_TX_DELAY enabled [ 625.432251][T22511] lo speed is unknown, defaulting to 1000 [ 625.540814][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.122791][T22557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4075'. [ 626.156138][T22550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4075'. [ 626.312140][T22560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4077'. [ 626.352897][T22562] netlink: 'syz.4.4078': attribute type 1 has an invalid length. [ 626.377282][T22562] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 626.482507][T22511] lo speed is unknown, defaulting to 1000 [ 626.731459][T22575] lo speed is unknown, defaulting to 1000 [ 627.387680][T22575] lo speed is unknown, defaulting to 1000 [ 627.408310][T22588] netlink: 'syz.0.4084': attribute type 1 has an invalid length. [ 627.491649][T22592] netlink: 'syz.3.4085': attribute type 4 has an invalid length. [ 627.514018][T22592] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4085'. [ 627.567630][T22588] bond4: entered promiscuous mode [ 627.579841][T22588] 8021q: adding VLAN 0 to HW filter on device bond4 [ 627.778730][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 627.889136][T22600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4086'. [ 628.136525][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4089'. [ 628.313816][T22613] netlink: 'syz.3.4090': attribute type 1 has an invalid length. [ 628.369245][T22614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4090'. [ 628.574037][T22624] netlink: 'syz.3.4090': attribute type 1 has an invalid length. [ 628.583959][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.661063][T22613] 8021q: adding VLAN 0 to HW filter on device bond6 [ 628.745842][T22624] bond6: (slave batadv1): Opening slave failed [ 629.043990][T22646] netlink: 'syz.2.4099': attribute type 21 has an invalid length. [ 629.145605][T22649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4098'. [ 629.342503][T22658] lo speed is unknown, defaulting to 1000 [ 629.704041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 629.720312][T16098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.728913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.973983][ T30] audit: type=1800 audit(1777930994.350:12): pid=22686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4106" name=CB dev="tmpfs" ino=906 res=0 errno=0 [ 630.362931][T22699] netlink: 'syz.3.4111': attribute type 22 has an invalid length. [ 630.401289][T22699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4111'. [ 630.489596][T16098] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.491475][T22699] netlink: 'syz.3.4111': attribute type 22 has an invalid length. [ 630.504009][T16098] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.545874][T22699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4111'. [ 630.554259][T16098] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.589400][T22704] gretap0: entered promiscuous mode [ 630.598220][T22704] vlan5: entered promiscuous mode [ 630.682092][T16098] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.696792][T22658] lo speed is unknown, defaulting to 1000 [ 630.696832][T22677] lo speed is unknown, defaulting to 1000 [ 631.242546][T22694] lo speed is unknown, defaulting to 1000 [ 631.311655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 631.338043][T22726] ipvlan0: left allmulticast mode [ 631.344162][T22726] veth0_vlan: left allmulticast mode [ 631.374524][T22726] team1: left promiscuous mode [ 631.383868][T22726] team1: left allmulticast mode [ 631.394337][T22726] team2: left promiscuous mode [ 631.410806][T22726] team2: left allmulticast mode [ 631.425446][T22726] macsec2: left promiscuous mode [ 631.567242][T22724] lo speed is unknown, defaulting to 1000 [ 631.620385][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.626483][T22733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4117'. [ 631.787034][ T5642] Bluetooth: hci2: command 0x0406 tx timeout [ 631.819270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 631.876950][T22694] lo speed is unknown, defaulting to 1000 [ 631.895258][T22677] lo speed is unknown, defaulting to 1000 [ 631.969742][T22724] lo speed is unknown, defaulting to 1000 [ 632.099120][T16098] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 632.107313][T16098] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 632.128936][ T5994] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 632.281470][ T808] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 633.045517][T22746] netlink: 'syz.4.4121': attribute type 1 has an invalid length. [ 633.060108][ T5994] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 633.282473][T22747] gretap1: entered allmulticast mode [ 633.320247][T22747] bond3: (slave gretap1): making interface the new active one [ 633.342897][T22747] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 633.563218][T22761] tipc: Started in network mode [ 633.568323][T22761] tipc: Node identity 101, cluster identity 4711 [ 633.587343][T22761] tipc: Node number set to 257 [ 633.594211][T22761] tipc: Cannot configure node identity twice [ 633.607185][T22756] lo speed is unknown, defaulting to 1000 [ 633.849350][T22777] netlink: 'syz.2.4126': attribute type 1 has an invalid length. [ 634.117805][T22784] netlink: 'syz.3.4128': attribute type 1 has an invalid length. [ 634.139152][T22784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4128'. [ 634.152220][T22786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4129'. [ 634.176885][T22786] unsupported nlmsg_type 40 [ 634.385542][T22756] lo speed is unknown, defaulting to 1000 [ 634.491233][T22793] netlink: 'syz.2.4131': attribute type 21 has an invalid length. [ 634.536772][T22793] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4131'. [ 634.586561][T22793] netlink: 'syz.2.4131': attribute type 5 has an invalid length. [ 634.594806][T22793] netlink: 'syz.2.4131': attribute type 6 has an invalid length. [ 634.604376][T22793] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4131'. [ 634.662092][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.676315][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4135'. [ 634.758808][T22808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4134'. [ 634.830044][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.839149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.985101][T22823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4138'. [ 635.082028][T22808] pim6reg1: entered allmulticast mode [ 635.551574][T22846] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.593739][T22846] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.858802][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 635.869668][T22846] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.886520][T22858] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4148'. [ 635.898945][T22846] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.014236][T22846] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.045418][T22846] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.077283][T22864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4150'. [ 636.102272][T22864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4150'. [ 636.184233][T22846] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.215892][T22846] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.272196][T22869] syzkaller1: entered promiscuous mode [ 636.282343][T22869] syzkaller1: entered allmulticast mode [ 636.443942][T16098] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.454320][T16098] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.482329][T16098] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.491489][T16098] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.555062][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.565973][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.608853][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.629734][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.699202][T16101] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.722985][T16101] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.755734][T16101] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.780235][T16101] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.832435][T22894] xt_l2tp: missing protocol rule (udp|l2tpip) [ 636.953623][T22906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4159'. [ 637.171488][T22919] digital: digital_start_poll: Unknown protocol [ 637.185000][T22909] bridge0: port 3(vlan2) entered disabled state [ 637.191628][T22909] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.199547][T22909] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.444136][T22909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.457003][T22909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.628770][ T5946] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.666604][ T5946] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.678768][ T5946] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.688193][ T5946] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.703615][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.716711][T22931] netlink: 'syz.2.4164': attribute type 29 has an invalid length. [ 637.768195][ T5946] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.804930][ T5946] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.827379][ T5946] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.846915][ T5946] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.891064][T22930] netlink: 'syz.2.4164': attribute type 29 has an invalid length. [ 637.936978][T22933] lo speed is unknown, defaulting to 1000 [ 638.220204][T22933] lo speed is unknown, defaulting to 1000 [ 638.226595][T22950] lo speed is unknown, defaulting to 1000 [ 638.536770][T22950] lo speed is unknown, defaulting to 1000 [ 638.883079][T22962] netlink: 'syz.1.4172': attribute type 3 has an invalid length. [ 639.160025][T22974] __nla_validate_parse: 2 callbacks suppressed [ 639.160046][T22974] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4175'. [ 639.195979][T22974] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 639.547329][T22990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 639.609685][T22992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4180'. [ 639.620544][T22992] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 639.627893][T22992] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 639.736622][T22998] xt_hashlimit: size too large, truncated to 1048576 [ 639.800140][T23002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4183'. [ 640.343574][T23020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4187'. [ 640.449671][T23025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4188'. [ 640.482469][T23020] bond8: entered promiscuous mode [ 640.498159][T23020] 8021q: adding VLAN 0 to HW filter on device bond8 [ 640.579657][T16098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.588246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.654902][T23020] bond8 (unregistering): Released all slaves [ 640.698049][T23035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4191'. [ 640.707795][T23035] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 640.747537][ T5976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.789528][T23038] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4189'. [ 640.804450][T23038] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 640.820010][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4189'. [ 640.858000][T23038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4189'. [ 641.426072][T23061] netlink: 'syz.3.4198': attribute type 1 has an invalid length. [ 641.577632][T23061] 8021q: adding VLAN 0 to HW filter on device bond7 [ 641.673711][T23066] sit1: entered promiscuous mode [ 641.859391][ T5642] Bluetooth: hci3: command 0x0405 tx timeout [ 642.291538][T23088] netlink: 'syz.4.4202': attribute type 1 has an invalid length. [ 642.309968][T23084] netlink: 'syz.4.4202': attribute type 1 has an invalid length. [ 642.528429][T23103] bond0: entered allmulticast mode [ 642.537197][T23103] bond_slave_0: entered allmulticast mode [ 642.543555][T23103] bond_slave_1: entered allmulticast mode [ 643.189311][T23134] netlink: 'syz.4.4215': attribute type 6 has an invalid length. [ 643.250213][T23142] netlink: 'syz.4.4215': attribute type 14 has an invalid length. [ 643.551662][T23155] netlink: 'syz.3.4221': attribute type 4 has an invalid length. [ 643.589757][T23158] tipc: Cannot configure node identity twice [ 643.606228][T23158] tipc: Cannot configure node identity twice [ 643.782828][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.145360][T23189] netlink: 'syz.1.4229': attribute type 1 has an invalid length. [ 644.167123][T23187] nbd: must specify a size in bytes for the device [ 644.276202][T23193] bond2: (slave geneve2): making interface the new active one [ 644.285383][T23193] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 644.303823][ T137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 644.322825][ T137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 644.343737][ T137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 644.368654][ T137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 644.552784][T23207] netlink: 'syz.4.4233': attribute type 4 has an invalid length. [ 644.627644][T23207] __nla_validate_parse: 20 callbacks suppressed [ 644.627668][T23207] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4233'. [ 644.673029][T23209] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4233'. [ 644.751065][T23216] FAULT_INJECTION: forcing a failure. [ 644.751065][T23216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.769956][T23216] CPU: 0 UID: 0 PID: 23216 Comm: syz.2.4237 Not tainted syzkaller #0 PREEMPT(full) [ 644.769986][T23216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 644.769998][T23216] Call Trace: [ 644.770006][T23216] [ 644.770015][T23216] dump_stack_lvl+0xe8/0x150 [ 644.770046][T23216] should_fail_ex+0x412/0x560 [ 644.770078][T23216] _copy_from_user+0x2d/0xb0 [ 644.770107][T23216] ___sys_sendmsg+0x1c6/0x360 [ 644.770143][T23216] ? __lock_acquire+0x6b5/0x2cf0 [ 644.770171][T23216] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.770204][T23216] ? kstrtouint+0x6e/0xe0 [ 644.770262][T23216] ? __fget_files+0x2a/0x420 [ 644.770286][T23216] ? __fget_files+0x3a0/0x420 [ 644.770322][T23216] __sys_sendmmsg+0x27c/0x4e0 [ 644.770355][T23216] ? __pfx___sys_sendmmsg+0x10/0x10 [ 644.770378][T23216] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 644.770433][T23216] ? ksys_write+0x242/0x270 [ 644.770465][T23216] ? __pfx_ksys_write+0x10/0x10 [ 644.770501][T23216] __x64_sys_sendmmsg+0xa0/0xc0 [ 644.770528][T23216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.770550][T23216] do_syscall_64+0x15f/0xf80 [ 644.770572][T23216] ? trace_irq_disable+0x3b/0x140 [ 644.770602][T23216] ? clear_bhb_loop+0x40/0x90 [ 644.770627][T23216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.770647][T23216] RIP: 0033:0x7f480c79cdd9 [ 644.770668][T23216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.770686][T23216] RSP: 002b:00007f480d66b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 644.770708][T23216] RAX: ffffffffffffffda RBX: 00007f480ca15fa0 RCX: 00007f480c79cdd9 [ 644.770723][T23216] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 644.770737][T23216] RBP: 00007f480d66b090 R08: 0000000000000000 R09: 0000000000000000 [ 644.770749][T23216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.770761][T23216] R13: 00007f480ca16038 R14: 00007f480ca15fa0 R15: 00007ffe9f8f0288 [ 644.770795][T23216] [ 645.150320][T23220] syzkaller0: entered promiscuous mode [ 645.167487][T23220] syzkaller0: entered allmulticast mode [ 645.206527][T23220] lo: entered allmulticast mode [ 645.366204][T23236] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4242'. [ 645.415177][T23235] netlink: 'syz.3.4242': attribute type 4 has an invalid length. [ 645.425176][T23236] netlink: 'syz.3.4242': attribute type 4 has an invalid length. [ 645.525763][T23243] tipc: Cannot configure node identity twice [ 645.552969][T23243] tipc: Cannot configure node identity twice [ 645.593116][T23248] netlink: 'syz.2.4247': attribute type 1 has an invalid length. [ 645.617437][T23248] netlink: 'syz.2.4247': attribute type 3 has an invalid length. [ 645.633268][T23248] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4247'. [ 645.894101][T23263] xt_hashlimit: size too large, truncated to 1048576 [ 645.954994][T23271] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 646.094172][T23286] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4253'. [ 646.240977][T23290] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 646.260904][T23290] pim6reg0: persist disabled [ 646.348973][T16098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.357424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.394310][T23297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4258'. [ 646.433091][T23299] netlink: 'syz.2.4260': attribute type 1 has an invalid length. [ 646.469855][T23299] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4260'. [ 646.492302][ T5739] IPVS: starting estimator thread 0... [ 646.598880][T23305] IPVS: using max 26 ests per chain, 62400 per kthread [ 646.691314][T23310] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4266'. [ 646.712443][T23310] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4266'. [ 646.740960][T23315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4263'. [ 646.743540][T23310] 0·: renamed from hsr0 (while UP) [ 646.781228][T23310] 0·: entered allmulticast mode [ 646.792466][T23310] hsr_slave_0: entered allmulticast mode [ 646.809729][T23310] hsr_slave_1: entered allmulticast mode [ 646.819309][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.844208][T23310] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 646.979953][T23333] syzkaller0: entered promiscuous mode [ 647.007023][T23333] syzkaller0: entered allmulticast mode [ 647.181028][T23343] tipc: New replicast peer: 255.255.255.255 [ 647.206310][T23343] tipc: Enabled bearer , priority 10 [ 647.482098][T23353] netlink: 'syz.4.4276': attribute type 10 has an invalid length. [ 647.512252][T23353] team0: Cannot enslave team device to itself [ 647.690485][T23370] netlink: 'syz.4.4281': attribute type 27 has an invalid length. [ 647.707428][T23368] syzkaller1: entered promiscuous mode [ 647.716562][T23368] syzkaller1: entered allmulticast mode [ 647.832008][ T5739] IPVS: starting estimator thread 0... [ 647.922606][T23377] IPVS: using max 28 ests per chain, 67200 per kthread [ 648.021641][T23389] ip6gre3: entered promiscuous mode [ 648.027224][T23389] ip6gre3: entered allmulticast mode [ 648.116924][T23380] lo speed is unknown, defaulting to 1000 [ 648.455961][T23404] netlink: 'syz.3.4289': attribute type 4 has an invalid length. [ 648.690632][T23380] lo speed is unknown, defaulting to 1000 [ 649.709325][ T5739] lo speed is unknown, defaulting to 1000 [ 649.718316][ T5984] lo speed is unknown, defaulting to 1000 [ 649.757484][ T5984] syz2: Port: 1 Link DOWN [ 649.864958][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.117565][T23462] __nla_validate_parse: 9 callbacks suppressed [ 650.117581][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4303'. [ 650.179177][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 650.223428][T23464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4302'. [ 651.304794][T23518] geneve3: entered promiscuous mode [ 651.311769][T23518] geneve3: entered allmulticast mode [ 651.414541][ T5946] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.445921][ T5946] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.488805][ T5946] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.524268][ T5946] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 651.697952][T23542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4317'. [ 651.866998][T23550] RDS: rds_bind could not find a transport for ::ffff:172.20.20.66, load rds_tcp or rds_rdma? [ 652.104653][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.105626][T16101] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.113169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.173860][T16101] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.219364][T16101] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.244604][T16101] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.535348][T23583] 8021q: VLANs not supported on ip6tnl0 [ 652.768193][T23599] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4334'. [ 652.795350][T23600] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4331'. [ 652.805789][T23599] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4334'. [ 652.815737][T23599] netlink: 'syz.3.4334': attribute type 6 has an invalid length. [ 652.823928][T23599] netlink: 'syz.3.4334': attribute type 5 has an invalid length. [ 652.835141][T23599] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4334'. [ 652.898859][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.989363][T23611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4336'. [ 653.038706][T23601] netlink: 'syz.1.4333': attribute type 21 has an invalid length. [ 653.048106][T23597] lo speed is unknown, defaulting to 1000 [ 653.282212][T23623] netlink: 'syz.2.4340': attribute type 16 has an invalid length. [ 653.310945][T23623] netlink: 'syz.2.4340': attribute type 1 has an invalid length. [ 653.480813][T23623] 8021q: adding VLAN 0 to HW filter on device bond8 [ 654.129873][T23600] lo speed is unknown, defaulting to 1000 [ 654.129958][T23597] lo speed is unknown, defaulting to 1000 [ 654.140933][T23660] netlink: 'syz.1.4349': attribute type 3 has an invalid length. [ 654.166031][T23660] netlink: 'syz.1.4349': attribute type 3 has an invalid length. [ 654.182656][T23662] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4350'. [ 654.241153][T23665] netlink: 'syz.3.4351': attribute type 1 has an invalid length. [ 654.501965][T23677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4355'. [ 654.584534][T23674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.790916][T23689] tipc: Enabling of bearer rejected, failed to enable media [ 654.800650][T23600] lo speed is unknown, defaulting to 1000 [ 655.162288][T23699] bond8: option ad_user_port_key: invalid value (65535) [ 655.169606][T23699] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 655.179833][T23699] bond8 (unregistering): Released all slaves [ 655.941123][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.054123][T23727] __nla_validate_parse: 3 callbacks suppressed [ 656.054147][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4371'. [ 656.168459][T23741] openvswitch: netlink: Key type 82 is out of range max 32 [ 656.178328][T23738] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4374'. [ 656.209079][T23737] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4374'. [ 656.222821][ T5739] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 656.257531][T23722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4368'. [ 656.296605][T23737] sch_tbf: burst 0 is lower than device tunl0 mtu (129) ! [ 656.448992][T23743] fido_id[23743]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 656.485627][T23737] : entered promiscuous mode [ 657.066237][T23774] tipc: Enabled bearer , priority 0 [ 657.209002][T23774] syzkaller0: entered promiscuous mode [ 657.215418][T23774] syzkaller0: entered allmulticast mode [ 657.225856][T16101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.234506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.236176][T23774] tipc: Resetting bearer [ 657.288182][T23773] tipc: Resetting bearer [ 657.655941][T23795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4387'. [ 657.676598][T23795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4387'. [ 657.984764][T23811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4392'. [ 658.016804][T23812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4392'. [ 658.979374][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.402436][T23773] tipc: Disabling bearer [ 661.636916][T23845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4397'. [ 661.660732][T23842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 661.672746][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4399'. [ 661.766716][T23855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 661.901728][T23865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4405'. [ 662.021899][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.142954][T23880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4410'. [ 662.321220][T23892] sit0: entered promiscuous mode [ 662.332469][T23892] netlink: 'syz.2.4413': attribute type 1 has an invalid length. [ 662.349660][T23892] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4413'. [ 662.981640][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.990288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.415665][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4426'. [ 663.466404][T23949] netlink: 'syz.3.4427': attribute type 1 has an invalid length. [ 663.734763][T23959] tc_dump_action: action bad kind [ 663.943051][T23962] kthread_run failed with err -4 [ 664.429438][T23987] Cannot find set identified by id 65534 to match [ 664.607300][T23991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4438'. [ 664.623675][T23995] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4439'. [ 664.689632][T23996] bridge0: port 4(vlan3) entered blocking state [ 664.709596][T23996] bridge0: port 4(vlan3) entered disabled state [ 664.731498][T23996] vlan3: entered allmulticast mode [ 664.752154][T23996] vlan3: entered promiscuous mode [ 664.802873][T24003] tipc: Enabled bearer , priority 0 [ 664.836365][T24001] tipc: Enabling of bearer rejected, already enabled [ 664.867780][T24003] syzkaller0: entered promiscuous mode [ 664.893956][T24003] syzkaller0: entered allmulticast mode [ 665.060894][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.218372][T24020] openvswitch: netlink: IPv4 tun info is not correct [ 665.261543][T24005] tipc: Resetting bearer [ 665.297737][T24005] tipc: Disabling bearer [ 665.485582][T24030] xt_hashlimit: size too large, truncated to 1048576 [ 665.544965][T24034] bridge_slave_0 (unregistering): left allmulticast mode [ 665.585247][T24035] netlink: 'syz.1.4449': attribute type 1 has an invalid length. [ 665.586580][T24034] bridge_slave_0 (unregistering): left promiscuous mode [ 665.641466][T24034] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.921315][T24032] bond5 (unregistering): Released all slaves [ 666.154980][T24062] dvmrp0: entered allmulticast mode [ 666.391216][T24074] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 666.584485][T24093] xt_hashlimit: invalid rate [ 667.053153][T24095] lo speed is unknown, defaulting to 1000 [ 667.184744][T24110] __nla_validate_parse: 3 callbacks suppressed [ 667.184767][T24110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4463'. [ 667.505410][T24127] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4467'. [ 667.636589][T24130] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4468'. [ 667.666451][T24130] netlink: 680 bytes leftover after parsing attributes in process `syz.3.4468'. [ 667.691808][T24130] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4468'. [ 667.704903][T24134] netlink: 'syz.2.4467': attribute type 8 has an invalid length. [ 667.720603][T24134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4467'. [ 667.765465][T24134] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.866060][T24095] lo speed is unknown, defaulting to 1000 [ 667.969951][T24142] netlink: 296 bytes leftover after parsing attributes in process `syz.3.4471'. [ 667.978776][T24146] netlink: 'syz.4.4472': attribute type 13 has an invalid length. [ 667.987551][T24146] netlink: 'syz.4.4472': attribute type 17 has an invalid length. [ 668.104002][T24146] gretap0: refused to change device tx_queue_len [ 668.108879][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.110893][T24146] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 668.161757][T24149] ipvlan2: entered promiscuous mode [ 668.169341][T24149] bridge0: port 6(ipvlan2) entered blocking state [ 668.177382][T24149] bridge0: port 6(ipvlan2) entered disabled state [ 668.186727][T24149] ipvlan2: entered allmulticast mode [ 668.192838][T24149] bridge0: entered allmulticast mode [ 668.217334][T24149] ipvlan2: left allmulticast mode [ 668.223696][T24149] bridge0: left allmulticast mode [ 668.284093][ T5739] lo speed is unknown, defaulting to 1000 [ 668.297639][ T5739] sqz0: Port: 1 Link ACTIVE [ 668.438264][ T5984] lo speed is unknown, defaulting to 1000 [ 668.555435][T24165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4475'. [ 668.741507][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.750275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.895781][T24183] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4480'. [ 669.011062][T24190] netlink: 'syz.2.4481': attribute type 1 has an invalid length. [ 669.076845][T24194] netlink: 'syz.2.4481': attribute type 8 has an invalid length. [ 669.102466][T24190] 8021q: adding VLAN 0 to HW filter on device bond9 [ 669.337902][T24213] netlink: 'syz.4.4487': attribute type 1 has an invalid length. [ 669.383881][T24212] netlink: 'syz.4.4487': attribute type 1 has an invalid length. [ 669.465120][ T30] audit: type=1107 audit(1777931033.840:13): pid=24214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 669.524168][T24220] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4488'. [ 670.015020][T24245] netlink: 'syz.2.4495': attribute type 1 has an invalid length. [ 670.055553][T24204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.318250][T24254] IPVS: Unknown mcast interface: pim6reg [ 670.558099][T24268] syzkaller0: entered promiscuous mode [ 670.573124][T24268] syzkaller0: entered allmulticast mode [ 670.603823][T24273] veth0: Caught tx_queue_len zero misconfig [ 670.681263][T24277] netlink: 'syz.4.4504': attribute type 7 has an invalid length. [ 670.692784][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.702715][T24277] netlink: 'syz.4.4504': attribute type 8 has an invalid length. [ 670.763243][T24277] bridge0: entered promiscuous mode [ 670.770357][T24277] bridge0: left promiscuous mode [ 670.790810][T24281] 8021q: VLANs not supported on ip_vti0 [ 671.595650][T24317] tipc: Enabled bearer , priority 0 [ 671.707760][T24317] syzkaller0: entered promiscuous mode [ 671.713598][T24317] syzkaller0: entered allmulticast mode [ 671.731849][T24317] tipc: Resetting bearer [ 671.757992][T24316] tipc: Resetting bearer [ 672.866662][T24343] netlink: 'syz.4.4524': attribute type 10 has an invalid length. [ 673.711160][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.499749][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.508204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.756286][T24316] tipc: Disabling bearer [ 675.770035][ T5984] tipc: Node number set to 845400918 [ 675.996926][T24353] Unsupported ieee802154 address type: 0 [ 676.197660][T24368] __nla_validate_parse: 9 callbacks suppressed [ 676.197681][T24368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4531'. [ 676.219145][T24368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4531'. [ 676.252474][T24367] syzkaller0: entered promiscuous mode [ 676.268135][T24367] syzkaller0: entered allmulticast mode [ 676.438218][T24373] xt_CT: No such helper "pptp" [ 676.739432][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.807482][T24392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4536'. [ 676.840392][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4536'. [ 676.858644][T24392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4536'. [ 676.883915][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4536'. [ 676.907833][T24392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4536'. [ 677.455999][T24413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4542'. [ 677.675496][T24425] syzkaller0: entered promiscuous mode [ 677.698995][T24425] syzkaller0: entered allmulticast mode [ 677.800260][T24429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4546'. [ 678.050640][T24427] nbd2: detected capacity change from 0 to 127 [ 678.069765][ T5646] block nbd2: Receive control failed (result -32) [ 678.081488][T24352] block nbd2: Dead connection, failed to find a fallback [ 678.090530][T24352] block nbd2: shutting down sockets [ 678.098240][T24352] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.110063][T24352] Buffer I/O error on dev nbd2, logical block 0, async page read [ 678.121012][T24352] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.130258][T24352] Buffer I/O error on dev nbd2, logical block 1, async page read [ 678.138303][T24352] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.147877][T24352] Buffer I/O error on dev nbd2, logical block 2, async page read [ 678.156228][T24352] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.176304][T24352] Buffer I/O error on dev nbd2, logical block 3, async page read [ 678.195928][T24352] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.213390][T24352] Buffer I/O error on dev nbd2, logical block 0, async page read [ 678.255484][T24352] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.297228][T24352] Buffer I/O error on dev nbd2, logical block 1, async page read [ 678.323791][T24352] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.358109][T24352] Buffer I/O error on dev nbd2, logical block 2, async page read [ 678.391186][T24352] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.422271][T24352] Buffer I/O error on dev nbd2, logical block 3, async page read [ 678.443831][T24352] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.467098][T24352] Buffer I/O error on dev nbd2, logical block 0, async page read [ 678.483723][T24352] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 678.512243][T24352] Buffer I/O error on dev nbd2, logical block 1, async page read [ 678.572384][T24352] ldm_validate_partition_table(): Disk read failed. [ 678.597671][T24352] Dev nbd2: unable to read RDB block 0 [ 678.625087][T24352] nbd2: unable to read partition table [ 678.653334][T24352] ldm_validate_partition_table(): Disk read failed. [ 678.664633][T24352] Dev nbd2: unable to read RDB block 0 [ 678.694494][T24352] nbd2: unable to read partition table [ 678.912162][T24455] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 678.934955][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4553'. [ 679.534323][T24487] tipc: Enabling of bearer rejected, failed to enable media [ 679.787758][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.992108][T24516] netlink: 'syz.0.4569': attribute type 2 has an invalid length. [ 680.259568][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.268366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.491586][T24552] netlink: 'syz.1.4580': attribute type 9 has an invalid length. [ 680.717007][T24564] Can't find ip_set type hash*ipédâ [ 680.887104][T24559] lo speed is unknown, defaulting to 1000 [ 680.905034][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.277585][T24597] __nla_validate_parse: 7 callbacks suppressed [ 681.277606][T24597] netlink: 376 bytes leftover after parsing attributes in process `syz.4.4591'. [ 681.283889][T24600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4590'. [ 681.300751][T24600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4590'. [ 681.314437][T24598] ip6gre1: entered promiscuous mode [ 681.561752][T24612] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4594'. [ 681.576935][T24600] bond5: option arp_all_targets: invalid value (129) [ 681.613061][T24600] bond5 (unregistering): Released all slaves [ 681.656304][T24559] lo speed is unknown, defaulting to 1000 [ 682.764486][T24652] nbd: socks must be embedded in a SOCK_ITEM attr [ 682.816053][T24652] netlink: 'syz.2.4607': attribute type 13 has an invalid length. [ 682.848084][T24652] netlink: 'syz.2.4607': attribute type 17 has an invalid length. [ 683.061898][T24665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4607'. [ 683.250409][T24652] sit0: left promiscuous mode [ 683.472868][T24652] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.480397][T24652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.523225][T24652] bond0: left allmulticast mode [ 683.568995][T24652] bond_slave_0: left allmulticast mode [ 683.594446][T24652] bond_slave_1: left allmulticast mode [ 683.753969][T24652] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 683.829609][T24668] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 683.852057][T24668] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 683.876688][T24668] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 683.949915][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.004743][T16098] bond0: (slave ip6gretap1): link status up again after 0 ms [ 684.029314][ T5747] lo speed is unknown, defaulting to 1000 [ 684.034835][T16098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 684.178926][ T5944] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 684.329624][T16098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 684.479401][T16098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 684.609717][ T5943] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 684.753552][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 684.833484][T24705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4618'. [ 684.872284][T24704] lo speed is unknown, defaulting to 1000 [ 684.884291][ T5950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 685.099238][ T5747] lo speed is unknown, defaulting to 1000 [ 685.113790][ T5747] syz2: Port: 1 Link ACTIVE [ 685.129529][ T5943] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 685.334418][T24718] sctp: [Deprecated]: syz.2.4622 (pid 24718) Use of int in maxseg socket option. [ 685.334418][T24718] Use struct sctp_assoc_value instead [ 685.575261][T24704] lo speed is unknown, defaulting to 1000 [ 686.197765][T24751] xt_cluster: node mask cannot exceed total number of nodes [ 686.704195][T24763] netlink: 'syz.0.4635': attribute type 10 has an invalid length. [ 686.777058][T24768] netlink: 'syz.0.4635': attribute type 10 has an invalid length. [ 686.811172][T24763] dummy0: entered promiscuous mode [ 686.837897][T24763] team0: Port device dummy0 added [ 686.871406][T24768] dummy0: left promiscuous mode [ 686.917974][T24768] team0: Port device dummy0 removed [ 687.549306][T24792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4645'. [ 687.980348][T24804] syzkaller0: entered promiscuous mode [ 687.997321][T24804] syzkaller0: entered allmulticast mode [ 690.027686][ T5984] net_ratelimit: 22 callbacks suppressed [ 690.027711][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.141026][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.150035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.514197][T24821] lo speed is unknown, defaulting to 1000 [ 692.528667][ T5946] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 692.670010][ T5950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 692.829881][ T5943] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 692.979156][ T5944] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 693.053295][T24882] syzkaller0: entered promiscuous mode [ 693.060641][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.081865][T24882] syzkaller0: entered allmulticast mode [ 693.206047][T24866] lo speed is unknown, defaulting to 1000 [ 693.208004][T24821] lo speed is unknown, defaulting to 1000 [ 693.219342][ T5944] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 693.226644][T24884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4666'. [ 693.618927][ T5950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 693.743364][T24866] lo speed is unknown, defaulting to 1000 [ 693.972015][T24889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4668'. [ 694.196116][T24898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4669'. [ 694.492310][T24907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4671'. [ 694.523822][T24908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4671'. [ 694.549746][T24907] netlink: 'syz.0.4671': attribute type 2 has an invalid length. [ 694.570673][T24907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4671'. [ 694.614063][T24908] netlink: 'syz.0.4671': attribute type 2 has an invalid length. [ 694.634807][T24902] syzkaller1: entered promiscuous mode [ 694.651964][T24908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4671'. [ 694.666987][T24902] syzkaller1: entered allmulticast mode [ 695.140259][ T5950] net_ratelimit: 5 callbacks suppressed [ 695.140282][ T5950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 695.265750][T24921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4674'. [ 695.301939][T16098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 695.324883][T24924] SET target dimension over the limit! [ 695.330337][T24925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4674'. [ 695.438706][ T5950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 695.560314][ T5950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 695.625744][T24935] netlink: 'syz.0.4679': attribute type 39 has an invalid length. [ 695.823284][ T5954] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 696.001167][ T5943] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 696.018899][T24960] No such timeout policy "syz0" [ 696.101023][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.150039][T16098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 696.275550][T24962] lo speed is unknown, defaulting to 1000 [ 696.290501][T24950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 696.408834][ T5943] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 696.421340][T24974] netlink: 'syz.1.4687': attribute type 1 has an invalid length. [ 696.452240][T24974] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4687'. [ 697.298370][T24962] lo speed is unknown, defaulting to 1000 [ 697.306106][T24980] lo speed is unknown, defaulting to 1000 [ 698.059810][T24980] lo speed is unknown, defaulting to 1000 [ 698.562010][T25022] dvmrp8: entered allmulticast mode [ 698.921120][T25027] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 698.954867][T25027] bond8 (unregistering): Released all slaves [ 699.041206][T25032] bridge3: entered promiscuous mode [ 699.080997][T25032] bridge3: entered allmulticast mode [ 699.441187][T25047] ip6tnl0: Caught tx_queue_len zero misconfig [ 699.568304][T25052] netlink: 'syz.4.4704': attribute type 13 has an invalid length. [ 699.605712][T25052] netlink: 'syz.4.4704': attribute type 17 has an invalid length. [ 699.623017][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4704'. [ 699.738409][T25052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.748196][T25052] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.795005][T25052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 699.805881][T25052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.833271][T24952] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.840665][T24952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.852951][T24952] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.860207][T24952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.149633][ T5943] net_ratelimit: 17 callbacks suppressed [ 700.149657][ T5943] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 700.182318][T25069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4709'. [ 700.222266][T25069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4709'. [ 700.291739][T16100] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 700.423477][T16098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 700.560960][T16100] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 700.703638][ T5943] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 700.844332][ T5950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 700.985665][T25111] hsr_slave_0: left promiscuous mode [ 701.107517][T25111] hsr_slave_1: left promiscuous mode [ 701.380255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.428721][T25127] xt_hashlimit: size too large, truncated to 1048576 [ 701.466231][T25131] netlink: 'syz.4.4717': attribute type 21 has an invalid length. [ 701.510207][T24952] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 701.692186][T25136] netlink: 'syz.1.4718': attribute type 1 has an invalid length. [ 701.703655][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 701.746399][T25136] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4718'. [ 701.814717][T25136] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 701.841507][T16098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 701.883239][T25143] xt_policy: output policy not valid in PREROUTING and INPUT [ 702.455011][T25162] netlink: 'syz.3.4725': attribute type 1 has an invalid length. [ 702.485915][T25162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4725'. [ 702.826467][T25175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4731'. [ 703.702955][T25227] netlink: 'syz.2.4746': attribute type 1 has an invalid length. [ 703.889845][T25232] tipc: Enabling not permitted [ 703.897388][T25232] tipc: Enabling of bearer rejected, failed to enable media [ 703.913605][T25229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4748'. [ 703.926316][T25238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4752'. [ 704.046286][T25245] netlink: 'syz.2.4753': attribute type 1 has an invalid length. [ 704.212490][T25251] bond11: (slave veth13): Enslaving as an active interface with a down link [ 704.246846][T25251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4753'. [ 704.292158][T25245] bond11: (slave veth15): Enslaving as an active interface with a down link [ 704.427107][T25265] xt_TCPMSS: Only works on TCP SYN packets [ 704.526517][T25268] ÿ: renamed from bond_slave_0 (while UP) [ 704.600661][T25274] netlink: 'syz.1.4762': attribute type 4 has an invalid length. [ 704.616858][T25274] netlink: 'syz.1.4762': attribute type 4 has an invalid length. [ 704.781834][T25292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4767'. [ 704.842823][T25295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4767'. [ 704.878342][T25298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4768'. [ 705.160370][T24950] net_ratelimit: 28 callbacks suppressed [ 705.160394][T24950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 705.267116][T25311] ip6erspan0: entered allmulticast mode [ 705.294193][T25317] netlink: 'syz.4.4776': attribute type 1 has an invalid length. [ 705.305448][T25317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.305580][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.315822][T24952] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 705.445493][T25324] lo speed is unknown, defaulting to 1000 [ 705.477017][T25326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4778'. [ 705.488771][ T5942] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 705.608618][ T5942] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 705.637786][T25334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4780'. [ 705.653818][T25334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4780'. [ 705.679383][T25334] netlink: 'syz.1.4780': attribute type 4 has an invalid length. [ 705.768839][ T5942] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 705.829865][T25339] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4781'. [ 705.876185][T25340] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4781'. [ 705.888740][T24950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 705.964845][T25324] lo speed is unknown, defaulting to 1000 [ 705.965542][T25331] lo speed is unknown, defaulting to 1000 [ 706.119655][ T5942] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 706.229624][ T5942] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 706.369805][T25354] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4785'. [ 706.371597][T25352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4784'. [ 706.546703][T25346] lo speed is unknown, defaulting to 1000 [ 706.822919][T25346] lo speed is unknown, defaulting to 1000 [ 706.921413][T25331] lo speed is unknown, defaulting to 1000 [ 707.468110][T25375] xt_bpf: check failed: parse error [ 707.915270][T25382] : entered promiscuous mode [ 707.937621][T25382] openvswitch: : Dropping previously announced user features [ 708.844671][T25431] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 708.910577][T25431] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 709.027390][T25431] [ 709.029919][T25431] ====================================================== [ 709.037056][T25431] WARNING: possible circular locking dependency detected [ 709.044112][T25431] syzkaller #0 Not tainted [ 709.048557][T25431] ------------------------------------------------------ [ 709.055603][T25431] syz.1.4805/25431 is trying to acquire lock: [ 709.061782][T25431] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 709.071588][T25431] [ 709.071588][T25431] but task is already holding lock: [ 709.079060][T25431] ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 709.088078][T25431] [ 709.088078][T25431] which lock already depends on the new lock. [ 709.088078][T25431] [ 709.098500][T25431] [ 709.098500][T25431] the existing dependency chain (in reverse order) is: [ 709.107602][T25431] [ 709.107602][T25431] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 709.114839][T25431] __mutex_lock+0x1a3/0x1550 [ 709.120136][T25431] get_device_parent+0x16f/0x3a0 [ 709.125605][T25431] device_add+0x2e1/0xbb0 [ 709.130461][T25431] device_create+0x269/0x300 [ 709.135588][T25431] msr_device_create+0x33/0x50 [ 709.140992][T25431] cpuhp_invoke_callback+0x445/0x860 [ 709.146893][T25431] cpuhp_thread_fun+0x36b/0x780 [ 709.152274][T25431] smpboot_thread_fn+0x541/0xa50 [ 709.157742][T25431] kthread+0x388/0x470 [ 709.162352][T25431] ret_from_fork+0x514/0xb70 [ 709.167554][T25431] ret_from_fork_asm+0x1a/0x30 [ 709.172849][T25431] [ 709.172849][T25431] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 709.180590][T25431] cpuhp_thread_fun+0x127/0x780 [ 709.186055][T25431] smpboot_thread_fn+0x541/0xa50 [ 709.191546][T25431] kthread+0x388/0x470 [ 709.196144][T25431] ret_from_fork+0x514/0xb70 [ 709.201430][T25431] ret_from_fork_asm+0x1a/0x30 [ 709.206739][T25431] [ 709.206739][T25431] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 709.214732][T25431] cpus_read_lock+0x42/0x160 [ 709.219893][T25431] static_key_slow_inc+0x12/0x30 [ 709.225367][T25431] udp_tunnel_encap_enable+0x86/0xb0 [ 709.231180][T25431] udp_lib_setsockopt+0x5b6/0x6b0 [ 709.236743][T25431] udpv6_setsockopt+0x67/0xb0 [ 709.241975][T25431] do_sock_setsockopt+0x17c/0x1b0 [ 709.247529][T25431] __x64_sys_setsockopt+0x13d/0x1b0 [ 709.253270][T25431] do_syscall_64+0x15f/0xf80 [ 709.258405][T25431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.264862][T25431] [ 709.264862][T25431] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 709.272650][T25431] lock_sock_nested+0x41/0x100 [ 709.277963][T25431] inet_shutdown+0x6a/0x390 [ 709.283009][T25431] nbd_mark_nsock_dead+0x2e9/0x560 [ 709.288657][T25431] recv_work+0x1c2e/0x1d40 [ 709.293606][T25431] process_scheduled_works+0xb5d/0x1860 [ 709.299684][T25431] worker_thread+0xa53/0xfc0 [ 709.304912][T25431] kthread+0x388/0x470 [ 709.309518][T25431] ret_from_fork+0x514/0xb70 [ 709.314708][T25431] ret_from_fork_asm+0x1a/0x30 [ 709.320011][T25431] [ 709.320011][T25431] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 709.327928][T25431] __mutex_lock+0x1a3/0x1550 [ 709.333134][T25431] nbd_queue_rq+0x37b/0x1100 [ 709.338438][T25431] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 709.344841][T25431] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 709.351808][T25431] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 709.358420][T25431] blk_mq_run_hw_queue+0x348/0x4f0 [ 709.364079][T25431] blk_mq_dispatch_list+0xd16/0xe10 [ 709.369811][T25431] blk_mq_flush_plug_list+0x48d/0x570 [ 709.375896][T25431] __blk_flush_plug+0x3ed/0x4d0 [ 709.381369][T25431] __submit_bio+0x28d/0x580 [ 709.386583][T25431] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 709.392843][T25431] block_read_full_folio+0x599/0x830 [ 709.398677][T25431] filemap_read_folio+0x137/0x3b0 [ 709.404443][T25431] do_read_cache_folio+0x358/0x590 [ 709.410114][T25431] read_part_sector+0xb6/0x2b0 [ 709.415498][T25431] adfspart_check_ICS+0xb1/0x960 [ 709.420977][T25431] bdev_disk_changed+0x817/0x1770 [ 709.426533][T25431] blkdev_get_whole+0x380/0x510 [ 709.432001][T25431] bdev_open+0x31e/0xd30 [ 709.436779][T25431] blkdev_open+0x470/0x610 [ 709.441718][T25431] do_dentry_open+0x785/0x14e0 [ 709.447006][T25431] vfs_open+0x3b/0x340 [ 709.451601][T25431] path_openat+0x2e08/0x3860 [ 709.456717][T25431] do_file_open+0x23e/0x4a0 [ 709.461759][T25431] do_sys_openat2+0x113/0x200 [ 709.466991][T25431] __x64_sys_openat+0x138/0x170 [ 709.472475][T25431] do_syscall_64+0x15f/0xf80 [ 709.477640][T25431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.484064][T25431] [ 709.484064][T25431] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 709.491303][T25431] __mutex_lock+0x1a3/0x1550 [ 709.496443][T25431] nbd_queue_rq+0xc6/0x1100 [ 709.501556][T25431] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 709.507634][T25431] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 709.514668][T25431] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 709.521267][T25431] blk_mq_run_hw_queue+0x348/0x4f0 [ 709.526926][T25431] blk_mq_dispatch_list+0xd16/0xe10 [ 709.532742][T25431] blk_mq_flush_plug_list+0x48d/0x570 [ 709.538835][T25431] __blk_flush_plug+0x3ed/0x4d0 [ 709.544333][T25431] __submit_bio+0x28d/0x580 [ 709.549396][T25431] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 709.555702][T25431] block_read_full_folio+0x599/0x830 [ 709.561789][T25431] filemap_read_folio+0x137/0x3b0 [ 709.567347][T25431] do_read_cache_folio+0x358/0x590 [ 709.573013][T25431] read_part_sector+0xb6/0x2b0 [ 709.578313][T25431] adfspart_check_ICS+0xb1/0x960 [ 709.583782][T25431] bdev_disk_changed+0x817/0x1770 [ 709.589340][T25431] blkdev_get_whole+0x380/0x510 [ 709.594814][T25431] bdev_open+0x31e/0xd30 [ 709.599624][T25431] blkdev_open+0x470/0x610 [ 709.604655][T25431] do_dentry_open+0x785/0x14e0 [ 709.610118][T25431] vfs_open+0x3b/0x340 [ 709.614797][T25431] path_openat+0x2e08/0x3860 [ 709.619917][T25431] do_file_open+0x23e/0x4a0 [ 709.624952][T25431] do_sys_openat2+0x113/0x200 [ 709.630326][T25431] __x64_sys_openat+0x138/0x170 [ 709.635710][T25431] do_syscall_64+0x15f/0xf80 [ 709.640837][T25431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.647255][T25431] [ 709.647255][T25431] -> #3 (set->srcu){.+.+}-{0:0}: [ 709.654420][T25431] __synchronize_srcu+0xca/0x300 [ 709.660090][T25431] elevator_switch+0x1e8/0x7a0 [ 709.665579][T25431] elevator_change+0x2cc/0x450 [ 709.670881][T25431] elevator_set_default+0x36c/0x430 [ 709.676703][T25431] blk_register_queue+0x3e9/0x4e0 [ 709.682353][T25431] __add_disk+0x677/0xd50 [ 709.687209][T25431] add_disk_fwnode+0xfb/0x480 [ 709.692408][T25431] nbd_dev_add+0x72c/0xb50 [ 709.697348][T25431] nbd_init+0x168/0x1f0 [ 709.702038][T25431] do_one_initcall+0x250/0x870 [ 709.707330][T25431] do_initcall_level+0x104/0x190 [ 709.712795][T25431] do_initcalls+0x59/0xa0 [ 709.717754][T25431] kernel_init_freeable+0x2a6/0x3e0 [ 709.723482][T25431] kernel_init+0x1d/0x1d0 [ 709.728344][T25431] ret_from_fork+0x514/0xb70 [ 709.733457][T25431] ret_from_fork_asm+0x1a/0x30 [ 709.738759][T25431] [ 709.738759][T25431] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 709.746766][T25431] __mutex_lock+0x1a3/0x1550 [ 709.751890][T25431] elevator_change+0x1b3/0x450 [ 709.757203][T25431] elevator_set_none+0xb5/0x140 [ 709.762758][T25431] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 709.769263][T25431] nbd_start_device+0x17f/0xb10 [ 709.774639][T25431] nbd_genl_connect+0x165b/0x1cf0 [ 709.780184][T25431] genl_family_rcv_msg_doit+0x22a/0x330 [ 709.786270][T25431] genl_rcv_msg+0x61c/0x7a0 [ 709.791305][T25431] netlink_rcv_skb+0x232/0x4b0 [ 709.796609][T25431] genl_rcv+0x28/0x40 [ 709.801144][T25431] netlink_unicast+0x75c/0x8e0 [ 709.806451][T25431] netlink_sendmsg+0x813/0xb40 [ 709.811843][T25431] ____sys_sendmsg+0x972/0x9f0 [ 709.817136][T25431] ___sys_sendmsg+0x2a5/0x360 [ 709.822350][T25431] __x64_sys_sendmsg+0x1bd/0x2a0 [ 709.827819][T25431] do_syscall_64+0x15f/0xf80 [ 709.832935][T25431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.839355][T25431] [ 709.839355][T25431] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 709.847969][T25431] blk_alloc_queue+0x546/0x680 [ 709.853265][T25431] __blk_mq_alloc_disk+0x197/0x390 [ 709.858926][T25431] nbd_dev_add+0x499/0xb50 [ 709.863960][T25431] nbd_init+0x168/0x1f0 [ 709.868648][T25431] do_one_initcall+0x250/0x870 [ 709.873941][T25431] do_initcall_level+0x104/0x190 [ 709.879416][T25431] do_initcalls+0x59/0xa0 [ 709.884377][T25431] kernel_init_freeable+0x2a6/0x3e0 [ 709.890368][T25431] kernel_init+0x1d/0x1d0 [ 709.895231][T25431] ret_from_fork+0x514/0xb70 [ 709.900445][T25431] ret_from_fork_asm+0x1a/0x30 [ 709.905746][T25431] [ 709.905746][T25431] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 709.912965][T25431] __lock_acquire+0x15a5/0x2cf0 [ 709.918365][T25431] lock_acquire+0x106/0x350 [ 709.923393][T25431] fs_reclaim_acquire+0x71/0x100 [ 709.928863][T25431] __kmalloc_cache_noprof+0x40/0x660 [ 709.934684][T25431] get_device_parent+0x255/0x3a0 [ 709.940152][T25431] device_add+0x2e1/0xbb0 [ 709.945266][T25431] firmware_fallback_sysfs+0x2e4/0xa30 [ 709.951253][T25431] _request_firmware+0x1052/0x1780 [ 709.956906][T25431] request_firmware+0x36/0x50 [ 709.962115][T25431] devlink_compat_flash_update+0x15a/0x2c0 [ 709.968452][T25431] dev_ethtool+0x1874/0x1ae0 [ 709.973589][T25431] dev_ioctl+0x392/0x1150 [ 709.978878][T25431] sock_do_ioctl+0x23e/0x320 [ 709.984097][T25431] sock_ioctl+0x5c6/0x7f0 [ 709.988957][T25431] __se_sys_ioctl+0xfc/0x170 [ 709.994090][T25431] do_syscall_64+0x15f/0xf80 [ 709.999236][T25431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.005672][T25431] [ 710.005672][T25431] other info that might help us debug this: [ 710.005672][T25431] [ 710.016186][T25431] Chain exists of: [ 710.016186][T25431] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 710.016186][T25431] [ 710.028194][T25431] Possible unsafe locking scenario: [ 710.028194][T25431] [ 710.035768][T25431] CPU0 CPU1 [ 710.041139][T25431] ---- ---- [ 710.046507][T25431] lock(gdp_mutex); [ 710.050410][T25431] lock(cpuhp_state-up); [ 710.057296][T25431] lock(gdp_mutex); [ 710.063804][T25431] lock(fs_reclaim); [ 710.067974][T25431] [ 710.067974][T25431] *** DEADLOCK *** [ 710.067974][T25431] [ 710.076139][T25431] 3 locks held by syz.1.4805/25431: [ 710.081444][T25431] #0: ffff88801dafb258 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_compat_flash_update+0xa6/0x2c0 [ 710.092882][T25431] #1: ffffffff8e7f9ae8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 710.103350][T25431] #2: ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 710.112670][T25431] [ 710.112670][T25431] stack backtrace: [ 710.118831][T25431] CPU: 0 UID: 0 PID: 25431 Comm: syz.1.4805 Not tainted syzkaller #0 PREEMPT(full) [ 710.118850][T25431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 710.118860][T25431] Call Trace: [ 710.118870][T25431] [ 710.118878][T25431] dump_stack_lvl+0xe8/0x150 [ 710.118898][T25431] print_circular_bug+0x2e1/0x300 [ 710.118921][T25431] check_noncircular+0x12e/0x150 [ 710.118945][T25431] __lock_acquire+0x15a5/0x2cf0 [ 710.118965][T25431] ? lockdep_unlock+0x5d/0xd0 [ 710.118978][T25431] ? __lock_acquire+0x146e/0x2cf0 [ 710.118995][T25431] ? __mutex_lock+0x319/0x1550 [ 710.119018][T25431] ? __kmalloc_cache_noprof+0x40/0x660 [ 710.119039][T25431] lock_acquire+0x106/0x350 [ 710.119055][T25431] ? __kmalloc_cache_noprof+0x40/0x660 [ 710.119081][T25431] fs_reclaim_acquire+0x71/0x100 [ 710.119104][T25431] ? __kmalloc_cache_noprof+0x40/0x660 [ 710.119125][T25431] __kmalloc_cache_noprof+0x40/0x660 [ 710.119147][T25431] ? get_device_parent+0x255/0x3a0 [ 710.119162][T25431] ? do_raw_spin_unlock+0xf5/0x210 [ 710.119186][T25431] get_device_parent+0x255/0x3a0 [ 710.119204][T25431] device_add+0x2e1/0xbb0 [ 710.119221][T25431] firmware_fallback_sysfs+0x2e4/0xa30 [ 710.119239][T25431] ? kfree+0x1c5/0x640 [ 710.119259][T25431] _request_firmware+0x1052/0x1780 [ 710.119289][T25431] ? __pfx__request_firmware+0x10/0x10 [ 710.119312][T25431] ? xa_get_mark+0x6fc/0x7b0 [ 710.119336][T25431] request_firmware+0x36/0x50 [ 710.119358][T25431] devlink_compat_flash_update+0x15a/0x2c0 [ 710.119381][T25431] ? __pfx_netdev_run_todo+0x10/0x10 [ 710.119404][T25431] ? __pfx_devlink_compat_flash_update+0x10/0x10 [ 710.119427][T25431] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 710.119445][T25431] dev_ethtool+0x1874/0x1ae0 [ 710.119473][T25431] ? __pfx_dev_ethtool+0x10/0x10 [ 710.119495][T25431] ? dev_load+0x21/0x1f0 [ 710.119517][T25431] ? dev_load+0x21/0x1f0 [ 710.119533][T25431] dev_ioctl+0x392/0x1150 [ 710.119551][T25431] sock_do_ioctl+0x23e/0x320 [ 710.119576][T25431] ? __pfx_sock_do_ioctl+0x10/0x10 [ 710.119599][T25431] ? do_futex+0x333/0x420 [ 710.119622][T25431] sock_ioctl+0x5c6/0x7f0 [ 710.119645][T25431] ? __pfx_sock_ioctl+0x10/0x10 [ 710.119668][T25431] ? __fget_files+0x2a/0x420 [ 710.119686][T25431] ? __fget_files+0x3a0/0x420 [ 710.119703][T25431] ? __fget_files+0x2a/0x420 [ 710.119729][T25431] ? bpf_lsm_file_ioctl+0x9/0x20 [ 710.119752][T25431] ? __pfx_sock_ioctl+0x10/0x10 [ 710.119774][T25431] __se_sys_ioctl+0xfc/0x170 [ 710.119797][T25431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.119814][T25431] do_syscall_64+0x15f/0xf80 [ 710.119832][T25431] ? trace_irq_disable+0x3b/0x140 [ 710.119855][T25431] ? clear_bhb_loop+0x40/0x90 [ 710.119873][T25431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.119889][T25431] RIP: 0033:0x7f318359cdd9 [ 710.119905][T25431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.119919][T25431] RSP: 002b:00007f318439d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 710.119936][T25431] RAX: ffffffffffffffda RBX: 00007f3183816270 RCX: 00007f318359cdd9 [ 710.119947][T25431] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000b [ 710.119958][T25431] RBP: 00007f3183632d69 R08: 0000000000000000 R09: 0000000000000000 [ 710.119968][T25431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.119978][T25431] R13: 00007f3183816308 R14: 00007f3183816270 R15: 00007fffc526d638 [ 710.119996][T25431] [ 710.467597][T25444] __nla_validate_parse: 10 callbacks suppressed [ 710.467620][T25444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4813'. [ 710.483956][T25449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4813'. [ 710.618852][T16098] net_ratelimit: 26 callbacks suppressed [ 710.618877][T16098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 710.738873][T24952] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 710.848660][ T5942] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 710.968864][T24950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 711.078988][ T5960] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 711.188924][T24950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 711.299229][T24950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 711.379374][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.418707][ T12] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 711.528832][ T5942] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 711.620420][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 711.638423][ T5942] dvmrp0: left allmulticast mode [ 711.644737][ T5942] batman_adv: batadv0: Interface deactivated: gretap1 [ 711.667411][ T5942] batman_adv: batadv0: Interface deactivated: vlan4 [ 711.786527][ T5942] batman_adv: batadv0: Removing interface: vlan4 [ 711.814616][ T5942] batman_adv: batadv0: Removing interface: gretap1 [ 711.860340][ T5942] bond8 (unregistering): (slave gretap3): Releasing active interface [ 711.892945][ T5942] bond1 (unregistering): (slave geneve2): Releasing active interface [ 711.950462][ T5942] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 712.091019][ T5942] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 712.282218][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.293170][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 712.303307][ T5942] bond0 (unregistering): Released all slaves [ 712.311575][ T5942] bond1 (unregistering): Released all slaves [ 712.321301][ T5942] bond2 (unregistering): Released all slaves [ 712.332367][ T5942] bond3 (unregistering): Released all slaves [ 712.342155][ T5942] bond4 (unregistering): Released all slaves [ 712.354277][ T5942] bond5 (unregistering): Released all slaves [ 712.367196][ T5942] bond6 (unregistering): Released all slaves [ 712.379530][ T5942] bond7 (unregistering): Released all slaves [ 712.392164][ T5942] bond8 (unregistering): Released all slaves [ 712.405783][ T5942] bond9 (unregistering): Released all slaves [ 712.418392][ T5942] bond10 (unregistering): Released all slaves [ 712.516290][ T5942] tipc: Left network mode [ 712.972260][ T5942] hsr_slave_0: left promiscuous mode [ 712.986018][ T5942] hsr_slave_1: left promiscuous mode [ 712.992346][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.001501][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.010568][ T5942] veth0_to_bond: left promiscuous mode [ 713.016119][ T5942] veth1_macvtap: left promiscuous mode [ 713.022110][ T5942] veth0_macvtap: left promiscuous mode [ 713.624010][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 713.643484][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 714.013572][ T5942] IPVS: stop unused estimator thread 0... [ 715.658655][ T5944] net_ratelimit: 25 callbacks suppressed [ 715.658673][ T5944] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 715.788964][T16098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 715.898814][ T5944] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 716.008639][ T5942] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 716.128684][ T5942] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 716.238572][T24950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 716.348753][T24950] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 716.458623][ T5942] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 716.568678][ T5944] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 716.678692][ T5944] bond0: (slave ip6gretap1): failed to get link speed/duplex