last executing test programs: 4.324041492s ago: executing program 4 (id=8001): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1000004}]}, 0x64}}, 0x0) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000cc0)={0x420, 0x3f4, 0x201, 0x70bd26, 0x25dfdbfc, {0x17, 0x2, 0x2e, [0x120, 0x3f, 0x9, 0x1, 0x40, 0x2, 0x7, 0x8, 0x3ff, 0x0, 0x1, 0x5d4, 0x1000, 0x3, 0x101, 0x513a, 0x0, 0x1ff, 0xb, 0x1, 0x9, 0x2, 0x6, 0xfff, 0x8, 0x53, 0x10000, 0x4, 0xe1d, 0x8, 0x5, 0x5, 0x100, 0x278000, 0x0, 0x9, 0x5, 0x1, 0xcd1, 0x9, 0x80000001, 0x7, 0x9b9e, 0x8ab, 0x8, 0xfffffff8, 0x7fff, 0xb, 0x6, 0xf83, 0x0, 0xb02, 0x3, 0x2, 0x163, 0xfffffff4, 0x46, 0xba, 0x8, 0x7fffffff, 0x1d, 0x3, 0x2, 0xb], [0x10000000, 0x3, 0x5, 0x9, 0xffffe1ca, 0x5, 0x4f, 0x5, 0x99, 0x400, 0x7, 0x8, 0x5, 0x80, 0x10, 0x2e, 0x10001, 0x8, 0xe, 0x9, 0x8, 0x64ee, 0x9, 0x3, 0x200, 0x7ff, 0x5, 0x265, 0xb70, 0x4, 0x0, 0x7fffffff, 0xfff, 0x8001, 0x100, 0x7fff, 0x5, 0x3ff, 0x9, 0xca7, 0x7, 0x3, 0x0, 0xc974, 0x8, 0x8, 0xf, 0x7, 0xa, 0xd, 0x3423, 0x3, 0x3, 0x2, 0x5, 0x9c73, 0x80000001, 0x9, 0x9, 0x0, 0x8, 0x4, 0x2, 0x7], [0x7, 0x9, 0x10, 0xfff, 0x1c5, 0x3, 0x2, 0x0, 0x8, 0x6, 0x7fff, 0x25f6, 0x0, 0x6, 0x9, 0x1, 0x8, 0x0, 0x31, 0xfffffff8, 0x6, 0xffffff81, 0x2, 0x40, 0x80000001, 0x5, 0x7, 0xfffffff8, 0x800, 0x2, 0x8001, 0xfffffffe, 0xff, 0x2, 0x6, 0x9, 0x6, 0x0, 0x80000001, 0x523f0aea, 0x4, 0x5, 0x4, 0x5, 0x9, 0x6, 0x3, 0x0, 0x2, 0xffffffff, 0x10000, 0x9, 0x7, 0x3, 0x40, 0x8, 0x5ff9, 0x556, 0x1, 0xfffffff8, 0x8, 0x9, 0x1, 0x4], [0xdf9, 0x6, 0x6, 0x4, 0xf0, 0x9, 0x8, 0x0, 0x3d1ee3ce, 0x1, 0x90b, 0x5, 0xfffffffb, 0x3, 0x2f2e, 0x7, 0x100, 0xfffffffe, 0x6, 0x7, 0xa, 0x62e, 0x6680, 0x6, 0x7, 0x4, 0x6, 0x7, 0x800, 0x2, 0x6, 0x6, 0x80000000, 0x6, 0x31, 0x9, 0x4, 0x0, 0x40, 0x2, 0x2, 0x4, 0x1, 0x2, 0x2, 0x800, 0x0, 0x2, 0xba37, 0x5, 0x9, 0x5, 0xffffe27a, 0x500, 0x0, 0x9, 0x5aa, 0x1, 0xffff, 0x0, 0x5, 0x5, 0x0, 0x5]}}, 0x420}, 0x1, 0x0, 0x0, 0x20000050}, 0xc005) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4084) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x11c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0xe4, 0x19, "56fe7d029f86adb0b7cfb76f725c9bde4394574e2283868004de7dfff2569757d4b9aa8b5d8399433b0e2082a7d7ff5f853672c2470665e722e4dcd36f75463ea5fcecf9241d989a32ce2375f39b9722ae40d4b1e88ac9f95aa5c34ac5e80ae99415895f1b71856b64241f8fec7d59d860fa4f6df23a3af68784e1a859447ae08c99a966d7226ff50de3f79dcd6a08ea7b0c0d6937314cb6e50be271309ff2adc6bf34ef99cea80bb3425ddc3b0480a014927a1951410648d779f31b07dec8929419a07aadac6fc75b72b6e10d7559c15868d8bc38e28cf687e1430245d066a7"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0x5, 0x19, "94"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40c0}, 0x20044014) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (rerun: 32) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0x4, 0x4) 4.065681878s ago: executing program 4 (id=8005): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1f, 0x4}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f00000001c0)=0x10, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000047, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$packet(0x11, 0x2, 0x300) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.748995793s ago: executing program 1 (id=8008): r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0xfffffff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000140)={0x0, 0x400000000, 0x4, 0x1}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60ff00f50020060020010000000000000000000000000002fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0100000ad07009290780000e1eb633c00000000"], 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000540)={r2, 0x3, 0x1, [0x8000000000000000, 0xfffffffffffffff9, 0xb3, 0x3, 0x9], [0x0, 0x6, 0x4, 0x9, 0x2, 0x3, 0x6, 0x9, 0x9, 0xe, 0x1, 0x6, 0x4ad, 0xd1d, 0x4c, 0x1, 0x0, 0x3, 0x7, 0x8, 0x5f7, 0x4, 0xee52, 0x672, 0x0, 0x5, 0xffffffffffffff4e, 0x7, 0x9, 0x100000001, 0x3, 0x53, 0x2dc, 0x200, 0x8, 0x9, 0xffffffffffffffff, 0x9, 0xf39d, 0x1, 0xffffffffffffffff, 0x7, 0x8, 0x8001, 0x688, 0x0, 0x9, 0x101, 0xfffffffffffffffd, 0xfff, 0x8, 0xffff, 0x4f7, 0x2, 0x1b72000000000000, 0x800, 0x8, 0x3, 0xffffffffffff0001, 0x0, 0x7, 0x19, 0x192, 0xfdd, 0x0, 0x627d, 0x2, 0x0, 0x0, 0x4, 0xe2, 0x7862ae83, 0x2, 0x9, 0x5, 0x8000000000000000, 0xfffffffffffffffe, 0x3, 0x9, 0x5, 0x9, 0xff, 0x5, 0x9, 0x8000000000000001, 0xe, 0x9, 0x3, 0x9, 0x367c, 0x1a, 0x5, 0x1, 0x8001, 0x6, 0x6, 0x80000001, 0xd, 0x2, 0x9, 0x7, 0x7, 0xb, 0x2a8, 0xcc1, 0x8, 0x7, 0x1, 0x6, 0x277b, 0x2d, 0x2, 0x65, 0xffffffffffffffff, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x9, 0x0, 0x800, 0xb83c, 0xe53]}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000980)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) 3.574956974s ago: executing program 1 (id=8010): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a30"], 0x118}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a30"], 0x118}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (async) 3.270588173s ago: executing program 2 (id=8012): r0 = socket$netlink(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r2 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) (async, rerun: 64) sendto$packet(r1, &(0x7f0000000000)="5787be5613746bae635a4a769749191a9dd57b879e63c8e15668f87bf1905998207d8e932477c04c32237fff2bc486d23f3dd7c13c522a976bd2ba8096fd332972de19c1be1f1a95a38578d8010c58b483c0929b5d6908c4ddd1986dfcf899ef4e715d55561749f7f23d540b087eed959e264895016b3468221b3c83835fefd18423f5c10a9c703f55b2f51f1f8f699a133fbdf9140358dadbf2cfc9a83638d1b366", 0xa2, 0x80, &(0x7f00000000c0)={0x11, 0x1a, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (rerun: 64) 3.179702536s ago: executing program 2 (id=8013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x11}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) 3.102337571s ago: executing program 2 (id=8014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0x2) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xc, 0x4, 0x6, 0x9, 0x0, r3, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206050000c709c13a000000000000000000000005000100070000000900020073797a30000000000c000780080006000000000011000300686173683a6e65742c6e65740000000005000500020000000504040000000000ba27e8a6d05ae4a5d371c18be85306abb2c68e66924545a6000ad22d1b8eea4324a8525b7fce0847a8efc28129d9d7be2c9771820c281bfe4e3d6865f3d814e828c7b346ee5a5a71f1303abb73ce1400f15a6f7c55f047a6835a8b5c19c83e448c96242120ac72014e5d8f0b8cc31068e52f17ac25dff90c728a8630c9761e8756742cce8c76a0c54cdaeb1ab51cdd68f9"], 0x58}}, 0x0) 2.980373635s ago: executing program 2 (id=8015): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x40000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) listen(r3, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x240, 0x0, 0xffffffff, 0x240, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @multicast2, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="00000000800b000101000080653236b12208f603376d046d151eb00aa7000000000000000c7d48730e94453729b5a07329ae2aba88ce4b0053e567f8daeaed58e9ff3b1581329351e7f9fa0a5f8f12156766d7fc0093a1866fe5ccbf160e000000000000ac0000"], 0x3c}}, 0x0) (async) epoll_create1(0x0) 1.216232441s ago: executing program 0 (id=8018): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) accept4$unix(r0, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x40800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180), 0x4) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x17, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0) 1.21484583s ago: executing program 1 (id=8019): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "8000"}]}}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="4780d8506416"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.212953071s ago: executing program 2 (id=8020): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty}, 0x1b) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a0101000000000000efff000000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001010b000100657874686472000024000280080001400000000c0800034000000000080004400000002d0500020007000000380001800c000100626974000014080002400000001208000640000000010400058008000340000000010900010073797a3000000000140000001100010000000000000000000700000a"], 0x10c}}, 0x0) 1.201171725s ago: executing program 3 (id=8021): r0 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000c80)=0xe3, 0x4) (async) connect$caif(r0, &(0x7f0000000cc0), 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) 995.036203ms ago: executing program 4 (id=8022): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYBLOB="dabec2b59b79d1f0de2361ffb0d1dd2a2be47d108d3390bb63f81a5f4fa62a3a87eb7a5523ee92bb9fdb4aa5a116de16666a3cde6d099bf470fd8f47af93cb797b3e97cf018cd8df08d5dd114fccee1eb773bbe58781090bab55587a4a4545f9cce349a11f78dd4ca7befcafa150da22b087859c1931477518a3f6c80ede97625075240b5ab15d59c53a385e0eb11e58dc287e2f8f45ad21c423f94964242108ce4abcd2d7f9ff68fd8edff94906783f8c7a492df99f80b80d47a5f6e2ff65e19f0f07a002a3bf7afc627f61918f111143b4b7", @ANYRES8=r0], 0x21c}, 0x1, 0x0, 0x0, 0x3eb5d12ca906555e}, 0x0) 994.26223ms ago: executing program 3 (id=8023): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000a00)={r2}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) accept(r0, &(0x7f0000000040)=@caif, &(0x7f00000000c0)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080018"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 991.851272ms ago: executing program 1 (id=8024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x54, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x3, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7fff, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010180000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 981.621719ms ago: executing program 4 (id=8025): socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000080)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) ioctl(r1, 0x8b22, &(0x7f0000000040)) syz_emit_ethernet(0xbe, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x37, 0xb0, 0x4040, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010110}, {0x4e27, 0x88be, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "a6d93b31e00b0512a1e0f37ade9fdb9a856f58707a4d33770989b1ca4d7fecca", "346d771aa7cb7404bd72e230fe54b3c9d699d47f70f26576657a6365522123e0b65ceb1d64100797b9364cf68ce8c9ac", "c025fc84ff898bbae7eb9848ed0eda679066ad10c891b19976e86ab3", {"ce687455bb08e863903726358a160720", "edecdc03df136ddb0bdb5a790d09306b"}}}}}}}, 0x0) 900.058249ms ago: executing program 0 (id=8026): r0 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/114, 0x72}, {&(0x7f0000000080)=""/204, 0xcc}, {&(0x7f0000000180)=""/23, 0x17}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/243, 0xf3}], 0x5, 0x100, 0x7) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x4, 0x5, 0x78, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7856, 0xfffff3c6, 0x3}}) sendmsg$kcm(r1, &(0x7f0000001b40)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r2, 0x2}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000500)="9ad434ed805d23011f834f153d50ec9be90dd7e4f9be9a6ad113b4d0c6f9bb0bc242a29327f072faa3ad72c485cdd978c845eb6e6be96e90746f135cb5fa6ca28917063afeee85e5ac0674054182c336e4af17742125508d7cfbe8cdb163778eaea4163ccf078bf4d32ecb053563419fe4f344ad8aa308244307f2cb2707da50f31455f1de51776b6bfd746d0e54e79aa7259f2c3b924e53f381a198bacd1e1b3f28ea085459bdca88b5623fe4565d10bdc99ccf4aea3bf836d659071f551a08642ba7c66a362229adeb3cf0e94a080bbd8e7c00169277f2c3abc3080999a2d65a9c99d1dcdf03e07189d27bc8a736c7d808d0c51a", 0xf5}, {&(0x7f0000000600)="bf4561c3f661bb8df15f0764e4b27f4f3081ef62e71e4a1745c0454b7752573611f4fdbc9a04ad056ec2b91fdd9108796d731d7a3c397e3bb9a8286d63500b178cb6f613820fa029642368315e9e1240ec8edecb456e4202", 0x58}, {&(0x7f0000000680)="14ee95e56e14bedab7907cd76a482ff1fddeac32c3a20e4676cf748ddb93be14a96a83d0a823c4a848029b25561c5a02d32257b5d6eb986580475d74181bae672fd961a09f6d1cfab37281d25667046db682ea0f644be6b1725b25e2f6d39ae83194c94567611b3951e082a630f777d51a211c03102732721114452e6bf219109eeafb36da05a0d5663f31baf15c5950faa97a393c62fd60175233d0665968ba92d72473e2a6c49b06163ca0e1a6530173ae4d9cbb954741613a611a8d92745a0884af0a135658d8eea7dbd1", 0xcc}, {&(0x7f0000000780)="9df2978bce7d6076de0bb71147a450004ecacc6397e418363aa2ccf3e86801ea3610b8b33e118d8bfcc40200755b0502a358fe35fe95b6d7283cc1d363ddd64c154d71119605f164d418087d18c0782014ebbb791703d756df0d708a80501d36523b9add7d735695892d16db14ed9b08c96dbd91e82a46fff41a7ab300fe3021e8661e5f474da5e1213c3536b7b6057e788fdcd2788b6034b363d6d2b3919ae9d6b83820be19962d216eb521228b243c245fbe2a40471819fe9a19ee96227f470befef6166a1d7790ee3bb26cb6117fb858b8df8ce2cbd03961ae4714e108e44710feb95eefc9709037f5d734d5eaa42234b5eea45d292", 0xf7}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="b2bb5b2cc7", 0x5}], 0x6, &(0x7f0000001940)=[{0xb8, 0x103, 0x5, "5e8c0d4a09d6b94acf985f9daaa397f94aa7b500edd0c964f28676ca4f4b1db6adc2e8fc495081764bd3c06f789e9d83b4576ea39f1b4347907a528dc4927e6236436983643e6f03daf5d6a503c7373dce81e0420049257ca32077e5e92e96d8fae9a802391446874d5b0539192ceb9edc1de978d138ee6cce6ccf5e03aae76fb0a40eef859af4c52ad353c65aa23566ad878943fc1ed75300024568046b79e669279c7e528af8"}, {0x108, 0x112, 0x2, "547ab2384a6960e5c8f25221870023b70d7cde50a011b959a69f7d0ead2e5747fb70e064b17c20c136ffb7a4bb0f795369649abd3a4ba6c9959c12b9c45bdf46adfe3ffcba77f9275d9fef21a1b9440cc3b218a4d360c812bd247b35822346d7b3d8c89014c9aead00b7abfda9fe20bcef93d08c1452bab465db7974d42982121fc8c0b36eb20b3cf0e315674966f2ba835ab33d6378c56e9ec811df3bb5bd96a757294b6c1c379e68dd81d4fcf310978e4adac7e417b332ece68d7f1e768ec955bca9f85fab6625fbcaae7b9878272a782ce548d50efa7ccfb8a8c5373c8222fe4bdcdc7d2ab50d74d02394edba5e0ededbeecb290aba"}, {0x38, 0x110, 0x8, "95d38a674977054695fb39077224309d25c41b3dccc365c390e10ad91cad26127d1140c1d9"}], 0x1f8}, 0x0) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000001b80)={{0x3, @null}, [@bcast, @null, @default, @rose, @rose, @default, @bcast, @rose]}, &(0x7f0000001c00)=0x48) r4 = accept4$netrom(r3, 0x0, &(0x7f0000001c40), 0x80000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d40)={'syztnl2\x00', &(0x7f0000001cc0)={'syztnl0\x00', r2, 0x29, 0x4, 0x7b, 0x81, 0x21, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x0, 0x2, 0x7}}) getsockopt$inet6_mreq(r5, 0x29, 0xe04ad0470300eccf, &(0x7f0000001d80)={@private1, 0x0}, &(0x7f0000001dc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001e00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001e40)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e80)={0x220, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002240)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r10, &(0x7f0000002380)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x44, r11, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r15, &(0x7f00000025c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002400)={0x178, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x80, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffff8000}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffff8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xb7d7}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'dvmrp1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}]}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x40000080) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002600)={'wlan0\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002640), 0x4) socket$kcm(0x29, 0x5, 0x0) r16 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r16, 0x400448c9, &(0x7f0000002680)={@any, 0x7}) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r9, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r18 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002840)={&(0x7f0000002740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xa, [@var={0xd, 0x0, 0x0, 0xe, 0x3}, @ptr={0x2}, @enum64={0x9, 0x1, 0x0, 0x13, 0x1, 0x3, [{0xb, 0x200, 0x9}]}, @float={0x1, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x2e, 0x5f, 0x0, 0x0, 0x5f, 0x0, 0x5f, 0x30]}}, &(0x7f00000027c0)=""/78, 0x62, 0x4e, 0x1, 0x5fd9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000002880)=@base={0x17, 0x3, 0x800, 0x7, 0x0, r17, 0x1, '\x00', 0x0, r18, 0x2, 0x3, 0x1}, 0x50) 891.097166ms ago: executing program 3 (id=8027): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61106c000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x4b}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b'], 0x40}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x1, '%'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000212012001c00128009000100626f6e64000000000c0002800800070000000400"], 0x3c}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) r3 = socket(0x11, 0xa, 0x10000) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/ipc\x00') r9 = getpid() sendmsg$nl_route_sched(r2, &(0x7f0000001200)={&(0x7f0000000f80), 0xc, &(0x7f00000011c0)={&(0x7f0000001280)=@deltaction={0x200, 0x31, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd33}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5652}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x44000}, 0x8) sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r9, r6}}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r10 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000001240), r3) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21008000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_NEWNSID={0x54, 0x58, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8, 0x3, r10}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r11}, @NETNSA_NSID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000004}, 0x24044840) 820.084712ms ago: executing program 4 (id=8028): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8400000000000000}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000002c0)={0x70, 0x22, '\x00', [@generic={0xb}, @generic={0x0, 0xee, "76e30d82c0cecfd055fd7d2bc6985488e239a38c3d2076b13faeea1d774439ce683b88607ff0b6f4b1efa56ad00fb26d0ab2d42da055c6e90cf6f481adcb95c29a90ad35762537abe8aa0d2dc5aa893bc54acb5c9b0383056d4e694817ef4bf28b883e10f0b01e5ba08199acbf3c80bd025304d1c70b283d36f5073b91fd2a7f271bf6ba8827ae6122fcb81f24c992cd63bd0e976443b521dd52758d62f37af9b6b88cf5b2356e1cfa7b4c51eca6f62fd62b3f8b1926acfe867403d475d00195c1580a5c8c29e2a1fccde079c6ef95fb247a9f62f2ffa4ed356927ac8635e38c43a73e429eacf931cf54bffa705f"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x120) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x7}]}, 0x28}}, 0x0) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) 776.18964ms ago: executing program 1 (id=8029): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), 0x0, 0x200000000000, 0x40}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r6, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/8, 0x8}}, 0x10) (async) socket$packet(0x11, 0x3, 0x300) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r7, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x40089413, &(0x7f0000000380)=0x5) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000001540)={0xffff, {{0xa, 0x0, 0x20, @mcast1={0xff, 0x7}, 0x200}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) (async) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000001500)={{r12}, 0x0, 0x5544, 0x3}) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061118c000000000006000400000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r5}, 0x94) 775.727913ms ago: executing program 0 (id=8030): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) 665.961697ms ago: executing program 4 (id=8031): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r0, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"b4f9007dc576bd8bc8630b3267c21ee3", 0x0, r2, {0x8000000000000000, 0x1ff}, {0xc8f, 0x1}, 0x4, [0x8001, 0x5d6, 0xffff, 0x9, 0xe5, 0x3f8f, 0x400, 0x5, 0xffffffffffffff05, 0x8000, 0x1000, 0x9, 0x8, 0x1, 0x8d25, 0x9]}) recvmmsg$unix(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/177, 0xb1}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/217, 0xd9}], 0x9, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000001a40)=@abs, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/135, 0x87}], 0x2, &(0x7f0000002bc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000002d40)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002dc0)=""/180, 0xb4}, {&(0x7f0000002e80)=""/201, 0xc9}, {&(0x7f0000002f80)=""/105, 0x69}], 0x3, &(0x7f0000003040)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003080)=""/84, 0x54}, {&(0x7f0000003100)=""/186, 0xba}, {&(0x7f00000031c0)=""/12, 0xc}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x4, &(0x7f0000004240)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x4, 0x40000000, 0x0) 437.574049ms ago: executing program 0 (id=8032): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x44}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0xa, 0x0, 0x0, @str=':\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/206}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "3179d9e61c13ac3ca362399c92b70912fad6d1c954679e6f", "3fc2182bbc17496c1993823639b1e0e94ab78bd56da08bd2473616c6810e0c37"}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x16}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4881}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000003c0)={{r2}, 0x3, &(0x7f00000001c0)=[0x1, 0x2, 0x57], 0x7, 0x8}) 368.216406ms ago: executing program 3 (id=8033): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1ac, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9c25}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x82ec}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x2786}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1fe3}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}]}, 0x1ac}}, 0x4010) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={&(0x7f0000000640)=@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x401}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000800)="906100c3362c66920274118d01a836562ad5f6781bf0e1e74c4585d55e07aeb2b8a7a5ca8f16508abc475c038cfa4fa487aeae1d051059a48563a50fc0c7b5e6df43acb06ef880d1686610b9282c916e2fbe0d9ea24d24086c464c610ca441c537df5a2a56fa8382c531a983331caac7cf74bdaf63211f28649ecb504fae3dc79a1df4346c4a89a1eab4ed7fa9d63af5a65fcd2b5139f8440ddba61337affb82ec20a081ae55def6f718ca5ea4f23598a590f592095c", 0xb6}, {&(0x7f00000008c0)="da0d9108b53451da267e56bdaa6bbd132fe248dd5b4388e7dffa48cb7ab08594d71dd5a594ad2bcc2196b6140ba3f9057735d4eebf5a5cc5d966b3050dabcb99e0d401c1badc47d3ab1d46d7303b3f53f738e671c54ebf4e0217d30da6fcc3c7ade65c9dda64eafbc4a9d570ef3039ebe4500d16824b91bf095254f3d7cdabd85a46ae7aa31771c798c89afcfe3b4242db25c62974a84efc3284377c02bfda1042343aaefd14add47dc735966e20ac76f284b6097c3c7f25587d4082d4", 0xbd}, {&(0x7f00000009c0)="e8b0e2752bfb84c3a3358c57c9e45148e70bf12b1ca89178ff7c8dd694af0943ba81607939b7b492bdf03b454639d93a42ba104818b8a6bbdc8fad69a0ef6a8979b5757ab19ffea460d35c9e8a6ff46da6453bf36cd5149cd58d8a9bcf8533de4ee8f277802eef44c91032ed7a63747be5dee7d2c0179b75d45ed0b6f5c1238be398f8d6ad0e205e3fe686cae2c788091e252d6c668eebe6bd818fa54ed402b91d0b072f2704ddeaccc2cfa90ed36e617a4dcc78d53f3e5e8b6017405e1517faa2524af758ecc178cc985ad479652dacc83b0dbdad5b1a56280b95894ecf250c2047acd2fb2a38b0fdf5bb", 0xeb}], 0x3}, 0x8000) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691", 0x8}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c950011822", 0xbd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48", 0x37}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab095", 0x9a}, {0x0}, {&(0x7f00000021c0)="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", 0x1be}], 0x4}}], 0x2, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x73c3bfc5edc560a0, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x73c3bfc5edc560a0, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@float={0x10, 0x0, 0x0, 0x10, 0x10}, @ptr={0xf, 0x0, 0x0, 0x2, 0x3}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x5f, 0x5f, 0x51, 0x61, 0x0, 0x5f]}}, &(0x7f00000004c0)=""/145, 0x50, 0x91, 0x0, 0x6, 0x10000, @value=r0}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@float={0x10, 0x0, 0x0, 0x10, 0x10}, @ptr={0xf, 0x0, 0x0, 0x2, 0x3}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x5f, 0x5f, 0x51, 0x61, 0x0, 0x5f]}}, &(0x7f00000004c0)=""/145, 0x50, 0x91, 0x0, 0x6, 0x10000, @value=r0}, 0x28) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f00000005c0)={0x0, {0x1, 0x6, 0x50b, 0x5}}) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f00000005c0)={0x0, {0x1, 0x6, 0x50b, 0x5}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0xe, r0}, 0x94) 279.457425ms ago: executing program 0 (id=8034): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffe7b, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x4c, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x0, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xf}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'nat\x00'}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 253.992398ms ago: executing program 2 (id=8035): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}]}, 0x48}}, 0x20000000) 200.464207ms ago: executing program 1 (id=8036): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) 195.960244ms ago: executing program 3 (id=8037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) listen(r0, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd60158fff00140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200009078ff6fe75c23c4b4b63099574925412930c7163a67a39598476b53bb1c2c28de00b846808a51e586a1add08ecd0c217a83b086ad456770787259fb2eec1bb6a4268180a601"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000001c0), 0x49) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006c0001"], 0x18}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaa2aaaaaaaaaaaa005007089b6586dd60000000001a0600fe8000000000000000000000000000bbfe80002000"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="502000009078000061efff01cbbf"], 0x0) 98.413512ms ago: executing program 0 (id=8038): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x20004086) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000520099b100fc00000000000100000000bdbc08ef50ab864ab4a08e1cc10200ef28bff62add3e9c2df8e8d4ec599df1"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x80000001, 0x96c, 0xcfe, 0x4}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000c8f605"], 0x7) 0s ago: executing program 3 (id=8039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c000000250001012dbd7000fcffffff548e00000800030047"], 0x6c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) r2 = gettid() sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc0000004000010026bd7000fedbdf251c00000008005a00", @ANYRES32=r2, @ANYBLOB="d3ca61bafe0600ea1287769f53af50718efda91d6e318d29d20523e4c117b894d77f1e84c0c74a733d09b8f7bb9fca4615fb455e3401ce2b3981c033d5dedbe51e445a69e208c64136464dfc0cecc116b36e08a4f030d1437b26e951acc20fd42b4bc130cccf793cfa859fca570f8e3143c3391f067c46df84545675ea77aad6dba0fb0cdbbf6132293494ea0a003600776c616e310000000800150009000000"], 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x30000000) socket$key(0xf, 0x3, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x400}) kernel console output (not intermixed with test programs): _dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 680.069711][T29297] bond1 (unregistering): Released all slaves [ 680.215174][T28926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.294579][T28926] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.332485][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.339740][ T6679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.381673][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.388919][ T6679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.637757][T29328] nbd4: detected capacity change from 0 to 63 [ 680.660622][ T5841] block nbd4: Receive control failed (result -32) [ 680.686298][T29209] block nbd4: Dead connection, failed to find a fallback [ 680.737906][T29209] block nbd4: shutting down sockets [ 680.765164][T29209] blk_print_req_error: 138 callbacks suppressed [ 680.765185][T29209] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.783717][T29209] buffer_io_error: 138 callbacks suppressed [ 680.783734][T29209] Buffer I/O error on dev nbd4, logical block 0, async page read [ 680.829391][T29209] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.847560][T29209] Buffer I/O error on dev nbd4, logical block 1, async page read [ 680.864040][T29209] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.902394][T29209] Buffer I/O error on dev nbd4, logical block 2, async page read [ 680.912286][T29338] IPVS: Scheduler module ip_vs_sip not found [ 680.938294][T29209] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.988794][T29209] Buffer I/O error on dev nbd4, logical block 3, async page read [ 681.011709][T29209] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 681.031606][T29209] Buffer I/O error on dev nbd4, logical block 0, async page read [ 681.049980][T29209] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 681.077500][T29209] Buffer I/O error on dev nbd4, logical block 1, async page read [ 681.105824][T29209] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 681.129696][T29209] Buffer I/O error on dev nbd4, logical block 2, async page read [ 681.154750][T29209] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 681.175430][T29359] __nla_validate_parse: 2 callbacks suppressed [ 681.175452][T29359] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6200'. [ 681.197692][T29209] Buffer I/O error on dev nbd4, logical block 3, async page read [ 681.215618][T29209] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 681.238801][T29209] Buffer I/O error on dev nbd4, logical block 0, async page read [ 681.246765][T29209] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 681.301960][T29209] Buffer I/O error on dev nbd4, logical block 1, async page read [ 681.320376][T29209] ldm_validate_partition_table(): Disk read failed. [ 681.343275][T29365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6202'. [ 681.349909][T29209] Dev nbd4: unable to read RDB block 0 [ 681.373377][T29369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6202'. [ 681.373824][T28926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.392431][T29209] nbd4: unable to read partition table [ 681.424662][T29209] ldm_validate_partition_table(): Disk read failed. [ 681.440659][T29209] Dev nbd4: unable to read RDB block 0 [ 681.457161][T29209] nbd4: unable to read partition table [ 681.468162][T29365] vxcan2: entered allmulticast mode [ 681.504045][T29369] vxcan2: entered allmulticast mode [ 681.532147][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058faac00: rx timeout, send abort [ 681.540826][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058faac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 681.716677][T29382] "syz.3.6204" (29382) uses obsolete ecb(arc4) skcipher [ 681.728895][T29384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6204'. [ 681.747002][T28926] veth0_vlan: entered promiscuous mode [ 681.800830][T28926] veth1_vlan: entered promiscuous mode [ 681.905556][T29392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6206'. [ 681.930106][T29393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6206'. [ 681.963044][T28926] veth0_macvtap: entered promiscuous mode [ 682.052436][T29400] bond11 (unregistering): Released all slaves [ 682.113648][T29405] IPVS: Scheduler module ip_vs_sip not found [ 682.135552][T28926] veth1_macvtap: entered promiscuous mode [ 682.157710][T28926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.169818][T28926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.259138][ T6676] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.285677][ T6676] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.338811][ T6676] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.366764][ T6676] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.398531][T29411] syzkaller0: entered promiscuous mode [ 682.405123][T29411] syzkaller0: entered allmulticast mode [ 682.570024][ T6676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.584447][ T6676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.691618][ T6676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.700201][ T6676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.708713][ T6679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.793210][T29436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6217'. [ 682.809316][T29436] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6217'. [ 682.820004][T29436] nbd: must specify at least one socket [ 682.888787][T29442] "syz.4.6218" (29442) uses obsolete ecb(arc4) skcipher [ 683.168193][T29465] openvswitch: netlink: EtherType 50a is less than min 600 [ 683.195765][T29464] syzkaller1: entered promiscuous mode [ 683.227087][T29464] syzkaller1: entered allmulticast mode [ 683.286307][T29464] syzkaller0: entered promiscuous mode [ 683.307178][T29464] syzkaller0: entered allmulticast mode [ 683.354917][T29474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.452492][T29478] xt_hashlimit: size too large, truncated to 1048576 [ 683.611253][T29463] ip6_vti0 speed is unknown, defaulting to 1000 [ 686.034583][T29451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.172982][T29518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6227'. [ 686.208167][T29518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6227'. [ 686.228968][T29518] netlink: 'syz.0.6227': attribute type 14 has an invalid length. [ 686.327763][T29525] netlink: 'syz.2.6231': attribute type 1 has an invalid length. [ 686.335743][T29525] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6231'. [ 686.348168][T29525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6231'. [ 686.428995][T29541] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6233'. [ 686.725779][T29555] syzkaller0: entered promiscuous mode [ 686.750685][T29559] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 686.754245][T29555] syzkaller0: entered allmulticast mode [ 686.802581][T29557] syzkaller0: entered promiscuous mode [ 686.808770][T29557] syzkaller0: entered allmulticast mode [ 686.833668][T29557] gtp0: entered promiscuous mode [ 686.840942][T29557] gtp0: entered allmulticast mode [ 686.929952][T29557] tipc: Resetting bearer [ 686.948814][ T5932] syz1: Port: 1 Link ACTIVE [ 686.980028][T29568] netlink: 'syz.1.6241': attribute type 7 has an invalid length. [ 687.148806][T29576] netlink: 'syz.4.6246': attribute type 5 has an invalid length. [ 687.446901][T29594] netlink: 'syz.3.6252': attribute type 4 has an invalid length. [ 687.603824][T29606] sit0: entered promiscuous mode [ 687.613608][T29606] netlink: 'syz.3.6256': attribute type 1 has an invalid length. [ 687.628836][T29606] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6256'. [ 687.641670][T29608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6255'. [ 687.828414][T15643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.973726][T29631] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 688.076461][T29640] openvswitch: netlink: Key type 220 is out of range max 32 [ 688.088025][T29641] openvswitch: netlink: Key type 220 is out of range max 32 [ 688.224461][T29647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6266'. [ 688.429696][T29638] syzkaller0: entered promiscuous mode [ 688.458426][T29638] syzkaller0: entered allmulticast mode [ 688.602372][T29668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6270'. [ 688.756433][T29674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6269'. [ 690.589584][T29702] netlink: 'syz.2.6275': attribute type 1 has an invalid length. [ 690.739804][T29708] netlink: 'syz.4.6277': attribute type 3 has an invalid length. [ 690.750345][T29708] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6277'. [ 690.830901][T29713] netlink: 'syz.1.6279': attribute type 11 has an invalid length. [ 691.242969][T29734] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 691.407411][T29743] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6287'. [ 691.848674][T29762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.212931][ T5147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 692.235269][ T5147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 692.237735][T29781] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004 [ 692.249338][ T5147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 692.260220][ T5147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 692.270964][ T5147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 692.548826][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 693.089893][T29777] ip6_vti0 speed is unknown, defaulting to 1000 [ 693.208179][T29821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6306'. [ 693.247850][T29827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6305'. [ 693.462811][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.492232][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.514239][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46577 - 0 [ 693.594614][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.744375][T29842] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6311'. [ 693.774896][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.785387][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.799680][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46577 - 0 [ 693.855123][T29849] netlink: 'syz.4.6314': attribute type 7 has an invalid length. [ 693.870010][T29849] netlink: 'syz.4.6314': attribute type 28 has an invalid length. [ 693.913915][T29849] netlink: 'syz.4.6314': attribute type 7 has an invalid length. [ 693.922895][T29849] netlink: 'syz.4.6314': attribute type 28 has an invalid length. [ 693.949360][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.968358][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.988603][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46577 - 0 [ 694.084019][T29853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.165820][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.196441][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.211158][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46577 - 0 [ 694.308908][ T5841] Bluetooth: hci5: command tx timeout [ 694.373379][T29777] chnl_net:caif_netlink_parms(): no params data found [ 694.439714][T29878] x_tables: duplicate underflow at hook 1 [ 694.464057][ T6679] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.531985][T15643] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.541459][T29885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6324'. [ 694.551159][T29878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6321'. [ 694.561814][T29878] tc_dump_action: action bad kind [ 694.579823][T15643] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.588916][T15643] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.711662][T29883] syzkaller0: left promiscuous mode [ 694.732823][T29883] syzkaller0: left allmulticast mode [ 694.901492][ T50] bridge_slave_1: left promiscuous mode [ 694.921272][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.931908][T29904] netlink: 'syz.4.6328': attribute type 21 has an invalid length. [ 694.950121][ T50] bridge_slave_0: left allmulticast mode [ 694.955875][ T50] bridge_slave_0: left promiscuous mode [ 694.982522][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.022266][ T50] tipc: Resetting bearer [ 695.066630][T29914] xt_l2tp: missing protocol rule (udp|l2tpip) [ 695.187042][T29919] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6333'. [ 695.436539][ T50] bond7 (unregistering): (slave gretap1): Releasing active interface [ 695.541851][ T50] bond4 (unregistering): (slave geneve2): Releasing active interface [ 695.804225][ T50] tipc: Disabling bearer [ 696.017025][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.030316][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.042131][ T50] bond0 (unregistering): Released all slaves [ 696.053956][ T50] bond1 (unregistering): Released all slaves [ 696.175899][ T50] bond2 (unregistering): Released all slaves [ 696.286208][ T50] bond3 (unregistering): Released all slaves [ 696.392722][ T50] bond4 (unregistering): Released all slaves [ 696.397840][ T5841] Bluetooth: hci5: command tx timeout [ 696.504656][ T50] bond5 (unregistering): Released all slaves [ 696.519221][ T50] bond6 (unregistering): Released all slaves [ 696.533104][ T50] bond7 (unregistering): Released all slaves [ 696.561612][T29777] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.569296][T29777] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.576534][T29777] bridge_slave_0: entered allmulticast mode [ 696.585812][T29777] bridge_slave_0: entered promiscuous mode [ 696.595566][T29777] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.603109][T29777] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.610930][T29777] bridge_slave_1: entered allmulticast mode [ 696.619121][T29777] bridge_slave_1: entered promiscuous mode [ 696.762611][T29777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.813930][T29925] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 696.834701][T29777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.848460][T29929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6336'. [ 696.851145][T29925] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6335'. [ 696.916752][T29934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6337'. [ 696.944369][ T50] tipc: Disabling bearer [ 696.957604][ T50] tipc: Left network mode [ 697.036431][T29777] team0: Port device team_slave_0 added [ 697.100385][T29777] team0: Port device team_slave_1 added [ 697.329744][T29955] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6342'. [ 697.346659][T29777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.358841][T29957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.368075][T29777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.422309][T29777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.475515][T29964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6346'. [ 697.539962][T29777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.555042][T29777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.672645][T29777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.757828][T29975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6349'. [ 697.780264][T29975] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6349'. [ 697.803679][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6350'. [ 697.839481][T29983] netlink: 'syz.0.6351': attribute type 1 has an invalid length. [ 697.869221][T29983] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6351'. [ 697.890838][T29983] netlink: 658 bytes leftover after parsing attributes in process `syz.0.6351'. [ 697.921368][T29777] hsr_slave_0: entered promiscuous mode [ 697.932172][T29777] hsr_slave_1: entered promiscuous mode [ 697.941316][T29777] debugfs: 'hsr0' already exists in 'hsr' [ 697.947100][T29777] Cannot create hsr debugfs directory [ 698.200290][T30000] netlink: 'syz.0.6356': attribute type 39 has an invalid length. [ 698.445519][T30008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.481561][ T5841] Bluetooth: hci5: command tx timeout [ 698.585984][T30019] netlink: 'syz.1.6360': attribute type 1 has an invalid length. [ 698.618703][T30008] macsec1: entered promiscuous mode [ 698.695701][T30021] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 698.706993][T30021] bond1 (unregistering): Released all slaves [ 698.750474][T30019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 699.348034][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.589372][T30060] bridge8: entered promiscuous mode [ 699.594742][T30060] bridge8: entered allmulticast mode [ 699.668486][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.697537][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.719324][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.741441][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.815115][T30074] netlink: 'syz.4.6375': attribute type 11 has an invalid length. [ 700.023075][ T50] vlan0: left allmulticast mode [ 700.028416][ T50] veth0_vlan: left allmulticast mode [ 700.033926][ T50] vlan0: left promiscuous mode [ 700.039621][ T50] veth1_macvtap: left promiscuous mode [ 700.046978][ T50] veth0_macvtap: left promiscuous mode [ 700.054360][ T50] veth1_vlan: left promiscuous mode [ 700.061556][ T50] veth0_vlan: left promiscuous mode [ 700.551609][ T5841] Bluetooth: hci5: command tx timeout [ 703.607200][ T50] team0 (unregistering): Port device team_slave_1 removed [ 703.653619][ T50] team0 (unregistering): Port device team_slave_0 removed [ 704.261809][T30092] netlink: 'syz.4.6377': attribute type 1 has an invalid length. [ 704.309045][T30093] netlink: 'syz.4.6377': attribute type 1 has an invalid length. [ 704.436289][T30109] netlink: 'syz.0.6382': attribute type 32 has an invalid length. [ 704.457415][T30109] __nla_validate_parse: 10 callbacks suppressed [ 704.457434][T30109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6382'. [ 704.588730][T30109] bond1: option coupled_control: invalid value (52) [ 704.598920][T30109] bond1 (unregistering): Released all slaves [ 704.784349][T30127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6389'. [ 704.948682][T30136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6388'. [ 704.980786][T29777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 705.065231][T29777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 705.099349][T29777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 705.114114][T15643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.135622][ T50] IPVS: stop unused estimator thread 0... [ 705.158589][T29777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 705.283629][T30156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.621324][T29777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.765131][T29777] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.859209][T30181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6399'. [ 705.903551][ T6676] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.910962][ T6676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.980404][ T6676] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.987673][ T6676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.389610][T30217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6407'. [ 706.422528][T30221] syzkaller0: entered promiscuous mode [ 706.452416][T30221] syzkaller0: entered allmulticast mode [ 706.520707][T30214] openvswitch: netlink: Key type 220 is out of range max 32 [ 706.592617][T30214] netlink: 'syz.4.6406': attribute type 21 has an invalid length. [ 706.618571][T30214] IPv6: NLM_F_CREATE should be specified when creating new route [ 706.890004][T29777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.249006][T29777] veth0_vlan: entered promiscuous mode [ 707.282290][T29777] veth1_vlan: entered promiscuous mode [ 707.444892][T29777] veth0_macvtap: entered promiscuous mode [ 707.529860][T29777] veth1_macvtap: entered promiscuous mode [ 707.595532][T29777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.647872][T29777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.732357][T15643] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.768661][T30290] vlan2: entered promiscuous mode [ 707.781291][T30290] vlan2: entered allmulticast mode [ 707.786492][T30290] hsr_slave_1: entered allmulticast mode [ 707.824672][T15643] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.859893][T15643] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.917264][T15643] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.067005][T30303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6426'. [ 708.105313][T15640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.127779][T30253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6415'. [ 708.140446][T15640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.295674][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.331918][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.352105][T30312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6428'. [ 708.560042][T30324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6429'. [ 708.962983][T30342] tipc: Started in network mode [ 708.991065][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 708.992498][T30342] tipc: Node identity de84b4632a31, cluster identity 4711 [ 709.010195][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 709.018789][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 709.029918][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 709.042272][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 709.053870][T30349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.082624][T30342] tipc: Enabled bearer , priority 0 [ 709.264503][T30353] syzkaller0: entered promiscuous mode [ 709.279425][T30353] syzkaller0: entered allmulticast mode [ 709.299109][T30353] tipc: Resetting bearer [ 709.540876][T15640] tipc: Resetting bearer [ 709.565842][T30340] tipc: Resetting bearer [ 710.798027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.879600][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.109748][ T5841] Bluetooth: hci0: command tx timeout [ 711.244424][T30340] tipc: Disabling bearer [ 711.373285][T30375] veth3: entered promiscuous mode [ 711.383266][T30375] veth3: entered allmulticast mode [ 711.397580][ T40] tipc: Node number set to 4105548899 [ 711.723182][T30399] netem: change failed [ 711.806554][T30402] Unsupported ieee802154 address type: 0 [ 711.861138][T30343] ip6_vti0 speed is unknown, defaulting to 1000 [ 711.941475][T30409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6449'. [ 711.964156][T30410] netlink: 'syz.1.6448': attribute type 29 has an invalid length. [ 711.974396][T30410] netem: incorrect ge model size [ 711.980013][T30410] netem: change failed [ 712.010376][T30410] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6448'. [ 712.208844][T30423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6454'. [ 712.238098][T30429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6454'. [ 712.320863][T30433] netlink: 'syz.3.6456': attribute type 2 has an invalid length. [ 712.463443][T30440] netlink: 'syz.0.6458': attribute type 11 has an invalid length. [ 712.478837][T30440] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6458'. [ 712.502327][T30433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6456'. [ 712.833373][T30343] chnl_net:caif_netlink_parms(): no params data found [ 713.169962][T30343] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.187392][ T5841] Bluetooth: hci0: command tx timeout [ 713.196793][T30343] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.213413][T30343] bridge_slave_0: entered allmulticast mode [ 713.229564][T30343] bridge_slave_0: entered promiscuous mode [ 713.240652][T30343] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.248176][T30343] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.256842][T30343] bridge_slave_1: entered allmulticast mode [ 713.279714][T30343] bridge_slave_1: entered promiscuous mode [ 713.489678][T30343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.535046][T30343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.625185][T30497] netlink: 'syz.2.6471': attribute type 6 has an invalid length. [ 713.880145][T30513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6475'. [ 713.923249][T30343] team0: Port device team_slave_0 added [ 713.945754][T30343] team0: Port device team_slave_1 added [ 714.019708][T30466] lec:lec_atm_close: lec0: Shut down! [ 714.115920][T30343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.162784][T30343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.203606][T30343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.322944][T30343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.347426][T30343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.408012][T30343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.569472][T30545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 714.596308][T30343] hsr_slave_0: entered promiscuous mode [ 714.632746][T30343] hsr_slave_1: entered promiscuous mode [ 714.646842][T30343] debugfs: 'hsr0' already exists in 'hsr' [ 714.669275][T30343] Cannot create hsr debugfs directory [ 714.860500][T30562] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 2, id = 0 [ 714.960068][T30568] tipc: Enabling of bearer rejected, failed to enable media [ 715.109900][ T5841] block nbd6: Receive control failed (result -32) [ 715.119571][ T984] lec:lec_start_xmit: lec0:No lecd attached [ 715.136324][T30573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6486'. [ 715.218909][T30577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6487'. [ 715.234242][T30343] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.247832][T30343] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 715.267815][ T5841] Bluetooth: hci0: command tx timeout [ 715.342843][T30579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6488'. [ 715.391721][T30579] IPVS: persistence engine module ip_vs_pe_À not found [ 715.391944][T30343] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.412405][T30343] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 715.572099][T30343] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.601240][T30343] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 715.774173][T30343] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.821822][T30343] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 716.196531][T30589] ip6_vti0 speed is unknown, defaulting to 1000 [ 716.364877][T30343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 716.416886][T30343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 716.463818][T30343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 716.478886][T30630] netlink: 'syz.3.6500': attribute type 11 has an invalid length. [ 716.514774][T30343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 716.637724][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.692929][T30641] rdma_op ffff888040af71f0 conn xmit_rdma 0000000000000000 [ 716.916679][T30343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.163493][T30343] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.175006][T30656] netlink: 'syz.3.6506': attribute type 4 has an invalid length. [ 717.204549][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.211802][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.283469][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.290710][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.347681][ T5841] Bluetooth: hci0: command tx timeout [ 717.470982][T30671] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 717.485425][T30343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 717.525523][ T984] IPVS: starting estimator thread 0... [ 717.651793][T30676] IPVS: using max 28 ests per chain, 67200 per kthread [ 717.935399][ T5932] IPVS: starting estimator thread 0... [ 717.980146][T30697] syzkaller0: entered promiscuous mode [ 717.985797][T30697] syzkaller0: entered allmulticast mode [ 718.005445][T30343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.031086][T30697] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 718.068044][T30698] IPVS: using max 26 ests per chain, 62400 per kthread [ 718.333865][T30714] x_tables: duplicate underflow at hook 2 [ 718.441330][T30343] veth0_vlan: entered promiscuous mode [ 718.459480][T30716] Bluetooth: MGMT ver 1.23 [ 718.465487][T30343] veth1_vlan: entered promiscuous mode [ 718.515536][T30343] veth0_macvtap: entered promiscuous mode [ 718.530546][T30343] veth1_macvtap: entered promiscuous mode [ 718.590164][T30716] __nla_validate_parse: 4 callbacks suppressed [ 718.590185][T30716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6521'. [ 718.607518][T30716] batman_adv: batadv0: Interface deactivated: dummy0 [ 718.659638][T30716] batman_adv: batadv0: Removing interface: dummy0 [ 718.698696][T30343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 718.734706][T30343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 718.833728][ T6679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.888056][ T6679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.898646][ T6679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.915179][ T6679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.063242][T15643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.090426][T15643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.204779][T15643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.221489][T15643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.263578][T30737] netlink: 'syz.1.6529': attribute type 21 has an invalid length. [ 719.285431][T30737] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6529'. [ 719.682243][T30764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6535'. [ 719.698247][T30764] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6535'. [ 719.721681][T30764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6535'. [ 720.014926][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 720.024763][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 720.035089][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 720.061973][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 720.083549][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 720.127569][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 720.136111][ C1] lec:lec_tx_timeout: lec0 [ 720.140789][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 720.557982][ T5147] Bluetooth: hci0: command tx timeout [ 720.804797][T30805] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 720.814892][T30812] netlink: 'syz.0.6545': attribute type 1 has an invalid length. [ 721.132751][T30771] ip6_vti0 speed is unknown, defaulting to 1000 [ 721.751731][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.900088][T30862] netlink: 'syz.3.6556': attribute type 1 has an invalid length. [ 721.955308][T30862] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 721.960636][T30859] Unknown metaid 0 dlen 28 [ 722.148707][ T5147] Bluetooth: hci1: command tx timeout [ 722.263585][T30888] syzkaller0: entered promiscuous mode [ 722.296394][T30888] syzkaller0: entered allmulticast mode [ 722.516846][T30903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6561'. [ 722.615975][T30911] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 722.655277][T30911] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 722.692270][T30771] chnl_net:caif_netlink_parms(): no params data found [ 722.919689][T30771] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.929443][T30771] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.936707][T30771] bridge_slave_0: entered allmulticast mode [ 722.944505][T30771] bridge_slave_0: entered promiscuous mode [ 722.950090][T30875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.960812][T30771] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.014815][T30771] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.057898][T30771] bridge_slave_1: entered allmulticast mode [ 723.072678][T30771] bridge_slave_1: entered promiscuous mode [ 723.111967][T30931] netlink: 'syz.4.6567': attribute type 21 has an invalid length. [ 723.121798][T30931] IPv6: NLM_F_CREATE should be specified when creating new route [ 723.130087][T30931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 723.137404][T30931] IPv6: NLM_F_CREATE should be set when creating new route [ 723.144716][T30931] IPv6: NLM_F_CREATE should be set when creating new route [ 723.152093][T30931] IPv6: NLM_F_CREATE should be set when creating new route [ 723.226392][T30934] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:19999 [ 723.239362][T30771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.276078][T30771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.356620][T30942] ipt_REJECT: TCP_RESET invalid for non-tcp [ 723.400904][T30771] team0: Port device team_slave_0 added [ 723.425454][T30771] team0: Port device team_slave_1 added [ 723.493662][T30771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.501407][T30771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.546802][T30771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.582038][T30946] openvswitch: netlink: Message has 93 unknown bytes. [ 723.596080][T30946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.606793][T30771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.624491][T30771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.652742][T30771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.673626][T30951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6570'. [ 723.842801][T30960] xt_hashlimit: size too large, truncated to 1048576 [ 723.853887][T30955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6574'. [ 724.054108][T30771] hsr_slave_0: entered promiscuous mode [ 724.070515][T30771] hsr_slave_1: entered promiscuous mode [ 724.088340][T30771] debugfs: 'hsr0' already exists in 'hsr' [ 724.105439][T30771] Cannot create hsr debugfs directory [ 724.228779][ T5147] Bluetooth: hci1: command tx timeout [ 724.429911][T30974] tipc: Enabling of bearer rejected, failed to enable media [ 724.820168][T30771] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.853819][T30771] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 724.879263][T30771] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 725.010614][T30771] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.030991][T30771] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 725.061108][T30771] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 725.147548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 725.155654][ C1] lec:lec_tx_timeout: lec0 [ 725.160635][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 725.179890][T30771] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.205507][T30771] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 725.219135][T30771] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 725.307037][T30771] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.335330][T30771] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 725.350244][T30771] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 725.368704][T31033] IPv6: NLM_F_CREATE should be specified when creating new route [ 725.653037][T30771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 725.697358][T30771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 725.744255][T30771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 725.838907][T30771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 726.136235][T30771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.203544][T30771] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.215073][T31078] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6605'. [ 726.240042][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.247465][ T6679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.280866][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.288134][ T6679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.310620][ T5147] Bluetooth: hci1: command tx timeout [ 726.516309][T31087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6607'. [ 726.608326][T31087] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6607'. [ 726.768411][T30771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.884539][T31103] netlink: 'syz.0.6610': attribute type 61 has an invalid length. [ 726.897010][T31103] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6610'. [ 726.959908][T31109] IPv6: sit1: Disabled Multicast RS [ 726.968980][T31109] sit1: entered allmulticast mode [ 727.043596][T30771] veth0_vlan: entered promiscuous mode [ 727.056764][T30771] veth1_vlan: entered promiscuous mode [ 727.126958][T30771] veth0_macvtap: entered promiscuous mode [ 727.139471][T30771] veth1_macvtap: entered promiscuous mode [ 727.165639][T30771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.174265][T31113] netlink: 'syz.4.6613': attribute type 11 has an invalid length. [ 727.182972][T31113] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6613'. [ 727.229418][T30771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.258033][ T6679] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.286512][ T6679] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.301031][ T6679] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.312782][ T6679] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.508843][T15640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.564612][T15643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.584253][T15643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.654301][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.683955][T31135] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 727.696018][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.744569][T31135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6619'. [ 727.919859][T31148] netlink: 'syz.1.6620': attribute type 10 has an invalid length. [ 727.956340][T31148] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 728.032326][T31154] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6622'. [ 728.049993][T31156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6622'. [ 728.238592][T31172] IPVS: stopping backup sync thread 30562 ... [ 728.333321][T31175] : entered promiscuous mode [ 728.364981][T31177] netlink: 'syz.2.6630': attribute type 9 has an invalid length. [ 728.389907][ T5147] Bluetooth: hci1: command tx timeout [ 728.691691][T31204] __nla_validate_parse: 6 callbacks suppressed [ 728.691712][T31204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6633'. [ 728.709018][T31207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6634'. [ 728.993446][T31221] bond0: option ad_select: unable to set because the bond device is up [ 729.075160][T31224] netlink: 'syz.0.6638': attribute type 83 has an invalid length. [ 729.100782][T31226] netlink: 'syz.1.6639': attribute type 21 has an invalid length. [ 729.120471][T31226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6639'. [ 729.137158][T31224] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6638'. [ 729.219683][T31230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6640'. [ 729.277490][T31230] "syz.3.6640" (31230) uses obsolete ecb(arc4) skcipher [ 729.285982][T31230] wg1: entered promiscuous mode [ 729.291061][T31230] wg1: entered allmulticast mode [ 729.356516][T31241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6640'. [ 729.562929][T31248] ip6gre1: entered allmulticast mode [ 729.980625][T31278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6653'. [ 730.139560][T31285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6656'. [ 730.167720][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 730.175984][ C1] lec:lec_tx_timeout: lec0 [ 730.180695][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 731.166237][T31325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6665'. [ 731.199470][T31327] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6667'. [ 731.648030][T31349] syzkaller0: entered promiscuous mode [ 731.653790][T31349] syzkaller0: entered allmulticast mode [ 732.092149][T31369] netlink: 'syz.2.6675': attribute type 1 has an invalid length. [ 732.342922][T31383] xt_l2tp: invalid flags combination: 0 [ 733.273041][ T6679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.687179][T31360] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 733.850228][T31389] netlink: 'syz.0.6678': attribute type 9 has an invalid length. [ 733.932280][T31389] __nla_validate_parse: 3 callbacks suppressed [ 733.932303][T31389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6678'. [ 733.996820][T31395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6682'. [ 734.232608][T31417] sch_fq: defrate 0 ignored. [ 734.265977][T31417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6691'. [ 734.593502][T31448] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6701'. [ 734.619118][T31448] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 734.641556][T31454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6700'. [ 734.685739][T31454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6700'. [ 734.713667][T31457] vcan0: tx address claim with dlc 0 [ 734.723374][T31454] netlink: 'syz.3.6700': attribute type 1 has an invalid length. [ 734.740428][T31454] netlink: 'syz.3.6700': attribute type 2 has an invalid length. [ 734.798866][T31462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6704'. [ 734.921848][T31470] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6708'. [ 734.949864][T31475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6709'. [ 734.962304][T31475] l2tp_ppp: sess 2/0: no socket in recv [ 734.973380][T31473] netlink: 'syz.3.6707': attribute type 1 has an invalid length. [ 735.026801][T31473] bond1: entered promiscuous mode [ 735.038314][T31473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.197572][T31494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6714'. [ 735.293162][T31486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.322523][T31502] netlink: 'syz.1.6715': attribute type 2 has an invalid length. [ 735.342313][T31486] netlink: 'syz.0.6711': attribute type 32 has an invalid length. [ 735.502680][T31515] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 736.467238][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6290 ms [ 736.484608][ C1] lec:lec_tx_timeout: lec0 [ 736.490541][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 736.629006][T31553] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 737.071529][T31597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.090697][T31598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.495642][T31610] netlink: 'syz.4.6744': attribute type 21 has an invalid length. [ 737.504949][T31610] IPv6: NLM_F_CREATE should be specified when creating new route [ 737.791299][T31628] netlink: 'syz.0.6749': attribute type 1 has an invalid length. [ 737.846451][T31628] bond1: entered promiscuous mode [ 737.852625][T31628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.035756][T31635] netlink: 'syz.0.6750': attribute type 10 has an invalid length. [ 738.314941][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.703138][T31651] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 738.719002][T31651] netlink: 'syz.4.6757': attribute type 1 has an invalid length. [ 738.811561][T31657] bond2: (slave bridge1): making interface the new active one [ 738.821707][T31657] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 738.880885][T31661] openvswitch: netlink: IP tunnel dst address not specified [ 739.012784][T31670] validate_nla: 2 callbacks suppressed [ 739.012804][T31670] netlink: 'syz.1.6760': attribute type 1 has an invalid length. [ 739.362321][T31698] netlink: 'syz.0.6771': attribute type 21 has an invalid length. [ 739.401975][T31700] __nla_validate_parse: 12 callbacks suppressed [ 739.401995][T31700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6772'. [ 739.435884][T31704] netlink: 'syz.3.6774': attribute type 10 has an invalid length. [ 739.456950][T31704] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6774'. [ 739.467739][T31700] netlink: 15978 bytes leftover after parsing attributes in process `syz.1.6772'. [ 739.469210][T31705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.509281][T31700] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6772'. [ 739.732134][T31719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.808581][T31722] xt_socket: unknown flags 0x50 [ 739.994958][T31731] syzkaller0: entered promiscuous mode [ 740.001123][T31731] syzkaller0: entered allmulticast mode [ 740.036095][T31731] tipc: Started in network mode [ 740.046916][T31731] tipc: Node identity 8aa8761a0a2, cluster identity 4711 [ 740.062496][T31731] tipc: Enabled bearer , priority 0 [ 740.090357][T31730] tipc: Resetting bearer [ 740.156779][T31730] tipc: Disabling bearer [ 740.177857][T31735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6782'. [ 740.491747][T31752] sctp: [Deprecated]: syz.4.6786 (pid 31752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.491747][T31752] Use struct sctp_sack_info instead [ 741.044054][T31789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6795'. [ 741.064183][T31789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6795'. [ 741.084156][T31789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6795'. [ 741.240603][T31795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6797'. [ 741.289258][T31807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6798'. [ 741.316774][T31809] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 741.541703][T31816] veth0: entered promiscuous mode [ 741.840909][T31827] team0: Device ip6gre2 is of different type [ 741.974449][T31815] veth0: left promiscuous mode [ 742.140474][T31850] bond0: (slave gre0): Error: Device type is different from other slaves [ 742.227730][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 742.235983][ C1] lec:lec_tx_timeout: lec0 [ 742.242070][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 742.848763][T31895] netlink: 'syz.2.6818': attribute type 1 has an invalid length. [ 742.913684][T31902] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 743.514311][T15643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.584693][T31948] xt_TCPMSS: Only works on TCP SYN packets [ 743.600205][T31948] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 743.652141][T31950] syzkaller0: entered promiscuous mode [ 743.657926][T31950] syzkaller0: entered allmulticast mode [ 743.798845][T31954] block nbd7: server does not support multiple connections per device. [ 743.814158][T31954] block nbd7: shutting down sockets [ 744.316546][T31991] netlink: 'syz.1.6844': attribute type 1 has an invalid length. [ 744.451831][T31998] __nla_validate_parse: 6 callbacks suppressed [ 744.451853][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6846'. [ 744.602998][T32003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6848'. [ 744.651142][T32003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6848'. [ 744.678772][T32009] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 744.700980][T32015] netlink: 808 bytes leftover after parsing attributes in process `syz.3.6852'. [ 744.701008][T32011] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6851'. [ 744.720449][T32011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6851'. [ 744.727896][ T984] IPVS: starting estimator thread 0... [ 744.735208][T32012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6851'. [ 744.829159][T32016] IPVS: using max 38 ests per chain, 91200 per kthread [ 744.954652][T32028] syzkaller0: entered promiscuous mode [ 744.965669][T32028] syzkaller0: entered allmulticast mode [ 745.006178][T32029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6855'. [ 745.016431][T32028] netem: change failed [ 745.026649][T32029] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6855'. [ 745.099363][T32041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6857'. [ 745.291186][T32047] xt_l2tp: v2 doesn't support IP mode [ 745.577176][T32041] bond1: entered promiscuous mode [ 745.585050][T32041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 745.936791][T32060] netlink: 'syz.1.6864': attribute type 1 has an invalid length. [ 746.223179][T32075] syzkaller1: entered promiscuous mode [ 746.239254][T32075] syzkaller1: entered allmulticast mode [ 746.464861][T32094] gretap1: entered promiscuous mode [ 746.479286][T32094] gretap1: entered allmulticast mode [ 746.505340][T32097] netlink: 'syz.1.6877': attribute type 13 has an invalid length. [ 746.985778][T32117] netlink: 'syz.1.6883': attribute type 12 has an invalid length. [ 747.987237][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 747.995351][ C1] lec:lec_tx_timeout: lec0 [ 748.002872][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 748.139604][T32182] can: request_module (can-proto-0) failed. [ 748.139604][T32186] can: request_module (can-proto-0) failed. [ 748.935687][T32228] netlink: 'syz.2.6909': attribute type 1 has an invalid length. [ 748.945962][T32230] netlink: 'syz.4.6907': attribute type 21 has an invalid length. [ 748.964970][T32230] netlink: 'syz.4.6907': attribute type 4 has an invalid length. [ 748.973294][T32228] netlink: 'syz.2.6909': attribute type 3 has an invalid length. [ 748.994047][T32230] netlink: 'syz.4.6907': attribute type 5 has an invalid length. [ 749.046590][T32233] netlink: 'syz.0.6910': attribute type 9 has an invalid length. [ 749.149955][T32239] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 749.692522][T32270] openvswitch: netlink: Flow key attr not present in new flow. [ 749.729301][T32278] __nla_validate_parse: 22 callbacks suppressed [ 749.729325][T32278] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6921'. [ 749.870839][T32284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6923'. [ 749.964968][T32289] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6924'. [ 749.983663][T32289] netlink: 'syz.1.6924': attribute type 1 has an invalid length. [ 750.027816][T32282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6922'. [ 750.082056][T32299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6924'. [ 750.480769][T32322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.579850][T32328] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6937'. [ 750.589104][T32328] netem: invalid attributes len -24 [ 750.594356][T32328] netem: change failed [ 750.717744][T32339] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20000 [ 751.159863][T32365] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6950'. [ 751.174673][T32365] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 751.379146][T32369] xt_ipcomp: unknown flags 1D [ 751.799091][T32400] team0: Device ip6gre1 is of different type [ 751.861239][T32404] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6960'. [ 751.895365][T32405] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6961'. [ 751.931042][T32409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6963'. [ 751.946291][T32410] x_tables: duplicate underflow at hook 3 [ 752.443179][T32442] sit0: Caught tx_queue_len zero misconfig [ 752.490555][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 752.548263][T32447] netlink: 'syz.3.6976': attribute type 1 has an invalid length. [ 753.020847][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 753.028955][ C1] lec:lec_tx_timeout: lec0 [ 753.034036][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 753.434743][T32452] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 753.446525][T32452] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 753.471373][T32452] bond2: (slave xfrm1): making interface the new active one [ 753.480187][T32452] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 753.516933][T32454] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 753.546741][T32454] bond2 (unregistering): Released all slaves [ 753.686204][T32462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.906491][T32468] bond2 (unregistering): Released all slaves [ 754.155769][T32486] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 754.215553][T32486] bond2 (unregistering): Released all slaves [ 754.369674][T32467] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 754.534865][T32489] NFSD: Failed to start, no listeners configured. [ 755.346553][T32558] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 755.353547][T32558] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 755.450033][T32560] ipt_REJECT: ECHOREPLY no longer supported. [ 755.467673][T32563] __nla_validate_parse: 7 callbacks suppressed [ 755.467692][T32563] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7005'. [ 755.605980][T32570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7011'. [ 755.702117][T32578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7009'. [ 755.733461][T32580] siw: device registration error -23 [ 755.838072][T32582] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7013'. [ 755.851444][T32582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7013'. [ 755.862983][T32582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7013'. [ 755.876137][T32584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7014'. [ 756.238319][T32613] netlink: zone id is out of range [ 756.246293][T32615] x_tables: duplicate underflow at hook 1 [ 756.258872][T32613] netlink: zone id is out of range [ 756.278197][T32613] netlink: zone id is out of range [ 756.283471][T32613] netlink: zone id is out of range [ 756.330740][T32613] netlink: zone id is out of range [ 756.338008][T32613] netlink: zone id is out of range [ 756.343573][T32613] netlink: zone id is out of range [ 756.358711][T32613] netlink: zone id is out of range [ 756.383655][T32623] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7024'. [ 756.434308][T32619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7021'. [ 757.014796][T32657] netlink: 'syz.1.7035': attribute type 33 has an invalid length. [ 757.032330][T32657] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7035'. [ 757.170257][T32669] netlink: 'syz.2.7036': attribute type 12 has an invalid length. [ 757.210596][T32662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 757.212537][T32672] xt_socket: unknown flags 0x50 [ 757.237620][T32674] netlink: 'syz.1.7038': attribute type 1 has an invalid length. [ 757.270644][T32669] bond2: option primary_reselect: invalid value (255) [ 757.312214][T32669] bond2 (unregistering): Released all slaves [ 757.375504][T32674] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 757.839951][T32697] veth0: entered promiscuous mode [ 757.924545][T32697] veth0: left promiscuous mode [ 757.984912][T32715] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 758.047237][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 758.055297][ C1] lec:lec_tx_timeout: lec0 [ 758.060234][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 759.162308][ T319] l2tp_ppp: sess 2/0: no socket in recv [ 759.166842][ T321] l2tp_ppp: sess 2/0: no socket in recv [ 759.414444][ T336] netlink: 'syz.0.7062': attribute type 1 has an invalid length. [ 759.958158][ T329] ip6_vti0 speed is unknown, defaulting to 1000 [ 760.859600][ T410] pim6reg1: entered promiscuous mode [ 760.883604][ T410] pim6reg1: entered allmulticast mode [ 761.144492][ T428] __nla_validate_parse: 12 callbacks suppressed [ 761.144514][ T428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7082'. [ 761.324096][ T428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.371952][ T439] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7087'. [ 761.393812][ T439] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7087'. [ 761.405972][ T439] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7087'. [ 761.423967][ T440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7087'. [ 761.434609][ T441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7087'. [ 761.444684][ T428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.458238][ T440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7087'. [ 761.470069][ T441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7087'. [ 761.526510][ T428] bond0 (unregistering): Released all slaves [ 761.652488][ T445] netlink: 'syz.4.7089': attribute type 21 has an invalid length. [ 761.695238][ T445] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7089'. [ 761.738999][ T445] netlink: 'syz.4.7089': attribute type 21 has an invalid length. [ 761.764786][ T454] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7092'. [ 761.784228][ T448] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 761.948182][ T459] rdma_rxe: rxe_newlink: failed to add lo [ 762.200601][ T476] IPv6: NLM_F_CREATE should be specified when creating new route [ 762.560396][ T463] ip6_vti0 speed is unknown, defaulting to 1000 [ 762.631447][ T499] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 762.660427][ T499] netlink: 'syz.3.7105': attribute type 11 has an invalid length. [ 762.713822][ T50] net_ratelimit: 54 callbacks suppressed [ 762.713846][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.796150][ T504] nbd: must specify at least one socket [ 763.067548][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 763.075710][ C1] lec:lec_tx_timeout: lec0 [ 763.080379][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 763.124668][ T512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 763.440768][ T535] netlink: 'syz.3.7113': attribute type 30 has an invalid length. [ 763.506814][ T535] bond2: option arp_missed_max: invalid value (0) [ 763.514550][ T535] bond2: option arp_missed_max: allowed values 1 - 255 [ 763.541789][ T535] bond2 (unregistering): Released all slaves [ 764.746926][ T589] syzkaller0: entered promiscuous mode [ 764.764503][ T589] syzkaller0: entered allmulticast mode [ 764.788343][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 764.882969][ T596] tipc: Failed to remove unknown binding: 66,0,0/0:1007435519/1007435520 [ 764.959568][ T596] tipc: Failed to remove unknown binding: 66,0,0/0:1007435519/1007435520 [ 765.505520][ T629] sctp: [Deprecated]: syz.2.7135 (pid 629) Use of struct sctp_assoc_value in delayed_ack socket option. [ 765.505520][ T629] Use struct sctp_sack_info instead [ 765.532229][ T632] syzkaller0: entered promiscuous mode [ 765.557737][ T632] syzkaller0: entered allmulticast mode [ 766.032418][ T672] netlink: 'syz.0.7146': attribute type 1 has an invalid length. [ 766.152140][ T687] __nla_validate_parse: 11 callbacks suppressed [ 766.152161][ T687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7150'. [ 766.522099][ T701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7155'. [ 766.574063][ T706] pim6reg: entered allmulticast mode [ 766.600935][ T704] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7156'. [ 766.653513][ T704] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7156'. [ 767.229496][ T734] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7164'. [ 767.366607][ T738] geneve2: entered promiscuous mode [ 767.397334][ T738] geneve2: entered allmulticast mode [ 767.419763][ T6677] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 767.431742][ T6677] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 767.443706][ T742] netlink: 'syz.2.7167': attribute type 1 has an invalid length. [ 767.463070][ T6677] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 767.483887][ T6677] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 767.498485][ T741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7168'. [ 767.710020][ T751] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7170'. [ 767.806713][ T767] netlink: 'syz.1.7175': attribute type 1 has an invalid length. [ 767.814888][ T767] netlink: 'syz.1.7175': attribute type 4 has an invalid length. [ 767.824639][ T767] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.7175'. [ 767.837905][ T6679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.920540][ T764] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 767.928203][ T764] syzkaller1: Linktype set failed because interface is up [ 767.948962][ T771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.953721][ T5932] syzkaller1: tun_net_xmit 90 [ 768.018139][ T771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.087288][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 768.095397][ C1] lec:lec_tx_timeout: lec0 [ 768.100225][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 768.354660][ T801] openvswitch: netlink: IPv4 tun info is not correct [ 768.717863][ T822] netlink: 'syz.4.7192': attribute type 1 has an invalid length. [ 768.740005][ T822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7192'. [ 768.770431][ T822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7192'. [ 768.811757][T15640] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.826699][T15640] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.868234][T15640] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.888942][T15640] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.204392][ T854] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 769.216640][ T854] bond3 (unregistering): Released all slaves [ 769.266689][ T851] erspan0: entered promiscuous mode [ 769.288358][ T858] xt_hashlimit: size too large, truncated to 1048576 [ 769.717765][ T891] netlink: 'syz.0.7211': attribute type 1 has an invalid length. [ 769.828725][ T899] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 769.887966][ T904] netlink: 'syz.3.7215': attribute type 3 has an invalid length. [ 769.962018][ T899] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 770.360114][ T936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.666771][ T955] netlink: 'syz.4.7232': attribute type 29 has an invalid length. [ 770.759171][ T971] unsupported nla_type 58 [ 770.794655][ T955] netlink: 'syz.4.7232': attribute type 29 has an invalid length. [ 770.854613][ T972] syzkaller1: entered promiscuous mode [ 770.879931][ T972] syzkaller1: entered allmulticast mode [ 771.081487][ T992] netlink: 'syz.0.7239': attribute type 7 has an invalid length. [ 771.200778][ T998] __nla_validate_parse: 13 callbacks suppressed [ 771.200801][ T998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7241'. [ 771.234727][ T1007] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7243'. [ 771.291218][ T1014] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7245'. [ 771.486945][ T1026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7248'. [ 771.608194][ T1036] netlink: 'syz.2.7251': attribute type 1 has an invalid length. [ 771.770223][ T1046] netlink: 464 bytes leftover after parsing attributes in process `syz.0.7252'. [ 771.960542][ T1062] netlink: 'syz.1.7256': attribute type 11 has an invalid length. [ 771.969981][ T1062] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7256'. [ 772.101066][ T1068] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 772.259265][ T1077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7259'. [ 772.648419][ T1105] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 773.117576][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 773.125712][ C1] lec:lec_tx_timeout: lec0 [ 773.130893][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 773.141953][ T1129] smc: net device wlan0 erased user defined pnetid SYZ0 [ 773.153103][ T1129] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ1 [ 773.445607][ T1126] ksmbd: Unknown IPC event: 3, ignore. [ 773.594344][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.545846][ T1156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7282'. [ 775.714779][ T1169] syzkaller0: entered promiscuous mode [ 775.721721][ T1169] syzkaller0: entered allmulticast mode [ 775.732065][ T1169] 0: reclassify loop, rule prio 0, protocol 700 [ 775.784599][ T1168] netlink: 'syz.0.7286': attribute type 1 has an invalid length. [ 775.855889][ T1168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 775.901426][ T1176] bond2: (slave geneve2): making interface the new active one [ 775.911850][ T1176] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 776.093972][ T1185] netlink: zone id is out of range [ 776.099770][ T1185] netlink: zone id is out of range [ 776.105155][ T1185] netlink: zone id is out of range [ 776.113097][ T1185] netlink: zone id is out of range [ 776.137845][ T1185] netlink: zone id is out of range [ 776.143077][ T1185] netlink: zone id is out of range [ 776.163708][ T1185] netlink: zone id is out of range [ 776.181446][ T1185] netlink: zone id is out of range [ 776.466756][ T1214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7298'. [ 776.485075][ T1214] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 776.526653][ T1208] lo: Caught tx_queue_len zero misconfig [ 776.533264][ T1208] netlink: 'syz.1.7294': attribute type 14 has an invalid length. [ 776.872278][ T1229] nbd: must specify an index to disconnect [ 777.103509][ T1201] udevd[1201]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 777.365213][ T1243] ip6_vti0 speed is unknown, defaulting to 1000 [ 777.389824][ T1260] netlink: 'syz.0.7307': attribute type 12 has an invalid length. [ 777.404760][ T1260] netlink: 'syz.0.7307': attribute type 29 has an invalid length. [ 777.435762][ T1260] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7307'. [ 777.456114][ T1260] netlink: 'syz.0.7307': attribute type 2 has an invalid length. [ 777.464908][ T1262] nbd: couldn't find a device at index 2 [ 777.476699][ T1260] netlink: 23 bytes leftover after parsing attributes in process `syz.0.7307'. [ 777.561666][ T1265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7310'. [ 777.636022][ T1272] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7311'. [ 777.655516][ T1272] gretap0: entered promiscuous mode [ 778.137564][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 778.145657][ C1] lec:lec_tx_timeout: lec0 [ 778.150746][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 778.218804][ T1301] syzkaller1: entered promiscuous mode [ 778.224380][ T1301] syzkaller1: entered allmulticast mode [ 778.253716][ T1306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7320'. [ 778.277423][ T1302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7320'. [ 778.344489][ T1301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7320'. [ 778.475380][ T1317] netlink: 'syz.2.7325': attribute type 1 has an invalid length. [ 778.497634][ T1317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 778.504942][ T1317] IPv6: NLM_F_CREATE should be set when creating new route [ 778.512318][ T1317] IPv6: NLM_F_CREATE should be set when creating new route [ 778.550804][ T1317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 778.691947][ T1325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7328'. [ 778.713373][ T1325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7328'. [ 778.723718][ T1325] netlink: 'syz.1.7328': attribute type 15 has an invalid length. [ 778.822509][T15640] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 778.836768][T15640] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 778.846350][T15640] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 778.880645][T15640] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 779.182926][ T1351] netlink: 'syz.2.7334': attribute type 1 has an invalid length. [ 779.351473][ T6677] net_ratelimit: 53 callbacks suppressed [ 779.351495][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.611145][ T1371] syzkaller0: entered promiscuous mode [ 779.616943][ T1371] syzkaller0: entered allmulticast mode [ 779.815876][ T1384] netlink: 'syz.2.7338': attribute type 1 has an invalid length. [ 779.958208][ T1373] netlink: 'syz.2.7338': attribute type 21 has an invalid length. [ 780.043469][ T1340] ip6_vti0 speed is unknown, defaulting to 1000 [ 780.196619][ T1404] bond2: (slave gretap0): Device is not bonding slave [ 780.205092][ T1404] bond2: option active_slave: invalid value (gretap0) [ 780.217970][ T1404] bond2 (unregistering): Released all slaves [ 780.581724][ T1420] syzkaller0: entered promiscuous mode [ 780.592857][ T1420] syzkaller0: entered allmulticast mode [ 780.667639][ T1430] veth0_macvtap: entered allmulticast mode [ 782.470378][ T5841] Bluetooth: hci1: command 0x0405 tx timeout [ 782.524910][ T1430] macvtap1: entered allmulticast mode [ 782.552170][ T1350] ip6_vti0 speed is unknown, defaulting to 1000 [ 782.655605][ T1442] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 783.035316][ T1454] validate_nla: 1 callbacks suppressed [ 783.035342][ T1454] netlink: 'syz.4.7355': attribute type 4 has an invalid length. [ 783.157255][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 783.165347][ C1] lec:lec_tx_timeout: lec0 [ 783.170587][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 783.464814][ T1486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.739458][ T1505] __nla_validate_parse: 3 callbacks suppressed [ 783.739478][ T1505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7370'. [ 783.893823][ T1513] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 784.010492][ T1510] syzkaller0: entered promiscuous mode [ 784.016035][ T1510] syzkaller0: entered allmulticast mode [ 784.298278][ T1524] veth0_to_team: Caught tx_queue_len zero misconfig [ 784.344735][ T1529] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 784.472741][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.501516][ T1540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7382'. [ 784.770174][ T1537] macvtap1: entered allmulticast mode [ 784.776840][ T1537] veth0_macvtap: entered allmulticast mode [ 785.006609][ T1558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7386'. [ 785.368402][ T1579] netlink: 'syz.4.7392': attribute type 30 has an invalid length. [ 785.435323][ T1575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 785.445401][ T1585] tipc: New replicast peer: 255.255.255.255 [ 785.453182][ T1585] tipc: Enabled bearer , priority 10 [ 785.482816][ T1592] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7394'. [ 785.525112][ T1579] bond3: option arp_missed_max: invalid value (0) [ 785.532110][ T1579] bond3: option arp_missed_max: allowed values 1 - 255 [ 785.542031][ T1579] bond3 (unregistering): Released all slaves [ 785.551573][ T1598] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.7394'. [ 785.596569][ T1600] rdma_rxe: rxe_newlink: failed to add bond0 [ 785.716792][ T1595] bond_slave_0: entered promiscuous mode [ 785.723120][ T1595] bond_slave_1: entered promiscuous mode [ 785.804702][ T1595] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 785.842492][ T1595] bond2: (slave macvlan2): making interface the new active one [ 785.856130][ T1595] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 786.362989][ T1640] netem: incorrect gi model size [ 786.510071][ T1650] netlink: 'syz.3.7407': attribute type 1 has an invalid length. [ 786.531440][ T1650] netlink: 'syz.3.7407': attribute type 2 has an invalid length. [ 786.786791][ T1671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7413'. [ 786.820927][ T1671] hsr_slave_0: left promiscuous mode [ 787.169783][ T1696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7419'. [ 787.298527][ T1702] netlink: 'syz.1.7422': attribute type 1 has an invalid length. [ 787.352952][ T1706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7423'. [ 787.382883][ T1702] 8021q: adding VLAN 0 to HW filter on device bond3 [ 787.394421][ T1706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7423'. [ 787.524121][ T1702] syzkaller0: entered promiscuous mode [ 787.530570][ T1702] syzkaller0: entered allmulticast mode [ 787.545492][ T1715] tipc: Enabling of bearer rejected, failed to enable media [ 787.712901][ T1726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7427'. [ 787.846039][ T1739] netlink: 'syz.3.7430': attribute type 1 has an invalid length. [ 788.950534][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 788.958619][ C1] lec:lec_tx_timeout: lec0 [ 788.963328][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 789.728430][ T1752] netlink: 'syz.4.7435': attribute type 10 has an invalid length. [ 789.736310][ T1752] __nla_validate_parse: 4 callbacks suppressed [ 789.736326][ T1752] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7435'. [ 790.227643][ T6677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.469949][ T1795] netlink: 'syz.2.7443': attribute type 12 has an invalid length. [ 790.524467][ T1803] netlink: 'syz.2.7443': attribute type 9 has an invalid length. [ 790.677295][ T1809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7448'. [ 790.796092][ T1817] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7450'. [ 790.833097][ T1824] x_tables: duplicate underflow at hook 1 [ 791.196462][ T1807] ip6_vti0 speed is unknown, defaulting to 1000 [ 791.501184][ T3530] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.554943][ T3530] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.598979][ T3530] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.627622][ T3530] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.736814][ T1863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7463'. [ 791.755885][ T1866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7464'. [ 791.791642][ T1866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7464'. [ 791.875719][ T1869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7465'. [ 791.974704][ T1872] netlink: 'syz.3.7464': attribute type 2 has an invalid length. [ 791.983590][ T1873] netlink: 'syz.4.7465': attribute type 4 has an invalid length. [ 792.038020][ T1875] bond3: Unable to set down delay as MII monitoring is disabled [ 792.048597][ T1875] bond3 (unregistering): Released all slaves [ 792.103893][ T1873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.665121][ T1918] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7478'. [ 792.897836][ T1939] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.7477'. [ 792.922581][ T1939] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 793.987479][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 793.995607][ C1] lec:lec_tx_timeout: lec0 [ 794.001055][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 795.357980][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.490375][ T1903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.721679][ T1953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7488'. [ 795.759826][ T1961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7490'. [ 795.823456][ T1955] tipc: Enabled bearer , priority 0 [ 795.921926][ T1971] netlink: 'syz.1.7487': attribute type 2 has an invalid length. [ 795.951676][ T1971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7487'. [ 795.992171][ T1955] syzkaller0: entered promiscuous mode [ 796.000762][ T1955] syzkaller0: entered allmulticast mode [ 796.006513][ T1971] netlink: 'syz.1.7487': attribute type 2 has an invalid length. [ 796.015815][ T1955] tipc: Resetting bearer [ 796.025405][ T1971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7487'. [ 796.101789][ T1982] netlink: 'syz.0.7496': attribute type 61 has an invalid length. [ 796.118664][ T1954] tipc: Resetting bearer [ 796.186442][ T1988] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7499'. [ 796.197155][ T1989] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7499'. [ 796.237836][ T1988] warn_alloc: 1 callbacks suppressed [ 796.237856][ T1988] syz.4.7499: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 796.280453][ T1993] xt_socket: unknown flags 0x50 [ 796.302517][ T1988] CPU: 0 UID: 0 PID: 1988 Comm: syz.4.7499 Not tainted syzkaller #0 PREEMPT(full) [ 796.302546][ T1988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 796.302560][ T1988] Call Trace: [ 796.302569][ T1988] [ 796.302579][ T1988] dump_stack_lvl+0xe8/0x150 [ 796.302613][ T1988] warn_alloc+0x249/0x340 [ 796.302637][ T1988] ? stack_trace_save+0xa9/0x100 [ 796.302668][ T1988] ? __pfx_warn_alloc+0x10/0x10 [ 796.302698][ T1988] ? kasan_save_track+0x4f/0x80 [ 796.302717][ T1988] ? kasan_save_track+0x3e/0x80 [ 796.302734][ T1988] ? __kasan_kmalloc+0x93/0xb0 [ 796.302753][ T1988] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 796.302773][ T1988] ? xskq_create+0x56/0x170 [ 796.302792][ T1988] ? xsk_setsockopt+0x54c/0x990 [ 796.302820][ T1988] ? do_sock_setsockopt+0x17c/0x1b0 [ 796.302844][ T1988] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 796.302868][ T1988] ? do_syscall_64+0xe2/0xf80 [ 796.302895][ T1988] __vmalloc_node_range_noprof+0x132/0x1730 [ 796.302952][ T1988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 796.302983][ T1988] ? __kasan_kmalloc+0x93/0xb0 [ 796.303011][ T1988] vmalloc_user_noprof+0xad/0xe0 [ 796.303039][ T1988] ? xskq_create+0xbf/0x170 [ 796.303060][ T1988] xskq_create+0xbf/0x170 [ 796.303085][ T1988] xsk_init_queue+0xad/0x110 [ 796.303120][ T1988] xsk_setsockopt+0x54c/0x990 [ 796.303156][ T1988] ? __pfx_xsk_setsockopt+0x10/0x10 [ 796.303188][ T1988] ? __pfx_aa_sk_perm+0x10/0x10 [ 796.303217][ T1988] ? aa_sock_opt_perm+0xff/0x1a0 [ 796.303247][ T1988] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 796.303271][ T1988] ? __pfx_xsk_setsockopt+0x10/0x10 [ 796.303313][ T1988] do_sock_setsockopt+0x17c/0x1b0 [ 796.303347][ T1988] __x64_sys_setsockopt+0x13d/0x1b0 [ 796.303381][ T1988] do_syscall_64+0xe2/0xf80 [ 796.303404][ T1988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.303425][ T1988] ? trace_irq_disable+0x37/0x100 [ 796.303446][ T1988] ? clear_bhb_loop+0x60/0xb0 [ 796.303472][ T1988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.303493][ T1988] RIP: 0033:0x7fd45e79af79 [ 796.303513][ T1988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.303532][ T1988] RSP: 002b:00007fd45f715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 796.303556][ T1988] RAX: ffffffffffffffda RBX: 00007fd45ea15fa0 RCX: 00007fd45e79af79 [ 796.303571][ T1988] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 796.303585][ T1988] RBP: 00007fd45e8316e0 R08: 0000000000000004 R09: 0000000000000000 [ 796.303599][ T1988] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.303612][ T1988] R13: 00007fd45ea16038 R14: 00007fd45ea15fa0 R15: 00007ffebdd09d28 [ 796.303648][ T1988] [ 796.583373][ T1988] Mem-Info: [ 796.586541][ T1988] active_anon:7712 inactive_anon:0 isolated_anon:0 [ 796.586541][ T1988] active_file:2501 inactive_file:40577 isolated_file:0 [ 796.586541][ T1988] unevictable:768 dirty:37 writeback:0 [ 796.586541][ T1988] slab_reclaimable:12536 slab_unreclaimable:125415 [ 796.586541][ T1988] mapped:29281 shmem:1382 pagetables:1324 [ 796.586541][ T1988] sec_pagetables:0 bounce:0 [ 796.586541][ T1988] kernel_misc_reclaimable:0 [ 796.586541][ T1988] free:1288564 free_pcp:12195 free_cma:0 [ 796.632264][ T1988] Node 0 active_anon:30848kB inactive_anon:0kB active_file:10004kB inactive_file:162108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117124kB dirty:148kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13348kB pagetables:5136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 796.665215][ T1988] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 796.696308][ T1988] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.727400][ T1988] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 796.733249][ T1988] Node 0 DMA32 free:1248632kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30848kB inactive_anon:0kB active_file:10004kB inactive_file:162108kB unevictable:1536kB writepending:148kB zspages:0kB present:3129332kB managed:2554120kB mlocked:0kB bounce:0kB free_pcp:31392kB local_pcp:20780kB free_cma:0kB [ 796.767360][ T1988] lowmem_reserve[]: 0 0 1 1 1 [ 796.772147][ T1988] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 796.802681][ T1988] lowmem_reserve[]: 0 0 0 0 0 [ 796.807754][ T1988] Node 1 Normal free:3889752kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17704kB local_pcp:7640kB free_cma:0kB [ 796.841457][ T1988] lowmem_reserve[]: 0 0 0 0 0 [ 796.846242][ T1988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 796.859179][ T1988] Node 0 DMA32: 10258*4kB (UM) 7456*8kB (UME) 3977*16kB (UME) 143*32kB (M) 109*64kB (UM) 463*128kB (UME) 454*256kB (UM) 282*512kB (UM) 187*1024kB (UME) 82*2048kB (UM) 96*4096kB (UM) = 1248376kB [ 796.884126][ T1988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 796.896071][ T1988] Node 1 Normal: 160*4kB (UE) 43*8kB (UME) 36*16kB (UME) 96*32kB (UME) 35*64kB (UME) 7*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3889752kB [ 796.915422][ T1988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.926420][ T1988] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 796.939221][ T1988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 796.949421][ T1988] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 796.962142][ T1988] 44456 total pagecache pages [ 796.966873][ T1988] 0 pages in swap cache [ 796.971543][ T1988] Free swap = 124996kB [ 796.976062][ T1988] Total swap = 124996kB [ 796.980557][ T1988] 2097051 pages RAM [ 796.984493][ T1988] 0 pages HighMem/MovableOnly [ 796.989612][ T1988] 426623 pages reserved [ 796.993808][ T1988] 0 pages cma reserved [ 798.586469][ T1954] tipc: Disabling bearer [ 798.616882][ T5932] tipc: Node number set to 2156426778 [ 798.753748][ T2008] openvswitch: netlink: IPv6 tunnel dst address is zero [ 798.758777][ T1999] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7500'. [ 798.786000][ T2008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7501'. [ 798.824066][ T2008] netlink: 'syz.0.7501': attribute type 23 has an invalid length. [ 798.874752][ T2014] sock: sock_timestamping_bind_phc: sock not bind to device [ 798.935568][ T2019] netlink: 'syz.2.7506': attribute type 21 has an invalid length. [ 798.967510][ T2019] netlink: 'syz.2.7506': attribute type 22 has an invalid length. [ 798.975393][ T2019] netlink: 'syz.2.7506': attribute type 23 has an invalid length. [ 798.985425][ T2019] netlink: 'syz.2.7506': attribute type 25 has an invalid length. [ 798.994219][ T2019] netlink: 'syz.2.7506': attribute type 26 has an invalid length. [ 799.002581][ T2019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7506'. [ 799.012229][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 799.012316][ C1] lec:lec_tx_timeout: lec0 [ 799.021209][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 799.038499][ T2020] netlink: 'syz.2.7506': attribute type 21 has an invalid length. [ 799.046770][ T2020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7506'. [ 799.144207][ T2029] dvmrp0: entered allmulticast mode [ 799.280398][ T2039] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 800.471395][T15640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.871340][ T2136] __nla_validate_parse: 11 callbacks suppressed [ 800.871364][ T2136] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7538'. [ 800.923367][ T2136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7538'. [ 800.990919][ T2132] syzkaller0: entered promiscuous mode [ 800.996472][ T2132] syzkaller0: entered allmulticast mode [ 801.002903][ T2140] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 801.094563][ T2140] bridge_slave_0: left promiscuous mode [ 801.106599][ T2140] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.115793][ T2144] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7540'. [ 801.126370][ T2148] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7541'. [ 801.150712][ T2140] bridge_slave_1: left allmulticast mode [ 801.159241][ T2140] bridge_slave_1: left promiscuous mode [ 801.164988][ T2144] openvswitch: netlink: Flow actions attr not present in new flow. [ 801.165805][ T2140] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.191364][ T2140] bond0: (slave bond_slave_0): Releasing backup interface [ 801.216637][ T2140] bond0: (slave bond_slave_1): Releasing backup interface [ 801.249227][ T2140] team0: Port device team_slave_0 removed [ 801.282357][ T2140] team0: Port device team_slave_1 removed [ 801.299767][ T2140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.310492][ T2140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.322329][ T2140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.330659][ T2140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.341628][ T2140] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 803.144284][ T2151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7542'. [ 803.664889][ T2190] ipvlan2: entered allmulticast mode [ 803.686686][ T2190] batadv_slave_1: entered allmulticast mode [ 803.711681][ T2190] batman_adv: batadv0: Adding interface: ipvlan2 [ 803.728624][ T2190] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.818126][ T2190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.859043][ T2190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.870227][ T2190] batman_adv: batadv0: Interface activated: ipvlan2 [ 804.037781][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 804.045928][ C1] lec:lec_tx_timeout: lec0 [ 804.051107][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 804.154997][ T2216] validate_nla: 6 callbacks suppressed [ 804.155020][ T2216] netlink: 'syz.4.7558': attribute type 1 has an invalid length. [ 804.177677][ T2221] netlink: 'syz.2.7559': attribute type 4 has an invalid length. [ 804.198226][ T2216] netlink: 'syz.4.7558': attribute type 1 has an invalid length. [ 804.237626][ T2221] netlink: 'syz.2.7559': attribute type 4 has an invalid length. [ 804.341067][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.349958][ T2221] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.357297][ T2221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.406585][ T2222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 804.441448][ T2226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 804.790081][ T2255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7561'. [ 804.792410][ T2245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7563'. [ 804.804646][ T2256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7565'. [ 804.819793][ T2245] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 804.849723][ T2245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7563'. [ 804.895895][ T2256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7565'. [ 805.180027][ T2230] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 805.202770][ T2230] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 805.284443][ T2230] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 805.297511][ T2230] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 805.308823][ T2278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.322962][ T2276] netlink: 'syz.4.7571': attribute type 8 has an invalid length. [ 805.375591][ T2283] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 805.412171][ T2230] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 805.444980][ T2230] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 805.524115][ T2291] tipc: Started in network mode [ 805.538733][ T2291] tipc: Node identity ac1414aa, cluster identity 4711 [ 805.549825][ T2291] tipc: Enabled bearer , priority 10 [ 805.588177][T15640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.688305][ T2230] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 805.694284][ T2230] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 805.940603][ T2230] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 805.951807][ T2230] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 805.982224][ T2309] bond4 (unregistering): Released all slaves [ 806.369921][ T2341] netlink: 'syz.2.7584': attribute type 1 has an invalid length. [ 806.391044][ T2336] ksmbd: Unknown IPC event: 3, ignore. [ 806.445165][ T2336] __nla_validate_parse: 1 callbacks suppressed [ 806.445188][ T2336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7582'. [ 806.626418][ T2356] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 806.652207][ T2356] bond2: option mode: unable to set because the bond device has slaves [ 806.662846][ T2357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7587'. [ 806.673141][ T984] tipc: Node number set to 2886997162 [ 806.770155][ T2356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7588'. [ 806.810702][ T2367] tipc: Started in network mode [ 806.832591][ T2367] tipc: Node identity 96daff4b49e5, cluster identity 2 [ 806.850623][ T2367] tipc: Enabled bearer , priority 0 [ 806.869330][ T2372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7591'. [ 806.992192][ T2366] tipc: Disabling bearer [ 807.241539][ T2392] netlink: 'syz.0.7596': attribute type 2 has an invalid length. [ 807.250206][ T2392] netlink: 119 bytes leftover after parsing attributes in process `syz.0.7596'. [ 807.359267][ T2402] syzkaller1: entered promiscuous mode [ 807.369223][ T2402] syzkaller1: entered allmulticast mode [ 807.475845][ T2411] Cannot find add_set index 2 as target [ 807.501215][ T2411] Cannot find add_set index 2 as target [ 807.799072][ T2438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 807.902907][ T2442] tipc: Enabling of bearer rejected, failed to enable media [ 808.102321][ T2459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7609'. [ 808.472981][ T2476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7613'. [ 808.828185][ T2505] nbd: must specify at least one socket [ 808.907146][ T2515] netlink: 'syz.2.7620': attribute type 3 has an invalid length. [ 808.984914][ T2518] netlink: 'syz.4.7621': attribute type 1 has an invalid length. [ 808.994929][ T2518] netlink: 596 bytes leftover after parsing attributes in process `syz.4.7621'. [ 809.014107][ T2521] netlink: 'syz.4.7621': attribute type 1 has an invalid length. [ 809.067501][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 809.075597][ C1] lec:lec_tx_timeout: lec0 [ 809.081412][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 809.282696][ T2545] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7626'. [ 809.496310][ T2561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7631'. [ 810.340385][ T2609] 8021q: VLANs not supported on gre0 [ 810.351154][ T2610] 8021q: VLANs not supported on gre0 [ 810.498913][ T2625] nbd: must specify at least one socket [ 810.943919][ T2658] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 811.348195][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.595327][ T2716] ip6t_srh: unknown srh match flags 5F28 [ 811.607846][ T2716] __nla_validate_parse: 5 callbacks suppressed [ 811.607864][ T2716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7667'. [ 811.642200][ T2716] netlink: 'syz.4.7667': attribute type 21 has an invalid length. [ 811.659135][ T2716] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7667'. [ 811.679861][ T2716] netlink: 'syz.4.7667': attribute type 4 has an invalid length. [ 811.702268][ T2716] netlink: 'syz.4.7667': attribute type 5 has an invalid length. [ 811.723540][ T2716] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7667'. [ 811.741635][ T2724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 811.757700][ T2725] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7669'. [ 811.766805][ T2716] netlink: 'syz.4.7667': attribute type 21 has an invalid length. [ 811.777429][ T2716] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7667'. [ 811.788439][ T2725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7669'. [ 811.797764][ T2716] netlink: 'syz.4.7667': attribute type 4 has an invalid length. [ 811.819012][ T2716] netlink: 'syz.4.7667': attribute type 5 has an invalid length. [ 811.840623][ T2716] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7667'. [ 812.097063][ T2741] syzkaller0: entered promiscuous mode [ 812.102919][ T2741] syzkaller0: entered allmulticast mode [ 812.112277][ T2742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7672'. [ 812.648288][ T2782] netlink: 'syz.0.7684': attribute type 32 has an invalid length. [ 812.828926][ T2796] netlink: 45 bytes leftover after parsing attributes in process `syz.4.7685'. [ 813.120788][ T2825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7691'. [ 813.224487][ T2825] 8021q: adding VLAN 0 to HW filter on device bond4 [ 813.263471][ T2783] netlink: 'syz.0.7684': attribute type 32 has an invalid length. [ 813.337711][ T2828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 813.355190][ T2828] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 813.388564][ T2828] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 813.565816][ T2852] netlink: 'syz.2.7696': attribute type 13 has an invalid length. [ 813.619501][ T2858] netlink: 'syz.0.7697': attribute type 1 has an invalid length. [ 813.831867][ T2887] sctp: [Deprecated]: syz.3.7703 (pid 2887) Use of int in maxseg socket option. [ 813.831867][ T2887] Use struct sctp_assoc_value instead [ 813.921028][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 814.056663][ T2901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.097238][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 814.105555][ C1] lec:lec_tx_timeout: lec0 [ 814.110852][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 816.980051][ T2981] __nla_validate_parse: 5 callbacks suppressed [ 816.980073][ T2981] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7722'. [ 817.016083][ T2981] IPVS: fo: FWM 3 0x00000003 - no destination available [ 817.107721][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.413276][ T3005] syzkaller0: entered promiscuous mode [ 817.420346][ T3005] syzkaller0: entered allmulticast mode [ 817.484344][ T3007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 817.599807][ T3010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7731'. [ 817.672569][ T3016] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7730'. [ 817.682314][ T3016] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7730'. [ 817.691637][ T3016] netlink: 'syz.3.7730': attribute type 6 has an invalid length. [ 817.703489][ T3016] netlink: 'syz.3.7730': attribute type 5 has an invalid length. [ 817.712220][ T3016] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7730'. [ 817.991895][ T3023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7735'. [ 818.005811][ T3023] sctp: [Deprecated]: syz.2.7735 (pid 3023) Use of int in maxseg socket option. [ 818.005811][ T3023] Use struct sctp_assoc_value instead [ 818.482862][ T3063] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7744'. [ 818.524333][ T3064] syzkaller0: entered promiscuous mode [ 818.532926][ T3064] syzkaller0: entered allmulticast mode [ 818.781552][ T3075] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 818.864997][ T3081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 819.025274][ T3088] syzkaller0: entered promiscuous mode [ 819.044096][ T3088] syzkaller0: entered allmulticast mode [ 819.090619][ T3088] tipc: Started in network mode [ 819.095565][ T3088] tipc: Node identity 6afa396a3acd, cluster identity 4711 [ 819.117199][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 819.125271][ C1] lec:lec_tx_timeout: lec0 [ 819.131079][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 819.163142][ T3088] tipc: Enabled bearer , priority 0 [ 819.178929][ T3099] netlink: 'syz.1.7758': attribute type 1 has an invalid length. [ 819.217935][ T3099] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7758'. [ 819.229437][ T3087] tipc: Resetting bearer [ 819.320973][ T3087] tipc: Disabling bearer [ 819.346986][ T3105] netlink: 'syz.2.7759': attribute type 11 has an invalid length. [ 819.358638][ T3105] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7759'. [ 819.446594][ T3111] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 819.490585][ T3111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7762'. [ 819.545948][ T3114] tipc: Enabled bearer , priority 11 [ 820.259196][ T3163] netlink: 'syz.1.7778': attribute type 1 has an invalid length. [ 820.381558][ T3163] 8021q: adding VLAN 0 to HW filter on device bond5 [ 820.569850][ T3167] bond5: (slave veth7): Enslaving as an active interface with a down link [ 820.630094][ T3172] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 820.670177][ T3172] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 820.768057][T30728] tipc: Node number set to 3745513291 [ 820.975702][ T3193] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 821.038547][ T3195] team0: Caught tx_queue_len zero misconfig [ 821.401838][ T3214] tipc: Enabled bearer , priority 0 [ 821.412703][ T3214] syzkaller0: entered promiscuous mode [ 821.419050][ T3214] syzkaller0: entered allmulticast mode [ 821.428695][ T3214] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 821.516689][ T3214] tipc: Resetting bearer [ 821.527054][ T3213] tipc: Resetting bearer [ 821.558601][ T3213] tipc: Disabling bearer [ 821.616068][ T3222] erspan0: entered promiscuous mode [ 821.675880][ T3228] netlink: 'syz.3.7797': attribute type 21 has an invalid length. [ 821.960856][ T3241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.996804][ T3245] __nla_validate_parse: 11 callbacks suppressed [ 821.996832][ T3245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7803'. [ 822.014597][ T3245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7803'. [ 822.081278][ T36] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 822.108018][ T36] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 822.117047][ T36] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 822.172322][ T36] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 822.223628][ T3255] tipc: Enabled bearer , priority 0 [ 822.233105][ T3257] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7808'. [ 822.301594][ T3255] syzkaller0: entered promiscuous mode [ 822.307726][ T3255] syzkaller0: entered allmulticast mode [ 822.339511][ T3255] tipc: Resetting bearer [ 822.470673][ T3254] tipc: Resetting bearer [ 822.873297][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.378323][ T3306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7813'. [ 824.138919][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 824.147013][ C1] lec:lec_tx_timeout: lec0 [ 824.152474][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 824.668425][ T3254] tipc: Disabling bearer [ 824.697108][ T3276] netlink: 'syz.0.7810': attribute type 29 has an invalid length. [ 824.720725][ T3304] veth0_to_bridge: entered promiscuous mode [ 824.726937][ T3305] veth0_to_bridge: left promiscuous mode [ 824.910039][ T3313] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7816'. [ 825.032726][ T3320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 825.052932][ T3317] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 825.155034][ T3322] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7819'. [ 825.176258][ T3322] netlink: 29 bytes leftover after parsing attributes in process `syz.4.7819'. [ 825.222197][ T3336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7822'. [ 825.274724][ T3336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7822'. [ 825.326929][ T3337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7822'. [ 825.339153][ T3336] mac80211_hwsim hwsim72 wlan1: Caught tx_queue_len zero misconfig [ 825.378110][ T3347] 8021q: VLANs not supported on ipvlan1 [ 825.444505][ T3352] 8021q: VLANs not supported on ipvlan1 [ 825.846890][ T3366] bond4: option all_slaves_active: invalid value (222) [ 825.861632][ T3366] bond4 (unregistering): Released all slaves [ 826.405424][ T3422] netlink: 'syz.1.7848': attribute type 1 has an invalid length. [ 826.488530][ T3422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 826.551741][ T3424] syzkaller0: entered promiscuous mode [ 826.557585][ T3424] syzkaller0: entered allmulticast mode [ 826.616192][ T3422] bond6: (slave gretap2): making interface the new active one [ 826.626479][ T3422] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 826.710994][ T3436] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 826.770578][ T3436] bond3 (unregistering): Released all slaves [ 826.857823][ T3437] macvtap1: entered allmulticast mode [ 826.863410][ T3437] veth0_macvtap: entered allmulticast mode [ 827.173097][ T3452] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.181272][ T3452] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.228381][ T3467] __nla_validate_parse: 10 callbacks suppressed [ 827.228402][ T3467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7860'. [ 827.321016][ T3452] wg1: left promiscuous mode [ 827.336484][ T3452] wg1: left allmulticast mode [ 827.451758][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.495214][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.732308][ T3452] bond1: left promiscuous mode [ 827.792352][ T3452] veth0_macvtap: left allmulticast mode [ 827.798499][ T3452] macvtap1: left allmulticast mode [ 827.811149][ T6679] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.820978][ T6679] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.836998][ T6679] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.847404][ T6679] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.856435][ T6679] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.867419][ T6679] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.876447][ T6679] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.886141][ T6679] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.919705][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.254816][ T3522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7879'. [ 828.610125][ T3540] dvmrp0: entered allmulticast mode [ 828.653657][ T3540] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 828.673315][ T3540] bond3 (unregistering): Released all slaves [ 828.725921][ T3548] IPv6: sit1: Disabled Multicast RS [ 828.753762][ T3548] sit1: entered allmulticast mode [ 828.852048][ T3563] netlink: 'syz.1.7889': attribute type 1 has an invalid length. [ 828.970877][ T3566] Cannot find add_set index 65532 as target [ 829.074759][ T3570] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7892'. [ 829.105882][ T3570] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7892'. [ 829.177315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 829.185385][ C1] lec:lec_tx_timeout: lec0 [ 829.191967][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 829.299849][ T3559] ip6_vti0 speed is unknown, defaulting to 1000 [ 829.450833][ T3580] netlink: 'syz.0.7897': attribute type 11 has an invalid length. [ 829.471526][ T3580] netlink: 'syz.0.7897': attribute type 11 has an invalid length. [ 829.488051][ T3580] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7897'. [ 829.571873][ T3589] syzkaller0: entered promiscuous mode [ 829.588391][ T3589] syzkaller0: entered allmulticast mode [ 829.625023][ T3591] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.7900'. [ 829.689315][ T3591] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.7900'. [ 829.845384][ T3604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7902'. [ 829.926466][ T3606] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20002 [ 829.996256][ T3610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7904'. [ 830.376110][ T3633] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7908'. [ 830.744767][ T3650] syzkaller0: entered promiscuous mode [ 830.757358][ T3650] syzkaller0: entered allmulticast mode [ 830.891198][ T3658] x_tables: duplicate underflow at hook 1 [ 833.748502][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.027370][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 835.035431][ C1] lec:lec_tx_timeout: lec0 [ 835.041097][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 839.509262][ T6676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.057292][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 840.065337][ C1] lec:lec_tx_timeout: lec0 [ 840.070480][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 844.548218][T15640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.077270][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 845.085344][ C1] lec:lec_tx_timeout: lec0 [ 845.090033][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 850.097713][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 850.105829][ C1] lec:lec_tx_timeout: lec0 [ 850.110543][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 850.388678][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.117788][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 855.125814][ C1] lec:lec_tx_timeout: lec0 [ 855.130488][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 856.152252][T15640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.575123][ T3674] __nla_validate_parse: 3 callbacks suppressed [ 857.575144][ T3674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7920'. [ 857.623381][ T3674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7920'. [ 857.752840][ T3683] netlink: 'syz.0.7923': attribute type 23 has an invalid length. [ 857.816437][ T3680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7924'. [ 858.110222][ T3713] openvswitch: netlink: Message has 4 unknown bytes. [ 858.196811][ T3718] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 858.212955][ T3719] sctp: [Deprecated]: syz.0.7933 (pid 3719) Use of int in maxseg socket option. [ 858.212955][ T3719] Use struct sctp_assoc_value instead [ 858.392099][ T3726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7936'. [ 858.401906][ T3726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7936'. [ 858.415472][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7936'. [ 858.465337][ T3729] netlink: 'syz.3.7937': attribute type 1 has an invalid length. [ 858.476455][ T3730] netlink: 'syz.3.7937': attribute type 1 has an invalid length. [ 858.689748][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7941'. [ 858.715580][ T3744] netlink: 'syz.3.7942': attribute type 7 has an invalid length. [ 858.783698][ T10] IPVS: starting estimator thread 0... [ 858.881702][ T3755] IPVS: using max 25 ests per chain, 60000 per kthread [ 858.916996][ T3761] netlink: 'syz.3.7946': attribute type 61 has an invalid length. [ 858.949057][ T3761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7946'. [ 859.275082][ T3779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7953'. [ 859.284930][ T3779] netlink: 'syz.4.7953': attribute type 7 has an invalid length. [ 859.293230][ T3779] netlink: 'syz.4.7953': attribute type 8 has an invalid length. [ 859.307276][ T3779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7953'. [ 859.458464][ T3791] tipc: Enabling of bearer rejected, failed to enable media [ 859.879283][ T3812] netlink: 'syz.2.7965': attribute type 1 has an invalid length. [ 859.929722][ T3812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 860.041780][ T3812] bond5: (slave geneve2): making interface the new active one [ 860.071247][ T3812] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 860.098347][ T3828] netlink: 'syz.3.7969': attribute type 10 has an invalid length. [ 860.109205][ T3824] syzkaller0: entered promiscuous mode [ 860.115022][ T3824] syzkaller0: entered allmulticast mode [ 860.137773][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 860.145883][ C1] lec:lec_tx_timeout: lec0 [ 860.151941][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 860.163603][ T3828] bridge_slave_1: left allmulticast mode [ 860.169635][ T3828] bridge_slave_1: left promiscuous mode [ 860.176106][ T3828] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.231911][ T3828] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 860.576424][ T3851] netlink: 'syz.4.7976': attribute type 21 has an invalid length. [ 860.720088][ T3861] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 860.734697][ T3818] ip6_vti0 speed is unknown, defaulting to 1000 [ 861.351723][ T3891] ipt_REJECT: TCP_RESET invalid for non-tcp [ 861.580927][ T3898] bond7: entered promiscuous mode [ 861.586464][ T3898] 8021q: adding VLAN 0 to HW filter on device bond7 [ 861.667741][ T3919] openvswitch: netlink: IP tunnel TTL not specified. [ 861.910089][ T6679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.141043][ T3939] xt_hashlimit: size too large, truncated to 1048576 [ 862.575601][ T3959] tipc: Enabled bearer , priority 0 [ 862.723048][ T3959] syzkaller0: entered promiscuous mode [ 862.760254][ T3959] syzkaller0: entered allmulticast mode [ 862.766672][ T3959] tipc: Resetting bearer [ 862.822911][ T3973] validate_nla: 3 callbacks suppressed [ 862.822931][ T3973] netlink: 'syz.3.8009': attribute type 8 has an invalid length. [ 862.928911][ T3958] tipc: Resetting bearer [ 863.041337][ T3976] nbd9: detected capacity change from 0 to 127 [ 863.061482][ T3976] netlink: 'syz.1.8010': attribute type 17 has an invalid length. [ 863.069948][ T3976] __nla_validate_parse: 21 callbacks suppressed [ 863.069966][ T3976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8010'. [ 863.095274][ T3976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8010'. [ 863.401284][ T3996] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8014'. [ 863.470842][ T3998] xt_nat: multiple ranges no longer supported [ 863.490855][ T3998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8015'. [ 865.044859][ T3958] tipc: Disabling bearer [ 865.126235][ T4001] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.134055][ T4001] team0: Cannot enslave team device to itself [ 865.142657][ T4001] Bluetooth: MGMT ver 1.23 [ 865.166045][ T5841] block nbd9: Receive control failed (result -104) [ 865.177207][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 865.185303][ C1] lec:lec_tx_timeout: lec0 [ 865.190865][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 865.380925][ T4013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8018'. [ 865.391880][ T4018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8020'. [ 865.428027][ T4018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8020'. [ 865.517048][ T4021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.728194][ T4035] netlink: 'syz.4.8028': attribute type 7 has an invalid length. [ 865.782160][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8027'. [ 865.933874][ T4031] 8021q: adding VLAN 0 to HW filter on device bond4 [ 865.959704][ T4039] veth1: Caught tx_queue_len zero misconfig [ 866.119695][ T4063] openvswitch: netlink: IP tunnel dst address not specified [ 866.287749][ T4072] IPv6: NLM_F_CREATE should be specified when creating new route [ 866.359777][ T4079] netlink: 'syz.3.8037': attribute type 5 has an invalid length. [ 866.428230][ T5491] veth0_to_batadv: left promiscuous mode [ 866.501502][ T4083] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8039'. [ 866.513394][ T4076] [ 866.515757][ T4076] ====================================================== [ 866.522777][ T4076] WARNING: possible circular locking dependency detected [ 866.529809][ T4076] syzkaller #0 Not tainted [ 866.534271][ T4076] ------------------------------------------------------ [ 866.541292][ T4076] syz.2.8035/4076 is trying to acquire lock: [ 866.547364][ T4076] ffffffff8e656888 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x272/0x18d0 [ 866.556993][ T4076] [ 866.556993][ T4076] but task is already holding lock: [ 866.564372][ T4076] ffff888025221370 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 866.574818][ T4076] [ 866.574818][ T4076] which lock already depends on the new lock. [ 866.574818][ T4076] [ 866.585267][ T4076] [ 866.585267][ T4076] the existing dependency chain (in reverse order) is: [ 866.594377][ T4076] [ 866.594377][ T4076] -> #2 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 866.603083][ T4076] blk_alloc_queue+0x52f/0x610 [ 866.608391][ T4076] __blk_mq_alloc_disk+0x197/0x390 [ 866.614142][ T4076] nbd_dev_add+0x499/0xb50 [ 866.619208][ T4076] nbd_init+0x168/0x1f0 [ 866.623953][ T4076] do_one_initcall+0x250/0x840 [ 866.629401][ T4076] do_initcall_level+0x104/0x190 [ 866.634901][ T4076] do_initcalls+0x59/0xa0 [ 866.639782][ T4076] kernel_init_freeable+0x2a6/0x3d0 [ 866.645535][ T4076] kernel_init+0x1d/0x1d0 [ 866.650426][ T4076] ret_from_fork+0x51b/0xa40 [ 866.655649][ T4076] ret_from_fork_asm+0x1a/0x30 [ 866.660956][ T4076] [ 866.660956][ T4076] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 866.668210][ T4076] fs_reclaim_acquire+0x71/0x100 [ 866.673703][ T4076] prepare_alloc_pages+0x152/0x650 [ 866.679372][ T4076] __alloc_frozen_pages_noprof+0x12f/0x380 [ 866.685751][ T4076] __alloc_pages_noprof+0xa/0x30 [ 866.691254][ T4076] pcpu_populate_chunk+0x182/0xb30 [ 866.696914][ T4076] pcpu_alloc_noprof+0xc4a/0x18d0 [ 866.702491][ T4076] xt_percpu_counter_alloc+0x161/0x220 [ 866.708500][ T4076] translate_table+0x1332/0x20b0 [ 866.714067][ T4076] ip6t_register_table+0x11b/0x800 [ 866.719717][ T4076] ip6table_security_table_init+0x41/0x70 [ 866.725987][ T4076] xt_find_table_lock+0x30c/0x3e0 [ 866.731554][ T4076] xt_request_find_table_lock+0x26/0x100 [ 866.737757][ T4076] do_ip6t_get_ctl+0x716/0x1230 [ 866.743151][ T4076] nf_getsockopt+0x26e/0x290 [ 866.748283][ T4076] ipv6_getsockopt+0x1fd/0x2b0 [ 866.753585][ T4076] do_sock_getsockopt+0x2d3/0x3f0 [ 866.759241][ T4076] __x64_sys_getsockopt+0x1a4/0x240 [ 866.764980][ T4076] do_syscall_64+0xe2/0xf80 [ 866.770036][ T4076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.776475][ T4076] [ 866.776475][ T4076] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 866.784235][ T4076] __lock_acquire+0x15a5/0x2cf0 [ 866.789670][ T4076] lock_acquire+0x106/0x330 [ 866.794727][ T4076] __mutex_lock+0x19f/0x1300 [ 866.799901][ T4076] pcpu_alloc_noprof+0x272/0x18d0 [ 866.805491][ T4076] sbitmap_init_node+0x1e1/0x640 [ 866.810993][ T4076] sbitmap_queue_init_node+0x3e/0x4d0 [ 866.816925][ T4076] blk_mq_init_tags+0x15c/0x2d0 [ 866.822331][ T4076] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 866.828353][ T4076] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 866.834754][ T4076] nbd_start_device+0x17f/0xb10 [ 866.840305][ T4076] nbd_genl_connect+0x165b/0x1cf0 [ 866.845892][ T4076] genl_family_rcv_msg_doit+0x22a/0x330 [ 866.851991][ T4076] genl_rcv_msg+0x61c/0x7a0 [ 866.857048][ T4076] netlink_rcv_skb+0x232/0x4b0 [ 866.862362][ T4076] genl_rcv+0x28/0x40 [ 866.866906][ T4076] netlink_unicast+0x80f/0x9b0 [ 866.872299][ T4076] netlink_sendmsg+0x813/0xb40 [ 866.877701][ T4076] ____sys_sendmsg+0xa68/0xad0 [ 866.883011][ T4076] ___sys_sendmsg+0x2a5/0x360 [ 866.888236][ T4076] __x64_sys_sendmsg+0x1bd/0x2a0 [ 866.893718][ T4076] do_syscall_64+0xe2/0xf80 [ 866.898768][ T4076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.905212][ T4076] [ 866.905212][ T4076] other info that might help us debug this: [ 866.905212][ T4076] [ 866.915451][ T4076] Chain exists of: [ 866.915451][ T4076] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 866.915451][ T4076] [ 866.929174][ T4076] Possible unsafe locking scenario: [ 866.929174][ T4076] [ 866.936646][ T4076] CPU0 CPU1 [ 866.942026][ T4076] ---- ---- [ 866.947408][ T4076] lock(&q->q_usage_counter(io)#59); [ 866.952808][ T4076] lock(fs_reclaim); [ 866.959421][ T4076] lock(&q->q_usage_counter(io)#59); [ 866.967341][ T4076] lock(pcpu_alloc_mutex); [ 866.971877][ T4076] [ 866.971877][ T4076] *** DEADLOCK *** [ 866.971877][ T4076] [ 866.980037][ T4076] 6 locks held by syz.2.8035/4076: [ 866.985163][ T4076] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 866.993396][ T4076] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 867.002398][ T4076] #2: ffff88802530b9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 867.013828][ T4076] #3: ffff88802530b8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 867.024828][ T4076] #4: ffff888025221370 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 867.035587][ T4076] #5: ffff8880252213a8 (&q->q_usage_counter(queue)#43){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 867.046613][ T4076] [ 867.046613][ T4076] stack backtrace: [ 867.052518][ T4076] CPU: 0 UID: 0 PID: 4076 Comm: syz.2.8035 Not tainted syzkaller #0 PREEMPT(full) [ 867.052540][ T4076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 867.052551][ T4076] Call Trace: [ 867.052561][ T4076] [ 867.052570][ T4076] dump_stack_lvl+0xe8/0x150 [ 867.052595][ T4076] print_circular_bug+0x2e1/0x300 [ 867.052616][ T4076] check_noncircular+0x12e/0x150 [ 867.052636][ T4076] __lock_acquire+0x15a5/0x2cf0 [ 867.052668][ T4076] ? kernel_text_address+0xa5/0xe0 [ 867.052692][ T4076] ? pcpu_alloc_noprof+0x272/0x18d0 [ 867.052709][ T4076] lock_acquire+0x106/0x330 [ 867.052732][ T4076] ? pcpu_alloc_noprof+0x272/0x18d0 [ 867.052753][ T4076] __mutex_lock+0x19f/0x1300 [ 867.052773][ T4076] ? pcpu_alloc_noprof+0x272/0x18d0 [ 867.052789][ T4076] ? stack_depot_save_flags+0x3f3/0x810 [ 867.052813][ T4076] ? kasan_save_track+0x4f/0x80 [ 867.052828][ T4076] ? kasan_save_track+0x3e/0x80 [ 867.052843][ T4076] ? pcpu_alloc_noprof+0x272/0x18d0 [ 867.052858][ T4076] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 867.052875][ T4076] ? blk_mq_init_tags+0x83/0x2d0 [ 867.052899][ T4076] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 867.052918][ T4076] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 867.052939][ T4076] ? __pfx___mutex_lock+0x10/0x10 [ 867.052957][ T4076] ? genl_rcv+0x28/0x40 [ 867.052979][ T4076] ? ____sys_sendmsg+0xa68/0xad0 [ 867.053002][ T4076] ? ___sys_sendmsg+0x2a5/0x360 [ 867.053030][ T4076] pcpu_alloc_noprof+0x272/0x18d0 [ 867.053054][ T4076] sbitmap_init_node+0x1e1/0x640 [ 867.053083][ T4076] sbitmap_queue_init_node+0x3e/0x4d0 [ 867.053115][ T4076] blk_mq_init_tags+0x15c/0x2d0 [ 867.053141][ T4076] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 867.053160][ T4076] ? lockdep_hardirqs_on+0x7a/0x110 [ 867.053180][ T4076] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 867.053200][ T4076] ? kfree+0x1be/0x650 [ 867.053223][ T4076] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 867.053246][ T4076] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 867.053275][ T4076] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 867.053300][ T4076] ? sysfs_add_file_mode_ns+0x259/0x300 [ 867.053326][ T4076] nbd_start_device+0x17f/0xb10 [ 867.053353][ T4076] ? device_create_file+0xf4/0x1b0 [ 867.053382][ T4076] nbd_genl_connect+0x165b/0x1cf0 [ 867.053411][ T4076] ? __pfx_nbd_genl_connect+0x10/0x10 [ 867.053440][ T4076] ? rcu_is_watching+0x15/0xb0 [ 867.053458][ T4076] ? __nla_parse+0x40/0x60 [ 867.053482][ T4076] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 867.053510][ T4076] genl_family_rcv_msg_doit+0x22a/0x330 [ 867.053537][ T4076] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 867.053565][ T4076] ? __lock_acquire+0x6b5/0x2cf0 [ 867.053592][ T4076] genl_rcv_msg+0x61c/0x7a0 [ 867.053617][ T4076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.053639][ T4076] ? __pfx_nbd_genl_connect+0x10/0x10 [ 867.053668][ T4076] netlink_rcv_skb+0x232/0x4b0 [ 867.053685][ T4076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 867.053708][ T4076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 867.053724][ T4076] ? genl_rcv+0x19/0x40 [ 867.053752][ T4076] ? down_read+0x272/0x2e0 [ 867.053771][ T4076] ? genl_rcv+0xd/0x40 [ 867.053792][ T4076] genl_rcv+0x28/0x40 [ 867.053813][ T4076] netlink_unicast+0x80f/0x9b0 [ 867.053842][ T4076] ? __pfx_netlink_unicast+0x10/0x10 [ 867.053868][ T4076] ? __alloc_skb+0x193/0x390 [ 867.053888][ T4076] ? netlink_sendmsg+0x650/0xb40 [ 867.053905][ T4076] ? skb_put+0x11b/0x210 [ 867.053927][ T4076] netlink_sendmsg+0x813/0xb40 [ 867.053948][ T4076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.053968][ T4076] ? aa_sock_msg_perm+0xf1/0x1b0 [ 867.053990][ T4076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 867.054010][ T4076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.054027][ T4076] ____sys_sendmsg+0xa68/0xad0 [ 867.054050][ T4076] ? __might_fault+0xaf/0x130 [ 867.054078][ T4076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.054104][ T4076] ? import_iovec+0x73/0xa0 [ 867.054138][ T4076] ___sys_sendmsg+0x2a5/0x360 [ 867.054160][ T4076] ? __lock_acquire+0x6b5/0x2cf0 [ 867.054185][ T4076] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.054210][ T4076] ? futex_wake+0x4ac/0x580 [ 867.054237][ T4076] ? __fget_files+0x2a/0x420 [ 867.054256][ T4076] ? __fget_files+0x3a0/0x420 [ 867.054278][ T4076] __x64_sys_sendmsg+0x1bd/0x2a0 [ 867.054303][ T4076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 867.054330][ T4076] ? rcu_is_watching+0x15/0xb0 [ 867.054351][ T4076] do_syscall_64+0xe2/0xf80 [ 867.054371][ T4076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.054387][ T4076] ? trace_irq_disable+0x37/0x100 [ 867.054404][ T4076] ? clear_bhb_loop+0x60/0xb0 [ 867.054423][ T4076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.054441][ T4076] RIP: 0033:0x7f285279af79 [ 867.054458][ T4076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.054474][ T4076] RSP: 002b:00007f2853576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.054493][ T4076] RAX: ffffffffffffffda RBX: 00007f2852a15fa0 RCX: 00007f285279af79 [ 867.054506][ T4076] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 867.054518][ T4076] RBP: 00007f28528316e0 R08: 0000000000000000 R09: 0000000000000000 [ 867.054529][ T4076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.054540][ T4076] R13: 00007f2852a16038 R14: 00007f2852a15fa0 R15: 00007fff53d6c178 [ 867.054560][ T4076] [ 867.068032][ T3530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.143637][ T4086] xt_TCPMSS: Only works on TCP SYN packets [ 867.600881][ T2326] block nbd10: Receive control failed (result -32) [ 867.608115][ T5841] block nbd10: Receive control failed (result -32) [ 871.507266][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6320 ms [ 871.515319][ C1] lec:lec_tx_timeout: lec0 [ 871.520851][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 875.351856][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL