last executing test programs: 3.625176841s ago: executing program 3 (id=4664): r0 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x20000000, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3b}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) 3.493853196s ago: executing program 3 (id=4666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000dc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000d80)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x16}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x64, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x4}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x138}, 0x1, 0x0, 0x0, 0x20040841}, 0x10) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x5ad2, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x2}, 0x1, 0x2, 0x0, 0x0, "69908b952e0f9a67"}, 0x10}}, 0x408d1) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40002000) (async) writev(r0, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba74", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "d8167dfdeb658b46", "00000000000000000400", "c3e01f04", "000200"}, 0x28) (async) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000040)=0x400006, 0x4) 3.283372832s ago: executing program 3 (id=4669): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="0107000000000000000067000000080001007c0000000c0099000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_cmd={0x1e, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x0, 0x5, 0xb, 0x6, 0xc988, [0xd4, 0x6]}}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) bind$ax25(r0, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xc8, 0x0, 0x200, 0x79c99800, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x186c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x768}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x4000808) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="0107000000000000000067000000080001007c0000000c0099000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_cmd={0x1e, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x0, 0x5, 0xb, 0x6, 0xc988, [0xd4, 0x6]}}) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) (async) bind$ax25(r0, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) close(r0) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xc8, 0x0, 0x200, 0x79c99800, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x186c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x768}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x4000808) (async) 3.109634641s ago: executing program 4 (id=4672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061117c0000000000850000000100000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x2d, 0x44, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x1c, 0xa2, 0x3, 0x4, [{@empty, 0x7}, {@multicast2, 0x6}, {@multicast2, 0x1}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0xfffffffffffffff8, 0x8, 0xffffffff7fffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000cc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000001700)={0x9f4, r4, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x2a0, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x42a9}, @initial, @device_b, @device_a, {0x9, 0xb4}, "", @value={0x2, 0x1, 0x2, 0x0, 0x9}}, @random="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"}}, @NL80211_ATTR_FRAME={0x72c, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x3}, {0xe6}, @from_mac=@device_b, @device_b, @from_mac=@device_b, {0x7, 0x56c}}, @random="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"}}]}, 0x9f4}, 0x1, 0x0, 0x0, 0x2044840}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b7050000b98b00006110c7d4545ee8412e715b7ca82086b3608c000000000004110c50c5e765aaa9d7632c2b0161b39f1c3d76b583f972e79248127613c622acae1575bd5ba2b121cbdb786a5898f80e08c6f45ac3d41c3ba59d461970b3624bf5d2ce6f13116acf53d0fe2824b53e331321c0dd384b2990331ea1165d39268acd2d453934d99649ae04cadc70e1233be505c3027c58b883efc5390bb749b348087a864894c39710f920258cc67985b68aff1b573523e95b4d1588008e11d7c6f4f6d538a8416006b7e110"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x1170, 0x1170, 0xf0, 0x1170, 0x200, 0x1398, 0x1398, 0x200, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x13, 0x81}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xd8, 0x9, 0x7, 'snmp\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 2.823912839s ago: executing program 3 (id=4675): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2d, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@ringbuf_query, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @generic={0xd, 0x9, 0x6, 0x7, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xea, &(0x7f0000000340)=""/234, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x2, 0xfff, 0x69}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x1, 0xb, 0xa}], 0x10, 0xbb}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x9, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000640)='GPL\x00', 0xfffffffc, 0x57, &(0x7f0000000680)=""/87, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xc, 0x10000}, 0x10, 0x23677, 0xffffffffffffffff, 0x1, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x1, 0x5, 0xb, 0xb}], 0x10, 0x8}, 0x94) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a40)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x798, 0x700, 0x0, 0x2, {{0x15, 0x4, 0x1, 0x9, 0x54, 0x65, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2, {[@noop, @lsrr={0x83, 0x1f, 0x4a, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @generic={0x7, 0x11, "18bc5e46c7c5b62e527aa5fbe67926"}, @timestamp_addr={0x44, 0xc, 0xdf, 0x1, 0x6, [{@remote, 0x7}]}]}}}}}) (async) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@ipv6_newaddrlabel={0x24, 0x48, 0x800, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x40, 0x0, r2, 0x2}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.822180818s ago: executing program 4 (id=4676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xd489, 0x8, 0x10000, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xdc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0xf) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000000104010100000000000000100a0000010a0002000000000102000000080004400000000908000540fffffff905000100070000000a000200000000080200000008000440000000060800034000000001"], 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x44) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000006c0)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680), 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x2b0, r13, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x27c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&^/\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'netem\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'netem\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x86, 0x4, "5551840dd424cd5d976eae4b221bbb020d8b18085efca289366a55c66fb8d3f3a59d187be901f9256fe859a7e4845068d8e620bfd8887d4637ef1fef3c2e1b9ef737ecbc857fdcb3a49b4aca8630c1561d9bc58843ad2414e98d37edffb02cf7ff049bd464d7b879d169fbf147d1134557a5723dca4234ce598567e0922af1deb6c2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'hash:net,port\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'hash:net,port\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x800}, 0x24044890) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r17, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0x3, 0x10000000, 0x7, 0x0, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x4f76, 0x18f5a191, 0x2}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x3ddc, 0x1ff, {{0x2c, 0x4, 0x3, 0x4, 0xb0, 0x64, 0x0, 0x9f, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xca, 0x0, 0x3, [0x313, 0x3, 0x5, 0x3, 0x1, 0x3ff, 0x5]}, @rr={0x7, 0x1b, 0x68, [@multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x29}, @local, @multicast1, @broadcast]}, @ssrr={0x89, 0x13, 0xf8, [@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @timestamp_prespec={0x44, 0x34, 0x4b, 0x3, 0x9, [{@multicast2, 0x4}, {@multicast1, 0x4c29}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast1, 0x3}]}, @end, @lsrr={0x83, 0x17, 0x3e, [@local, @multicast1, @broadcast, @loopback, @rand_addr=0x64010101]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r12, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r13, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x5}, 0x4) 2.649131413s ago: executing program 3 (id=4679): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="61a000fe00000000691086000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0xfffffce0) 2.522255056s ago: executing program 4 (id=4683): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devlog_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4008044) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20080000}, 0x4000) 2.444875925s ago: executing program 3 (id=4684): socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) (async) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, 0x0}, 0x20000810) write$cgroup_int(r0, &(0x7f0000000240)=0x100000001, 0x12) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = socket(0x2a, 0x2, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) (async) r4 = accept4(r2, 0x0, 0x0, 0x80000) recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/242, 0xf2}], 0x1}, 0xebea}], 0x1, 0x40000001, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xb4, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8c}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x874c8455725ed668}, 0x200488c8) (async) unshare(0x6a040000) (async) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x3f39, 0x4a3, 0xdb1, 0x7, 0xa6]}, &(0x7f0000000300)=0x54) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) r7 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x29}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1818000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2.344245711s ago: executing program 4 (id=4685): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast}, 0x1c) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237788bb71f36b177a80fb78c7699c74e891a0c7"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x6e6bb2, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x23, 0x0, @wg=@initiation={0x1, 0xffffffff, "c63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7f", "b87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741", "874427be29c95b93303cd1be9716d01efc0c9ca574199dd700", {"45227a29c5acbb706c8d97cd14ba0aa2", "2984e0aeafde90bd933b89b3a4beac08"}}}}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r7, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3f}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x9ceff084faac121b}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)={0x1108, 0x1a, 0x10, 0x70bd29, 0x25dfdbfe, {0x1e}, [@typed={0x5, 0x76, 0x0, 0x0, @str='\x00'}, @typed={0x1004, 0xe4, 0x0, 0x0, @binary="4d8fedba221a4e09c15ab23957c2e92e14df45d3f2c0395e39b73907a874c0fc36c4cce00da1478e80c3b5b70feba050a4396d45e5ce6ca8fc22e666081e519585d3b675b8efac73a7a66692185b69cb899e06a86be12b50aaa91c635fe1dd8a9a99b9b53b6b33f7a15a51029d3fb907519b1c1d30047a876a8843670df1f40183dfa84345e8e7a1cc5bcbb08d260e2adc12e7e3f7beb2b981cbc6de437307409e04cd2ddd0e1d3e300f1b66507ac336457b5f1708c84dbc245befb5776fdaef1730adc84d5deae91da3f25c4635ab624ece2c9793c912febc28dd00bdea5b46cf3a4c0d15273c7ccbcca7d8d5605debf33ad131b9ef50e6a0716f62909ae106c35a619fab1f9a837c5cefc068f7f902080be835cc7841e35329cd8982e3aea0e4a9c8f9d7a2cb0d3e3c427300327aa6e0931e8ca085942e42443c4a0ef4666751620469bb17091d750f965a19b9b13846ce72aff9015533dfa9160f0c2700841dcd0bbdeba5f99d2f998d62a32ed194da4ec407541020a9e5998910641a8896819c3b87afff317679db59be7a82c98140921d3db39661164d71b8b76905f452b941501b828d55b3be19cbe34c2191a680c2e4a465f74b57b13a385824ef35df74171abd7c7a5af5c657057421118dc8e43b9a1db0c46fe99a754dab774c029f45bbf93a52dfdeb8c7861641f5d598633073570c452ef5cfa6b1f9cc054f9fad1e72b0d005d18d23f35d07f93f310b0e4940130820bdf71c926e8ed5bab7a7628764704a9fc3864f6453e8d0ca69920b75c850c016e07d926b4de878e2806d430c196e20fb50fea2828b0006f49a86d1f33a8ddb1af723c62fcdfcb949af09fec8348894c9470a168e91e36ed2f555156362a1fe7d2403335569a136d7632a0859a72ed2a99b9fa06d9b5099fb046a2cd0efe220551ca82d99604261ddcb174e55f708d52d5f0a08bdb404d013d2d07df0c0eabbfdaeddff5cdb7c2bc52aac2b3f3978200f98efecb2033cd598ddf7877b90354bc2f601c57d0abf1265161311a88c7fe00698663c446526dad18676dfb12c9ef1f805995f838e6559b5fc163767fda0351a626d26dfc1184946c986e5287d8ab999528db27ee3127f681a21223ef70960650aa614bf85cad40b6519f530b3fc0414b1c243784253a5bb26af6245c1d666e8525c485f1226bed9406c607ede4b270f4b369e14f2ee91a0d6a04a2b54d939fab47aa0221e8e65b143b1110ab069540d0b2a5e405c1a665180953abf2c5c78a04932426f97dca16951090a9c7733cf573dcae2e5aae55f8d616cbc8fd4589d385e3a1e3d2fba5c1a8f045e1dc7a701d68393eab1d4c410f81356ed4bfc7dd661f74b0d99ea3e1f5996bf87790341cc313041d5863b13a0f020747924b617e54bf36d7ba0d6c939952f9754a4c5ca327767aeb4adfd1d8fdfc5d930210248207e4eb858794f71b27b46a296f94ca2052d65ba1f60181a3d397ca8fafd423a0634f447540983573491f6e2055ed915b925d5f341890c3042210e055eb12aed4ee4f26a8ac98e84497b538ae0d59dcd1b95de2202fa58df2c0d78ed8bd32eaf50f99d6e29fb1ceb2ec2ace4ea8b3f5df9f6f1d10c0eb0f4481c58a538767bfa0918945b8fb1282ce5cfe48c0a020fec72581ddb9d8f580fbf22d69516240a972e1f55e04c6ee6b0dafa143360f61daf72945c246aeb39e9040b238dcc92a55c7148e19a227b944296054e29ba50ecfafafa652aa0773a201583849f192fa8d5ea68d0d1af70d7d40fa55b4d446806d76c02f32106dce338a605ad7eec4cac9bf79281706c68b2ce3062b043caf00cbd45cf5c4d1533f57b36dc2771e2cf726db19e1d526c239dedb21b3003238b328dfdfd35b9c55ec996bd4aa4078b91ddb91b518b1138a6afe702c997edb78b501be5547d52ee182ee83946918bf2dd76d3e87e020401c312a125f5935e15085de848a3874fed0d0e9c5448e3cf23e1949fc3049c059092d985ffae364ed6eb727f0ebadbd7d3d105cee70b7f46d2ccd876d5c5b5653ab0b517e9ff8f3713f46f32a67a56f4f43e5c7750b09a5f5fb4d056aa270ffc46897a9e9a48bc34987cfcfa697c733fda7e96fa94179b88e8e6ac659b442ca79a3753db8a678d8f3b9062772d2832b2b659563762711117dd18c1a310cb3c115e36973f52350a0b9bb4f3ae727a266b22402dc2c644b89e8ec66de21e3d1a6ae6ff7115d4cd9cafebe5103e9ee2dff2d8a8373eded38faa28daa318d8f06ab1599c28032bede1f9ab505b0f3183003fbf36c43fc7c7a3c70eb9d4709a330cd6cb3e8ae1637fe827853e7f7b004d3922651add50dba19d8e5b5843641c3cebdb597164422d4a2be82dfcf64dc499f7dd8f9dc21ba60eb4950000d9c163002565a161554e493b965f1b6f99f40bb3e8b75f928fe22562ec1a0b42a4c02b43e980ef11298b39fd9485ea9e12ca4c9bf81c0bf77dc2bbf3edf5ab13770512fdd803f102ab7bca78a4a68af8d31fbdb81fca37f34713fe60fda3b34628919783087e209c09303176a5710efac833386cefa6fd981f9b4b75c3d69d411064f7541449e7b682c4c8146d73ef7bc168dc8468bae121208798596db6de93bbfba76fb38f62af7c46e33920d3122eb1101acc12718d3dd4ce08d96bce4558ec53a2b2f36da87104f5a1780a6db81b771a40f7812109c0b9c1bd8bf1cbf7f7ac311a1d9fa6450208906b0ca5c11a8de6406252f5b03a2207228cd252b67a0ab6119f50aa30843f85c4e53efb6b21501cbf15e153137ed0498f94dac7883c924281730db7ea7b7234b4d7b8c00222692bec64b392d68dfeae7dd31cccb7667e3ed5cee9a189aee47c7d71f142c4e11d9386c0edd5abd5f6d1938749bf7672636ea8e5731e597aed0b30138d9811982379cf0cee77fdbd7d135ae0ccd50426de51725b4769362f7836bae308aa5c539a3b7ae16a93eec87db116dc639d565a9ce05cac092b02f235fdaaef25e8a946410ae923d9216ae8b8e6dfb8f551fdecd3d2c1db57de70a7247c270412e4078238065ecec91e15add534cb3a5a16993425fd96575a6168217bd68d8f5a3adcb008364a13fa10784e7d40e663fbb6ce9bbea6be31cd034f4d6225330f6eccfe07d61ae794a0906a66487e4c8c88060a25f5c1b6f221b71e5109b1ad0e7d024cc6bc0e43cfac301c0459c3105674471b5a66cd47294f8eeb48f240dbc8fe05f9b45dcc026ec5c6312671ff238b258742c5badef687e553760c2a441acf1da8dbe60b57795ccd2a7eec09cf3092ffa7a3533ce4a413f56e670ee6084d577551bfa339a99d0e5363742dad3af2add1fd556fcb9f4d77b96e85f173f97c8f800a274e2dbc9e15ccd463f63948fb0becc99bef6fd2a26c2b584206f1e918555d675ff8b4070b2ecbfedc09c7bfc89cc8e98248929cfdb2e21205cc309afcdfa8cd0514f68dda1abf15428941026ee6fc10186f6c03ddb9c7897227cbc4241f84cfc9fd4dcec18b443e908d22312e0d7b3c1157f329bc9a880d38dc6b3e1fc497f6be259c1001ae7443c0df0acb6e380048f94373ed28616f53761f0cea2e1cfc3661a940a730991f00c90e5014cdae1bb580046b6e6c5319f64b70ac35e5618791a893e179f3d7daf9d14656b9d9f496a5e56d298dcb8713b8a6f121bea6e85202ca0d7f294858a6ccfc65bc64dc69242db83ee10e7786b0dc1158aa2aace3f096de730251603b4c64437bc20780c54ef67c8bbcd6a11133264e51016a5b89a3fd62bf683edf90e42815bf1a4cc9e42b618d3e4927625298022d544081a3d047243d1d830d7d6846d1da837e4776607dfe27a2f4523ae446c2077787ecf194cfa5575a7a5527b6db31712b0eaa7c197082bb9ccf0faa186ab5e6b409493640f282be495d51f785b99dbb0e10367879db302ae42332685b0fdd643cb5985ac973dcf90179bd012271e7a2f360f24d2ad2cad2204fffd9fd9c6e4d2c3383243b7a19bc571e53030ce3835d93eef8c26d6891b69e54986c158ef84bdbf703c857f7e26ca27b6c5c77b730bc00b431141b306d5c31dac65398e79214eea6982dda6f1ee2150ae47d3d4de1038258cdb6d16a325b9851f9d9468ec3706dc0dcd79e6e29dd88e335326f3cb212582031fc5b3047519ea40d51d4ff4b37fcc867a33f36ea05c7e7e735b5b50c30db8f322f75cd9d9409bcd18537d6cbc34e7cfad7f66aa54c555e936806b8aab941c082f7de5d6a95c72c1dc2520f1d3863142600d980d07a70a4da3e761746bead74d1e6fe2a74ca51e65b04da97be6aeca80d162047e1442072fd4d27715267a63f237f57da8c4c66055777c8abe30f6eb78412d2f99bc71fef118b1d3b2dfc6f5d62919f788c71af81dbed8b1a1c60c8d20ebd596326b753ae5546e0594fd756a6663bc89ff026df90a3cecbcb2d50c9eae34e115292169dd80b607298b0a0640374474890f0224e83763797339851afb83e2f3d6313c53d1145d1b33f6009c7279ad16e4354970615aebc4627e2a33416c71a4f5efb54d0c8ec65f7a1fbb1f460a4d1c86dee28e6d55f6ee592c765da053c161f0cab10965a1c0cd29b19478555fdc025ede730092bffa49b2c07fbbaac1c0b9bdcbf2afe050caea67b24dd53afde0b2b3b0e0fc497062dd678459bfe2f18a22d2268924e5e64c34bac7242e8331f6d931e6f833973ace193ea79c9ee9231b84efd31e6c6bb2c0e53fa1d0f1e19339e8354b538972f9a2af5d221e105b893a3832136d6ce017961a629d62a70fe4a8898898e0bda8516b156bebd8c8cef002faea599f2a09d91c53fb36d21b0bb370d20db24b2669db208fde1e5dcd4e828afc2624c4741a187831a1b902c40a87aab97cf19b11ad67e5b60ab8b3b00caf0f1c950b0f6127372267477e4e258662be34abdbb2c2f971b844d8ab5ea578c8e7f41e64f0333cb539cbcc6964abea8bb0d81526744629033639a950c8708622d9b2e4fca6f133f5e6fe04e3f5f1beca9783ce32d5ece0b57e0adf2b320a5bb531d411640d5f7abcdbce3e3a9202b305f8e6fcbb6714e1fe49b9a166fc0bfe30a15d8386bc4e1ccdbb3993da3ba8a708a0f15b992f813e47e7f1d7132802344190d1f53ce26dc726d10413c90cf56d79f92cdf8ec88bc2a0653f96594c2d37d156acf7aceaf7dd8d33e22a82564cbb06e570a3af1fff8f7155a7023c2dbd934ce0907bca344a17728cf442add543a3679c7274ed3fcc81c8f139e377b59fe4f66d40fbe876c5f6f1c5fb4b083e1e16605b991b9779087b5413ef1a2c7adcc3bb43c35ddd358053af78e1cfd2a1aeecbd4d60f31099d87aa02ebd055184602fcd8f9719418a556a761e7a2fb9ed3afa3349bdf83e7d085c2fca496c2f17475e306f8d63837fd27bb714f81a9a3a781498c1b8a2f3f27ab5619b24faa48842667477f9a1bdb4dcc6b2cb636b45ef516bca33003bf6874f0e17177dfa1385e67a67c25ebd5e490fe1f9225fb414e8630015045482e6393bde39f448986d88fff6e79ccb4368a3be720ed51006ba87cf5f3eba8893ffe082229b966299c7213f7fc68bd543b20b8bb240568548d32e0f40cd2515dbcf43a743ba11ea1650ce30dced9fce95e24a2fd417d363d7461ec5849d7ff5d9ec962f27621731d723c10d0e195b45f2aac172d187b81f15ec377680449d51859903af6b743f46f02dafe02167b96395b794a3f0e2d1d06608159ee7da870c88a46327bd402c2932d369e9da094fdec907af943f7e8701b7aa54adaa1c651b591646795"}, @nested={0x10, 0x4a, 0x0, 0x1, [@typed={0xc, 0x52, 0x0, 0x0, @u64=0x8}]}, @generic="c74b433c67574358d280cd2f7cb34e5051c51e00544a101eb9091934b29c56ff3f17ae62f341841e915b88045a3e8ba0822732a603bf5efce9976ba7d95bcbbc88686f2b675f0008c4e1f503dfd5fedc53a4cc56fc84810c7e77e734339c39a423d9870e55250d19f2a52ce2d1ace14ce25b323562bbac60a7f4d6e7e1cc0395779cd13735696db3a7792c4d463ac5b5441b42d608c03f399fef5029a40f4272eca4b43a9cac370e5091bb9e31b11e86871f4c5715357cdea3e50c574167ce22cc5482ba80a85451b82f4ff7a5a2", @typed={0x8, 0xee, 0x0, 0x0, @ipv4=@loopback}]}, 0x1108}, 0x1, 0x0, 0x0, 0x10}, 0x2044864) (async) syz_emit_ethernet(0x18, &(0x7f0000000080)={@local, @random="d3d1377a31ee", @void, {@llc={0x4, {@snap={0xaa, 0x0, "12", 'Igs', 0xcb2d, "8a39"}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0xfa3, 0x100, 0xbac, 0x67b]}) r11 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r11, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) 2.098454546s ago: executing program 2 (id=4688): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030000000000000000", @ANYRESHEX, @ANYBLOB="00000000070000001800128008000100707070000c27d50002800800", @ANYRESOCT, @ANYRES16=r2, @ANYRES64=r3], 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x6) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00000000"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa32080045000028006400000402907802000000e000000211009078e0000002000100010700000000000000"], 0x0) close(r3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f7544744b904021d005c06807c09e81756a10aea14400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94a97134cf6ee08000a0e4084a3b408a18d1e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf66951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93453a0000", 0xe3}], 0x53}, 0x240000d0) 1.952909437s ago: executing program 4 (id=4690): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x24, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x8}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x4100010, r1, 0x4f2dc000) 1.868649794s ago: executing program 0 (id=4692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fdf, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x7f}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x8000007, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x407, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="186a00000500000000000000080f00001800000000010000000000009b02000001a4060004000000851000000800000018010000786c6c2500000000002020207b1af8ff000000f2da6baa65a5e800bfa100000000000007010000eaffffffb702000008000020b70300006ba40000850000000600000018000000060000000000000003000000c11f7a93b50b55610423"], &(0x7f0000000080)='syzkaller\x00', 0xf8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000001c0)=[{0x3, 0x2, 0x3, 0x4}, {0x3, 0x5, 0x5, 0xb}, {0x5, 0x5, 0x2, 0x7}, {0x2, 0x5, 0xc}, {0x1, 0x2, 0xd, 0xb}, {0x5, 0x4, 0xe, 0x2}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) socket$inet6(0xa, 0x80002, 0x0) (async) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) (async) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fdf, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x7f}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x8000007, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x407, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="186a00000500000000000000080f00001800000000010000000000009b02000001a4060004000000851000000800000018010000786c6c2500000000002020207b1af8ff000000f2da6baa65a5e800bfa100000000000007010000eaffffffb702000008000020b70300006ba40000850000000600000018000000060000000000000003000000c11f7a93b50b55610423"], &(0x7f0000000080)='syzkaller\x00', 0xf8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000001c0)=[{0x3, 0x2, 0x3, 0x4}, {0x3, 0x5, 0x5, 0xb}, {0x5, 0x5, 0x2, 0x7}, {0x2, 0x5, 0xc}, {0x1, 0x2, 0xd, 0xb}, {0x5, 0x4, 0xe, 0x2}, {0x2, 0x2, 0xc, 0xc}], 0x10, 0xffffffff}, 0x94) (async) 1.720894418s ago: executing program 4 (id=4693): unshare(0x6a040000) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20004002) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) pipe(0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000440), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d660671f3e121710e8537c4c3060c6a41d106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r3) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r10, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4a800) bind$nfc_llcp(r9, &(0x7f0000000080)={0x27, r8, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) close(r7) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x40}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x18}], &(0x7f0000000280)='GPL\x00'}, 0x94) 1.720187756s ago: executing program 2 (id=4694): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) (async) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom}, [@default, @remote, @remote, @remote, @remote, @netrom, @default, @null]}, &(0x7f00000000c0)=0x48) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x34, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000081020000000000000000000018430000070000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180000009e00000000000000090000003f2808000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff07000085000000060020009a4980000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000050000001857000001000000000000000000000085200000050000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1ff, 0x32, &(0x7f0000000340)=""/50, 0x0, 0x46, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0xd, 0x8001, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r6, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000080)=0x80) (async) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@deltclass={0x48, 0x29, 0x513, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x9}, {0xffef, 0x8}, {0x9, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x12}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x48}}, 0x800) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=@newtfilter={0x34, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r9, {0xf, 0xf}, {0x0, 0x9}, {0xa, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xd}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004850}, 0x200008c4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000840)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x1d, r10}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)=@canfd={{0x2, 0x1, 0x0, 0x1}, 0x3f, 0x1, 0x0, 0x0, "bc2a34e130a46b7e0d48246e7bb48e98b55848ab8a13ecf23f9084fbfddb0f80229a7f57c5b33c03df93f0e4a4f72cb6026ee5f555df8e60faee486377ceee53"}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x40040) poll(&(0x7f00000003c0)=[{r0}, {r1, 0x500}, {r2, 0x8}, {r3, 0x2c}, {}, {r4, 0x400}, {r5, 0x1000}], 0x7, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$tipc(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x40003}, 0x40000000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 1.556970257s ago: executing program 0 (id=4696): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltfilter={0x2c, 0x2d, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff2, 0xb}, {0x8, 0x1}, {0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}}, 0x0) 1.380055177s ago: executing program 2 (id=4697): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000080)="7504cac0c7c4bdbee430cd0e3e059e96b72b9fe4e6b9fd977e4b1951b0291997be9bd23f98739320eefdf6367f4777791fc1eebbbe2d9f1a1b7c191367bf93ff0fb52993848c7ef89e520d962b586593f47e0177a5431e6273468392eecadc041186f74b5a6ccb20642614e3a4d32b5fada855159962e8d4afb18803b5fb427b829854e519435ee8a9d7d28f3751c121eeccf4870684934932af600d893f1280767843516eeede301d70595c9a2f1eaea814fe228fae18117bb965d34ba1661a7b555994711f", 0xc6, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) listen(r0, 0x81) socket$tipc(0x1e, 0x8, 0x0) accept4(r0, &(0x7f0000000340)=@nfc, 0x0, 0x0) socket$inet_sctp(0x2, 0x400000000001, 0x84) (async) sendto$inet(r0, &(0x7f0000000080)="7504cac0c7c4bdbee430cd0e3e059e96b72b9fe4e6b9fd977e4b1951b0291997be9bd23f98739320eefdf6367f4777791fc1eebbbe2d9f1a1b7c191367bf93ff0fb52993848c7ef89e520d962b586593f47e0177a5431e6273468392eecadc041186f74b5a6ccb20642614e3a4d32b5fada855159962e8d4afb18803b5fb427b829854e519435ee8a9d7d28f3751c121eeccf4870684934932af600d893f1280767843516eeede301d70595c9a2f1eaea814fe228fae18117bb965d34ba1661a7b555994711f", 0xc6, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) (async) listen(r0, 0x81) (async) socket$tipc(0x1e, 0x8, 0x0) (async) accept4(r0, &(0x7f0000000340)=@nfc, 0x0, 0x0) (async) 1.259381525s ago: executing program 0 (id=4698): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fadbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0480ed25ca58"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4841) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x9, 0x4000000}, 0xc) 1.103809436s ago: executing program 2 (id=4700): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000140)=@ethtool_eee={0x44, 0xfffffc81, 0x5, 0x80, 0x10000, 0x1, 0x0, 0x400, [0x3, 0x9]}}) connect$inet6(r4, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000010401010000000000000000000000050500010002000000"], 0x1c}}, 0x0) (rerun: 32) 1.083825299s ago: executing program 0 (id=4701): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x110) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x0, 0x4}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"/1068], 0x42c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000580)={'veth1_to_batadv\x00', {0x2, 0x0, @initdev}}) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x110) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x0, 0x4}) (async) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"/1068], 0x42c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000580)={'veth1_to_batadv\x00', {0x2, 0x0, @initdev}}) (async) 900.292839ms ago: executing program 0 (id=4703): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@union={0xf, 0x1, 0x0, 0x5, 0x1, 0x6, [{0x6, 0x2, 0x7}]}, @enum64={0x10, 0x4, 0x0, 0x13, 0x0, 0xa, [{0x1, 0x2, 0xffffff63}, {0x5, 0x7ff, 0x3}, {0xa, 0x24000000, 0x8}, {0xf, 0x0, 0x6}]}, @fwd={0x7}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000040)=""/14, 0x7f, 0xe, 0x0, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 838.191758ms ago: executing program 2 (id=4704): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0x23, 0x80805, 0x0) listen(r1, 0x0) accept4$tipc(r1, 0x0, 0x0, 0x0) connect$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) getsockname$inet(r0, 0x0, &(0x7f0000000140)) socket$rds(0x15, 0x5, 0x0) (async) socket(0x23, 0x80805, 0x0) (async) listen(r1, 0x0) (async) accept4$tipc(r1, 0x0, 0x0, 0x0) (async) connect$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) (async) getsockname$inet(r0, 0x0, &(0x7f0000000140)) (async) 771.74738ms ago: executing program 0 (id=4705): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000000000220000000c00018008000100", @ANYRES32=r3, @ANYBLOB="11dea2a22ab72e9f8199b5ffc86334d9e7accd4b4c24fb3f9b95af2fec1fd3d63669e14d322e872b39f7fff1d8ea4a0e736a46f898a4972d5e36c829"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xfffffffffffffe67, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091108c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0xa, 0x3, 0x87) r7 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f0000000000)={'pim6reg1\x00', 0x6, 0x10000}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x100000000, 0x10d, 0xfffffffffffffff9, 0x2, 0xc, 0x2800000000000009, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r6], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 677.523057ms ago: executing program 2 (id=4706): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr, @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/214, 0xd6}], 0x1}, 0xffffffff}], 0x1, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)}, 0x12141) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r3}, 0x94) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x31, "a25c4df82c35c83dea7e6276c1984889a08c0c23aa6d10aba4e2e03758c685e2f40ba498468ad6ae5cb7058fff7136aa04"}, &(0x7f0000000380)=0x55) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x113, 0x0, &(0x7f00000000c0)="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", 0x0, 0xef, 0x0, 0x0, 0x8, &(0x7f0000000000), &(0x7f0000000000)="591d35f95153630a", 0x3}, 0x50) 676.911494ms ago: executing program 1 (id=4707): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0xfffffffd, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$netlink(r1, &(0x7f0000000080), &(0x7f00000003c0)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x1a6) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000400)={0x2be42e2b, 0xf, 0xfffffffc, 0x800}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000028002000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00fb0000000800000000000000000000000000000000000000000000d1aacfc84624fe87dc48303e77c9fd8bd47cdbf0bebf3e"], 0x50) r8 = socket(0x29, 0x2, 0xfffffffc) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x2000800) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 581.580443ms ago: executing program 1 (id=4708): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d12037fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c3d8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea4c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c79115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b93989832d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560ea1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000000000000000000000000000000000000000000051f9f0b8fec61db23d54e59ad817db0f8a03f6781b032b6324ff40dd211a9e62118a94235e2e36fbcdc8837fc5208bdf71650ad22fe0802eda7664122d64f29b434773e3dd55e0172a6f4509ae7da1e1644cca3fe702212fc3f2c5cc8a00"/2659], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x54, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000380)={0xfffffffffffffffd, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 338.069694ms ago: executing program 1 (id=4709): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 212.918411ms ago: executing program 1 (id=4710): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00100029bd7000000000000a0000000000ff0000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="0300000000000000"], 0x34}}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, r4, 0x5eae78d9c54e9d3f, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080)=0x3, 0x4) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1e, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64=r1], 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0xc000) 117.939832ms ago: executing program 1 (id=4711): syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x91, 0x4d, &(0x7f0000000040)="d7ed1db0475aa926016509b03d3a5b15ee416995ccbdbbe255940b54601d30c5b0ead056cc0642fc4aed0d8f9622a28c6587be76d8b961124807407aef640f79da68612f1a240b1e51e8e4493b62cd0e5a9e55750cf2fa7a45aa82e25ce98ab1c6c578d372ea25feaecd3145ac06c9f45984798f9c56504daa12c9ef6af090e3edaa427e59ad5426cbce36c0bc8483c736", &(0x7f0000000180)=""/77, 0x7, 0x0, 0xff, 0x29, &(0x7f0000000200)="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", &(0x7f0000000300)="3bb79d909991a559ec5b764004562a47938e3f020cd5014479960b76bfadcff000336803e97f16f2fa", 0x0, 0x0, 0x3}, 0x50) (async) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) r1 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)={{r1}, {@void, @max}}) 0s ago: executing program 1 (id=4712): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r4, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) socket$nl_route(0x10, 0x3, 0x0) (async) listen(r1, 0xfff) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYRES64=r4, @ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRESOCT=0x0], 0x24}}, 0x8044) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x158, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6}, @CTA_TUPLE_MASTER={0x28, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0x3}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x8, 0x9]}, @CTA_TUPLE_ORIG={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}]}, @CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x55}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd80}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) kernel console output (not intermixed with test programs): amily 0 port 6081 - 0 [ 619.839392][ T8992] IPVS: stop unused estimator thread 0... [ 620.321198][T17873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.506543][ C1] net_ratelimit: 4411 callbacks suppressed [ 620.506563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.526675][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 620.540233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.552720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.566252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 620.580281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.594463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 620.607892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.620393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.633915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 620.799310][T17583] hsr_slave_0: entered promiscuous mode [ 620.811681][T17583] hsr_slave_1: entered promiscuous mode [ 620.818512][T17583] debugfs: 'hsr0' already exists in 'hsr' [ 620.824382][T17583] Cannot create hsr debugfs directory [ 621.166641][T17945] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3135'. [ 621.200730][T17948] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3135'. [ 621.519391][ T8975] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.559361][ T8975] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.678708][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 621.820058][ T8975] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.860053][ T8975] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.255467][T17974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3141'. [ 623.194418][T17997] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 623.655053][T18000] team0: Device gtp1 is up. Set it down before adding it as a team port [ 623.842685][T18022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3149'. [ 623.888348][T18023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3148'. [ 625.516546][ C1] net_ratelimit: 4501 callbacks suppressed [ 625.516564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.536226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 625.549486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.561969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.575254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 625.588831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.602226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 625.615189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.627575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.640913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 626.385806][T18022] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 626.397232][T18022] gretap2: entered promiscuous mode [ 626.402616][T18022] gretap2: entered allmulticast mode [ 626.679276][T18014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.874549][T18044] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3153'. [ 626.913715][T17583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 626.925845][T18046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3152'. [ 627.144469][T17583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 627.237606][T17583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 627.286778][T18055] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3156'. [ 627.347824][T17583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 627.480171][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3158'. [ 627.539545][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'. [ 627.630626][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'. [ 628.064002][T17583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.210399][T17583] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.262094][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.269338][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.414093][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.421416][ T8991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.507138][T18093] sch_fq: defrate 0 ignored. [ 628.588033][T18095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3165'. [ 629.177344][T18110] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3169'. [ 629.357415][T18115] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3170'. [ 629.533948][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.546222][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.563607][T18119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3171'. [ 629.637921][T18123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3172'. [ 629.764566][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3172'. [ 629.774785][T17583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.788366][T18129] netlink: 'syz.1.3173': attribute type 24 has an invalid length. [ 630.289352][T18128] team0: Port device team_slave_0 removed [ 630.526167][ C1] net_ratelimit: 3997 callbacks suppressed [ 630.526189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.545756][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 630.559013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.571407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.584543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 630.598054][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.612939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 630.626195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.638591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.651866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 630.918747][T18153] xt_policy: neither incoming nor outgoing policy selected [ 631.059606][T17583] veth0_vlan: entered promiscuous mode [ 631.125827][T17583] veth1_vlan: entered promiscuous mode [ 631.325582][T18162] x_tables: duplicate underflow at hook 2 [ 631.332357][T17583] veth0_macvtap: entered promiscuous mode [ 631.400637][T17583] veth1_macvtap: entered promiscuous mode [ 631.592893][T17583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.700079][T17583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.290412][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.339734][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.446635][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.526535][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.654435][T18201] __nla_validate_parse: 4 callbacks suppressed [ 632.654457][T18201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3189'. [ 632.796784][T18201] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3189'. [ 633.074879][T18205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3191'. [ 633.956757][ T8992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.001172][ T8992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.161872][ T8980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.221684][ T8980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.343477][T18231] IPv6: NLM_F_REPLACE set, but no existing node found! [ 634.433067][T18234] tipc: Enabling of bearer rejected, failed to enable media [ 635.536711][ C1] net_ratelimit: 4005 callbacks suppressed [ 635.536736][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 635.556316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.570356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 635.583580][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.596528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.609783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 635.623343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.629735][T18264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 635.640065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2a:e8:e8:46:5f:57, vlan:0) [ 635.663814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.956283][T16671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 635.970440][T18277] netlink: 'syz.0.3204': attribute type 13 has an invalid length. [ 635.988023][T16671] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 635.996787][T16671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 636.004997][T16671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 636.020539][T16671] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 636.116444][T18277] netlink: 'syz.0.3204': attribute type 58 has an invalid length. [ 636.166614][T18277] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3204'. [ 636.714184][T18270] bridge0: port 3(veth0_to_bridge) entered disabled state [ 636.721758][T18270] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.729070][T18270] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.797344][T18270] batman_adv: batadv0: Interface deactivated: 0! [ 636.931960][T18270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.015512][T18306] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3210'. [ 637.346802][T18316] Bluetooth: MGMT ver 1.23 [ 637.358228][ T8975] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.386300][T18316] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 637.386646][ T8975] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 637.416809][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3211'. [ 637.442202][T18316] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3211'. [ 637.452031][ T8975] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.470326][ T8975] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.486491][ T8975] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 637.495132][T18316] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 637.504233][ T8975] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.533554][ T8975] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.561080][ T8975] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 637.579859][ T8975] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.606798][ T8975] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.647670][ T8975] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 637.663726][ T8975] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.679544][T18274] virt_wifi0 speed is unknown, defaulting to 1000 [ 638.031022][T18347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3219'. [ 638.086547][T16671] Bluetooth: hci1: command tx timeout [ 638.155359][T18353] IPv6: NLM_F_CREATE should be specified when creating new route [ 638.163653][T18353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 638.171046][T18353] IPv6: NLM_F_CREATE should be set when creating new route [ 638.255356][T18274] chnl_net:caif_netlink_parms(): no params data found [ 638.485453][T18384] netlink: 'syz.1.3226': attribute type 2 has an invalid length. [ 638.497666][T18379] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3225'. [ 638.532903][T18379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 638.618414][T18274] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.634883][T18274] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.666988][T18274] bridge_slave_0: entered allmulticast mode [ 638.690686][T18274] bridge_slave_0: entered promiscuous mode [ 638.724037][T18274] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.740479][T18274] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.755753][T18274] bridge_slave_1: entered allmulticast mode [ 638.774753][T18274] bridge_slave_1: entered promiscuous mode [ 638.793411][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3228'. [ 638.879953][T18396] netlink: 'syz.4.3228': attribute type 1 has an invalid length. [ 638.921093][T18396] netlink: 'syz.4.3228': attribute type 2 has an invalid length. [ 638.985004][T18401] vxlan1: entered promiscuous mode [ 639.010431][T18401] vxlan1: entered allmulticast mode [ 639.022928][T18274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.049929][T18274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.097997][ T8980] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.106822][T18410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3233'. [ 639.130948][ T8980] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.186474][ T8980] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.212708][ T8980] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.270617][T18421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3235'. [ 639.328042][T18419] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 639.335900][T18425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.346316][T18425] IPv6: NLM_F_CREATE should be set when creating new route [ 639.353580][T18425] IPv6: NLM_F_CREATE should be set when creating new route [ 639.361026][T18425] IPv6: NLM_F_CREATE should be set when creating new route [ 639.429071][T18274] team0: Port device team_slave_0 added [ 639.454651][T18274] team0: Port device team_slave_1 added [ 639.460593][T18419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.536364][T18274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.544867][T18274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.606299][T18274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.652874][T18274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.663115][T18274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.722800][T18274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.964911][T18274] hsr_slave_0: entered promiscuous mode [ 639.980690][T18274] hsr_slave_1: entered promiscuous mode [ 639.998106][T18274] debugfs: 'hsr0' already exists in 'hsr' [ 640.007237][T18274] Cannot create hsr debugfs directory [ 640.170534][T16671] Bluetooth: hci1: command tx timeout [ 640.734959][T18490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3250'. [ 640.825106][T18495] tc_dump_action: action bad kind [ 641.120154][T18274] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.290567][T18515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 641.302316][T18274] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.357687][T18522] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3256'. [ 641.371488][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 641.501208][T18274] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.568265][ T8992] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.604112][ T8992] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.622552][T18530] netlink: 'syz.4.3258': attribute type 10 has an invalid length. [ 641.635490][T18536] IPv6: NLM_F_CREATE should be specified when creating new route [ 641.680534][ T8992] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.698811][T18539] netlink: 'syz.1.3261': attribute type 1 has an invalid length. [ 641.719384][T18274] bond0: (slave netdevsim0): Releasing backup interface [ 641.751253][T18541] net_ratelimit: 873 callbacks suppressed [ 641.751272][T18541] openvswitch: netlink: Flow actions attr not present in new flow. [ 641.781885][T18274] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.809686][ T8992] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.013649][T18544] bond5: (slave gretap2): making interface the new active one [ 642.035943][T18544] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 642.246896][T16671] Bluetooth: hci1: command tx timeout [ 642.344696][T18274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 642.378479][T18274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 642.425797][T18274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 642.464898][T18274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 642.849518][T18274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.978238][T18274] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.108598][T18583] __nla_validate_parse: 7 callbacks suppressed [ 643.108618][T18583] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3269'. [ 643.152095][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.159436][ T8991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.202650][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.209905][ T8991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.232445][T18586] xt_SECMARK: invalid mode: 9 [ 643.360558][T18599] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 643.585804][T18574] lec:lec_atm_close: lec0: Shut down! [ 643.625991][T18274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 643.696932][T18274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 644.330771][T16671] Bluetooth: hci1: command tx timeout [ 644.543246][T18274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.733678][T18274] veth0_vlan: entered promiscuous mode [ 644.802817][T18274] veth1_vlan: entered promiscuous mode [ 645.047615][T14543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.088846][T18274] veth0_macvtap: entered promiscuous mode [ 645.128876][T18274] veth1_macvtap: entered promiscuous mode [ 645.185229][T18274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.227775][T18274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.262082][ T8992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.313698][ T8992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.382955][ T8992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.441765][ T8992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.530387][ T95] block nbd2: Possible stuck request ffff888025778000: control (read@0,1024B). Runtime 30 seconds [ 645.542331][ T95] block nbd2: Possible stuck request ffff888025778200: control (read@1024,1024B). Runtime 30 seconds [ 645.554419][ T95] block nbd2: Possible stuck request ffff888025778400: control (read@2048,1024B). Runtime 30 seconds [ 645.565431][ T95] block nbd2: Possible stuck request ffff888025778600: control (read@3072,1024B). Runtime 30 seconds [ 645.674447][ T8974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.730570][ T8974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.831616][ T8992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.846771][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.869839][ T8992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.926313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.087194][T14545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.358908][T18699] geneve2: entered promiscuous mode [ 646.852831][T18718] netlink: 'syz.0.3299': attribute type 7 has an invalid length. [ 646.874960][T16671] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 646.888232][T16671] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 646.908281][T16671] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 646.918122][T16671] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 646.927483][T16671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 646.966181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.201970][T18722] virt_wifi0 speed is unknown, defaulting to 1000 [ 647.531358][ T8984] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.622749][T18747] netlink: 'syz.4.3305': attribute type 8 has an invalid length. [ 647.662723][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3306'. [ 647.678402][ T8984] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.747704][ T8984] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.866422][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3310'. [ 647.875630][T18758] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 647.928807][ T8984] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.006667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.074430][T18767] wireguard: wg1: Could not create IPv4 socket [ 648.350794][T18722] chnl_net:caif_netlink_parms(): no params data found [ 648.397508][ T8984] team0: left allmulticast mode [ 648.417306][ T8984] team_slave_0: left allmulticast mode [ 648.436609][ T8984] team_slave_1: left allmulticast mode [ 648.461128][ T8984] team0: left promiscuous mode [ 648.478282][ T8984] team_slave_0: left promiscuous mode [ 648.496725][ T8984] team_slave_1: left promiscuous mode [ 648.523693][ T8984] bridge0: port 4(team0) entered disabled state [ 648.573781][ T8984] veth0_to_bridge: left allmulticast mode [ 648.598066][ T8984] veth0_to_bridge: left promiscuous mode [ 648.620221][ T8984] bridge0: port 3(veth0_to_bridge) entered disabled state [ 648.659412][ T8984] bridge_slave_1: left allmulticast mode [ 648.670631][ T8984] bridge_slave_1: left promiscuous mode [ 648.680459][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.694287][ T8984] bridge_slave_0: left allmulticast mode [ 648.706542][ T8984] bridge_slave_0: left promiscuous mode [ 648.720445][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.972899][T16671] Bluetooth: hci3: command tx timeout [ 649.046298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.033904][ T8984] bond5 (unregistering): (slave gretap2): Releasing active interface [ 650.083132][ T8984] dvmrp1 (unregistering): left allmulticast mode [ 650.096734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.377793][ T8984] team0: Port device bridge4 removed [ 650.618249][ T8984] bond0 (unregistering): (slave bridge9): Releasing backup interface [ 650.626685][ T8984] bridge9 (unregistering): left promiscuous mode [ 650.733874][ T8984]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.745511][ T8984]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.754969][ T8984]  (unregistering): Released all slaves [ 650.850216][ T8984] bond1 (unregistering): Released all slaves [ 650.952627][ T8984] bond2 (unregistering): Released all slaves [ 651.054160][ T8984] bond3 (unregistering): Released all slaves [ 651.056796][T16671] Bluetooth: hci3: command tx timeout [ 651.128893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.166822][ T8984] bond4 (unregistering): Released all slaves [ 651.263852][ T8984] bond0 (unregistering): Released all slaves [ 651.277697][ T8984] bond5 (unregistering): Released all slaves [ 651.292315][T18766] syzkaller1: entered promiscuous mode [ 651.298069][T18766] syzkaller1: entered allmulticast mode [ 651.507857][T18831] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3327'. [ 651.552399][T18832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 651.619956][T18839] xt_hashlimit: size too large, truncated to 1048576 [ 651.754571][T18847] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 651.840470][T18847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3330'. [ 651.945048][T18853] netlink: 'syz.3.3332': attribute type 11 has an invalid length. [ 651.975504][T18853] netlink: 'syz.3.3332': attribute type 4 has an invalid length. [ 651.990606][T18722] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.006839][T18853] netlink: 'syz.3.3332': attribute type 5 has an invalid length. [ 652.014973][T18722] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.024645][T18722] bridge_slave_0: entered allmulticast mode [ 652.033269][T18853] netlink: 'syz.3.3332': attribute type 6 has an invalid length. [ 652.047254][T18722] bridge_slave_0: entered promiscuous mode [ 652.069001][T18722] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.076785][T18853] netlink: 199748 bytes leftover after parsing attributes in process `syz.3.3332'. [ 652.086761][T18722] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.106683][T18722] bridge_slave_1: entered allmulticast mode [ 652.122612][T18722] bridge_slave_1: entered promiscuous mode [ 652.150735][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3333'. [ 652.176117][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.215038][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3333'. [ 652.333984][T18860] gretap0: entered promiscuous mode [ 652.344084][T18860] gretap0: left promiscuous mode [ 653.130922][T16671] Bluetooth: hci3: command tx timeout [ 653.210565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.219498][T14545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.233924][T18722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.268372][ T5488] lec:lec_start_xmit: lec0:No lecd attached [ 654.289235][T18722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.336522][T18900] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.3339'. [ 654.378175][T18900] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.3339'. [ 654.471398][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3339'. [ 654.575844][T18722] team0: Port device team_slave_0 added [ 654.713463][ T8984] hsr_slave_0: left promiscuous mode [ 654.736860][ T8984] hsr_slave_1: left promiscuous mode [ 654.746977][ T8984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.770985][ T8984] batman_adv: batadv0: Removing interface: 0! [ 654.838506][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3345'. [ 654.849814][T18934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.925423][T18938] xt_CT: You must specify a L4 protocol and not use inversions on it [ 654.934253][T18939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 655.019234][T18943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.189603][T18949] netlink: 'syz.3.3346': attribute type 1 has an invalid length. [ 655.218372][T16671] Bluetooth: hci3: command tx timeout [ 655.224195][T18949] netlink: 'syz.3.3346': attribute type 1 has an invalid length. [ 655.598493][ T8984] team0 (unregistering): Port device team_slave_1 removed [ 655.647804][ T8984] team0 (unregistering): Port device team_slave_0 removed [ 655.955318][T18722] team0: Port device team_slave_1 added [ 656.086295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.211667][T18722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.226166][T18722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.316090][T18722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.362540][T18722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.379358][T18722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.447132][T18722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.558988][ T6033] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.586446][ T6033] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.600451][ T8984] IPVS: stop unused estimator thread 0... [ 656.607041][T18964] tipc: Enabling of bearer rejected, failed to enable media [ 656.689591][ T6033] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.714562][ T6033] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.791705][T18722] hsr_slave_0: entered promiscuous mode [ 656.798777][T18722] hsr_slave_1: entered promiscuous mode [ 656.840546][T18994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.882626][T18994] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 656.903034][T18994] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 656.930338][T18994] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 657.070683][T19007] __nla_validate_parse: 3 callbacks suppressed [ 657.070701][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3359'. [ 657.126214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.369014][T19021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3363'. [ 657.430195][T19021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3363'. [ 657.443685][T19021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3363'. [ 657.454475][T19021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3363'. [ 657.464703][T19021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3363'. [ 657.771144][T19041] xt_hashlimit: size too large, truncated to 1048576 [ 657.944337][T19049] netlink: 'syz.4.3371': attribute type 7 has an invalid length. [ 657.997104][T18722] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 658.041855][T18722] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 658.071050][T18722] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 658.106554][T18722] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 658.166531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.312569][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3373'. [ 658.498633][T18722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.506498][T19079] netlink: 'syz.2.3376': attribute type 4 has an invalid length. [ 658.560202][T18722] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.692258][T19088] netlink: 'syz.2.3379': attribute type 1 has an invalid length. [ 658.725166][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.732412][ T8974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.803731][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.811007][ T8975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.929107][T19096] netlink: 'syz.0.3380': attribute type 11 has an invalid length. [ 658.937279][T19096] netlink: 'syz.0.3380': attribute type 4 has an invalid length. [ 658.945264][T19096] netlink: 'syz.0.3380': attribute type 5 has an invalid length. [ 658.964011][T19096] netlink: 'syz.0.3380': attribute type 6 has an invalid length. [ 659.015901][T18722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.028686][T19096] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.3380'. [ 659.080821][T19104] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3382'. [ 659.206269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.425571][T19134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.621917][T19144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.636425][T19145] sch_fq: defrate 0 ignored. [ 659.706939][T18722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.755681][T19151] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3392'. [ 659.855639][T18722] veth0_vlan: entered promiscuous mode [ 659.909767][T18722] veth1_vlan: entered promiscuous mode [ 659.926142][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 659.934675][ C1] lec:lec_tx_timeout: lec0 [ 659.940115][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 659.983925][T18722] veth0_macvtap: entered promiscuous mode [ 659.997817][T18722] veth1_macvtap: entered promiscuous mode [ 660.059268][T18722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.105537][T18722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.151995][ T8984] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.230448][T19166] syzkaller0: entered promiscuous mode [ 660.246534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.259620][T14545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.286229][T19166] syzkaller0: entered allmulticast mode [ 660.296553][ T8984] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.305666][T14545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.344919][ T8984] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.376465][ T8984] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.387494][T19140] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 660.463402][T19176] tipc: Started in network mode [ 660.473003][T19176] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 660.506732][T19176] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 660.529118][T19176] tipc: Enabled bearer , priority 10 [ 660.553448][T19178] nbd: illegal input index 2958377 [ 660.592400][T19189] netlink: 'syz.3.3400': attribute type 1 has an invalid length. [ 660.889584][T19198] bridge1: entered promiscuous mode [ 660.926647][T19198] bridge1: entered allmulticast mode [ 660.939618][T19198] team0: Port device bridge1 added [ 660.972658][T19201] bridge0: port 3(team0) entered blocking state [ 660.996308][T19201] bridge0: port 3(team0) entered disabled state [ 661.014173][T19201] team0: entered allmulticast mode [ 661.033160][ T8991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.033236][T19201] team_slave_0: entered allmulticast mode [ 661.047619][ T8991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.067589][T19199] netlink: 'syz.0.3402': attribute type 7 has an invalid length. [ 661.086416][T19201] team_slave_1: entered allmulticast mode [ 661.094471][T19201] team0: entered promiscuous mode [ 661.122262][T19201] team_slave_0: entered promiscuous mode [ 661.141445][T19201] team_slave_1: entered promiscuous mode [ 661.148508][T19201] bridge0: port 3(team0) entered blocking state [ 661.154907][T19201] bridge0: port 3(team0) entered forwarding state [ 661.221067][ T8992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.232825][ T8992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.606654][T16671] Bluetooth: hci0: command 0x0401 tx timeout [ 661.646410][ T24] tipc: Node number set to 1 [ 661.756699][T19245] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 661.787642][T19245] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 661.817379][T19245] gretap1: entered promiscuous mode [ 661.827118][T19245] gretap1: entered allmulticast mode [ 661.856832][T19250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.167252][ T8980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.248373][T19274] __nla_validate_parse: 6 callbacks suppressed [ 662.248395][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3424'. [ 662.564518][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3429'. [ 662.761955][T19311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3429'. [ 662.831533][T19315] netlink: 'syz.3.3431': attribute type 12 has an invalid length. [ 662.854093][T19315] netlink: 'syz.3.3431': attribute type 29 has an invalid length. [ 662.946104][T19315] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3431'. [ 662.967005][T19315] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3431'. [ 663.053134][T19315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3431'. [ 663.206169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.268100][T19335] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3435'. [ 663.312547][T19338] netlink: 'syz.3.3436': attribute type 9 has an invalid length. [ 663.336232][T19338] netlink: 'syz.3.3436': attribute type 11 has an invalid length. [ 663.344123][T19338] netlink: 'syz.3.3436': attribute type 12 has an invalid length. [ 663.363321][T19338] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.3436'. [ 663.380633][T19338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3436'. [ 663.394008][T19340] netlink: 'syz.4.3437': attribute type 12 has an invalid length. [ 663.420995][T19338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3436'. [ 663.529510][T19340] bond2: option primary_reselect: invalid value (255) [ 663.620598][T19340] bond2 (unregistering): Released all slaves [ 663.711658][T19352] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 663.995630][T19377] netlink: 'syz.2.3445': attribute type 10 has an invalid length. [ 664.073180][T19377] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 664.138959][T19385] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 664.246175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.299953][T19391] bridge_slave_0: default FDB implementation only supports local addresses [ 664.316694][T19393] bridge_slave_0: default FDB implementation only supports local addresses [ 664.555295][T19404] netlink: 'syz.3.3453': attribute type 9 has an invalid length. [ 664.565116][T19404] x_tables: duplicate underflow at hook 1 [ 664.645029][T19407] netlink: 'syz.2.3454': attribute type 10 has an invalid length. [ 664.787387][T19407] team0 (unregistering): Port device team_slave_0 removed [ 664.855427][T19407] team0 (unregistering): Port device team_slave_1 removed [ 664.956104][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 664.964164][ C1] lec:lec_tx_timeout: lec0 [ 664.968937][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 665.286392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.374999][ T8991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.385014][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.396487][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.428204][T19432] syzkaller0: entered promiscuous mode [ 665.433873][T19432] syzkaller0: entered allmulticast mode [ 665.744750][T19452] bpq0: entered allmulticast mode [ 665.772244][T19452] netlink: 'syz.3.3464': attribute type 1 has an invalid length. [ 665.971773][T19463] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 666.326124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.404077][T19480] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 666.588406][T19493] netlink: 'syz.4.3476': attribute type 10 has an invalid length. [ 666.650342][T19493] team0: Device veth0_macvtap failed to register rx_handler [ 666.778600][T19510] netlink: 'syz.2.3480': attribute type 16 has an invalid length. [ 667.022996][T19510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 667.077507][T14548] IPVS: starting estimator thread 0... [ 667.176180][T19529] IPVS: using max 26 ests per chain, 62400 per kthread [ 667.324019][T19541] Bluetooth: MGMT ver 1.23 [ 667.351577][T19537] syzkaller0: entered promiscuous mode [ 667.366173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.404984][T19537] syzkaller0: entered allmulticast mode [ 667.639042][T19551] __nla_validate_parse: 13 callbacks suppressed [ 667.639061][T19551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3490'. [ 667.924157][T19566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3494'. [ 668.346164][T19563] infiniband : set down [ 668.357141][T19563] infiniband : added ipvlan0 [ 668.357223][T19579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3498'. [ 668.406521][ C1] net_ratelimit: 1 callbacks suppressed [ 668.406541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.421012][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.438893][T19563] RDS/IB: : added [ 668.443887][T19563] smc: adding ib device  with port count 1 [ 668.450190][T19563] smc: ib device  port 1 has no pnetid [ 668.599372][T19587] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3500'. [ 668.818797][T19596] validate_nla: 1 callbacks suppressed [ 668.818817][T19596] netlink: 'syz.3.3503': attribute type 10 has an invalid length. [ 668.851244][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3504'. [ 668.875492][T19596] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3503'. [ 668.999760][T19601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 669.046415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.169774][T19608] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 669.358901][T19609] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.366742][T19609] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.381733][T19621] netlink: 'syz.3.3508': attribute type 1 has an invalid length. [ 669.399589][T19622] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 669.446259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.582396][T19621] bond2: entered promiscuous mode [ 669.640045][T19621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.784099][T19626] bond2: (slave bridge2): making interface the new active one [ 669.791958][T19626] bridge2: entered promiscuous mode [ 669.812611][T19626] bridge2: left promiscuous mode [ 669.976066][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 669.984193][ C1] lec:lec_tx_timeout: lec0 [ 669.989137][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 670.121588][T19645] netlink: 'syz.1.3513': attribute type 21 has an invalid length. [ 670.129744][T19645] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3513'. [ 670.140071][T19645] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3513'. [ 670.181668][T19645] tap0: tun_chr_ioctl cmd 2148553947 [ 670.311476][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3518'. [ 670.359613][T19667] x_tables: duplicate underflow at hook 3 [ 670.415870][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.425107][T14548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.434120][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.488046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.038029][T19697] netlink: 'syz.1.3527': attribute type 1 has an invalid length. [ 671.048085][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3526'. [ 671.065139][T19700] netlink: 'syz.4.3525': attribute type 1 has an invalid length. [ 671.113053][T19700] 8021q: adding VLAN 0 to HW filter on device bond2 [ 671.261908][T19706] bond2: (slave veth5): Enslaving as an active interface with a down link [ 671.304255][T19705] veth5: entered allmulticast mode [ 671.454770][T19717] openvswitch: netlink: Invalid VLAN frame [ 671.469950][T19700] syzkaller0: entered promiscuous mode [ 671.477899][T19700] syzkaller0: entered allmulticast mode [ 671.525410][T19706] vlan2: entered allmulticast mode [ 671.535605][T19706] veth1: entered allmulticast mode [ 671.549289][T19706] veth1: entered promiscuous mode [ 671.555358][T19706] veth1: left promiscuous mode [ 671.593997][T19706] bond2: (slave vlan2): making interface the new active one [ 671.609692][T19706] veth1: entered promiscuous mode [ 671.616203][T19706] vlan2: entered promiscuous mode [ 671.621948][T19706] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 671.671918][T19723] netlink: 'syz.1.3533': attribute type 1 has an invalid length. [ 672.575915][T16671] Bluetooth: hci5: command 0x0406 tx timeout [ 673.476443][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.620439][T19743] __nla_validate_parse: 6 callbacks suppressed [ 673.620459][T19743] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3539'. [ 673.691066][ T8980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.805413][T19750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 673.908033][T19756] netlink: 'syz.1.3544': attribute type 1 has an invalid length. [ 674.245066][T19769] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20001 [ 674.330589][T14548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.567691][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3552'. [ 674.726146][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.834348][T19806] netlink: 'syz.1.3558': attribute type 4 has an invalid length. [ 674.969262][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.996086][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 675.004159][ C1] lec:lec_tx_timeout: lec0 [ 675.009731][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 675.166082][T19827] netlink: 'syz.1.3564': attribute type 1 has an invalid length. [ 675.176670][T19827] netlink: 'syz.1.3564': attribute type 2 has an invalid length. [ 675.188346][T19827] netlink: 'syz.1.3564': attribute type 2 has an invalid length. [ 675.224757][T19827] netlink: 'syz.1.3564': attribute type 1 has an invalid length. [ 675.293568][T19836] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3568'. [ 675.322616][T19836] syzkaller0: entered promiscuous mode [ 675.330657][T19836] syzkaller0: entered allmulticast mode [ 675.461485][T19846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3572'. [ 675.473886][T19848] netlink: 'syz.1.3571': attribute type 1 has an invalid length. [ 675.503557][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3566'. [ 675.614887][ T95] block nbd2: Possible stuck request ffff888025778000: control (read@0,1024B). Runtime 60 seconds [ 675.625925][ T95] block nbd2: Possible stuck request ffff888025778200: control (read@1024,1024B). Runtime 60 seconds [ 675.637198][ T95] block nbd2: Possible stuck request ffff888025778400: control (read@2048,1024B). Runtime 60 seconds [ 675.648245][ T95] block nbd2: Possible stuck request ffff888025778600: control (read@3072,1024B). Runtime 60 seconds [ 675.766141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.955039][T19864] ieee802154 phy0 wpan0: encryption failed: -22 [ 676.053935][T19872] netlink: 1088 bytes leftover after parsing attributes in process `syz.3.3576'. [ 676.117053][T19872] sctp: [Deprecated]: syz.3.3576 (pid 19872) Use of int in max_burst socket option deprecated. [ 676.117053][T19872] Use struct sctp_assoc_value instead [ 676.208783][T19878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3579'. [ 676.257768][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.267743][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.277468][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.333295][T19880] raw_sendmsg: syz.1.3580 forgot to set AF_INET. Fix it! [ 676.357883][T19885] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3579'. [ 676.482183][T19889] erspan0: entered allmulticast mode [ 676.643292][T19897] netlink: 'syz.1.3586': attribute type 4 has an invalid length. [ 676.709898][T19906] netlink: 'syz.4.3588': attribute type 1 has an invalid length. [ 676.736174][T16671] Bluetooth: hci3: command 0x0405 tx timeout [ 676.806398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.814042][T19906] bond3: entered promiscuous mode [ 676.846572][T19906] 8021q: adding VLAN 0 to HW filter on device bond3 [ 676.865675][T19909] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 676.913123][T19906] bond3: (slave bridge2): making interface the new active one [ 676.921254][T19906] bridge2: entered promiscuous mode [ 676.931002][T19906] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 676.931582][T19917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3590'. [ 677.282273][T19942] 8021q: VLANs not supported on vcan0 [ 677.304422][T19942] 8021q: VLANs not supported on vcan0 [ 677.329793][T19942] 8021q: VLANs not supported on vcan0 [ 677.338817][T19942] 8021q: VLANs not supported on vcan0 [ 677.353479][T19942] 8021q: VLANs not supported on vcan0 [ 677.415153][T19947] lo: entered allmulticast mode [ 677.428994][T19943] syzkaller0: entered promiscuous mode [ 677.438481][T19943] syzkaller0: entered allmulticast mode [ 677.449052][T19946] lo: left allmulticast mode [ 677.487054][ T5193] udevd[5193]: worker [17734] /devices/virtual/block/nbd2 is taking a long time [ 677.510455][T19943] tipc: Started in network mode [ 677.518867][T19943] tipc: Node identity 36b4274b5861, cluster identity 4711 [ 677.540953][T19943] tipc: Enabled bearer , priority 0 [ 677.572871][T19941] tipc: Resetting bearer [ 677.621763][T19941] tipc: Disabling bearer [ 678.032362][T19978] netlink: 'syz.3.3605': attribute type 1 has an invalid length. [ 678.174579][T19978] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 678.202038][T19978] batadv1: entered promiscuous mode [ 678.222297][T19978] batadv1: entered allmulticast mode [ 678.242923][T19978] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 678.281280][T19978] team0: Failed to send options change via netlink (err -105) [ 678.299920][T19978] team0: Port device batadv1 added [ 678.560148][T20004] xt_l2tp: v2 sid > 0xffff: 1114112 [ 678.596175][ T8980] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 678.605817][ T8980] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 678.886131][ C0] net_ratelimit: 1 callbacks suppressed [ 678.886151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.970815][T20024] netlink: 'syz.4.3615': attribute type 29 has an invalid length. [ 679.168833][T20038] __nla_validate_parse: 5 callbacks suppressed [ 679.168853][T20038] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3620'. [ 679.215181][T20037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.295244][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.343821][T20037] netlink: 'syz.2.3619': attribute type 4 has an invalid length. [ 679.411136][T20050] netlink: 'syz.2.3619': attribute type 4 has an invalid length. [ 679.419683][T20043] netlink: 'syz.2.3619': attribute type 4 has an invalid length. [ 679.429953][T20052] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3621'. [ 679.926537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.016318][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 680.024451][ C1] lec:lec_tx_timeout: lec0 [ 680.029143][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 680.240744][T20090] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3630'. [ 680.426865][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3631'. [ 680.467900][T20094] xt_TPROXY: Can be used only with -p tcp or -p udp [ 680.689961][T20109] sctp: [Deprecated]: syz.3.3635 (pid 20109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.689961][T20109] Use struct sctp_sack_info instead [ 680.742434][T20114] xt_hashlimit: overflow, rate too high: 0 [ 680.868510][T20120] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3639'. [ 680.901053][T20120] tipc: New replicast peer: 255.255.255.255 [ 680.910764][T20120] tipc: Enabled bearer , priority 10 [ 680.925926][T20124] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3641'. [ 680.966121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.298512][T20140] netlink: 'syz.4.3644': attribute type 61 has an invalid length. [ 681.307167][T20140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3644'. [ 681.945192][T20180] veth0: entered promiscuous mode [ 682.006566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.018210][T14548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.028710][ T8991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.042638][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.052274][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.135436][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3655'. [ 682.184565][T20174] veth0: left promiscuous mode [ 682.270948][T20195] syzkaller0: entered promiscuous mode [ 682.275536][T20201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3658'. [ 682.283172][T20195] syzkaller0: entered allmulticast mode [ 682.522023][T20211] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3661'. [ 682.730349][T20224] 8021q: VLANs not supported on ip6gre0 [ 682.806686][ T6033] vlan2: left promiscuous mode [ 682.969485][T16671] Bluetooth: hci3: command 0x0405 tx timeout [ 683.031312][T20243] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 683.338925][T20262] netlink: 'syz.2.3680': attribute type 6 has an invalid length. [ 683.360269][T20262] netlink: 'syz.2.3680': attribute type 5 has an invalid length. [ 683.398395][T20263] syzkaller1: entered promiscuous mode [ 683.404081][T20263] syzkaller1: entered allmulticast mode [ 683.700319][T20282] netlink: 'syz.1.3686': attribute type 1 has an invalid length. [ 683.729872][T20274] vlan2: entered allmulticast mode [ 683.735700][T20274] bridge0: entered allmulticast mode [ 684.159514][T20313] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:32789 [ 684.271537][T20315] __nla_validate_parse: 13 callbacks suppressed [ 684.271561][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3697'. [ 684.336599][T20321] net_ratelimit: 2 callbacks suppressed [ 684.336617][T20321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.404810][T20320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.415165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.579759][T20333] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3702'. [ 684.614169][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3705'. [ 684.680534][T20336] netlink: 'syz.1.3704': attribute type 2 has an invalid length. [ 684.711466][T20336] netlink: 'syz.1.3704': attribute type 2 has an invalid length. [ 684.721207][T20336] netlink: 'syz.1.3704': attribute type 2 has an invalid length. [ 684.740795][T20336] netlink: 'syz.1.3704': attribute type 2 has an invalid length. [ 684.750087][T20336] netlink: 'syz.1.3704': attribute type 2 has an invalid length. [ 684.811560][T20338] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 684.859928][T20338] bond2 (unregistering): Released all slaves [ 684.880161][T20349] netlink: 'syz.3.3708': attribute type 1 has an invalid length. [ 684.952276][T20349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 685.008736][T20348] vlan3: entered promiscuous mode [ 685.029874][T20348] bond3: entered promiscuous mode [ 685.040154][T20348] vlan3: entered allmulticast mode [ 685.046376][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 685.054554][ C1] lec:lec_tx_timeout: lec0 [ 685.059604][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 685.073026][T20348] bond3: entered allmulticast mode [ 685.137165][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.217497][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.301602][T20360] netlink: 'syz.3.3712': attribute type 1 has an invalid length. [ 685.347303][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3712'. [ 685.554813][T20377] netlink: 'syz.0.3717': attribute type 2 has an invalid length. [ 685.606782][T20379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3718'. [ 685.732937][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'. [ 685.849783][T17831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.920727][T20392] syzkaller0: entered promiscuous mode [ 685.940783][T20392] syzkaller0: entered allmulticast mode [ 686.246161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.250460][T20419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3728'. [ 686.398570][T20426] netlink: 'syz.1.3732': attribute type 25 has an invalid length. [ 686.432917][T20430] netlink: 'syz.4.3734': attribute type 4 has an invalid length. [ 686.478070][T20428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3733'. [ 686.494051][T20428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3733'. [ 686.530092][T20441] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 686.589460][T20443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3737'. [ 686.636830][T20445] syzkaller0: entered promiscuous mode [ 686.646413][T20445] syzkaller0: entered allmulticast mode [ 687.002360][T20467] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 687.286222][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.770733][ T8974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.780381][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.926286][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 688.928801][ T6033] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 689.366220][ C1] net_ratelimit: 5 callbacks suppressed [ 689.366240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.465537][T20615] __nla_validate_parse: 6 callbacks suppressed [ 689.465556][T20615] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3781'. [ 689.642810][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3782'. [ 689.795592][T20629] syzkaller0: entered promiscuous mode [ 689.805137][T20629] syzkaller0: entered allmulticast mode [ 689.967775][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3789'. [ 690.066425][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 690.074515][ C1] lec:lec_tx_timeout: lec0 [ 690.079623][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 690.194491][T20659] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3794'. [ 690.406261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.806725][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.817179][T20647] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 690.975090][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.981844][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.990540][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.205104][T20672] validate_nla: 4 callbacks suppressed [ 691.205119][T20672] netlink: 'syz.3.3799': attribute type 9 has an invalid length. [ 691.446450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.007355][T16671] Bluetooth: hci2: command 0x0406 tx timeout [ 692.486211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.791153][T20635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 692.803767][T20671] netlink: 'syz.3.3799': attribute type 1 has an invalid length. [ 692.842317][T20671] netlink: 'syz.3.3799': attribute type 2 has an invalid length. [ 692.989860][T20675] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 693.011128][T20679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3801'. [ 693.502465][T20712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3814'. [ 693.526321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.536398][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.545640][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.678849][T20717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3817'. [ 693.689997][T20718] netlink: 'syz.2.3818': attribute type 11 has an invalid length. [ 694.038055][T20745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3827'. [ 694.342317][T20766] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3834'. [ 694.358996][T20766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3834'. [ 694.376906][T20760] net_ratelimit: 3 callbacks suppressed [ 694.376923][T20760] openvswitch: netlink: IPv4 tunnel dst address is zero [ 694.598526][T20779] syzkaller0: entered allmulticast mode [ 694.633627][T20781] x_tables: duplicate underflow at hook 2 [ 695.055482][T20799] nbd: socks must be embedded in a SOCK_ITEM attr [ 695.086099][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 695.094215][ C1] lec:lec_tx_timeout: lec0 [ 695.098832][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 695.160557][T20795] netlink: 'syz.1.3843': attribute type 11 has an invalid length. [ 695.176728][T20795] __nla_validate_parse: 1 callbacks suppressed [ 695.176747][T20795] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3843'. [ 695.192979][T20811] syzkaller0: entered promiscuous mode [ 695.198693][T20811] syzkaller0: entered allmulticast mode [ 695.210414][T20809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3847'. [ 695.243585][T20811] tipc: Enabled bearer , priority 0 [ 695.250883][T20795] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3843'. [ 695.300131][T20813] bond4: option miimon: invalid value (18446744073709551585) [ 695.322989][T20813] bond4: option miimon: allowed values 0 - 2147483647 [ 695.340239][T20813] bond4 (unregistering): Released all slaves [ 695.368293][T16671] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 695.370855][ T52] Bluetooth: hci0: command 0x0401 tx timeout [ 695.403730][T20810] tipc: Resetting bearer [ 695.424201][T20810] tipc: Disabling bearer [ 695.433865][T20817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3849'. [ 695.627049][T20825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3851'. [ 695.636410][T20825] nbd: must specify a device to reconfigure [ 696.010599][T20847] can: request_module (can-proto-5) failed. [ 696.088057][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.245740][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3862'. [ 696.262903][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3862'. [ 696.298786][T20867] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 696.417869][T20871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3867'. [ 696.428867][T20871] netlink: 'syz.4.3867': attribute type 1 has an invalid length. [ 696.464209][T20871] bond4: entered promiscuous mode [ 696.470990][T20871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 696.505136][T20877] bond4: (slave bridge4): making interface the new active one [ 696.514066][T20877] bridge4: entered promiscuous mode [ 696.524784][T20877] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 696.591016][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3869'. [ 696.646408][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.680060][ T6033] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.712502][ T6033] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.749271][ T6033] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.763763][ T6033] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.088950][T20906] netlink: 'syz.3.3878': attribute type 1 has an invalid length. [ 697.126111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.134128][T20900] bond2: Unable to set up delay as MII monitoring is disabled [ 697.152121][T20900] bond2 (unregistering): Released all slaves [ 697.223824][T20911] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3879'. [ 697.519022][T20926] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 697.583485][T20932] netlink: 'syz.1.3888': attribute type 3 has an invalid length. [ 697.625428][T20928] netlink: 'syz.2.3886': attribute type 39 has an invalid length. [ 697.990221][T20951] bond0: (slave gre0): Error: Device type is different from other slaves [ 698.053406][T20951] bpq0: left allmulticast mode [ 698.070690][T20951] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 698.166161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.263231][T20968] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 698.271535][T20972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.333818][T20972] netlink: 'syz.3.3902': attribute type 8 has an invalid length. [ 698.499005][T20987] netlink: 'syz.1.3907': attribute type 1 has an invalid length. [ 698.538306][T20987] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 698.644965][T21002] lo speed is unknown, defaulting to 1000 [ 698.676851][T21002] lo speed is unknown, defaulting to 1000 [ 698.697849][T21002] lo speed is unknown, defaulting to 1000 [ 698.799603][T21002] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 698.885808][T21002] lo speed is unknown, defaulting to 1000 [ 698.928063][T21002] lo speed is unknown, defaulting to 1000 [ 698.953022][T21002] lo speed is unknown, defaulting to 1000 [ 698.978207][T21002] lo speed is unknown, defaulting to 1000 [ 699.005666][T21002] lo speed is unknown, defaulting to 1000 [ 699.028498][T21002] lo speed is unknown, defaulting to 1000 [ 699.038245][T21002] lo speed is unknown, defaulting to 1000 [ 699.206634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.297918][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.367178][ T52] Bluetooth: hci0: command 0x0401 tx timeout [ 699.371994][T16671] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 699.467953][T21045] netlink: 'syz.1.3924': attribute type 25 has an invalid length. [ 699.669135][T21052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.687384][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.946770][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.106064][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 700.114244][ C1] lec:lec_tx_timeout: lec0 [ 700.119882][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 700.246140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.387833][T21091] __nla_validate_parse: 11 callbacks suppressed [ 700.387854][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3936'. [ 700.472793][T21102] netlink: 'syz.0.3939': attribute type 11 has an invalid length. [ 700.508192][T21098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3938'. [ 700.764053][T21114] bond3: option resend_igmp: invalid value (32767) [ 700.771403][T21114] bond3: option resend_igmp: allowed values 0 - 255 [ 700.781091][T21119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 700.782317][T21114] bond3 (unregistering): Released all slaves [ 700.831860][T21120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.844870][T21121] netlink: 'syz.1.3947': attribute type 2 has an invalid length. [ 701.175114][T21143] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3954'. [ 701.188602][T21144] only policy match revision 0 supported [ 701.188628][T21144] unable to load match [ 701.286187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.559987][T21164] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3960'. [ 701.655035][T21170] syzkaller1: entered promiscuous mode [ 701.694726][T21170] syzkaller1: entered allmulticast mode [ 701.722409][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3963'. [ 701.732841][T21170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3963'. [ 701.851867][T21180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3965'. [ 701.894298][T21182] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 702.042682][T21185] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3966'. [ 702.059760][T21173] openvswitch: netlink: IP tunnel dst address not specified [ 702.180109][T21194] netlink: 'syz.2.3967': attribute type 62 has an invalid length. [ 702.326408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.361571][T21200] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 702.725596][T21227] geneve2: entered promiscuous mode [ 702.744133][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.798685][T21229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 702.825795][T21238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3978'. [ 702.870067][T21238] team0: entered promiscuous mode [ 702.875323][T21238] team0: entered allmulticast mode [ 703.352264][T21274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3993'. [ 703.544990][T21285] netlink: 'syz.4.3998': attribute type 1 has an invalid length. [ 703.819241][T21299] netlink: 'syz.0.4003': attribute type 9 has an invalid length. [ 703.902640][T21309] syzkaller0: entered promiscuous mode [ 703.908620][T21309] syzkaller0: entered allmulticast mode [ 704.278622][T21332] syzkaller0: entered promiscuous mode [ 704.296782][T21332] syzkaller0: entered allmulticast mode [ 704.742690][T21365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.446519][ C1] net_ratelimit: 4 callbacks suppressed [ 705.446540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.692310][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.712866][ T95] block nbd2: Possible stuck request ffff888025778000: control (read@0,1024B). Runtime 90 seconds [ 705.727768][ T95] block nbd2: Possible stuck request ffff888025778200: control (read@1024,1024B). Runtime 90 seconds [ 705.739315][ T95] block nbd2: Possible stuck request ffff888025778400: control (read@2048,1024B). Runtime 90 seconds [ 705.751304][ T95] block nbd2: Possible stuck request ffff888025778600: control (read@3072,1024B). Runtime 90 seconds [ 705.767505][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.154480][T21393] lo speed is unknown, defaulting to 1000 [ 706.326031][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6210 ms [ 706.334136][ C1] lec:lec_tx_timeout: lec0 [ 706.340705][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 706.461336][T21441] __nla_validate_parse: 7 callbacks suppressed [ 706.461357][T21441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4045'. [ 706.486235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.520312][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4046'. [ 706.725152][T21455] x_tables: duplicate underflow at hook 1 [ 706.758240][T21455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4050'. [ 706.828896][T21455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'. [ 707.054021][T21474] netlink: 'syz.2.4056': attribute type 64 has an invalid length. [ 707.213204][T21484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4060'. [ 707.272106][T21484] openvswitch: netlink: IP tunnel dst address not specified [ 707.321556][T21480] bond3: Removing last arp target with arp_interval on [ 707.526246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.704224][T21501] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.711771][T21501] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.841869][T21501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.872481][T21501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.058917][T21505] gre0: entered promiscuous mode [ 708.074696][T21505] gre0: entered allmulticast mode [ 708.151669][T21510] syzkaller0: entered promiscuous mode [ 708.158509][T21510] syzkaller0: entered allmulticast mode [ 708.175412][ T8975] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.204726][ T8975] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.577279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.817005][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.527234][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.608965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.838285][ T8975] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.848149][ T8975] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.972055][T21522] dvmrp1: entered allmulticast mode [ 710.477886][T21574] tipc: Started in network mode [ 710.482836][T21574] tipc: Node identity ac14140f, cluster identity 4711 [ 710.498995][T21574] tipc: New replicast peer: 255.255.255.255 [ 710.517889][T21574] tipc: Enabled bearer , priority 10 [ 710.630802][T21584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4088'. [ 710.646146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.790155][T21595] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4092'. [ 710.809268][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4092'. [ 711.273922][T21626] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4103'. [ 711.339482][T21634] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4100'. [ 711.452932][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.461943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.688532][ T5968] tipc: Node number set to 2886997007 [ 711.705117][T21651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4106'. [ 712.085793][T21628] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 712.096085][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 712.098690][ T8975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.104308][ C1] lec:lec_tx_timeout: lec0 [ 712.118255][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 712.124693][T21628] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 712.298114][T21671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4111'. [ 712.349639][T21628] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 712.370358][T21628] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 712.626639][T21628] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 712.651424][T21628] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 712.902087][T21628] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 712.929250][T21628] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 713.126142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.266881][T21628] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 713.298389][T21628] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 713.328770][T21713] bridge0: entered allmulticast mode [ 713.684242][T21733] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4120'. [ 713.898377][T21746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4124'. [ 714.166137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.567343][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.575754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.979263][T21778] syzkaller1: entered promiscuous mode [ 714.986918][T21780] netlink: 'syz.2.4130': attribute type 1 has an invalid length. [ 714.998102][T21778] syzkaller1: entered allmulticast mode [ 715.009412][T21780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4130'. [ 715.019614][T21780] netlink: 'syz.2.4130': attribute type 5 has an invalid length. [ 715.031152][T21782] netlink: 'syz.0.4131': attribute type 1 has an invalid length. [ 715.044590][T21780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4130'. [ 715.117581][T21782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 715.192803][T21787] bond3: (slave veth0_to_bond): making interface the new active one [ 715.206629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.229780][T21787] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 715.243645][T21791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 715.250963][T21791] IPv6: NLM_F_CREATE should be set when creating new route [ 715.327861][T21782] bond3: entered promiscuous mode [ 715.353478][T21782] veth0_to_bond: entered promiscuous mode [ 715.382642][T21782] bond3: entered allmulticast mode [ 715.409024][T21782] veth0_to_bond: entered allmulticast mode [ 715.827890][T21817] netlink: 'syz.3.4140': attribute type 1 has an invalid length. [ 715.852864][T21817] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4140'. [ 715.890090][T21817] NCSI netlink: No device for ifindex 0 [ 716.246125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.471585][T21849] batadv_slave_0: entered promiscuous mode [ 716.543538][T21848] batadv_slave_0: left promiscuous mode [ 716.797355][T21874] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 716.802056][T21868] tipc: Enabling of bearer rejected, failed to enable media [ 716.838329][T21870] syzkaller0: entered promiscuous mode [ 716.843866][T21870] syzkaller0: entered allmulticast mode [ 716.965944][T21835] lo speed is unknown, defaulting to 1000 [ 717.206631][ T8975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.214982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.286339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.332281][T21897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4160'. [ 717.578699][T21902] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4163'. [ 717.621721][T16671] block nbd5: Receive control failed (result -32) [ 717.839856][T21915] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4166'. [ 717.873962][T21910] SET target dimension over the limit! [ 717.926207][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 717.934365][ C1] lec:lec_tx_timeout: lec0 [ 717.939179][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 718.222068][T21930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4170'. [ 718.326537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.789831][T21959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4175'. [ 719.049205][T21965] netlink: 'syz.4.4176': attribute type 10 has an invalid length. [ 719.366358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.450554][T21982] syzkaller0: entered promiscuous mode [ 719.471516][T21982] syzkaller0: entered allmulticast mode [ 719.514050][T21998] syzkaller0: entered promiscuous mode [ 719.532199][T21998] syzkaller0: entered allmulticast mode [ 719.560028][T21998] ip6t_srh: unknown srh invflags 4000 [ 719.572007][T22000] netlink: 'syz.2.4186': attribute type 1 has an invalid length. [ 720.406412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.414593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.424066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.435944][T22023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4190'. [ 721.512031][T22000] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 721.537040][T22005] syzkaller0: mtu less than device minimum [ 721.559374][T22006] vlan2: entered allmulticast mode [ 721.564809][T22006] veth1: entered allmulticast mode [ 722.069129][T22054] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4197'. [ 722.183107][T22065] x_tables: duplicate underflow at hook 1 [ 722.420143][T22079] netlink: 'syz.4.4206': attribute type 1 has an invalid length. [ 722.521008][T22079] 8021q: adding VLAN 0 to HW filter on device bond6 [ 722.587806][T22085] 8021q: adding VLAN 0 to HW filter on device bond7 [ 722.598887][T22085] bond6: (slave bond7): Enslaving as an active interface with a down link [ 722.611869][T22089] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4209'. [ 722.817404][T22093] nbd0: detected capacity change from 0 to 63 [ 722.827419][T22098] block nbd0: NBD_DISCONNECT [ 722.852259][T22098] block nbd0: Disconnected due to user request. [ 722.873514][T17984] blk_print_req_error: 138 callbacks suppressed [ 722.873534][T17984] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 722.892350][T22098] block nbd0: shutting down sockets [ 722.916051][T17984] buffer_io_error: 138 callbacks suppressed [ 722.916070][T17984] Buffer I/O error on dev nbd0, logical block 0, async page read [ 722.937390][ T56] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 722.947485][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 722.947518][ C1] lec:lec_tx_timeout: lec0 [ 722.960353][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 722.969782][ T56] Buffer I/O error on dev nbd0, logical block 1, async page read [ 722.977602][ T56] Buffer I/O error on dev nbd0, logical block 2, async page read [ 722.985367][ T56] Buffer I/O error on dev nbd0, logical block 3, async page read [ 722.994594][T17984] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.002426][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.005739][T17984] Buffer I/O error on dev nbd0, logical block 0, async page read [ 723.014530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.022040][T17984] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.038372][T17984] Buffer I/O error on dev nbd0, logical block 1, async page read [ 723.046485][T17984] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.056047][T17984] Buffer I/O error on dev nbd0, logical block 2, async page read [ 723.063863][T17984] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.074082][T17984] Buffer I/O error on dev nbd0, logical block 3, async page read [ 723.082047][T17984] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.091742][T17984] Buffer I/O error on dev nbd0, logical block 0, async page read [ 723.100142][T17984] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.109848][T17984] Buffer I/O error on dev nbd0, logical block 1, async page read [ 723.117764][T17984] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.130651][T17984] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.155579][T17984] ldm_validate_partition_table(): Disk read failed. [ 723.164885][T17984] Dev nbd0: unable to read RDB block 0 [ 723.185059][T17984] nbd0: unable to read partition table [ 723.222074][T17984] ldm_validate_partition_table(): Disk read failed. [ 723.247260][T17984] Dev nbd0: unable to read RDB block 0 [ 723.291046][T17984] nbd0: unable to read partition table [ 723.597449][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 723.608090][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.614141][T22129] netlink: 'syz.1.4217': attribute type 1 has an invalid length. [ 723.624782][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 723.639027][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 723.663632][T22129] netlink: 'syz.1.4217': attribute type 1 has an invalid length. [ 723.690529][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 723.712531][T22131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4218'. [ 723.772555][T22131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4218'. [ 724.053463][T22147] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4224'. [ 724.541823][T22172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4233'. [ 724.609195][T22174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4233'. [ 724.618972][T22172] xfrm1: entered promiscuous mode [ 724.632373][T22172] xfrm1: entered allmulticast mode [ 724.646842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.457816][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.466821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.489339][T22205] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 725.686262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.974955][T22226] ip6gre1: entered allmulticast mode [ 726.037598][T22229] bridge0: port 3(veth0_to_bridge) entered blocking state [ 726.045164][T22229] bridge0: port 3(veth0_to_bridge) entered disabled state [ 726.060421][T22229] veth0_to_bridge: entered allmulticast mode [ 726.074194][T22229] veth0_to_bridge: entered promiscuous mode [ 726.726448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.461172][T22268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.487270][T22268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.503340][T22268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.544071][T22268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.610731][T22268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.627487][T22269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.644270][T22269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.661763][T22267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.766208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.966025][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 727.974084][ C1] lec:lec_tx_timeout: lec0 [ 727.979115][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 728.398740][T22315] tipc: Started in network mode [ 728.415669][T22315] tipc: Node identity d697ac2b4092, cluster identity 4711 [ 728.454612][T22315] tipc: Enabled bearer , priority 0 [ 728.477738][T22318] +: renamed from syzkaller0 [ 728.495510][T22318] tipc: Disabling bearer [ 729.138077][T22338] __nla_validate_parse: 6 callbacks suppressed [ 729.138097][T22338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4288'. [ 730.599683][T22342] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 730.867427][T22368] netlink: 'syz.2.4295': attribute type 1 has an invalid length. [ 730.955537][T22368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 731.007042][T22368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4295'. [ 731.050010][T22380] netlink: 'syz.0.4298': attribute type 13 has an invalid length. [ 731.103647][T22380] erspan0: refused to change device tx_queue_len [ 731.131379][T22385] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4302'. [ 731.195203][T22383] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 731.238649][T22383] bond3 (unregistering): Released all slaves [ 731.761231][T22402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4307'. [ 731.852133][T22410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4309'. [ 731.862324][T22410] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 731.926290][ C1] net_ratelimit: 10 callbacks suppressed [ 731.926312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.270224][T22426] bond4: Removing last ns target with arp_interval on [ 732.287231][T22422] nbd: socks must be embedded in a SOCK_ITEM attr [ 732.294170][T22422] block nbd0: shutting down sockets [ 732.521239][T22439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4319'. [ 732.575731][T22442] sch_fq: defrate 0 ignored. [ 732.672866][T22439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4319'. [ 732.726691][T22448] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4321'. [ 732.862181][T22458] sctp: [Deprecated]: syz.2.4324 (pid 22458) Use of int in maxseg socket option. [ 732.862181][T22458] Use struct sctp_assoc_value instead [ 732.955444][T22465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4326'. [ 732.986075][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 732.994194][ C1] lec:lec_tx_timeout: lec0 [ 732.998868][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 733.112301][T22471] netlink: 'syz.2.4328': attribute type 16 has an invalid length. [ 733.132274][T22471] netlink: 'syz.2.4328': attribute type 17 has an invalid length. [ 733.182465][T22470] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.197500][T22470] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.278607][T22471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 733.518799][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4334'. [ 733.673329][T22507] netlink: 'syz.3.4339': attribute type 10 has an invalid length. [ 733.683123][T22507] openvswitch: netlink: Flow key attr not present in new flow. [ 734.072743][T22525] netlink: 'syz.4.4344': attribute type 1 has an invalid length. [ 734.092068][T22525] netlink: 'syz.4.4344': attribute type 1 has an invalid length. [ 734.101423][T22525] netlink: 'syz.4.4344': attribute type 8 has an invalid length. [ 734.133928][T22524] netlink: 'syz.4.4344': attribute type 1 has an invalid length. [ 734.160547][T22524] __nla_validate_parse: 3 callbacks suppressed [ 734.160565][T22524] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4344'. [ 734.176412][T22524] netlink: 'syz.4.4344': attribute type 1 has an invalid length. [ 734.184740][T22524] netlink: 606 bytes leftover after parsing attributes in process `syz.4.4344'. [ 734.201842][T22524] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4344'. [ 734.376775][T22537] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.4349'. [ 734.398491][T22537] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4349'. [ 734.410670][T22537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4349'. [ 734.420650][T22537] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4349'. [ 734.431135][T22537] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4349'. [ 734.486788][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.495175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.581195][T22549] syzkaller0: entered promiscuous mode [ 734.607752][T22549] syzkaller0: entered allmulticast mode [ 734.790279][T22561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4356'. [ 734.833468][T22561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4356'. [ 735.038302][T22575] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 735.129380][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.316386][T22589] ip_vti0: entered promiscuous mode [ 735.379390][T22596] syzkaller0: entered promiscuous mode [ 735.384934][T22596] syzkaller0: entered allmulticast mode [ 735.611102][T22603] can: request_module (can-proto-0) failed. [ 735.637764][T22616] sctp: [Deprecated]: syz.1.4375 (pid 22616) Use of int in maxseg socket option. [ 735.637764][T22616] Use struct sctp_assoc_value instead [ 735.767016][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.775491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.782983][ T95] block nbd2: Possible stuck request ffff888025778000: control (read@0,1024B). Runtime 120 seconds [ 735.795118][ T95] block nbd2: Possible stuck request ffff888025778200: control (read@1024,1024B). Runtime 120 seconds [ 735.806766][ T95] block nbd2: Possible stuck request ffff888025778400: control (read@2048,1024B). Runtime 120 seconds [ 735.818368][ T95] block nbd2: Possible stuck request ffff888025778600: control (read@3072,1024B). Runtime 120 seconds [ 735.996504][T22629] validate_nla: 6 callbacks suppressed [ 735.996525][T22629] netlink: 'syz.1.4378': attribute type 17 has an invalid length. [ 736.018365][T22626] ip_vti0: entered promiscuous mode [ 736.166272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.231615][T22637] netlink: 'syz.4.4382': attribute type 6 has an invalid length. [ 736.463667][T22651] FAULT_INJECTION: forcing a failure. [ 736.463667][T22651] name failslab, interval 1, probability 0, space 0, times 0 [ 736.496338][T22651] CPU: 0 UID: 0 PID: 22651 Comm: syz.2.4386 Not tainted syzkaller #0 PREEMPT(full) [ 736.496367][T22651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 736.496379][T22651] Call Trace: [ 736.496388][T22651] [ 736.496396][T22651] dump_stack_lvl+0xe8/0x150 [ 736.496429][T22651] should_fail_ex+0x412/0x560 [ 736.496461][T22651] should_failslab+0xa8/0x100 [ 736.496484][T22651] kmem_cache_alloc_noprof+0x87/0x6e0 [ 736.496514][T22651] ? __netlink_lookup+0xc6/0x8b0 [ 736.496537][T22651] ? skb_clone+0x212/0x3a0 [ 736.496569][T22651] skb_clone+0x212/0x3a0 [ 736.496601][T22651] __netlink_deliver_tap+0x404/0x850 [ 736.496636][T22651] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.496659][T22651] netlink_deliver_tap+0x19c/0x1b0 [ 736.496692][T22651] netlink_unicast+0x7e3/0x9b0 [ 736.496732][T22651] ? __pfx_netlink_unicast+0x10/0x10 [ 736.496763][T22651] ? __alloc_skb+0x193/0x390 [ 736.496787][T22651] ? netlink_sendmsg+0x650/0xb40 [ 736.496807][T22651] ? skb_put+0x11b/0x210 [ 736.496836][T22651] netlink_sendmsg+0x813/0xb40 [ 736.496869][T22651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.496893][T22651] ? aa_file_perm+0x12d/0x1630 [ 736.496920][T22651] ? aa_sock_msg_perm+0xf1/0x1b0 [ 736.496948][T22651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 736.496973][T22651] sock_write_iter+0x503/0x550 [ 736.497008][T22651] ? __pfx_sock_write_iter+0x10/0x10 [ 736.497063][T22651] do_iter_readv_writev+0x619/0x8c0 [ 736.497085][T22651] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 736.497111][T22651] ? bpf_lsm_file_permission+0x9/0x20 [ 736.497133][T22651] ? security_file_permission+0x75/0x260 [ 736.497155][T22651] ? rw_verify_area+0x255/0x4d0 [ 736.497188][T22651] vfs_writev+0x33c/0x990 [ 736.497222][T22651] ? __pfx_vfs_writev+0x10/0x10 [ 736.497261][T22651] ? __fget_files+0x2a/0x420 [ 736.497289][T22651] ? __fget_files+0x3a0/0x420 [ 736.497311][T22651] ? __fget_files+0x2a/0x420 [ 736.497343][T22651] do_writev+0x154/0x2e0 [ 736.497369][T22651] ? __pfx_do_writev+0x10/0x10 [ 736.497405][T22651] do_syscall_64+0xe2/0xf80 [ 736.497428][T22651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.497447][T22651] ? trace_irq_disable+0x37/0x100 [ 736.497467][T22651] ? clear_bhb_loop+0x60/0xb0 [ 736.497491][T22651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.497512][T22651] RIP: 0033:0x7f1fc6d9aeb9 [ 736.497531][T22651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.497548][T22651] RSP: 002b:00007f1fc7c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 736.497575][T22651] RAX: ffffffffffffffda RBX: 00007f1fc7015fa0 RCX: 00007f1fc6d9aeb9 [ 736.497590][T22651] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 736.497603][T22651] RBP: 00007f1fc7c69090 R08: 0000000000000000 R09: 0000000000000000 [ 736.497615][T22651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.497628][T22651] R13: 00007f1fc7016038 R14: 00007f1fc7015fa0 R15: 00007ffd90383ef8 [ 736.497663][T22651] [ 736.929305][T22657] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 737.206212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.381620][T22693] openvswitch: netlink: Flow actions attr not present in new flow. [ 737.407393][T22693] netlink: 'syz.3.4397': attribute type 7 has an invalid length. [ 737.546161][T22703] FAULT_INJECTION: forcing a failure. [ 737.546161][T22703] name failslab, interval 1, probability 0, space 0, times 0 [ 737.578119][T22703] CPU: 1 UID: 0 PID: 22703 Comm: syz.0.4402 Not tainted syzkaller #0 PREEMPT(full) [ 737.578149][T22703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 737.578162][T22703] Call Trace: [ 737.578170][T22703] [ 737.578178][T22703] dump_stack_lvl+0xe8/0x150 [ 737.578212][T22703] should_fail_ex+0x412/0x560 [ 737.578244][T22703] should_failslab+0xa8/0x100 [ 737.578271][T22703] kmem_cache_alloc_noprof+0x87/0x6e0 [ 737.578303][T22703] ? skb_clone+0x212/0x3a0 [ 737.578339][T22703] skb_clone+0x212/0x3a0 [ 737.578372][T22703] __netlink_deliver_tap+0x404/0x850 [ 737.578409][T22703] ? netlink_deliver_tap+0x2e/0x1b0 [ 737.578432][T22703] netlink_deliver_tap+0x19c/0x1b0 [ 737.578456][T22703] netlink_sendskb+0x68/0x140 [ 737.578491][T22703] netlink_unicast+0x3a3/0x9b0 [ 737.578532][T22703] ? __pfx_netlink_unicast+0x10/0x10 [ 737.578575][T22703] netlink_rcv_skb+0x2b6/0x4b0 [ 737.578598][T22703] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 737.578624][T22703] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 737.578659][T22703] ? netlink_deliver_tap+0x2e/0x1b0 [ 737.578689][T22703] netlink_unicast+0x80f/0x9b0 [ 737.578731][T22703] ? __pfx_netlink_unicast+0x10/0x10 [ 737.578761][T22703] ? __alloc_skb+0x193/0x390 [ 737.578785][T22703] ? netlink_sendmsg+0x650/0xb40 [ 737.578806][T22703] ? skb_put+0x11b/0x210 [ 737.578843][T22703] netlink_sendmsg+0x813/0xb40 [ 737.578876][T22703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.578901][T22703] ? aa_file_perm+0x12d/0x1630 [ 737.578928][T22703] ? aa_sock_msg_perm+0xf1/0x1b0 [ 737.578955][T22703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.578982][T22703] sock_write_iter+0x503/0x550 [ 737.579016][T22703] ? __pfx_sock_write_iter+0x10/0x10 [ 737.579045][T22703] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 737.579079][T22703] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 737.579108][T22703] do_iter_readv_writev+0x619/0x8c0 [ 737.579133][T22703] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 737.579158][T22703] ? bpf_lsm_file_permission+0x9/0x20 [ 737.579182][T22703] ? security_file_permission+0x75/0x260 [ 737.579205][T22703] ? rw_verify_area+0x255/0x4d0 [ 737.579238][T22703] vfs_writev+0x33c/0x990 [ 737.579271][T22703] ? __pfx_vfs_writev+0x10/0x10 [ 737.579316][T22703] ? __fget_files+0x2a/0x420 [ 737.579344][T22703] ? __fget_files+0x3a0/0x420 [ 737.579365][T22703] ? __fget_files+0x2a/0x420 [ 737.579398][T22703] do_writev+0x154/0x2e0 [ 737.579424][T22703] ? __pfx_do_writev+0x10/0x10 [ 737.579460][T22703] do_syscall_64+0xe2/0xf80 [ 737.579481][T22703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.579501][T22703] ? trace_irq_disable+0x37/0x100 [ 737.579520][T22703] ? clear_bhb_loop+0x60/0xb0 [ 737.579545][T22703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.579565][T22703] RIP: 0033:0x7fc46459aeb9 [ 737.579583][T22703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.579601][T22703] RSP: 002b:00007fc4654c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 737.579623][T22703] RAX: ffffffffffffffda RBX: 00007fc464815fa0 RCX: 00007fc46459aeb9 [ 737.579638][T22703] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 737.579651][T22703] RBP: 00007fc4654c1090 R08: 0000000000000000 R09: 0000000000000000 [ 737.579664][T22703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.579676][T22703] R13: 00007fc464816038 R14: 00007fc464815fa0 R15: 00007fff749235d8 [ 737.579709][T22703] [ 738.006297][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 738.014431][ C1] lec:lec_tx_timeout: lec0 [ 738.026137][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 738.246469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.256608][ T8992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.268842][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.279956][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.455518][T22730] netlink: 'syz.3.4411': attribute type 1 has an invalid length. [ 738.595785][T22730] 8021q: adding VLAN 0 to HW filter on device bond5 [ 738.693058][T22740] block nbd0: not configured, cannot reconfigure [ 738.727823][T22740] block nbd0: not configured, cannot reconfigure [ 738.744939][T22736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 738.762869][T22736] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 738.779222][T22736] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 738.864275][T22730] veth3: entered promiscuous mode [ 738.870172][T22749] netlink: 'syz.1.4416': attribute type 1 has an invalid length. [ 738.882690][T22730] bond5: (slave veth3): Enslaving as an active interface with a down link [ 738.900767][T22745] vlan0: entered allmulticast mode [ 738.905919][T22745] bond5: entered allmulticast mode [ 739.124625][T22760] pimreg: entered allmulticast mode [ 739.189254][T22760] netlink: 'syz.2.4420': attribute type 11 has an invalid length. [ 739.286104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.377478][T22777] netlink: 'syz.0.4427': attribute type 1 has an invalid length. [ 739.493734][T22783] __nla_validate_parse: 19 callbacks suppressed [ 739.493753][T22783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4427'. [ 739.608283][ T8991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.617348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.644769][T22783] 8021q: adding VLAN 0 to HW filter on device bond4 [ 739.678744][T22790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4432'. [ 739.746858][T22793] netlink: 'syz.2.4433': attribute type 1 has an invalid length. [ 739.775007][T22793] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4433'. [ 739.805761][T22795] netlink: 'syz.2.4433': attribute type 11 has an invalid length. [ 740.144689][T22818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4440'. [ 740.336223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.444963][T22835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4445'. [ 740.463507][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4446'. [ 740.502560][ T24] IPVS: starting estimator thread 0... [ 740.525200][T22837] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4446'. [ 740.560557][T22837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4446'. [ 740.597774][T22840] IPVS: using max 32 ests per chain, 76800 per kthread [ 740.667169][T22849] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4451'. [ 741.141568][T22874] syzkaller1: entered promiscuous mode [ 741.149181][T22877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4458'. [ 741.160620][T22874] syzkaller1: entered allmulticast mode [ 741.905962][T22912] ipvlan2: entered promiscuous mode [ 742.049779][T22920] netlink: 'syz.4.4473': attribute type 1 has an invalid length. [ 742.072237][T22920] netlink: 'syz.4.4473': attribute type 1 has an invalid length. [ 742.161507][T22926] vlan2: entered promiscuous mode [ 742.180566][T22926] vlan2: entered allmulticast mode [ 742.185846][T22926] hsr_slave_1: entered allmulticast mode [ 742.267490][T22926] netlink: 'syz.0.4474': attribute type 14 has an invalid length. [ 742.288468][T22930] xt_hashlimit: size too large, truncated to 1048576 [ 742.406392][ C1] net_ratelimit: 12 callbacks suppressed [ 742.406415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.578603][T22929] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 742.894431][T22957] 8021q: adding VLAN 0 to HW filter on device bond6 [ 742.909000][T22960] netlink: 'syz.1.4484': attribute type 3 has an invalid length. [ 743.036048][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 743.044123][ C1] lec:lec_tx_timeout: lec0 [ 743.048847][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 743.446531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.789102][T23011] bond8: entered promiscuous mode [ 743.796621][T23011] bond8: entered allmulticast mode [ 743.802497][T23011] 8021q: adding VLAN 0 to HW filter on device bond8 [ 743.845620][T23011] macvlan2: entered promiscuous mode [ 743.872273][T23011] macvlan2: entered allmulticast mode [ 743.880292][T23011] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 744.088263][ T8991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.097763][T17831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.112720][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.189165][T23003] lo speed is unknown, defaulting to 1000 [ 744.255102][T23024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 744.298738][T23024] macvlan2: entered promiscuous mode [ 744.312680][T23024] macvlan2: entered allmulticast mode [ 744.324604][T23024] bond3: entered allmulticast mode [ 744.342645][T23024] bond3: entered promiscuous mode [ 744.360137][T23024] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 744.383566][T23024] team0: Port device macvlan2 added [ 744.668922][T23039] SET target dimension over the limit! [ 744.840904][T23056] netlink: 'syz.2.4515': attribute type 10 has an invalid length. [ 745.349659][T23087] siw: device registration error -23 [ 745.369915][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.378340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.394822][T23090] __nla_validate_parse: 17 callbacks suppressed [ 745.394843][T23090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4523'. [ 745.419068][T23091] blkio.reset_stats is deprecated [ 745.492115][T23093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.501478][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.541006][T23095] netlink: 'syz.3.4524': attribute type 21 has an invalid length. [ 745.556847][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4524'. [ 745.649667][T23095] netlink: 'syz.3.4524': attribute type 21 has an invalid length. [ 745.658710][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4524'. [ 745.675825][T23097] xt_TCPMSS: Only works on TCP SYN packets [ 745.703427][T23097] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4526'. [ 745.752140][T23097] batman_adv: batadv0: Adding interface: dummy0 [ 745.760613][T23097] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.789346][T23097] batman_adv: batadv0: Interface activated: dummy0 [ 745.985836][T23106] netlink: 'syz.2.4529': attribute type 1 has an invalid length. [ 746.013228][T23106] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4529'. [ 746.067086][T23113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.139265][T23117] netlink: 'syz.4.4532': attribute type 10 has an invalid length. [ 746.148878][T23117] bridge0: port 3(team0) entered blocking state [ 746.155578][T23117] bridge0: port 3(team0) entered disabled state [ 746.164611][T23117] team0: entered allmulticast mode [ 746.175583][T23117] team_slave_1: entered allmulticast mode [ 746.219174][T23117] team0: entered promiscuous mode [ 746.230819][T23117] team_slave_1: entered promiscuous mode [ 746.281013][T23118] netlink: 'syz.4.4532': attribute type 10 has an invalid length. [ 746.432498][T23127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4533'. [ 746.450593][T23125] bond9: option resend_igmp: invalid value (32767) [ 746.459697][T23125] bond9: option resend_igmp: allowed values 0 - 255 [ 746.479273][T23125] bond9 (unregistering): Released all slaves [ 746.695133][T23135] bond5: entered promiscuous mode [ 746.700495][T23135] bond5: entered allmulticast mode [ 746.706531][T23135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 746.715762][T23122] infiniband syz0: set down [ 746.722207][T23122] infiniband syz0: added bond_slave_0 [ 746.774167][T23122] RDS/IB: syz0: added [ 746.778933][T23122] smc: adding ib device syz0 with port count 1 [ 746.794776][T23122] smc: ib device syz0 port 1 has no pnetid [ 747.074884][T23159] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4540'. [ 747.149420][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4542'. [ 747.359963][T23175] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4547'. [ 747.882622][T23202] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4556'. [ 748.056016][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 748.064129][ C1] lec:lec_tx_timeout: lec0 [ 748.069525][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 748.166171][ C1] net_ratelimit: 48 callbacks suppressed [ 748.166194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.418676][T23218] netlink: 'syz.2.4561': attribute type 2 has an invalid length. [ 748.609725][T23233] netem: change failed [ 748.750445][T23238] syzkaller0: entered promiscuous mode [ 748.775766][T23238] syzkaller0: entered allmulticast mode [ 748.809075][T23238] 0: reclassify loop, rule prio 0, protocol 800 [ 749.206515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.207282][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.223854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.297415][T23259] bond9: option xmit_hash_policy: invalid value (64) [ 749.319460][T23259] bond9 (unregistering): Released all slaves [ 749.853280][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.862428][T14545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.872821][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.199881][T23300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.246091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.437746][T23316] Unsupported ieee802154 address type: 0 [ 750.997382][T23342] __nla_validate_parse: 69 callbacks suppressed [ 750.997402][T23342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4594'. [ 751.139161][T23347] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4596'. [ 751.353107][T23362] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.4600'. [ 751.847764][T23396] netlink: 'syz.0.4608': attribute type 1 has an invalid length. [ 752.120955][T23406] tipc: Enabling not permitted [ 752.136270][T23406] tipc: Enabling of bearer rejected, failed to enable media [ 752.339071][T23424] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20000 [ 752.392025][T23409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4613'. [ 752.394012][T23408] syzkaller0: entered promiscuous mode [ 752.417519][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.459265][T23408] syzkaller0: entered allmulticast mode [ 752.580910][T23418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.877535][T23441] netlink: 'syz.4.4618': attribute type 2 has an invalid length. [ 752.885359][T23441] netlink: 'syz.4.4618': attribute type 11 has an invalid length. [ 752.904590][T23441] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4618'. [ 752.969992][T23445] IPVS: length: 8 != 1152 [ 753.086724][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 753.094934][ C1] lec:lec_tx_timeout: lec0 [ 753.099591][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 753.366970][ C1] net_ratelimit: 7 callbacks suppressed [ 753.366986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.406089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.491537][T23454] lo: entered allmulticast mode [ 754.500573][T23454] lo: left allmulticast mode [ 754.531004][T23454] netlink: 'syz.0.4623': attribute type 24 has an invalid length. [ 754.667535][T23463] tipc: MTU too low for tipc bearer [ 754.758123][T23472] syzkaller0: entered promiscuous mode [ 754.765853][T23472] syzkaller0: entered allmulticast mode [ 754.822446][T23476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4630'. [ 754.832059][T23476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4630'. [ 754.978238][ T8991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.988348][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.997984][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.189582][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4636'. [ 755.295160][T23503] SET target dimension over the limit! [ 755.314991][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4639'. [ 755.391095][T23508] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 755.602692][T23517] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 755.651943][T23517] bond9 (unregistering): Released all slaves [ 755.948307][T23545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4652'. [ 756.170012][T23556] netlink: 'syz.0.4653': attribute type 18 has an invalid length. [ 756.249798][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.258757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.681260][T23560] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4656'. [ 756.891631][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.901849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.540430][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.719941][T23554] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4653'. [ 757.732464][T23554] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4653'. [ 757.742408][T23554] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4653'. [ 757.759623][T23538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.882472][T23568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4658'. [ 757.897309][T23565] netlink: 'syz.4.4657': attribute type 1 has an invalid length. [ 757.911075][T23565] netlink: 'syz.4.4657': attribute type 2 has an invalid length. [ 757.917879][T23568] rdma_rxe: rxe_newlink: failed to add bond0 [ 757.921031][T23565] netlink: 'syz.4.4657': attribute type 1 has an invalid length. [ 757.934245][T23565] netlink: 'syz.4.4657': attribute type 3 has an invalid length. [ 757.942883][T23565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4657'. [ 757.962272][T23573] netlink: 'syz.2.4659': attribute type 20 has an invalid length. [ 758.002503][T23573] IPv6: NLM_F_CREATE should be specified when creating new route [ 758.106241][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 758.114416][ C1] lec:lec_tx_timeout: lec0 [ 758.119577][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 758.321148][T23590] netlink: 'syz.2.4663': attribute type 2 has an invalid length. [ 758.342788][T23590] netlink: 'syz.2.4663': attribute type 11 has an invalid length. [ 758.380419][T23590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4663'. [ 758.512296][T23599] tipc: MTU too low for tipc bearer [ 758.566118][ C1] net_ratelimit: 3 callbacks suppressed [ 758.566139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.124005][T23622] netlink: 'syz.4.4676': attribute type 1 has an invalid length. [ 759.606115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.625525][T23661] delete_channel: no stack [ 759.632528][T23646] syzkaller1: entered promiscuous mode [ 759.657891][T23646] syzkaller1: entered allmulticast mode [ 759.784127][T23667] netlink: 'syz.1.4687': attribute type 1 has an invalid length. [ 759.965092][T23672] sctp: [Deprecated]: syz.2.4688 (pid 23672) Use of int in maxseg socket option. [ 759.965092][T23672] Use struct sctp_assoc_value instead [ 759.992101][T23672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4688'. [ 760.002760][T23674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4690'. [ 760.030495][T23674] IPv6: NLM_F_REPLACE set, but no existing node found! [ 760.177305][T23677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4691'. [ 760.217987][T23677] : entered promiscuous mode [ 760.347183][T23654] lo speed is unknown, defaulting to 1000 [ 760.522813][T23701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.531584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.646965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.728165][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.738258][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.758366][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.173391][T23681] lo speed is unknown, defaulting to 1000 [ 761.243429][T23734] netlink: 'syz.1.4707': attribute type 1 has an invalid length. [ 761.251990][T23734] netlink: 'syz.1.4707': attribute type 11 has an invalid length. [ 761.696089][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.936157][T23751] [ 761.938556][T23751] ====================================================== [ 761.945618][T23751] WARNING: possible circular locking dependency detected [ 761.952685][T23751] syzkaller #0 Not tainted [ 761.957172][T23751] ------------------------------------------------------ [ 761.964256][T23751] syz.1.4712/23751 is trying to acquire lock: [ 761.970351][T23751] ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 761.979546][T23751] [ 761.979546][T23751] but task is already holding lock: [ 761.986939][T23751] ffff888026f8d870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 761.996233][T23751] [ 761.996233][T23751] which lock already depends on the new lock. [ 761.996233][T23751] [ 762.006663][T23751] [ 762.006663][T23751] the existing dependency chain (in reverse order) is: [ 762.015726][T23751] [ 762.015726][T23751] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 762.023771][T23751] _raw_spin_lock_bh+0x36/0x50 [ 762.029196][T23751] nr_rt_ioctl+0x215/0xf90 [ 762.034260][T23751] sock_do_ioctl+0x101/0x320 [ 762.039435][T23751] sock_ioctl+0x5c6/0x7f0 [ 762.044329][T23751] __se_sys_ioctl+0xfc/0x170 [ 762.049467][T23751] do_syscall_64+0xe2/0xf80 [ 762.054534][T23751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.060965][T23751] [ 762.060965][T23751] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 762.068904][T23751] _raw_spin_lock_bh+0x36/0x50 [ 762.074564][T23751] nr_rt_device_down+0xbe/0x860 [ 762.079981][T23751] nr_device_event+0x137/0x150 [ 762.085295][T23751] notifier_call_chain+0x19d/0x3a0 [ 762.090949][T23751] __dev_notify_flags+0x16d/0x310 [ 762.096533][T23751] netif_change_flags+0xe8/0x1a0 [ 762.102107][T23751] dev_change_flags+0x130/0x260 [ 762.107508][T23751] dev_ioctl+0x7b4/0x1150 [ 762.112383][T23751] sock_do_ioctl+0x23e/0x320 [ 762.117605][T23751] sock_ioctl+0x5c6/0x7f0 [ 762.122593][T23751] __se_sys_ioctl+0xfc/0x170 [ 762.127843][T23751] do_syscall_64+0xe2/0xf80 [ 762.132882][T23751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.139309][T23751] [ 762.139309][T23751] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 762.147322][T23751] __lock_acquire+0x15a5/0x2cf0 [ 762.152733][T23751] lock_acquire+0x106/0x330 [ 762.157778][T23751] _raw_spin_lock_bh+0x36/0x50 [ 762.163419][T23751] nr_rt_ioctl+0x40c/0xf90 [ 762.168385][T23751] sock_do_ioctl+0x101/0x320 [ 762.173515][T23751] sock_ioctl+0x5c6/0x7f0 [ 762.178480][T23751] __se_sys_ioctl+0xfc/0x170 [ 762.183622][T23751] do_syscall_64+0xe2/0xf80 [ 762.188669][T23751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.195110][T23751] [ 762.195110][T23751] other info that might help us debug this: [ 762.195110][T23751] [ 762.205461][T23751] Chain exists of: [ 762.205461][T23751] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 762.205461][T23751] [ 762.219308][T23751] Possible unsafe locking scenario: [ 762.219308][T23751] [ 762.226776][T23751] CPU0 CPU1 [ 762.232156][T23751] ---- ---- [ 762.237683][T23751] lock(&nr_node->node_lock); [ 762.242468][T23751] lock(nr_node_list_lock); [ 762.249601][T23751] lock(&nr_node->node_lock); [ 762.256909][T23751] lock(nr_neigh_list_lock); [ 762.261646][T23751] [ 762.261646][T23751] *** DEADLOCK *** [ 762.261646][T23751] [ 762.269980][T23751] 2 locks held by syz.1.4712/23751: [ 762.275191][T23751] #0: ffffffff8fb28538 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 762.284713][T23751] #1: ffff888026f8d870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 762.294423][T23751] [ 762.294423][T23751] stack backtrace: [ 762.300336][T23751] CPU: 1 UID: 0 PID: 23751 Comm: syz.1.4712 Not tainted syzkaller #0 PREEMPT(full) [ 762.300358][T23751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 762.300369][T23751] Call Trace: [ 762.300377][T23751] [ 762.300386][T23751] dump_stack_lvl+0xe8/0x150 [ 762.300411][T23751] print_circular_bug+0x2e1/0x300 [ 762.300431][T23751] check_noncircular+0x12e/0x150 [ 762.300451][T23751] __lock_acquire+0x15a5/0x2cf0 [ 762.300477][T23751] ? irqentry_exit+0x59c/0x620 [ 762.300495][T23751] ? lockdep_hardirqs_on+0x7a/0x110 [ 762.300511][T23751] ? irqentry_exit+0x59c/0x620 [ 762.300527][T23751] ? trace_irq_disable+0x37/0x100 [ 762.300547][T23751] ? nr_rt_ioctl+0x40c/0xf90 [ 762.300568][T23751] lock_acquire+0x106/0x330 [ 762.300590][T23751] ? nr_rt_ioctl+0x40c/0xf90 [ 762.300613][T23751] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 762.300631][T23751] ? lock_acquire+0x221/0x330 [ 762.300654][T23751] ? nr_rt_ioctl+0x40c/0xf90 [ 762.300681][T23751] _raw_spin_lock_bh+0x36/0x50 [ 762.300707][T23751] ? nr_rt_ioctl+0x40c/0xf90 [ 762.300728][T23751] nr_rt_ioctl+0x40c/0xf90 [ 762.300754][T23751] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 762.300781][T23751] ? apparmor_capable+0x137/0x1a0 [ 762.300809][T23751] ? capable+0x88/0xe0 [ 762.300824][T23751] ? nr_ioctl+0x1b1/0x3b0 [ 762.300844][T23751] sock_do_ioctl+0x101/0x320 [ 762.300860][T23751] ? __pfx_sock_do_ioctl+0x10/0x10 [ 762.300874][T23751] ? do_futex+0x333/0x420 [ 762.300904][T23751] sock_ioctl+0x5c6/0x7f0 [ 762.300929][T23751] ? __pfx_sock_ioctl+0x10/0x10 [ 762.300954][T23751] ? __fget_files+0x2a/0x420 [ 762.300978][T23751] ? __fget_files+0x3a0/0x420 [ 762.300998][T23751] ? __fget_files+0x2a/0x420 [ 762.301018][T23751] ? bpf_lsm_file_ioctl+0x9/0x20 [ 762.301039][T23751] ? __pfx_sock_ioctl+0x10/0x10 [ 762.301062][T23751] __se_sys_ioctl+0xfc/0x170 [ 762.301087][T23751] do_syscall_64+0xe2/0xf80 [ 762.301105][T23751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.301121][T23751] ? trace_irq_disable+0x37/0x100 [ 762.301136][T23751] ? clear_bhb_loop+0x60/0xb0 [ 762.301155][T23751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.301171][T23751] RIP: 0033:0x7f02d799aeb9 [ 762.301187][T23751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.301203][T23751] RSP: 002b:00007f02d87d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.301221][T23751] RAX: ffffffffffffffda RBX: 00007f02d7c15fa0 RCX: 00007f02d799aeb9 [ 762.301233][T23751] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000005 [ 762.301243][T23751] RBP: 00007f02d7a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 762.301254][T23751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.301264][T23751] R13: 00007f02d7c16038 R14: 00007f02d7c15fa0 R15: 00007ffd9a1e9cb8 [ 762.301284][T23751] [ 762.646700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.766321][ C1] net_ratelimit: 4 callbacks suppressed [ 763.766343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.926040][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 763.929580][ T8974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.934390][ C1] lec:lec_tx_timeout: lec0 [ 763.944382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.948969][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 764.806171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.846250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.847805][ T95] block nbd2: Possible stuck request ffff888025778000: control (read@0,1024B). Runtime 150 seconds [ 765.866611][ T95] block nbd2: Possible stuck request ffff888025778200: control (read@1024,1024B). Runtime 150 seconds [ 765.878246][ T95] block nbd2: Possible stuck request ffff888025778400: control (read@2048,1024B). Runtime 150 seconds [ 765.889763][ T95] block nbd2: Possible stuck request ffff888025778600: control (read@3072,1024B). Runtime 150 seconds [ 766.487013][ T8974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.496312][ T5968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.504789][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.406524][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.967203][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 768.975319][ C1] lec:lec_tx_timeout: lec0 [ 768.979875][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 769.446138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.687097][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.695365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.326893][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.335181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.344178][ T8974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.353153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.486108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.526238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog