last executing test programs: 4.667063294s ago: executing program 4 (id=2541): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x70}, 0x1, 0x7}, 0x44000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000000c0), 0x18) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffffd, @empty}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000000000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000400), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x10, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x15484}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 3.994933369s ago: executing program 1 (id=2546): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB=' w'], 0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000407fc68fbab497affcd2091b9aafeba69f30cee2f09f1eb7a939ff2b010400"/47, @ANYRES16=r3, @ANYBLOB="00042dbd7000ffdbdf250300000004000500080008007f00000114000900fe8000000000000000000000000000aa0400050014000700fe8000000000000000000000000000bb"], 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x1}, @TCA_PIE_TARGET={0x8, 0x1, 0xa7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44840) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000480)=""/176, 0xb0, 0x0, &(0x7f0000000540)=""/158, 0x9e}}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xf5e543ecd220f989, 0x0) close(r12) r13 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r14, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r14, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0xfffffff9, 0x8, 0x8}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x2}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2bba4d36f", 0x5}], 0x1}, 0x20004014) 3.453983074s ago: executing program 4 (id=2552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x0, 0x61d, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x58}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 3.453315083s ago: executing program 0 (id=2553): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x20000, 0x28000}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x68}}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000001c0), &(0x7f0000000300)=r7}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x13, &(0x7f0000000200)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x472dd025}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1}], &(0x7f00000002c0)='GPL\x00', 0xffff, 0xc6, &(0x7f0000000580)=""/198, 0x41200, 0x1, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x4, 0x3ff, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0x1, 0x1, r8], &(0x7f00000007c0)=[{0x8, 0x4, 0x10, 0xa}, {0x3, 0x2, 0x8, 0x8}, {0x3, 0x5, 0x9, 0x1}], 0x10, 0x7}, 0x94) (async) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x34040800}, 0x24004804) (async) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x8, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x40}}, 0x0) 3.368154147s ago: executing program 2 (id=2554): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x0, 0x20, 0x1, 0x4, {{0x13, 0x4, 0x1, 0x2, 0x4c, 0x68, 0x0, 0xae, 0x29, 0x0, @multicast1, @local, {[@generic={0x83, 0xb, "806196d8f41989c765"}, @timestamp_addr={0x44, 0x2c, 0x59, 0x1, 0x9, [{@multicast1, 0xe}, {@empty, 0x1}, {@loopback}, {@local, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}]}, @end]}}}}}) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x20, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x48808) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r3 = socket(0x40000000015, 0x5, 0x0) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10102) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000012"], 0x30}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000000)='\x00', 0x133240, &(0x7f0000000280)={@_ha_fsid={[0xdc, 0xd]}, {0x2, 0x6, 0x4, 0x100000000}}, 0x98f, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000007a9e1add82f4025b59d84600000063013800000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 3.290877119s ago: executing program 4 (id=2555): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="25759d0000", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.371065639s ago: executing program 2 (id=2557): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000100)) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) (async) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r1, 0x1) 1.366131545s ago: executing program 4 (id=2558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xbfa6c1dfb8cc9f2d], 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x0, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffb, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8000002, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r11) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r11) sendmsg$L2TP_CMD_SESSION_GET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000ffdbdf2507000000050013008100000014000800"], 0x38}}, 0x2) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022bbd7000ffdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="25efa2e22155e88d99d138618f224bf394f791abfadfa8c70a909861f98e28c9cd2ffdde33e4221956612e"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) 1.281987242s ago: executing program 1 (id=2559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) 1.238239586s ago: executing program 2 (id=2561): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f00000004c0)="08000000ea5afb9b", 0x8, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000780)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x3, &(0x7f0000000400)=""/1, 0x1}, 0x9}, {{&(0x7f0000000440)=@qipcrtr, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000005c0)=""/124, 0x7c}], 0x2, &(0x7f0000000680)=""/217, 0xd9}, 0x7}], 0x2, 0x12000, &(0x7f0000000840)={r2, r3+10000000}) 1.114043919s ago: executing program 0 (id=2562): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000008001280040001"], 0x28}}, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x24) 1.087939327s ago: executing program 1 (id=2563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xfff2}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040), 0x10) (async) listen(r8, 0x0) (async) accept4$unix(r8, 0x0, 0x0, 0x0) (async) accept4(r8, 0x0, 0x0, 0x80800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x1, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0xffffffffffffff94, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) (async) socket$tipc(0x1e, 0x2, 0x0) 1.01007013s ago: executing program 3 (id=2564): r0 = socket(0x9, 0x2, 0x0) (async, rerun: 32) r1 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x180, @multicast1}, 0x10) (async, rerun: 32) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0) (rerun: 32) write(r0, &(0x7f00000002c0)="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", 0xfc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={r4}, 0x4) (async) r5 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x20004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712828bdda0a9423debbb86f9dba4a2dba4dbe076c28282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x6, @broadcast}, 0x6, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 910.621138ms ago: executing program 4 (id=2565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xffffffffffffff1b, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x6}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x800) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) 895.544893ms ago: executing program 0 (id=2566): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @loopback, 0xffff}, 0x1c) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a0400ac00128009000100766c616e000000009c000280060001000400000004000380400004800c000100080000002b4a00000c000100fc0fabb2400000000c00010003001400040000000c00010066000000800000000c000100080000000e0000004c0003800c00010000000000530a00000c00010006000000ff0f00000c00010000000080ff0f00000c00010000000000050000000c00010006000000000000000c000100fbffffff2103000008000500", @ANYRES32=r1], 0xd4}}, 0x8000002) 750.187633ms ago: executing program 1 (id=2567): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xa11c}, 0x8) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, &(0x7f0000000080)="582c25c058028e57579df7966697d9ced8f6", 0xffffff81, 0x400c0c0, &(0x7f0000000240)={0x2, 0x0, @remote, 0x4}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9800000010000800010000000000df2568302133", @ANYRES16=r2, @ANYRESDEC=r2], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x44064) 706.61119ms ago: executing program 4 (id=2568): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x2, 'tunl0\x00', {0x7}, 0x2}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040), 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) 705.599457ms ago: executing program 0 (id=2569): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, 0x0, 0x800) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006b00), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000006b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r8, &(0x7f0000006c00)={0x0, 0x0, &(0x7f0000006bc0)={&(0x7f0000006b80)={0x1c, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) 674.891308ms ago: executing program 2 (id=2570): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f00000006c0)={{r0, &(0x7f0000000200)='.#&-\x00', 0x1, &(0x7f0000000240)={@align=0xffffffff, {0x3, 0x9, 0x6, 0x80000001}}, 0x2, &(0x7f0000000280), &(0x7f0000000340)=0x5}, 0x3, &(0x7f0000000640)=[{0x2, 0x1, &(0x7f0000000380)='^@!!+\x00', &(0x7f00000003c0)="8dc5f45eff599bd16ea90b3a0cd376b135bdba3c453e76bbe81bc82fee3dfe8c9a90530ac27fd98079be7c866e28f97242b982af01533662e0768a5020aaf40f15e63443de4370834d4ec8cb0877172d2436ce19f176c43fc77298e86c81cd62c5f1d0ecbf7c8c8d565ae9f96d9d3781a8e98977e09af08bb4278dd443b845243f5fd7d0d7a6da6ce0880f6bbdc040a907125955b481dcc8bc87411d781786c3575c1011532bb6d0367f783976dc3e05bebb3fb75b5b93d12b", 0xb9, 0x2}, {0x2, 0x401, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="1acd275f0763ebc0a67f4270ba5bf7f010fb407c438638af3e6804ab3ccf9b8fd5fbb71728baa094dd4be65ba182dcbdceb47b0b9e13b9835f78c8888aa5867ea6971b5664cd73f81473345f1af5b06c40a3baafbaecae7350367b7722685ea4cca0e5281b09a58ad441208c973c3e19cc3dc94cb6ddc98aaeb20ea623da467cbc51f45a922b3e2701dee894f3ff667d6011ce8ce241af2783ecfb08209dd689ee51a9567b73870bc5c902493747a772a2f02fc545602482b404d20c805663bc34cd6b52", 0xc4, 0x12}, {0x2, 0xe, &(0x7f00000005c0)='\xc3-\xd5\x00', &(0x7f0000000600)="590690b9f9194a5c5439665495f823b41d1c13ad5078dc11055164732d2fa4fb3b3327439c3e677e4236b05c30caece6bcfb1d02e841b20001", 0x39, 0x3a}]}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000740), &(0x7f0000000780)=0x30) listen(r1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0xfffffffffffffd87, &(0x7f0000000140)={&(0x7f0000001ac0)={0x1c, 0x1e, 0x1, 0x20000002, 0x400, {0x1}, [@nested={0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r8, 0x89ee, &(0x7f0000000300)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e8, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x138, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140080004d81bb2194e80b3ea79533bf3f", @ANYRES16=r10, @ANYBLOB="31032cbd7000fbdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) 636.84882ms ago: executing program 3 (id=2571): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340)) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r2 = socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r3 = socket(0x2a, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x31f2552d984251b8, 0xffffffffffffffff, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) bind$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x24) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="0004000000000000c910fa8000000000000000000000000000bbc910fc01010000000000000000000000000100000000"], 0x30) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) r7 = socket$phonet(0x23, 0x2, 0x1) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000500)={r7, r8, 0x1, 0xd5, &(0x7f0000000400)="8f49b7c9826dd8de39463f69101552af6ef26ed2bb910634fb7a94aa98d3c16f4e0a07fadd95c51e73e5367b1c3e27f00665001e24faecf71d07b86f1ed21d53368107c996b5a2fbe50e2c96959013429b69df668c1ba8af800651e46d44c30340052efb918dac519dbe4f765f159dac113575f244ad587073e807d4b435435f37c992e743f8030864c3c4b9f5b7d8af3819073f815049968e097a234f44f0ac52c65ab71820d4ebe0d51abfa4fa6e0a98d5d43b9d62b1873dc47adbc878c9e618d995df97a91f3d9b4a9909808317f3a4588af611", 0x9, 0xc0, 0x8, 0x6, 0x3, 0x0, 0x4, 'syz1\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="65cfeb0e03a97e7ae97d1413e586e23b8d38f547ab5a1eab12", 0x19}], 0x1}}], 0x1, 0x40008) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000002e00000008006301"], 0x44}}, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 529.754792ms ago: executing program 1 (id=2572): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xc, 0x24, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r0}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0x81, 0x0, &(0x7f0000000380)="764b9e147583ddd0569ba56a5cfd3c1f8faa8744b2a3c5c763047ba1585e2a94c0fd780100e7e144d6a8280d5f79b3d7bf5756687aff2574a38904d67872771946ac2d58027ffeb27c010705e1ba81f50aeb128a8ca3cf7cb4abe854ddb03d2f56ae3fc2af209fbe52c06714bbaa532d3a75a2d639081ce165e41d1d6a4f5e1533", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x34028800}, 0x4c010) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0xfffc, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) getsockopt$inet_int(r8, 0x0, 0xe, 0x0, &(0x7f0000000400)) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket(0x15, 0x5, 0x0) sendto$l2tp(r2, &(0x7f0000000240)="e694ffaad022df3704f8be01679a204306dd83c6b445a6f1735dfc22aeffa00554c95acdcceafdfa33157856b680dfcced371eb269d205bc8e0c296f8ad8e41db89d013616c0f9c9299ccc43c9142bb2234d2510d909", 0x56, 0x4080, &(0x7f0000000480)={0x2, 0x0, @remote, 0x3}, 0x10) getsockopt(r10, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000006c0)=ANY=[@ANYRES64=r4, @ANYRESDEC, @ANYBLOB="340c8171ed6281553445f227568562e392fe5690fa00b4256615cb83cc60225dff46ac43d3ee24fc8f2a6796070bd63575be1a4ed64e18af8578c6be438765fdcd97c0f5f833b0e4388e82a97c5c328f2d86a6006ca5140c86178f6f56cc6b2eb0274691721992071ebd0eebb80f2f9d76a42523ef8b1b0d684e9e099f5e3e05e64dc1daa231e13bc7cf8c3acae6db848cffb60902e4d01f5770007708a006e7df71402f72f151f2ced6cc8ab6acd1e8abe240e4b7f616dbd646b0286ba39aa4477ca34305244bcd03629e135360"], 0x20}, 0x1, 0x0, 0x0, 0x401c890}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 529.312379ms ago: executing program 0 (id=2573): r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000040)={0xffffffff, 0x6}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='\\)\x00', 0x50100, &(0x7f00000000c0)={@align=0x7fff, {0x7, 0x400, 0x0, 0x2400000}}, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x5a}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40480d5) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000500), &(0x7f0000000540)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000580)=[@in={0x2, 0x9, @private=0xa010100}, @in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0x9}, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}], 0x48) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000600)={r1, 0xe}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000640)={0x0, 0x9e, "b5ad227363d2fa5fca625482c937f1db8b59f5d29cab0bb36c3eff24035b4f73a33160e107f5a6202eb8438ff24c22f8bf4c053b0619a01c8b0b55103ecdeda4e672379be9c7c0c31bebe554d31320ca23a0d74d4825c8f486c423b3810efd12f91ad77d098fa3308718d71dac8d328f7194768612b63329a7158b0f035a3ed2b9ac7527cb96708822986741ff30cc4c5d69c7d102e83c61d65c58c97560"}, &(0x7f0000000700)=0xa6) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000740)={r2, 0x7e, "125599ae8181beed5257f4cc664f88e2e85e91620e5a6597b979e5b673e1b5331de42d2f2ef0f3bf1474afdb633638388611662260d09382420bab4619db4fa59b48f62cedfa8c02ce323fbff68ff143aa46162ba12fcac253bc7365416708d2f08022071d1e44fc65b453438c1fbcfbb759a27e1832d45c97372cefc36c"}, &(0x7f0000000800)=0x86) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000840)={r3, 0x6}, &(0x7f0000000880)=0x8) sendto$inet(r1, &(0x7f00000008c0)="7870cbd754549c91a10c3c9decd8d532fd39298e4799", 0x16, 0x20000014, 0x0, 0x0) unshare(0x40000000) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000900)={0x0, 0x9}) connect$llc(r1, &(0x7f0000000940)={0x1a, 0x325, 0xff, 0x5, 0x9, 0x23, @remote}, 0x10) setsockopt$inet6_buf(r1, 0x29, 0x44, &(0x7f0000000980)="7e0e885ed8085037f12152dfea5ceb9263360ce746f756f669047a2626043c3e0b1630ac29c65f087cae7e18981efc0abd7e1f9f30b3440d6aa5c4e2c008f82736dd7a4daaf3e9c79b3a3f865328d8e144295c8a1cbf5bbd228237a1392b704d8ee9aa9d75e6c9362b1f0d5f9d211155fe8284291309", 0x76) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000a00)={r2, @in6={{0xa, 0x4e22, 0x9, @private1, 0x5}}}, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000ac0)={@local, 0x54}) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000b00)={'bridge_slave_1\x00', @ifru_flags=0x4000}) r6 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000b40)=""/181, &(0x7f0000000c00)=0xb5) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000d00)={r4, 0xac, &(0x7f0000000c40)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x8177, @local, 0x1800}, @in6={0xa, 0x4e24, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0xcc, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6a}, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x158}, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}]}, &(0x7f0000000d40)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000d80)={r4, 0x6, 0xfc, "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"}, 0x104) r7 = accept4$llc(r1, &(0x7f0000000ec0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000f00)=0x10, 0x0) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000f40), 0x4) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000001f80)={0xffffffffffffffff, r6, 0x0, 0x1000, &(0x7f0000000f80)="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", 0x0, 0x5, 0x69, 0xe, 0x8, 0x2, 0x2, 'syz0\x00'}) 456.162018ms ago: executing program 3 (id=2574): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000ff020000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200001084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000004000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x80) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0xc0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa10000000000000701000004feffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x16, 0x2, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x44) 447.171342ms ago: executing program 2 (id=2575): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x1400c000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x20, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x8, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x38, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x7fffffff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x9}, @TCA_RED_PARMS={0x14, 0x1, {0xfffffffa, 0x101, 0x7, 0x1c, 0x9, 0x1e, 0x7}}, @TCA_RED_MAX_P={0x8, 0x3, 0x10001}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x20, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x8, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x38, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x7fffffff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x9}, @TCA_RED_PARMS={0x14, 0x1, {0xfffffffa, 0x101, 0x7, 0x1c, 0x9, 0x1e, 0x7}}, @TCA_RED_MAX_P={0x8, 0x3, 0x10001}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001800010000000000000000001d01060008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r4], 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xbc}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7fff}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r7, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xa}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) (async) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xa}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xccea7a0d5ced4d05}, 0x4000800) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x1000000, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000100"/18, @ANYRES32=r8, @ANYBLOB="0c0006000000000000000000"], 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000100"/18, @ANYRES32=r8, @ANYBLOB="0c0006000000000000000000"], 0x28}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c070000dbe64679f16664fbc5aee6b0ed4247649d7084d07a61c9ab8dd03d56d670facf211873ddaac3c15ca39fe446dce35f12d349c22725c043b236c6c9a5ae7751745f1093b0627626523fa9cff0322a344c0397cfe346a772081d6f5707519f1000f757b394106ac8c50be3496d637168d442080db4f79dd4dc718342009c9af5c80d395735944284b3609dda91dc67b60c289dce4e61f6e957bee221074bd0a2bf2f5edbfb0946", @ANYRES16=r6, @ANYBLOB="000226bd7000fddbdf251b00000008000300", @ANYRES32=0x0, @ANYBLOB="10002e800c0004000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 357.812643ms ago: executing program 3 (id=2576): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x2010, 0xffffffffffffffff, 0xffffe000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x54}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() 315.37089ms ago: executing program 3 (id=2577): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r6, 0x7434) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffd, 0x30, @remote, @dev={0xfe, 0x80, '\x00', 0x4}, 0x10, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x1000002}}) 128.554531ms ago: executing program 1 (id=2578): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c00)=@delchain={0x798, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x76c, 0x2, [@TCA_BPF_ACT={0x768, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1bc, 0x5, 0x0, 0x0, {{0x7}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa1, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036c"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xf8, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x81, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc1571"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x2c4, 0x13, 0x0, 0x0, {{0x7}, {0x25c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x9, 'nat\x00', 0xef, 0x7}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xcd, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e236ea19c82fa844f28657c37f81f51a102feb9b90daa7ba856d3ded4da05e"}}, @TCA_IPT_TARG={0x109, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90f152f907a0ab28fc8d30bcdb763cd5f45e6a19be6dae4c5659ea76f0641d19c50157b11a5d9f8f9f5d0efd5d7395e68091c82db3f276f07384e742f6eb8057fef83bef07c6aa6d1f59fcb13c45fc7005a222e6fa0e7c9c3fe6e6ce9aa661d734ae3b49d5dbf7988827530152"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x41, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd02a67777e4d51dfa578f9f5021013f0c9a057bc84da50e9717ad55f6dba06dd18f82"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x798}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, &(0x7f0000000e40)=ANY=[@ANYRESHEX=0x0], &(0x7f00000001c0)='GPL\x00', 0x800, 0x0, 0x0, 0x21700, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x80}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) 45.682676ms ago: executing program 2 (id=2579): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)="fc") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1e5540, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001300)=@delchain={0xf5c, 0x65, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfffc, 0xffe0}, {0xffe8, 0x3}, {0xc, 0x1b}}, [@filter_kind_options=@f_basic={{0xa}, {0xf00, 0x2, [@TCA_BASIC_ACT={0xef4, 0x3, [@m_police={0x998, 0x1d, 0x0, 0x0, {{0xb}, {0x880, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x272}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x8917bdfc2fdeca8d, 0x5107, 0xd1, 0xffff, {0x0, 0x2, 0xac, 0xf68e, 0x9ff, 0x7fffffff}, {0xfc, 0x2, 0x7, 0xb, 0x12aa, 0x6}, 0x2, 0x752a, 0xc1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x81, 0x1, 0x4, 0x7, 0xfffffffe, 0x7, 0x1, 0xfff, 0x80, 0x0, 0x2, 0x243a, 0x2, 0x6d, 0xa2, 0x8, 0x2, 0xfffffffb, 0x106, 0x5, 0x3a56, 0xfffffffe, 0xda4b, 0xffff, 0x7, 0x9, 0x7f, 0x8, 0x1bd7, 0x0, 0xe17, 0x5, 0x3, 0x9, 0xd348, 0x3, 0x2, 0x6, 0x68, 0x0, 0x3, 0x0, 0x9, 0x7, 0x11, 0xffff8001, 0x40, 0x7f, 0x6, 0xe, 0x1, 0x9, 0x968, 0x80000001, 0x4, 0x3, 0x9, 0xff, 0x10000, 0x8000, 0xfffe00, 0x7, 0x8000, 0x4f, 0x8, 0xcb, 0x10, 0xc, 0xe6e, 0x7, 0x2, 0x7, 0x2, 0x2, 0x4, 0xffffff00, 0xa92d, 0x7f, 0xbc, 0xda7, 0x0, 0x1, 0x100, 0x7, 0x0, 0x3, 0x6, 0x7, 0x200000, 0x25b2, 0x4, 0x101, 0x0, 0x8, 0x7fffffff, 0x3f0c9e1c, 0x0, 0x4, 0x4, 0x1, 0xc1af, 0x0, 0x2, 0x1, 0x57, 0x6465, 0xf, 0x5, 0x3, 0x380, 0x8, 0x9, 0x1, 0x0, 0x1, 0x2b4, 0x2f4, 0x47a, 0x0, 0x81, 0xacf7, 0x24, 0xff, 0x0, 0x1, 0xd61, 0xfffffff8, 0x2, 0xe, 0x100, 0x80000000, 0x4, 0x5, 0x491c, 0x2, 0x8, 0x5, 0x0, 0x8, 0x9, 0x6, 0x40, 0x81, 0x1, 0x6b97, 0x0, 0x10, 0xea, 0x9, 0x7, 0x7, 0x40, 0x1, 0x4, 0x5, 0x7, 0x0, 0xfffffffe, 0x8, 0x4, 0x7, 0xfffffffb, 0x1, 0x101, 0x3, 0x6, 0x1, 0x0, 0x0, 0x2, 0x1, 0xca, 0x2, 0x3, 0x0, 0xf, 0x0, 0x7, 0xfffffffe, 0x9, 0x7, 0x44, 0x5, 0x8, 0x200, 0x2de82782, 0xd7a7, 0x0, 0xd, 0xfff, 0x4, 0x1, 0x10001, 0xb, 0xe, 0x300, 0x3, 0xe, 0x9, 0x459, 0xfa83, 0x3ff, 0xfffffffa, 0x9, 0x800, 0x6a, 0x6, 0x4, 0x80, 0x80, 0x7, 0x5, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0x7fff, 0x3, 0x1ff, 0x5, 0x9, 0x80000000, 0x0, 0xfffffff8, 0x4, 0x3ff, 0x7, 0xffffff80, 0x3, 0x55, 0x8, 0x5, 0x81, 0x401, 0x8001, 0x414, 0x3, 0x1000, 0x779, 0x7, 0x0, 0xf3, 0xfa, 0x30000000, 0x4, 0x1ff, 0x2, 0x0, 0xffff, 0xb48, 0x1, 0x8, 0x7, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0xcbf, 0x5, 0x3, 0xa6, 0x5f8f, 0x4e4, 0x26, 0x1ff, 0x7, 0xfffffffb, 0x5, 0x0, 0x6, 0x7, 0x6, 0x9, 0xfffffffa, 0xcaa, 0x381d, 0x9, 0x6, 0x6, 0xa, 0x10001, 0x9, 0x2, 0x101, 0x7, 0xa, 0x2, 0x2, 0xd, 0x1a3, 0x5, 0x4, 0x9, 0x7fff, 0x3, 0x1, 0x9, 0x8, 0x72f, 0x7fffffff, 0x2, 0x7, 0x0, 0x8, 0x5, 0x6, 0x3, 0x10000, 0xfffffffc, 0x5, 0x4, 0xff, 0x3, 0x1, 0xa9, 0x7fffffff, 0x12c8, 0xef61, 0xfffffffe, 0x1, 0x1, 0xc4, 0x4, 0x4, 0x5, 0x800, 0x8, 0xe, 0x100, 0x7, 0x9, 0x4, 0x7, 0x8, 0xfea, 0x6, 0x7b4, 0x8, 0x1, 0xed7, 0xe, 0xa9, 0x1, 0xc, 0xf, 0x2, 0x80000000, 0x80, 0xfffffbff, 0x8, 0x0, 0x7d6b, 0x5, 0xfd, 0x5, 0x2, 0x0, 0x7, 0xff, 0x10001, 0xd, 0x9, 0x7, 0x8b7, 0x95, 0x8, 0xfffffff9, 0x3ff, 0xf3, 0x4176, 0x5, 0x0, 0x8, 0x2, 0x3, 0x9, 0x7, 0x5, 0x8, 0x5, 0x9, 0x3, 0x58, 0x3, 0x18, 0x9, 0xfffffe01, 0x7, 0x1, 0x3, 0xbf8, 0x2ac, 0x7f80, 0x3, 0x8, 0x835, 0x7, 0x40, 0x0, 0x83, 0x0, 0xff, 0x8, 0x3, 0x9, 0x5355, 0xfffffff8, 0x1, 0x81, 0x6b7, 0x3, 0x0, 0x1f2a, 0x2, 0x200, 0x5, 0x8, 0xea, 0xfffff000, 0x7fffffff, 0x8, 0x4163, 0x7, 0x2, 0x0, 0x5c, 0x0, 0x10000, 0xa, 0xffff, 0x8, 0x4, 0x6, 0x3, 0xb4c, 0x0, 0x80000000, 0x7, 0xb8f, 0x6, 0x100, 0x9, 0x3f, 0x6, 0x5, 0x4, 0x2, 0x7ed, 0x3, 0x2, 0xfffffff8, 0x4, 0x7, 0x3, 0x2, 0xffffffff, 0x3, 0x5, 0x6, 0x20, 0xd8e28750, 0xfff, 0x18b0e186, 0x0, 0xffffffff, 0x2, 0x3, 0x33d, 0x5, 0x3, 0x2, 0xcf, 0xa5800000, 0xe, 0xf, 0x7, 0xfff, 0x3, 0x7, 0x7, 0x8, 0x0, 0x0, 0x5c8, 0x200, 0x9, 0x2, 0x7f, 0xffff, 0x0, 0x400, 0xfffffe01, 0x1, 0x8, 0x1, 0x6, 0x3, 0x2, 0x5, 0x81, 0xb, 0x50a, 0x2, 0x0, 0x911d, 0x8, 0x5, 0x9, 0x4, 0x79]}]]}, {0xee, 0x6, "afcf66fd8ccdb79f82ce8f7f48a0fca6cfa837685bfe786b0917b9616c94aa8df5c3d14cff0ed2ee0e235bd1cf2d29157a9ecedb6e95b0b0f493280e8eeadf7171bb7f7b192a8075d6a0511110c94b26481330a7dc5cf7ab26ab97b2384b08203321ad75a8e6884de4796cdccdb46f160bdc3f968fd8e96f0b64bd2aa67378a234ea3bf9b9b8a10570d99db0a2334e49c3231fcce2957aecd94864fa258634027bd074565bc4e6729b38cc730ca8650553257efa295e40c9cc28f611dbcf3bad86dc9c578b5425eb43c58cebfc55993a038f92b333315364736e70c1484a421fcdb7a0c8a138632fa1eb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x1ac, 0x17, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc8c, 0x20000, 0x20000000, 0x80000001, 0x4fe2cd10}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7f, 0x2, 0x3, 0xc0c3}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x10000000, 0xfffffffc, 0x3}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x10000000, 0x0, 0x8}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x7, 0x9, 0xa47}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x10000000, 0x6, 0x9}, 0xaa43}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x40, 0x0, 0x1, 0x2}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x8, 0x10000000, 0x200, 0x4}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x5, 0x0, 0x9}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x74b1, 0x0, 0x8, 0x5}, 0x4}}]}, {0x63, 0x6, "b293c76508f18517be6fb716c5eaf9be78c56b27abe56597caf9263ea9d0dd7a1999b82f1ac3c87459da5da14f5316db7dc068043062ca75c0538f9718f8c44471be7783ed92de51462112d2a6eb85e3a0de279c33e0a9f2649d7519c167eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xa0, 0x6, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3d8}]}, {0x3b, 0x6, "ea8cd2c215408a27d55a3b9d880e9f3b3834de599c8e9ec57ddda910170ca42a98a1f19e2e877a07ef614bac04bc927d4bedc31073c14b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0xb4, 0x16, 0x0, 0x0, {{0x7}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0xdba5f29f1d5159f3}]}, {0x10, 0x6, "c9c0d91b4b320f0ae3669da4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x148, 0x9, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xa988, 0x2, 0xfffffffd, 0xfffffffd}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1ff, 0x9, 0x6}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x800, 0x10000000, 0x1ff, 0x3}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x3, 0x401, 0x2}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x10000000, 0x8, 0x7eb}, 0x3, r8}}]}, {0x7b, 0x6, "bd05463adb46445eaad2b7d08ef0ceb5562c6132ce4770f9938f7835d524e211171e1039ec5ae0e6785311eac2a5137b656ec099e003859ef45acf0c9a9cfcf3a7768d47b94a2bc146f443adaca0302806f11f1dfb1d63c4628bdb8b0d8d205c7da71f2b325ccd3b3ac8536a1e6396149fda4737332050"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x110, 0x19, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x552c, 0xff, 0x8, 0x1ff, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6933592b, 0xfffffff6, 0x1, 0x5479, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7fffffff}]}, {0x94, 0x6, "8a98e0bd2eeff24114eb060ed8238648d45d3d00f5fa526f8ec50a510672a1c8590f47a73686f52af0562a1bd54ab793d4e2a953d2ca9f6380577bba07c953f52c8ec2a8fd16ad92ba2f5a76b574344696a5da8279c908ea905dcc434382679f0c01be0ff47270292efc3efec9b8e0e62d68d891effb9a9b784124932fe256890db2afa754f2cfda6cc761dfecab913d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xfff2}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xe}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0x9}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}]}, 0xf5c}, 0x1, 0x0, 0x0, 0x200400c9}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4, 0xc}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd04, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x6, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r11, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 14.526439ms ago: executing program 3 (id=2580): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) (async) close(r8) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) (async) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000480)={0x0, 0xfe, "382f6aec1f391aee6d6b4320a57a4380bfc5c80223dcef9cc7214cf6db2054f018e7a4eb3a2981f006ab266b025fe842c5db43809c90f3b7330f498f06259f92929817be44cc1e8b40b2e38fddf269ba2713c6bef0e6999d8abb6a99fa8ac5c0c24b3633927e564d56104b18679e7b07c305be422e6bc36c2e0d4eb27834831c21a757b1df098a5cac394ae3277e2e52254c6b0286117219555b9e33c2df3f3afcb10cd2a759df881cca0fb74668d454fdbbb35dfa5ce8a791e3cbbfbe95f839561a486e72695ecfbdf64449ff81f77872080ed06e1cb7757c22a7dfff7e25893cb1507266ad717caf4e20e06159cff58f744ddefe4e870498e7d695c428"}, &(0x7f00000005c0)=0x106) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r12, 0x84, 0x78, &(0x7f0000000600)=r13, 0x4) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r12, 0x84, 0x78, &(0x7f0000000600)=r13, 0x4) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000060a0b04000000000000d0d81f4568bc000002000000040004800900020073797a3200f1ff000900010073697a3000"/88], 0x58}}, 0x0) (async) sendmsg$NFT_BATCH(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000060a0b04000000000000d0d81f4568bc000002000000040004800900020073797a3200f1ff000900010073697a3000"/88], 0x58}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x46, 0x3, 0x1, 0x68, @mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8, 0x56, 0x4, 0x2}}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@ipv4_newroute={0x50, 0x18, 0x200, 0x70bd2c, 0x25dfdbfe, {0x2, 0x80, 0x14, 0x7, 0xfd, 0x4, 0xc8, 0xa}, [@RTA_IIF={0x8, 0x3, r15}, @RTA_FLOW={0x8, 0xb, 0x2}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x16, 0x3, r15}}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x50}}, 0x0) sendmsg(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) 0s ago: executing program 0 (id=2581): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) listen(r0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123402, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) listen(r2, 0x200) (async) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x5, 0x7, 0x4, 0xe, 0x6, 0xe, 0xc, 0x1, 0x2, 0xa, 0x9, 0xc, 0x2, 0xb, 0x9, 0xc], 0x1, [0xfff8, 0x1, 0x980e, 0xfff7, 0x1ff, 0x2, 0x7, 0x9, 0x3, 0x6, 0x5, 0x1, 0x6, 0x9, 0x6, 0x500], [0xffff, 0xc, 0x1f32, 0x81, 0x1, 0xff1b, 0x7, 0x4, 0x2, 0x3, 0x3, 0xfff, 0x7, 0x80, 0xd, 0xef7]}}}}]}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): [ 154.593517][ T7635] syzkaller0: entered promiscuous mode [ 154.599260][ T7635] syzkaller0: entered allmulticast mode [ 154.606163][ T7640] netlink: 44 bytes leftover after parsing attributes in process `syz.3.482'. [ 154.720513][ T7646] syzkaller0: entered promiscuous mode [ 154.734241][ T7646] syzkaller0: entered allmulticast mode [ 154.798069][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 154.950013][ T7656] netlink: 'syz.4.488': attribute type 2 has an invalid length. [ 154.969127][ T7656] netlink: 'syz.4.488': attribute type 11 has an invalid length. [ 154.989970][ T7656] netlink: 132 bytes leftover after parsing attributes in process `syz.4.488'. [ 155.013805][ T7659] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 155.020003][ T7661] netlink: 32 bytes leftover after parsing attributes in process `syz.1.489'. [ 155.036816][ T7659] Bluetooth: MGMT ver 1.23 [ 155.265541][ T7680] netlink: 'syz.3.495': attribute type 4 has an invalid length. [ 155.278275][ T7680] netlink: 152 bytes leftover after parsing attributes in process `syz.3.495'. [ 155.302611][ T7680] .`: renamed from bond0 (while UP) [ 155.647834][ T7699] Bluetooth: MGMT ver 1.23 [ 156.013675][ T7718] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 156.038138][ T7718] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 156.050863][ T7718] gretap1: entered promiscuous mode [ 156.061857][ T7718] gretap1: entered allmulticast mode [ 156.080591][ T7723] vlan4: entered promiscuous mode [ 156.092811][ T7722] xt_hashlimit: size too large, truncated to 1048576 [ 156.094177][ T7723] bridge0: entered promiscuous mode [ 156.123866][ T7725] IPv6: sit2: Disabled Multicast RS [ 156.153782][ T7725] sit2: entered allmulticast mode [ 156.307668][ T7733] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 156.322052][ T7733] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 156.399060][ T7737] lo: Caught tx_queue_len zero misconfig [ 156.868822][ T7762] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 156.875362][ T7762] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 156.886000][ T7754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.897355][ T7754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 157.048029][ T7754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.106108][ T7754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 157.306085][ T7754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.339082][ T7754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 157.446894][ T7754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.457482][ T7754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 157.486622][ T7801] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 157.515689][ T7791] syzkaller0: entered promiscuous mode [ 157.525340][ T7791] syzkaller0: entered allmulticast mode [ 157.565332][ T3357] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.573858][ T3357] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.602442][ T3357] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.611291][ T3357] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.636926][ T3357] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.645458][ T3357] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.661245][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 157.670022][ T48] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 160.072336][ T7779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.549272][ T7847] __nla_validate_parse: 6 callbacks suppressed [ 160.549289][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 160.603448][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 160.773911][ T7865] block nbd1: Unsupported socket: should be TCP or UNIX. [ 161.071490][ T7880] xt_ecn: cannot match TCP bits for non-tcp packets [ 161.192182][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.558'. [ 161.216821][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.558'. [ 161.425712][ T7907] validate_nla: 1 callbacks suppressed [ 161.425730][ T7907] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 161.445522][ T7909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.563'. [ 161.455624][ T7907] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 161.466847][ T7907] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 161.497143][ T7907] netlink: 'syz.1.562': attribute type 2 has an invalid length. [ 161.539770][ T7907] netlink: 76 bytes leftover after parsing attributes in process `syz.1.562'. [ 161.638954][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 161.708636][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 161.717874][ T7922] netlink: 'syz.0.567': attribute type 8 has an invalid length. [ 161.806484][ T7924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.277689][ T7955] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.742464][ T7934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.965721][ T7982] netlink: 'syz.0.581': attribute type 22 has an invalid length. [ 162.985840][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 163.028618][ T7982] netlink: 'syz.0.581': attribute type 22 has an invalid length. [ 163.038568][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 163.064170][ T546] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 163.067259][ T7981] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 163.097414][ T48] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.106266][ T48] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.127252][ T48] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.151714][ T48] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.175656][ T7993] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 163.770158][ T7983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.904691][ T8002] tunl0: Caught tx_queue_len zero misconfig [ 164.038133][ T8011] netlink: 'syz.1.589': attribute type 10 has an invalid length. [ 164.136999][ T8012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.159108][ T8012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.173725][ T8012] bond0 (unregistering): Released all slaves [ 164.218783][ T542] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.235269][ T542] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.269690][ T542] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.305221][ T542] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.581939][ T8037] bond4: option min_links: invalid value (18446744073709551614) [ 164.593258][ T8037] bond4: option min_links: allowed values 0 - 2147483647 [ 164.603671][ T8037] bond4 (unregistering): Released all slaves [ 164.861440][ T8058] netlink: 'syz.3.604': attribute type 15 has an invalid length. [ 164.880259][ T8063] xt_l2tp: missing protocol rule (udp|l2tpip) [ 165.518593][ T8104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.606368][ T8104] veth1: entered allmulticast mode [ 165.646104][ T8109] __nla_validate_parse: 15 callbacks suppressed [ 165.646122][ T8109] netlink: 9 bytes leftover after parsing attributes in process `syz.0.622'. [ 165.694654][ T8109] 0·: renamed from hsr0 (while UP) [ 165.746133][ T8109] 0·: entered allmulticast mode [ 165.763816][ T8109] hsr_slave_0: entered allmulticast mode [ 165.779378][ T8109] hsr_slave_1: entered allmulticast mode [ 165.792569][ T8109] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 165.851890][ T8119] netlink: 9 bytes leftover after parsing attributes in process `syz.1.625'. [ 165.906345][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 165.951416][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 165.952466][ T8131] netlink: 19616 bytes leftover after parsing attributes in process `syz.2.628'. [ 166.092175][ T8135] openvswitch: netlink: Actions may not be safe on all matching packets [ 166.106020][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 166.265758][ T8143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.281545][ T8148] bond4: (slave geneve2): making interface the new active one [ 166.292752][ T8148] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 166.312239][ T8145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.634'. [ 166.417445][ T8152] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 166.575674][ T8160] pim6reg527: entered allmulticast mode [ 166.991175][ T8191] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.645'. [ 167.255617][ T8204] erspan0: entered promiscuous mode [ 167.261702][ T8204] erspan0: entered allmulticast mode [ 167.348876][ T8204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.649'. [ 167.375342][ T8209] batadv_slave_0: entered promiscuous mode [ 167.403947][ T8209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.651'. [ 167.435846][ T8209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.557149][ T8209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.653827][ T8226] team0: entered allmulticast mode [ 167.683074][ T8226] team_slave_0: entered allmulticast mode [ 167.702930][ T8226] team_slave_1: entered allmulticast mode [ 167.835422][ T8227] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 168.457290][ T8279] ip6erspan2: entered allmulticast mode [ 170.898701][ T8239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.307257][ T8288] syzkaller0: entered promiscuous mode [ 171.315098][ T8311] __nla_validate_parse: 4 callbacks suppressed [ 171.315115][ T8311] netlink: 260 bytes leftover after parsing attributes in process `syz.3.678'. [ 171.323927][ T8288] syzkaller0: entered allmulticast mode [ 171.351886][ T8307] syz_tun: refused to change device tx_queue_len [ 171.544431][ T8325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.043165][ T8342] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.262457][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 173.511290][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 173.541468][ T8377] block nbd1: Unsupported socket: should be TCP or UNIX. [ 173.872346][ T8379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.695'. [ 174.107083][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 175.698911][ T8421] tipc: Enabling of bearer rejected, failed to enable media [ 175.880753][ T8430] validate_nla: 2 callbacks suppressed [ 175.880771][ T8430] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 175.944947][ T8442] netlink: 'syz.4.714': attribute type 17 has an invalid length. [ 175.954332][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 175.963477][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.4.714'. [ 175.975831][ T8444] netlink: 52 bytes leftover after parsing attributes in process `syz.2.710'. [ 176.025333][ T8442] gretap0: entered promiscuous mode [ 176.067727][ T8442] gretap0: left promiscuous mode [ 176.178573][ T8450] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 176.200129][ T8454] netlink: 44 bytes leftover after parsing attributes in process `syz.2.717'. [ 176.231424][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 176.349022][ T8462] __nla_validate_parse: 2 callbacks suppressed [ 176.349041][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.717'. [ 176.400838][ T8462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.717'. [ 176.465755][ T8463] team0: Port device vlan0 added [ 176.622281][ T9] IPVS: starting estimator thread 0... [ 176.729315][ T8477] IPVS: using max 30 ests per chain, 72000 per kthread [ 177.003047][ T8506] netlink: 'syz.0.730': attribute type 10 has an invalid length. [ 177.096586][ T8513] netlink: 244 bytes leftover after parsing attributes in process `syz.1.734'. [ 177.446184][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 177.572447][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.746'. [ 177.595837][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.746'. [ 177.629055][ T8548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.744'. [ 177.842529][ T8558] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 177.868732][ T8558] netlink: 224 bytes leftover after parsing attributes in process `syz.1.750'. [ 177.892341][ T8562] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 177.910424][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 177.923194][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 178.614083][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.652653][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.676082][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.695602][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.994880][ T8624] : renamed from gre0 (while UP) [ 179.183653][ T8589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.823762][ T8659] wlan0: entered promiscuous mode [ 180.043049][ T8674] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 180.382377][ T8674] syzkaller0: entered promiscuous mode [ 180.403191][ T8674] syzkaller0: entered allmulticast mode [ 182.619795][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.784720][ T8780] __nla_validate_parse: 16 callbacks suppressed [ 182.784738][ T8780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.790'. [ 182.896664][ T8786] netlink: 56 bytes leftover after parsing attributes in process `syz.3.793'. [ 182.911611][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.924019][ T8787] syzkaller1: entered promiscuous mode [ 182.934456][ T8787] syzkaller1: entered allmulticast mode [ 182.943151][ T8793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.795'. [ 182.958076][ T8780] syzkaller0: entered promiscuous mode [ 182.993823][ T8780] syzkaller0: entered allmulticast mode [ 183.040372][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 183.101273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.111252][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.266437][ T8815] netlink: 68 bytes leftover after parsing attributes in process `syz.2.800'. [ 183.277282][ T8817] netlink: 'syz.0.799': attribute type 64 has an invalid length. [ 183.295088][ T8816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.800'. [ 183.357964][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.798'. [ 183.368814][ T8824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.799'. [ 183.393593][ T8823] netlink: 84 bytes leftover after parsing attributes in process `syz.3.798'. [ 183.431122][ T8826] netlink: 60 bytes leftover after parsing attributes in process `syz.4.801'. [ 183.901032][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.956100][ T8841] syzkaller0: entered promiscuous mode [ 183.976760][ T8841] syzkaller0: entered allmulticast mode [ 184.072729][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.082593][ T8863] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 184.150848][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.330698][ T8878] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 185.193924][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.202361][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.148582][ T8928] lo speed is unknown, defaulting to 1000 [ 186.154792][ T8928] lo speed is unknown, defaulting to 1000 [ 186.215843][ T8928] lo speed is unknown, defaulting to 1000 [ 186.234591][ T8939] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 186.316570][ T8928] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 186.332195][ T8949] netlink: 'syz.2.825': attribute type 1 has an invalid length. [ 186.397955][ T8928] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 186.450971][ T8928] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 186.518617][ T8928] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.571328][ T8928] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 186.702643][ T8964] ip6gre1: entered allmulticast mode [ 186.715730][ T8928] lo speed is unknown, defaulting to 1000 [ 186.736606][ T8928] lo speed is unknown, defaulting to 1000 [ 186.766149][ T8928] lo speed is unknown, defaulting to 1000 [ 186.784624][ T8928] lo speed is unknown, defaulting to 1000 [ 186.817632][ T8928] lo speed is unknown, defaulting to 1000 [ 187.000240][ T8978] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 187.246963][ T8992] netlink: 'syz.4.840': attribute type 1 has an invalid length. [ 187.267085][ T8986] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 187.315642][ T8986] bond1 (unregistering): Released all slaves [ 187.378023][ T8960] geneve0: entered promiscuous mode [ 187.394576][ T8960] geneve0: entered allmulticast mode [ 187.522694][ T8992] 8021q: adding VLAN 0 to HW filter on device bond5 [ 187.548731][ T8962] netlink: 'syz.2.830': attribute type 5 has an invalid length. [ 187.613460][ T8997] bond5: (slave gretap1): making interface the new active one [ 187.633902][ T8997] net_ratelimit: 7 callbacks suppressed [ 187.633921][ T8997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.649106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.670513][ T8997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.679033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.703281][ T8997] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 187.739876][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.783948][ T3357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.793396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.845280][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.854569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.899687][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.903703][ T5632] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 188.010205][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.606200][ T9006] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 188.643790][ T9048] netlink: 'syz.0.853': attribute type 21 has an invalid length. [ 188.654424][ T9048] __nla_validate_parse: 9 callbacks suppressed [ 188.654440][ T9048] netlink: 128 bytes leftover after parsing attributes in process `syz.0.853'. [ 188.681652][ T9048] netlink: 'syz.0.853': attribute type 4 has an invalid length. [ 188.704091][ T9048] netlink: 'syz.0.853': attribute type 5 has an invalid length. [ 188.725242][ T9052] netlink: 'syz.0.853': attribute type 21 has an invalid length. [ 188.745200][ T9048] netlink: 3 bytes leftover after parsing attributes in process `syz.0.853'. [ 188.769740][ T9052] netlink: 128 bytes leftover after parsing attributes in process `syz.0.853'. [ 188.796197][ T9056] netlink: 'syz.4.852': attribute type 1 has an invalid length. [ 188.806680][ T9052] netlink: 'syz.0.853': attribute type 4 has an invalid length. [ 188.865857][ T9052] netlink: 'syz.0.853': attribute type 5 has an invalid length. [ 188.884002][ T9052] netlink: 3 bytes leftover after parsing attributes in process `syz.0.853'. [ 188.906607][ T9053] tap0: tun_chr_ioctl cmd 1074025672 [ 188.927306][ T9053] tap0: ignored: set checksum disabled [ 189.023883][ T9066] x_tables: unsorted underflow at hook 3 [ 189.032672][ T9056] 8021q: adding VLAN 0 to HW filter on device bond6 [ 189.106000][ T546] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.565828][ T9089] netlink: 27 bytes leftover after parsing attributes in process `syz.1.863'. [ 189.844523][ T9103] tipc: Failed to remove unknown binding: 66,0,0/0:2249793053/2249793054 [ 189.869107][ T9103] tipc: Failed to remove unknown binding: 66,0,0/0:2249793053/2249793054 [ 190.058930][ T9113] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.339032][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'. [ 190.621349][ T9142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.874'. [ 190.652932][ T9138] netlink: 'syz.3.873': attribute type 15 has an invalid length. [ 190.713772][ T9138] netlink: 502 bytes leftover after parsing attributes in process `syz.3.873'. [ 190.910383][ T9150] netlink: 9 bytes leftover after parsing attributes in process `syz.4.878'. [ 190.945864][ T9150] netlink: 9 bytes leftover after parsing attributes in process `syz.4.878'. [ 191.153504][ T9162] nbd: must specify at least one socket [ 191.838673][ T9209] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20004 [ 191.879134][ T9209] dvmrp0: entered allmulticast mode [ 192.108196][ T9226] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 192.251892][ T9235] xt_TCPMSS: Only works on TCP SYN packets [ 192.257945][ T9238] bridge_slave_1: left promiscuous mode [ 192.265374][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.285777][ T9238] bridge_slave_0: left allmulticast mode [ 192.302690][ T9238] bridge_slave_0: left promiscuous mode [ 192.315453][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.496216][ T9250] netlink: 'syz.2.913': attribute type 7 has an invalid length. [ 192.511120][ T9244] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.518425][ T9250] netlink: 'syz.2.913': attribute type 8 has an invalid length. [ 192.538584][ T9244] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 192.630744][ T9244] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.649632][ T9244] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 192.707042][ T9244] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.722690][ T9244] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 192.745373][ T9263] bond2: option lp_interval: invalid value (0) [ 192.751814][ T9263] bond2: option lp_interval: allowed values 1 - 2147483647 [ 192.770171][ T9244] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.776218][ T9263] bond2 (unregistering): Released all slaves [ 192.797207][ T9244] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 192.853992][ T9244] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.865789][ T9244] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 192.907084][ T9277] net_ratelimit: 39 callbacks suppressed [ 192.907100][ T9277] openvswitch: netlink: Flow actions attr not present in new flow. [ 192.959622][ T3357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.038885][ T9274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.082488][ T3357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.092089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.341289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.351142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.501718][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.502186][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.519009][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.142871][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.149857][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.331244][ T9337] __nla_validate_parse: 6 callbacks suppressed [ 194.331263][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.933'. [ 195.756477][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 195.762225][ T9366] syz.4.939 (9366) used greatest stack depth: 18840 bytes left [ 195.987869][ T9409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.956'. [ 196.217596][ T9421] netlink: 84 bytes leftover after parsing attributes in process `syz.0.960'. [ 196.240520][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 196.407198][ T9435] veth1: entered allmulticast mode [ 196.897139][ T9457] syzkaller0: entered promiscuous mode [ 196.909544][ T9457] syzkaller0: entered allmulticast mode [ 197.075606][ T9468] syzkaller0: entered promiscuous mode [ 197.082252][ T9468] syzkaller0: entered allmulticast mode [ 197.113362][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e16400: rx timeout, send abort [ 197.122011][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055e16400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 197.142526][ T9473] can: request_module (can-proto-3) failed. [ 197.482910][ T9488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.977'. [ 197.868229][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 198.482651][ T9537] netlink: 60 bytes leftover after parsing attributes in process `syz.0.991'. [ 198.536417][ T9538] netlink: 'syz.0.991': attribute type 4 has an invalid length. [ 198.545729][ T9538] netlink: 224 bytes leftover after parsing attributes in process `syz.0.991'. [ 198.561262][ T3357] net_ratelimit: 39 callbacks suppressed [ 198.561277][ T3357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.702690][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.710862][ T546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.711192][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.719384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.689707][ T546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.740897][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.749149][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.820470][ T9540] netlink: 'syz.1.992': attribute type 15 has an invalid length. [ 199.828435][ T9540] netlink: 'syz.1.992': attribute type 1 has an invalid length. [ 199.843087][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.851551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.975689][ T9544] netlink: 80 bytes leftover after parsing attributes in process `syz.1.994'. [ 201.635457][ T9568] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 201.679120][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 201.697298][ T9585] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1003'. [ 201.802930][ T9592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1004'. [ 201.856784][ T9595] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1004'. [ 201.950846][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 202.022347][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'. [ 202.224777][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1008'. [ 202.255546][ T9610] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1008'. [ 202.294973][ T9610] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1008'. [ 203.060986][ T9663] xt_hashlimit: size too large, truncated to 1048576 [ 203.305297][ T9662] syzkaller1: entered promiscuous mode [ 203.315844][ T9677] netlink: 'syz.4.1025': attribute type 16 has an invalid length. [ 203.325520][ T9662] syzkaller1: entered allmulticast mode [ 203.902591][ T5721] net_ratelimit: 29 callbacks suppressed [ 203.902608][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.916437][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.916644][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.140992][ T9726] netlink: 'syz.4.1035': attribute type 3 has an invalid length. [ 204.153014][ T3357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.271620][ T9736] x_tables: duplicate underflow at hook 1 [ 204.280490][ T546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.289021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.395445][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.404489][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.728250][ T9756] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 204.766626][ T9756] bond1 (unregistering): Released all slaves [ 204.826231][ T9764] IPVS: Error connecting to the multicast addr [ 204.848667][ T12] bond0: (slave bond_slave_0): interface is now down [ 204.874749][ T12] bond0: (slave batadv0): interface is now down [ 204.942835][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.951859][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.978028][ T12] bond0: now running without any active interface! [ 205.147795][ T9786] Bluetooth: MGMT ver 1.23 [ 205.267775][ T9790] syzkaller0: entered promiscuous mode [ 205.290057][ T9790] syzkaller0: entered allmulticast mode [ 205.391827][ T9797] __nla_validate_parse: 9 callbacks suppressed [ 205.391846][ T9797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1052'. [ 205.402215][ T9793] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.426674][ T9795] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 205.446654][ T9804] netlink: 'syz.1.1055': attribute type 7 has an invalid length. [ 205.792698][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 205.830062][ T9819] syzkaller0: entered promiscuous mode [ 205.835676][ T9819] syzkaller0: entered allmulticast mode [ 205.883429][ T9819] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 206.140428][ T9847] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1067'. [ 206.197817][ T9850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1068'. [ 206.375401][ T9853] netlink: 'syz.3.1069': attribute type 8 has an invalid length. [ 206.423493][ T9856] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1070'. [ 206.453833][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1070'. [ 206.490192][ T9859] syzkaller0: entered promiscuous mode [ 206.509425][ T9859] syzkaller0: entered allmulticast mode [ 207.111173][ T9899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1086'. [ 207.448819][ T9925] xt_hashlimit: invalid rate [ 207.501027][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1094'. [ 207.577126][ T9939] batadv_slave_1: entered allmulticast mode [ 207.628102][ T9936] batadv_slave_1: left allmulticast mode [ 207.724027][ T9928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1093'. [ 207.832710][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 208.102515][ T9966] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 208.170912][ T9973] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 208.185215][ T9969] xt_ipcomp: unknown flags 1D [ 208.232623][ T9966] bond1: entered promiscuous mode [ 208.249775][ T9966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.269004][ T9980] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 208.279763][ T9982] netlink: 'syz.1.1103': attribute type 30 has an invalid length. [ 208.368613][ T9972] bond1: (slave bridge2): making interface the new active one [ 208.383637][ T9972] bridge2: entered promiscuous mode [ 208.409108][ T9972] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 208.594360][ T9999] ip6tnl1: entered allmulticast mode [ 208.607836][T10001] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 208.667450][T10010] netlink: 'syz.1.1115': attribute type 2 has an invalid length. [ 208.679640][T10010] netlink: 'syz.1.1115': attribute type 1 has an invalid length. [ 209.000995][T10010] bond3: entered promiscuous mode [ 209.006785][T10010] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.020750][ T9] net_ratelimit: 21 callbacks suppressed [ 209.020767][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.078679][T10014] bond3: (slave bridge3): making interface the new active one [ 209.088538][T10014] bridge3: entered promiscuous mode [ 209.099726][ T3179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.108031][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.122988][T10014] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 209.305217][T10028] netlink: 'syz.4.1117': attribute type 1 has an invalid length. [ 209.412399][T10033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.422578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.439746][T10032] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 209.520913][T10036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.538149][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.566657][T10036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.581878][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.947095][T10056] syzkaller0: entered promiscuous mode [ 209.965442][T10056] syzkaller0: entered allmulticast mode [ 209.992731][T10056] netlink: 'syz.0.1124': attribute type 1 has an invalid length. [ 210.010047][T10056] netlink: 'syz.0.1124': attribute type 3 has an invalid length. [ 210.026645][T10058] team0: Device ipvlan2 failed to register rx_handler [ 210.049575][T10062] netlink: 'syz.1.1125': attribute type 13 has an invalid length. [ 210.384078][T10074] xt_hashlimit: size too large, truncated to 1048576 [ 210.594687][ T5816] lo speed is unknown, defaulting to 1000 [ 210.664521][T10073] gretap0: entered promiscuous mode [ 210.691187][T10073] vlan2: entered promiscuous mode [ 210.810061][T10084] __nla_validate_parse: 15 callbacks suppressed [ 210.810079][T10084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1132'. [ 210.902484][T10088] netlink: 'syz.4.1134': attribute type 4 has an invalid length. [ 210.922150][T10088] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1134'. [ 211.331936][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 211.375264][T10104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1140'. [ 211.459948][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 211.575942][T10112] netlink: 'syz.4.1142': attribute type 2 has an invalid length. [ 211.763691][T10123] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20003 [ 212.951021][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 213.564931][T10183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1163'. [ 213.586368][T10183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1163'. [ 213.631969][T10225] bridge0: port 3(syz_tun) entered blocking state [ 213.640353][T10225] bridge0: port 3(syz_tun) entered disabled state [ 213.647005][T10225] syz_tun: entered allmulticast mode [ 213.657370][T10225] syz_tun: entered promiscuous mode [ 213.664402][T10225] bridge0: port 3(syz_tun) entered blocking state [ 213.671862][T10225] bridge0: port 3(syz_tun) entered forwarding state [ 213.768140][T10228] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 213.811551][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 214.140538][ T13] net_ratelimit: 43 callbacks suppressed [ 214.140556][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.282589][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.291099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.299828][ T3179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.308191][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.320040][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 214.520663][T10264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.532057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.585516][T10264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.600044][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.624203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.170468][T10293] syzkaller1: entered promiscuous mode [ 215.178344][T10293] syzkaller1: entered allmulticast mode [ 215.440902][T10307] netlink: 'syz.1.1202': attribute type 28 has an invalid length. [ 215.449755][T10307] netlink: 'syz.1.1202': attribute type 3 has an invalid length. [ 215.571458][T10314] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 215.740328][T10314] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.772388][T10320] bond5: (slave veth9): Enslaving as an active interface with a down link [ 215.793006][T10330] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 215.804033][T10330] bond5: (slave batadv2): making interface the new active one [ 215.813075][T10330] batadv2: entered promiscuous mode [ 215.818674][T10330] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 215.822543][T10327] __nla_validate_parse: 6 callbacks suppressed [ 215.822559][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 215.858145][T10314] bond5: (slave veth11): Enslaving as an active interface with a down link [ 216.094018][T10327] syzkaller0: entered promiscuous mode [ 216.111726][T10327] syzkaller0: entered allmulticast mode [ 216.355831][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807a207000: rx timeout, send abort [ 216.364633][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807a207000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 216.380964][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880792fac00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 217.983160][T10371] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 218.022005][T10371] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 218.030504][T10371] gretap2: entered promiscuous mode [ 218.035760][T10371] gretap2: entered allmulticast mode [ 218.077337][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 218.101776][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 218.409765][T10407] netlink: 'syz.1.1228': attribute type 58 has an invalid length. [ 218.444874][T10407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1228'. [ 218.523036][T10409] veth0: entered promiscuous mode [ 218.554787][T10413] can: request_module (can-proto-4) failed. [ 218.583203][T10410] veth0: left promiscuous mode [ 218.822816][T10435] bridge0: Caught tx_queue_len zero misconfig [ 219.062914][T10456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'. [ 219.196976][T10468] net_ratelimit: 38 callbacks suppressed [ 219.196994][T10468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.256476][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.410773][T10482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1247'. [ 219.512134][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.520667][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.553799][T10474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.583597][T10474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.721006][ T542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.742041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.751505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.762434][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.773160][T10480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.796453][ T542] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.817318][ T542] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.849844][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.858024][ T542] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.867471][ T542] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.876677][ T542] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.888394][ T542] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.897853][ T542] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.907405][ T542] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.035479][T10506] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 220.258858][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 220.598031][T10541] erspan0: entered promiscuous mode [ 220.902278][T10558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1267'. [ 221.178382][T10571] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 221.218325][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1270'. [ 221.252518][T10578] syz_tun: entered allmulticast mode [ 221.259805][T10571] syzkaller1: entered promiscuous mode [ 221.268504][T10571] syzkaller1: entered allmulticast mode [ 221.284292][T10578] syz_tun: left allmulticast mode [ 221.671138][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1278'. [ 221.709952][T10608] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1279'. [ 221.855768][T10610] team0: Port device syz_tun removed [ 221.910122][T10610] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 224.017777][T10633] netlink: 'syz.4.1284': attribute type 5 has an invalid length. [ 224.139744][ T542] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 224.182386][ T542] bond3: now running without any active interface! [ 224.220701][ T5758] net_ratelimit: 22 callbacks suppressed [ 224.220719][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.235009][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.330877][ T542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.339350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.501182][T10665] netlink: 'syz.1.1291': attribute type 4 has an invalid length. [ 224.552499][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.587171][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.645249][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 224.655897][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.700048][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.708382][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.739816][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.849262][T10701] syzkaller1: entered promiscuous mode [ 224.854944][T10701] syzkaller1: entered allmulticast mode [ 224.886290][ T9] IPVS: starting estimator thread 0... [ 224.989515][T10703] IPVS: using max 31 ests per chain, 74400 per kthread [ 225.003788][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1303'. [ 225.006944][T10709] sctp: [Deprecated]: syz.0.1304 (pid 10709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.006944][T10709] Use struct sctp_sack_info instead [ 225.207296][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 225.248510][T10715] syzkaller0: entered promiscuous mode [ 225.254410][T10715] syzkaller0: entered allmulticast mode [ 225.262593][T10714] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1306'. [ 226.843979][T10735] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 227.000179][ T48] batadv2: left promiscuous mode [ 227.082783][T10749] vlan5: entered allmulticast mode [ 227.088094][T10749] bond0: entered allmulticast mode [ 227.219571][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 227.262300][T10761] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1317'. [ 227.286285][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1320'. [ 227.349333][T10767] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1320'. [ 227.358671][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1320'. [ 227.677435][T10786] bond4: Removing last ns target with arp_interval on [ 227.710408][T10794] netlink: 'syz.4.1328': attribute type 1 has an invalid length. [ 227.805779][T10790] bond5: Removing last ns target with arp_interval on [ 227.856240][T10809] vlan2: entered allmulticast mode [ 227.866427][T10809] bond0: entered allmulticast mode [ 227.872012][T10809] bond_slave_0: entered allmulticast mode [ 227.877919][T10809] bond_slave_1: entered allmulticast mode [ 227.884332][T10809] team0: entered allmulticast mode [ 227.894195][T10809] team_slave_0: entered allmulticast mode [ 227.900464][T10809] team_slave_1: entered allmulticast mode [ 227.912187][ T5848] IPVS: starting estimator thread 0... [ 228.010066][T10814] IPVS: using max 27 ests per chain, 64800 per kthread [ 228.120883][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 228.463183][T10843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.513622][T10860] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.540897][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 228.557717][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1342'. [ 228.728579][T10843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.751340][T10856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.845505][T10843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.881740][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 228.916457][T10873] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 228.929145][T10873] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1347'. [ 228.942463][T10873] netlink: 'syz.1.1347': attribute type 1 has an invalid length. [ 228.971567][T10843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.158829][ T542] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.256097][ T48] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.339483][ C0] net_ratelimit: 154 callbacks suppressed [ 229.339501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.366153][ T195] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.485371][ T58] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.544775][T10904] veth1_macvtap: entered promiscuous mode [ 229.580302][T10904] macsec1: entered promiscuous mode [ 229.611432][T10904] veth1_macvtap: left promiscuous mode [ 229.700541][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.708400][T10907] netlink: 'syz.0.1355': attribute type 4 has an invalid length. [ 229.897544][T10936] syzkaller0: entered promiscuous mode [ 229.904498][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.913401][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.953208][T10936] syzkaller0: entered allmulticast mode [ 229.964926][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.973612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.982723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.993708][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.994905][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.042269][T10944] vlan0: entered promiscuous mode [ 230.083216][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.132034][T11004] syzkaller0: entered promiscuous mode [ 231.197375][T11004] syzkaller0: entered allmulticast mode [ 231.350429][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 231.956792][T11052] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 232.028929][T11050] syzkaller0: entered promiscuous mode [ 232.058224][T11050] syzkaller0: entered allmulticast mode [ 232.120272][T11050] sctp: [Deprecated]: syz.0.1383 (pid 11050) Use of int in max_burst socket option. [ 232.120272][T11050] Use struct sctp_assoc_value instead [ 232.420812][T11076] gre0: entered promiscuous mode [ 232.517893][T11070] syzkaller0: entered promiscuous mode [ 232.546191][T11070] syzkaller0: entered allmulticast mode [ 232.621920][T11087] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 232.642102][T11087] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 232.678709][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 232.742703][T11094] __nla_validate_parse: 6 callbacks suppressed [ 232.742722][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1393'. [ 232.815901][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1393'. [ 233.148120][T11117] netlink: 'syz.0.1396': attribute type 33 has an invalid length. [ 233.227526][T11117] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 233.261653][T11117] bond7 (unregistering): Released all slaves [ 233.384209][T11133] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1398'. [ 233.938755][T11161] : Master is either lo or non-ether device [ 233.954774][T11166] xt_hashlimit: size too large, truncated to 1048576 [ 234.040967][T11169] »»»»»»: renamed from vxcan1 [ 234.248975][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 234.329545][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1408'. [ 234.380133][T11185] syzkaller1: entered promiscuous mode [ 234.396944][T11185] syzkaller1: entered allmulticast mode [ 234.450838][ T35] net_ratelimit: 26 callbacks suppressed [ 234.450854][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.465566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.479733][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.488135][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.495928][T11178] syzkaller1: entered promiscuous mode [ 234.508328][T11178] syzkaller1: entered allmulticast mode [ 234.763914][T11195] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 234.791274][T11195] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 234.986600][T11206] syzkaller0: entered promiscuous mode [ 235.016204][T11206] syzkaller0: entered allmulticast mode [ 235.101738][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.110400][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.162268][T11226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.174145][T11226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.187340][T11226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.213695][T11234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.214413][T11223] netlink: 'syz.4.1419': attribute type 12 has an invalid length. [ 235.255623][T11223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1419'. [ 235.440994][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'. [ 235.510653][T11241] erspan0: entered promiscuous mode [ 235.735230][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 235.758132][T11260] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1427'. [ 235.841537][T11263] netlink: 'syz.1.1428': attribute type 13 has an invalid length. [ 235.873880][T11263] netlink: 'syz.1.1428': attribute type 58 has an invalid length. [ 235.894173][T11263] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1428'. [ 236.313328][T11284] erspan0: entered promiscuous mode [ 236.348771][T11290] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 236.691513][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 236.701516][T11311] netlink: 'syz.0.1442': attribute type 18 has an invalid length. [ 236.711504][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'. [ 236.754704][T11295] lo speed is unknown, defaulting to 1000 [ 236.768230][T11304] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 236.776907][T11304] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 236.822446][T11311] netlink: 'syz.0.1442': attribute type 18 has an invalid length. [ 237.287910][T11336] netlink: 'syz.2.1449': attribute type 2 has an invalid length. [ 237.397905][T11336] : entered promiscuous mode [ 237.626961][T11349] IPv6: sit1: Disabled Multicast RS [ 237.664716][T11349] veth1_to_bond: entered allmulticast mode [ 237.708372][T11349] veth1_to_bond: entered promiscuous mode [ 237.800403][T11349] veth1_to_bond (unregistering): left allmulticast mode [ 237.808010][T11349] veth1_to_bond (unregistering): left promiscuous mode [ 237.851060][T11361] __nla_validate_parse: 5 callbacks suppressed [ 237.851078][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1454'. [ 237.866001][T11355] veth0_macvtap: entered allmulticast mode [ 237.875114][T11363] xt_nat: multiple ranges no longer supported [ 237.887800][T11363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1453'. [ 237.924322][T11355] netlink: 'syz.4.1453': attribute type 2 has an invalid length. [ 238.126584][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1459'. [ 238.417053][T11397] netlink: 'syz.2.1465': attribute type 8 has an invalid length. [ 238.485295][T11393] syzkaller0: entered promiscuous mode [ 238.500904][T11393] syzkaller0: entered allmulticast mode [ 238.522384][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 238.553836][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 238.692914][T11413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1470'. [ 238.762068][T11417] lo speed is unknown, defaulting to 1000 [ 238.778989][T11417] lo speed is unknown, defaulting to 1000 [ 238.809674][T11417] lo speed is unknown, defaulting to 1000 [ 238.823486][T11417] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 238.861853][T11415] ±ÿª¨úrBº“: renamed from lo [ 238.883492][T11417] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 238.907051][T11417] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 238.948155][T11417] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 239.042582][T11417] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 239.057323][T11427] xt_TCPMSS: Only works on TCP SYN packets [ 239.073678][T11417] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 239.094848][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 239.099884][T11417] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 239.153949][T11417] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 239.178369][T11417] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 239.229064][T11410] rdma_rxe: rxe_newlink: failed to add wg2 [ 239.363014][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 239.453361][T11449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.758914][T11463] netlink: 'syz.1.1482': attribute type 21 has an invalid length. [ 239.784794][T11463] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.809082][T11463] net_ratelimit: 22 callbacks suppressed [ 239.809099][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.840925][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.862458][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.881651][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.916491][T11463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.941256][T11461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.993059][T11483] netlink: 'syz.3.1486': attribute type 2 has an invalid length. [ 240.195633][T11500] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1490'. [ 240.220832][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.273216][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.283656][ T5633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.300833][ T5848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.377649][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 240.540500][T11520] xt_l2tp: v2 doesn't support IP mode [ 240.582031][T11512] netlink: 'syz.4.1493': attribute type 3 has an invalid length. [ 240.841481][T11530] syzkaller0: entered promiscuous mode [ 240.847085][T11530] syzkaller0: entered allmulticast mode [ 241.614655][T11584] nftables ruleset with unbound chain [ 242.952819][T11580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.005623][T11580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.103570][T11584] ip_vti0: entered promiscuous mode [ 243.115200][T11584] __nla_validate_parse: 1 callbacks suppressed [ 243.115217][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 243.126263][T11592] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1513'. [ 243.412283][T11610] lo: Caught tx_queue_len zero misconfig [ 243.521555][T11613] netlink: 'syz.2.1521': attribute type 1 has an invalid length. [ 243.541272][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 243.553681][T11615] syzkaller0: entered promiscuous mode [ 243.570068][T11615] syzkaller0: entered allmulticast mode [ 243.834522][T11625] tunl0: Caught tx_queue_len zero misconfig [ 243.852721][T11625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1526'. [ 243.872113][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1528'. [ 244.024388][T11636] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1530'. [ 244.044438][T11641] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 244.290889][T11653] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1535'. [ 244.396764][T11659] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1537'. [ 244.531699][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 244.548913][T11666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1539'. [ 244.701837][T11672] vcan1: entered promiscuous mode [ 244.707371][T11672] vcan1: entered allmulticast mode [ 245.220295][T11709] IPVS: set_ctl: invalid protocol: 92 172.30.0.1:1 [ 245.501359][T11726] netlink: 'syz.1.1555': attribute type 1 has an invalid length. [ 245.577511][T11726] bond6: entered promiscuous mode [ 245.583975][T11726] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.611108][T11731] bond6: (slave bridge4): making interface the new active one [ 245.618634][T11731] bridge4: entered promiscuous mode [ 245.644252][T11731] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 245.658937][T11734] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.810447][T11733] syzkaller0: entered promiscuous mode [ 245.817731][T11733] syzkaller0: entered allmulticast mode [ 245.862489][T11741] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 245.866895][T11745] xt_SECMARK: invalid mode: 9 [ 245.891176][T11741] bond3 (unregistering): Released all slaves [ 246.660964][T11782] netlink: 'syz.2.1567': attribute type 39 has an invalid length. [ 246.726882][T11787] net_ratelimit: 4 callbacks suppressed [ 246.726898][T11787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.773255][T11782] bridge0: port 3(syz_tun) entered disabled state [ 246.893101][T11782] syz_tun (unregistering): left allmulticast mode [ 246.905192][T11782] syz_tun (unregistering): left promiscuous mode [ 246.922018][T11782] bridge0: port 3(syz_tun) entered disabled state [ 246.960460][T11804] netlink: 'syz.1.1573': attribute type 27 has an invalid length. [ 246.971859][T11804] netlink: 'syz.1.1573': attribute type 4 has an invalid length. [ 247.098319][T11808] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 247.336975][T11812] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 247.388870][T11812] bond7 (unregistering): Released all slaves [ 247.645072][T11845] netlink: 'syz.3.1582': attribute type 2 has an invalid length. [ 247.728811][T11834] tipc: Enabling of bearer rejected, failed to enable media [ 247.731050][T11851] Cannot find map_set index 135 as target [ 248.021046][T11865] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 248.034123][T11865] netlink: 'syz.3.1587': attribute type 3 has an invalid length. [ 248.199465][T11872] __nla_validate_parse: 11 callbacks suppressed [ 248.199483][T11872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1589'. [ 248.268671][T11872] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1589'. [ 248.296174][T11881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1591'. [ 248.327344][T11883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1591'. [ 248.371290][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1593'. [ 248.913751][T11921] netlink: 'syz.0.1599': attribute type 1 has an invalid length. [ 248.946774][T11921] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1599'. [ 249.085830][T11934] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.1603'. [ 249.098417][T11931] netlink: 'syz.4.1601': attribute type 13 has an invalid length. [ 249.185017][T11939] netlink: zone id is out of range [ 249.201152][T11931] gretap0: refused to change device tx_queue_len [ 249.226157][T11931] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 249.425282][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 249.446763][T11957] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1607'. [ 249.463326][T11957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1607'. [ 249.715663][T11969] netlink: 'syz.1.1611': attribute type 1 has an invalid length. [ 250.042441][T11992] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 250.291263][T11992] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.321741][T11996] bond7: (slave gretap3): making interface the new active one [ 250.332685][T11996] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 251.122431][T12050] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 251.188195][T12050] team0: Device ipvlan2 is already an upper device of the team interface [ 251.312920][T12066] 8021q: VLANs not supported on  [ 251.760238][T12090] tipc: Enabled bearer , priority 10 [ 251.770807][T12095] netlink: 'syz.4.1642': attribute type 1 has an invalid length. [ 251.790141][T12097] netlink: 'syz.0.1639': attribute type 21 has an invalid length. [ 251.846172][T12095] 8021q: adding VLAN 0 to HW filter on device bond8 [ 251.947466][T12105] ip6t_srh: unknown srh invflags 4000 [ 251.975878][T12095] bond8: (slave geneve3): making interface the new active one [ 252.011289][T12095] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 252.596114][T12132] IPVS: set_ctl: invalid protocol: 30 172.20.20.187:20002 [ 252.872372][ T24] tipc: Node number set to 728049345 [ 252.887517][T12153] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 253.415913][T12190] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 253.562100][T12197] __nla_validate_parse: 14 callbacks suppressed [ 253.562116][T12197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1667'. [ 253.602672][T12197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1667'. [ 253.723615][T12205] netlink: 'syz.3.1670': attribute type 1 has an invalid length. [ 253.752549][T12205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.769298][T12206] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 253.946009][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 253.958176][T12216] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1675'. [ 253.967834][T12216] netlink: 'syz.3.1675': attribute type 9 has an invalid length. [ 253.998713][T12221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1674'. [ 254.066496][T12221] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 254.087904][T12223] netlink: 'syz.3.1676': attribute type 9 has an invalid length. [ 254.163002][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 254.383214][T12239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.399741][T12232] netlink: 'syz.1.1679': attribute type 1 has an invalid length. [ 254.605735][T12233] macvlan2: entered promiscuous mode [ 254.627532][T12233] macvlan2: entered allmulticast mode [ 254.647318][T12233] bond8: entered promiscuous mode [ 254.678886][T12233] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.695454][T12233] bond8: left promiscuous mode [ 254.787502][T12267] xt_hashlimit: size too large, truncated to 1048576 [ 255.153058][T12287] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 255.191029][T12287] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 255.368516][T12295] netlink: 'syz.2.1698': attribute type 1 has an invalid length. [ 255.497788][T12314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1698'. [ 255.529078][T12295] bond4 (unregistering): Released all slaves [ 255.583591][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.590451][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.647609][T12318] netlink: 'syz.1.1701': attribute type 13 has an invalid length. [ 255.655691][T12315] v: renamed from veth0_vlan (while UP) [ 255.674682][T12318] gretap0: refused to change device tx_queue_len [ 255.689919][T12318] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 256.049075][T12345] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1707'. [ 256.078856][T12345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1707'. [ 256.128972][T12347] tipc: Enabling of bearer rejected, failed to enable media [ 256.159825][T12347] syz_tun: entered allmulticast mode [ 256.192900][T12347] syz_tun: left allmulticast mode [ 256.201720][T12349] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 256.222694][T12349] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 256.382055][T12365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1714'. [ 256.440768][T12368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.470361][T12370] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 256.492116][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 256.651359][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 256.780722][T12390] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 257.893516][T12443] netlink: 'syz.2.1739': attribute type 12 has an invalid length. [ 258.042307][T12443] bond4: option primary_reselect: invalid value (255) [ 258.069617][T12443] bond4 (unregistering): Released all slaves [ 258.156863][ T5625] block nbd1: Receive control failed (result -32) [ 258.478463][T12462] blkio.reset_stats is deprecated [ 258.798299][ T5624] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 258.844594][ T5624] CPU: 0 UID: 0 PID: 5624 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 258.844617][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 258.844633][ T5624] Call Trace: [ 258.844639][ T5624] [ 258.844646][ T5624] dump_stack_lvl+0xe8/0x150 [ 258.844675][ T5624] dump_header+0xd3/0x4b0 [ 258.844699][ T5624] oom_kill_process+0x3ab/0x970 [ 258.844719][ T5624] out_of_memory+0x1064/0x1480 [ 258.844733][ T5624] ? try_charge_memcg+0xbca/0x1590 [ 258.844766][ T5624] ? __pfx_out_of_memory+0x10/0x10 [ 258.844779][ T5624] ? do_raw_spin_unlock+0xf5/0x210 [ 258.844805][ T5624] try_charge_memcg+0xc74/0x1590 [ 258.844839][ T5624] ? __pfx_try_charge_memcg+0x10/0x10 [ 258.844859][ T5624] ? percpu_ref_tryget+0x15/0x180 [ 258.844896][ T5624] ? charge_memcg+0x20/0x2b0 [ 258.844920][ T5624] charge_memcg+0x19c/0x2b0 [ 258.844939][ T5624] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 258.844960][ T5624] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 258.844985][ T5624] swap_cache_alloc_folio+0x4de/0x990 [ 258.845014][ T5624] swap_cache_read_folio+0x44/0x120 [ 258.845033][ T5624] swap_cluster_readahead+0x3a0/0x640 [ 258.845057][ T5624] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 258.845083][ T5624] ? rcu_is_watching+0x15/0xb0 [ 258.845107][ T5624] ? get_vma_policy+0x27b/0x3c0 [ 258.845130][ T5624] swapin_readahead+0x19a/0xc10 [ 258.845151][ T5624] ? swap_table_get+0x1e/0x260 [ 258.845167][ T5624] ? swap_table_get+0x1e/0x260 [ 258.845183][ T5624] ? __pfx_swapin_readahead+0x10/0x10 [ 258.845201][ T5624] ? swap_table_get+0x1e/0x260 [ 258.845216][ T5624] ? swap_table_get+0x1e/0x260 [ 258.845229][ T5624] ? swap_table_get+0x1e/0x260 [ 258.845247][ T5624] ? swap_table_get+0x216/0x260 [ 258.845263][ T5624] ? swap_cache_get_folio+0x2e7/0x2f0 [ 258.845284][ T5624] do_swap_page+0x455/0x5060 [ 258.845312][ T5624] ? __pte_offset_map+0x29/0x240 [ 258.845335][ T5624] ? __lock_acquire+0x683/0x2cf0 [ 258.845360][ T5624] ? do_swap_page+0x124/0x5060 [ 258.845376][ T5624] ? __pfx_do_swap_page+0x10/0x10 [ 258.845401][ T5624] ? __pte_offset_map+0x1ae/0x240 [ 258.845420][ T5624] ? pte_offset_map_rw_nolock+0xea/0x160 [ 258.845440][ T5624] handle_mm_fault+0x124c/0x3080 [ 258.845468][ T5624] ? handle_mm_fault+0xec/0x3080 [ 258.845495][ T5624] ? __pfx_handle_mm_fault+0x10/0x10 [ 258.845513][ T5624] ? lock_vma_under_rcu+0x45a/0x500 [ 258.845566][ T5624] do_user_addr_fault+0xa4d/0x1340 [ 258.845603][ T5624] ? trace_page_fault_user+0x84/0x1e0 [ 258.845633][ T5624] exc_page_fault+0x6a/0xc0 [ 258.845661][ T5624] asm_exc_page_fault+0x26/0x30 [ 258.845678][ T5624] RIP: 0033:0x7ff47635e68e [ 258.845696][ T5624] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 258.845712][ T5624] RSP: 002b:00007ffcbdff2338 EFLAGS: 00010246 [ 258.845728][ T5624] RAX: 0000000000000000 RBX: 00005555859cb500 RCX: 00007ff47635e68e [ 258.845742][ T5624] RDX: 00007ffcbdff2390 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.845754][ T5624] RBP: 00007ffcbdff23fc R08: 0000000000000000 R09: 0000000000000000 [ 258.845767][ T5624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 258.845778][ T5624] R13: 00000000000927c0 R14: 000000000003eff5 R15: 00007ffcbdff2450 [ 258.845808][ T5624] [ 258.846644][ T5624] memory: usage 307200kB, limit 307200kB, failcnt 766 [ 259.197459][T12474] netlink: 'syz.2.1748': attribute type 3 has an invalid length. [ 259.372172][ T29] audit: type=1800 audit(1784139231.758:4): pid=12478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1750" name="memory.events" dev="tmpfs" ino=1729 res=0 errno=0 [ 259.413382][ T5624] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 259.458813][ T29] audit: type=1804 audit(1784139231.758:5): pid=12478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1750" name="/newroot/336/memory.events" dev="tmpfs" ino=1729 res=1 errno=0 [ 259.465105][ T5624] kmem: usage 304720kB, limit 9007199254740988kB, failcnt 0 [ 259.562227][ T5624] Memory cgroup stats for /syz4: [ 259.562659][ T5624] cache 0 [ 259.599308][ T5624] rss 28672 [ 259.612675][ T5624] rss_huge 0 [ 259.632005][ T5624] shmem 0 [ 259.641874][ T5624] mapped_file 0 [ 259.646579][ T5624] dirty 0 [ 259.653602][ T5624] writeback 0 [ 259.657742][ T5624] workingset_refault_anon 38 [ 259.674672][T12483] __nla_validate_parse: 9 callbacks suppressed [ 259.674688][T12483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1752'. [ 259.684918][T12487] netlink: 1116 bytes leftover after parsing attributes in process `syz.3.1753'. [ 259.699678][ T5624] workingset_refault_file 255 [ 259.699692][ T5624] swap 143360 [ 259.699700][ T5624] swapcached 372736 [ 259.699708][ T5624] pgpgin 24685 [ 259.699716][ T5624] pgpgout 24670 [ 259.699724][ T5624] pgfault 52904 [ 259.699732][ T5624] pgmajfault 17 [ 259.699740][ T5624] inactive_anon 28672 [ 259.699747][ T5624] active_anon 12288 [ 259.699756][ T5624] inactive_file 0 [ 259.699764][ T5624] active_file 0 [ 259.699772][ T5624] unevictable 0 [ 259.699779][ T5624] hierarchical_memory_limit 314572800 [ 259.699788][ T5624] hierarchical_memsw_limit 9223372036854771712 [ 259.699797][ T5624] total_cache 0 [ 259.699805][ T5624] total_rss 28672 [ 259.699813][ T5624] total_rss_huge 0 [ 259.699821][ T5624] total_shmem 0 [ 259.699828][ T5624] total_mapped_file 0 [ 259.699836][ T5624] total_dirty 0 [ 259.699844][ T5624] total_writeback 0 [ 259.699852][ T5624] total_workingset_refault_anon 38 [ 259.699861][ T5624] total_workingset_refault_file 255 [ 259.699868][ T5624] total_swap 143360 [ 259.699876][ T5624] total_swapcached 372736 [ 259.699884][ T5624] total_pgpgin 24685 [ 259.699891][ T5624] total_pgpgout 24670 [ 259.699898][ T5624] total_pgfault 52904 [ 259.699905][ T5624] total_pgmajfault 17 [ 259.699913][ T5624] total_inactive_anon 28672 [ 259.699920][ T5624] total_active_anon 12288 [ 259.699935][ T5624] total_inactive_file 0 [ 259.699943][ T5624] total_active_file 0 [ 259.699951][ T5624] total_unevictable 0 [ 259.699959][ T5624] anon_cost 0 [ 259.699967][ T5624] file_cost 0 [ 259.699975][ T5624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1730,pid=12414,uid=0 [ 259.996727][ T5624] Memory cgroup out of memory: OOM victim 12414 (syz.4.1730) is already exiting. Skip killing the task [ 260.042175][T12501] hsr0: entered allmulticast mode [ 260.077979][T12501] hsr_slave_0: entered allmulticast mode [ 260.104290][T12501] hsr_slave_1: entered allmulticast mode [ 260.136854][T12502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1757'. [ 260.149833][T12502] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 260.163119][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1758'. [ 260.180989][T12504] block nbd2: Unsupported socket: should be TCP or UNIX. [ 260.586473][T12521] x_tables: duplicate underflow at hook 2 [ 260.624764][T12521] x_tables: duplicate underflow at hook 1 [ 260.835958][T12533] netlink: 'syz.2.1768': attribute type 24 has an invalid length. [ 260.993629][T12541] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 261.028497][T12541] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 261.056154][T12535] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 261.181897][T12543] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.351027][T12555] netlink: 'syz.1.1776': attribute type 1 has an invalid length. [ 261.370788][T12555] netlink: 'syz.1.1776': attribute type 1 has an invalid length. [ 261.482581][T12557] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 261.497408][T12557] syzkaller1: Refused to change device type [ 261.600767][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1780'. [ 262.006467][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 262.049076][T12580] syzkaller0: entered promiscuous mode [ 262.068286][T12580] syzkaller0: entered allmulticast mode [ 262.387821][T12602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.635370][T12612] syzkaller0: entered promiscuous mode [ 262.659479][T12612] syzkaller0: entered allmulticast mode [ 263.542383][T12616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.864064][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 265.005659][T12672] bond9: Unable to set up delay as MII monitoring is disabled [ 265.015238][T12675] xt_hashlimit: size too large, truncated to 1048576 [ 265.016451][T12672] bond9 (unregistering): Released all slaves [ 265.071264][T12677] »»»»»»: renamed from vxcan1 [ 265.732819][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 266.054349][T12732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1825'. [ 266.076098][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'. [ 266.087764][T12732] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1825'. [ 266.103477][T12736] netlink: 'syz.4.1824': attribute type 1 has an invalid length. [ 266.150525][T12736] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1824'. [ 266.182420][T12736] netlink: 'syz.4.1824': attribute type 1 has an invalid length. [ 266.286668][T12748] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1829'. [ 266.337927][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1829'. [ 266.613387][T12764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1834'. [ 266.753781][T12774] syzkaller0: entered promiscuous mode [ 266.772742][T12774] syzkaller0: entered allmulticast mode [ 266.974882][T12792] netlink: 'syz.3.1841': attribute type 8 has an invalid length. [ 266.998883][T12792] sch_fq: defrate 0 ignored. [ 267.068010][T12792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1841'. [ 267.077500][T12802] ip6tnl0: Caught tx_queue_len zero misconfig [ 267.190490][T12812] x_tables: unsorted entry at hook 1 [ 267.322517][T12827] netlink: 'syz.0.1848': attribute type 7 has an invalid length. [ 267.534264][T12838] xt_hashlimit: size too large, truncated to 1048576 [ 268.268925][T12887] netlink: 'syz.3.1868': attribute type 4 has an invalid length. [ 268.473927][T12901] netlink: 'syz.4.1873': attribute type 3 has an invalid length. [ 268.490625][T12901] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 268.562227][T12892] netlink: 'syz.1.1870': attribute type 4 has an invalid length. [ 268.706487][T12911] geneve1: Caught tx_queue_len zero misconfig [ 268.765409][T12911] syzkaller0: entered promiscuous mode [ 268.773071][T12911] syzkaller0: entered allmulticast mode [ 271.562185][T12945] lo speed is unknown, defaulting to 1000 [ 271.661094][T12945] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 271.970691][T13021] netlink: 'syz.1.1895': attribute type 33 has an invalid length. [ 272.012241][T13021] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 272.026194][T13021] bond9 (unregistering): Released all slaves [ 272.222648][T13035] __nla_validate_parse: 5 callbacks suppressed [ 272.222668][T13035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1899'. [ 272.426276][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'. [ 272.520508][T13050] tipc: Started in network mode [ 272.537243][T13050] tipc: Node identity 4a7e266ff26f, cluster identity 4711 [ 272.550266][T13050] tipc: Enabled bearer , priority 0 [ 272.582698][T13051] syzkaller0: entered promiscuous mode [ 272.625277][T13051] syzkaller0: entered allmulticast mode [ 272.655483][T13050] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 272.704556][T13050] tipc: Resetting bearer [ 272.721141][T13050] netlink: 'syz.1.1906': attribute type 4 has an invalid length. [ 272.757750][T13049] tipc: Resetting bearer [ 272.803370][T13063] openvswitch: netlink: Actions may not be safe on all matching packets [ 272.815498][T13063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1910'. [ 272.841011][T13049] tipc: Disabling bearer [ 273.178960][T13088] block nbd2: Unsupported socket: should be TCP or UNIX. [ 273.557919][T13114] netlink: 'syz.4.1925': attribute type 2 has an invalid length. [ 273.917109][T13127] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 273.988574][T13135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1932'. [ 274.016625][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1932'. [ 274.212966][T13145] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 274.526758][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'. [ 274.551029][T13161] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1942'. [ 274.576236][T13161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.806713][T13185] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1950'. [ 274.844082][T13177] bond5: entered promiscuous mode [ 274.892455][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'. [ 274.940903][T13186] macvlan0: entered promiscuous mode [ 274.960275][T13186] macvlan0: entered allmulticast mode [ 274.983728][T13186] bond5: (slave macvlan0): Opening slave failed [ 275.107373][T13201] gtp1: entered promiscuous mode [ 275.123405][T13201] gtp1: entered allmulticast mode [ 275.404521][T13220] dvmrp0: entered allmulticast mode [ 275.409976][T13222] netlink: 'syz.3.1958': attribute type 1 has an invalid length. [ 275.418293][T13218] netlink: 'syz.2.1957': attribute type 1 has an invalid length. [ 275.512376][T13222] bond6: (slave geneve3): making interface the new active one [ 275.530800][T13222] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 275.557056][T13227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1958'. [ 275.609483][T13222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.642407][ T195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.671944][T13227] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.683807][ T195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.698855][ T195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.732505][ T195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 276.023127][T13240] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 276.046419][T13240] bond4 (unregistering): Released all slaves [ 276.154659][T13260] netlink: 'syz.3.1968': attribute type 1 has an invalid length. [ 276.206074][T13250] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 276.220355][T13250] bond4 (unregistering): Released all slaves [ 276.364157][T13271] netlink: 'syz.4.1971': attribute type 9 has an invalid length. [ 276.465919][T13278] gre0: entered promiscuous mode [ 276.514866][T13282] nbd: illegal input index -8454144 [ 276.577170][T13283] syzkaller0: entered promiscuous mode [ 276.584943][T13283] syzkaller0: entered allmulticast mode [ 276.611670][T13286] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 277.054332][T13310] tipc: Enabled bearer , priority 10 [ 277.163880][T13320] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 277.252937][T13327] IPv6: addrconf: prefix option has invalid lifetime [ 277.401470][T13339] __nla_validate_parse: 8 callbacks suppressed [ 277.401494][T13339] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1994'. [ 277.538135][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1995'. [ 277.631214][T13349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1997'. [ 277.736372][T13352] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1999'. [ 277.751113][T13355] netlink: 'syz.3.2000': attribute type 5 has an invalid length. [ 277.835674][T13362] bridge_slave_1: default FDB implementation only supports local addresses [ 277.955551][T13370] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2004'. [ 277.982096][T13374] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2005'. [ 277.998543][T13370] nbd: illegal input index 65508 [ 278.008813][T13374] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2005'. [ 278.028481][T13374] netlink: 'syz.4.2005': attribute type 5 has an invalid length. [ 278.047308][T13374] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2005'. [ 278.098420][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2005'. [ 278.169344][ T9] tipc: Node number set to 3088131695 [ 278.311087][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'. [ 278.573452][T13419] siw: device registration error -23 [ 278.682891][T13419] smbdirect: ib_dev[syz2] removed [ 278.768872][T13428] netlink: 'syz.1.2020': attribute type 16 has an invalid length. [ 278.804309][T13428] veth0_macvtap: entered allmulticast mode [ 278.889626][T13426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.940493][T13437] syzkaller0: entered promiscuous mode [ 278.966106][T13437] syzkaller0: entered allmulticast mode [ 278.992833][T13443] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 279.482280][T13475] openvswitch: netlink: Message has 12 unknown bytes. [ 279.489517][T13475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.528485][T13475] xt_hashlimit: overflow, rate too high: 0 [ 279.564040][T13477] Cannot find del_set index 4 as target [ 279.691540][T13477] syzkaller0: entered promiscuous mode [ 279.704305][T13477] syzkaller0: entered allmulticast mode [ 279.876065][T13495] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 279.965806][T13495] bond9: option mode: invalid value (7) [ 279.984048][T13495] bond9 (unregistering): Released all slaves [ 280.034276][T13502] gre2: entered promiscuous mode [ 280.045943][T13509] FAULT_INJECTION: forcing a failure. [ 280.045943][T13509] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 280.066423][T13509] CPU: 0 UID: 0 PID: 13509 Comm: syz.3.2043 Not tainted syzkaller #0 PREEMPT(full) [ 280.066449][T13509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 280.066460][T13509] Call Trace: [ 280.066467][T13509] [ 280.066474][T13509] dump_stack_lvl+0xe8/0x150 [ 280.066505][T13509] should_fail_ex+0x40c/0x560 [ 280.066531][T13509] _copy_from_iter+0x1d3/0x1660 [ 280.066554][T13509] ? trace_kmem_cache_alloc+0x29/0xe0 [ 280.066577][T13509] ? kmem_cache_alloc_noprof+0x308/0x5f0 [ 280.066596][T13509] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 280.066614][T13509] ? __build_skb+0x62/0x440 [ 280.066635][T13509] ? __build_skb+0x62/0x440 [ 280.066660][T13509] ? __pfx__copy_from_iter+0x10/0x10 [ 280.066685][T13509] ? __build_skb+0x2a2/0x440 [ 280.066717][T13509] ? netlink_sendmsg+0x650/0xb40 [ 280.066734][T13509] ? skb_put+0x112/0x210 [ 280.066759][T13509] netlink_sendmsg+0x6c0/0xb40 [ 280.066784][T13509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.066805][T13509] ? aa_sock_msg_perm+0xf1/0x1b0 [ 280.066827][T13509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.066843][T13509] sock_sendmsg_nosec+0x13a/0x180 [ 280.066867][T13509] sock_write_iter+0x2de/0x3e0 [ 280.066888][T13509] ? __pfx_sock_write_iter+0x10/0x10 [ 280.066914][T13509] ? bpf_lsm_file_permission+0x9/0x20 [ 280.066932][T13509] ? security_file_permission+0x75/0x260 [ 280.066963][T13509] vfs_write+0x612/0xba0 [ 280.066996][T13509] ? __pfx_vfs_write+0x10/0x10 [ 280.067030][T13509] ? __fget_files+0x2a/0x420 [ 280.067060][T13509] ksys_write+0x150/0x270 [ 280.067087][T13509] ? __pfx_ksys_write+0x10/0x10 [ 280.067118][T13509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.067138][T13509] do_syscall_64+0x174/0x580 [ 280.067162][T13509] ? trace_irq_disable+0x3b/0x140 [ 280.067183][T13509] ? clear_bhb_loop+0x40/0x90 [ 280.067203][T13509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.067221][T13509] RIP: 0033:0x7f778039de59 [ 280.067238][T13509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.067253][T13509] RSP: 002b:00007f778119e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 280.067272][T13509] RAX: ffffffffffffffda RBX: 00007f7780626090 RCX: 00007f778039de59 [ 280.067284][T13509] RDX: 000000000000fe33 RSI: 0000200000000080 RDI: 0000000000000004 [ 280.067295][T13509] RBP: 00007f778119e090 R08: 0000000000000000 R09: 0000000000000000 [ 280.067306][T13509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.067315][T13509] R13: 00007f7780626128 R14: 00007f7780626090 R15: 00007fff5191ce08 [ 280.067343][T13509] [ 280.453597][T13512] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 280.467714][T13513] openvswitch: netlink: IP tunnel dst address not specified [ 280.561918][T13521] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 280.994582][T13549] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 281.006113][T13550] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 281.108551][T13555] netlink: 'syz.3.2058': attribute type 21 has an invalid length. [ 281.123246][T13555] netlink: 'syz.3.2058': attribute type 10 has an invalid length. [ 281.131375][T13555] team0: left allmulticast mode [ 281.136265][T13555] team_slave_0: left allmulticast mode [ 281.142771][T13555] team_slave_1: left allmulticast mode [ 281.160477][T13555] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.177915][T13555] .`: (slave team0): Enslaving as an active interface with an up link [ 281.193085][T13557] syzkaller0: entered promiscuous mode [ 281.211134][T13557] syzkaller0: entered allmulticast mode [ 281.306225][T13568] macsec1: entered promiscuous mode [ 281.369026][T13570] netlink: 'syz.3.2063': attribute type 1 has an invalid length. [ 281.698181][T13591] FAULT_INJECTION: forcing a failure. [ 281.698181][T13591] name failslab, interval 1, probability 0, space 0, times 0 [ 281.705575][T13590] ªªªªªª: renamed from bond_slave_0 [ 281.711337][T13588] x_tables: duplicate underflow at hook 2 [ 281.723754][T13591] CPU: 0 UID: 0 PID: 13591 Comm: syz.0.2068 Not tainted syzkaller #0 PREEMPT(full) [ 281.723778][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 281.723789][T13591] Call Trace: [ 281.723797][T13591] [ 281.723805][T13591] dump_stack_lvl+0xe8/0x150 [ 281.723838][T13591] should_fail_ex+0x40c/0x560 [ 281.723864][T13591] should_failslab+0xa8/0x100 [ 281.723892][T13591] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 281.723913][T13591] ? local_lock_release+0x9c/0x160 [ 281.723940][T13591] ? __alloc_skb+0x1d7/0x7a0 [ 281.723960][T13591] ? __alloc_skb+0x1d7/0x7a0 [ 281.723989][T13591] __alloc_skb+0x1d7/0x7a0 [ 281.724016][T13591] netlink_ack+0x136/0xb30 [ 281.724042][T13591] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.724066][T13591] ? ref_tracker_free+0x689/0x830 [ 281.724091][T13591] ? __pfx_ref_tracker_free+0x10/0x10 [ 281.724121][T13591] netlink_rcv_skb+0x2a4/0x4a0 [ 281.724149][T13591] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.724174][T13591] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.724214][T13591] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.724241][T13591] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.724274][T13591] netlink_unicast+0x7bb/0x940 [ 281.724307][T13591] netlink_sendmsg+0x813/0xb40 [ 281.724333][T13591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.724355][T13591] ? aa_sock_msg_perm+0xf1/0x1b0 [ 281.724379][T13591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.724395][T13591] sock_sendmsg_nosec+0x13a/0x180 [ 281.724417][T13591] sock_write_iter+0x2de/0x3e0 [ 281.724437][T13591] ? __pfx_sock_write_iter+0x10/0x10 [ 281.724470][T13591] ? bpf_lsm_file_permission+0x9/0x20 [ 281.724489][T13591] ? security_file_permission+0x75/0x260 [ 281.724518][T13591] vfs_write+0x612/0xba0 [ 281.724551][T13591] ? __pfx_vfs_write+0x10/0x10 [ 281.724590][T13591] ? __fget_files+0x2a/0x420 [ 281.724621][T13591] ksys_write+0x150/0x270 [ 281.724649][T13591] ? __pfx_ksys_write+0x10/0x10 [ 281.724684][T13591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.724705][T13591] do_syscall_64+0x174/0x580 [ 281.724730][T13591] ? trace_irq_disable+0x3b/0x140 [ 281.724752][T13591] ? clear_bhb_loop+0x40/0x90 [ 281.724775][T13591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.724794][T13591] RIP: 0033:0x7f6f4c19de59 [ 281.724810][T13591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.724825][T13591] RSP: 002b:00007f6f4a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.724842][T13591] RAX: ffffffffffffffda RBX: 00007f6f4c425fa0 RCX: 00007f6f4c19de59 [ 281.724855][T13591] RDX: 000000000000fe33 RSI: 0000200000000080 RDI: 0000000000000004 [ 281.724865][T13591] RBP: 00007f6f4a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.724875][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.724885][T13591] R13: 00007f6f4c426038 R14: 00007f6f4c425fa0 R15: 00007ffdb8c36238 [ 281.724915][T13591] [ 282.078525][T13593] syzkaller0: entered promiscuous mode [ 282.092801][T13593] syzkaller0: entered allmulticast mode [ 282.688740][T13614] __nla_validate_parse: 20 callbacks suppressed [ 282.688760][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2078'. [ 282.710713][T13616] syzkaller0: entered promiscuous mode [ 282.716379][T13616] syzkaller0: entered allmulticast mode [ 282.730905][T13632] raw_sendmsg: syz.1.2082 forgot to set AF_INET. Fix it! [ 282.741907][T13628] vcan0: tx address claim with dest, not broadcast [ 282.811307][T13638] netlink: 'syz.4.2084': attribute type 21 has an invalid length. [ 282.820341][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'. [ 283.553109][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 284.409736][T13638] netlink: 'syz.4.2084': attribute type 21 has an invalid length. [ 284.429988][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'. [ 284.473025][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 284.482725][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2087'. [ 284.501605][ T542] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.511188][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 284.530469][ T542] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.540388][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2087'. [ 284.574076][ T542] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.602084][ T542] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.747299][T13657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2092'. [ 284.758557][T13660] block nbd0: Unsupported socket: should be TCP or UNIX. [ 284.858705][T13665] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2095'. [ 285.045790][T13677] team0: Device is already in use. [ 285.053046][T13678] tipc: Enabling of bearer rejected, failed to enable media [ 285.254664][T13685] openvswitch: netlink: EtherType 0 is less than min 600 [ 285.286225][T13685] tipc: Started in network mode [ 285.296941][T13685] tipc: Node identity ac14140f, cluster identity 4711 [ 285.312645][T13685] tipc: Enabled bearer , priority 10 [ 285.435983][T13702] netlink: 'syz.3.2105': attribute type 9 has an invalid length. [ 285.621655][T13711] IPv6: Can't replace route, no match found [ 285.743770][T13719] xt_hl: Unknown Hop Limit match mode: 206 [ 285.838794][T13723] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 285.871655][T13723] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 285.908230][T13729] netlink: 'syz.3.2116': attribute type 1 has an invalid length. [ 285.972086][T13729] 8021q: adding VLAN 0 to HW filter on device bond7 [ 286.023383][T13737] openvswitch: netlink: IPv4 tunnel dst address is zero [ 286.031854][T13737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.047255][T13734] bond7: (slave bridge4): making interface the new active one [ 286.071900][T13734] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 286.131433][T13737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.161438][T13737] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003 [ 286.328516][T13747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.439911][ T5738] tipc: Node number set to 2886997007 [ 287.593155][T13814] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 287.685175][T13821] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 287.764941][T13826] xt_l2tp: wrong L2TP version: 0 [ 288.123439][T13850] xt_hashlimit: overflow, try lower: 3/0 [ 288.923130][T13891] __nla_validate_parse: 11 callbacks suppressed [ 288.923148][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 288.948809][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 288.953864][T13894] netlink: 'syz.3.2162': attribute type 83 has an invalid length. [ 288.959689][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 288.976521][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 288.988949][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 289.000639][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 289.010207][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 289.019965][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 289.029658][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 289.038855][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2161'. [ 289.294198][T13910] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 289.326250][T13912] IPVS: set_ctl: invalid protocol: 50 172.20.20.63:20001 [ 289.576353][T13927] bridge0: port 3(vlan6) entered blocking state [ 289.599878][T13927] bridge0: port 3(vlan6) entered disabled state [ 289.612880][T13927] vlan6: entered allmulticast mode [ 289.640018][T13927] geneve0: entered allmulticast mode [ 289.673685][T13927] vlan6: entered promiscuous mode [ 289.679014][T13927] geneve0: entered promiscuous mode [ 289.885286][T13942] Bluetooth: MGMT ver 1.23 [ 289.946214][T13937] syzkaller0: entered promiscuous mode [ 289.952300][T13937] syzkaller0: entered allmulticast mode [ 290.099125][T13957] netlink: 'syz.1.2183': attribute type 2 has an invalid length. [ 290.100067][T13949] vlan2: entered allmulticast mode [ 290.124021][T13949] bond0: entered allmulticast mode [ 290.131381][T13949] bond_slave_0: entered allmulticast mode [ 290.137194][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806957d000: rx timeout, send abort [ 290.145834][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806957d000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 290.173462][T13949] batadv0: entered allmulticast mode [ 290.358962][T13957] bond9: Removing last arp target with arp_interval on [ 290.511252][T13988] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 290.678889][T13997] netlink: 'syz.4.2189': attribute type 1 has an invalid length. [ 290.808283][T14003] netlink: 'syz.1.2190': attribute type 10 has an invalid length. [ 290.961940][T13997] 8021q: adding VLAN 0 to HW filter on device bond9 [ 290.989859][T14003] macsec0: left allmulticast mode [ 291.497611][T14038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.776865][T14059] netlink: 'syz.3.2203': attribute type 1 has an invalid length. [ 291.800532][T14058] xt_nfacct: accounting object `syz1' does not exist [ 292.015072][T14074] xfrm0 speed is unknown, defaulting to 1000 [ 292.060173][T14074] xfrm0 speed is unknown, defaulting to 1000 [ 292.094309][T14074] xfrm0 speed is unknown, defaulting to 1000 [ 292.142768][T14074] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 292.253269][T14074] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 292.336221][T14074] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 292.363850][T14091] 8021q: VLANs not supported on xfrm0 [ 292.408022][T14074] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 292.548201][T14092] syzkaller0: entered promiscuous mode [ 292.570297][T14092] syzkaller0: entered allmulticast mode [ 292.658889][T14074] xfrm0 speed is unknown, defaulting to 1000 [ 292.685170][T14074] xfrm0 speed is unknown, defaulting to 1000 [ 294.978279][T14074] xfrm0 speed is unknown, defaulting to 1000 [ 294.985005][T14123] __nla_validate_parse: 65 callbacks suppressed [ 294.985024][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2217'. [ 295.001093][T14126] netlink: 65011 bytes leftover after parsing attributes in process `syz.3.2217'. [ 295.025136][T14143] veth0: entered promiscuous mode [ 295.038093][T14147] veth0: left promiscuous mode [ 295.051236][T14074] xfrm0 speed is unknown, defaulting to 1000 [ 295.122545][T14074] xfrm0 speed is unknown, defaulting to 1000 [ 295.387430][T14181] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2227'. [ 295.452999][T14182] syzkaller1: entered promiscuous mode [ 295.484465][T14182] syzkaller1: entered allmulticast mode [ 295.590096][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.621924][T14181] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2227'. [ 295.915349][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2235'. [ 295.915826][T14212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2233'. [ 295.952299][T14219] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2235'. [ 295.966863][T14214] vlan0: entered allmulticast mode [ 295.977629][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2235'. [ 295.987121][T14225] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2235'. [ 295.995338][T14212] nbd0: detected capacity change from 0 to 16777216 [ 296.012228][ T25] block nbd0: Dead connection, failed to find a fallback [ 296.063525][T14226] tunl0: entered allmulticast mode [ 296.488061][T14254] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2241'. [ 296.721107][T14266] wlan0: mtu less than device minimum [ 297.102434][ T25] block nbd0: shutting down sockets [ 297.111324][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.124052][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.135838][ T1630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.145726][ T1630] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.148543][T14290] sctp: [Deprecated]: syz.2.2248 (pid 14290) Use of int in max_burst socket option deprecated. [ 297.148543][T14290] Use struct sctp_assoc_value instead [ 297.154099][ T1630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.179121][ T1630] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.187634][ T1630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.196938][ T1630] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.208278][ T1630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.217557][ T1630] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.226962][ T1630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.236769][ T1630] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.244826][ T1630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.254108][ T1630] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.262663][ T1630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.273421][ T1630] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.281347][ T6464] ldm_validate_partition_table(): Disk read failed. [ 297.289977][ T1630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.299107][ T1630] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.309452][ T1630] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 297.318638][ T1630] Buffer I/O error on dev nbd0, logical block 0, async page read [ 297.340290][ T6464] Dev nbd0: unable to read RDB block 0 [ 297.355347][ T6464] nbd0: unable to read partition table [ 297.366945][ T6464] ldm_validate_partition_table(): Disk read failed. [ 297.375886][ T6464] Dev nbd0: unable to read RDB block 0 [ 297.385283][ T6464] nbd0: unable to read partition table [ 297.582951][T14298] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 297.851726][T14313] vlan0: Caught tx_queue_len zero misconfig [ 298.316473][T14334] netlink: 'syz.3.2263': attribute type 2 has an invalid length. [ 299.006015][T14369] ip6t_srh: unknown srh invflags 4000 [ 299.147835][T14376] openvswitch: netlink: IPv6 tunnel dst address is zero [ 299.206488][T14379] netlink: 'syz.3.2275': attribute type 21 has an invalid length. [ 299.240459][T14379] IPv6: NLM_F_CREATE should be specified when creating new route [ 299.475561][T14399] xt_hashlimit: size too large, truncated to 1048576 [ 299.741624][ T5738] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 299.848942][T14421] netlink: 'syz.4.2286': attribute type 32 has an invalid length. [ 299.930582][T14421] bond10: option coupled_control: invalid value (192) [ 299.946979][T14421] bond10 (unregistering): Released all slaves [ 299.993868][T14431] __nla_validate_parse: 20 callbacks suppressed [ 299.993886][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 300.356385][T14446] syzkaller0: entered promiscuous mode [ 300.408059][T14446] syzkaller0: entered allmulticast mode [ 300.425118][T14454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2293'. [ 300.447430][T14454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2293'. [ 300.802875][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'. [ 300.965088][T14481] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2300'. [ 301.635906][T14502] tipc: Enabled bearer , priority 0 [ 301.654443][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2305'. [ 301.774827][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 301.961651][T14523] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2311'. [ 302.229426][T14539] macsec0: entered promiscuous mode [ 302.234821][T14539] macsec0: entered allmulticast mode [ 302.242833][T14544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2318'. [ 302.760424][ T5848] tipc: Node number set to 737092876 [ 303.123625][T14595] syzkaller0: entered promiscuous mode [ 303.134348][T14595] syzkaller0: entered allmulticast mode [ 303.173661][T14595] tipc: Enabled bearer , priority 0 [ 303.215527][T14594] tipc: Resetting bearer [ 303.258576][T14594] tipc: Disabling bearer [ 303.322758][T14607] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 303.356702][T14607] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 303.431860][T14615] netlink: 'syz.1.2338': attribute type 1 has an invalid length. [ 303.487746][T14615] 8021q: adding VLAN 0 to HW filter on device bond10 [ 303.592567][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880690e3c00: rx timeout, send abort [ 303.601329][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880690e3c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 303.723499][T14627] syzkaller0: entered promiscuous mode [ 303.733301][T14627] syzkaller0: entered allmulticast mode [ 303.838766][T14634] netlink: zone id is out of range [ 303.905678][T14634] netlink: zone id is out of range [ 303.905744][T14629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.934009][T14634] netlink: zone id is out of range [ 303.960313][T14629] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 303.969112][T14634] netlink: zone id is out of range [ 304.006016][T11716] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.013265][T11716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.033789][T14634] netlink: zone id is out of range [ 304.054973][T14634] netlink: zone id is out of range [ 304.062555][T14634] netlink: zone id is out of range [ 304.067936][T14634] netlink: zone id is out of range [ 304.073970][T14634] netlink: zone id is out of range [ 304.245366][T14655] netlink: 'syz.3.2348': attribute type 1 has an invalid length. [ 304.327116][T14664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2349'. [ 304.372710][T14655] veth5: entered allmulticast mode [ 304.388916][T14655] bond8: (slave veth5): Enslaving as an active interface with a down link [ 304.553578][T14667] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 304.872765][T14686] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 304.990652][T14699] x_tables: duplicate underflow at hook 1 [ 305.073676][T14705] __nla_validate_parse: 1 callbacks suppressed [ 305.073695][T14705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2362'. [ 305.131270][T14708] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2363'. [ 305.689150][T14751] netlink: 'syz.1.2374': attribute type 1 has an invalid length. [ 305.732675][T14751] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2374'. [ 305.782915][T14751] netlink: 'syz.1.2374': attribute type 1 has an invalid length. [ 305.903737][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2379'. [ 305.923181][T14763] IPv6: NLM_F_REPLACE set, but no existing node found! [ 305.938867][T14763] erspan0: left allmulticast mode [ 305.998853][T14774] veth0_to_bridge: entered promiscuous mode [ 306.002658][T14776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2382'. [ 306.079667][T14782] netlink: 'syz.2.2380': attribute type 10 has an invalid length. [ 306.131795][T14785] netlink: 'syz.2.2380': attribute type 1 has an invalid length. [ 306.165724][T14776] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2382'. [ 306.166289][T14787] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 306.264883][T14782] netlink: 'syz.2.2380': attribute type 10 has an invalid length. [ 306.269899][T14776] syzkaller1: entered promiscuous mode [ 306.290408][T14776] syzkaller1: entered allmulticast mode [ 306.332331][T14787] bond9: entered promiscuous mode [ 306.340090][T14787] 8021q: adding VLAN 0 to HW filter on device bond9 [ 306.351040][T14770] veth0_to_bridge: left promiscuous mode [ 306.496151][T14787] bond9: (slave bridge2): making interface the new active one [ 306.506105][T14787] bridge2: entered promiscuous mode [ 306.514285][T14787] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 306.551945][T14807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2388'. [ 306.723099][T14822] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2392'. [ 306.799895][T14827] netlink: 'syz.3.2394': attribute type 9 has an invalid length. [ 306.888905][T14832] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 308.012681][T14900] bond11: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 308.053294][T14909] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2421'. [ 308.082872][T14900] bond11 (unregistering): Released all slaves [ 308.496733][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2425'. [ 308.784288][T14935] netlink: 'syz.0.2429': attribute type 1 has an invalid length. [ 308.913831][T14936] bond10: (slave geneve4): making interface the new active one [ 308.937649][T14936] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 308.951603][T12794] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 308.983684][T12794] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 308.989940][T14935] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 309.018474][T12794] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 309.044920][T12794] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 309.184382][T14955] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.206611][T14955] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 309.624086][T14976] netlink: 'syz.1.2439': attribute type 1 has an invalid length. [ 309.666250][T14971] bond4: (slave bridge8): Enslaving as an active interface with an up link [ 309.726288][T14979] sctp: [Deprecated]: syz.3.2441 (pid 14979) Use of int in maxseg socket option. [ 309.726288][T14979] Use struct sctp_assoc_value instead [ 310.220773][T15002] sock: sock_timestamping_bind_phc: sock not bind to device [ 310.313948][T15011] netlink: 'syz.1.2451': attribute type 11 has an invalid length. [ 310.378256][T15011] __nla_validate_parse: 4 callbacks suppressed [ 310.378275][T15011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2451'. [ 310.426888][T15016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2452'. [ 310.676954][T15026] gre3: entered promiscuous mode [ 310.689579][T15026] gre3: entered allmulticast mode [ 310.966124][ T5625] block nbd0: Receive control failed (result -107) [ 310.980817][T15045] block nbd0: reconnected socket [ 311.150066][T15056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2462'. [ 311.829505][T15093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.021684][T15103] netlink: 'syz.1.2473': attribute type 1 has an invalid length. [ 312.076006][T15103] 8021q: adding VLAN 0 to HW filter on device bond11 [ 312.099646][T15103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2473'. [ 312.108652][T15103] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2473'. [ 312.250298][T15113] gretap4: entered promiscuous mode [ 312.262171][T15113] batman_adv: batadv0: Adding interface: gretap4 [ 312.268656][T15113] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.295219][T15113] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 312.342314][T15115] syzkaller0: entered promiscuous mode [ 312.369994][T15115] syzkaller0: entered allmulticast mode [ 312.462272][T15121] netlink: 'syz.2.2478': attribute type 26 has an invalid length. [ 312.584717][T15128] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2480'. [ 312.606135][T15130] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 312.606135][T15130] Please contact the netfilter-devel mailing list or update your nftables rules. [ 312.818232][T15144] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2483'. [ 312.962550][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 313.006760][T15158] netlink: 'syz.3.2489': attribute type 1 has an invalid length. [ 313.230845][T15158] 8021q: adding VLAN 0 to HW filter on device bond9 [ 313.253683][T15175] netlink: 'syz.1.2493': attribute type 3 has an invalid length. [ 313.258535][T15160] bond9: (slave gretap3): Enslaving as a backup interface with an up link [ 313.301763][T15175] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.341141][ T195] net_ratelimit: 98 callbacks suppressed [ 313.341161][ T195] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 313.480546][T12795] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 313.536590][T15189] netlink: 'syz.4.2499': attribute type 1 has an invalid length. [ 313.629114][T15197] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2501'. [ 313.691089][T15202] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 313.732172][T15189] 8021q: adding VLAN 0 to HW filter on device bond10 [ 313.773360][T15199] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2500'. [ 313.816037][T15195] bond3: (slave veth0_to_bond): Releasing active interface [ 313.894067][T15195] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 314.088075][T15189] 8021q: adding VLAN 0 to HW filter on device bond11 [ 314.099562][T15189] bond10: (slave bond11): Enslaving as an active interface with a down link [ 314.123993][T15226] tipc: Enabled bearer , priority 10 [ 314.310428][T15236] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 314.506175][T15252] macvtap0: entered allmulticast mode [ 314.577510][T15255] netlink: 'syz.0.2518': attribute type 29 has an invalid length. [ 314.822359][T15262] syzkaller0: entered promiscuous mode [ 314.831209][T15262] syzkaller0: entered allmulticast mode [ 317.026141][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.033302][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.068263][T15313] __nla_validate_parse: 6 callbacks suppressed [ 317.068281][T15313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2531'. [ 317.158596][T15319] netlink: 'syz.4.2527': attribute type 39 has an invalid length. [ 317.227112][T15319] hsr_slave_0: left promiscuous mode [ 317.256899][T15319] hsr_slave_1: left promiscuous mode [ 317.332042][T15327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2532'. [ 317.359780][T15327] netlink: 'syz.2.2532': attribute type 3 has an invalid length. [ 317.367811][T15327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2532'. [ 317.377574][T15327] netlink: 'syz.2.2532': attribute type 3 has an invalid length. [ 317.407732][T15329] syzkaller0: entered promiscuous mode [ 317.416719][T15325] rdma_op ffff888031e989f0 conn xmit_rdma 0000000000000000 [ 317.420701][T15329] syzkaller0: entered allmulticast mode [ 317.573021][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2536'. [ 317.666567][T15340] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2536'. [ 317.712350][T15340] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2536'. [ 317.725852][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2537'. [ 318.062379][ T29] audit: type=1800 audit(1784139290.438:6): pid=15378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2540" name="memory.events" dev="tmpfs" ino=2440 res=0 errno=0 [ 318.195700][ T29] audit: type=1804 audit(1784139290.498:7): pid=15378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2540" name="/newroot/476/memory.events" dev="tmpfs" ino=2440 res=1 errno=0 [ 318.978361][T15411] syzkaller0: entered promiscuous mode [ 318.985261][T15411] syzkaller0: entered allmulticast mode [ 321.223758][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 321.408961][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 321.442688][T15457] bond12: Removing last arp target with arp_interval on [ 321.468490][T15466] xt_hashlimit: size too large, truncated to 1048576 [ 321.544387][T15467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'. [ 321.731847][T15477] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2564'. [ 322.002871][T15493] lo speed is unknown, defaulting to 1000 [ 322.032503][T15493] lo speed is unknown, defaulting to 1000 [ 322.045672][T15493] lo speed is unknown, defaulting to 1000 [ 322.142987][ T5848] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 322.284510][T15506] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 322.315616][T15506] xfrm0 speed is unknown, defaulting to 1000 [ 322.415549][T15520] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2577'. [ 322.828404][ T5633] lo speed is unknown, defaulting to 1000 [ 322.850200][T15493] infiniband syz1: set down [ 322.856879][T15493] infiniband syz1: added lo [ 322.868753][T15493] [ 322.871116][T15493] ====================================================== [ 322.878138][T15493] WARNING: possible circular locking dependency detected [ 322.885172][T15493] syzkaller #0 Not tainted [ 322.889574][T15493] ------------------------------------------------------ [ 322.896581][T15493] syz.4.2568/15493 is trying to acquire lock: [ 322.902629][T15493] ffffffff8ec5ed40 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 322.912194][T15493] [ 322.912194][T15493] but task is already holding lock: [ 322.919546][T15493] ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 322.928869][T15493] [ 322.928869][T15493] which lock already depends on the new lock. [ 322.928869][T15493] [ 322.939261][T15493] [ 322.939261][T15493] the existing dependency chain (in reverse order) is: [ 322.948259][T15493] [ 322.948259][T15493] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 322.955719][T15493] __mutex_lock+0x19d/0x1550 [ 322.960923][T15493] __alloc_workqueue+0xa9c/0x2060 [ 322.966470][T15493] alloc_workqueue_noprof+0xe3/0x210 [ 322.972275][T15493] padata_alloc+0xbe/0x360 [ 322.977216][T15493] pcrypt_init_padata+0x27/0x100 [ 322.982704][T15493] pcrypt_init+0x60/0xc0 [ 322.987466][T15493] do_one_initcall+0x250/0x870 [ 322.992742][T15493] do_initcall_level+0x10a/0x1a0 [ 322.998190][T15493] do_initcalls+0x59/0xa0 [ 323.003029][T15493] kernel_init_freeable+0x29d/0x3e0 [ 323.008738][T15493] kernel_init+0x1d/0x1d0 [ 323.013576][T15493] ret_from_fork+0x514/0xb70 [ 323.018680][T15493] ret_from_fork_asm+0x1a/0x30 [ 323.023949][T15493] [ 323.023949][T15493] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 323.031703][T15493] cpus_read_lock+0x42/0x160 [ 323.036806][T15493] static_key_slow_inc+0x12/0x30 [ 323.042257][T15493] nbd_genl_reconfigure+0x1301/0x1e80 [ 323.048148][T15493] genl_family_rcv_msg_doit+0x233/0x340 [ 323.054206][T15493] genl_rcv_msg+0x614/0x7a0 [ 323.059217][T15493] netlink_rcv_skb+0x226/0x4a0 [ 323.064494][T15493] genl_rcv+0x28/0x40 [ 323.068990][T15493] netlink_unicast+0x7bb/0x940 [ 323.074268][T15493] netlink_sendmsg+0x813/0xb40 [ 323.079541][T15493] sock_sendmsg_nosec+0x13a/0x180 [ 323.085098][T15493] ____sys_sendmsg+0x54e/0x850 [ 323.090376][T15493] ___sys_sendmsg+0x2a5/0x360 [ 323.095572][T15493] __x64_sys_sendmsg+0x1b1/0x290 [ 323.101046][T15493] do_syscall_64+0x174/0x580 [ 323.106149][T15493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.112552][T15493] [ 323.112552][T15493] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 323.120196][T15493] __mutex_lock+0x19d/0x1550 [ 323.125332][T15493] nbd_queue_rq+0x373/0x1150 [ 323.130451][T15493] blk_mq_dispatch_rq_list+0x499/0x1990 [ 323.136516][T15493] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 323.143360][T15493] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 323.149854][T15493] blk_mq_run_work_fn+0x16c/0x300 [ 323.155387][T15493] process_scheduled_works+0xa8e/0x14e0 [ 323.161448][T15493] worker_thread+0xa47/0xfb0 [ 323.166553][T15493] kthread+0x388/0x470 [ 323.171138][T15493] ret_from_fork+0x514/0xb70 [ 323.176242][T15493] ret_from_fork_asm+0x1a/0x30 [ 323.181512][T15493] [ 323.181512][T15493] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 323.188715][T15493] __mutex_lock+0x19d/0x1550 [ 323.193821][T15493] nbd_queue_rq+0xc1/0x1150 [ 323.198841][T15493] blk_mq_dispatch_rq_list+0x499/0x1990 [ 323.204905][T15493] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 323.211752][T15493] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 323.218246][T15493] blk_mq_run_work_fn+0x16c/0x300 [ 323.223780][T15493] process_scheduled_works+0xa8e/0x14e0 [ 323.229852][T15493] worker_thread+0xa47/0xfb0 [ 323.234949][T15493] kthread+0x388/0x470 [ 323.239531][T15493] ret_from_fork+0x514/0xb70 [ 323.244631][T15493] ret_from_fork_asm+0x1a/0x30 [ 323.249903][T15493] [ 323.249903][T15493] -> #4 (set->srcu){.+.+}-{0:0}: [ 323.257015][T15493] __synchronize_srcu+0xc9/0x2f0 [ 323.262467][T15493] elevator_switch+0x1e8/0x7b0 [ 323.267740][T15493] elevator_change+0x2fa/0x480 [ 323.273020][T15493] elevator_set_default+0x375/0x440 [ 323.278734][T15493] blk_register_queue+0x3f3/0x4e0 [ 323.284273][T15493] __add_disk+0x6cb/0xe30 [ 323.289111][T15493] add_disk_fwnode+0xfb/0x4b0 [ 323.294292][T15493] nbd_dev_add+0x733/0xb60 [ 323.299233][T15493] nbd_init+0x15f/0x1e0 [ 323.303901][T15493] do_one_initcall+0x250/0x870 [ 323.309207][T15493] do_initcall_level+0x10a/0x1a0 [ 323.314668][T15493] do_initcalls+0x59/0xa0 [ 323.319514][T15493] kernel_init_freeable+0x29d/0x3e0 [ 323.325238][T15493] kernel_init+0x1d/0x1d0 [ 323.330081][T15493] ret_from_fork+0x514/0xb70 [ 323.335194][T15493] ret_from_fork_asm+0x1a/0x30 [ 323.340483][T15493] [ 323.340483][T15493] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 323.348300][T15493] __mutex_lock+0x19d/0x1550 [ 323.353412][T15493] elevator_change+0x1af/0x480 [ 323.358687][T15493] elevator_set_none+0xb5/0x140 [ 323.364049][T15493] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 323.370371][T15493] nbd_start_device+0x189/0xb30 [ 323.375790][T15493] nbd_genl_connect+0x1597/0x1c10 [ 323.381332][T15493] genl_family_rcv_msg_doit+0x233/0x340 [ 323.387390][T15493] genl_rcv_msg+0x614/0x7a0 [ 323.392404][T15493] netlink_rcv_skb+0x226/0x4a0 [ 323.397680][T15493] genl_rcv+0x28/0x40 [ 323.402169][T15493] netlink_unicast+0x7bb/0x940 [ 323.407456][T15493] netlink_sendmsg+0x813/0xb40 [ 323.412726][T15493] sock_sendmsg_nosec+0x13a/0x180 [ 323.418262][T15493] ____sys_sendmsg+0x54e/0x850 [ 323.423544][T15493] ___sys_sendmsg+0x2a5/0x360 [ 323.428738][T15493] __x64_sys_sendmsg+0x1b1/0x290 [ 323.434191][T15493] do_syscall_64+0x174/0x580 [ 323.439314][T15493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.445716][T15493] [ 323.445716][T15493] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 323.454314][T15493] blk_alloc_queue+0x544/0x690 [ 323.459593][T15493] __blk_mq_alloc_disk+0x194/0x390 [ 323.465216][T15493] nbd_dev_add+0x494/0xb60 [ 323.470149][T15493] nbd_init+0x15f/0x1e0 [ 323.474817][T15493] do_one_initcall+0x250/0x870 [ 323.480096][T15493] do_initcall_level+0x10a/0x1a0 [ 323.485546][T15493] do_initcalls+0x59/0xa0 [ 323.490389][T15493] kernel_init_freeable+0x29d/0x3e0 [ 323.496101][T15493] kernel_init+0x1d/0x1d0 [ 323.500936][T15493] ret_from_fork+0x514/0xb70 [ 323.506095][T15493] ret_from_fork_asm+0x1a/0x30 [ 323.511368][T15493] [ 323.511368][T15493] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 323.518570][T15493] fs_reclaim_acquire+0x71/0x100 [ 323.524032][T15493] prepare_alloc_pages+0x15b/0x650 [ 323.529669][T15493] __alloc_frozen_pages_noprof+0x12f/0x380 [ 323.535996][T15493] __alloc_pages_noprof+0x10/0x100 [ 323.541713][T15493] pcpu_populate_chunk+0x181/0xb30 [ 323.547339][T15493] pcpu_alloc_noprof+0xbca/0x1900 [ 323.552876][T15493] xt_percpu_counter_alloc+0x145/0x1e0 [ 323.558846][T15493] translate_table+0x129a/0x1f80 [ 323.564296][T15493] ipt_register_table+0x112/0x310 [ 323.569834][T15493] iptable_mangle_table_init+0x41/0x70 [ 323.575801][T15493] xt_find_table_lock+0x311/0x400 [ 323.581339][T15493] xt_request_find_table_lock+0x26/0x100 [ 323.587488][T15493] do_ipt_get_ctl+0x77f/0x1300 [ 323.592766][T15493] nf_getsockopt+0x26e/0x290 [ 323.597867][T15493] ip_getsockopt+0x19e/0x230 [ 323.602961][T15493] do_sock_getsockopt+0x51d/0x7e0 [ 323.608499][T15493] __x64_sys_getsockopt+0x1a4/0x240 [ 323.614217][T15493] do_syscall_64+0x174/0x580 [ 323.619321][T15493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.625736][T15493] [ 323.625736][T15493] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 323.633483][T15493] __lock_acquire+0x1520/0x2cf0 [ 323.638867][T15493] lock_acquire+0x106/0x350 [ 323.643893][T15493] __mutex_lock+0x19d/0x1550 [ 323.649002][T15493] pcpu_alloc_noprof+0x231/0x1900 [ 323.654537][T15493] __alloc_workqueue+0xb2c/0x2060 [ 323.660074][T15493] alloc_workqueue_noprof+0xe3/0x210 [ 323.665877][T15493] ib_mad_init_device+0x993/0x2150 [ 323.671501][T15493] add_client_context+0x37c/0x7b0 [ 323.677049][T15493] enable_device_and_get+0x19c/0x3e0 [ 323.682856][T15493] ib_register_device+0x10af/0x1380 [ 323.688582][T15493] rxe_register_device+0x1e3/0x350 [ 323.694207][T15493] rxe_net_add+0x81/0x110 [ 323.699051][T15493] rxe_newlink+0xf4/0x1c0 [ 323.703891][T15493] nldev_newlink+0x5bc/0x650 [ 323.708999][T15493] rdma_nl_rcv+0x6ef/0xa40 [ 323.713938][T15493] netlink_unicast+0x7bb/0x940 [ 323.719218][T15493] netlink_sendmsg+0x813/0xb40 [ 323.724519][T15493] sock_sendmsg_nosec+0x13a/0x180 [ 323.730058][T15493] ____sys_sendmsg+0x54e/0x850 [ 323.735337][T15493] ___sys_sendmsg+0x2a5/0x360 [ 323.740526][T15493] __x64_sys_sendmsg+0x1b1/0x290 [ 323.745981][T15493] do_syscall_64+0x174/0x580 [ 323.751090][T15493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.757495][T15493] [ 323.757495][T15493] other info that might help us debug this: [ 323.757495][T15493] [ 323.767706][T15493] Chain exists of: [ 323.767706][T15493] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 323.767706][T15493] [ 323.780754][T15493] Possible unsafe locking scenario: [ 323.780754][T15493] [ 323.788194][T15493] CPU0 CPU1 [ 323.793543][T15493] ---- ---- [ 323.798933][T15493] lock(wq_pool_mutex); [ 323.803167][T15493] lock(cpu_hotplug_lock); [ 323.810179][T15493] lock(wq_pool_mutex); [ 323.816926][T15493] lock(pcpu_alloc_mutex); [ 323.821419][T15493] [ 323.821419][T15493] *** DEADLOCK *** [ 323.821419][T15493] [ 323.829550][T15493] 6 locks held by syz.4.2568/15493: [ 323.834731][T15493] #0: ffffffff9ab21148 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 323.844741][T15493] #1: ffffffff8fd8abc8 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650 [ 323.854140][T15493] #2: ffffffff8fd7c0a8 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 323.864092][T15493] #3: ffffffff8fd7c3a8 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 323.874110][T15493] #4: ffff888029164620 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0 [ 323.884991][T15493] #5: ffffffff8e9f6d00 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 323.894732][T15493] [ 323.894732][T15493] stack backtrace: [ 323.900607][T15493] CPU: 0 UID: 0 PID: 15493 Comm: syz.4.2568 Not tainted syzkaller #0 PREEMPT(full) [ 323.900625][T15493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 323.900635][T15493] Call Trace: [ 323.900644][T15493] [ 323.900651][T15493] dump_stack_lvl+0xe8/0x150 [ 323.900676][T15493] print_circular_bug+0x2e1/0x300 [ 323.900693][T15493] check_noncircular+0x12e/0x150 [ 323.900718][T15493] __lock_acquire+0x1520/0x2cf0 [ 323.900744][T15493] ? check_path+0x21/0x40 [ 323.900756][T15493] ? check_noncircular+0xda/0x150 [ 323.900784][T15493] ? add_lock_to_list+0xc7/0x100 [ 323.900806][T15493] ? lockdep_unlock+0x5d/0xd0 [ 323.900827][T15493] ? __lock_acquire+0x13e8/0x2cf0 [ 323.900847][T15493] ? pcpu_alloc_noprof+0x231/0x1900 [ 323.900864][T15493] lock_acquire+0x106/0x350 [ 323.900882][T15493] ? pcpu_alloc_noprof+0x231/0x1900 [ 323.900904][T15493] __mutex_lock+0x19d/0x1550 [ 323.900925][T15493] ? pcpu_alloc_noprof+0x231/0x1900 [ 323.900942][T15493] ? __pfx___mutex_trylock_common+0x10/0x10 [ 323.900959][T15493] ? pcpu_alloc_noprof+0x231/0x1900 [ 323.900975][T15493] ? trace_contention_end+0x3d/0x140 [ 323.900989][T15493] ? __pfx___mutex_lock+0x10/0x10 [ 323.901019][T15493] ? __mutex_lock+0x30d/0x1550 [ 323.901044][T15493] ? __pfx___mutex_lock+0x10/0x10 [ 323.901064][T15493] pcpu_alloc_noprof+0x231/0x1900 [ 323.901082][T15493] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 323.901105][T15493] __alloc_workqueue+0xb2c/0x2060 [ 323.901131][T15493] alloc_workqueue_noprof+0xe3/0x210 [ 323.901154][T15493] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 323.901175][T15493] ? __ib_alloc_pd+0x4d6/0x6d0 [ 323.901193][T15493] ? __ib_alloc_pd+0xf1/0x6d0 [ 323.901213][T15493] ib_mad_init_device+0x993/0x2150 [ 323.901240][T15493] ? __pfx_ib_mad_init_device+0x10/0x10 [ 323.901256][T15493] ? do_raw_spin_unlock+0xf5/0x210 [ 323.901274][T15493] ? _raw_spin_unlock+0x28/0x50 [ 323.901292][T15493] add_client_context+0x37c/0x7b0 [ 323.901316][T15493] ? __pfx_add_client_context+0x10/0x10 [ 323.901337][T15493] ? xa_find+0x25b/0x2b0 [ 323.901355][T15493] enable_device_and_get+0x19c/0x3e0 [ 323.901376][T15493] ? __pfx_enable_device_and_get+0x10/0x10 [ 323.901400][T15493] ? device_add+0x6f6/0xb80 [ 323.901423][T15493] ib_register_device+0x10af/0x1380 [ 323.901448][T15493] ? __pfx_ib_register_device+0x10/0x10 [ 323.901471][T15493] ? xa_load+0x60/0x210 [ 323.901483][T15493] ? xa_load+0x60/0x210 [ 323.901494][T15493] ? xa_load+0x60/0x210 [ 323.901507][T15493] ? xa_load+0x1db/0x210 [ 323.901522][T15493] ? ib_device_set_netdev+0x5c9/0x6d0 [ 323.901539][T15493] rxe_register_device+0x1e3/0x350 [ 323.901561][T15493] rxe_net_add+0x81/0x110 [ 323.901583][T15493] rxe_newlink+0xf4/0x1c0 [ 323.901601][T15493] nldev_newlink+0x5bc/0x650 [ 323.901621][T15493] ? __pfx_nldev_newlink+0x10/0x10 [ 323.901676][T15493] ? bpf_lsm_capable+0x9/0x20 [ 323.901694][T15493] ? security_capable+0x7e/0x2c0 [ 323.901717][T15493] ? __pfx_nldev_newlink+0x10/0x10 [ 323.901736][T15493] rdma_nl_rcv+0x6ef/0xa40 [ 323.901759][T15493] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 323.901791][T15493] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.901815][T15493] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.901838][T15493] netlink_unicast+0x7bb/0x940 [ 323.901861][T15493] netlink_sendmsg+0x813/0xb40 [ 323.901878][T15493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.901893][T15493] ? aa_sock_msg_perm+0xf1/0x1b0 [ 323.901909][T15493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.901922][T15493] sock_sendmsg_nosec+0x13a/0x180 [ 323.901940][T15493] ____sys_sendmsg+0x54e/0x850 [ 323.901967][T15493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.901992][T15493] ? import_iovec+0x73/0xa0 [ 323.902013][T15493] ___sys_sendmsg+0x2a5/0x360 [ 323.902034][T15493] ? __lock_acquire+0x683/0x2cf0 [ 323.902054][T15493] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.902076][T15493] ? futex_wait+0x2a2/0x390 [ 323.902102][T15493] ? __fget_files+0x2a/0x420 [ 323.902126][T15493] ? __fget_files+0x3a2/0x420 [ 323.902148][T15493] __x64_sys_sendmsg+0x1b1/0x290 [ 323.902170][T15493] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.902197][T15493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.902213][T15493] do_syscall_64+0x174/0x580 [ 323.902233][T15493] ? trace_irq_disable+0x3b/0x140 [ 323.902251][T15493] ? clear_bhb_loop+0x40/0x90 [ 323.902267][T15493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.902283][T15493] RIP: 0033:0x7ff47639de59 [ 323.902297][T15493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.902311][T15493] RSP: 002b:00007ff477298028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.902327][T15493] RAX: ffffffffffffffda RBX: 00007ff476625fa0 RCX: 00007ff47639de59 [ 323.902339][T15493] RDX: 0000000020000810 RSI: 0000200000000240 RDI: 0000000000000006 [ 323.902349][T15493] RBP: 00007ff476433e6f R08: 0000000000000000 R09: 0000000000000000 [ 323.902358][T15493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.902368][T15493] R13: 00007ff476626038 R14: 00007ff476625fa0 R15: 00007ffcbdff2058 [ 323.902385][T15493] [ 324.413212][T15535] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 324.420522][T15535] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 324.429964][T15493] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 324.430936][T15493] infiniband syz1: Couldn't open port 1 [ 324.445721][T15493] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 324.463131][T15493] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 324.482747][T15493] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 324.513436][T15493] RDS/IB: syz1: added [ 324.521856][T15493] smc: adding ib device syz1 with port count 1 [ 324.530130][T15493] smc: ib device syz1 port 1 has no pnetid [ 324.539899][T15535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2580'. [ 324.556992][ T24] lo speed is unknown, defaulting to 1000 [ 324.566045][T15493] lo speed is unknown, defaulting to 1000 [ 324.579703][T15539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2580'. [ 324.599623][T15534] netlink: 'syz.3.2580': attribute type 29 has an invalid length. [ 324.607499][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'. [ 324.667480][T15493] lo speed is unknown, defaulting to 1000 [ 324.724727][T15493] lo speed is unknown, defaulting to 1000 [ 324.780325][T15493] lo speed is unknown, defaulting to 1000 [ 324.835387][T15493] lo speed is unknown, defaulting to 1000