last executing test programs: 5.832191314s ago: executing program 4 (id=4333): socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newqdisc={0x464, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x8c28, 0x10, 0x5, 0x7f, 0x2, 0x93, 0x9, 0xb4d, 0xfffffff7, 0x1, 0x1, 0x4, 0xfffffffa, 0x0, 0xf29, 0x3, 0x40, 0x4, 0x5, 0x5, 0x0, 0x6, 0x1, 0x1, 0x8001, 0x7, 0xb, 0x0, 0x2, 0x7, 0xfe7, 0x1, 0x1808d6ff, 0x2, 0x9fa, 0x80, 0x8001, 0x80, 0xfffff5d1, 0xb61e, 0xd, 0x1ff, 0xb0, 0x84, 0x6, 0x1, 0x7, 0x2, 0x4, 0xa8, 0xfffffffd, 0x7, 0x6fb, 0x8, 0xfffffffb, 0x2, 0x0, 0xff, 0x4, 0xd9, 0x4, 0xf0e, 0xffffb001, 0x5, 0x7, 0x7, 0x1, 0x8, 0xd, 0x4, 0x8001, 0x10, 0x3, 0x80000000, 0x0, 0xff, 0xf0c4, 0x4, 0x2, 0x8, 0x9, 0x4, 0xb, 0x5, 0x20, 0x5, 0xffffffff, 0x1ff, 0x3, 0x0, 0x0, 0xe5, 0x0, 0x1, 0x1, 0x4, 0x4, 0x7fffffff, 0x101, 0xf, 0x7, 0x9, 0xffffffff, 0x2, 0x1, 0x9, 0xed19, 0x4, 0xc22d, 0x2, 0x1, 0x1, 0x3ff, 0x1, 0x4, 0xc, 0x9, 0xfffff699, 0x3, 0x80000000, 0xb6, 0x800000, 0x0, 0x7, 0x6, 0x7, 0x5, 0x4, 0x7ff, 0x2, 0x7, 0x0, 0x9, 0x8, 0x0, 0x8, 0xd699, 0x8, 0xed, 0x5, 0x7, 0x3, 0x7, 0x5, 0x6, 0x0, 0xd6, 0x23, 0x1, 0x9, 0xe, 0x100, 0xb2, 0x3, 0x2, 0x4, 0x5, 0x7527, 0x7f, 0x0, 0x9a6b, 0x9, 0xfff, 0x7, 0x8faa, 0xf, 0x4, 0x8, 0xfb5, 0x4, 0x9, 0x800, 0x10, 0x3, 0xcd6, 0x1, 0xf, 0xb, 0xfc, 0x0, 0x7, 0x3, 0x4a1, 0x8, 0x1, 0x6, 0x9, 0x1000, 0x85aa, 0x3f61, 0x280, 0x3d0f, 0x8000, 0x7, 0x1, 0x4, 0xffffffff, 0xfbee, 0xf, 0x8, 0x4, 0x1, 0x7f, 0x40, 0x2, 0x40, 0x7, 0x1, 0x3, 0x401, 0xfffffffe, 0xfffffff7, 0x80000001, 0x2, 0x8d, 0x8, 0xaefd, 0x3, 0xfffffff7, 0x3, 0x463, 0x0, 0x8, 0x7, 0x9b, 0x6, 0x2, 0xa, 0x8c000000, 0x7, 0x7, 0xfff, 0xc0b2, 0x1, 0x8, 0x3, 0x7, 0x8, 0x8, 0x7fff, 0x8, 0x3, 0xa6, 0x6, 0x4, 0x3, 0x267, 0x1ff, 0x7, 0x2, 0x10, 0x2, 0x5, 0x3, 0x6ac]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x0, 0xd, 0xfffa, 0x9, 0x7}, {0xc, 0x2, 0xd, 0x6, 0x7f, 0xffff}, 0x5, 0xa, 0x97}}, @TCA_TBF_PBURST={0x8, 0x7, 0x82}]}}]}, 0x464}}, 0x4000010) r4 = socket(0xa, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1000, @remote, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020000fd", @ANYRES32=r6, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r7, &(0x7f0000000040)={&(0x7f0000000340)={0xa, 0x1, 0x0, @empty, 0x40000005}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118000000000000002900000037"], 0x40}, 0x24000800) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000580)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0xb00000000000000}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, @loopback={0x3f}, @loopback, 0x10000006, 0x0, 0x6, 0x0, 0xac, 0x80010300}) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000180)={r8}) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) 5.526270848s ago: executing program 1 (id=4338): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d107a", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) (async) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)="474d107a", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) (async) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000000140)=""/13, &(0x7f0000000080)=0xd) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1840}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1840}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'wg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.957188337s ago: executing program 1 (id=4344): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x80) ioctl$sock_netdev_private(r3, 0x89fb, &(0x7f0000000280)="9adfde7402abcab646e8d8e1280ea60565ca42bd") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="4d7e00000000000000002a00000005003600000000000c00050000000069047ce2fd65000000000008000200", @ANYRES32=r10, @ANYBLOB="0600060000000000"], 0x38}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4048000) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES64=r11], 0x14}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r13, 0x29, 0x39, &(0x7f0000000200)={0x87, 0x8, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @private2]}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 4.322800647s ago: executing program 4 (id=4348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000e00)=ANY=[@ANYBLOB="200000000000000029000000360000003c010000000000000100090005020004180000000000000029000000390000001600000000000000400000000000000069000000360000003304000000000000c910fe800000000000000000000000000041c91020010000000000000000000000000002000000002e0f8aef8c614059c07be68dea3edf9bcbd44a43387f9f68f2897298d65974ee12c70298d008d4dd17f21ad48cfb06569a2f8d5ca3893f0c5c1d9f182908803bc8292a631c82e5f3ef95b5f9ffbf9c4968aad9f886ac3e7acbe3cbe2205eb95893d1db5461d731663a9a59666b2eb5fdcdb93fc0b781ec8ccd837e9ebf533d7ed75747907ea5e205d0012bc88037e0d38bac4e4fcb0ff89fd6827b6db6bef8f186273b0aad08add7ae"], 0x78}}], 0x2, 0x4040005) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff80000000000000000a000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140005"], 0x38}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000bc0)={0x5}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 4.076921782s ago: executing program 4 (id=4349): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf25050000000500050003000000080002000300000005000500400000000800020008000000"], 0x34}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB="ed4d010000000000000031000000080003001ea9d7660529662a62e61307285ae2828b7b041833e4b85200000000d5c6a4b6d169dfbfdae2fbd76fde698ab850a08c2badd5cce56071b0597632e82dcdf9d07af80978ba8f76f3f848ffbd84ea658a52f3da0b4848df41786d4db4ee2cc3ac28f28c425194b62cd612fbffa2e8dfb49f529ff3299cd5e61a936c4671b54f27099245a8dcb3791b1814599e0ff04862560d54da974e9e2cc306e1cb2b9e8f0b22c4930805eaeaeebb85dbcae5fdebf45111e6e219a22150ff95afd403db43c6f9e6e5ff9bd49a7500"/231, @ANYRES8=r2, @ANYBLOB="0800db00", @ANYRES32=r3, @ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 1.959288875s ago: executing program 1 (id=4355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}}) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r3, 0x5}, &(0x7f0000000240)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500030010"], 0x44}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3, 0x0, 0x6, 0x1, 0xb, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 1.913893603s ago: executing program 4 (id=4357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000104010400000000000000000200000408000540e4641476b27f5d170100000008000340000000000a000200000001010200000008000540000000800600064000040000790d387ec97401f2a7bedb5f78ddbd0a6b1683e7cdc522c9e51bff2692e4dfb41a7ad44c10d7ee6385ceda409f7ccb5d74193141da620086f82db26b77fcea527d7058190f81303757051968e0875e87d6bfea8dc74ff95e5981ee1bd901506e746d3a903ab55498dab2dba07004344957c2ae"], 0x48}, 0x1, 0x0, 0x0, 0x40055}, 0x40000) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0xb15, 0x4) sendmmsg$inet(r1, &(0x7f00000049c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="5d5ff9883c7a858a8e2659b069f9925b8f64172976084d06bab86f8818dbabc6bd9cdf22850db42064ab50a2a36fef3bef5a251d", 0x34}], 0x1}}], 0x1, 0x40000c0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000240)=0x4) r2 = socket$netlink(0x10, 0x3, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000001280)=""/247, &(0x7f0000000200)=0xf7) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYRESHEX, @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x22, &(0x7f0000000100), 0x4) r6 = socket(0x10, 0x2, 0x0) sendmsg$SOCK_DESTROY(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 1.78256835s ago: executing program 1 (id=4358): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x0, 0x5f, 0x0, 0x3, 0x5, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x4, 0x2, 0xfffffff9, 0x0, 0xfffffffd, 0x1, 0x80000001, 0x7f, 0x0, 0xfffffffc}}) epoll_create(0x9) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000400), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000240)='+', 0x1}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="87539e1ccdbbec730080000008000000"], 0x10}}], 0x1, 0x4000045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.769187172s ago: executing program 2 (id=4360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="85fcad88000000001c0012800b0001006970766c616e00000c0002800600020032"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000001000030400000000fcdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005000128009000100766c616e00000000400002800600010002000000340004800c0039004ef1f011ffffffff0c0001000300000000feffff0c00010005000000f7ffffff0c004100080000000000000008000500", @ANYRES32=r3], 0x78}}, 0x0) 1.554448801s ago: executing program 3 (id=4362): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) (async) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4788}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r4, &(0x7f0000004dc0), 0x0, 0x4000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x1320, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket(0x10, 0x80003, 0x0) (async) r9 = socket(0x2b, 0x80801, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x220, 0x0, 0xffffffff, 0x0, 0xa8, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x8000000, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4, 0x10, [0x8, 0x2b, 0x36, 0x1a, 0x23, 0x29, 0x30, 0x7, 0x6, 0xa, 0x3d, 0x31, 0xc, 0x37, 0x15, 0x3], 0x1, 0x1, 0x10}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @broadcast, @multicast2, @icmp_id=0x64, @gre_key=0x5}}}}, {{@ip={@multicast1, @multicast1, 0xff, 0xffffffff, 'ipvlan1\x00', 'caif0\x00', {0xff}, {0xff}, 0x21, 0x6, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @broadcast, @remote, @icmp_id=0x67, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r13 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) 1.524535017s ago: executing program 0 (id=4363): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) writev(r8, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r8, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @private1, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0xfdef) 1.509354701s ago: executing program 3 (id=4364): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r2) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000040) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000040000000000000140000000c00018008000100", @ANYRES32=r12], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000040000000000000140000000c00018008000100", @ANYRES32=r12], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x2f0, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf9a}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xe61b, 0x9, 0x9, 0xb5}, {0x8, 0x9, 0x95, 0x3}, {0x1ff, 0xf3, 0x4, 0x9}, {0x8, 0x5, 0x3, 0xfffffffa}, {0x4f, 0x31, 0xc9, 0x4}, {0xd, 0x9, 0xf, 0xeb6f}, {0x80, 0xe, 0x54, 0xb92f}, {0x6, 0x76, 0x4, 0x401}, {0x5, 0xfd, 0xf5, 0xa68}]}}}]}}]}, 0x2f0}}, 0x80) pwrite64(r1, &(0x7f0000000380)='k', 0x1, 0xc) 1.4275086s ago: executing program 2 (id=4365): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x82*'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}, @nested={0x4, 0x19}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.299251617s ago: executing program 0 (id=4366): syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001c80)="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", 0x5df}, {0x0}], 0x2}}], 0x2, 0x8014) socket$inet6(0xa, 0x5, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000fee000)=0x3ea, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000080)={0x7, 'wg1\x00', {0x4}, 0x3}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6, 0x1}]}, 0x10) listen(r1, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.294537039s ago: executing program 2 (id=4367): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001100000000000000000000008500000027000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.250190264s ago: executing program 3 (id=4368): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x7, 0xffff}) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) mmap(&(0x7f000088e000/0x2000)=nil, 0x2000, 0x3000001, 0x40010, r1, 0xffffd000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = gettid() sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x124, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x124}}, 0x20040801) r8 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r8, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000000), 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003f000500000000000000b29f8681b7f07d12c0fea0726e"], 0x20}}, 0x4004080) 1.163051821s ago: executing program 0 (id=4369): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xc8}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) (async) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a001400fe04ff060000000006001500"], 0x3c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}}, 0x0) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r5 = socket(0x1f, 0x8, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000080)={0x6, {{0xa, 0x1, 0x20000000, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e22, 0xe, @empty, 0x2008}}}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @null, @default]}) (async) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @null, @default]}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x25dfdbff, {0x7}, [{0x4}, {0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x6, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000094}, 0x8000) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x0, 0x25dfdbff, {0x7}, [{0x4}, {0x30, 0x1, [@m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x6, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000094}, 0x8000) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) 1.162545572s ago: executing program 2 (id=4370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) (async) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async, rerun: 64) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r4, 0x0, 0xffffffff004) unshare(0x22020600) (async, rerun: 64) r5 = epoll_create(0x2040) (rerun: 64) epoll_pwait(r5, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES8=r4, @ANYRESOCT=r4], 0x14}}, 0x4004000) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) unshare(0x8040200) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000005}, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xffffffffffffff9f, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x50, r10, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getqdisc={0x28, 0x26, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xb}, {0xd, 0xfff2}, {0x7, 0x9}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44014}, 0x80) 1.08959409s ago: executing program 0 (id=4371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x24c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x21c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xfffffffc}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x101}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x80}}, 0x2}}, 0x2e) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000100)={0x1d, r12, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r11, &(0x7f0000000080)={0x1d, r12, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$can_j1939(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)}, 0x1, 0x0, 0x0, 0x20000081}, 0x480c4) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0xfff3, 0x10}, {0x0, 0x9}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 1.0268396s ago: executing program 3 (id=4372): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000064400048014000180090001006c61737400000000040002802c00"], 0xf4}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000500)={0x3, 0x0, 0x4ad0, 0xfffffff8}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x7}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x8, 0xc, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x1000005, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="4c0000000d0a010800000000000000000afa38010900020073017a31000000000900010073797a3100000000200003801c0000800c000180e9ff00001e1c00000c000a800600010057b80000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket(0x2, 0x3, 0xff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000002040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x29, 0x0, 0x1, 0xb5}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f00000008c0)="664ecbc06ae2f2adce3ab61db67a6468736dac9680c9a01605e5584e6feb5fe3508d1998466e0b16f6b101e70c231d18d2efb39cdc639259446924b4dfe696ed3e2b91d5b33f73b175e0e5e9cf72e8fda9b924ebced1234d62cda708197338ab1cf39383d92effb761585acc9a56f2d505a989e7c53fcf8c82d0c5dac26eb4ee906cfd61c6106e8a322199056dbe47518e5da920db7ee04f043bb1d856c691dddbd09f37333301ce151b954c68c50e0863e1f27076aebdf20d7d16ee878cad9d5a0cc8c3af5478fa25545970302a75f5a4b67a28d7607567294fe1bdb1cb841cbcb6ff629f3f8805cce61186d7453fd3974e8f79c981ce3da89d7acdb4f6", &(0x7f0000000580)=""/36, &(0x7f00000009c0)="577d76772a4089a3c357146174799ee138e443a85dc728f3fdb8002ad213e31dda99ce861ba7505148dcad4f73c0c8059a7e74faa5fd32ae0164ffe41fb0c868fef6fc28202d94a59363eb822cb2b4dd1bde14422d5e044ab484ee83d5857e9df7ba654a0fb0fd8cd4bfd48d3030544b4596bcde3a31ac8fe6a801b8c4cf0a77c109d8a07840473ca8748fb7e8b81f13742e4df37e0c2e22908303351c7aa775235ca614ff6d9e149c3aded85d05dbc5d3ff48ba96f1a4091b1d2b2768c1cc4ee721724f3c2d3374562296c2d0b4f49af6e3040f1fa466e6daf0df7673afaabffca15d6f77af837f8d6f03ca74", &(0x7f0000000ac0)="79dc77925deecfb4360e14df41f7effcb59966be8b94d0784e610103a828e251425bbd9f72d6c092febbad5dbd90126447e4326c74943cf509a779b7e68a7d0d4d3df630135f8101505e5e60d4bbfcf797622fceb3682ebbfd6789f2af64f61f799dee425c7ff58b1a816251d1f7721ec00e8be37ce47bbac419ed61f0821bfe6798d06a2f67ff6c7734a3241a4ac89aba51acb3903b18b9b304c0d4a8786ce6da54631d0a9df427223f62cee27a8dd353e7dfc2d463f6fe957881adee4165764647a909e1a776b887d4e6fbccf189b4f3d3b7aa12f0bd3f600e", 0xfffffffa, r6, 0x4}, 0x38) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x104, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x3c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x9, 0xfffffffc}, 0x70bd2a, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 939.108394ms ago: executing program 4 (id=4373): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x318, 0x158, 0x0, 0x148, 0x158, 0x148, 0x280, 0x240, 0x240, 0x280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x75}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) syz_emit_ethernet(0xfffffcaa, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x3404, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x20, 0x0, 0x684}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'hsr0\x00', &(0x7f0000000180)=@ethtool_regs={0x4, 0x4, 0x3, "93ee8f"}}) r2 = socket(0x27, 0x80000, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)='X\x00\x00\x00', 0x4}], 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={r8}, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x2c, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0x8}, {0x1d, 0x10009}, {0xe, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x186}]}, 0x2c}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@link_local, @random="930abe52e2d3", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x14, 0x2f, 0x0, @local, @mcast2, {[@fragment={0x88, 0x0, 0x66, 0x1, 0x0, 0x2, 0x68}], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 923.465413ms ago: executing program 1 (id=4374): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000010000000000000000", 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b70842ade5bd4557044da0056c88c22951404004ac983b56dbb55c54c001fa51b25bc472ca796ec1a57bf556678de4a0edf42cceb85d1a993663b9d7543f389316316e26346809c963d5e74cc35018dbf6c8f6612dbbbe232badbbd5711a95385999fcfa0768a60dc4598a3ec5abf20aa03f43681e00cbb99e3d9dc610144", 0xb1}], 0x1}, 0x20000800) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 820.124125ms ago: executing program 2 (id=4375): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x17, 0xc, 0xb, [@fwd={0x8}]}, {0x0, [0x30, 0x2e, 0x0, 0x5f, 0x0, 0x61, 0x30, 0x2e, 0x30]}}, 0x0, 0x2f, 0x0, 0x1, 0x3}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x0, 'ip_vti0\x00', 0x3}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) 715.241851ms ago: executing program 1 (id=4376): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, 0x0) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FIONCLEX(r3, 0x5450) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000140)=0x3, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", '\"\vEX', '\r\x00'}, 0x38) (async, rerun: 32) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c01000032000100fffffffffddbdf250200000004003880090101"], 0x12c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000010000eabf0004000100008016010000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRESDEC, @ANYRES32, @ANYRESOCT=r5], 0x50) (async) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) 714.790085ms ago: executing program 3 (id=4377): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in=@local}}, 0x9db) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}, 0x1, 0x0, 0x0, 0x20040894}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x91) 677.029196ms ago: executing program 2 (id=4378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x2, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xffe0}, {0xffff, 0xffe0}, {0x3, 0x1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000002ac0)=""/4067, 0xfe3}, {&(0x7f0000000600)=""/86, 0x56}], 0x4}, 0x9}], 0x1, 0x40000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff00000000000000008500000089ac6d1e0000009500000000a16734674b14e295e62887b1c8673587a06a4dbbbac61208017dbb8a71b4ea6fc8256bb6019bd70e79087af389f35daa2e928c94362535920dfd42f4013a16789272a49c98faeec45dd5aff367a870274a9412cfa8989986609c4ce01086b10e76be51ee4b19769a04355aae9543082ea9846d0b078276e8ab2fe38b91a991b037f0f4e8b82d5c1de890366d5b2f3e6acf5d1c4acc4ca8a3226c5dfcfc586330db867018174c440ac2bc4619909509158463657f22af36d3fa67a6a3fc83abb0dbb980f577aeeefe90fdc514b12b715ee90012dd9c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x34}, 0x94) 620.22837ms ago: executing program 0 (id=4379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000c881}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) ppoll(&(0x7f0000000180)=[{r2, 0x200}, {r2, 0x710}], 0x2, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000009c80)={'team_slave_0\x00', &(0x7f0000009c40)=@ethtool_pauseparam={0x26, 0x0, 0x8, 0x4}}) 454.410513ms ago: executing program 0 (id=4380): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0400f9f40700090401802a202000000000000000002e7ee24d0d000800", 0x24) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x48, 0x140f, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000040) write$cgroup_int(r3, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, r10}, 0x14) sendto$inet6(r9, &(0x7f00000001c0)="800064de269bb73c", 0x8, 0x2000c880, &(0x7f00000000c0)={0xa, 0x4e20, 0x80cd, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x800}, 0x1c) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 446.032832ms ago: executing program 3 (id=4381): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2501000000080001000300000008000200"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e500000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x6, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r6, 0x2, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r6, 0x5, 0x10}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b160000000000000000020000085400048018000180080001006f7366000c000280080001400000000438000180080001006e6174002c000280080001400000000008000540000000170800034000000014080002400000000208000440070000150900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x17, &(0x7f0000000000), 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r10, 0x1, 0x0, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x60}}, 0x20000000) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r12, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x4000090) 0s ago: executing program 4 (id=4382): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x494, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x6, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x388, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x494, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x6, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x388, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7fffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcef, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) (async) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000240)="112efc61dfb89b674a9c6721decbc84cd6c0ff31d5531af9ea135f5b", 0xfffffffffffffeed, 0x8010, 0x0, 0x0) kernel console output (not intermixed with test programs): 17] sk_prot_alloc+0x101/0x210 [ 531.420581][T18217] ? sk_alloc+0x27/0x390 [ 531.420603][T18217] sk_alloc+0x3a/0x390 [ 531.420626][T18217] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 531.420658][T18217] ? __fget_files+0x2a/0x420 [ 531.420676][T18217] ? __fget_files+0x3a0/0x420 [ 531.420693][T18217] ? __fget_files+0x2a/0x420 [ 531.420716][T18217] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 531.420735][T18217] bpf_prog_test_run+0x2c7/0x340 [ 531.420757][T18217] __sys_bpf+0x5cb/0x920 [ 531.420776][T18217] ? __pfx___sys_bpf+0x10/0x10 [ 531.420808][T18217] ? ksys_write+0x242/0x270 [ 531.420833][T18217] ? __pfx_ksys_write+0x10/0x10 [ 531.420862][T18217] __x64_sys_bpf+0x7c/0x90 [ 531.420885][T18217] do_syscall_64+0xe2/0xf80 [ 531.420906][T18217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.420923][T18217] ? trace_irq_disable+0x37/0x100 [ 531.420939][T18217] ? clear_bhb_loop+0x60/0xb0 [ 531.420959][T18217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.420976][T18217] RIP: 0033:0x7f2665d9aeb9 [ 531.420999][T18217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.421013][T18217] RSP: 002b:00007f2666c5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.421032][T18217] RAX: ffffffffffffffda RBX: 00007f2666015fa0 RCX: 00007f2665d9aeb9 [ 531.421045][T18217] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 531.421057][T18217] RBP: 00007f2666c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 531.421068][T18217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.421078][T18217] R13: 00007f2666016038 R14: 00007f2666015fa0 R15: 00007ffff3af1c78 [ 531.421107][T18217] [ 531.706868][T18198] lo speed is unknown, defaulting to 1000 [ 531.910042][T18221] netlink: 47 bytes leftover after parsing attributes in process `syz.4.3096'. [ 531.958872][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3095'. [ 532.027305][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 532.035368][ C0] lec:lec_tx_timeout: lec0 [ 532.039968][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 532.173443][T18232] xt_hashlimit: max too large, truncated to 1048576 [ 532.373264][T18233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3095'. [ 532.447875][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 532.617118][T18059] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.634973][T18059] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.756510][T18059] bridge_slave_0: entered allmulticast mode [ 532.777385][T18059] bridge_slave_0: entered promiscuous mode [ 532.837712][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 532.849557][T18257] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3101'. [ 532.875561][T18059] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.906137][T18059] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.913834][T18059] bridge_slave_1: entered allmulticast mode [ 532.964726][T18059] bridge_slave_1: entered promiscuous mode [ 533.037448][T16793] Bluetooth: hci3: command tx timeout [ 533.082464][T18253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3100'. [ 533.248070][T18059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.311877][T18059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.568560][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3104'. [ 533.716819][T18059] team0: Port device team_slave_0 added [ 533.750347][T18059] team0: Port device team_slave_1 added [ 533.842825][T18292] netlink: 'syz.2.3107': attribute type 7 has an invalid length. [ 534.008116][ T8433] bond2: (slave macvlan0): failed to get link speed/duplex [ 534.077499][ T51] block nbd2: Possible stuck request ffff888025ea0000: control (read@0,1024B). Runtime 60 seconds [ 534.089339][ T51] block nbd2: Possible stuck request ffff888025ea0200: control (read@1024,1024B). Runtime 60 seconds [ 534.100700][ T51] block nbd2: Possible stuck request ffff888025ea0400: control (read@2048,1024B). Runtime 60 seconds [ 534.108846][T18059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.112139][ T51] block nbd2: Possible stuck request ffff888025ea0600: control (read@3072,1024B). Runtime 60 seconds [ 534.141685][T18059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.155876][T18306] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 534.168985][T18059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.188016][ T8426] tipc: Disabling bearer [ 534.195592][ T8426] tipc: Left network mode [ 534.315092][T18059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.328449][T18059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.367938][T18059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.650592][T18319] lo speed is unknown, defaulting to 1000 [ 534.657065][T18059] hsr_slave_0: entered promiscuous mode [ 534.678645][T18059] hsr_slave_1: entered promiscuous mode [ 534.698786][T18059] debugfs: 'hsr0' already exists in 'hsr' [ 534.704556][T18059] Cannot create hsr debugfs directory [ 534.820057][T18329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.053606][T18336] lo speed is unknown, defaulting to 1000 [ 535.066291][T18342] lo: Caught tx_queue_len zero misconfig [ 535.080838][T18342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 535.117433][T16793] Bluetooth: hci3: command tx timeout [ 535.335676][T18352] __nla_validate_parse: 1 callbacks suppressed [ 535.335694][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3117'. [ 535.819469][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 535.928225][ T8433] bond2: (slave macvlan0): failed to get link speed/duplex [ 536.220349][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3127'. [ 536.519081][T18421] netlink: 'syz.1.3130': attribute type 2 has an invalid length. [ 536.534317][T18421] !: entered promiscuous mode [ 536.777491][ T8425] bond2: (slave macvlan0): failed to get link speed/duplex [ 536.862572][T18439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3136'. [ 536.914695][T18439] netem: change failed [ 537.003584][T18440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3136'. [ 537.047302][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 537.051383][T18440] netem: change failed [ 537.055525][ C0] lec:lec_tx_timeout: lec0 [ 537.064147][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 537.138957][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 537.371297][T18466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3142'. [ 537.556277][ T8426] team0 (unregistering): Port device team_slave_1 removed [ 537.575758][ T8426] team0 (unregistering): Port device C removed [ 537.656799][ T8426] team0 (unregistering): Port device dummy0 removed [ 537.751311][T18467] tipc: Enabled bearer , priority 0 [ 537.774345][T18470] syzkaller0: entered promiscuous mode [ 537.785896][T18470] syzkaller0: entered allmulticast mode [ 537.793655][T18476] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 537.982814][T18492] xt_hashlimit: size too large, truncated to 1048576 [ 538.007629][T18449] tipc: Resetting bearer [ 538.056546][T18449] tipc: Disabling bearer [ 538.106737][T18059] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 538.225000][T18504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3148'. [ 538.373926][T18487] lo speed is unknown, defaulting to 1000 [ 538.375055][T18059] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 538.415241][T18059] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 538.521343][T18059] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 538.731312][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 538.751747][ T8426] IPVS: stop unused estimator thread 0... [ 538.917700][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 539.262604][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3157'. [ 539.517910][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 539.604803][T18059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.648529][ T8425] bond2: (slave macvlan0): failed to get link speed/duplex [ 539.736508][T18059] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.790464][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.797661][ T6217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.829981][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 539.852662][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.859873][ T6217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.058136][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 540.197425][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 540.336879][T18587] ip6erspan0: entered allmulticast mode [ 540.377445][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 540.441413][T18601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3168'. [ 540.530369][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 540.664853][T18613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3172'. [ 540.678285][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 540.684329][T18613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3172'. [ 540.751538][T18059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.963002][T18059] veth0_vlan: entered promiscuous mode [ 540.990279][T18059] veth1_vlan: entered promiscuous mode [ 541.035737][T18059] veth0_macvtap: entered promiscuous mode [ 541.059439][T18059] veth1_macvtap: entered promiscuous mode [ 541.113989][T18059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.147205][T18059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.202932][ T6217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.224823][ T6217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.250345][ T6217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.273559][ T6217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.352103][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3179'. [ 541.407058][T18642] lo speed is unknown, defaulting to 1000 [ 541.582958][ T8432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.606820][ T8432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.683157][ T8426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.709185][ T8426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.872214][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3182'. [ 542.395352][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.415313][T18694] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3186'. [ 542.424678][ T5140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.441399][ T5140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.454426][ T5140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.463104][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 542.559538][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'. [ 542.582665][T18693] lo speed is unknown, defaulting to 1000 [ 542.618954][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3187'. [ 542.628209][T18698] netlink: 'syz.4.3187': attribute type 11 has an invalid length. [ 542.944028][T18693] chnl_net:caif_netlink_parms(): no params data found [ 543.037269][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5970 ms [ 543.045357][ C0] lec:lec_tx_timeout: lec0 [ 543.050160][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 543.256511][T18722] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3192'. [ 543.287147][T18693] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.304504][T18693] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.319938][T18693] bridge_slave_0: entered allmulticast mode [ 543.334589][T18693] bridge_slave_0: entered promiscuous mode [ 543.368965][T18693] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.386457][T18693] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.406316][T18693] bridge_slave_1: entered allmulticast mode [ 543.418043][T18693] bridge_slave_1: entered promiscuous mode [ 543.436350][T18724] lo speed is unknown, defaulting to 1000 [ 543.522086][T18693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.541780][T18693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.613077][T18693] team0: Port device team_slave_0 added [ 543.630588][T18693] team0: Port device team_slave_1 added [ 543.725116][T18693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.735288][T18693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.763117][T18693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.782649][T18693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.791003][T18693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.817363][T18693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.839034][T18749] syzkaller0: entered promiscuous mode [ 543.845516][T18749] syzkaller0: entered allmulticast mode [ 543.885078][T18693] hsr_slave_0: entered promiscuous mode [ 543.892310][T18693] hsr_slave_1: entered promiscuous mode [ 543.898657][T18693] debugfs: 'hsr0' already exists in 'hsr' [ 543.904462][T18693] Cannot create hsr debugfs directory [ 544.027717][ T8432] net_ratelimit: 15 callbacks suppressed [ 544.027736][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 544.148239][ T8426] bond2: (slave macvlan0): failed to get link speed/duplex [ 544.257422][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 544.367486][ T8426] bond2: (slave macvlan0): failed to get link speed/duplex [ 544.477672][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 544.558448][ T5140] Bluetooth: hci2: command tx timeout [ 544.587418][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 544.697448][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 544.807382][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 544.917392][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 544.951964][T18679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.964814][T18742] netlink: 'syz.1.3194': attribute type 1 has an invalid length. [ 544.987749][T18742] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3194'. [ 545.027374][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 545.045374][T18693] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 545.102597][T18693] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 545.151131][T18693] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 545.226848][T18693] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 545.244940][T18759] netlink: 'syz.4.3198': attribute type 1 has an invalid length. [ 545.711800][T18693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.773001][T18693] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.809953][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.817146][ T8431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.923896][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.931111][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.048966][T18799] __nla_validate_parse: 3 callbacks suppressed [ 546.048982][T18799] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3205'. [ 546.256081][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3206'. [ 546.637594][ T5140] Bluetooth: hci2: command tx timeout [ 546.740884][T18801] lo speed is unknown, defaulting to 1000 [ 546.779372][T18807] lo speed is unknown, defaulting to 1000 [ 547.183351][T18840] tipc: Can't bind to reserved service type 0 [ 547.346659][T18850] SET target dimension over the limit! [ 547.736866][T18855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3212'. [ 547.877173][T18877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3216'. [ 547.888778][T18693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.024886][T18693] veth0_vlan: entered promiscuous mode [ 548.042533][T18885] IPVS: Error connecting to the multicast addr [ 548.066450][T18693] veth1_vlan: entered promiscuous mode [ 548.171590][T18693] veth0_macvtap: entered promiscuous mode [ 548.209874][T18693] veth1_macvtap: entered promiscuous mode [ 548.290125][T18693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.324890][T18693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.387163][ T8426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.426416][ T8426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.466452][ T8426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.498260][ T8426] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.531178][T18915] pim6reg: entered allmulticast mode [ 548.550708][T18913] pim6reg: left allmulticast mode [ 548.650151][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3223'. [ 548.690102][ T8426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.717379][ T5140] Bluetooth: hci2: command tx timeout [ 548.722868][ T8426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.793881][ T8426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.810984][ T51] block nbd1: Possible stuck request ffff888031430000: control (read@0,1024B). Runtime 180 seconds [ 548.822272][T18914] lo speed is unknown, defaulting to 1000 [ 548.828362][ T51] block nbd1: Possible stuck request ffff888031430200: control (read@1024,1024B). Runtime 180 seconds [ 548.839856][ T51] block nbd1: Possible stuck request ffff888031430400: control (read@2048,1024B). Runtime 180 seconds [ 548.856230][ T51] block nbd1: Possible stuck request ffff888031430600: control (read@3072,1024B). Runtime 180 seconds [ 548.868939][ T8426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.877284][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 548.885591][ C0] lec:lec_tx_timeout: lec0 [ 548.890515][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 549.057208][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 549.077381][ T8426] net_ratelimit: 19 callbacks suppressed [ 549.077400][ T8426] bond2: (slave macvlan0): failed to get link speed/duplex [ 549.095429][ T5879] IPVS: starting estimator thread 0... [ 549.125574][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058196000: rx timeout, send abort [ 549.134310][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058196000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 549.197495][T18939] IPVS: using max 39 ests per chain, 93600 per kthread [ 549.216248][ T8426] bond2: (slave macvlan0): failed to get link speed/duplex [ 549.287036][T18952] netlink: 'syz.2.3229': attribute type 8 has an invalid length. [ 549.295209][T18952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 549.406990][T18952] bond0: entered promiscuous mode [ 549.412585][T18952] bond_slave_0: entered promiscuous mode [ 549.420258][T18952] bond_slave_1: entered promiscuous mode [ 549.428792][T18952] gretap0: entered promiscuous mode [ 549.473889][T18952] bond0: left promiscuous mode [ 549.480909][T18952] bond_slave_0: left promiscuous mode [ 549.488612][T18952] bond_slave_1: left promiscuous mode [ 549.521646][T18952] gretap0: left promiscuous mode [ 549.575062][T18962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3232'. [ 549.598299][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.611353][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 549.757853][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 549.774606][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'. [ 549.803678][ T8431] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.813824][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3235'. [ 549.829630][ T8431] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.858683][ T8431] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.888142][ T6217] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.918762][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 550.047750][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 550.197727][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 550.285553][T18970] infiniband sy: set active [ 550.308973][ T8426] bond2: (slave macvlan0): failed to get link speed/duplex [ 550.337521][T18970] infiniband sy: added bond_slave_0 [ 550.427443][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 550.439575][T16793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 550.454048][T16793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 550.465620][T16793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 550.477756][T16793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 550.486469][T16793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 550.595900][T18995] lo speed is unknown, defaulting to 1000 [ 550.628088][T18970] RDS/IB: sy: added [ 550.632077][T18970] smc: adding ib device sy with port count 1 [ 550.674321][T18970] smc: ib device sy port 1 has no pnetid [ 550.797449][ T5140] Bluetooth: hci2: command tx timeout [ 551.249833][T19009] ip6erspan0: entered allmulticast mode [ 551.319700][T19014] sch_tbf: burst 19 is lower than device syzkaller0 mtu (1514) ! [ 551.369157][ T36] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.391553][T19020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3243'. [ 551.402348][ T36] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.531528][ T36] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.559923][ T36] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.800753][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 551.813877][ T36] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.856421][ T36] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.905145][T19030] tipc: Started in network mode [ 551.947469][T19030] tipc: Node identity a21791417dac, cluster identity 4711 [ 551.975115][T19030] tipc: Enabled bearer , priority 0 [ 552.072837][T19041] syzkaller0: entered promiscuous mode [ 552.087965][T19041] syzkaller0: entered allmulticast mode [ 552.239327][T19046] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3248'. [ 552.333811][T19030] tipc: Resetting bearer [ 552.444339][ T36] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.472299][ T36] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.558979][ T5140] Bluetooth: hci4: command tx timeout [ 552.643964][T19029] tipc: Resetting bearer [ 553.518178][T19029] tipc: Disabling bearer [ 553.897295][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 553.905328][ C0] lec:lec_tx_timeout: lec0 [ 553.909925][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 554.637750][ T5140] Bluetooth: hci4: command tx timeout [ 554.666282][ T5924] tipc: Node number set to 3753611585 [ 554.763856][ T8426] net_ratelimit: 14 callbacks suppressed [ 554.763876][ T8426] bond2: (slave macvlan0): failed to get link speed/duplex [ 554.878892][T18657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.921256][T18995] chnl_net:caif_netlink_parms(): no params data found [ 554.993565][T19065] netlink: 'syz.4.3249': attribute type 1 has an invalid length. [ 555.029221][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3249'. [ 555.277679][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.352269][ T36] bond12 (unregistering): (slave ip6gretap1): Releasing active interface [ 555.761728][ T36] team0: Port device geneve0 removed [ 555.849998][T18145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.917585][T18657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.003203][ T36] bond0 (unregistering): Released all slaves [ 556.032483][ T36] bond1 (unregistering): Released all slaves [ 556.094422][ T36] bond2 (unregistering): Released all slaves [ 556.108863][ T36] bond3 (unregistering): Released all slaves [ 556.124172][ T36] bond4 (unregistering): Released all slaves [ 556.136265][ T36] bond5 (unregistering): Released all slaves [ 556.151398][ T36] bond6 (unregistering): Released all slaves [ 556.174354][ T36] bond7 (unregistering): Released all slaves [ 556.189002][ T36] bond8 (unregistering): (slave batadv1): Releasing active interface [ 556.200046][ T36] bond8 (unregistering): Released all slaves [ 556.212431][ T36] bond9 (unregistering): Released all slaves [ 556.229872][ T36] bond10 (unregistering): Released all slaves [ 556.245657][ T36] bond11 (unregistering): Released all slaves [ 556.261185][ T36] bond12 (unregistering): Released all slaves [ 556.274346][T19058] lo speed is unknown, defaulting to 1000 [ 556.307671][ T8425] bond2: (slave macvlan0): failed to get link speed/duplex [ 556.600895][T19110] xt_CT: No such helper "netbios-ns" [ 556.679514][T18995] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.694589][T18995] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.702422][T18995] bridge_slave_0: entered allmulticast mode [ 556.710367][T18995] bridge_slave_0: entered promiscuous mode [ 556.717391][ T5140] Bluetooth: hci4: command tx timeout [ 556.720151][T18995] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.730216][T18995] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.738711][T18995] bridge_slave_1: entered allmulticast mode [ 556.746609][T18995] bridge_slave_1: entered promiscuous mode [ 556.837961][ T8426] bond2: (slave macvlan0): failed to get link speed/duplex [ 556.860343][T18995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.909492][T18995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.957769][T18657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.051170][T18995] team0: Port device team_slave_0 added [ 557.080180][T18995] team0: Port device team_slave_1 added [ 557.143881][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.183996][T19132] netlink: 'syz.2.3261': attribute type 3 has an invalid length. [ 557.217989][T18995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.234835][T18995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.266732][T18995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.313921][T18995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.334193][T18995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.368330][T18995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.397869][T19131] lo speed is unknown, defaulting to 1000 [ 557.581053][T18995] hsr_slave_0: entered promiscuous mode [ 557.591491][T18995] hsr_slave_1: entered promiscuous mode [ 557.604723][T18995] debugfs: 'hsr0' already exists in 'hsr' [ 557.610917][T18995] Cannot create hsr debugfs directory [ 557.768175][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.931874][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'. [ 558.100001][ T36] mn: left promiscuous mode [ 558.190115][T19160] netlink: 'syz.2.3264': attribute type 29 has an invalid length. [ 558.200230][T19160] netlink: 'syz.2.3264': attribute type 29 has an invalid length. [ 558.218650][ T36] tipc: Left network mode [ 558.220318][T19160] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3264'. [ 558.239288][T19160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3264'. [ 558.797924][ T5140] Bluetooth: hci4: command tx timeout [ 558.917291][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 558.925342][ C0] lec:lec_tx_timeout: lec0 [ 558.930688][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 560.080928][ T39] net_ratelimit: 6 callbacks suppressed [ 560.080949][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.497625][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 560.738910][ T8425] bond2: (slave macvlan0): failed to get link speed/duplex [ 560.807726][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.965615][T18995] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 561.043575][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'. [ 561.053938][T19208] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3274'. [ 561.120943][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.157538][T18995] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 561.372466][ T8425] bond2: (slave macvlan0): failed to get link speed/duplex [ 561.407564][T18995] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 561.444560][T18995] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 561.509803][T19234] netlink: 'syz.1.3277': attribute type 4 has an invalid length. [ 561.533014][ T36] pim6reg99999999 (unregistering): left allmulticast mode [ 561.574853][ T36] pimreg3 (unregistering): left allmulticast mode [ 561.591989][T19243] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 561.614672][T19228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.159845][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.227553][ T8425] bond2: (slave macvlan0): failed to get link speed/duplex [ 562.500654][T19293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3283'. [ 562.524802][T19270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.626480][T19280] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 562.776194][T19270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.855659][T19002] udevd[19002]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 562.873536][ T36] IPVS: stop unused estimator thread 0... [ 562.886681][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 562.972492][T19270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.060878][T19312] netlink: 'syz.3.3286': attribute type 1 has an invalid length. [ 563.080655][T19312] netlink: 'syz.3.3286': attribute type 3 has an invalid length. [ 563.098851][T19312] netlink: 'syz.3.3286': attribute type 1 has an invalid length. [ 563.117686][T19312] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3286'. [ 563.177399][ T8425] bond2: (slave macvlan0): failed to get link speed/duplex [ 563.214315][T19312] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3286'. [ 563.223415][T19312] netlink: 170 bytes leftover after parsing attributes in process `syz.3.3286'. [ 563.280521][T19312] netlink: 'syz.3.3286': attribute type 1 has an invalid length. [ 563.288846][T19312] netlink: 'syz.3.3286': attribute type 3 has an invalid length. [ 563.296584][T19312] netlink: 'syz.3.3286': attribute type 1 has an invalid length. [ 563.311727][T19312] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3286'. [ 563.313564][T19270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.359691][T19312] NCSI netlink: No device for ifindex 1635017058 [ 563.380233][T19318] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3287'. [ 563.426102][T18995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.629522][T18995] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.662871][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.670136][ T8431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.740846][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.748016][ T8431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.914749][T19335] wg2: Caught tx_queue_len zero misconfig [ 563.921098][ T8425] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.937355][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 563.945412][ C0] lec:lec_tx_timeout: lec0 [ 563.950399][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 564.021593][ T8425] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.091779][ T8425] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.134575][ T8426] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.160419][ T51] block nbd2: Possible stuck request ffff888025ea0000: control (read@0,1024B). Runtime 90 seconds [ 564.171388][ T51] block nbd2: Possible stuck request ffff888025ea0200: control (read@1024,1024B). Runtime 90 seconds [ 564.183354][ T51] block nbd2: Possible stuck request ffff888025ea0400: control (read@2048,1024B). Runtime 90 seconds [ 564.194556][ T51] block nbd2: Possible stuck request ffff888025ea0600: control (read@3072,1024B). Runtime 90 seconds [ 564.219703][T19342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3288'. [ 564.222197][T19344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3288'. [ 564.672493][T18995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.746127][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3295'. [ 564.879298][T18995] veth0_vlan: entered promiscuous mode [ 564.912457][T18995] veth1_vlan: entered promiscuous mode [ 565.023608][T18995] veth0_macvtap: entered promiscuous mode [ 565.058928][T18995] veth1_macvtap: entered promiscuous mode [ 565.132300][T19384] tipc: Enabled bearer , priority 0 [ 565.145725][T18995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.161004][T19384] syzkaller0: entered promiscuous mode [ 565.166513][T19384] syzkaller0: entered allmulticast mode [ 565.203866][T18995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.247196][ T8425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.276753][ T8425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.297571][T18657] net_ratelimit: 13 callbacks suppressed [ 565.297591][T18657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.334350][ T8425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.375871][ T8425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.518702][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3307'. [ 565.521405][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 565.528722][T19409] netlink: 'syz.1.3307': attribute type 1 has an invalid length. [ 565.557480][T19384] tipc: Resetting bearer [ 565.613224][T19382] tipc: Resetting bearer [ 565.684100][T19409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3307'. [ 565.698703][T19382] tipc: Disabling bearer [ 565.705805][T19409] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 565.778508][T19414] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 565.779527][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 565.885506][T19414] bond1: entered promiscuous mode [ 565.936686][T19414] bond1: entered allmulticast mode [ 565.947954][T19414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 565.999666][T19420] erspan1: entered allmulticast mode [ 566.007494][ T8425] bond2: (slave macvlan0): failed to get link speed/duplex [ 566.058105][ T8432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.065964][ T8432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.102434][T19427] syzkaller0: entered promiscuous mode [ 566.145029][T19427] syzkaller0: entered allmulticast mode [ 566.203018][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 566.314003][ T8432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.325248][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.357838][ T8432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.426840][T19430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.447928][T19430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.579775][ T6298] bond2: (slave macvlan0): failed to get link speed/duplex [ 566.759969][T18145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.780447][T19430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.802368][T19430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.851907][T19477] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 566.878559][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.928692][T19430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.939374][T19430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.111619][T19430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.173105][T19430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.467820][ T6217] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.500496][ T6217] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.546843][ T6217] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.568601][ T6217] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.611121][ T8426] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.647379][ T8426] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.694914][ T8432] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.720100][ T8432] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.759048][T19519] bridge_slave_0: left allmulticast mode [ 567.788971][T19519] bridge_slave_0: left promiscuous mode [ 567.837809][T19519] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.916208][T19519] bridge_slave_1: left allmulticast mode [ 567.939515][T19519] bridge_slave_1: left promiscuous mode [ 567.949965][T19519] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.986129][T19519] bond0: (slave bond_slave_0): Releasing backup interface [ 567.997600][T19519] bond0: (slave bond_slave_1): Releasing backup interface [ 568.034921][T19519] team0: Port device team_slave_0 removed [ 568.046922][T19519] team0: Port device team_slave_1 removed [ 568.054065][T19519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.061569][T19519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.071092][T19519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.079005][T19519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.283505][T19540] tipc: Started in network mode [ 568.291722][T19540] tipc: Node identity da13b9d12243, cluster identity 4711 [ 568.300096][T19540] tipc: Enabled bearer , priority 0 [ 568.307153][T19542] __nla_validate_parse: 7 callbacks suppressed [ 568.307169][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3335'. [ 568.345271][T19548] syzkaller0: entered promiscuous mode [ 568.352137][T19548] syzkaller0: entered allmulticast mode [ 568.369333][T19542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3335'. [ 568.384014][T19540] tipc: Resetting bearer [ 568.394336][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3335'. [ 568.413913][T19539] tipc: Resetting bearer [ 568.414452][T19542] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3335'. [ 568.469048][T19539] tipc: Disabling bearer [ 568.482819][T19552] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 568.573585][T19557] netlink: 'syz.0.3339': attribute type 1 has an invalid length. [ 568.744539][T19568] netlink: 'syz.2.3342': attribute type 4 has an invalid length. [ 568.790883][T19568] netlink: 'syz.2.3342': attribute type 1 has an invalid length. [ 568.817882][T19568] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3342'. [ 568.957673][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.965742][ C0] lec:lec_tx_timeout: lec0 [ 568.971028][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 568.975140][T19584] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 568.989787][T19586] x_tables: duplicate underflow at hook 1 [ 569.027585][T19584] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 569.044564][T19584] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 569.095940][T19594] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3347'. [ 569.212116][T19604] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3351'. [ 569.539624][T19619] xt_TPROXY: Can be used only with -p tcp or -p udp [ 569.549303][T19619] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3355'. [ 569.587079][T19621] xt_ecn: cannot match TCP bits for non-tcp packets [ 569.642848][T19623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3357'. [ 569.726582][T19629] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3359'. [ 570.113219][T19669] macvtap1: entered allmulticast mode [ 570.131215][T19669] veth0_macvtap: entered allmulticast mode [ 570.252277][T19676] netlink: 'syz.4.3370': attribute type 1 has an invalid length. [ 570.319302][ T8425] net_ratelimit: 25 callbacks suppressed [ 570.319322][ T8425] bond2: (slave macvlan0): failed to get link speed/duplex [ 570.457365][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 570.499329][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.568537][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 570.697532][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 570.898384][T19733] bond1: option lacp_rate: invalid value (192) [ 570.925517][T19733] bond1 (unregistering): Released all slaves [ 570.997362][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 571.019802][T19743] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.032348][T19743] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.039295][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.058921][T19743] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.104933][T19743] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 571.112376][ T8426] bond2: (slave macvlan0): failed to get link speed/duplex [ 571.164035][T19743] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.203751][T19743] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.228766][T19743] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.247217][T19743] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.252324][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 571.271469][T19743] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.319095][T19743] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.348336][T19743] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.377451][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 572.003430][T19807] syz.0.3407 (19807) used obsolete PPPIOCDETACH ioctl [ 572.549053][T19831] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 572.556116][T19831] pim6reg1: linktype set to 805 [ 572.570305][T19840] team0: entered promiscuous mode [ 572.577873][T19840] team_slave_0: entered promiscuous mode [ 572.597563][T19840] team_slave_1: entered promiscuous mode [ 572.632637][T19840] team0: left promiscuous mode [ 572.667341][T19840] team_slave_0: left promiscuous mode [ 572.677511][T19840] team_slave_1: left promiscuous mode [ 572.910664][T19854] netlink: 'syz.4.3422': attribute type 1 has an invalid length. [ 573.001107][T19854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.145075][T19860] syzkaller0: entered promiscuous mode [ 573.153405][T19860] syzkaller0: entered allmulticast mode [ 573.165745][T19854] bond3: entered promiscuous mode [ 573.185605][T19854] bond3: entered allmulticast mode [ 573.240997][T19865] bond3: (slave dummy0): making interface the new active one [ 573.248691][T19865] dummy0: entered promiscuous mode [ 573.262891][T19865] dummy0: entered allmulticast mode [ 573.279580][T19865] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 573.368397][T19880] netlink: 'syz.2.3427': attribute type 1 has an invalid length. [ 573.987400][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 573.995512][ C0] lec:lec_tx_timeout: lec0 [ 574.000334][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 575.123228][ T5188] udevd[5188]: worker [8129] /devices/virtual/block/nbd1 timeout; kill it [ 575.147576][ T5188] udevd[5188]: seq 19793 '/devices/virtual/block/nbd1' killed [ 575.160702][ T5188] udevd[5188]: worker [8146] /devices/virtual/block/nbd2 is taking a long time [ 575.208896][T19905] __nla_validate_parse: 19 callbacks suppressed [ 575.208916][T19905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3431'. [ 575.237717][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3432'. [ 575.250134][T19909] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3434'. [ 575.264811][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3432'. [ 575.278009][T19905] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3431'. [ 575.348716][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'. [ 575.387524][ T8426] net_ratelimit: 21 callbacks suppressed [ 575.387546][ T8426] bond2: (slave macvlan0): failed to get link speed/duplex [ 575.478715][T19932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.487649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.507830][T19932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.519612][ T8431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.557411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.585560][T19932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.594527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.678971][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.706064][T19934] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 575.774409][T19934] bond4 (unregistering): Released all slaves [ 575.911591][T19959] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 575.940991][T19963] netlink: 'syz.2.3447': attribute type 1 has an invalid length. [ 575.944915][T19962] bond0: (slave rose0): Enslaving as an active interface with an up link [ 575.990093][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 576.046316][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 576.101376][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 576.192337][T19980] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 576.257609][T19977] netlink: 'syz.4.3450': attribute type 2 has an invalid length. [ 576.430262][T19991] bond4: option ad_select: invalid value (34) [ 576.445155][T19991] bond4 (unregistering): Released all slaves [ 576.456401][T19997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3453'. [ 576.572930][T20007] xt_ipcomp: unknown flags 1D [ 576.908288][T17922] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 577.351374][T20061] IPVS: length: 24 != 6168 [ 577.407590][T20061] netlink: 'syz.1.3470': attribute type 11 has an invalid length. [ 577.434697][T20061] netlink: 'syz.1.3470': attribute type 1 has an invalid length. [ 577.465645][T20061] netlink: 'syz.1.3470': attribute type 2 has an invalid length. [ 577.482778][T20061] netlink: 'syz.1.3470': attribute type 1 has an invalid length. [ 577.510445][T20061] netlink: 'syz.1.3470': attribute type 3 has an invalid length. [ 577.547497][T17922] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 577.729851][T20067] syzkaller0: entered promiscuous mode [ 577.758442][T20067] syzkaller0: entered allmulticast mode [ 578.891871][ T51] block nbd1: Possible stuck request ffff888031430000: control (read@0,1024B). Runtime 210 seconds [ 578.902952][ T51] block nbd1: Possible stuck request ffff888031430200: control (read@1024,1024B). Runtime 210 seconds [ 578.914100][ T51] block nbd1: Possible stuck request ffff888031430400: control (read@2048,1024B). Runtime 210 seconds [ 578.925119][ T51] block nbd1: Possible stuck request ffff888031430600: control (read@3072,1024B). Runtime 210 seconds [ 579.017318][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 579.025482][ C0] lec:lec_tx_timeout: lec0 [ 579.030163][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 579.617175][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 579.673374][T20106] ipvlan2: entered promiscuous mode [ 580.056076][T20141] No such timeout policy "syz1" [ 580.355270][T20166] __nla_validate_parse: 7 callbacks suppressed [ 580.355290][T20166] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3499'. [ 580.392836][T20166] vlan2: entered promiscuous mode [ 580.398064][T20166] geneve1: entered promiscuous mode [ 580.457382][ T36] net_ratelimit: 19 callbacks suppressed [ 580.457402][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 580.523779][T20176] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 580.535862][T20174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3502'. [ 580.592857][T20174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 580.616918][T20187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3501'. [ 580.627815][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 580.639083][ T44] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 580.656556][ T44] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 580.707853][ T798] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 580.777426][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 580.877981][T18657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.887479][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 581.000458][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 581.043141][T20203] netlink: 'syz.4.3507': attribute type 1 has an invalid length. [ 581.070556][T20208] netlink: 'syz.4.3507': attribute type 1 has an invalid length. [ 581.135145][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 581.275933][ T6298] bond2: (slave macvlan0): failed to get link speed/duplex [ 581.300094][T20219] netlink: 'syz.4.3511': attribute type 4 has an invalid length. [ 581.324994][T20219] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3511'. [ 581.356687][T20221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.365553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.404591][T20219] .`: renamed from bond0 (while UP) [ 581.694461][T20231] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:0 [ 581.746758][T20215] virt_wifi0 speed is unknown, defaulting to 1000 [ 581.912384][T20237] netlink: 'syz.1.3514': attribute type 13 has an invalid length. [ 582.298886][T20237] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.306573][T20237] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.366684][T20253] ipt_REJECT: TCP_RESET invalid for non-tcp [ 582.456123][T20255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3521'. [ 582.541827][T20237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.575387][T20237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.742100][T20243] IPVS: starting estimator thread 0... [ 582.887391][T20285] IPVS: using max 29 ests per chain, 69600 per kthread [ 583.000365][T20256] 8021q: adding VLAN 0 to HW filter on device .` [ 583.079806][ T6298] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.115825][ T6298] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.198769][ T6298] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.236908][ T6298] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.402015][T20296] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3524'. [ 583.485967][T20312] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3528'. [ 583.514580][T20312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3528'. [ 583.552145][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3528'. [ 583.739502][T20327] x_tables: duplicate underflow at hook 3 [ 583.795867][T20328] syzkaller0: entered promiscuous mode [ 583.802653][T20328] syzkaller0: entered allmulticast mode [ 584.037296][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 584.045354][ C0] lec:lec_tx_timeout: lec0 [ 584.050181][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 584.104509][T20349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3536'. [ 584.397461][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 585.002700][T20398] syzkaller0: entered promiscuous mode [ 585.015296][T20398] syzkaller0: entered allmulticast mode [ 585.035028][T20403] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 585.428864][T20417] __nla_validate_parse: 3 callbacks suppressed [ 585.428882][T20417] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3555'. [ 585.467335][ T36] net_ratelimit: 30 callbacks suppressed [ 585.467353][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 585.550861][T20426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3558'. [ 585.600707][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 585.633633][T20431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3558'. [ 585.731723][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 585.825585][T20441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3561'. [ 585.920628][T20277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.947939][ T6298] bond2: (slave macvlan0): failed to get link speed/duplex [ 586.003041][T20450] netlink: 'syz.4.3563': attribute type 16 has an invalid length. [ 586.085083][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.129607][T20458] IPv6: Can't replace route, no match found [ 586.147556][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 586.249460][T20277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.253600][T20462] syzkaller0: entered promiscuous mode [ 586.263559][T20462] syzkaller0: entered allmulticast mode [ 586.287477][T20476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3567'. [ 586.878397][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3569'. [ 587.118606][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.047484][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 588.103811][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 588.147528][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3572'. [ 588.169161][T20501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3571'. [ 588.212745][T20500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3570'. [ 588.380373][T20522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.418752][T20522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.461991][T20525] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 588.482785][T20522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.521832][T20522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.611346][T20530] bridge_slave_1: left allmulticast mode [ 588.650776][T20530] bridge_slave_1: left promiscuous mode [ 588.681133][T20530] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.761690][T20530] bridge_slave_0: left allmulticast mode [ 588.795523][T20530] bridge_slave_0: left promiscuous mode [ 588.831942][T20530] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.025506][T20546] nbd: couldn't find a device at index 0 [ 589.566167][T20575] netlink: 'syz.4.3587': attribute type 5 has an invalid length. [ 589.626612][T20575] geneve2: entered promiscuous mode [ 589.632105][T20575] geneve2: entered allmulticast mode [ 589.659136][ T8431] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 589.678017][ T8431] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 589.686193][ T8431] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 589.719215][ T8431] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 589.837269][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 589.845488][ C0] lec:lec_tx_timeout: lec0 [ 589.850468][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 590.016754][T20565] virt_wifi0 speed is unknown, defaulting to 1000 [ 590.159180][T20597] syzkaller0: entered promiscuous mode [ 590.164694][T20597] syzkaller0: entered allmulticast mode [ 590.239485][T16793] Bluetooth: hci4: command 0x0405 tx timeout [ 590.638045][ T8424] net_ratelimit: 19 callbacks suppressed [ 590.638066][ T8424] bond2: (slave macvlan0): failed to get link speed/duplex [ 590.783111][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 591.090455][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 591.131582][T20611] virt_wifi0 speed is unknown, defaulting to 1000 [ 591.223259][T20645] __nla_validate_parse: 14 callbacks suppressed [ 591.223286][T20645] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3605'. [ 591.283799][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.504678][T20650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.539612][T20626] virt_wifi0 speed is unknown, defaulting to 1000 [ 591.557392][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 591.563257][T20655] netlink: 'syz.2.3607': attribute type 1 has an invalid length. [ 591.574739][T20655] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3607'. [ 591.677479][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 591.681813][T20650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.710233][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3608'. [ 591.841254][T20650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.026469][T20650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.208235][ T8424] bond2: (slave macvlan0): failed to get link speed/duplex [ 592.264612][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3609'. [ 592.320067][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.328266][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.337823][ T8424] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.357717][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 592.392749][ T8424] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.431766][ T8431] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.490190][ T8431] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.507581][ T8424] bond2: (slave macvlan0): failed to get link speed/duplex [ 592.793236][T20667] virt_wifi0 speed is unknown, defaulting to 1000 [ 592.810282][T20665] virt_wifi0 speed is unknown, defaulting to 1000 [ 592.995964][T20706] netlink: 'syz.0.3620': attribute type 49 has an invalid length. [ 593.012539][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 593.054178][T20708] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3621'. [ 593.161139][T20712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3622'. [ 593.789710][T20742] netlink: 'syz.4.3631': attribute type 10 has an invalid length. [ 593.807576][T20742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3631'. [ 593.874983][T20742] team0: Failed to send options change via netlink (err -105) [ 593.899012][T20742] team0: Port device geneve0 added [ 593.911899][T20746] tipc: Enabling of bearer rejected, media not registered [ 594.242780][ T51] block nbd2: Possible stuck request ffff888025ea0000: control (read@0,1024B). Runtime 120 seconds [ 594.254430][ T51] block nbd2: Possible stuck request ffff888025ea0200: control (read@1024,1024B). Runtime 120 seconds [ 594.267703][ T51] block nbd2: Possible stuck request ffff888025ea0400: control (read@2048,1024B). Runtime 120 seconds [ 594.280710][ T51] block nbd2: Possible stuck request ffff888025ea0600: control (read@3072,1024B). Runtime 120 seconds [ 594.408114][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3642'. [ 594.456012][ T8431] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.470560][T20777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3642'. [ 594.475961][ T8431] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.526851][ T8431] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.540167][ T8431] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.710976][T20800] netlink: 'syz.2.3650': attribute type 29 has an invalid length. [ 594.878378][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 594.886466][ C0] lec:lec_tx_timeout: lec0 [ 594.891450][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 594.990585][T20816] netlink: 'syz.4.3651': attribute type 12 has an invalid length. [ 595.124015][T20823] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 595.346382][T20843] netlink: 'syz.2.3663': attribute type 1 has an invalid length. [ 596.479825][T20270] net_ratelimit: 733 callbacks suppressed [ 596.479846][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.022832][T20849] geneve3: entered promiscuous mode [ 597.035279][T20850] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.049490][T20850] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.060334][T20850] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 597.111281][T20864] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 597.128217][ T8424] bond2: (slave macvlan0): failed to get link speed/duplex [ 597.155044][T20850] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.169888][T20850] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.180938][T20850] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 597.257413][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 597.284538][T20850] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.319665][T20850] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.338086][T20850] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 597.408396][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 597.422557][T20850] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.464100][T20850] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.508035][T20850] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 597.518133][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.560483][T20886] __nla_validate_parse: 4 callbacks suppressed [ 597.560502][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 597.607387][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 597.727683][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 597.837682][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 597.854283][T20897] IPVS: set_ctl: invalid protocol: 11608 224.0.0.2:20002 [ 597.889476][T20875] virt_wifi0 speed is unknown, defaulting to 1000 [ 597.988035][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 598.016985][T20901] : entered promiscuous mode [ 598.120583][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 598.243442][T20910] geneve2: entered promiscuous mode [ 598.251162][ T8432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.260957][ T8432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.295084][ T8432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.315102][ T8432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.642270][T20929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3687'. [ 598.681436][T20925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3686'. [ 598.768317][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 598.779207][T20940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3690'. [ 598.796729][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 598.813621][T20940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3690'. [ 598.828466][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 598.879804][T20940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3690'. [ 598.946535][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 599.134476][T20949] netlink: 'syz.0.3693': attribute type 58 has an invalid length. [ 599.213336][T20963] netlink: 'syz.2.3696': attribute type 2 has an invalid length. [ 599.252797][T20963] netlink: 'syz.2.3696': attribute type 2 has an invalid length. [ 599.500039][T20982] netlink: 'syz.1.3698': attribute type 2 has an invalid length. [ 599.529116][T20982] sctp: [Deprecated]: syz.1.3698 (pid 20982) Use of int in max_burst socket option. [ 599.529116][T20982] Use struct sctp_assoc_value instead [ 599.559670][T20982] sctp: [Deprecated]: syz.1.3698 (pid 20982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.559670][T20982] Use struct sctp_sack_info instead [ 599.593820][T20986] netlink: 'syz.2.3704': attribute type 2 has an invalid length. [ 599.618655][T20986] netlink: 'syz.2.3704': attribute type 1 has an invalid length. [ 599.730651][T20990] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 599.754271][T20991] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 599.809756][T20965] virt_wifi0 speed is unknown, defaulting to 1000 [ 599.907326][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 599.915522][ C0] lec:lec_tx_timeout: lec0 [ 600.128086][T21017] netlink: 'syz.0.3711': attribute type 2 has an invalid length. [ 600.346318][T21027] Cannot find del_set index 1 as target [ 600.705228][ T36] nci: nci_rx_work: unknown MT 0x1 [ 600.716704][T21031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.768534][T21032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.561461][ T8432] net_ratelimit: 29 callbacks suppressed [ 601.561481][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 601.597568][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.678402][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.747564][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 601.776149][T21097] can: request_module (can-proto-0) failed. [ 601.803927][T21103] sctp: [Deprecated]: syz.3.3728 (pid 21103) Use of int in max_burst socket option. [ 601.803927][T21103] Use struct sctp_assoc_value instead [ 601.957360][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 602.188784][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 602.367702][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 602.517387][ T8424] bond2: (slave macvlan0): failed to get link speed/duplex [ 602.537826][T21134] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 602.637625][ T8424] bond2: (slave macvlan0): failed to get link speed/duplex [ 602.690731][T21157] __nla_validate_parse: 143 callbacks suppressed [ 602.690749][T21157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3744'. [ 602.718528][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.931286][T21170] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 602.946490][T21170] syzkaller1: Linktype set failed because interface is up [ 602.957814][T20270] syzkaller1: tun_net_xmit 90 [ 603.046516][T21137] virt_wifi0 speed is unknown, defaulting to 1000 [ 603.191758][T21184] netlink: 'syz.3.3751': attribute type 2 has an invalid length. [ 603.239574][T21184] !9: entered promiscuous mode [ 603.256931][T21184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3751'. [ 603.266361][T21185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3751'. [ 603.400011][ T8432] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.428458][ T8432] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.476201][T21199] gretap0: entered promiscuous mode [ 603.486208][T21199] vlan2: entered promiscuous mode [ 603.564401][ T8432] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.583644][ T8432] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.752308][T21214] xt_socket: unknown flags 0x50 [ 603.758853][ T30] audit: type=1804 audit(1770579813.176:15): pid=21215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3760" name="/newroot/130/cgroup.controllers" dev="tmpfs" ino=693 res=1 errno=0 [ 603.783497][ T30] audit: type=1800 audit(1770579813.196:16): pid=21215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3760" name="cgroup.controllers" dev="tmpfs" ino=693 res=0 errno=0 [ 603.956028][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3761'. [ 603.967601][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3761'. [ 604.449500][T21250] netlink: 'syz.0.3770': attribute type 1 has an invalid length. [ 604.458429][T21250] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3770'. [ 604.544967][T21250] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3770'. [ 604.595161][T21264] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3772'. [ 604.617853][T21264] batadv0: entered promiscuous mode [ 604.741400][T21272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3776'. [ 604.833934][T21281] netlink: 'syz.2.3778': attribute type 8 has an invalid length. [ 604.986833][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 605.525160][T21307] virt_wifi0 speed is unknown, defaulting to 1000 [ 605.611972][T21319] netlink: 'syz.1.3786': attribute type 1 has an invalid length. [ 605.757616][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 606.647432][ T6217] net_ratelimit: 38 callbacks suppressed [ 606.647454][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 606.767457][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 606.877405][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 606.888178][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.987382][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 607.097499][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 607.207396][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 607.317419][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 607.427414][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 607.537757][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 607.770321][T21276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 608.170796][ T44] tipc: Subscription rejected, illegal request [ 608.189833][T21348] __nla_validate_parse: 1 callbacks suppressed [ 608.189852][T21348] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3794'. [ 608.215235][T21345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3795'. [ 608.756680][T21391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3805'. [ 608.969332][ T51] block nbd1: Possible stuck request ffff888031430000: control (read@0,1024B). Runtime 240 seconds [ 608.980670][ T51] block nbd1: Possible stuck request ffff888031430200: control (read@1024,1024B). Runtime 240 seconds [ 608.992750][ T51] block nbd1: Possible stuck request ffff888031430400: control (read@2048,1024B). Runtime 240 seconds [ 609.004838][ T51] block nbd1: Possible stuck request ffff888031430600: control (read@3072,1024B). Runtime 240 seconds [ 609.085622][T21400] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 609.273531][T21396] virt_wifi0 speed is unknown, defaulting to 1000 [ 609.319446][T21427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3815'. [ 609.353680][ T8431] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.375422][T21426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3813'. [ 609.379359][ T8431] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.420606][ T8431] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.451866][ T8431] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.642540][T21446] sctp: [Deprecated]: syz.1.3820 (pid 21446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.642540][T21446] Use struct sctp_sack_info instead [ 609.687647][T21446] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3820'. [ 609.757155][T21451] netlink: 372 bytes leftover after parsing attributes in process `syz.1.3821'. [ 609.779387][T21451] netlink: 372 bytes leftover after parsing attributes in process `syz.1.3821'. [ 609.820360][T21451] netlink: 372 bytes leftover after parsing attributes in process `syz.1.3821'. [ 609.861581][T21451] netlink: 372 bytes leftover after parsing attributes in process `syz.1.3821'. [ 610.054068][T21459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.667580][ T44] net_ratelimit: 38 callbacks suppressed [ 611.667603][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 611.787409][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 611.838206][T20277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.897396][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 612.007394][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 612.077650][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.117370][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 612.227430][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 612.295653][T21427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.337357][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 612.507646][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 612.636460][T21482] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 612.649519][T21482] bond3 (unregistering): Released all slaves [ 612.682679][T21490] gretap1: entered promiscuous mode [ 612.690302][T21490] batman_adv: batadv0: Adding interface: gretap1 [ 612.697130][T21490] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 612.807945][T21490] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 613.103598][T21510] netpci0: tun_chr_ioctl cmd 1074025678 [ 613.123144][T21510] netpci0: group set to 0 [ 613.381606][T21528] __nla_validate_parse: 66 callbacks suppressed [ 613.381625][T21528] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3847'. [ 613.665833][ T30] audit: type=1800 audit(1770579823.066:17): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3850" name="memory.events" dev="tmpfs" ino=548 res=0 errno=0 [ 613.737808][T21549] netlink: 'syz.4.3854': attribute type 1 has an invalid length. [ 613.849129][T21552] syzkaller0: entered promiscuous mode [ 613.858234][T21552] syzkaller0: entered allmulticast mode [ 613.874777][T21549] netlink: 'syz.4.3854': attribute type 7 has an invalid length. [ 613.886697][T21549] netlink: 'syz.4.3854': attribute type 8 has an invalid length. [ 615.386452][T21523] virt_wifi0 speed is unknown, defaulting to 1000 [ 615.613401][T21573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3856'. [ 615.624080][T21575] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3858'. [ 615.724279][T21581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3859'. [ 615.765494][T21537] virt_wifi0 speed is unknown, defaulting to 1000 [ 616.117842][T21598] Cannot find map_set index 4 as target [ 616.157735][ T5140] Bluetooth: hci5: command 0x0405 tx timeout [ 616.391509][T21610] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3867'. [ 616.682337][T21629] : entered promiscuous mode [ 616.717804][ T6217] net_ratelimit: 27 callbacks suppressed [ 616.717824][ T6217] bond2: (slave macvlan0): failed to get link speed/duplex [ 616.835335][T21637] netlink: 'syz.2.3874': attribute type 1 has an invalid length. [ 616.865143][T21642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3877'. [ 616.924583][T21641] bond0 (unregistering): Released all slaves [ 616.993557][T21615] virt_wifi0 speed is unknown, defaulting to 1000 [ 617.087406][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 617.188332][T21660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3880'. [ 617.279744][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.325852][T21662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3881'. [ 617.336317][T21666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3883'. [ 617.345401][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 617.506126][T21670] vlan2: entered allmulticast mode [ 617.513649][T21683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3886'. [ 617.536215][T21670] team0: entered allmulticast mode [ 617.555222][T21670] team_slave_0: entered allmulticast mode [ 617.575144][T21670] team_slave_1: entered allmulticast mode [ 617.704094][T21693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.716064][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 617.724666][T21691] xt_CT: No such helper "snmp_trap" [ 617.918438][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.947538][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 618.057403][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 618.158442][T21706] nbd: must specify at least one socket [ 618.189488][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 618.243710][T13267] lec:lec_start_xmit: lec0:No lecd attached [ 618.249726][T21729] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 618.366622][T21740] netlink: 'syz.3.3900': attribute type 1 has an invalid length. [ 618.460375][T21747] syz_tun: entered allmulticast mode [ 618.469567][T21747] netlink: 'syz.0.3904': attribute type 10 has an invalid length. [ 618.488085][T21747] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 618.509121][T21740] nbd3: detected capacity change from 0 to 63 [ 618.512994][T21747] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 618.530214][T21744] block nbd3: NBD_DISCONNECT [ 618.539957][T21744] block nbd3: Disconnected due to user request. [ 618.546247][T21744] block nbd3: shutting down sockets [ 618.563700][T21747] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 618.570668][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.580511][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 618.585364][T21743] syz_tun: left allmulticast mode [ 618.588429][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.602883][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 618.610789][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.620398][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 618.628235][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.637768][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 618.657348][T19002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.692948][T19002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 618.721530][T21757] netlink: 'syz.0.3906': attribute type 7 has an invalid length. [ 618.724441][T19002] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.789566][T19002] Buffer I/O error on dev nbd3, logical block 1, async page read [ 618.839739][T19002] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.865149][T19002] Buffer I/O error on dev nbd3, logical block 2, async page read [ 618.892614][T19002] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.928086][T19002] Buffer I/O error on dev nbd3, logical block 3, async page read [ 618.946136][T19002] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.999281][T19002] Buffer I/O error on dev nbd3, logical block 0, async page read [ 619.016624][T19002] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 619.036012][T21750] virt_wifi0 speed is unknown, defaulting to 1000 [ 619.049469][T19002] Buffer I/O error on dev nbd3, logical block 1, async page read [ 619.082950][T19002] ldm_validate_partition_table(): Disk read failed. [ 619.104964][T19002] Dev nbd3: unable to read RDB block 0 [ 619.115107][T19002] nbd3: unable to read partition table [ 619.155128][T19002] ldm_validate_partition_table(): Disk read failed. [ 619.170183][T19002] Dev nbd3: unable to read RDB block 0 [ 619.184343][T19002] nbd3: unable to read partition table [ 619.459773][T21775] __nla_validate_parse: 1 callbacks suppressed [ 619.459790][T21775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3910'. [ 619.479628][T21779] ip6t_rpfilter: unknown options [ 619.597203][T21768] virt_wifi0 speed is unknown, defaulting to 1000 [ 619.882085][T21802] netlink: 'syz.2.3916': attribute type 11 has an invalid length. [ 619.890656][T21802] netlink: 'syz.2.3916': attribute type 4 has an invalid length. [ 619.907108][T21802] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.3916'. [ 619.921452][T21805] netlink: 208280 bytes leftover after parsing attributes in process `syz.1.3919'. [ 620.024236][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3920'. [ 620.102671][T21813] ip6gretap1: entered promiscuous mode [ 620.108347][T21813] ip6gretap1: entered allmulticast mode [ 620.412291][T21830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3927'. [ 620.447218][T21833] netlink: 'syz.1.3928': attribute type 7 has an invalid length. [ 620.554087][T21840] syzkaller0: entered promiscuous mode [ 620.559858][T21840] syzkaller0: entered allmulticast mode [ 620.578556][T21830] syzkaller1: entered promiscuous mode [ 620.584068][T21830] syzkaller1: entered allmulticast mode [ 620.819615][T21847] syzkaller0: entered promiscuous mode [ 620.825141][T21847] syzkaller0: entered allmulticast mode [ 621.289922][T21877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3937'. [ 621.290874][T21878] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3939'. [ 621.340268][T21883] tipc: Started in network mode [ 621.345180][T21883] tipc: Node identity 463d3ac61979, cluster identity 4711 [ 621.352973][T21883] tipc: Enabled bearer , priority 0 [ 621.402210][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3939'. [ 621.426204][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3939'. [ 621.798287][ T8432] net_ratelimit: 24 callbacks suppressed [ 621.798305][ T8432] bond2: (slave macvlan0): failed to get link speed/duplex [ 622.040362][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 622.254111][T21881] tipc: Disabling bearer [ 622.268765][T21912] virt_wifi0 speed is unknown, defaulting to 1000 [ 622.367381][ T8424] bond2: (slave macvlan0): failed to get link speed/duplex [ 622.489774][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.518130][T21944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3960'. [ 622.553286][T21944] vlan3: entered promiscuous mode [ 622.567214][T21944] bridge0: entered promiscuous mode [ 622.622686][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 622.752892][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 622.808985][T21968] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 622.881561][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 623.080695][T21991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.095972][T21991] netlink: 'syz.4.3969': attribute type 6 has an invalid length. [ 623.106335][T21991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.119270][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 623.205378][T22000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.284350][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 623.405268][T22010] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 623.506443][T22010] netlink: 'syz.2.3976': attribute type 11 has an invalid length. [ 623.603964][T22024] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 623.765306][T22028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 623.854094][T22034] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 624.032659][T22066] tipc: Enabling of bearer rejected, failed to enable media [ 624.324391][ T51] block nbd2: Possible stuck request ffff888025ea0000: control (read@0,1024B). Runtime 150 seconds [ 624.328179][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.335614][ T51] block nbd2: Possible stuck request ffff888025ea0200: control (read@1024,1024B). Runtime 150 seconds [ 624.352490][ T51] block nbd2: Possible stuck request ffff888025ea0400: control (read@2048,1024B). Runtime 150 seconds [ 624.367535][ T51] block nbd2: Possible stuck request ffff888025ea0600: control (read@3072,1024B). Runtime 150 seconds [ 624.390743][T22080] bond3: option tlb_dynamic_lb: invalid value (71) [ 624.430792][T22080] bond3 (unregistering): Released all slaves [ 624.557630][T22084] __nla_validate_parse: 6 callbacks suppressed [ 624.557648][T22084] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3995'. [ 624.752602][T22106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3999'. [ 624.770516][T22105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4000'. [ 625.174568][T22129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4007'. [ 625.202232][T22129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 625.330649][T22141] tap0: tun_chr_ioctl cmd 1074025680 [ 625.348508][T22141] tap0: tun_chr_ioctl cmd 1074025673 [ 626.156730][T22194] netlink: 'syz.4.4024': attribute type 2 has an invalid length. [ 626.164829][T22194] netlink: 'syz.4.4024': attribute type 1 has an invalid length. [ 626.186766][T22194] netlink: 'syz.4.4024': attribute type 1 has an invalid length. [ 626.251028][T22198] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 626.599342][T22220] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4029'. [ 626.619445][T22220] 6eth1_to_bond: renamed from gre0 (while UP) [ 626.668982][T22220] batadv_slave_1: entered promiscuous mode [ 626.669407][T22222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4030'. [ 626.694169][T22218] batadv_slave_1: left promiscuous mode [ 626.837623][ T8431] net_ratelimit: 33 callbacks suppressed [ 626.837642][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 626.967347][ T8431] bond2: (slave macvlan0): failed to get link speed/duplex [ 626.997284][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 627.005357][ C0] lec:lec_tx_timeout: lec0 [ 627.009978][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 627.014512][T22202] virt_wifi0 speed is unknown, defaulting to 1000 [ 627.047419][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.458249][ T8427] bond2: (slave macvlan0): failed to get link speed/duplex [ 627.597497][ T8428] bond2: (slave macvlan0): failed to get link speed/duplex [ 627.707643][ T8428] bond2: (slave macvlan0): failed to get link speed/duplex [ 627.776082][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.831683][T22285] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 627.921571][ T8428] bond2: (slave macvlan0): failed to get link speed/duplex [ 628.087535][ T8428] bond2: (slave macvlan0): failed to get link speed/duplex [ 628.207464][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 628.269925][T22303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4042'. [ 628.379003][T22308] xt_bpf: check failed: parse error [ 628.405513][T22311] xt_bpf: check failed: parse error [ 628.563428][T22280] virt_wifi0 speed is unknown, defaulting to 1000 [ 628.711508][T22322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4046'. [ 628.941158][T22339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4047'. [ 628.980294][T22341] syzkaller0: entered promiscuous mode [ 628.985805][T22341] syzkaller0: entered allmulticast mode [ 629.057805][T22339] chnl_net:caif_netlink_parms(): no params data found [ 630.034785][T22376] sctp: [Deprecated]: syz.2.4055 (pid 22376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.034785][T22376] Use struct sctp_sack_info instead [ 630.127102][T22392] IPv6: Can't replace route, no match found [ 630.231733][T22405] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.4060'. [ 630.272758][T22403] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4059'. [ 630.649076][T22431] Cannot find map_set index 135 as target [ 631.064853][T22434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4066'. [ 631.074907][T22434] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 631.117430][T22440] netlink: 'syz.2.4067': attribute type 13 has an invalid length. [ 631.199520][T22440] netlink: 'syz.2.4067': attribute type 13 has an invalid length. [ 631.316936][T22444] netlink: 'syz.2.4069': attribute type 1 has an invalid length. [ 631.342815][T22444] bond4: entered promiscuous mode [ 631.348174][T22444] bond4: entered allmulticast mode [ 631.354035][T22444] 8021q: adding VLAN 0 to HW filter on device bond4 [ 631.375871][T22444] erspan1: entered allmulticast mode [ 631.384602][T22444] bond4: (slave erspan1): making interface the new active one [ 631.392546][T22444] erspan1: entered promiscuous mode [ 631.400792][T22444] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 631.491801][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4071'. [ 631.697136][T22451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4071'. [ 631.897530][ T8436] net_ratelimit: 26 callbacks suppressed [ 631.897552][ T8436] bond2: (slave macvlan0): failed to get link speed/duplex [ 631.917475][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.017426][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 632.025535][ C0] lec:lec_tx_timeout: lec0 [ 632.030627][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 632.077799][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 632.147582][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 632.257547][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 632.377510][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 632.487397][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 632.597394][ T8436] bond2: (slave macvlan0): failed to get link speed/duplex [ 632.707438][ T36] bond2: (slave macvlan0): failed to get link speed/duplex [ 632.817391][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 633.032260][T22383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.046108][T22408] tipc: Started in network mode [ 633.051902][T22408] tipc: Node identity ac14140f, cluster identity 4711 [ 633.059199][T22408] tipc: New replicast peer: 255.255.255.255 [ 633.065767][T22408] tipc: Enabled bearer , priority 10 [ 633.090920][T22412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4056'. [ 633.204904][T22458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4072'. [ 633.257120][T22458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4072'. [ 633.414705][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4077'. [ 633.451022][T22480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4077'. [ 633.613517][T22488] netlink: 'syz.3.4081': attribute type 1 has an invalid length. [ 633.744766][T22490] gretap1: entered allmulticast mode [ 633.764524][T22490] bond3: (slave gretap1): making interface the new active one [ 633.788194][T22490] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 633.966909][T22479] virt_wifi0 speed is unknown, defaulting to 1000 [ 634.188006][T20270] tipc: Node number set to 2886997007 [ 634.385793][T22529] xt_l2tp: missing protocol rule (udp|l2tpip) [ 634.557638][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 634.650862][T22537] netlink: 'syz.4.4093': attribute type 2 has an invalid length. [ 634.722436][T22537] hmac(sha224): entered promiscuous mode [ 634.779374][T22533] virt_wifi0 speed is unknown, defaulting to 1000 [ 635.747674][T22574] __nla_validate_parse: 4 callbacks suppressed [ 635.747691][T22574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4105'. [ 635.934013][T22592] netlink: 11868 bytes leftover after parsing attributes in process `syz.0.4105'. [ 635.964592][T22593] netlink: 71 bytes leftover after parsing attributes in process `syz.4.4109'. [ 636.443529][T22578] virt_wifi0 speed is unknown, defaulting to 1000 [ 636.638101][T16793] Bluetooth: hci1: command 0x0406 tx timeout [ 636.859643][T22625] netlink: 'syz.3.4113': attribute type 13 has an invalid length. [ 636.871556][T22630] xt_ecn: cannot match TCP bits for non-tcp packets [ 636.917540][T22626] IPVS: set_ctl: invalid protocol: 0 172.20.20.56:20011 [ 636.927606][T22625] gretap0: refused to change device tx_queue_len [ 636.934785][T22625] net_ratelimit: 33 callbacks suppressed [ 636.934800][T22625] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 636.968607][T22601] virt_wifi0 speed is unknown, defaulting to 1000 [ 637.107511][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 637.123297][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.209961][T22638] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4116'. [ 637.227434][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 637.306644][T22609] virt_wifi0 speed is unknown, defaulting to 1000 [ 637.570409][T22646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4121'. [ 637.747358][ T8428] bond2: (slave macvlan0): failed to get link speed/duplex [ 637.837282][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 637.845357][ C0] lec:lec_tx_timeout: lec0 [ 637.851930][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 637.983243][ T8436] bond2: (slave macvlan0): failed to get link speed/duplex [ 638.117335][ T6298] bond2: (slave macvlan0): failed to get link speed/duplex [ 638.157540][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.228711][ T6298] bond2: (slave macvlan0): failed to get link speed/duplex [ 638.337391][ T8428] bond2: (slave macvlan0): failed to get link speed/duplex [ 638.609224][T22690] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 638.638851][T22690] bond5 (unregistering): Released all slaves [ 638.728384][T22706] xt_socket: unknown flags 0x50 [ 638.758467][T22698] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 639.039522][ T51] block nbd1: Possible stuck request ffff888031430000: control (read@0,1024B). Runtime 270 seconds [ 639.050393][ T51] block nbd1: Possible stuck request ffff888031430200: control (read@1024,1024B). Runtime 270 seconds [ 639.064536][ T51] block nbd1: Possible stuck request ffff888031430400: control (read@2048,1024B). Runtime 270 seconds [ 639.084698][ T51] block nbd1: Possible stuck request ffff888031430600: control (read@3072,1024B). Runtime 270 seconds [ 639.344401][T22668] virt_wifi0 speed is unknown, defaulting to 1000 [ 639.521240][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4147'. [ 639.885675][T22777] sock: sock_timestamping_bind_phc: sock not bind to device [ 640.045603][T22770] virt_wifi0 speed is unknown, defaulting to 1000 [ 640.530652][T22797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4154'. [ 640.771515][T22808] netlink: 'syz.0.4157': attribute type 21 has an invalid length. [ 640.852195][T22808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4157'. [ 640.940184][T22822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4156'. [ 641.083480][T22808] netlink: 'syz.0.4157': attribute type 21 has an invalid length. [ 641.112125][T22808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4157'. [ 641.176211][T22830] netlink: 'syz.2.4162': attribute type 4 has an invalid length. [ 641.201645][T22830] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4162'. [ 641.571367][T22850] netlink: 'syz.4.4164': attribute type 10 has an invalid length. [ 641.592262][T22850] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4164'. [ 641.855697][T22850] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 641.946016][T22831] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.081731][ T8436] net_ratelimit: 25 callbacks suppressed [ 642.081752][ T8436] bond2: (slave macvlan0): failed to get link speed/duplex [ 642.247539][ T8436] bond2: (slave macvlan0): failed to get link speed/duplex [ 642.251358][T20277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.317709][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.489144][ T6298] bond2: (slave macvlan0): failed to get link speed/duplex [ 642.571196][T22864] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.585995][T22893] netlink: 'syz.2.4170': attribute type 2 has an invalid length. [ 642.617088][T22893] netlink: 'syz.2.4170': attribute type 9 has an invalid length. [ 642.655334][T22893] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4170'. [ 642.707035][T22893] netlink: 'syz.2.4170': attribute type 2 has an invalid length. [ 642.752248][T22893] netlink: 'syz.2.4170': attribute type 9 has an invalid length. [ 642.778130][T22893] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4170'. [ 642.801974][T22877] netlink: 'syz.0.4167': attribute type 4 has an invalid length. [ 642.877397][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 642.885439][ C0] lec:lec_tx_timeout: lec0 [ 642.930439][ T6298] bond2: (slave macvlan0): failed to get link speed/duplex [ 643.062732][T22913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4174'. [ 643.088185][T22913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4174'. [ 643.177550][ T6298] bond2: (slave macvlan0): failed to get link speed/duplex [ 643.289263][ T6298] bond2: (slave macvlan0): failed to get link speed/duplex [ 643.370410][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.427442][ T6298] bond2: (slave macvlan0): failed to get link speed/duplex [ 643.469752][T22928] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4176'. [ 643.547139][T22931] syzkaller0: refused to change device tx_queue_len [ 643.708012][T22910] virt_wifi0 speed is unknown, defaulting to 1000 [ 644.438765][T22925] virt_wifi0 speed is unknown, defaulting to 1000 [ 644.926358][T22995] netlink: 'syz.0.4189': attribute type 39 has an invalid length. [ 645.388448][T23004] xt_limit: Overflow, try lower: 268435456/134217728 [ 645.622765][T23021] netlink: 'syz.4.4198': attribute type 4 has an invalid length. [ 645.631195][T23021] netlink: 'syz.4.4198': attribute type 1 has an invalid length. [ 645.785241][T23031] vlan3: entered allmulticast mode [ 645.819628][T23031] team0: entered allmulticast mode [ 645.831505][T23031] team_slave_0: entered allmulticast mode [ 645.855544][ T5140] Bluetooth: hci4: link tx timeout [ 645.862631][ T5140] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 645.873628][T16793] Bluetooth: hci4: link tx timeout [ 645.879280][T16793] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 645.887768][T16793] Bluetooth: hci4: link tx timeout [ 645.892956][T16793] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 645.903633][T16793] Bluetooth: hci4: link tx timeout [ 645.909585][T16793] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 645.917952][T23031] team_slave_1: entered allmulticast mode [ 645.935413][T23021] virt_wifi0 speed is unknown, defaulting to 1000 [ 645.957552][T16793] Bluetooth: hci4: link tx timeout [ 645.962760][T16793] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 645.971844][T16793] Bluetooth: hci4: link tx timeout [ 645.976969][T16793] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 646.010863][T23036] __nla_validate_parse: 6 callbacks suppressed [ 646.010876][T23036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4201'. [ 646.089970][T23038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4202'. [ 646.205910][T23046] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4204'. [ 646.300682][T23049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4205'. [ 646.358275][T23037] veth0_macvtap: left allmulticast mode [ 646.364070][T23037] macvtap1: left allmulticast mode [ 646.376153][T23037] gretap1: left promiscuous mode [ 646.383895][T23037] ip6gretap1: left promiscuous mode [ 646.389386][T23037] ip6gretap1: left allmulticast mode [ 646.412374][T23038] hsr_slave_0: left promiscuous mode [ 646.420146][T23038] hsr_slave_1: left promiscuous mode [ 646.443981][T23046] .70: renamed from hsr0 [ 646.459873][T23046] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 646.479166][T23046] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.491486][T23046] .70: entered allmulticast mode [ 646.496541][T23046] hsr_slave_0: entered allmulticast mode [ 646.502593][T23046] hsr_slave_1: entered allmulticast mode [ 646.510659][ T6298] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.519550][ T6298] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.522727][T23053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4206'. [ 646.548005][ T6298] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.593649][ T6298] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.623310][ T6298] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.623940][T23055] netlink: 'syz.4.4207': attribute type 39 has an invalid length. [ 646.651469][ T6298] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.665711][ T6298] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.674568][ T6298] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.779054][T23061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4210'. [ 646.804181][T23061] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4210'. [ 646.825446][T23063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4211'. [ 646.858133][T23063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4211'. [ 646.858388][T23061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'. [ 646.904361][T23061] block nbd1: NBD_DISCONNECT [ 646.915230][T23061] block nbd1: Send disconnect failed -32 [ 646.922939][T23061] block nbd1: shutting down sockets [ 646.945294][ C0] blk_print_req_error: 138 callbacks suppressed [ 646.945316][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.961169][ C0] buffer_io_error: 138 callbacks suppressed [ 646.961184][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 646.976518][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 646.986100][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 646.993974][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.003576][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 647.011430][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.020951][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 647.028974][ T8129] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.056476][ T8129] Buffer I/O error on dev nbd1, logical block 0, async page read [ 647.066634][ T8129] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.087362][ T8129] Buffer I/O error on dev nbd1, logical block 1, async page read [ 647.097414][ T8129] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.154551][ T8129] Buffer I/O error on dev nbd1, logical block 2, async page read [ 647.172242][ T8129] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.182282][ T8129] Buffer I/O error on dev nbd1, logical block 3, async page read [ 647.190362][ T8129] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.200140][ T8129] Buffer I/O error on dev nbd1, logical block 0, async page read [ 647.207640][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 647.208143][ T8129] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 647.223391][ T8129] Buffer I/O error on dev nbd1, logical block 1, async page read [ 647.237348][ T44] net_ratelimit: 28 callbacks suppressed [ 647.237365][ T44] bond2: (slave macvlan0): failed to get link speed/duplex [ 647.269916][ T8129] ldm_validate_partition_table(): Disk read failed. [ 647.318493][ T8129] Dev nbd1: unable to read RDB block 0 [ 647.324604][ T8129] nbd1: unable to read partition table [ 647.370724][ T8425] bond2: (slave macvlan0): failed to get link speed/duplex [ 647.384096][ T5188] udevd[5188]: worker [8129] terminated by signal 9 (Killed) [ 647.411733][ T5188] udevd[5188]: worker [8129] failed while handling '/devices/virtual/block/nbd1' [ 647.520848][ T8428] bond2: (slave macvlan0): failed to get link speed/duplex [ 647.532065][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.611738][ T8436] team0: left allmulticast mode [ 647.629042][ T8436] team_slave_0: left allmulticast mode [ 647.634554][ T8436] team_slave_1: left allmulticast mode [ 647.647704][ T8436] team0: left promiscuous mode [ 647.660344][ T8436] team_slave_0: left promiscuous mode [ 647.666183][ T8436] team_slave_1: left promiscuous mode [ 647.704989][ T8436] bridge2: left promiscuous mode [ 647.720775][ T8436] bridge0: port 1(team0) entered disabled state [ 647.917475][T16793] Bluetooth: hci4: command 0x0405 tx timeout [ 648.103178][ T8436] bond1 (unregistering): (slave geneve3): Releasing active interface [ 648.252923][ T8436] team0: Port device bridge2 removed [ 648.317650][T20279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.393257][ T8436] bond2 (unregistering): (slave macvlan0): Removing an active aggregator [ 648.403099][ T8436] bond2 (unregistering): (slave macvlan0): Releasing backup interface [ 648.416556][ T8436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.426414][ T8436] bond_slave_0: left promiscuous mode [ 648.433030][ T8436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.444159][ T8436] bond_slave_1: left promiscuous mode [ 648.450422][ T8436] bond0 (unregistering): Released all slaves [ 648.460515][ T8436] bond1 (unregistering): Released all slaves [ 648.472931][ T8436] bond2 (unregistering): Released all slaves [ 648.485542][ T8436] bond3 (unregistering): Released all slaves [ 648.501156][ T8436] bond4 (unregistering): Released all slaves [ 648.523847][ T8436] bond5 (unregistering): Released all slaves [ 648.563767][T23105] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.580309][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.723483][T23109] syzkaller1: entered promiscuous mode [ 648.729162][T23109] syzkaller1: entered allmulticast mode [ 648.939508][T23137] pimreg: entered allmulticast mode [ 648.967702][T23137] pimreg: left allmulticast mode [ 649.157677][T23148] netlink: 'syz.3.4232': attribute type 1 has an invalid length. [ 649.248551][T23158] bond2: option miimon: invalid value (18446744073709551607) [ 649.256063][T23158] bond2: option miimon: allowed values 0 - 2147483647 [ 649.265991][T23158] bond2 (unregistering): Released all slaves [ 649.310452][T23148] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 649.322077][T23148] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 649.368078][T23170] bridge_slave_0: left allmulticast mode [ 649.387559][T23170] bridge_slave_0: left promiscuous mode [ 649.404249][T23170] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.439421][T23170] bridge_slave_1: left allmulticast mode [ 649.499795][T23190] netlink: 'syz.2.4241': attribute type 1 has an invalid length. [ 649.523895][T23170] bridge_slave_1: left promiscuous mode [ 649.530421][T23170] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.573070][T23170] bond0: (slave bond_slave_0): Releasing backup interface [ 649.586101][T23170] bond0: (slave bond_slave_1): Releasing backup interface [ 649.595810][T23170] team_slave_0: left allmulticast mode [ 649.604877][T23170] team0: Port device team_slave_0 removed [ 649.612317][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.613657][T23170] team_slave_1: left allmulticast mode [ 649.631176][T23170] team0: Port device team_slave_1 removed [ 649.637835][T23170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.647749][T23170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 649.841545][T23207] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 650.030769][T23173] virt_wifi0 speed is unknown, defaulting to 1000 [ 650.085636][T23228] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 650.210927][ T8436] tipc: Left network mode [ 650.278317][T23221] virt_wifi0 speed is unknown, defaulting to 1000 [ 650.644258][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.068807][T23254] __nla_validate_parse: 18 callbacks suppressed [ 651.068826][T23254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4258'. [ 651.085464][T23254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4258'. [ 651.392802][T23272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4264'. [ 651.406330][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4264'. [ 651.418878][T23272] tc_dump_action: action bad kind [ 651.444893][T23277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4267'. [ 651.579656][T23281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4269'. [ 651.690881][ T8436] hsr_slave_0: left promiscuous mode [ 651.718803][ T8436] hsr_slave_1: left promiscuous mode [ 651.998514][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 652.717556][ T39] net_ratelimit: 2 callbacks suppressed [ 652.717578][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.877330][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 652.885419][ C0] lec:lec_tx_timeout: lec0 [ 652.890968][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 652.902422][T23326] IPVS: length: 132 != 8 [ 653.446777][ T8436] team0 (unregistering): Port device team_slave_1 removed [ 653.460451][ T8436] team0 (unregistering): Port device team_slave_0 removed [ 653.567866][T23269] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.640982][T23324] pimreg: entered allmulticast mode [ 653.758401][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.759054][T23324] pimreg: left allmulticast mode [ 653.814880][T23341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4277'. [ 654.364474][T23321] virt_wifi0 speed is unknown, defaulting to 1000 [ 654.398552][T20277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.410831][ T51] block nbd2: Possible stuck request ffff888025ea0000: control (read@0,1024B). Runtime 180 seconds [ 654.421937][ T51] block nbd2: Possible stuck request ffff888025ea0200: control (read@1024,1024B). Runtime 180 seconds [ 654.433496][ T51] block nbd2: Possible stuck request ffff888025ea0400: control (read@2048,1024B). Runtime 180 seconds [ 654.444891][ T51] block nbd2: Possible stuck request ffff888025ea0600: control (read@3072,1024B). Runtime 180 seconds [ 654.801063][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.881149][T23388] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.4285:23388 [ 655.274278][T23382] virt_wifi0 speed is unknown, defaulting to 1000 [ 655.723707][T23433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4296'. [ 655.831886][T23446] netlink: 'syz.2.4296': attribute type 1 has an invalid length. [ 655.852790][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.891868][T23448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4296'. [ 656.092776][ T8436] IPVS: stop unused estimator thread 0... [ 656.390442][T23471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4300'. [ 656.577618][T23427] virt_wifi0 speed is unknown, defaulting to 1000 [ 656.590523][T23481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4301'. [ 656.604244][T23482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4303'. [ 656.710709][T23482] bond2: entered promiscuous mode [ 656.716138][T23482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 656.880802][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.230099][T23506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.438313][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.781523][T23526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4312'. [ 657.897606][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 657.905653][ C0] lec:lec_tx_timeout: lec0 [ 657.922561][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.989499][T23538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4312'. [ 658.041419][T23541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4314'. [ 658.197017][T23547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4315'. [ 658.268543][T23551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.551310][T23570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4319'. [ 658.741661][T23583] netlink: 'syz.3.4322': attribute type 4 has an invalid length. [ 658.815361][T23587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4324'. [ 658.844264][T23587] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4324'. [ 658.866744][T23587] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 658.875450][T23583] netlink: 'syz.3.4322': attribute type 1 has an invalid length. [ 659.024278][T23594] wg1: entered promiscuous mode [ 659.029460][T23594] wg1: entered allmulticast mode [ 659.195718][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.719970][T23588] virt_wifi0 speed is unknown, defaulting to 1000 [ 659.904231][T23644] syzkaller0: entered promiscuous mode [ 659.910400][T23644] syzkaller0: entered allmulticast mode [ 660.248150][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.268895][T23634] virt_wifi0 speed is unknown, defaulting to 1000 [ 660.477557][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.582319][T23662] syzkaller0: entered promiscuous mode [ 660.610162][T23662] syzkaller0: entered allmulticast mode [ 660.647186][T23662] netlink: 'syz.2.4342': attribute type 13 has an invalid length. [ 660.657571][T23646] veth5: entered promiscuous mode [ 660.935572][T23689] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 660.943140][T23689] syzkaller1: linktype set to 778 [ 660.986591][T23689] 8021q: adding VLAN 0 to HW filter on device bond5 [ 661.034686][T23695] netlink: 'syz.4.4348': attribute type 5 has an invalid length. [ 661.280485][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.321030][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 662.327575][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.975930][T23718] syzkaller0: entered promiscuous mode [ 662.981717][T23718] syzkaller0: entered allmulticast mode [ 663.207726][T23670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.357731][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.398179][T23723] __nla_validate_parse: 10 callbacks suppressed [ 663.398200][T23723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4355'. [ 663.415031][T23724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4354'. [ 663.465654][T23729] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4357'. [ 663.528111][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.589642][T20242] IPVS: starting estimator thread 0... [ 663.646736][T23744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'. [ 663.685042][T23744] vlan2: entered promiscuous mode [ 663.705242][T23744] bond0: entered promiscuous mode [ 663.710696][T23737] IPVS: using max 32 ests per chain, 76800 per kthread [ 663.727141][T23744] bond_slave_0: entered promiscuous mode [ 663.737531][T23744] bond_slave_1: entered promiscuous mode [ 663.748269][T23744] vlan2: entered allmulticast mode [ 663.753566][T23744] bond0: entered allmulticast mode [ 663.762208][T23744] bond_slave_0: entered allmulticast mode [ 663.769820][T23744] bond_slave_1: entered allmulticast mode [ 663.886105][T23757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.180587][T23774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4369'. [ 664.190006][T23774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4369'. [ 664.318875][T23785] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 664.397589][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.417911][T23791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 664.433938][T23792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4371'. [ 664.780106][T23807] syzkaller0: entered promiscuous mode [ 664.785695][T23807] syzkaller0: entered allmulticast mode [ 664.812120][T23810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4377'. [ 664.970326][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4380'. [ 665.092449][T23804] virt_wifi0 speed is unknown, defaulting to 1000 [ 665.437727][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.619142][T23820] [ 665.621508][T23820] ====================================================== [ 665.628522][T23820] WARNING: possible circular locking dependency detected [ 665.635551][T23820] syzkaller #0 Not tainted [ 665.639963][T23820] ------------------------------------------------------ [ 665.646982][T23820] syz.3.4381/23820 is trying to acquire lock: [ 665.653041][T23820] ffffffff8e6568c8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x272/0x18d0 [ 665.662595][T23820] [ 665.662595][T23820] but task is already holding lock: [ 665.669944][T23820] ffff888029969370 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 665.680216][T23820] [ 665.680216][T23820] which lock already depends on the new lock. [ 665.680216][T23820] [ 665.690693][T23820] [ 665.690693][T23820] the existing dependency chain (in reverse order) is: [ 665.699691][T23820] [ 665.699691][T23820] -> #2 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 665.708288][T23820] blk_alloc_queue+0x52f/0x610 [ 665.713574][T23820] __blk_mq_alloc_disk+0x197/0x390 [ 665.719217][T23820] nbd_dev_add+0x499/0xb50 [ 665.724155][T23820] nbd_genl_connect+0x962/0x1cf0 [ 665.729615][T23820] genl_family_rcv_msg_doit+0x22a/0x330 [ 665.735678][T23820] genl_rcv_msg+0x61c/0x7a0 [ 665.740697][T23820] netlink_rcv_skb+0x232/0x4b0 [ 665.745967][T23820] genl_rcv+0x28/0x40 [ 665.750460][T23820] netlink_unicast+0x80f/0x9b0 [ 665.755727][T23820] netlink_sendmsg+0x813/0xb40 [ 665.760998][T23820] ____sys_sendmsg+0xa68/0xad0 [ 665.766275][T23820] ___sys_sendmsg+0x2a5/0x360 [ 665.771546][T23820] __x64_sys_sendmsg+0x1bd/0x2a0 [ 665.776990][T23820] do_syscall_64+0xe2/0xf80 [ 665.782004][T23820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.788404][T23820] [ 665.788404][T23820] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 665.796069][T23820] fs_reclaim_acquire+0x71/0x100 [ 665.801515][T23820] prepare_alloc_pages+0x152/0x650 [ 665.807132][T23820] __alloc_frozen_pages_noprof+0x12f/0x380 [ 665.813445][T23820] __alloc_pages_noprof+0xa/0x30 [ 665.818895][T23820] pcpu_populate_chunk+0x182/0xb30 [ 665.824517][T23820] pcpu_alloc_noprof+0xc4a/0x18d0 [ 665.830066][T23820] xt_percpu_counter_alloc+0x161/0x220 [ 665.836043][T23820] translate_table+0x134a/0x2110 [ 665.841505][T23820] ipt_register_table+0x11b/0x7f0 [ 665.847053][T23820] iptable_raw_table_init+0x54/0x80 [ 665.853294][T23820] xt_find_table_lock+0x30c/0x3e0 [ 665.858884][T23820] xt_request_find_table_lock+0x26/0x100 [ 665.865041][T23820] do_ipt_get_ctl+0x716/0x1240 [ 665.870320][T23820] nf_getsockopt+0x26e/0x290 [ 665.875425][T23820] ip_getsockopt+0x19e/0x230 [ 665.880518][T23820] do_sock_getsockopt+0x2d3/0x3f0 [ 665.886048][T23820] __x64_sys_getsockopt+0x1a4/0x240 [ 665.891766][T23820] do_syscall_64+0xe2/0xf80 [ 665.896779][T23820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.903175][T23820] [ 665.903175][T23820] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 665.910905][T23820] __lock_acquire+0x15a5/0x2cf0 [ 665.916289][T23820] lock_acquire+0x106/0x330 [ 665.921314][T23820] __mutex_lock+0x19f/0x1300 [ 665.926425][T23820] pcpu_alloc_noprof+0x272/0x18d0 [ 665.931972][T23820] sbitmap_init_node+0x1e1/0x640 [ 665.937449][T23820] sbitmap_queue_init_node+0x3e/0x4d0 [ 665.943338][T23820] blk_mq_init_tags+0x15c/0x2d0 [ 665.948701][T23820] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 665.954666][T23820] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 665.960977][T23820] nbd_start_device+0x17f/0xb10 [ 665.966343][T23820] nbd_genl_connect+0x165b/0x1cf0 [ 665.971873][T23820] genl_family_rcv_msg_doit+0x22a/0x330 [ 665.977931][T23820] genl_rcv_msg+0x61c/0x7a0 [ 665.982944][T23820] netlink_rcv_skb+0x232/0x4b0 [ 665.988209][T23820] genl_rcv+0x28/0x40 [ 665.992695][T23820] netlink_unicast+0x80f/0x9b0 [ 665.997963][T23820] netlink_sendmsg+0x813/0xb40 [ 666.003241][T23820] ____sys_sendmsg+0xa68/0xad0 [ 666.008516][T23820] ___sys_sendmsg+0x2a5/0x360 [ 666.013698][T23820] __x64_sys_sendmsg+0x1bd/0x2a0 [ 666.019153][T23820] do_syscall_64+0xe2/0xf80 [ 666.024191][T23820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.030595][T23820] [ 666.030595][T23820] other info that might help us debug this: [ 666.030595][T23820] [ 666.040806][T23820] Chain exists of: [ 666.040806][T23820] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#69 [ 666.040806][T23820] [ 666.054708][T23820] Possible unsafe locking scenario: [ 666.054708][T23820] [ 666.062141][T23820] CPU0 CPU1 [ 666.067513][T23820] ---- ---- [ 666.072856][T23820] lock(&q->q_usage_counter(io)#69); [ 666.078224][T23820] lock(fs_reclaim); [ 666.084717][T23820] lock(&q->q_usage_counter(io)#69); [ 666.092607][T23820] lock(pcpu_alloc_mutex); [ 666.097095][T23820] [ 666.097095][T23820] *** DEADLOCK *** [ 666.097095][T23820] [ 666.105228][T23820] 6 locks held by syz.3.4381/23820: [ 666.110406][T23820] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 666.118587][T23820] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 666.127541][T23820] #2: ffff8880334a21d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 666.138924][T23820] #3: ffff8880334a20d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 666.149875][T23820] #4: ffff888029969370 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 666.160574][T23820] #5: ffff8880299693a8 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 666.171532][T23820] [ 666.171532][T23820] stack backtrace: [ 666.177405][T23820] CPU: 0 UID: 0 PID: 23820 Comm: syz.3.4381 Not tainted syzkaller #0 PREEMPT(full) [ 666.177424][T23820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 666.177435][T23820] Call Trace: [ 666.177442][T23820] [ 666.177451][T23820] dump_stack_lvl+0xe8/0x150 [ 666.177472][T23820] print_circular_bug+0x2e1/0x300 [ 666.177489][T23820] check_noncircular+0x12e/0x150 [ 666.177506][T23820] __lock_acquire+0x15a5/0x2cf0 [ 666.177532][T23820] ? kernel_text_address+0xa5/0xe0 [ 666.177551][T23820] ? pcpu_alloc_noprof+0x272/0x18d0 [ 666.177566][T23820] lock_acquire+0x106/0x330 [ 666.177585][T23820] ? pcpu_alloc_noprof+0x272/0x18d0 [ 666.177603][T23820] __mutex_lock+0x19f/0x1300 [ 666.177624][T23820] ? pcpu_alloc_noprof+0x272/0x18d0 [ 666.177638][T23820] ? stack_depot_save_flags+0x3f3/0x810 [ 666.177659][T23820] ? kasan_save_track+0x4f/0x80 [ 666.177672][T23820] ? kasan_save_track+0x3e/0x80 [ 666.177684][T23820] ? pcpu_alloc_noprof+0x272/0x18d0 [ 666.177698][T23820] ? __kmalloc_cache_node_noprof+0x455/0x6d0 [ 666.177712][T23820] ? blk_mq_init_tags+0x83/0x2d0 [ 666.177731][T23820] ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 666.177746][T23820] ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 666.177764][T23820] ? __pfx___mutex_lock+0x10/0x10 [ 666.177782][T23820] ? genl_rcv+0x28/0x40 [ 666.177800][T23820] ? ____sys_sendmsg+0xa68/0xad0 [ 666.177819][T23820] ? ___sys_sendmsg+0x2a5/0x360 [ 666.177843][T23820] pcpu_alloc_noprof+0x272/0x18d0 [ 666.177863][T23820] sbitmap_init_node+0x1e1/0x640 [ 666.177887][T23820] sbitmap_queue_init_node+0x3e/0x4d0 [ 666.177908][T23820] blk_mq_init_tags+0x15c/0x2d0 [ 666.177928][T23820] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 666.177944][T23820] ? lockdep_hardirqs_on+0x7a/0x110 [ 666.177964][T23820] ? blk_mq_update_nr_hw_queues+0x977/0x1ae0 [ 666.177981][T23820] ? kfree+0x1be/0x650 [ 666.177999][T23820] ? blk_mq_update_nr_hw_queues+0x931/0x1ae0 [ 666.178018][T23820] blk_mq_update_nr_hw_queues+0xa68/0x1ae0 [ 666.178042][T23820] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 666.178063][T23820] ? sysfs_add_file_mode_ns+0x259/0x300 [ 666.178084][T23820] nbd_start_device+0x17f/0xb10 [ 666.178106][T23820] ? device_create_file+0xf4/0x1b0 [ 666.178129][T23820] nbd_genl_connect+0x165b/0x1cf0 [ 666.178152][T23820] ? __pfx_nbd_genl_connect+0x10/0x10 [ 666.178176][T23820] ? rcu_is_watching+0x15/0xb0 [ 666.178191][T23820] ? __nla_parse+0x40/0x60 [ 666.178211][T23820] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 666.178234][T23820] genl_family_rcv_msg_doit+0x22a/0x330 [ 666.178261][T23820] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 666.178285][T23820] ? __lock_acquire+0x6b5/0x2cf0 [ 666.178307][T23820] genl_rcv_msg+0x61c/0x7a0 [ 666.178328][T23820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.178347][T23820] ? __pfx_nbd_genl_connect+0x10/0x10 [ 666.178370][T23820] netlink_rcv_skb+0x232/0x4b0 [ 666.178386][T23820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 666.178406][T23820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 666.178420][T23820] ? genl_rcv+0x19/0x40 [ 666.178444][T23820] ? down_read+0x272/0x2e0 [ 666.178456][T23820] ? genl_rcv+0xd/0x40 [ 666.178474][T23820] genl_rcv+0x28/0x40 [ 666.178492][T23820] netlink_unicast+0x80f/0x9b0 [ 666.178509][T23820] ? __pfx_netlink_unicast+0x10/0x10 [ 666.178524][T23820] ? netlink_sendmsg+0x650/0xb40 [ 666.178539][T23820] ? skb_put+0x11b/0x210 [ 666.178557][T23820] netlink_sendmsg+0x813/0xb40 [ 666.178576][T23820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.178593][T23820] ? aa_sock_msg_perm+0xf1/0x1b0 [ 666.178612][T23820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 666.178628][T23820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.178644][T23820] ____sys_sendmsg+0xa68/0xad0 [ 666.178663][T23820] ? __might_fault+0xaf/0x130 [ 666.178685][T23820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.178707][T23820] ? import_iovec+0x73/0xa0 [ 666.178728][T23820] ___sys_sendmsg+0x2a5/0x360 [ 666.178747][T23820] ? __lock_acquire+0x6b5/0x2cf0 [ 666.178767][T23820] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.178788][T23820] ? futex_wake+0x4ac/0x580 [ 666.178812][T23820] ? __fget_files+0x2a/0x420 [ 666.178827][T23820] ? __fget_files+0x3a0/0x420 [ 666.178846][T23820] __x64_sys_sendmsg+0x1bd/0x2a0 [ 666.178866][T23820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.178889][T23820] ? rcu_is_watching+0x15/0xb0 [ 666.178907][T23820] do_syscall_64+0xe2/0xf80 [ 666.178926][T23820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.178940][T23820] ? trace_irq_disable+0x37/0x100 [ 666.178954][T23820] ? clear_bhb_loop+0x60/0xb0 [ 666.178970][T23820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.178985][T23820] RIP: 0033:0x7f11f719aeb9 [ 666.179000][T23820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.179015][T23820] RSP: 002b:00007f11f7fe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.179031][T23820] RAX: ffffffffffffffda RBX: 00007f11f7416090 RCX: 00007f11f719aeb9 [ 666.179042][T23820] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 666.179053][T23820] RBP: 00007f11f7208c1f R08: 0000000000000000 R09: 0000000000000000 [ 666.179063][T23820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.179073][T23820] R13: 00007f11f7416128 R14: 00007f11f7416090 R15: 00007ffc41e9ea18 [ 666.179089][T23820] [ 666.689851][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.698006][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.716911][ T5140] block nbd1: Receive control failed (result -32) [ 666.724659][ T5140] block nbd1: Receive control failed (result -32) [ 666.731300][ T5140] block nbd1: Receive control failed (result -32) [ 666.737983][ T5140] block nbd1: Receive control failed (result -32) [ 666.809487][T23820] nbd1: detected capacity change from 0 to 127 [ 666.816683][T23829] netlink: 'syz.4.4382': attribute type 11 has an invalid length. [ 666.824945][T19002] block nbd1: Dead connection, failed to find a fallback [ 666.832714][T23829] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.4382'. [ 666.840820][T19002] block nbd1: shutting down sockets [ 666.847223][T19002] blk_print_req_error: 54 callbacks suppressed [ 666.853432][T19002] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.862911][T19002] buffer_io_error: 54 callbacks suppressed [ 666.862925][T19002] Buffer I/O error on dev nbd1, logical block 0, async page read [ 666.884195][T19002] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.885310][T23830] netlink: 'syz.4.4382': attribute type 11 has an invalid length. [ 666.902147][T19002] Buffer I/O error on dev nbd1, logical block 1, async page read [ 666.910139][T19002] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.927291][T19002] Buffer I/O error on dev nbd1, logical block 2, async page read [ 666.955343][ T51] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.964892][ T51] Buffer I/O error on dev nbd1, logical block 3, async page read [ 666.973113][T19002] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 666.984765][T19002] Buffer I/O error on dev nbd1, logical block 0, async page read [ 666.993099][T19002] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.002669][T19002] Buffer I/O error on dev nbd1, logical block 1, async page read [ 667.010501][T19002] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.023681][T19002] Buffer I/O error on dev nbd1, logical block 2, async page read [ 667.031710][T19002] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.041394][T19002] Buffer I/O error on dev nbd1, logical block 3, async page read [ 667.049235][T19002] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.058852][T19002] Buffer I/O error on dev nbd1, logical block 0, async page read [ 667.066860][T19002] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.076487][T19002] Buffer I/O error on dev nbd1, logical block 1, async page read [ 667.084949][T19002] ldm_validate_partition_table(): Disk read failed. [ 667.092107][T19002] Dev nbd1: unable to read RDB block 0 [ 667.098139][T19002] nbd1: unable to read partition table [ 667.118167][T19002] ldm_validate_partition_table(): Disk read failed. [ 667.125108][T19002] Dev nbd1: unable to read RDB block 0 [ 667.138407][T19002] nbd1: unable to read partition table [ 667.370317][T16793] Bluetooth: hci2: command 0x0406 tx timeout [ 667.757657][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.837562][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 667.845594][ C0] lec:lec_tx_timeout: lec0 [ 667.850329][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 668.798202][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.757867][T20281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.847681][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.399586][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.593152][ T5188] udevd[5188]: worker [8146] /devices/virtual/block/nbd2 timeout; kill it [ 670.602100][ T5188] udevd[5188]: seq 30728 '/devices/virtual/block/nbd2' killed [ 670.879394][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.917640][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.877429][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 672.885459][ C0] lec:lec_tx_timeout: lec0 [ 672.958433][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.437729][T20281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.999146][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.038455][T20242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog