last executing test programs: 21.866472628s ago: executing program 3 (id=4786): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000040), 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020002000000000006001200040000000c000880050004000100000008000600f2000000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000104000000200000000000000000000001040000002000000000000000"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000004000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="010000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="bf160000000000007962a80000000000150204000000000018110000", @ANYRES32=r3, @ANYRESHEX=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x8, 0x4, {{0x1e, 0x4, 0x1, 0x8, 0x78, 0x67, 0x0, 0x0, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x24, 0xee, 0x1, 0x8, [{@rand_addr=0x64010100}, {@loopback, 0x8ef}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x2}, {@remote, 0x2}]}, @noop, @ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x13, 0x2c, [@multicast2, @remote, @loopback, @broadcast]}, @rr={0x7, 0x27, 0x37, [@broadcast, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @empty, @multicast2, @multicast2, @private=0xa010102]}]}}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xc040ff0b, 0x200000000003) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x20, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @cb_func={0x18, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x1b, r7, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xd, 0x0, 0x101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="ef0979f4", @ANYRES16=r8, @ANYBLOB="01000000000000000000350000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x64}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x14, 0x200, 0x70bd28, 0x25dfdbff, {0x1d, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x57, 0x1, "dbc829663ed5147214cde2fcb24f444101b5e780272d7440a8c19ca0c183fd2f1161321e4652bdb3f955831ed9cd55825e7b9f4f5a4c4748772cd9d4f9ea9ec39d62319849d89936e0e97c6c84eb85098ad4a7"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x3}, 0x20000000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x9}, 0x8) 20.879379006s ago: executing program 3 (id=4805): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000007d92e887c8c7aa8100090001006e797a300000000014000000160a010000000000000000000100000014000000100001000000000000000000bfc87865"], 0x5c}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 20.772909267s ago: executing program 3 (id=4806): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='`\x00\x00', 0x3, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x8940, &(0x7f000000a640)={0x0, 0x0}) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x80}]}}]}, 0x40}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000800)={{r3}, "aae6fd75c4613889cabd2370c6064eb3108e774f719491473cb0de751d71e93bb366395cd4a548104c93b94bbfb51c55832ae81c713efd8346fb4f171771a4e7f037798d17494afd8e6fd21ba639f4edca07b5fc889d8010b1a16a4eb65092d608745399cb4d72fc5084cb99b9865c14f0624faee2e8b3114d9eccb18b30d6eedb001652c3d14c80e752617a136eb809387c22cfe58a2d7a9f16dc18ff19d2ce2d611a5347319d3f580b8723634a346e16c392387cdbda57c9bde84e11819ef8fddc9b9275ae5114692b261fa5e9cab7ef61f49620c41bae2c04de9ea3fc7828c434b5aa5895ab1dde569358053546abfcaa1f16937c396c1a803ebeb2d1a6d54abbce180db87a3a9f9c30c2e61c9aff67367b2274e6a800c87ad6e41a3504f5469b7ab993ff04f597e920da4185ed523310fb8d69e7e339cbc162ae7f2f7ea2280313b350ee9de543e8038e68747a2deb4380848462b4654b25b7836c33433d154bbd725134b3b641acee5ed301ba7cef91c30bd2fee1e3636ff33a19ff75da21a54efa38e2e9b8e9b79706429ff01936a37059f0a3334cef03662893e1ac9e651a80e90c19c2f42e4e6254dff139f85bcdaa784bff90a162bf42f39b8295944e48ab0b40100d225370f6cd9d6397ab3f30f1856f04792f260157fbf8a0f479baf0121e6cebb5f444ee526de864b5f3d9cad5c9d39f68058b730220897ac6d572b50565c42b5a7c6916eb3f02890ec4cfd5c7e526110393a0ede43dd16277ee968e4ed63e0445428e8360462d0975b0102f59f20787646696394b765bcd86e6c40f6e58f643edaf7cd2f5966ce899eaff31457517ee92fc0f105a1a7c517d2413e8b944e6bdeb7e236f957e89bae654cc8c9a2f06e27cef671f210bcfbd3c6ee229ee98b11b0f2d771cbbb2f03554f80509c1c038366630b439cfaf77e787e051b03188a23ba1c1bbc11f0c6287ce76a51b1609868c297496989c19a471c8426dae6676c5befbe1252e59fc7af89686f79df78ef4f4225bc1202181fe745173ab5583b556bb856081887c6b69b0aa2cf6ddbff7a89a65550b20075286ba33e355f41d1cfa70dec0101397666abde8dd9804ed81419f8323395265fdc1a0810ba16b683d9377266cbfc60c89279b1966508a246e9b5ab271476c220442a6323ae4c6dab288b2a443bc2a9151aca2798291e32501d430b0072fbb90a86713bde3a5cd4a532e922931993fd340371650e45b8e0b2d2b8ebdb3f8fa53b0b38eb02df046452e2e0bd813d988f96290bd0f707fddb7577f9454daefd9ca3ae26ed87dfc18bd12afd61caa19b7c73724f1147324d135b6ea56a0ece673448b40a5c5e4c1638d683e3a436b2084f6701a5eedb8d330ba3974a6a25f51196872fcefd3b82c46983071dead0b1358266321ee8e88171caf735989077464e8b10f4d154f104776c6cb116b8e93a36d74e643bfb38fb0ff6d691c8b124180530632e80052362544102e924fc1d6942f200261584bc13c93f1d7410ca64c6e16c1052a1c15d45762a8915a504ef66099da0a69f8990c04ba8fae51f0b830b6bf4a1acb7277eb379649ea2d2fac191d1bfa933175d88db86db270643125c91e7d7da4a3ae05e672aa65493270d14b37594081ba293ec05c49394db693726f4c24fe553016a4d47fed35ad9a6c44d1ace56f37237b58d7ae418ed50041d22bbb73d24388a216285bdd151b73d6d4c45c7cf1cd4627f991705c92944bba2aaa8a428fc52d57cdd0e2c1c86c5483d4197b0dcb58a851e7d8c1ee07d066d70e6144e2089e4aa9cedf3849a452aefa4ac33583f413971b8bf52c5e804d583adf242b408618570c02203d17753327176d376fda50812b7f874ad41cd30423b4aa82f7b5b11e76b3ccf617bf484793c66d28d5ea822bb5d5480bb2165a502bbfa6591768ec60c49cdbef0122d68a1e30b1c8434d26b5d8b34f0ff025188b8ab052e56c8319bc33b3817af920aa46e88a9de48f2b06a43fbd145671971900a3e4e219b8595d8327ec63238737fcc1005bd62f99de75aaf7a99935b8a5ef0ade4a73748c3d8dd74be15ffea5f995bc6729736b6a8eb4095ad88672b7660b40aa308acdbeaf2ca45bf654e9d8b68ac19f24cd033284a520833dc74cae9a184700a95ec4f24647aec780cee4f17f00b6a7838228190c1a2d905f1cf2b06dff8fa94fe73136790f35b95d004d58b9c6be879ba600a921b1a17745c4d550f750eadac977be50d84d4c70fe37b3916c4c44e3d0c0bddb1e19d30d043be313c633a1d09a3ad21086facf4005e5908278e26bbcba534ac78b4e2f20782c8cee6e8cf2153071321c4a800eb52bea74540153abda4b87e7158c857a147f74be0deaf8ec538fd70cfb513131c154926bb919287351f2db43b39264c67bc0f968dd17e54db2b88b8deee4f9411d6e95d0cc01901c398a64918f87d0bf4c236f176b586af9ee8cf392e9e83257b760bff91c1cb03db17c7cc226ff30e6cd9ab7b1331104415412931a2730dad53727114739e347b3b4457a0baa627e6b2a1f587d257f5401f77aae3d9ceb50a3cfa78777d0c68973667e1443ad2747555cb3ee70a9eb4e1279b145304338e7def84416a7971963a56eafe3f2cc1c31f59d58d6f9a1983db31cf23105a0e4bd647cdbe4742cb819e29c1b5e7056059a92ebccfa11ee02c53ba69bdf7f8a4ea3a63c229969a364a1b30a8268e10c6cccab8e3c75bf912706766085ce7f9cc6aafc2de1768b7e55328bb3c0b8acf67d7de706095f4482136a5332f84bf2ab9ff2286356b0fa8bb4a1047e6381cfda1599d1f56c7e86f5e58d1acd8c70d014a8430472ce9d6938169e53838c7183bef08d7115ccb73090351d54229495341b838257d331bd3ee82fd3049c2a412cf99ddbd17fd05dc9ed28ee26fe28b906483739c94c891dfe77bb3cbb2b6be519cb51f4ab7c551a3ededc0734a3f14bd2f3dacca34bb09dc72734acee3647b478b5e9596b1cc091c441b061644ecc73d53813caf8766b3cc778a24fe4369e1a4b12ba114dc398ce95e22c47c231844c94e9653a53efeb1953cbb4c14dd64c9c88a13cef1beb01f8e961f44f7c7d8241b8ba59b83ca9c6f0062bdd6be9472043aa9eb599b80168c48952b1f70325ee93c932f04cbeecec99e2bc657e260e8542137ef9cf13a18fe39e6917a7b635f0969e1a5b234ffddfe1d287499067665573855d9a235884e68caa533002f1e35a986cd5ef214ec6a738704ab9a86f46fed748c7804afd18cc999b55ce7d85bd28b73011f2def84014a02acb7d4527b063b9498d19f686ecbba08956e1b42a471efdcf01fea9ac0c3b4f365b8f1ab8b020b372d123c19a3d0261d1d92b750000c962dca88fbe90932d07caa7896315a9c8d71d38b77ef417cfe86247cda3475ee5dbb736635de0f54a109f5b6b9fae4145c8fabb30bb9707de5cc33e19c73aff1c7de0c0881ae75f01a88f03c599bd2b60740dd5eb4f559580c0919f689188db7926e38e5b191693e5ddf1416b93941e835ee9cecc82378ae6fd88e482a025c2ed04cd6122a00b353af986030acbb2399dd1a30ae607b28c729e73fa8dbff0ec35d5104c08975039fa720b0086bbb6b29b068ee952d6285826ebbb83b50cdb6792f182e7b9a9ae54c8c7244ff6d2fce93ff79245aac4d364be9a960f589713b32034cef2d11e69558a24d99ff53538b6b8a2bbbf8f70be78c36cdf6c79e33c4c4655cff6547b94cbfb414a01ac30112b41f65b7983613d60f0f7f4f396af623d63cf1f557280cb7e35cd5f1d8388ceb244fea7082b0fda360f89ef7b639f439f8d18bbd487d40647a4a583f7eb07fd82b49433c919f436a7f0c5e93f6429e7899e36ad219fe3c6c1d1483834ee4dc726f6c4399ea0a9ddaf627abf1e892ec5196b18484f09207122a439c83ca6d076725f75a509503d8b0c2d245a7a538648347b568cfcc323b1787c79ca51667706112fdf73c5e6c098b9fe83c5bcf889e1a54564397f3610c214f108a82002db1b61aaa56f7cb6cc4a3d3767303cf7ad07ec7fdd12ed69f9c1b3469121df9fc0fe6827a691691529a24fe2347809a2e718924f2577aae1dd3665b134b69815e8293b248e1c4f40519461659697187f32ed39e272074e587ca152011bc37239bd5fc6f7ad5c394cf96c861ebe2441d2aed0edaf1300a5b1d71b158546e57f951c506352ffeadf96211109a9767eaf6cec07c7e4903dc287aa8764afbb6d72a379d3b061bc6e64a094fb95aa348f06d735abac02adfa9cfb809e28bf01d62abd376f0be165d3790aa027507f6778e204e0cf93ef3f362e24389d8db4bc271f1410b1a8a9892b774c19b831380e1833e2ee527f37136ecedffc547e96f0c430508da765032f3305016e9ba91279ed2ac0289e08667707921cc2028437be6b3b07aae7a5bd22e8f8f41b863452b98caf9e90ad333e37f2990066629cc2ed35fec45899b399dd0fc98109355d506cb86ba5f050bc2ca776d5f8efa65d288ae68deb7b1b2d3175b7b1122be060ec972a1b094c7180fac69f2e57b54ef6abf75e1a760a65898f6ad28f156f50df8165b25e62d26996b821f53e5b2aed0c4bf4772bdf7e1749bd4009c124c50a785ca4af032106b7377f8112e0e46b1231630951138ea6e7f0abaab525abd6b6adb1af7d3aca00d6fc239c3a5b4d11e8ccf5025f63e90263832822084f235be08e539dfc8b49fc9a50de57aacb5b12da8a7971420780a915494371b10e77bdabb6f9550e4e5f15a6137d4c7e3c25739140e3dbb693fb379afe7d0c8157cfa8ce2fa99138bec14fde62fc491fab1ca59402ae1c0af226a5a1dd12b1fdd859991f612087aa2e87a5fddf18d25c45da441d2765f98cbb47c052fb619c242da2422dddc459c6dd3bf3679a0b446221abd4df27f20e76cadc07b598268c2fb557fa05302b240100018f9cb4ae0715b36d4cd5011337fdc7478c0d8d25d470368fef8c52a3e20cf65dcdb8fabbc48e623dc5180c931f16e9c181ccafe4dcba5ed951f231f0884b23c25e939703ac5067fcc7eb3cf3962e13561a6428fc0d7cd07d5f1a924273b1cb4ff1c9471366e590faaabf8f4ac110a0051dacfb0d4dbb4b6057a884be0977193c2c5617f73e0ead8f15e56bb8cf80cc85cf21877851c588dd4cc310a85bbdbb74cacb893db33ba6906c3682ecd0b14cce73f888eb27c16bc4d4d7cd10c750ece07925d9f0817fddd4ad17b651e5b8fabb2f0b010e4bd85eb375ed2fa153244de3e6c9b872682e40efa5c7649b3094cd87229825bdf33c573c320931e17ebe155a893af3d01925301bba96c81e6122c5599a423692bdd096bda3a9266dcca3a3b897493a349baa6925364db5dc8970f87178fae96f7376a18d1e2604a3bd3b20353302c675840a121428489e294ea2c22e27e72302d63c65d64da66da1a6f591e5bfb01d4af14cd7fb6b6b6686ba9e9149663b86871d27095604221b33f9c531a6bd552b7c1f2da0b773890c8e0f1c06c0241c01c2ac64b98346c3971a360a4acc5bcc4424b3ad1399c519b91207bfa7bdd74ef3ac46035e0170fa8a20e95cfb4869c4d7df96f31d7e9f5e503f52ced096f5c3694aa18ff79a8064100b603318106243884d8d87fdd244b6d10a58e61f857de446c4f4c0fee9bed570f6d4ee551d6685946edc9f59fdd134b74eec70e5bbfc664da4cef17fc93b1bb74fc88faa6b577a5a08ef03abdbdaca0f1ffa87ea640a92aad759c94dac5313120ea266abebd813052dd194"}) syz_emit_ethernet(0xd2, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0xff, @local, @local, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "56f95a91fc1ac535bbdcdf1127af8a8efff25896b8e7ef1a2acdbb2d8c6bb31e", "2c5f12f14c88ad0c428dfadcdb6f2da69b5d98dc69b71728990d7aa27a262815e05e2e88ab240eaf0e7a6a0493118803", "c2f23e1e071bd23906bdb41b96846531a35c7607300dfcb1fad35d98", {"e2331c8a2effac3225b1c3d9c37042ef", "1a6a8e575cad7991c928bea2254cd6e7"}}}}}}}}, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 20.575627457s ago: executing program 3 (id=4809): syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000180)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0xeb804a98c420662d}}}}]}]}, 0x98}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.426871558s ago: executing program 3 (id=4812): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000611082000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000611082000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 20.287640291s ago: executing program 3 (id=4816): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e00fcff400010"], 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x8001) (async, rerun: 32) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4000c010) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000000007000006", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r12 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000340)={0x1d, r13, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r11, 0x0, 0x20084084) (async) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmmsg(r12, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) (rerun: 32) bind(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0xf8, r13, 0x1, 0xf, 0x6, @local}, 0x80) (async) setsockopt$SO_J1939_FILTER(r12, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x1, 0xf0, 0x4}, {0x1, 0xf1, 0x3}, 0xfd}, {0x0, 0x0, {0x1, 0x0, 0x2}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x5, 0x0, {0x0, 0x1, 0x2}, {0x0, 0xff, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0x80) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r13, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x24000000) 5.219902044s ago: executing program 32 (id=4816): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e00fcff400010"], 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x8001) (async, rerun: 32) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4000c010) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000000007000006", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r12 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000340)={0x1d, r13, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r11, 0x0, 0x20084084) (async) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) sendmmsg(r12, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) (rerun: 32) bind(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0xf8, r13, 0x1, 0xf, 0x6, @local}, 0x80) (async) setsockopt$SO_J1939_FILTER(r12, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x1, {0x1, 0xf0, 0x4}, {0x1, 0xf1, 0x3}, 0xfd}, {0x0, 0x0, {0x1, 0x0, 0x2}, {0x1, 0x0, 0x1}, 0xfe, 0x1}, {0x5, 0x0, {0x0, 0x1, 0x2}, {0x0, 0xff, 0x4}, 0x1, 0xff}, {0x1, 0x0, {0x0, 0x1}, {0x2, 0x1fe, 0x4}, 0xff, 0xfe}], 0x80) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r13, {0xffff, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x24000000) 3.347271847s ago: executing program 0 (id=5054): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f0000000100)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r3}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=r1], 0xa44}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 3.34696522s ago: executing program 4 (id=5055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073"], 0x9c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x100058d1}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r2, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'macsec0\x00', @multicast}) ioctl$sock_SIOCETHTOOL(r4, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4c, 0x6, 0x1, 0x7, 0x2, 0x5, 0x7f, 0x5, 0xbb, 0x2, [0x2ea689f0, 0x3, 0x81, 0x6, 0x2, 0x2, 0x5, 0xca93], [0x6, 0x7, 0x2]}}) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x1, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0xe00) socket$kcm(0x2, 0xa, 0x2) 3.047650127s ago: executing program 0 (id=5056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="560a0000000000006111bc00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000100)={'bond0\x00', @ifru_flags}) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) socket$nl_audit(0x10, 0x3, 0x9) r3 = accept4$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) (async) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1}) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r1, r0, 0x4, r0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) (async) r5 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000380), &(0x7f00000003c0)=@tcp=r5, 0x3}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) 2.611966939s ago: executing program 0 (id=5058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000001600)=""/176, &(0x7f00000016c0)=0xb0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) epoll_create1(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x4, 0xc8}, [@IFA_FLAGS={0x8, 0x8, 0x441}, @IFA_LOCAL={0xf, 0x2, @remote}]}, 0x34}}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r3, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a31000000000800054000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060"], 0xfdef) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000"/16, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002800800110001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.501632694s ago: executing program 1 (id=5059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x2, @loopback, 0x1fcf}}, 0x0, 0x0, 0x29, 0x0, "34b4cd04032119e5b9358ab008d64d23d37d0684330b9822d52059f471d511c3730f4ee62103b8782c561daf37d3b4c7c540a693f71a75782f24ebaf48637f6026d20b578d4f9799d13ceafef728cf68"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x800) 2.252210716s ago: executing program 4 (id=5061): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000003200)=[{&(0x7f0000000300)="158764c351fec863fbea454ffb8808c48b55ee87c7fde2affde5092827ee5f6ac338444fd766073e576139ba7ef43b2b4ebeeb7094e481eac63c13967a985b8b10b703f3073315aa62", 0x49}, {&(0x7f00000003c0)}, {&(0x7f0000002200)="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", 0x1000}], 0x3}}, {{&(0x7f0000003240)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000003540)=[{&(0x7f0000003280)="97d78b9bb0d3af06d67d71bcf21da57fa042a8a41077f87ccf31e8e4af98b7908031c9929326026cee11e8ce23e31894db5d224ff64d031875e83b415daea1cab17ebc3947ca09d93e87d2a74aa4f2ea10fa7641fd386e3d92ba2b06e14c7b83537acd7f9a61e8e03f8901d9f36ec46c46a6521c90f64e276616aa4d1c3bd65d83d56a51f1e281a849f7e64fafda140ccfa1a7db6f0acf87c4990dcf645c306b525c163075f14612ca8c63e3ec53c1cbbedb5ecc63a7a5d15ae0fd790fd90bce6e1c08f458", 0xc5}, {&(0x7f0000003380)="ca77eb223e1749e37382baad0e468a4071591c8b3cfeaa316be564417a6f571fac367e720518a9d6ac1ff6b828f975b56b012081bda2de83a31f16ecd54e0f31a536a3fd6c955a8872ca53b97bd19b43cf31c3418692507dfa66f592ff978e7defdd234167ffeb636d85e7a9b403bf18f98954bb2535d445da8a7635b61501e36c82753e803e1e8486e29f85e960340c13b5d7882140bcca1440df2d71a52c449388b04480f33f24c6ca840500373cbed23d6e0128", 0xb5}, {&(0x7f0000003440)="9adaa96b329594898ac1c8d279a5b088d9dc1630d9804299e36d0518e85bb1e0ca8103ad68d27bbeb5b4db670680835c310656936047be0a13d6c566fe78eddbf74330675ce3b7b8f99e09482711dbdafce1d9ec63452457f08bcd0fe7f71df5ca4fcf0e9e17c9983074da8cf17eb2271ccb166f5d3459e1a50a498fe1e306c1a315e95af273ce2a9c7bbb81ebfea910718fc236d4f1f81397b1c740ff7e4ac4197981ec2ce1b1ec271fd82cf898a235c4e02504d9be7d31bd6e276400f8a504ee918ad4eafa01d2c8016ceb24f62ef5b015d19998b9ec6c9666da0f575f03b65c127e4f5998660b8a84", 0xea}], 0x3}}, {{&(0x7f0000003580)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000003b00)=[{&(0x7f00000035c0)="7c6d5fdc3883bf558f5d172b03a32bcfba0c91e541070448bd29a0b935ad0a71c50226801b6f610695165efbe35a8020b61450bdda46c2db40c200e5d7100e79e0babcb48104d6d7fe86f0f44828fe9414afb9d5c3e434824960c05eab0b1dcea3ec2584fe6e5eb06733cbcfe5ee6d4fd6da7ce9fc04", 0x76}, {&(0x7f0000003640)="2a3f196d9f8d313d443ee821e9048333fb8b60a446246d08ee36e3a3aec49c01e14c019845280b99f4ca5bf6cd182c79831ba106a7c28a83d405584961bd46d4279033b721234543ab142aa3ca0e1b2922a07430de2a683ce12c7ca9cf5224e54ab3cd5faf6cd3e883298e0379d115c702", 0x71}, {&(0x7f00000036c0)="eb91a2396446a5b1e77680afccf920f5dc363c4dc5f85cf644bac2024fe48833e711d999bdd45ec89cf1443d38111bea1c9db4247531c7b986e28fbff3dfb5bb181a8ce70482649e9ff644a51bffbe2ff06d36f83e369079a55a02ba6e33a5121ba49729243baff3a5caa15b0486273006fa3b0216d72dfeae7f0e2bb59256f23595de977665ca3486483bc6980d4b117ed1db54efc3d89addce6d9a1e9212942c54420ca54bbf", 0xa7}, {&(0x7f0000003780)="0bdac65cd31faf59fa336fecaed07fa608cd693e30b8513ec614e2", 0x1b}, {&(0x7f00000037c0)="d1caf90566e761c55d974e5892bcfd753e2b0c16e2c6a7fc4f519820d09d93dccae7d932987fd4cd128335b2cbc210836b72680d3f3c", 0x36}, {&(0x7f0000003800)="4ce78f6a6f273713eb61d8fdd699e0bb8242697a64c4ef7601f0019cf9dbd2e104561579be91ff2c089be80629a30565a57f00febecd04cc8b82cf11230b1cbce49f200f9a27f5af37f761588b99a127af8166f75be26754fb09c2f47498243b7af1a8c2e4fd50d5b217e7ab139cc70e92200488007333b2fa59fe732f8acb5bd6b54794fc183503f63c", 0x8a}, {&(0x7f00000038c0)="c704fda65be1bdf6803a968cdd512493f0a5929f88f0a4ac9e1e5db80e309a046922a3a534fcc959ccc342551a91cabba4fb1d436eaaed44af930401f0688dc7ea3bd51fe2b239661a4b9581322dd036cd4f33ad6e29d57bb80162d59d3755fc34478a818fdc5fb8be7de14e1ad5bd", 0x6f}, {&(0x7f0000003940)="f1808c23e8af66bf4707744a5a41d56cc495e5dc5ac565f54f3f64", 0x1b}, {&(0x7f0000003980)="dc40a24605166fd2ad26acbcd61791cfb0fcf52748012aa4615b0d4732bd887b5a8230cee1602d7a679c56f070cc83df83bb8990cd22499e9da1c6c5fef9093f338432cae8e5ac9c0dc9ded5aad5bc1569745b77c8b6a01fda410b97b467cc334784d8e82cded9e7c91024f73891108f19a66810fa2b795bb59f1792b52f18812ae01e898d606421952031da31f851e2c2e012c997c626352543795f737d63", 0x9f}, {&(0x7f0000003a40)="c63ace5937794d728de3b11f18f2ecabf5594585811a425d12132da5fae4ba1fd1b4b65918049ba094d048ca3a1c474c210e015eecad1695d0d070bbc96791609bcc8e35271e243d99ec28e1319118d275ecb4fc10977fe56650d4dd888af926aa8baac8f837fb37c04945cbcc55653ad8f19e98d26d47ec52b9d2b9dd39cb004d8e48189e", 0x85}], 0xa, &(0x7f0000003bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xc1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x25}}, @ip_retopts={{0x54, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x13, 0x45, [@dev={0xac, 0x14, 0x14, 0x2c}, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @remote]}, @cipso={0x86, 0x10, 0x3, [{0x0, 0x8, "74321f064aa6"}, {0x7, 0x2}]}, @ssrr={0x89, 0x1f, 0x6d, [@loopback, @loopback, @private=0xa4, @remote, @loopback, @empty, @empty]}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003c80)="85bb4689ea1b3a9d266de907fe5b03715aaa2485fbf590461e9100072517e73f565aabacff6de7e1254ea2bd4782aaa0d9819a4f45544f4bf915c2e8b7c52d957350993f312c72226c5d2bc1daeba9fea60a8bcc734ddf000abf338a3406d0c8578ef4e26692b47ef39cd68c3516e396a140bf2b84e756b862a572c6cf468d3ee32e128290b9f277160199a599e7461a73138b6eaac2f0f028b511805581dd6ba7d05d3b627b5dbd37c361783aed9288695c89fe45da830958f2de163fa3ed4d79fcf76725f1f10c919cace3c3350c8ba435f7983840a1e568157f94de72c0b3b7e6d68d2c4e7d640936ebf1697c0ab7", 0xf0}, {&(0x7f0000003d80)="4342870c", 0x4}, {&(0x7f0000003dc0)="38d73566582a7aa86342172ad509fd4eef36551d78859d21c90f67c0c60f5a3cd75e627623ba127a", 0x28}], 0x3, &(0x7f0000003e40)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x10, [@multicast1, @empty, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0x1c, 0xd1, 0x3, 0xb, [{@rand_addr=0x64010102, 0x8000}, {@broadcast, 0x80000001}, {@multicast2, 0xffff}]}]}}}], 0x40}}], 0x4, 0x0) 2.151812047s ago: executing program 1 (id=5062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a8", 0x3}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x180, 0x0) pwrite64(r3, &(0x7f0000000240)="6dd9686bb07ee231539e95bf431fe071bc82f3bf46bda895879c991bee270f5cc549a9ab11bb71e8aa14501b90c8b8fe6988c6", 0x33, 0x2cc1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000080)={'pimreg\x00'}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[], 0x32618) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4], 0x1c}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000100)={@any, 0xfffffffa, 0x0, 0x0, 0x1a6, 0x400, "384c087a0c9708afeece7ac1252746bf99e1881d9bb0affa1cf3c57dc691b04b8db8291214826be9497769cb8ade0365819eaa8afcb0ba7187cb01f17b6521fa368274d4b4c7a869bdfbda74a19adf694a8b68c90077bf56569ab1aec686ecdbf41b534e4fc1975d3d0ef858544c1927a50bf2927257af3676131f8b1e6064cc"}) 1.80830296s ago: executing program 2 (id=5065): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x65ff, 0x4) (async, rerun: 32) sendto$inet(r0, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffffca, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0xb8}, 0x1, 0x0, 0x0, 0x400d0}, 0x2000004) 1.626282663s ago: executing program 2 (id=5066): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.487859241s ago: executing program 0 (id=5067): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0e01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x5, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0xfffffffd, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x7, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x69, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x1, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x4, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x200, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x83, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0x3ff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x5c439c21}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x480e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x3}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x5, 0x9, 0x7df1}, {0x8000, 0x0, 0x2, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x4a0, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x101, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x671f, 0x1, 0x8000, 0x4}, {0x200, 0x8, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7a, 0x80d}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x101}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x9, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5e, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9b, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0xfffffff9, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x800, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x5, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x3, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x5}, {0xffff, 0xc22, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x4, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0xc, 0x80, 0x6, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x0, 0x6, 0x5, 0x7}, {0x3, 0x0, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200}, {0x10, 0x1, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0x400, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x10012, 0x6, 0x7ef49f37}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x0, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0xffffffff, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x401}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x1e38000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0x3, 0x2, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0x7c68, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x4, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001500010002000000000000000a000000080001000000000008000200010000000a00030000000000"], 0x2c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r14, 0x6, 0x100}, 0xc) 1.38009236s ago: executing program 1 (id=5068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000400)={&(0x7f0000002780)=ANY=[@ANYBLOB="180000002f00090028bd70000000170004000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x8004801) 1.368221536s ago: executing program 2 (id=5069): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x14000085}, 0x20040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000002d00010000000000ffdbdf25027c000008000100", @ANYRES32=r1, @ANYBLOB="100002800c0001"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, r11, 0xfffffffe, 0x1, 0x0, 0x1, "d9f5160e000011a077609475b7841107003bea00000200005b00001900000000000000000002000000000000000100", 0xd008}, 0x60) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r12, &(0x7f0000001040)={0x27, r11, 0xffffffffffffffff, 0x5, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e42200000200000000001900", 0x1f}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0x14, 0x14, ')P.!\\}+/(.%^,$@P'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x64}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 1.280405035s ago: executing program 4 (id=5070): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000400007012dbd7000fedbdf25027c0000041e25800c0008000200000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0x20008014) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000002c0)=0x5f53, 0x4) bind$inet6(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='+piat \x00\x00\x00\x00\x00\x00\x00\x00'], 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffeb4, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca6dc15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$rds(0x15, 0x5, 0x0) 1.082689488s ago: executing program 1 (id=5071): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05002abd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="47527521ab6fb7f9ac30262c97d8fdf1aeb3bb111fdb0b48"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'batadv_slave_0\x00', 0x200}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r8, {0x5}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20004896) 988.555272ms ago: executing program 4 (id=5072): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x28, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x80000006, 0xfc, 0x0, 0xfffffffd}]}, 0x10) 728.217959ms ago: executing program 2 (id=5073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x2}}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x54}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0xc811) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff0cf}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r1, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x31}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0, 0x57, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000900)={'gre0\x00', 0x0, 0x700, 0x721, 0x3, 0x0, {{0x23, 0x4, 0x2, 0x39, 0x8c, 0x65, 0x2, 0xe6, 0x29, 0x0, @local, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xa1, 0x3, 0xd, [{@rand_addr=0x64010100, 0x5}]}, @timestamp_prespec={0x44, 0x24, 0x98, 0x3, 0x5, [{@private=0xa010102, 0x3a7}, {@local, 0x4ec}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}]}, @cipso={0x86, 0x37, 0x58ac0d2a68a04822, [{0x3, 0xc, "47e5d93cc4c4db3175a2"}, {0x6, 0xd, "0b60dac837eddc1e7369f2"}, {0x0, 0x9, "18957ba8418de4"}, {0x5, 0x5, "e06c0e"}, {0x5, 0xa, "0eae108ee2d4e9b6"}]}, @lsrr={0x83, 0xb, 0x32, [@remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'sit0\x00', &(0x7f0000000a00)={'sit0\x00', 0x0, 0x20, 0x21, 0x4, 0x9, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x20}, {[@end, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x17, 0xa3, [@multicast2, @empty, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000ec0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000ac0)={0x398, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r5}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x398}, 0x1, 0x0, 0x0, 0x80}, 0x40814) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x12c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x12}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @random="094c87769f35"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @key_params=[@NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9d1aecf2844a49e3c335b07443c180"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "399177bbd7d252546e665d35b8"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f5d7c42f9e953d20c2716d80de"}, @NL80211_KEY_SEQ={0xd, 0x4, "b6c96a84b7004ed5e3"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x5, 0x4, '\r'}, @NL80211_KEY_SEQ={0xa, 0x4, "3f5f9a0cb8a3"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0xf, 0x4, "cc567ce16c89a96b56dbde"}, @NL80211_KEY_SEQ={0xb, 0x4, "46469067016e6f"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "d5fb37"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2dd682116b2bf5630274b29b97"}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4004060}, 0x20000881) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r1, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40004080}, 0x4040050) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x5, &(0x7f0000001200)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000001240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0xf, 0x8, 0xd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[r10, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@fallback=r10, 0x0, 0x0, 0x4, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0], 0x0}, 0x40) r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={0xffffffffffffffff, r8, 0x25, 0x15, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001540)={@map=0x1, r11, 0x37, 0x2000, 0x0, @value=r14, @void, @void, @void, r13}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x9c, r3, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x30}, @val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x0, 0x6a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dd61ecf6ed00572524dd775ba12415cd122543b2f98faf80"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'gretap0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x845}, 0x40) r16 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r16, 0x0, 0xcf, &(0x7f0000001780)=0xfc, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r12, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0x88, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x374e}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xa}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x6}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004084}, 0x4000090) 660.630215ms ago: executing program 4 (id=5074): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e10500070088a800008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac3788481e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x0) socket(0x15, 0x5, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000005780)=""/4093, 0xffd}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f0000000180)=""/120, 0x78}, {&(0x7f0000000440)=""/127, 0x7f}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000000900)=""/4098, 0x1002}, {&(0x7f0000004740)=""/4093, 0xffd}], 0x2}, 0x900000}], 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x4}, 0x94) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x4008800) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001500010004000000000000007f0000010000000000000000000000000000000000000000000000000000000000010000000000000a001080d3000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000030000000000000010000000000000000000000000000000000000000000000009210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000030200000000e2d19cf13bbb1ce16e3583df728c29f55cf6e3a8b72820b0e8126d82169fd4fe1cb7a55dba34cbe19a1621ddcad813a38eb0cabd5852891a0222ae06a78a4bf47527b58aa123c69c508cd7351e8fb256aa8d1911a6956bce46bedb236f194bc74d216d7abf8ce26ad10805e11d031002e8"], 0xb8}}, 0x4000040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000000631757f66bad018c00"/28], 0x50) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r11, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 490.761554ms ago: executing program 0 (id=5075): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x3, 0x0, 0x9, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) 440.525931ms ago: executing program 0 (id=5076): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x27, 0x6, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x5) accept4(r5, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x1, @local, 'ip6tnl0\x00'}}, 0x1e) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) socket$nl_generic(0x10, 0x3, 0x10) 356.635153ms ago: executing program 1 (id=5077): syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000180)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0xeb804a98c420662d}}}}]}]}, 0x98}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 312.155154ms ago: executing program 4 (id=5078): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 230.580706ms ago: executing program 2 (id=5079): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x3}]}, 0x18}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0xe4, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x201}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb8, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa7, 0x6, 0x1, 0x0, "8da250c5c1a0e7d9d68265762167bf9341c996441f92c72fc3724b9a922605be8fc08e4c4c5f6c98db3893ee15487eb5d09be66e39b00aad6ffa01d323d46d21a8c0f9f8eb7397545a1230cb36ebb838bee8ea851918ed750c046d306ba877235cac0a841b07c3d9be1bc35da6ce39466d98022b123db9af06bf5f4e051da30d0177d30632c3c074115e5c4b8c8348106b749778ab4cc0a8a17ca35c2379c607563338"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x3c}}, 0x0) 135.027525ms ago: executing program 1 (id=5080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000001c0)={0x8, 0xae}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=5081): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r0, &(0x7f00000005c0), &(0x7f0000000600)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0], 0x14c}}, 0x448d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x4c) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events.local\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}]}]}]}, 0x38}}, 0x4000) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000001780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001740)={&(0x7f0000000680)={0x74, r5, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5b}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0xfffffffffffffdd3, 0x3, 0x7}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24048891}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x100003b, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ffffffffffffd}, 0x50) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080000}, 0x20000000) r6 = socket$kcm(0x29, 0x7, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabb08004500001c02907800000000e00003021100902b1300"/46], 0x0) sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f00000001c0)=@caif=@util={0x25, "e941ef28c2a5032ea4d6fdcfdf5cc836"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)="1b563125637c4aab9e531c240e50749bb4d9eca2eb95d5db34b9f086b6beb055c9e6d86d155cb2fef16f4be5f5c9a8fb4828c8432d6ca582748e06eaa5604c08a845be2767bf7909ec44cd97774120300f6e71ab838b9ae7e31129b339e24c66379549190a9fca1760cbbcd114fa2ff6fced62e31640ae73c297bd0b6530ae8a93faa215aad275bf4209a688d6d34679904e64eebe28ba1f797ce1860d184b7e9cead4ea41e04371ff686981a26c69403a", 0xb1}, {&(0x7f00000003c0)="c090f5df", 0x4}, {&(0x7f0000000400)="36f5010bc1d288e414ac5110991cae280a87a5295521dfc965a6aae66f2b68c50a492050a14d39852137bc", 0x2b}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18660088383f000a010000014a1a1e57"], 0x18}, 0x8000) kernel console output (not intermixed with test programs): 771711][T18643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.054323][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'. [ 365.054356][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'. [ 365.116915][T18643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.191821][ T5278] veth1_macvtap: entered promiscuous mode [ 365.480065][T18730] netlink: 'syz.3.3448': attribute type 3 has an invalid length. [ 365.480086][T18730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3448'. [ 365.568022][T18733] bond1: entered promiscuous mode [ 365.568063][T18733] bond1: entered allmulticast mode [ 365.570705][T18733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.646991][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3448'. [ 365.656976][ T1136] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.773928][ T1136] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.773970][ T1136] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.923425][ T7121] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.546408][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'. [ 367.207249][ T5715] net_ratelimit: 12 callbacks suppressed [ 367.207269][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.388636][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.730592][T18856] batman_adv: batadv0: Adding interface: syzkaller0 [ 367.730610][T18856] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.730666][T18856] batman_adv: batadv0: Interface activated: syzkaller0 [ 367.732084][T18858] __nla_validate_parse: 1 callbacks suppressed [ 367.732099][T18858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3476'. [ 367.777215][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.777442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.845470][ T5619] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 367.847594][ T5619] Bluetooth: hci0: command 0x0c3a tx timeout [ 367.919719][T18853] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 367.947195][T18854] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 368.024577][T18854] batman_adv: batadv0: Removing interface: syzkaller0 [ 368.128665][T18880] lo speed is unknown, defaulting to 1000 [ 368.247565][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.469494][ T7113] IPVS: starting estimator thread 0... [ 368.471699][T18897] IPVS: rr: UDP [::1]:8080 - no destination available [ 368.487153][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.568516][T18902] IPVS: using max 34 ests per chain, 81600 per kthread [ 368.584287][T18880] wg1 speed is unknown, defaulting to 1000 [ 368.584858][T18905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3490'. [ 368.585956][T18906] sch_tbf: peakrate 9 is lower than or equals to rate 24576 ! [ 368.643769][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.657138][ T7108] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 368.792699][T18905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3490'. [ 368.803604][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.803812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.241386][T18941] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3496'. [ 369.253760][T18940] netlink: 'syz.0.3492': attribute type 1 has an invalid length. [ 369.293840][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.121261][T18973] Bluetooth: hci0: unsupported parameter 5134 [ 370.121285][T18973] Bluetooth: hci0: unsupported parameter 8192 [ 370.121298][T18973] Bluetooth: hci0: unsupported parameter 5134 [ 370.121311][T18973] Bluetooth: hci0: unsupported parameter 8192 [ 370.122842][T18973] netlink: 'syz.3.3502': attribute type 2 has an invalid length. [ 370.412466][T18987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3509'. [ 370.572706][T18992] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3514'. [ 370.646846][T18994] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3511'. [ 370.802678][T19008] netlink: 'syz.2.3521': attribute type 1 has an invalid length. [ 370.802940][T19008] netlink: 'syz.2.3521': attribute type 1 has an invalid length. [ 370.820317][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3517'. [ 370.820339][T19004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3517'. [ 370.822512][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3517'. [ 370.840481][T19008] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48 [ 370.840642][T19009] x_tables: ip6_tables: ecn.0 match: invalid size 8 (kernel) != (user) 48 [ 371.071835][T19016] ovs-s: entered promiscuous mode [ 371.105041][T19026] openvswitch: ovs-s: Dropping previously announced user features [ 371.412687][T19054] netlink: 'syz.1.3533': attribute type 12 has an invalid length. [ 371.551478][T19064] veth1_macvtap: left promiscuous mode [ 371.650320][T19072] IPVS: set_ctl: invalid protocol: 11612 224.0.0.2:21 [ 371.713025][T19071] ip6gre1: entered promiscuous mode [ 371.713047][T19071] ip6gre1: entered allmulticast mode [ 372.405662][ T5715] net_ratelimit: 12 callbacks suppressed [ 372.405684][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.963685][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.963837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.135610][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.443865][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.444223][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.767141][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.771038][ T7113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.792180][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.802174][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.356996][T19049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.496736][T19092] __nla_validate_parse: 11 callbacks suppressed [ 374.496755][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3545'. [ 374.523784][T19094] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3545'. [ 374.570614][T19108] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3548'. [ 374.599194][T19108] 1·: renamed from c0· (while UP) [ 374.601958][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3546'. [ 374.672896][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3546'. [ 375.145029][T19150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3559'. [ 375.226389][T19159] netlink: 'syz.1.3560': attribute type 4 has an invalid length. [ 375.226412][T19159] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3560'. [ 375.226624][T19159] IPVS: ip_vs_edit_dest(): server weight less than zero [ 375.292451][T19161] syzkaller1: entered promiscuous mode [ 375.292490][T19161] syzkaller1: entered allmulticast mode [ 375.370972][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3562'. [ 375.378902][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3562'. [ 375.496261][T19173] bond0: entered promiscuous mode [ 375.496285][T19173] bond_slave_0: entered promiscuous mode [ 375.496478][T19173] bond_slave_1: entered promiscuous mode [ 375.879765][ T4932] Bluetooth: hci1: unexpected event 0x3b length: 11 > 10 [ 376.120728][T19216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3581'. [ 376.213819][T19222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.213837][T19222] IPv6: NLM_F_CREATE should be set when creating new route [ 376.213864][T19222] IPv6: NLM_F_CREATE should be set when creating new route [ 377.604885][ T5736] net_ratelimit: 14 callbacks suppressed [ 377.604900][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.620120][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.629276][ T7108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.629945][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.646390][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.163698][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.163847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.648728][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.203695][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.203911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.734689][ T2008] block nbd2: Possible stuck request ffff888027a07000: control (read@0,4096B). Runtime 60 seconds [ 382.807357][ T5715] net_ratelimit: 12 callbacks suppressed [ 382.807378][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.364096][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.364243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.373816][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.403904][ T4983] udevd[4983]: worker [15187] /devices/virtual/block/nbd2 is taking a long time [ 383.774221][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.844150][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.403625][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.403837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.885806][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.443455][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.005411][ T5736] net_ratelimit: 9 callbacks suppressed [ 388.005426][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.563448][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.563598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.653816][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.045101][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.123515][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 389.603602][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.605455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.853591][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.084080][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.643615][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.204118][ T5736] net_ratelimit: 10 callbacks suppressed [ 393.204139][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.765746][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.765940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.251239][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.734735][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.803606][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.803778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.283931][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.845035][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.845246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.404661][ T44] net_ratelimit: 8 callbacks suppressed [ 398.404682][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.964016][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.964579][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.964745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.444610][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.003570][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.003793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.483823][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.653470][ T1136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 400.813630][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.043610][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.603855][ T44] net_ratelimit: 9 callbacks suppressed [ 403.603874][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.859872][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.163599][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.163809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.644526][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.054517][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.204068][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.204214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.684626][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.245000][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.804381][ T5715] net_ratelimit: 9 callbacks suppressed [ 408.804400][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.363448][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.363611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.843794][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.925828][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.403471][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.403623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.884150][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.123772][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.443503][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.817914][ T2008] block nbd2: Possible stuck request ffff888027a07000: control (read@0,4096B). Runtime 90 seconds [ 414.003804][ T44] net_ratelimit: 9 callbacks suppressed [ 414.003817][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.165102][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.565146][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.565357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.045035][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.603627][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.603789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.003678][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.084992][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.643976][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.814132][ T5619] Bluetooth: hci5: command 0x0406 tx timeout [ 419.055211][ T5729] net_ratelimit: 11 callbacks suppressed [ 419.055226][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.206812][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.763435][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.763589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.244047][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.253939][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.804950][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.805179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.284025][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.765836][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.404028][ T5736] net_ratelimit: 10 callbacks suppressed [ 424.404048][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.965434][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.965618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.123877][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.444236][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.003624][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.003791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.334723][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.485919][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.043441][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 427.043503][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.604037][ T5736] net_ratelimit: 9 callbacks suppressed [ 429.604058][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.163725][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.163871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.643763][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.204185][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.204781][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.204957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.365540][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.684790][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.243443][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.644708][ T7108] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 434.803793][ T5715] net_ratelimit: 9 callbacks suppressed [ 434.803808][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.363811][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.364024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.443603][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.844197][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.403511][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.403677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.885048][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.283520][ T4932] Bluetooth: hci0: command 0x0c3a tx timeout [ 437.288223][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.444423][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.004515][ T5736] net_ratelimit: 8 callbacks suppressed [ 440.004529][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.330944][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.563551][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.563743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.973814][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.044805][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.533871][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.604006][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.604141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.084886][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.893547][ T2008] block nbd2: Possible stuck request ffff888027a07000: control (read@0,4096B). Runtime 120 seconds [ 444.183894][ T1136] IPVS: starting estimator thread 0... [ 444.190357][T19279] __nla_validate_parse: 2 callbacks suppressed [ 444.190375][T19279] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3588'. [ 444.219149][T19275] tipc: Started in network mode [ 444.219195][T19275] tipc: Node identity ac1414aa, cluster identity 4711 [ 444.219457][T19275] tipc: New replicast peer: 172.20.20.187 [ 444.220153][T19275] tipc: Enabled bearer , priority 10 [ 444.225710][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'. [ 444.260821][T19279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3588'. [ 444.283844][T19281] IPVS: using max 33 ests per chain, 79200 per kthread [ 444.416549][T19291] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3590'. [ 444.419127][T19292] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3590'. [ 444.425065][T19291] netlink: 'syz.2.3590': attribute type 6 has an invalid length. [ 444.500745][T19297] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3592'. [ 444.517651][T19297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3592'. [ 444.747614][T19311] netlink: 'syz.1.3595': attribute type 4 has an invalid length. [ 444.999494][T19331] vlan0: entered promiscuous mode [ 444.999584][T19331] bridge0: entered promiscuous mode [ 444.999782][T19331] vlan0: entered allmulticast mode [ 444.999796][T19331] bridge0: entered allmulticast mode [ 445.208561][ T44] net_ratelimit: 10 callbacks suppressed [ 445.208580][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.345826][T18046] tipc: Node number set to 2886997162 [ 445.498286][T19363] sch_fq: defrate 0 ignored. [ 445.516023][T19362] ip6t_rpfilter: unknown options [ 445.764728][T19375] netlink: 'syz.1.3610': attribute type 1 has an invalid length. [ 445.785802][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.786024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.884846][T19375] bond3: entered promiscuous mode [ 445.888040][T19375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.956741][T19386] batman_adv: batadv0: Adding interface: syzkaller0 [ 445.956759][T19386] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.956789][T19386] batman_adv: batadv0: Interface activated: syzkaller0 [ 445.962965][T19381] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 446.062926][ C1] Remote OS is not known: 127.0.0.1:798 -> 127.0.0.1:111 [ 446.062926][ C1] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=17887 DF PROTO=TCP SPT=798 DPT=111 SEQ=195807173 ACK=0 WINDOW=65495 RES=0x00 SYN URGP=0 OPT (0204FFD70402080A25B78A36000000000103030A) [ 446.103394][ C0] Remote OS is not known: 127.0.0.1:721 -> 127.0.0.1:111 [ 446.103394][ C0] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=17787 DF PROTO=TCP SPT=721 DPT=111 SEQ=1366252909 ACK=0 WINDOW=65495 RES=0x00 SYN URGP=0 OPT (0204FFD70402080A3F00A693000000000103030A) [ 446.111257][ C0] Remote OS is not known: 127.0.0.1:702 -> 127.0.0.1:111 [ 446.111257][ C0] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=60211 DF PROTO=TCP SPT=702 DPT=111 SEQ=3352710811 ACK=0 WINDOW=65495 RES=0x00 SYN URGP=0 OPT (0204FFD70402080A70367C95000000000103030A) [ 446.112595][ C0] Remote OS is not known: 127.0.0.1:831 -> 127.0.0.1:111 [ 446.112595][ C0] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=12413 DF PROTO=TCP SPT=831 DPT=111 SEQ=4111144953 ACK=0 WINDOW=65495 RES=0x00 SYN URGP=0 OPT (0204FFD70402080AB1D7EC0B000000000103030A) [ 446.230226][ C0] Remote OS is not known: 127.0.0.1:726 -> 127.0.0.1:111 [ 446.230226][ C0] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=40557 DF PROTO=TCP SPT=726 DPT=111 SEQ=3913681535 ACK=0 WINDOW=65495 RES=0x00 SYN URGP=0 OPT (0204FFD70402080AE6BA50D4000000000103030A) [ 446.238916][T19381] batman_adv: batadv0: Removing interface: syzkaller0 [ 446.264076][ C0] Remote OS is not known: 127.0.0.1:777 -> 127.0.0.1:111 [ 446.264076][ C0] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=12176 DF PROTO=TCP SPT=777 DPT=111 SEQ=3038357825 ACK=0 WINDOW=65495 RES=0x00 SYN URGP=0 OPT (0204FFD70402080AB807A467000000000103030A) [ 446.270986][ C0] Remote OS is not known: 127.0.0.1:855 -> 127.0.0.1:111 [ 446.270986][ C0] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=57827 DF PROTO=TCP SPT=855 DPT=111 SEQ=3920010804 ACK=0 WINDOW=65495 RES=0x00 SYN URGP=0 OPT (0204FFD70402080A33EA1C1A000000000103030A) [ 446.309770][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.427322][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.474278][T19377] bond3: (slave bridge4): making interface the new active one [ 446.474304][T19377] bridge4: entered promiscuous mode [ 446.475627][T19377] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 446.595272][T19405] tipc: Enabled bearer , priority 0 [ 446.596288][T19405] syzkaller0: entered promiscuous mode [ 446.596307][T19405] syzkaller0: entered allmulticast mode [ 446.598473][T19405] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3617'. [ 446.741230][T19417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3620'. [ 446.798571][T19409] can: request_module (can-proto-4) failed. [ 446.801597][T19417] bond4: option xmit_hash_policy: invalid value (64) [ 446.806421][T19417] bond4 (unregistering): Released all slaves [ 446.810323][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.810553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.975806][T19427] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 447.154616][T19436] netlink: 'syz.0.3625': attribute type 1 has an invalid length. [ 447.154638][T19436] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3625'. [ 447.366351][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.524560][ T4932] Bluetooth: hci1: command 0x0406 tx timeout [ 447.605955][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.684296][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.336540][ T5619] Bluetooth: hci2: Malformed HCI Event [ 448.543718][ T7111] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.544203][ T7111] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.544241][ T7111] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.544281][ T7111] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.636840][T19528] netlink: 'syz.2.3651': attribute type 83 has an invalid length. [ 448.761985][T19531] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 448.877828][ T5619] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 448.919966][T19543] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 449.144085][T19551] Bluetooth: hci0: unsupported parameter 5134 [ 449.144106][T19551] Bluetooth: hci0: unsupported parameter 8192 [ 449.144118][T19551] Bluetooth: hci0: unsupported parameter 5134 [ 449.144128][T19551] Bluetooth: hci0: unsupported parameter 8192 [ 450.485417][ T5715] net_ratelimit: 18 callbacks suppressed [ 450.485438][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.587024][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.660428][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.729394][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.809610][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.966811][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.966967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.529427][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.804265][T19555] dvmrp0: entered allmulticast mode [ 451.844776][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.956273][T19566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.974570][T19563] veth1_macvtap: left promiscuous mode [ 452.140903][T19581] __nla_validate_parse: 13 callbacks suppressed [ 452.140922][T19581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3670'. [ 452.177082][T19578] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 452.179249][T19578] bond4 (unregistering): Released all slaves [ 452.214257][T19585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3671'. [ 452.314154][T19592] netlink: 'syz.3.3672': attribute type 4 has an invalid length. [ 452.320048][T19585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.406821][T19612] netlink: 'syz.4.3673': attribute type 1 has an invalid length. [ 452.406846][T19612] netlink: 'syz.4.3673': attribute type 2 has an invalid length. [ 452.406859][T19612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3673'. [ 452.412292][T19589] macvlan2: entered promiscuous mode [ 452.412315][T19589] macvlan2: entered allmulticast mode [ 452.413063][T19589] bond1: entered promiscuous mode [ 452.419956][T19589] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 452.474764][T19589] bond1: left promiscuous mode [ 452.728522][T19632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3678'. [ 452.888598][ T5619] Bluetooth: hci1: unexpected cc 0x2003 length: 0 < 9 [ 452.890333][ T5619] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 453.001796][T19651] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20001 [ 453.039548][T19653] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 453.069813][T19653] bond2 (unregistering): Released all slaves [ 453.121557][T19659] batman_adv: batadv0: Adding interface: veth0 [ 453.121573][T19659] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.121606][T19659] batman_adv: batadv0: Interface activated: veth0 [ 453.151644][T19659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.151690][T19659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.165201][T19659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.165225][T19659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.177109][T19659] batman_adv: batadv0: Interface deactivated: veth0 [ 453.177131][T19659] batman_adv: batadv0: Removing interface: veth0 [ 453.430244][T19671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3692'. [ 453.459766][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3691'. [ 453.632352][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3695'. [ 453.632378][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3695'. [ 453.632394][T19686] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3695'. [ 453.977914][T19701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3701'. [ 453.998981][T19700] netlink: 'syz.3.3702': attribute type 29 has an invalid length. [ 454.093110][T19706] veth5: entered promiscuous mode [ 454.199926][T19713] syzkaller0: entered promiscuous mode [ 454.199942][T19713] syzkaller0: entered allmulticast mode [ 454.202105][T19713] netlink: 'syz.3.3707': attribute type 3 has an invalid length. [ 454.662864][T19737] Unsupported ieee802154 address type: 0 [ 455.373390][T19781] team0 (unregistering): Port device team_slave_0 removed [ 455.410463][T19781] team0 (unregistering): Port device team_slave_1 removed [ 455.529314][T18046] net_ratelimit: 58 callbacks suppressed [ 455.529336][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.603487][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 455.687783][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.760047][T19790] netlink: 'syz.2.3724': attribute type 21 has an invalid length. [ 455.818925][T19790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.909510][T19803] Bluetooth: hci0: unsupported parameter 5161 [ 455.909533][T19803] Bluetooth: hci0: unsupported parameter 8192 [ 455.909546][T19803] Bluetooth: hci0: unsupported parameter 5161 [ 455.909559][T19803] Bluetooth: hci0: unsupported parameter 8192 [ 455.980810][T19805] Cannot find add_set index 0 as target [ 456.007792][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.025464][T19807] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 456.107372][T19813] x_tables: duplicate underflow at hook 1 [ 456.206600][T19819] Bluetooth: MGMT ver 1.23 [ 456.325388][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.325588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.495698][T19834] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 456.512267][T19835] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 456.724795][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.725026][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.815083][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.964509][ T5619] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 456.964587][ T5619] Bluetooth: hci1: Injecting HCI hardware error event [ 456.968887][ T4932] Bluetooth: hci1: hardware error 0x00 [ 457.043926][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.294874][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805756c800: rx timeout, send abort [ 457.295270][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805756c800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 457.300043][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026156400: rx timeout, send abort [ 457.300231][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888026156400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 457.451167][T19893] netlink: 'syz.0.3756': attribute type 1 has an invalid length. [ 457.517316][T19893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.720097][T19904] netlink: 'syz.4.3761': attribute type 1 has an invalid length. [ 457.755072][T19901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.049162][ T4932] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 459.630613][T19950] __nla_validate_parse: 19 callbacks suppressed [ 459.630631][T19950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3773'. [ 459.641189][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3773'. [ 460.890965][ T5715] net_ratelimit: 23 callbacks suppressed [ 460.890988][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.213959][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.284487][T19955] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3774'. [ 461.288371][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3774'. [ 461.288728][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3774'. [ 461.359597][T19958] Bluetooth: hci0: unsupported parameter 5135 [ 461.359622][T19958] Bluetooth: hci0: unsupported parameter 8192 [ 461.359636][T19958] Bluetooth: hci0: unsupported parameter 5135 [ 461.359648][T19958] Bluetooth: hci0: unsupported parameter 8192 [ 461.451424][T19963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.526724][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.526935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.613081][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.637992][T19971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.638173][T19971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.638357][T19971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.641358][T19971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.671956][T19967] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 461.671982][T19967] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 461.759686][T19964] tipc: Enabled bearer , priority 0 [ 462.046820][T19964] tipc: Disabling bearer [ 462.255410][T20005] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3792'. [ 462.441113][T20029] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20002 [ 462.605766][T20028] bond3: option downdelay: invalid value (18446744073709551615) [ 462.605785][T20028] bond3: option downdelay: allowed values 0 - 2147483647 [ 462.608423][T20028] bond3 (unregistering): Released all slaves [ 463.254791][T20066] syzkaller1: entered promiscuous mode [ 463.254815][T20066] syzkaller1: entered allmulticast mode [ 463.516051][T20079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3817'. [ 463.714038][T20093] x_tables: unsorted entry at hook 1 [ 463.769142][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'. [ 464.267427][T20122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3829'. [ 464.267453][T20122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.267472][T20122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.645146][ T1136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 464.667210][T20148] sctp: [Deprecated]: syz.4.3834 (pid 20148) Use of int in maxseg socket option. [ 464.667210][T20148] Use struct sctp_assoc_value instead [ 465.023097][T20162] bond2: option lp_interval: invalid value (0) [ 465.023112][T20162] bond2: option lp_interval: allowed values 1 - 2147483647 [ 465.043209][T20162] bond2 (unregistering): Released all slaves [ 465.068726][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3839'. [ 465.068748][T20171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3839'. [ 465.120225][T20166] netlink: 'syz.1.3839': attribute type 4 has an invalid length. [ 465.120247][T20166] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3839'. [ 465.142803][T20166] .`: renamed from bond0 [ 465.299451][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3841'. [ 465.299474][T20182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3841'. [ 465.335969][T20185] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3842'. [ 465.389530][T20187] bridge4: entered promiscuous mode [ 465.389557][T20187] bridge4: entered allmulticast mode [ 465.930266][ T5715] net_ratelimit: 44 callbacks suppressed [ 465.930286][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.930394][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.058841][T20230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3856'. [ 466.082960][T20230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3856'. [ 466.083973][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.345939][ T5729] hid-generic 0005:0458:4155.0001: unknown main item tag 0x0 [ 466.373015][T20254] netlink: 'syz.3.3861': attribute type 4 has an invalid length. [ 466.374639][T20254] netlink: 'syz.3.3861': attribute type 4 has an invalid length. [ 466.404756][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.407523][ T5729] hid-generic 0005:0458:4155.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 466.663810][T20270] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3865'. [ 466.724210][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.724438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.098029][T20295] netlink: 'syz.4.3872': attribute type 1 has an invalid length. [ 467.124549][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.164565][T20301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3873'. [ 467.313579][T20308] openvswitch: netlink: Flow key attr not present in new flow. [ 467.332745][T20311] openvswitch: netlink: Flow key attr not present in new flow. [ 467.471181][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.132181][T20320] __nla_validate_parse: 2 callbacks suppressed [ 470.132200][T20320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3876'. [ 470.132722][T20322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.182850][T20325] vlan2: entered promiscuous mode [ 470.182872][T20325] erspan0: entered promiscuous mode [ 470.245564][T20328] vlan2: entered promiscuous mode [ 470.350943][T20348] FAULT_INJECTION: forcing a failure. [ 470.350943][T20348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.350992][T20348] CPU: 0 UID: 0 PID: 20348 Comm: syz.2.3881 Not tainted syzkaller #0 PREEMPT(full) [ 470.351013][T20348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 470.351029][T20348] Call Trace: [ 470.351040][T20348] [ 470.351048][T20348] dump_stack_lvl+0xe8/0x150 [ 470.351194][T20348] should_fail_ex+0x410/0x560 [ 470.351320][T20348] _copy_to_user+0x31/0xb0 [ 470.351419][T20348] simple_read_from_buffer+0xe1/0x170 [ 470.351477][T20348] proc_fail_nth_read+0x1bb/0x230 [ 470.351514][T20348] ? common_file_perm+0x20e/0x2b0 [ 470.351580][T20348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.351603][T20348] ? rw_verify_area+0x24a/0x4c0 [ 470.351644][T20348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.351665][T20348] vfs_read+0x213/0xa80 [ 470.351699][T20348] ? __pfx___mutex_lock+0x10/0x10 [ 470.351809][T20348] ? __pfx_vfs_read+0x10/0x10 [ 470.351836][T20348] ? __fget_files+0x2a/0x420 [ 470.351865][T20348] ? __fget_files+0x3a2/0x420 [ 470.351888][T20348] ? __fget_files+0x2a/0x420 [ 470.351923][T20348] ksys_read+0x150/0x270 [ 470.351944][T20348] ? __pfx_ksys_read+0x10/0x10 [ 470.351972][T20348] do_syscall_64+0x166/0x520 [ 470.352053][T20348] ? trace_irq_disable+0x3b/0x140 [ 470.352093][T20348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.352126][T20348] ? clear_bhb_loop+0x70/0xc0 [ 470.352149][T20348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.352167][T20348] RIP: 0033:0x7f269635e9ce [ 470.352185][T20348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 470.352203][T20348] RSP: 002b:00007f269724ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 470.352223][T20348] RAX: ffffffffffffffda RBX: 00007f26972506c0 RCX: 00007f269635e9ce [ 470.352238][T20348] RDX: 000000000000000f RSI: 00007f26972500a0 RDI: 0000000000000004 [ 470.352249][T20348] RBP: 00007f2697250090 R08: 0000000000000000 R09: 0000000000000000 [ 470.352260][T20348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.352271][T20348] R13: 00007f2696626038 R14: 00007f2696625fa0 R15: 00007ffc521727e8 [ 470.352300][T20348] [ 471.230366][T20363] net_ratelimit: 19 callbacks suppressed [ 471.230389][T20363] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 471.285102][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.543821][T20403] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 471.651964][T20408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3899'. [ 471.666455][T20408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.681077][T20408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.841319][T20408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.923879][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.925547][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.925814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.024251][T20434] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 472.045104][ T1043] IPVS: starting estimator thread 0... [ 472.047258][T20434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3903'. [ 472.080844][T20438] netlink: 'syz.1.3904': attribute type 64 has an invalid length. [ 472.081154][T20439] netlink: 'syz.1.3904': attribute type 64 has an invalid length. [ 472.094741][T20438] netlink: 'syz.1.3904': attribute type 1 has an invalid length. [ 472.094762][T20438] netlink: 'syz.1.3904': attribute type 3 has an invalid length. [ 472.094775][T20438] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3904'. [ 472.133881][T20436] IPVS: using max 31 ests per chain, 74400 per kthread [ 472.327471][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.599562][T20466] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 472.616360][T20466] bond2 (unregistering): Released all slaves [ 472.651239][T20475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3912'. [ 472.719088][T20479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3914'. [ 472.769755][T20479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3914'. [ 472.897566][T20492] Bluetooth: MGMT ver 1.23 [ 472.906466][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3917'. [ 472.906491][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3917'. [ 472.906551][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3917'. [ 472.964952][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.965161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.966232][ T2008] block nbd2: Possible stuck request ffff888027a07000: control (read@0,4096B). Runtime 150 seconds [ 473.031975][T20492] team0: Port device team_slave_0 removed [ 473.602392][T20537] netlink: 'syz.4.3930': attribute type 4 has an invalid length. [ 473.606718][ T5619] Bluetooth: hci2: command 0x0405 tx timeout [ 473.633612][T20535] tc action pedit offset 0 out of bounds [ 473.633633][T20535] tc action pedit offset 0 out of bounds [ 473.633643][T20535] tc action pedit offset 0 out of bounds [ 473.633665][T20535] tc action pedit offset 0 out of bounds [ 473.633674][T20535] tc action pedit offset 0 out of bounds [ 473.633684][T20535] tc action pedit offset 0 out of bounds [ 473.633692][T20535] tc action pedit offset 0 out of bounds [ 473.633701][T20535] tc action pedit offset 0 out of bounds [ 473.633710][T20535] tc action pedit offset 0 out of bounds [ 473.633721][T20535] tc action pedit offset 0 out of bounds [ 473.848571][T20546] IPVS: set_ctl: invalid protocol: 60 172.20.20.44:20001 [ 474.608585][T20599] syzkaller0: entered promiscuous mode [ 474.608602][T20599] syzkaller0: entered allmulticast mode [ 476.491704][ T44] net_ratelimit: 19 callbacks suppressed [ 476.491725][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.818786][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.124890][T19595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.125098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.529882][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.765968][T20627] __nla_validate_parse: 11 callbacks suppressed [ 477.765989][T20627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3960'. [ 478.004206][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.089679][T20658] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3967'. [ 478.187560][T20667] l2tp_ppp: sess 2/0: no socket in recv [ 478.367352][T20684] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3976'. [ 478.412366][T20686] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3977'. [ 478.427546][T20686] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3977'. [ 478.501241][T20692] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 478.563737][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.607462][T20690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3979'. [ 479.009373][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3989'. [ 479.076858][T20721] macvtap1: entered promiscuous mode [ 479.076882][T20721] vlan0: entered promiscuous mode [ 479.077392][T20721] macvtap1: entered allmulticast mode [ 479.077410][T20721] vlan0: entered allmulticast mode [ 479.077422][T20721] veth0_vlan: entered allmulticast mode [ 479.296865][T20739] netlink: 'syz.2.3992': attribute type 1 has an invalid length. [ 479.296887][T20739] netlink: 'syz.2.3992': attribute type 3 has an invalid length. [ 479.296900][T20739] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3992'. [ 479.364716][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.495019][T20752] sctp: [Deprecated]: syz.0.3997 (pid 20752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.495019][T20752] Use struct sctp_sack_info instead [ 479.604416][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.833771][T20776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4001'. [ 479.835217][T20775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4001'. [ 479.839235][T20752] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 479.924573][T20778] vlan3: entered allmulticast mode [ 479.924595][T20778] bond0: entered allmulticast mode [ 479.925027][T20752] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 480.612701][T20815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.957184][T20833] syzkaller0: create flow: hash 1501898374 index 1 [ 481.450875][T20839] syzkaller1: entered promiscuous mode [ 481.450897][T20839] syzkaller1: entered allmulticast mode [ 481.496511][T20856] bond3 (unregistering): Released all slaves [ 481.528765][T20820] syzkaller0: delete flow: hash 1501898374 index 1 [ 481.685919][ T44] net_ratelimit: 3 callbacks suppressed [ 481.685939][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.901787][T20870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.959520][T20872] xt_bpf: check failed: parse error [ 481.964549][T20872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.571231][ T7116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.571436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.724456][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.894938][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.769040][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.094262][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.806857][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.843888][T20879] __nla_validate_parse: 2 callbacks suppressed [ 484.843909][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4021'. [ 485.048717][T20900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4022'. [ 485.238936][T20881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4022'. [ 485.238959][T20881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4022'. [ 485.450330][T20917] x_tables: duplicate entry at hook 3 [ 485.499553][T20918] 8021q: VLANs not supported on ip_vti0 [ 485.623357][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'. [ 485.696009][T20932] ip6t_hbh: unknown flags 38 [ 485.700408][T20930] netlink: 'syz.1.4037': attribute type 1 has an invalid length. [ 485.736769][T20933] netlink: 'syz.0.4039': attribute type 1 has an invalid length. [ 485.781696][T20933] bond3: (slave gretap1): making interface the new active one [ 485.793515][T20933] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 485.798247][T20936] netlink: 'syz.0.4039': attribute type 1 has an invalid length. [ 485.930731][T20951] netlink: 'syz.2.4044': attribute type 4 has an invalid length. [ 485.930753][T20951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4044'. [ 485.930993][T20951] netlink: 'syz.2.4044': attribute type 4 has an invalid length. [ 485.931007][T20951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4044'. [ 485.984372][T20948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4040'. [ 486.467384][T20984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4054'. [ 486.521258][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 486.710304][T21002] netlink: 'syz.1.4061': attribute type 1 has an invalid length. [ 486.798281][T21006] xt_ecn: cannot match TCP bits for non-tcp packets [ 486.817919][T21006] net_ratelimit: 6 callbacks suppressed [ 486.817943][T21006] veth0: mtu less than device minimum [ 486.884895][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.126002][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.605085][T19594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.605331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.706606][T21061] syzkaller1: entered promiscuous mode [ 487.706629][T21061] syzkaller1: entered allmulticast mode [ 487.709757][T21061] IPVS: length: 239 != 24 [ 487.906619][T21071] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 487.910859][T21073] netlink: 'syz.2.4083': attribute type 8 has an invalid length. [ 487.924759][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.950521][T21075] netlink: zone id is out of range [ 487.950538][T21075] netlink: zone id is out of range [ 487.950546][T21075] netlink: zone id is out of range [ 490.292480][T21182] __nla_validate_parse: 9 callbacks suppressed [ 490.292499][T21182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4109'. [ 490.337911][T21182] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 490.488692][T21189] ip6t_srh: unknown srh match flags 4000 [ 490.500522][T21189] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4111'. [ 490.683910][T21193] xt_l2tp: wrong L2TP version: 255 [ 490.769248][T21193] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.833462][T21207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4114'. [ 490.917421][T21214] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4115'. [ 490.976082][T21213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'. [ 491.198760][T21233] netlink: 'syz.0.4120': attribute type 2 has an invalid length. [ 491.436323][T21235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.551924][T21248] pim6reg: entered allmulticast mode [ 491.791814][ T30] audit: type=1804 audit(1791226024.675:6): pid=21260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4127" name="/newroot/169/cgroup.controllers" dev="tmpfs" ino=877 res=1 errno=0 [ 491.793711][ T30] audit: type=1800 audit(1791226024.685:7): pid=21260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4127" name="cgroup.controllers" dev="tmpfs" ino=877 res=0 errno=0 [ 491.840738][T21265] net_ratelimit: 18 callbacks suppressed [ 491.840756][T21265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.889442][T21264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4127'. [ 491.905322][T21271] netlink: 'syz.4.4130': attribute type 10 has an invalid length. [ 491.954129][T21271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.975853][T21271] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 491.978576][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4132'. [ 492.003968][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.033715][T21280] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4132'. [ 492.087814][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.366707][T21296] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4138'. [ 492.373583][T21296] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4138'. [ 493.124000][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.206209][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.445045][T19595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.445233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.630747][T21362] ip6t_hbh: Not strict - not implemented [ 493.753974][T21371] openvswitch: netlink: EtherType 2 is less than min 600 [ 494.087068][T21387] lo speed is unknown, defaulting to 1000 [ 494.164718][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.752684][T21387] wg1 speed is unknown, defaulting to 1000 [ 494.888581][T21435] xt_hl: Unknown TTL match mode: 255 [ 495.054958][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.418772][T21459] __nla_validate_parse: 6 callbacks suppressed [ 495.418792][T21459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4174'. [ 495.902577][T21480] netlink: 'syz.2.4181': attribute type 9 has an invalid length. [ 495.902598][T21480] netlink: 'syz.2.4181': attribute type 4 has an invalid length. [ 495.972222][T21486] bridge_slave_0: left allmulticast mode [ 495.972248][T21486] bridge_slave_0: left promiscuous mode [ 495.972447][T21486] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.000418][T21489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4180'. [ 496.009075][T21486] bridge_slave_1: left allmulticast mode [ 496.009101][T21486] bridge_slave_1: left promiscuous mode [ 496.009300][T21486] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.059327][T21494] netlink: 'syz.4.4182': attribute type 1 has an invalid length. [ 496.059660][T21486] bond0: (slave bond_slave_0): Releasing backup interface [ 496.060973][T21496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4182'. [ 496.061332][T21486] bond_slave_0: left promiscuous mode [ 496.061431][T21486] bond_slave_0: left allmulticast mode [ 496.099778][T21486] bond0: (slave bond_slave_1): Releasing backup interface [ 496.116698][T21486] bond_slave_1: left promiscuous mode [ 496.116918][T21486] bond_slave_1: left allmulticast mode [ 496.138807][T21486] team0: Port device team_slave_0 removed [ 496.161484][T21486] team0: Port device team_slave_1 removed [ 496.168486][T21486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.168509][T21486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.196143][T21486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.196168][T21486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.421059][T21504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4183'. [ 496.523500][T21496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.585590][T21497] bridge3: entered promiscuous mode [ 496.589979][T21497] bond3: (slave bridge3): making interface the new active one [ 496.590903][T21497] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 496.645939][ T7111] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 496.794054][T21520] syzkaller0: left promiscuous mode [ 496.794077][T21520] syzkaller0: left allmulticast mode [ 497.095186][T21527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4190'. [ 497.287045][ T5736] net_ratelimit: 4 callbacks suppressed [ 497.287064][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.406444][T21551] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 497.771820][T21575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4205'. [ 497.988348][T21582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4205'. [ 498.086880][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.196110][T21551] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 498.196137][T21551] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 498.248213][T21586] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 498.264619][T21586] bond0 (unregistering): Released all slaves [ 498.325622][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.397260][T21551] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 498.397282][T21551] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 498.491036][T21551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 498.491060][T21551] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 498.564084][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.622231][T21551] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 498.622255][T21551] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 499.205160][ T7111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.205367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.209019][T21642] netlink: 'syz.2.4215': attribute type 1 has an invalid length. [ 499.209041][T21642] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4215'. [ 499.298601][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.363640][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.502330][T21661] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 499.524064][T21661] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4219'. [ 499.679682][T21673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4224'. [ 500.000701][T21698] netlink: 'syz.4.4228': attribute type 33 has an invalid length. [ 500.038881][T21698] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 500.075081][T21698] bond5 (unregistering): Released all slaves [ 500.131959][T21702] bridge6: entered promiscuous mode [ 500.132028][T21702] bridge6: entered allmulticast mode [ 500.403731][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.481810][T21719] __nla_validate_parse: 2 callbacks suppressed [ 500.481829][T21719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4233'. [ 500.740462][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4237'. [ 500.754745][T21744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4237'. [ 500.790926][T21705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4230'. [ 500.791026][T21705] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 500.800621][T21705] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4230'. [ 500.829844][T21750] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4239'. [ 500.887145][T21753] lo speed is unknown, defaulting to 1000 [ 500.887207][T21753] lo speed is unknown, defaulting to 1000 [ 500.888082][T21753] lo speed is unknown, defaulting to 1000 [ 500.889115][T21753] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 500.889147][T21753] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 500.889185][T21753] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 501.003872][T21753] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 501.185233][T21753] lo speed is unknown, defaulting to 1000 [ 501.200511][T21753] lo speed is unknown, defaulting to 1000 [ 501.215468][T21753] lo speed is unknown, defaulting to 1000 [ 501.220882][T21753] lo speed is unknown, defaulting to 1000 [ 501.244995][T21753] lo speed is unknown, defaulting to 1000 [ 501.251925][T21753] lo speed is unknown, defaulting to 1000 [ 501.259185][T21753] lo speed is unknown, defaulting to 1000 [ 501.267866][T21753] lo speed is unknown, defaulting to 1000 [ 501.293016][T21753] lo speed is unknown, defaulting to 1000 [ 501.614455][T21793] netlink: 'syz.0.4244': attribute type 2 has an invalid length. [ 501.615609][T21790] bridge0: port 3(veth0) entered blocking state [ 501.616114][T21790] bridge0: port 3(veth0) entered disabled state [ 501.616294][T21790] veth0: entered allmulticast mode [ 501.622210][T21790] veth0: entered promiscuous mode [ 501.623135][T21790] bridge0: port 3(veth0) entered blocking state [ 501.623304][T21790] bridge0: port 3(veth0) entered forwarding state [ 501.685210][T21794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4249'. [ 502.135866][T21808] bond2: Unable to set up delay as MII monitoring is disabled [ 502.154809][T21808] bond2 (unregistering): Released all slaves [ 502.325271][T18047] net_ratelimit: 3 callbacks suppressed [ 502.325290][T18047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.487143][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.580113][T21840] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4259'. [ 502.666675][T21840] bond0 (unregistering): Released all slaves [ 502.738515][T21838] netlink: 'syz.2.4260': attribute type 10 has an invalid length. [ 502.751623][T21848] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4260'. [ 502.751721][T21838] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 503.046857][ T2008] block nbd2: Possible stuck request ffff888027a07000: control (read@0,4096B). Runtime 180 seconds [ 503.080998][T21865] vlan0: entered promiscuous mode [ 503.081205][T21865] vlan0: entered allmulticast mode [ 503.081221][T21865] veth0_vlan: entered allmulticast mode [ 503.115986][T21878] xt_TCPMSS: Only works on TCP SYN packets [ 503.158696][T21883] xt_TCPMSS: Only works on TCP SYN packets [ 503.357809][T21899] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4267'. [ 503.401232][T21903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.731699][T21844] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 503.902245][T21923] ip_tables: iptables: counters copy to user failed while replacing table [ 504.118024][T21923] xt_CT: No such helper "syz1" [ 504.324325][ T4983] udevd[4983]: worker [15187] /devices/virtual/block/nbd2 timeout; kill it [ 504.324410][ T4983] udevd[4983]: seq 18161 '/devices/virtual/block/nbd2' killed [ 504.953810][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.958717][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.965162][T19609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.965352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.365441][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.440031][T21958] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 505.442030][T21958] bond0 (unregistering): Released all slaves [ 505.455105][T21965] openvswitch: netlink: EtherType 548 is less than min 600 [ 505.569646][T21965] Bluetooth: hci0: unsupported parameter 5161 [ 505.569668][T21965] Bluetooth: hci0: unsupported parameter 8192 [ 505.569682][T21965] Bluetooth: hci0: unsupported parameter 5161 [ 505.569694][T21965] Bluetooth: hci0: unsupported parameter 8192 [ 505.920335][T21992] __nla_validate_parse: 5 callbacks suppressed [ 505.920354][T21992] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4291'. [ 506.041670][T21997] tipc: Enabled bearer , priority 10 [ 506.042981][T21997] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 506.484617][T22032] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4300'. [ 506.506964][T22019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4297'. [ 506.519789][T22019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4297'. [ 506.652738][T22042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4297'. [ 506.652770][T22042] nbd: nbd64 already in use [ 506.999444][T17333] udevd[17333]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 507.339415][T22069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4310'. [ 507.340013][T22069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4310'. [ 507.343087][T22069] netlink: 'syz.2.4310': attribute type 32 has an invalid length. [ 507.343108][T22069] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4310'. [ 507.855396][T22088] geneve0: entered promiscuous mode [ 507.905169][T22086] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.006287][ T5729] net_ratelimit: 2 callbacks suppressed [ 508.006306][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.163834][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.164480][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.194404][T22107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4318'. [ 508.199872][T22109] netlink: 'syz.4.4319': attribute type 29 has an invalid length. [ 508.212341][T22107] xfrm1: entered promiscuous mode [ 508.212360][T22107] xfrm1: entered allmulticast mode [ 508.268399][T22109] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4319'. [ 508.340914][T22109] netlink: 'syz.4.4319': attribute type 29 has an invalid length. [ 508.405503][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.553755][T22125] vlan2: entered allmulticast mode [ 508.553779][T22125] veth1_virt_wifi: entered allmulticast mode [ 508.588800][T22129] ip_tables: iptables: counters copy to user failed while replacing table [ 508.997217][T22152] netlink: 'syz.4.4332': attribute type 1 has an invalid length. [ 509.203997][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.608494][T22178] netlink: 'syz.2.4340': attribute type 1 has an invalid length. [ 509.770080][ T30] audit: type=1800 audit(1791226042.655:8): pid=22191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4342" name="memory.events" dev="tmpfs" ino=1115 res=0 errno=0 [ 509.801491][ T30] audit: type=1804 audit(1791226042.685:9): pid=22191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4342" name="/newroot/215/memory.events" dev="tmpfs" ino=1115 res=1 errno=0 [ 510.089467][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.090447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.253468][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.704654][T22223] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 510.728237][T22223] bond6 (unregistering): Released all slaves [ 510.749715][T22240] xt_esp: unknown flags DD [ 510.840718][T22246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.938272][T22247] netlink: 'syz.3.4360': attribute type 7 has an invalid length. [ 510.938293][T22247] __nla_validate_parse: 7 callbacks suppressed [ 510.938305][T22247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4360'. [ 511.255641][T22254] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 511.425222][T22265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4367'. [ 511.490130][T22265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4367'. [ 511.664644][T22279] netlink: 'syz.2.4368': attribute type 1 has an invalid length. [ 511.664678][T22279] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4368'. [ 511.664695][T22279] netlink: 'syz.2.4368': attribute type 2 has an invalid length. [ 511.664707][T22279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4368'. [ 511.780201][T22293] netlink: 'syz.2.4368': attribute type 1 has an invalid length. [ 511.780224][T22293] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4368'. [ 511.780240][T22293] netlink: 'syz.2.4368': attribute type 2 has an invalid length. [ 511.780251][T22293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4368'. [ 511.799651][T22288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.821597][T22288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.840484][T22288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.850782][T22288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.872237][T22288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.875536][T22302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4373'. [ 511.876058][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4373'. [ 511.949175][T22301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4374'. [ 513.368485][ T5736] net_ratelimit: 8 callbacks suppressed [ 513.368504][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.084622][T18049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.131258][T22425] netlink: 'syz.1.4404': attribute type 5 has an invalid length. [ 514.221262][T22430] SET target dimension over the limit! [ 514.405829][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.483562][T18049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.743107][T22465] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 514.801023][T22473] netlink: 'syz.2.4413': attribute type 11 has an invalid length. [ 514.890845][T22477] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 515.345442][T22512] netlink: 'syz.0.4423': attribute type 1 has an invalid length. [ 515.404031][T22512] 8021q: adding VLAN 0 to HW filter on device bond7 [ 515.444914][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.509003][T22512] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 515.851803][T19594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.852042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.286758][T22563] xt_bpf: check failed: parse error [ 516.286852][T22562] xt_bpf: check failed: parse error [ 516.328221][T22565] __nla_validate_parse: 10 callbacks suppressed [ 516.328242][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4436'. [ 516.484503][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.625908][T22578] netlink: 'syz.1.4441': attribute type 1 has an invalid length. [ 516.625931][T22578] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4441'. [ 516.761123][T22588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4444'. [ 516.828019][T22589] netlink: Conntrack attr has 8 unknown bytes [ 517.091205][T22612] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 517.091434][T22612] tipc: Enabled bearer , priority 10 [ 517.662827][T22655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.957241][T22666] tap0: tun_chr_ioctl cmd 1074025676 [ 517.957263][T22666] tap0: owner set to 0 [ 517.975783][T22666] block nbd1: NBD_DISCONNECT [ 517.975869][T22666] block nbd1: Send disconnect failed -32 [ 517.975888][T22666] block nbd1: Send disconnect failed -32 [ 517.975905][T22666] block nbd1: shutting down sockets [ 518.084566][T19594] batadv1: left allmulticast mode [ 518.084638][T19594] batadv1: left promiscuous mode [ 518.084847][T19594] bridge0: port 1(batadv1) entered disabled state [ 518.180908][T19594] vcan0: left allmulticast mode [ 518.181055][T19594] pimreg: left allmulticast mode [ 518.181152][T19594] dvmrp8: left allmulticast mode [ 518.525405][T19594] bond6 (unregistering): (slave ip6gre3): Releasing backup interface [ 518.525425][T19594] ip6gre3 (unregistering): left promiscuous mode [ 518.566196][ T5715] net_ratelimit: 5 callbacks suppressed [ 518.566216][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.607044][T22693] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4475'. [ 518.712454][T19594] bond9 (unregistering): (slave gretap1): Releasing backup interface [ 518.772727][T19594] bond2 (unregistering): (slave bridge3): Releasing active interface [ 518.977139][T19594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.980277][T19594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.982269][T19594] bond0 (unregistering): Released all slaves [ 518.992033][T19594] bond1 (unregistering): Released all slaves [ 519.024640][T19594] bond2 (unregistering): Released all slaves [ 519.042696][T19594] bond3 (unregistering): Released all slaves [ 519.075829][T19594] bond4 (unregistering): Released all slaves [ 519.090965][T19594] bond5 (unregistering): Released all slaves [ 519.110508][T19594] bond6 (unregistering): Released all slaves [ 519.141174][T19594] bond7 (unregistering): (slave bond8): Releasing backup interface [ 519.141839][T19594] bond7 (unregistering): Released all slaves [ 519.165316][T19594] bond8 (unregistering): Released all slaves [ 519.190968][T19594] bond9 (unregistering): (slave bond10): Releasing backup interface [ 519.192120][T19594] bond9 (unregistering): Released all slaves [ 519.214384][T19594] bond10 (unregistering): Released all slaves [ 519.230724][T19594] bond11 (unregistering): Released all slaves [ 519.427245][T22686] netlink: 'syz.1.4471': attribute type 4 has an invalid length. [ 519.441988][T19594] tipc: Disabling bearer [ 519.442176][T19594] tipc: Disabling bearer [ 519.452444][T22700] netlink: NAT attribute has 5 unknown bytes [ 519.452476][T22700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.500203][T19594] tipc: Left network mode [ 519.607471][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.437085][T22740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4490'. [ 520.437126][T22740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.469551][T22742] IPVS: rr: UDP [::1]:8080 - no destination available [ 520.502329][T19594] batman_adv: batadv0: Removing interface: macvtap1 [ 520.581675][T18049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.654977][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.828245][T22757] x_tables: duplicate entry at hook 2 [ 521.109320][T22775] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 2, id = 0 [ 521.157306][T22762] IPVS: stopping backup sync thread 22775 ... [ 521.605884][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.693889][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.818258][T22806] netlink: 'syz.4.4509': attribute type 2 has an invalid length. [ 521.818280][T22806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4509'. [ 521.819165][T22806] x_tables: unsorted entry at hook 4 [ 521.931133][T19594] hsr_slave_0: left promiscuous mode [ 521.932099][T19594] hsr_slave_1: left promiscuous mode [ 521.933110][T19594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.933130][T19594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.968903][T19594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.968927][T19594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.017639][T19594] veth1_macvtap: left promiscuous mode [ 522.018520][T19594] veth0_macvtap: left promiscuous mode [ 522.018618][T19594] veth1_vlan: left promiscuous mode [ 522.207304][T22821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4511'. [ 522.841442][T19594] team0 (unregistering): Port device team_slave_1 removed [ 522.866163][T19594] team0 (unregistering): Port device team_slave_0 removed [ 523.052520][ T1136] smc: removing ib device syz0 [ 523.093731][ T5729] infiniband syz0: ib_query_port failed (-19) [ 523.094577][ T1136] smbdirect: ib_dev[syz0] removed [ 523.151885][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4514'. [ 523.445825][T22880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4520'. [ 523.486396][T22880] netlink: 'syz.1.4520': attribute type 1 has an invalid length. [ 523.604560][T22888] netlink: 'syz.0.4523': attribute type 1 has an invalid length. [ 523.604581][T22888] netlink: 'syz.0.4523': attribute type 3 has an invalid length. [ 523.604593][T22888] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4523'. [ 523.611106][T22888] net_ratelimit: 1 callbacks suppressed [ 523.611123][T22888] ip_tables: iptables: counters copy to user failed while replacing table [ 523.611466][T22889] ip_tables: iptables: counters copy to user failed while replacing table [ 523.611874][T22888] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 523.681967][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.693082][T22887] x_tables: duplicate entry at hook 4 [ 523.763976][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.837717][T22880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 523.876634][T22885] pimreg3: entered allmulticast mode [ 524.062292][T22891] bond4: (slave geneve3): making interface the new active one [ 524.076816][T22891] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 524.368651][T22918] ip_tables: iptables: counters copy to user failed while replacing table [ 524.368950][T22918] ip_tables: iptables: counters copy to user failed while replacing table [ 524.369222][T22918] ip_tables: iptables: counters copy to user failed while replacing table [ 524.369499][T22918] ip_tables: iptables: counters copy to user failed while replacing table [ 524.369785][T22918] ip_tables: iptables: counters copy to user failed while replacing table [ 524.400437][T22921] netlink: 'syz.1.4531': attribute type 7 has an invalid length. [ 524.438555][T22923] xt_ecn: cannot match TCP bits for non-tcp packets [ 524.438668][T22923] xt_ecn: cannot match TCP bits for non-tcp packets [ 524.438761][T22923] xt_ecn: cannot match TCP bits for non-tcp packets [ 524.438859][T22923] xt_ecn: cannot match TCP bits for non-tcp packets [ 524.438954][T22923] xt_ecn: cannot match TCP bits for non-tcp packets [ 524.439050][T22923] xt_ecn: cannot match TCP bits for non-tcp packets [ 524.439147][T22923] xt_ecn: cannot match TCP bits for non-tcp packets [ 524.461186][T22923] xt_ecn: cannot match TCP bits for non-tcp packets [ 524.461293][T22923] xt_ecn: cannot match TCP bits for non-tcp packets [ 524.461392][T22923] xt_ecn: cannot match TCP bits for non-tcp packets [ 524.930900][T22945] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4537'. [ 525.421345][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4544'. [ 525.421369][T22981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4544'. [ 525.561561][T22991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4547'. [ 525.574950][ T30] audit: type=1107 audit(1791226058.425:10): pid=22983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!'AFIùû†ù' [ 525.801652][T23005] Bluetooth: hci0: unsupported parameter 5134 [ 525.801675][T23005] Bluetooth: hci0: unsupported parameter 8192 [ 525.801688][T23005] Bluetooth: hci0: unsupported parameter 5134 [ 525.801705][T23005] Bluetooth: hci0: unsupported parameter 8192 [ 525.911577][T23006] xt_TCPMSS: Only works on TCP SYN packets [ 525.921659][T23007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4551'. [ 525.972840][T22986] bond5 (unregistering): Released all slaves [ 526.649180][T23025] bond2 (unregistering): Released all slaves [ 527.121715][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4560'. [ 527.121759][T23065] ip6gretap0: entered promiscuous mode [ 527.461824][T23082] team0: Device ipvlan0 failed to register rx_handler [ 527.487630][T23082] team0: Device ipvlan0 failed to register rx_handler [ 527.493356][T23080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4564'. [ 527.534817][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4567'. [ 527.574720][T23088] bridge0: port 3(bond0) entered blocking state [ 527.595415][T23088] bridge0: port 3(bond0) entered disabled state [ 527.628892][T23088] bond0: entered allmulticast mode [ 527.628917][T23088] bond_slave_0: entered allmulticast mode [ 527.628983][T23088] bond_slave_1: entered allmulticast mode [ 527.754825][T23099] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4569'. [ 527.761537][T23088] bond0: entered promiscuous mode [ 527.761560][T23088] bond_slave_0: entered promiscuous mode [ 527.761738][T23088] bond_slave_1: entered promiscuous mode [ 527.762836][T23088] bridge0: port 3(bond0) entered blocking state [ 527.764578][T23088] bridge0: port 3(bond0) entered forwarding state [ 527.886427][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4569'. [ 528.162940][T23107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4570'. [ 528.162968][T23107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4570'. [ 528.162987][T23107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4570'. [ 528.800066][T23144] veth0_macvtap: entered allmulticast mode [ 528.800219][T23144] net_ratelimit: 79 callbacks suppressed [ 528.800234][T23144] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 528.851287][T19594] IPVS: stop unused estimator thread 0... [ 528.964267][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.989495][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.228730][T23165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4583'. [ 529.254194][T23165] vlan3: entered allmulticast mode [ 529.254215][T23165] bridge7: entered allmulticast mode [ 529.260628][T23165] bridge7: port 1(erspan0) entered blocking state [ 529.264779][T23165] bridge7: port 1(erspan0) entered disabled state [ 529.264927][T23165] erspan0: entered allmulticast mode [ 529.268970][T23165] bridge7: port 1(erspan0) entered blocking state [ 529.269079][T23165] bridge7: port 1(erspan0) entered forwarding state [ 529.272442][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4584'. [ 529.325399][T23170] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 529.648877][T23192] tipc: Started in network mode [ 529.648906][T23192] tipc: Node identity ac141441, cluster identity 4711 [ 529.659448][T23192] tipc: Enabled bearer , priority 10 [ 529.705909][T23194] tipc: Failed to remove unknown binding: 66,0,0/0:667354010/667354011 [ 529.763775][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.786338][T23202] ipt_REJECT: ECHOREPLY no longer supported. [ 529.941039][T23220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.941563][T23221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.982404][T23222] openvswitch: netlink: Missing key (keys=40, expected=100) [ 530.003939][T18049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.010138][ T966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.419514][T23215] netlink: 'syz.3.4594': attribute type 1 has an invalid length. [ 530.773485][T18046] tipc: Node number set to 2886997057 [ 531.083320][T23269] xt_CT: No such helper "syz1" [ 531.352534][T23292] xt_hashlimit: overflow, try lower: 3/0 [ 531.757642][T23316] team0: Cannot enslave team device to itself [ 531.994302][T23334] netlink: 'syz.0.4627': attribute type 3 has an invalid length. [ 532.220207][T23352] __nla_validate_parse: 80 callbacks suppressed [ 532.220228][T23352] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4632'. [ 532.220245][T23352] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4632'. [ 532.633778][T23378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.646351][T23378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.651843][T23378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.771958][T23386] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4641'. [ 532.939732][T23399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4645'. [ 532.939756][T23399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4645'. [ 533.125583][ T2008] block nbd2: Possible stuck request ffff888027a07000: control (read@0,4096B). Runtime 210 seconds [ 533.358404][T23428] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4651'. [ 533.446870][T23434] batman_adv: batadv0: Adding interface: syzkaller0 [ 533.446887][T23434] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.446910][T23434] batman_adv: batadv0: Interface activated: syzkaller0 [ 533.479785][T23439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4653'. [ 533.489823][T23431] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 533.547324][T23431] batman_adv: batadv0: Removing interface: syzkaller0 [ 533.852919][T23460] netlink: 'syz.3.4661': attribute type 1 has an invalid length. [ 533.852943][T23460] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4661'. [ 533.852959][T23460] netlink: 'syz.3.4661': attribute type 1 has an invalid length. [ 533.916250][T23463] netlink: 'syz.2.4663': attribute type 11 has an invalid length. [ 533.945770][T23467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4664'. [ 533.952818][T23466] netlink: 'syz.2.4663': attribute type 11 has an invalid length. [ 533.998437][T23472] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4665'. [ 534.086268][T23472] bridge0: port 3(bond0) entered disabled state [ 534.106255][T23472] bond0 (unregistering): left allmulticast mode [ 534.106280][T23472] bond_slave_0: left allmulticast mode [ 534.106297][T23472] bond_slave_1: left allmulticast mode [ 534.106325][T23472] bond0 (unregistering): left promiscuous mode [ 534.106338][T23472] bond_slave_0: left promiscuous mode [ 534.106574][T23472] bond_slave_1: left promiscuous mode [ 534.106841][T23472] bridge0: port 3(bond0) entered disabled state [ 534.144166][T23472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.171177][T23238] net_ratelimit: 11 callbacks suppressed [ 534.171197][T23238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.202517][T23472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.221433][T23472] bond0 (unregistering): Released all slaves [ 534.511005][T23500] netlink: 'syz.4.4671': attribute type 11 has an invalid length. [ 534.511026][T23500] netlink: 'syz.4.4671': attribute type 11 has an invalid length. [ 534.657139][T23509] netlink: 'syz.2.4673': attribute type 1 has an invalid length. [ 534.859159][T23516] netlink: 'syz.1.4675': attribute type 7 has an invalid length. [ 534.859181][T23516] netlink: 'syz.1.4675': attribute type 8 has an invalid length. [ 534.909435][T23516] team0: entered promiscuous mode [ 534.909458][T23516] team_slave_1: entered promiscuous mode [ 534.942617][T23516] .`: entered promiscuous mode [ 534.942642][T23516] bond_slave_0: entered promiscuous mode [ 534.942792][T23516] bond_slave_1: entered promiscuous mode [ 534.971929][T23516] team0: left promiscuous mode [ 534.971954][T23516] team_slave_1: left promiscuous mode [ 534.988235][T23516] .`: left promiscuous mode [ 534.988258][T23516] bond_slave_0: left promiscuous mode [ 534.988423][T23516] bond_slave_1: left promiscuous mode [ 535.212095][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.308264][T23539] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 535.527403][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.821886][T23573] netlink: 'syz.2.4691': attribute type 10 has an invalid length. [ 535.850060][T23573] team0: Port device wg2 added [ 536.250615][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.594029][T23608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.637858][T23605] ip_tables: iptables: counters copy to user failed while replacing table [ 536.940176][T23627] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 537.288998][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.358274][T23663] __nla_validate_parse: 20 callbacks suppressed [ 537.358293][T23663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4718'. [ 537.550378][T23672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.760183][T23677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4722'. [ 537.850885][T23680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4723'. [ 538.177746][T23702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4725'. [ 538.178181][T23702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4725'. [ 538.255783][T23707] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4727'. [ 538.336184][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.507999][T23728] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4731'. [ 538.565828][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.811098][T23736] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20000 [ 538.811302][T23736] sctp: [Deprecated]: syz.1.4733 (pid 23736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.811302][T23736] Use struct sctp_sack_info instead [ 539.080025][T23749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4736'. [ 539.098930][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4738'. [ 539.144512][T23760] netlink: 'syz.2.4740': attribute type 1 has an invalid length. [ 539.164605][T23749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4736'. [ 539.381683][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.058216][T23823] batman_adv: batadv0: Adding interface: syz_tun [ 540.058234][T23823] batman_adv: batadv0: The MTU of interface syz_tun is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.058264][T23823] batman_adv: batadv0: Interface activated: syz_tun [ 540.411934][T23238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.809725][T23873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.821018][T23881] tipc: Enabling not permitted [ 540.821050][T23881] tipc: Enabling of bearer rejected, failed to enable media [ 541.101776][T23895] tipc: Enabled bearer , priority 0 [ 541.246758][T23895] syzkaller0: entered promiscuous mode [ 541.248343][T23895] syzkaller0: entered allmulticast mode [ 541.248942][T23895] tipc: Resetting bearer [ 541.280766][T23893] tipc: Resetting bearer [ 541.468224][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.606051][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.491395][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.736340][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.737256][ T7114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.737969][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.778014][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.409238][T23893] tipc: Disabling bearer [ 544.563492][T23238] net_ratelimit: 1 callbacks suppressed [ 544.563514][T23238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.648706][T23943] __nla_validate_parse: 10 callbacks suppressed [ 544.648729][T23943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4783'. [ 544.773044][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4787'. [ 544.773067][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4787'. [ 545.019795][T23969] IPVS: Scheduler module ip_vs_sip not found [ 545.126342][ T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.127218][ T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.127256][ T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.127289][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.286263][T23985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.332561][T23985] xfrm0: entered allmulticast mode [ 545.577996][T24009] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4801'. [ 545.611930][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.745055][T24023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.857709][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.040621][T24032] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4808'. [ 546.042483][T24032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.075364][T24032] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:20001 [ 546.283890][T24053] netlink: 'syz.0.4815': attribute type 1 has an invalid length. [ 546.430311][T24056] netlink: 'syz.3.4816': attribute type 1 has an invalid length. [ 546.653724][T24070] IPv6: Can't replace route, no match found [ 546.676910][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.699169][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e6af800: rx timeout, send abort [ 547.024716][T24087] netlink: 'syz.0.4825': attribute type 1 has an invalid length. [ 547.024741][T24087] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4825'. [ 547.115653][T24091] netlink: 'syz.2.4827': attribute type 2 has an invalid length. [ 547.199236][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e6af800: abort rx timeout. Force session deactivation [ 547.202135][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880505a7400: rx timeout, send abort [ 547.212358][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880505a7400: connection exists (fe ff). last cmd: 20 [ 547.232715][T24097] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4829'. [ 547.240221][T24097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4829'. [ 547.272481][T24102] block nbd0: Unsupported socket: should be TCP or UNIX. [ 547.329508][T24104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.462334][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714ac000: rx timeout, send abort [ 547.514734][T24110] netlink: 'syz.4.4833': attribute type 1 has an invalid length. [ 547.654818][T24114] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 547.657106][T24114] bond6 (unregistering): Released all slaves [ 547.689964][T23238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.710916][T24123] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 547.710941][T24123] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 547.722082][T24126] bridge4: entered promiscuous mode [ 547.736034][T24126] bond5: (slave bridge4): making interface the new active one [ 547.746900][T24126] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 547.818365][T24131] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 547.820794][T24131] bond6 (unregistering): Released all slaves [ 547.898327][T24126] bridge5: entered promiscuous mode [ 547.905797][T24126] bond5: (slave bridge5): Enslaving as a backup interface with an up link [ 547.962402][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714ac000: abort rx timeout. Force session deactivation [ 548.031877][T24145] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.4843'. [ 548.031985][T24145] 0ªX¹¦Dö»: renamed from gretap0 [ 548.049624][T24145] 0ªX¹¦Dö»: entered allmulticast mode [ 548.173961][T24152] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4845'. [ 548.225953][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714ae000: rx timeout, send abort [ 548.530624][T24164] netlink: NAT attribute has 4 unknown bytes [ 548.530655][T24164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.726109][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714ae000: abort rx timeout. Force session deactivation [ 548.911238][T24191] ipt_REJECT: TCP_RESET invalid for non-tcp [ 548.997265][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714afc00: rx timeout, send abort [ 549.050496][T24201] netlink: 'syz.4.4858': attribute type 12 has an invalid length. [ 549.184600][T24210] netlink: 'syz.4.4858': attribute type 12 has an invalid length. [ 549.281297][T24214] smc: net device lo applied user defined pnetid SYZ0 [ 549.282900][T24214] smc: smcd device lo applied user defined pnetid SYZ0 [ 549.497321][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714afc00: abort rx timeout. Force session deactivation [ 549.706930][T24230] net_ratelimit: 4 callbacks suppressed [ 549.706953][T24230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.764145][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714acc00: rx timeout, send abort [ 549.777022][T23238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.888489][T24238] __nla_validate_parse: 5 callbacks suppressed [ 549.888512][T24238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4872'. [ 549.946177][T24241] tunl0: entered promiscuous mode [ 549.958490][T24241] netlink: 'syz.0.4870': attribute type 4 has an invalid length. [ 549.958513][T24241] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4870'. [ 550.099094][T24254] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 550.222284][T24260] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4877'. [ 550.264203][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714acc00: abort rx timeout. Force session deactivation [ 550.414965][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.533575][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714af800: rx timeout, send abort [ 550.586348][T24277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.749454][T24269] FAULT_INJECTION: forcing a failure. [ 550.749454][T24269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.749488][T24269] CPU: 1 UID: 0 PID: 24269 Comm: syz.1.4881 Not tainted syzkaller #0 PREEMPT(full) [ 550.749511][T24269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 550.749523][T24269] Call Trace: [ 550.749531][T24269] [ 550.749539][T24269] dump_stack_lvl+0xe8/0x150 [ 550.749575][T24269] should_fail_ex+0x410/0x560 [ 550.749607][T24269] _copy_to_user+0x31/0xb0 [ 550.749647][T24269] simple_read_from_buffer+0xe1/0x170 [ 550.749682][T24269] proc_fail_nth_read+0x1bb/0x230 [ 550.749703][T24269] ? common_file_perm+0x20e/0x2b0 [ 550.749732][T24269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 550.749756][T24269] ? rw_verify_area+0x24a/0x4c0 [ 550.749789][T24269] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 550.749809][T24269] vfs_read+0x213/0xa80 [ 550.749845][T24269] ? __pfx___mutex_lock+0x10/0x10 [ 550.749877][T24269] ? __pfx_vfs_read+0x10/0x10 [ 550.749909][T24269] ? __fget_files+0x2a/0x420 [ 550.749941][T24269] ? __fget_files+0x3a2/0x420 [ 550.749968][T24269] ? __fget_files+0x2a/0x420 [ 550.750003][T24269] ksys_read+0x150/0x270 [ 550.750025][T24269] ? __pfx_ksys_read+0x10/0x10 [ 550.750043][T24269] ? fdget+0x183/0x1e0 [ 550.750080][T24269] do_syscall_64+0x166/0x520 [ 550.750106][T24269] ? trace_irq_disable+0x3b/0x140 [ 550.750128][T24269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.750148][T24269] ? clear_bhb_loop+0x70/0xc0 [ 550.750173][T24269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.750193][T24269] RIP: 0033:0x7fef7575e9ce [ 550.750211][T24269] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 550.750228][T24269] RSP: 002b:00007fef7667ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 550.750250][T24269] RAX: ffffffffffffffda RBX: 00007fef766806c0 RCX: 00007fef7575e9ce [ 550.750265][T24269] RDX: 000000000000000f RSI: 00007fef766800a0 RDI: 0000000000000005 [ 550.750278][T24269] RBP: 00007fef76680090 R08: 0000000000000000 R09: 0000000000000000 [ 550.750290][T24269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.750304][T24269] R13: 00007fef75a26038 R14: 00007fef75a25fa0 R15: 00007ffcf9156b38 [ 550.750337][T24269] [ 550.807551][T23238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.033626][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714af800: abort rx timeout. Force session deactivation [ 551.063989][T24282] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 551.160778][T24284] vlan4: entered allmulticast mode [ 551.160808][T24284] bond0: entered allmulticast mode [ 551.308851][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714ad000: rx timeout, send abort [ 551.363895][T24294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4886'. [ 551.368787][T24294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4886'. [ 551.368810][T24294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4886'. [ 551.369643][T24294] netlink: 'syz.4.4886': attribute type 8 has an invalid length. [ 551.454606][T24300] nbd: must specify at least one socket [ 551.494073][T24300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4890'. [ 551.494109][T24300] netlink: 'syz.2.4890': attribute type 8 has an invalid length. [ 551.494122][T24300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4890'. [ 551.550180][T24304] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 551.616689][T24304] 8021q: adding VLAN 0 to HW filter on device bond5 [ 551.808905][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714ad000: abort rx timeout. Force session deactivation [ 551.843484][T23238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.923577][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.012749][T24341] netlink: 576 bytes leftover after parsing attributes in process `syz.1.4902'. [ 552.074395][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714af000: rx timeout, send abort [ 552.109804][T24343] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 552.111008][T24343] bond3 (unregistering): Released all slaves [ 552.166953][T24347] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 552.186477][T24347] bond3 (unregistering): Released all slaves [ 552.341974][T24356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4905'. [ 552.574442][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714af000: abort rx timeout. Force session deactivation [ 552.615694][T24367] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 552.706977][T24371] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 552.797722][T24378] netlink: 'syz.0.4911': attribute type 10 has an invalid length. [ 552.847016][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714ad800: rx timeout, send abort [ 552.883637][T23238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.892374][T24386] nbd: must specify at least one socket [ 553.141865][T24402] sch_fq: defrate 0 ignored. [ 553.347095][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880714ad800: abort rx timeout. Force session deactivation [ 553.538599][T24421] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 553.538795][ T1154] IPVS: starting estimator thread 0... [ 553.614345][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802acb6000: rx timeout, send abort [ 553.632084][T24424] IPVS: using max 32 ests per chain, 76800 per kthread [ 553.858351][T24442] netlink: NAT attribute has 4 unknown bytes [ 554.082082][T24456] netlink: 'syz.0.4940': attribute type 11 has an invalid length. [ 554.082106][T24456] netlink: 'syz.0.4940': attribute type 4 has an invalid length. [ 554.114567][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802acb6000: abort rx timeout. Force session deactivation [ 554.273154][T24466] hsr_slave_1 (unregistering): left promiscuous mode [ 554.383877][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802acb5400: rx timeout, send abort [ 554.619098][T24487] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 554.620171][T24487] bond9 (unregistering): Released all slaves [ 554.660530][T24486] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 554.662545][T24486] bond9 (unregistering): Released all slaves [ 554.884392][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802acb5400: abort rx timeout. Force session deactivation [ 554.963572][T23873] net_ratelimit: 3 callbacks suppressed [ 554.963593][T23873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.963748][T23238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.142175][T24521] __nla_validate_parse: 19 callbacks suppressed [ 555.142193][T24521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4959'. [ 555.146763][T24516] ip6gre2: entered allmulticast mode [ 555.148627][T19595] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 555.159021][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802acb7c00: rx timeout, send abort [ 555.349570][T24527] netlink: NAT attribute has 4 unknown bytes [ 555.349604][T24527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.432812][T24532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4962'. [ 555.445638][T24531] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4963'. [ 555.545484][T24534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4965'. [ 555.566936][T24534] bridge7: entered promiscuous mode [ 555.566998][T24534] bridge7: entered allmulticast mode [ 555.592365][T24541] ip6t_ah: unknown flags 5 [ 555.592640][T24539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4964'. [ 555.594745][T24541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4966'. [ 555.598516][T24542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4966'. [ 555.652959][T24539] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4964'. [ 555.662265][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802acb7c00: abort rx timeout. Force session deactivation [ 555.808084][T24553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4968'. [ 555.831220][T24555] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4969'. [ 555.934469][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802acb5000: rx timeout, send abort [ 556.003453][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.039762][T24571] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20002 [ 556.043433][T24570] IPv6: addrconf: prefix option has invalid lifetime [ 556.079542][T24560] 8021q: adding VLAN 0 to HW filter on device bond7 [ 556.394788][T24597] netlink: 'syz.2.4983': attribute type 1 has an invalid length. [ 556.434520][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802acb5000: abort rx timeout. Force session deactivation [ 556.441152][T24597] bond3: entered promiscuous mode [ 556.441485][T24597] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.698133][T24617] netlink: NAT attribute has 8 unknown bytes [ 556.698170][T24617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.704713][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a2c00: rx timeout, send abort [ 557.018843][T24635] veth3: entered allmulticast mode [ 557.043533][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.191368][T24649] netlink: 'syz.0.4998': attribute type 1 has an invalid length. [ 557.204763][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a2c00: abort rx timeout. Force session deactivation [ 557.474188][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a2800: rx timeout, send abort [ 557.974231][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a2800: abort rx timeout. Force session deactivation [ 558.004742][T23873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.050069][T24660] batadv_slave_0: entered promiscuous mode [ 558.188280][T24660] batadv_slave_0: left promiscuous mode [ 558.243998][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a3000: rx timeout, send abort [ 558.744481][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a3000: abort rx timeout. Force session deactivation [ 559.013613][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a0000: rx timeout, send abort [ 559.203705][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 559.513802][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a0000: abort rx timeout. Force session deactivation [ 559.787987][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a0400: rx timeout, send abort [ 559.955969][T24736] xt_l2tp: v2 doesn't support IP mode [ 560.004199][T18046] net_ratelimit: 4 callbacks suppressed [ 560.004252][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.142780][T24743] tc_dump_action: action bad kind [ 560.213595][T24750] __nla_validate_parse: 8 callbacks suppressed [ 560.213615][T24750] netlink: 4880 bytes leftover after parsing attributes in process `syz.2.5024'. [ 560.213630][T24750] netlink: 5804 bytes leftover after parsing attributes in process `syz.2.5024'. [ 560.288036][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a0400: abort rx timeout. Force session deactivation [ 560.325736][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.424970][T24755] openvswitch: netlink: Invalid VLAN frame [ 560.427311][T24755] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 560.561603][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a1800: rx timeout, send abort [ 560.842740][T24764] syzkaller0: entered promiscuous mode [ 560.842763][T24764] syzkaller0: entered allmulticast mode [ 561.052808][T23873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.061654][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a1800: abort rx timeout. Force session deactivation [ 561.304922][T24785] ip_tables: iptables: counters copy to user failed while replacing table [ 561.325854][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a1c00: rx timeout, send abort [ 561.365438][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.712716][T24798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5042'. [ 561.825903][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a1c00: abort rx timeout. Force session deactivation [ 561.918355][T24801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5044'. [ 561.989472][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 561.992013][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 561.993615][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 562.022613][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 562.030608][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.064112][T24809] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 562.064139][T24809] mac80211_hwsim hwsim34 wlan0: left allmulticast mode [ 562.089125][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a1000: rx timeout, send abort [ 562.200050][T24808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5046'. [ 562.225567][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 562.227167][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 562.229505][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 562.232268][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 562.242029][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 562.404254][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.531039][T24830] netlink: 'syz.2.5049': attribute type 1 has an invalid length. [ 562.589173][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a1000: abort rx timeout. Force session deactivation [ 562.849379][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a1400: rx timeout, send abort [ 563.086858][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5051'. [ 563.086885][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5051'. [ 563.086955][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5051'. [ 563.206530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.220806][ T2008] block nbd2: Possible stuck request ffff888027a07000: control (read@0,4096B). Runtime 240 seconds [ 563.350015][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880633a1400: abort rx timeout. Force session deactivation [ 563.440704][T24806] wg1 speed is unknown, defaulting to 1000 [ 563.444483][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.621177][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807af1f400: rx timeout, send abort [ 563.761679][T24806] lo speed is unknown, defaulting to 1000 [ 563.839796][T24867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.840543][T24869] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5057'. [ 564.087083][T24872] syzkaller1: entered promiscuous mode [ 564.087107][T24872] syzkaller1: entered allmulticast mode [ 564.123263][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807af1f400: abort rx timeout. Force session deactivation [ 564.222993][T24875] syzkaller1: left promiscuous mode [ 564.223250][T24875] syzkaller1: left allmulticast mode [ 564.323800][ T4932] Bluetooth: hci3: command tx timeout [ 564.388433][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807af1fc00: rx timeout, send abort [ 564.823875][T24806] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.824049][T24806] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.824279][T24806] bridge_slave_0: entered allmulticast mode [ 564.826208][T24806] bridge_slave_0: entered promiscuous mode [ 564.859221][T24806] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.859477][T24806] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.859922][T24806] bridge_slave_1: entered allmulticast mode [ 564.862148][T24806] bridge_slave_1: entered promiscuous mode [ 564.888477][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807af1fc00: abort rx timeout. Force session deactivation [ 565.016595][T24806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.036976][T24806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.154675][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807af1cc00: rx timeout, send abort [ 565.252833][T24806] team0: Port device team_slave_0 added [ 565.274300][T24806] team0: Port device team_slave_1 added [ 565.406408][T24806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.406427][T24806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.406453][T24806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.408500][T24806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.408513][T24806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.408540][T24806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.440675][T24909] netlink: 'syz.4.5070': attribute type 8 has an invalid length. [ 565.553055][T24909] net_ratelimit: 2 callbacks suppressed [ 565.553074][T24909] ip_tables: iptables: counters copy to user failed while replacing table [ 565.654730][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807af1cc00: abort rx timeout. Force session deactivation [ 565.657446][T24906] block nbd0: reconnected socket [ 565.685544][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5067'. [ 565.689169][ T4932] block nbd0: Receive control failed (result -107) [ 565.702003][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.790882][T24806] hsr_slave_0: entered promiscuous mode [ 565.791912][T24806] hsr_slave_1: entered promiscuous mode [ 565.792587][T24806] debugfs: 'hsr0' already exists in 'hsr' [ 565.792605][T24806] Cannot create hsr debugfs directory [ 565.860430][T24920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5071'. [ 565.929171][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880298fd000: rx timeout, send abort [ 566.068155][T24924] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5074'. [ 566.405800][ T4932] Bluetooth: hci3: command tx timeout [ 566.429592][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880298fd000: abort rx timeout. Force session deactivation [ 566.622108][T24806] [ 566.624575][T24806] ====================================================== [ 566.631615][T24806] WARNING: possible circular locking dependency detected [ 566.638741][T24806] syzkaller #0 Not tainted [ 566.643168][T24806] ------------------------------------------------------ [ 566.650194][T24806] syz-executor/24806 is trying to acquire lock: [ 566.656452][T24806] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 566.665866][T24806] [ 566.665866][T24806] but task is already holding lock: [ 566.673241][T24806] ffffffff8f8035e0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 566.682345][T24806] [ 566.682345][T24806] which lock already depends on the new lock. [ 566.682345][T24806] [ 566.692747][T24806] [ 566.692747][T24806] the existing dependency chain (in reverse order) is: [ 566.701761][T24806] [ 566.701761][T24806] -> #8 (gdp_mutex){+.+.}-{4:4}: [ 566.703146][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e7e9800: rx timeout, send abort [ 566.717032][T24806] __mutex_lock+0x19d/0x1550 [ 566.722169][T24806] get_device_parent+0x16f/0x3a0 [ 566.727651][T24806] device_add+0x2d4/0xb80 [ 566.732512][T24806] device_create+0x269/0x300 [ 566.737623][T24806] msr_device_create+0x33/0x50 [ 566.742948][T24806] cpuhp_invoke_callback+0x434/0x810 [ 566.748761][T24806] cpuhp_thread_fun+0x362/0x780 [ 566.754128][T24806] smpboot_thread_fn+0x565/0xa70 [ 566.759601][T24806] kthread+0x38b/0x480 [ 566.764182][T24806] ret_from_fork+0x514/0xb70 [ 566.769285][T24806] ret_from_fork_asm+0x1a/0x30 [ 566.774569][T24806] [ 566.774569][T24806] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 566.782115][T24806] cpuhp_thread_fun+0x127/0x780 [ 566.787483][T24806] smpboot_thread_fn+0x565/0xa70 [ 566.792936][T24806] kthread+0x38b/0x480 [ 566.797521][T24806] ret_from_fork+0x514/0xb70 [ 566.802635][T24806] ret_from_fork_asm+0x1a/0x30 [ 566.807929][T24806] [ 566.807929][T24806] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 566.815660][T24806] cpus_read_lock+0x42/0x160 [ 566.820771][T24806] static_key_slow_inc+0x12/0x30 [ 566.826283][T24806] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 566.832582][T24806] nbd_genl_foreach_sock+0x265/0x450 [ 566.838376][T24806] nbd_genl_reconfigure+0xbbb/0x1040 [ 566.844167][T24806] genl_family_rcv_msg_doit+0x233/0x340 [ 566.850313][T24806] genl_rcv_msg+0x614/0x7a0 [ 566.855328][T24806] netlink_rcv_skb+0x226/0x4a0 [ 566.860602][T24806] genl_rcv+0x28/0x40 [ 566.865096][T24806] netlink_unicast+0x7bd/0x940 [ 566.870442][T24806] netlink_sendmsg+0x813/0xb40 [ 566.875713][T24806] sock_sendmsg_nosec+0x13a/0x180 [ 566.881311][T24806] ____sys_sendmsg+0x54e/0x850 [ 566.886630][T24806] ___sys_sendmsg+0x2a5/0x360 [ 566.891823][T24806] __x64_sys_sendmsg+0x1b1/0x290 [ 566.897276][T24806] do_syscall_64+0x166/0x520 [ 566.902380][T24806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.908783][T24806] [ 566.908783][T24806] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 566.916416][T24806] __mutex_lock+0x19d/0x1550 [ 566.921521][T24806] nbd_queue_rq+0x373/0xff0 [ 566.926545][T24806] blk_mq_dispatch_rq_list+0x499/0x1990 [ 566.932731][T24806] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 566.939623][T24806] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 566.946125][T24806] blk_mq_run_work_fn+0x16c/0x300 [ 566.951670][T24806] process_scheduled_works+0xc3d/0x1630 [ 566.957731][T24806] worker_thread+0xa47/0xfb0 [ 566.962838][T24806] kthread+0x38b/0x480 [ 566.967503][T24806] ret_from_fork+0x514/0xb70 [ 566.972602][T24806] ret_from_fork_asm+0x1a/0x30 [ 566.977887][T24806] [ 566.977887][T24806] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 566.985086][T24806] __mutex_lock+0x19d/0x1550 [ 566.990193][T24806] nbd_queue_rq+0xc1/0xff0 [ 566.995125][T24806] blk_mq_dispatch_rq_list+0x499/0x1990 [ 567.001183][T24806] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 567.008022][T24806] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 567.014515][T24806] blk_mq_run_work_fn+0x16c/0x300 [ 567.020080][T24806] process_scheduled_works+0xc3d/0x1630 [ 567.026141][T24806] worker_thread+0xa47/0xfb0 [ 567.031248][T24806] kthread+0x38b/0x480 [ 567.035824][T24806] ret_from_fork+0x514/0xb70 [ 567.040922][T24806] ret_from_fork_asm+0x1a/0x30 [ 567.046203][T24806] [ 567.046203][T24806] -> #3 (set->srcu){.+.+}-{0:0}: [ 567.053324][T24806] __synchronize_srcu+0xc9/0x2f0 [ 567.058841][T24806] elevator_switch+0x1e8/0x7b0 [ 567.064184][T24806] elevator_change+0x2fa/0x480 [ 567.069463][T24806] elevator_set_default+0x375/0x440 [ 567.075171][T24806] blk_register_queue+0x3f3/0x4e0 [ 567.080763][T24806] __add_disk+0x6b8/0xdb0 [ 567.085642][T24806] add_disk_fwnode+0x100/0x3a0 [ 567.090920][T24806] nbd_dev_add+0x733/0xb60 [ 567.095843][T24806] nbd_init+0x168/0x1f0 [ 567.100638][T24806] do_one_initcall+0x250/0x870 [ 567.105919][T24806] do_initcall_level+0x10a/0x1a0 [ 567.111423][T24806] do_initcalls+0x59/0xa0 [ 567.116262][T24806] kernel_init_freeable+0x29d/0x3e0 [ 567.121971][T24806] kernel_init+0x22/0x1d0 [ 567.126815][T24806] ret_from_fork+0x514/0xb70 [ 567.131916][T24806] ret_from_fork_asm+0x1a/0x30 [ 567.137199][T24806] [ 567.137199][T24806] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 567.145009][T24806] __mutex_lock+0x19d/0x1550 [ 567.150116][T24806] elevator_change+0x1af/0x480 [ 567.155389][T24806] elevator_set_none+0xb5/0x140 [ 567.160750][T24806] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 567.167075][T24806] nbd_start_device+0x189/0xb30 [ 567.172436][T24806] nbd_genl_connect+0x167d/0x1cd0 [ 567.177968][T24806] genl_family_rcv_msg_doit+0x233/0x340 [ 567.184032][T24806] genl_rcv_msg+0x614/0x7a0 [ 567.189049][T24806] netlink_rcv_skb+0x226/0x4a0 [ 567.194320][T24806] genl_rcv+0x28/0x40 [ 567.198814][T24806] netlink_unicast+0x7bd/0x940 [ 567.203580][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e7e9800: abort rx timeout. Force session deactivation [ 567.214125][T24806] netlink_sendmsg+0x813/0xb40 [ 567.219400][T24806] sock_sendmsg_nosec+0x13a/0x180 [ 567.224934][T24806] ____sys_sendmsg+0x54e/0x850 [ 567.230220][T24806] ___sys_sendmsg+0x2a5/0x360 [ 567.235409][T24806] __x64_sys_sendmsg+0x1b1/0x290 [ 567.240865][T24806] do_syscall_64+0x166/0x520 [ 567.245969][T24806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.252372][T24806] [ 567.252372][T24806] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 567.260968][T24806] blk_alloc_queue+0x544/0x690 [ 567.266246][T24806] __blk_mq_alloc_disk+0x194/0x390 [ 567.271895][T24806] nbd_dev_add+0x494/0xb60 [ 567.276821][T24806] nbd_init+0x168/0x1f0 [ 567.281491][T24806] do_one_initcall+0x250/0x870 [ 567.286794][T24806] do_initcall_level+0x10a/0x1a0 [ 567.292249][T24806] do_initcalls+0x59/0xa0 [ 567.297087][T24806] kernel_init_freeable+0x29d/0x3e0 [ 567.302798][T24806] kernel_init+0x22/0x1d0 [ 567.307641][T24806] ret_from_fork+0x514/0xb70 [ 567.312739][T24806] ret_from_fork_asm+0x1a/0x30 [ 567.318018][T24806] [ 567.318018][T24806] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 567.325221][T24806] __lock_acquire+0x164c/0x2de0 [ 567.330586][T24806] lock_acquire+0x115/0x350 [ 567.335598][T24806] fs_reclaim_acquire+0x71/0x100 [ 567.341045][T24806] __kmalloc_cache_noprof+0x61/0x600 [ 567.346836][T24806] get_device_parent+0x255/0x3a0 [ 567.352286][T24806] device_add+0x2d4/0xb80 [ 567.357125][T24806] netdev_register_kobject+0x197/0x350 [ 567.363180][T24806] register_netdevice+0x1433/0x1eb0 [ 567.368938][T24806] nsim_create+0xbd7/0x1150 [ 567.374041][T24806] __nsim_dev_port_add+0x7f8/0xcd0 [ 567.379743][T24806] nsim_dev_port_add_all+0x37/0xf0 [ 567.385384][T24806] nsim_drv_probe+0x8b0/0xbb0 [ 567.390578][T24806] really_probe+0x254/0xae0 [ 567.395657][T24806] __driver_probe_device+0x1e8/0x360 [ 567.401456][T24806] driver_probe_device+0x4f/0x240 [ 567.407003][T24806] __device_attach_driver+0x270/0x410 [ 567.412976][T24806] bus_for_each_drv+0x258/0x2f0 [ 567.418335][T24806] __device_attach+0x2c4/0x450 [ 567.423644][T24806] device_initial_probe+0xa1/0xd0 [ 567.429186][T24806] bus_probe_device+0x12a/0x220 [ 567.434546][T24806] device_add+0x7d7/0xb80 [ 567.439391][T24806] new_device_store+0x355/0x6d0 [ 567.444753][T24806] kernfs_fop_write_iter+0x3a4/0x540 [ 567.450557][T24806] vfs_write+0x612/0xba0 [ 567.455304][T24806] ksys_write+0x150/0x270 [ 567.460150][T24806] do_syscall_64+0x166/0x520 [ 567.465254][T24806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.471657][T24806] [ 567.471657][T24806] other info that might help us debug this: [ 567.471657][T24806] [ 567.473486][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e7e8000: rx timeout, send abort [ 567.489992][T24806] Chain exists of: [ 567.489992][T24806] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 567.489992][T24806] [ 567.502062][T24806] Possible unsafe locking scenario: [ 567.502062][T24806] [ 567.509505][T24806] CPU0 CPU1 [ 567.514862][T24806] ---- ---- [ 567.520211][T24806] lock(gdp_mutex); [ 567.524099][T24806] lock(cpuhp_state-up); [ 567.530935][T24806] lock(gdp_mutex); [ 567.537338][T24806] lock(fs_reclaim); [ 567.541306][T24806] [ 567.541306][T24806] *** DEADLOCK *** [ 567.541306][T24806] [ 567.549434][T24806] locks held by syz-executor/24806: 8, last CPU#0: [ 567.555922][T24806] #0: ffff888025650460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 567.564800][T24806] #1: ffff88802a648080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 567.574571][T24806] #2: ffff888029becb48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 567.584779][T24806] #3: ffffffff8facc120 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 567.595136][T24806] #4: ffff8880203f5128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 567.604377][T24806] #5: ffff888056830258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_probe+0xfb/0xbb0 [ 567.614398][T24806] #6: ffffffff90254c40 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x87f/0x1150 [ 567.623357][T24806] #7: ffffffff8f8035e0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 567.632691][T24806] [ 567.632691][T24806] stack backtrace: [ 567.638573][T24806] CPU: 0 UID: 0 PID: 24806 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 567.648104][T24806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 567.658160][T24806] Call Trace: [ 567.661442][T24806] [ 567.664360][T24806] dump_stack_lvl+0xe8/0x150 [ 567.668950][T24806] print_circular_bug+0x2e2/0x300 [ 567.673970][T24806] check_noncircular+0x12f/0x150 [ 567.678906][T24806] __lock_acquire+0x164c/0x2de0 [ 567.683751][T24806] ? lockdep_unlock+0x5c/0xd0 [ 567.688415][T24806] ? __lock_acquire+0x1511/0x2de0 [ 567.693522][T24806] lock_acquire+0x115/0x350 [ 567.698021][T24806] ? __kmalloc_cache_noprof+0x61/0x600 [ 567.703476][T24806] fs_reclaim_acquire+0x71/0x100 [ 567.708419][T24806] ? __kmalloc_cache_noprof+0x61/0x600 [ 567.713867][T24806] __kmalloc_cache_noprof+0x61/0x600 [ 567.719143][T24806] ? get_device_parent+0x255/0x3a0 [ 567.724243][T24806] ? get_device_parent+0x255/0x3a0 [ 567.729351][T24806] get_device_parent+0x255/0x3a0 [ 567.734281][T24806] device_add+0x2d4/0xb80 [ 567.738602][T24806] netdev_register_kobject+0x197/0x350 [ 567.744057][T24806] register_netdevice+0x1433/0x1eb0 [ 567.749250][T24806] ? __pfx_register_netdevice+0x10/0x10 [ 567.754783][T24806] ? dput+0x39/0x60 [ 567.758681][T24806] ? __debugfs_create_file+0x34f/0x400 [ 567.764296][T24806] ? debugfs_create_file_full+0x3f/0x60 [ 567.769847][T24806] nsim_create+0xbd7/0x1150 [ 567.774354][T24806] __nsim_dev_port_add+0x7f8/0xcd0 [ 567.779464][T24806] ? do_raw_spin_unlock+0xf5/0x200 [ 567.784579][T24806] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 567.790210][T24806] ? __mod_timer+0xb53/0xed0 [ 567.794794][T24806] ? queue_delayed_work_on+0x171/0x1e0 [ 567.800254][T24806] nsim_dev_port_add_all+0x37/0xf0 [ 567.805362][T24806] nsim_drv_probe+0x8b0/0xbb0 [ 567.810045][T24806] ? __pfx_nsim_drv_probe+0x10/0x10 [ 567.815243][T24806] ? kernfs_put+0x7b9/0x820 [ 567.819738][T24806] ? sysfs_do_create_link_sd+0xe0/0x110 [ 567.825273][T24806] ? driver_sysfs_add+0x1fe/0x210 [ 567.830376][T24806] ? __pfx_nsim_bus_probe+0x10/0x10 [ 567.835564][T24806] really_probe+0x254/0xae0 [ 567.840065][T24806] __driver_probe_device+0x1e8/0x360 [ 567.845344][T24806] driver_probe_device+0x4f/0x240 [ 567.850363][T24806] __device_attach_driver+0x270/0x410 [ 567.855728][T24806] bus_for_each_drv+0x258/0x2f0 [ 567.860569][T24806] ? __pfx___device_attach_driver+0x10/0x10 [ 567.866457][T24806] ? __pfx_bus_for_each_drv+0x10/0x10 [ 567.871823][T24806] __device_attach+0x2c4/0x450 [ 567.876580][T24806] ? __pfx___device_attach+0x10/0x10 [ 567.881855][T24806] ? do_raw_spin_unlock+0xf5/0x200 [ 567.886966][T24806] ? _raw_spin_unlock+0x28/0x50 [ 567.891882][T24806] device_initial_probe+0xa1/0xd0 [ 567.896906][T24806] bus_probe_device+0x12a/0x220 [ 567.901751][T24806] device_add+0x7d7/0xb80 [ 567.906071][T24806] new_device_store+0x355/0x6d0 [ 567.911004][T24806] ? __pfx_new_device_store+0x10/0x10 [ 567.916368][T24806] ? sysfs_file_kobj+0x1a/0x230 [ 567.921214][T24806] ? sysfs_file_kobj+0x1e4/0x230 [ 567.926147][T24806] ? sysfs_kf_write+0x166/0x260 [ 567.930994][T24806] ? __pfx_sysfs_kf_write+0x10/0x10 [ 567.936188][T24806] kernfs_fop_write_iter+0x3a4/0x540 [ 567.941470][T24806] vfs_write+0x612/0xba0 [ 567.945710][T24806] ? __pfx_vfs_write+0x10/0x10 [ 567.950464][T24806] ? do_sys_openat2+0x14e/0x200 [ 567.955405][T24806] ? kmem_cache_free+0x182/0x650 [ 567.960339][T24806] ksys_write+0x150/0x270 [ 567.964660][T24806] ? __pfx_ksys_write+0x10/0x10 [ 567.969505][T24806] do_syscall_64+0x166/0x520 [ 567.974092][T24806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.980150][T24806] ? clear_bhb_loop+0x70/0xc0 [ 567.983473][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e7e8000: abort rx timeout. Force session deactivation [ 567.994856][T24806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.000743][T24806] RIP: 0033:0x7fee2675e9ce [ 568.005148][T24806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 568.024745][T24806] RSP: 002b:00007fff61801998 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.033184][T24806] RAX: ffffffffffffffda RBX: 0000555562b38500 RCX: 00007fee2675e9ce [ 568.041154][T24806] RDX: 0000000000000003 RSI: 00007fff61801a20 RDI: 0000000000000005 [ 568.049116][T24806] RBP: 00007fee2683595f R08: 0000000000000000 R09: 0000000000000000 [ 568.057165][T24806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 568.065127][T24806] R13: 00007fff61801a20 R14: 00007fee27554620 R15: 0000000000000003 [ 568.073097][T24806] [ 568.083604][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 568.086583][T23874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.091560][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.253471][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e7e8400: rx timeout, send abort [ 568.494768][ T4932] Bluetooth: hci3: command tx timeout [ 568.753515][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e7e8400: abort rx timeout. Force session deactivation [ 568.870959][T24950] batman_adv: batadv0: Interface deactivated: syz_tun [ 568.882463][T24950] batman_adv: batadv0: Removing interface: syz_tun [ 569.024777][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035504000: rx timeout, send abort [ 569.127640][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.416538][T19610] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.416574][T19610] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.456183][T19610] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.456219][T19610] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.498412][T19610] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.498449][T19610] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.524824][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035504000: abort rx timeout. Force session deactivation [ 569.544730][T19610] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.544763][T19610] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.603848][T23874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.655752][T19610] bridge_slave_1: left allmulticast mode [ 569.655776][T19610] bridge_slave_1: left promiscuous mode [ 569.655914][T19610] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.658877][T19610] bridge_slave_0: left allmulticast mode [ 569.658900][T19610] bridge_slave_0: left promiscuous mode [ 569.659039][T19610] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.706214][T19610] pim6reg: left allmulticast mode [ 569.793968][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035506400: rx timeout, send abort [ 569.846839][T19610] bond3 (unregistering): (slave gretap1): Releasing active interface [ 569.916611][T19610] bond1 (unregistering): Released all slaves [ 569.921831][T19610] bond2 (unregistering): Released all slaves [ 569.939400][T19610] bond3 (unregistering): Released all slaves [ 569.950645][T19610] bond4 (unregistering): Released all slaves [ 569.961905][T19610] bond5 (unregistering): Released all slaves [ 569.973083][T19610] bond6 (unregistering): Released all slaves [ 569.985356][T19610] bond7 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 569.986716][T19610] bond7 (unregistering): Released all slaves [ 569.991894][T19610] bond0 (unregistering): Released all slaves [ 570.026867][T19610] bond8 (unregistering): Released all slaves [ 570.215183][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.294026][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035506400: abort rx timeout. Force session deactivation [ 570.567152][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035506000: rx timeout, send abort [ 570.708043][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 570.802777][T19610] hsr_slave_0: left promiscuous mode [ 570.816423][T19610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.816445][T19610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.822916][T19610] vlan0: left allmulticast mode [ 570.822936][T19610] veth0_vlan: left allmulticast mode [ 570.823078][T19610] veth0_macvtap: left promiscuous mode [ 570.823136][T19610] veth1_vlan: left promiscuous mode [ 571.067191][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035506000: abort rx timeout. Force session deactivation [ 571.131296][T23874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.286444][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.328367][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035507800: rx timeout, send abort [ 571.828412][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035507800: abort rx timeout. Force session deactivation [ 572.119723][T19610] team0 (unregistering): Port device team_slave_1 removed [ 572.141139][T19610] team0 (unregistering): Port device team_slave_0 removed [ 572.240420][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 572.326449][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.515169][T19610] IPVS: stop unused estimator thread 0... [ 572.749581][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 572.890875][T19610] bridge_slave_1: left allmulticast mode [ 572.890898][T19610] bridge_slave_1: left promiscuous mode [ 572.891037][T19610] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.892255][T19610] bridge_slave_0: left allmulticast mode [ 572.892272][T19610] bridge_slave_0: left promiscuous mode [ 572.892399][T19610] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.228646][T19610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.230439][T19610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.231631][T19610] bond0 (unregistering): Released all slaves [ 573.269175][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 573.366926][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.510573][T19610] hsr_slave_0: left promiscuous mode [ 573.511177][T19610] hsr_slave_1: left promiscuous mode [ 573.511701][T19610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.512287][T19610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.621408][T19610] team0 (unregistering): Port device team_slave_1 removed [ 573.645259][T19610] team0 (unregistering): Port device team_slave_0 removed [ 574.009767][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 574.173648][T18046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.409136][T23241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.411913][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 574.829111][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 575.193088][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 575.445752][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.489057][T23240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog