last executing test programs: 9.1330915s ago: executing program 4 (id=18722): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[], 0x50}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @initdev, @remote}, &(0x7f0000000540)=0xc) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x10, 0x10}, {}, {0x8, 0x18}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xd4d3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c8a0}, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000a40)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000b000024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_hsr\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x8, 0x8000, 0x800, 0xe944, {{0xa, 0x4, 0x0, 0x1, 0x28, 0x67, 0x0, 0x1, 0x4, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x26, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r2, @ANYBLOB="040000000000", @ANYRES32=r3, @ANYBLOB="f4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004004000000008000600", @ANYRES32=r4, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000008000100", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004004c00000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r9, @ANYBLOB], 0x1d4}, 0x1, 0x0, 0x0, 0x44808}, 0x4040018) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x1, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x7}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x7c}}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1400"/20], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) socket$netlink(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 8.638203497s ago: executing program 4 (id=18726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000700000000001400020077673000000000000000000000000000fc010880080100801400040002004e207f0000010000000000000000c40009801c000080060001000200000008000200ac141432050003000000000058000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac141481050003000300007218647c8781a39040021d4be87e73c100ff0100000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x400c084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000240)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, 'c', "f876a7", 0x6c0c, "ee145e4c67651dcaac"}}}}}, 0x0) close(0x4) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) unshare(0x2000000) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 8.311173264s ago: executing program 0 (id=18729): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000002000000040000007b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000d1dc9f06aa1800000000000000"], 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x21c000, 0x800}, 0x20) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000007440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="00040000", @ANYRES16=r5, @ANYBLOB="e36127bd7000fddbdf2504000000300001802c0002800800010004000000080001001a000000080004000400000008000300010000800800040009000000"], 0x44}, 0x1, 0x0, 0x0, 0x2044854}, 0x8000) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x94, r5, 0x920, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x529c}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40810}, 0x4004040) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "ec41a61a327c3174e13c3b0290faad672d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}, {&(0x7f0000000280)="5055d8e9d8e9bf08be5a48a0ea9c5c246adbf933dcd64ef0e85b7e030f78ddcb61b59b0c840a8b1a4db0b53edecbad6a845aa71acf99359d23bceae0b3abea3b10521bc0b996e6f21a995876a703", 0x4e}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000005c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x18, &(0x7f0000000700)=@framed={{0x18, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfff8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5772}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffd0}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 7.788861088s ago: executing program 3 (id=18732): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0xe21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @multicast2}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000900)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x20, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @call={0x85, 0x0, 0x0, 0x8d}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}]}, &(0x7f0000000a40)='GPL\x00', 0x491ba879, 0x0, 0x0, 0x40f00, 0x2, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0x9, 0x7, 0x3}, 0x10, 0x23830, r1, 0x4, &(0x7f0000000b00)=[r0], &(0x7f0000000580)=[{0x0, 0x1, 0x6, 0x5}, {0x8000000, 0x3, 0x8, 0xb}, {0x3, 0x5, 0x3, 0xa}, {0x5, 0x4, 0x7, 0x8}], 0x10, 0x235}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 6.881873043s ago: executing program 0 (id=18735): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0xe21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @multicast2}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f0000000800), &(0x7f0000000900)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 6.800690718s ago: executing program 3 (id=18736): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES16, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4008001}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 6.587309828s ago: executing program 1 (id=18737): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x211}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11503, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x80000001}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000080000009111bf000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 6.564207564s ago: executing program 3 (id=18738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x80) 6.217536321s ago: executing program 2 (id=18740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r1, &(0x7f0000002f40)=[{{&(0x7f0000000480)=@sco={0x1f, @none}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/137, 0x89}], 0x1, &(0x7f0000000780)=""/94, 0x5e}}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000880)=""/102, 0x66}, {&(0x7f0000000900)=""/94, 0x5e}, {&(0x7f0000000a00)=""/244, 0xf4}, {&(0x7f0000000b00)=""/7, 0x7}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/155, 0x9b}], 0x6, &(0x7f0000003100)=""/250, 0xfa}, 0x800}, {{&(0x7f0000000e80)=@ax25={{0x3, @rose}, [@netrom, @netrom, @netrom, @bcast, @rose, @bcast, @remote, @netrom]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f00)=""/48, 0x30}], 0x1, &(0x7f0000000f80)=""/20, 0x14}, 0x1}, {{&(0x7f0000000fc0)=@nfc_llcp, 0x80, &(0x7f0000002480)=[{&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/48, 0x30}, {&(0x7f0000002100)=""/166, 0xa6}, {&(0x7f00000021c0)=""/44, 0x2c}, {&(0x7f0000000d80)=""/249, 0xf9}, {&(0x7f0000002300)=""/175, 0xaf}, {&(0x7f00000023c0)=""/149, 0x95}], 0x8, &(0x7f0000002500)=""/118, 0x76}, 0x9}, {{&(0x7f0000002580)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002600)=""/181, 0xb5}, {&(0x7f00000026c0)=""/159, 0x9f}, {&(0x7f0000002780)=""/48, 0x30}], 0x3, &(0x7f0000002800)=""/132, 0x84}, 0xfffffff9}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002940)=""/223, 0xdf}, {&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000002b40)=""/195, 0xc3}], 0x3, &(0x7f0000002c80)=""/71, 0x47}, 0x8}], 0x6, 0x12020, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000022c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x5f, 0x30, 0x2e]}}, &(0x7f0000002200)=""/135, 0x2d, 0x87, 0x0, 0x3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=@base={0x20, 0x80, 0x3, 0x40, 0x1400, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x5, 0x0, 0x3}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'veth0_vlan\x00', 0x200}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000004240)=@delneigh={0x28, 0x1d, 0x1, 0x70bd25, 0x7, {0xa, 0x0, 0x0, 0x0, 0x0, 0x84, 0x2}, [@NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x44) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x2}, &(0x7f0000000180)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100037040100fbffffff000000000000", @ANYRES32=r9, @ANYBLOB="83000500012c00001c0012800b00010067726574617000000c00028008000700ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r7, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @local}}}], 0x20}}], 0x1, 0x24000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r11, 0x1, 0x24, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40054}, 0x4) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) 6.215726484s ago: executing program 3 (id=18741): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r6}, 0x8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d05000000000600150005000000280016802400010003"], 0x4c}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdffffff0000c9380a00000085000000750000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.879782462s ago: executing program 0 (id=18742): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.687498438s ago: executing program 3 (id=18743): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000", 0x1b) r2 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r7, 0x2f, 0x1, 0x2, 0x1, 0x26, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x1, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES64=r2, @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0xa000000b}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000140)={0x8000001c}) 5.642660769s ago: executing program 4 (id=18744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, 0x0, 0x0, 0x10002, 0x0) sendmsg$can_bcm(r1, 0x0, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000214010027bdfdfbdbdf25ca43c50600", @ANYRES32, @ANYBLOB="05005400010000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x44018}, 0x4000044) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x10001, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) getpeername(r4, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000008917080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd28, 0x4000001, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x80) 5.538315781s ago: executing program 1 (id=18745): r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x90, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x2004804) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000005ffb000ce20c963f8fed87dbf33cffe4642000"/43], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x96, r5, 0x517bcfcba355af1f}, 0x38) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x5c}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001c0001fe27bd7000fcdbdf25ff000000294c1d27bfb72509fbb844cf32cdbc84e77a3d85b58ac404eee05eba26d134afa873ae"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYRES16=r3], &(0x7f0000000000)='GPL\x00', 0x2, 0xe7, &(0x7f00000027c0)=""/231, 0x40f00, 0x1e}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='G *:* m\x00'], 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'syzkaller0\x00', 0x2}, 0x18) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x800452d2, &(0x7f0000000100)) 5.072467706s ago: executing program 2 (id=18746): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0xe21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @multicast2}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000900)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x20, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @call={0x85, 0x0, 0x0, 0x8d}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}]}, &(0x7f0000000a40)='GPL\x00', 0x491ba879, 0x0, 0x0, 0x40f00, 0x2, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0x9, 0x7, 0x3}, 0x10, 0x23830, r1, 0x4, &(0x7f0000000b00)=[r0], &(0x7f0000000580)=[{0x0, 0x1, 0x6, 0x5}, {0x8000000, 0x3, 0x8, 0xb}, {0x3, 0x5, 0x3, 0xa}, {0x5, 0x4, 0x7, 0x8}], 0x10, 0x235}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 4.561791919s ago: executing program 3 (id=18747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x4e, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001100010028bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e00000000000048ff6a7508a2f65087e0178213ed64b706e9cc084be2b85a05382e4dce26d642a3069a45594a7f65387df94cf5b9f9b0152df3b85c27ffd5d53139706c8a9aa7b46c6cc77ef9fc0000fe363538ce8000000000000000000000000000000000d75a069031ae9e429588376a23c43ca802b535a75df9deecf63e120ab2c4"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000040)=0x2e, 0x4) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x24, @any, 0x4}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="bd606a2a7f2caaaaaaaaaabb86dd60902d0300380000fe8800000000000000000acd3b6569db2b000000000001fe8800000000000000000000000001016c060000000000000728000000000805"], 0x0) vmsplice(r4, &(0x7f00000000c0), 0x0, 0x6) splice(r4, 0x0, r5, &(0x7f00000002c0)=0x87ffffd, 0x6, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f0000000100)={0xa, 0x4e25, 0x10003ff, @loopback={0xff00000000000000}, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x250}}], 0x1, 0x4004804) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r9, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) socket(0x10, 0x803, 0x0) 4.485088801s ago: executing program 0 (id=18748): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES16, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4008001}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 4.354854434s ago: executing program 1 (id=18749): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="500091fbe6fe9ab8000002060300008000000000000000000000050005000a00000005000100070000c9fd0004000000000900e7306f637a310000000016000300686173683a6e65742c706f72592c6e65742000005fb936ad35c4ff7decb531a509ac2127b262d338b64b5bd28107eae3e9f29d5e99016236d0b26ad84c9043ff60748bf22c0306b0ac85f4dd9301268d75ab8182ad4a076063fad93715725d562f29fcfacc8baada7362d4c3164a83e8dbe67931f1ab875c82063c6cce0016135af88b32a9b00c7a20d32dcab378d9299aba64"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x7ffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9ad1", 0x2}], 0x1}}], 0x2, 0x4000840) shutdown(r7, 0x1) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0xffffffffffffff6e, 0x30, 0xb, 0x70bd27, 0x25df5bfc, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x2000, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) socket$nl_crypto(0x10, 0x3, 0x15) 4.248569666s ago: executing program 4 (id=18750): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x900) socket$netlink(0x10, 0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{r0}, {@void, @actul_num={@void, 0x6, 0x74}}}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000140)=@kern={0x1d, 0x0, 0x0, 0x2020000}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[], 0x38}, {0x0, 0x170}], 0x2, 0x0, 0x0, 0x2000080}, 0x0) 4.003892304s ago: executing program 4 (id=18751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x80) 3.948172691s ago: executing program 2 (id=18752): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0xe21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @multicast2}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f0000000800), &(0x7f0000000900)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 3.819528274s ago: executing program 0 (id=18753): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) pipe(0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x61f0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000003e80), 0x0, 0x0) shutdown(r1, 0x1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\f\x00\x00', @ANYRESHEX=r2, @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x4008001) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x8004745a, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000"], 0x24}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x87}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5802}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) socket$inet(0x2, 0x2, 0x78) 3.667929134s ago: executing program 4 (id=18754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000150000000000000000000000000000b8c4eee648d87d0000a2ca48f8c57910073d5147c0d724c5479266d57dfdc73f4d59bb4e4fdd8061526684737357dcd222393f264c1d2c46756637dae3cc5cee4106e11d1fcc58a1c0397bb3425b2ee877de299444af18555d9db1919f6cd35076a934e1"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1, r4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f00000002c0), &(0x7f0000000400)=r5}, 0x20) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x3}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) writev(r10, &(0x7f0000000380)=[{&(0x7f0000002ac0)='l', 0x1}], 0x1) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988ca", 0xe}], 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) 3.31375296s ago: executing program 1 (id=18755): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x211}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11503, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x80000001}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000080000009111bf000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.994469887s ago: executing program 2 (id=18756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0x9, 0xbffc}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000007c0)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r3, 0x0, r6, 0x0, 0x66, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000f001e0001020000000004b64328000090c76c14ee99e5d2feb5760783899feab2058d022e60aaa15923409354f4af44c3a00e9ebdf2ce09f239c32b10012c9e0fc66f887839e832e9b96cb8e84bb0104918bf33e30ab5261071f9a4852fdadff6498904c51a67"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) close(0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001700090025bd7000a9dcdf2505fb000008000100030000021cc04a0ee4f7f0f0f180c17e670acacfe8b33dc5f836011d01cb7511611a052278fad193107211143970e70fe821aa052a6910ece56f19c9b7f94559a0c21e0aaada1dd62fdd195506bf62aa3373e2d12b063293375ee903a98320529ea50c1f9912d5a2eda56a2bdb362943a6f4213a3a0c3100"/159], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) r11 = socket$packet(0x11, 0x2, 0x300) r12 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r12, 0x29, 0x6, 0x0, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x5, 0x4}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0xff, 0x0, 0xfff7f024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r13 = socket(0x11, 0x80a, 0x0) sendto$x25(r13, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12) 2.250980884s ago: executing program 1 (id=18757): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0400fcffffff0400f2ff1e000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x24040040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r9, 0x6, 0xd, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001000)={'bridge_slave_0\x00', @random="e4a8b032869c"}) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001080)=r8, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x8000) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) 1.97838673s ago: executing program 2 (id=18758): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000012161ad1e3ac11a4f97df4caecd8e3167ef3df2507000000", @ANYRES32=0x0, @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f0000000180)={0xd, 0x80000001, 0x5, 0x6, 0xffff, 0xff42, 0x6, 0x9}, &(0x7f00000001c0)={0x3, 0x6, 0x28, 0x0, 0xb, 0x171, 0x1ff, 0x7}, &(0x7f0000000200)={0x1, 0x8, 0xf480, 0x1, 0x8, 0x4, 0x800000000008000, 0xac}, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x4]}, 0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000190001002dbd700000df109cb64da1856af52c00000000000000000000000000ac1414aa00000000000000000000004000000000000000000a0000009458d689b3d7fcd886373a8c5160a04eb3d06771830a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0xfc}}, 0x20040840) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x1e, 0x4, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d3, &(0x7f00000000c0)) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x5, @mcast1}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000008c0)="9540f5a811f98f396e29682ed75283eb6ccc8ce21faac8bfb9e5a121c8241c171c87132ca38321b15f467e68b5dd4ea306da8027413cc21f4d6fad202843e512d0377778ddd83ec6751b3104d6482bef1b98ef9475a560b9124b5a8a1517e1d89f86a709609103e2c02867e12bf438ba36271a22c1de84b518683bd4e6e6c7523bad38", 0x83}, {&(0x7f0000000240)="441d8de0a4ca67231a6525578c7839454361308f77", 0x15}, {&(0x7f0000000540)="d98e91d92a284c892d6a7d834ccc170ae70f85b42e55598eb95cb2b6e0b855636e8139d23d49876fbda774bf9fe549f4bb7d893a80c6e7a5cecd3545fa82630ae1869bb81ea4d2ff0d3c0fa4bcf447caa9e67aa32fb6657435ffb95313987c82c7b3e3d4785d5653c3a85d0f7b3970294d4f4b77307d1ceba3ba77c7e64906ae8c02d730bd19122bb1ecb95f128c650f6c7a1176b7caeddae3af6f6e04bd93caca7bf1f9f9168c80bb22d033d6a0441097a7c033fea8e14bafaa4aff439b5213ec47eaf25652a29a2c85032fdf19ab955c0f3850dadf9651e0596ab1109a239df2b0", 0xe2}, {&(0x7f0000000640)="8c38761f2461a219daf716ed51e8eb49f9b2c491fce35d70e6fc076911479a84ef625a796a0c768fe4d588af83a354bec174fe4bb427eb6100d983f7626e21b3e2e48bce3dd8b801c38e792b145bb843a42553ef5bfccba5bbfc6ae89a8772204a28c4c66cbfc0e599d7d499824a9e81be7fb353cad1677b46cab3a64538fe1d88957611eb4d5ad87d8d72ae412a5c6c5a34abd69bfe01572f106d02d486860482ddbc3a578ade386a53e9f993b988ea24ad0915199fa136502bc418906e96bbfa9754cb6060", 0xc6}], 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000290000003e00000009000000000000005800000000000000290000003900000000080202000000002001000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000bbff0100000000000000000000bb3d34130000003e000200feffffff00"/136], 0x88}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 1.153575595s ago: executing program 0 (id=18759): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) r1 = socket(0x40000000015, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x2000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x3ad1, 0x200, 0x0, 0x6}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x45d5a24f61177641, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x2, 0x5d, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r7, &(0x7f0000000300)="ef8def123fc20635f499b04ae89dc9dffed45bec80ab6e5ecd7d8ff2f6ad48ca380c4bfeef355836bec3f3f459789e2b8aafb68e65cf893bbac4d6c342ab742fd93c95db8855ee3e5884ab7eb3143493fc5605702538b6a9dfe78f3b93f59f5760ff9219a324ea9b66bb12ecd00369db29e63d28cfd5f51f047fd37b7e6357b6d3ac8e81f7f9609a6c7da2b3e5eb56a02d1336c780af66b290b92e776083c2ff4a6276195f39f421f2d0618b9aeb0402cd4b1e954a0609a6b47cf5a814233b2382b346e926bb254fe9cb138893cd86", &(0x7f0000000400)=""/13, 0x4}, 0x20) 811.355367ms ago: executing program 2 (id=18760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x30, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x1}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) unshare(0x400) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xfff7, 0x3, 0xe, 0x7}, {0xf, 0x8, 0xf8, 0x3}]}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000c00)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x2d0, 0x228, 0xfeffffff, 0x2d0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x300, 0x300]}}}, @common=@set={{0x40}, {{0x0, [0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r11, &(0x7f0000000c00)=[{&(0x7f0000000100)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="d5a96e", 0x3}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0xc000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010105}]}, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f00000003c0)={r13, 0x1}, 0x8) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000002700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000026c0)={&(0x7f00000010c0)={0x15f0, r14, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1428, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb, 0x3, "20a6b3a3a1877d"}, @NL80211_BAND_5GHZ={0x83, 0x1, "643732e865d08601f1ee65002dfe5b992d731d7b0cb96976a12b652f880e3136a44c2fa0b0958623a8d937eb1df75c345af026489ea6ced2054513a36d59783f5d42704e5e1b428dd38650663d9a6cebc221e33bd371db53a883e423597ccde964d0d41ff2436dfca6addc4d14d3851f6888bae5b2f781cc9e01b3a73a9ca1"}, @NL80211_BAND_6GHZ={0x8c, 0x3, "1c535b59e2b50a68f7f07c20bb35c9f6a1088f84cc08a7ab2b657b5b9dd0a7919ba29dd4a0c213ddf8f27ae2ca0a4115efec9504d54df0c5fb3f68d3d2743b004b93d634141c2b420b56c063900089d371ba3e47c2825d39861029b3338c5b8cc4a1f8cb31beb77a3e4328ccd82b5ada7ed0dd47d974eb9c3caf4979688db9ef1e4f6221b46a8ab0"}, @NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_60GHZ={0xe8, 0x2, "d26d330d5cb2c7ee644b80e3e7b8201f8e67ba7891c583bd711bae5b534c4a120d9ca1c2304abf63ff5a73882a6693d126eda94fd0def2acdf92f28cfa4cc77f4b95e8e3ab3b7bf3b7f5e1096abf2f2a613ce03906bc00df9bb73dd875ce96a753ea60c0842438499761efb781729944a448a019a23b1baef35b2f509d581bc4c280e3963dccf78806a3658d39b0a5642cd96be13e6cd6bc849495e307cae0b8119f17b8a433f1448a24b44f435c5e4127de7d6c5900ddad75b8a55b1c87d2102ec7f9be7b06530a87a8835b8326a31e6d08f0b689592a2036eb7497176b8a230b222f54"}, @NL80211_BAND_2GHZ={0x7c, 0x0, "a725e8f6ef55d27d628c6c8905cd045e784a84ed244da6c60bd6fb226bb26d734da742ba5baa7317764ad6af09098d0b5a0ce8578fcb7ff21dec5fdd273f6975fbcffabc6149b0f970570bb45c630dd26cd8dd5938d7daf221e9f213f8dfe19c0a340cefcaa6660695363b7dfad81bc35ae803c4ad9f1bd1"}, @NL80211_BAND_60GHZ={0xd4, 0x2, "7dcfeb06e426c243b261e9023eba680922c46d112863897e669ba8818d79310eaf5b1dc5d420d9a3664ae917eee2f9ccc2e1c7f9c53bfd8f9dbd27888787d3c66bea03a3eab0e12fd93be7f4a4416ffa70f7cf0487399b801a5bd216527ed6b82cb118b4821c49ac0876ebf2f72177670ed6ca4648d6c23cd48a2dc631afacc57aa1f0861ac9af3d69c8916f34d7361fc11dee6970cdb926f7ca226d465045c03cf0e248b28080a2ce67f5244358f90b5ad884c210cb1d212098ceecfc3d52f2b57f4345eb008ef3ff3b6f39060b39e8"}, @NL80211_BAND_5GHZ={0xcc, 0x1, "55c64f11e64f73b17bdc756b0bdfd174a304084a42808fa1c1ba9ccb983dc23437bfc2b0c6dba9da865e65fe4018db311db1a4eb5c2a997468deec2bc2473534c31a5f762469e6d5f73500abca1177b59c3923cac781ec6fb79de46bdfb15bb828a4841f5c892ea6862dbe076becae157e59eedee50606f4e1d3a3195fbc4946cd6902e969afee62bc764e7b7f7887e2bcc12338c9db07090830e34ce703281a33b4362c820e224ce5bc55e530a0b66adaed9df075b445f457dd7f7d447d83c8f9bdb2ccf27371c3"}]}, @NL80211_ATTR_IE={0x18d, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0x5, @device_b, 0xfffffffd, @value=@device_b, 0x4, 0x1, @broadcast, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mic={0x8c, 0x10, {0xab8, "ef23f5f5b926", @short="3b164f2428388226"}}, @mic={0x8c, 0x10, {0xde7, "d577dcce432d", @short="bd81130c41fd50d0"}}, @link_id={0x65, 0x12, {@random="7c689d86faf1", @device_b, @broadcast}}, @peer_mgmt={0x75, 0x14, {0x0, 0x5, @void, @void, @val="59878e14c59d61051562790535fcda01"}}, @measure_req={0x26, 0xf3, {0x9, 0x1, 0x9, "3b734ce432177568768b69d43bd674f4e587ed202511d0d73fcca9c55ea38f1f44e30b897fcbeceba86a566bde3bbc8da8db1161225dccb956543817b78b0012bb2402be9aff204470f01c18a89d1ddff6dbb3fa78aac579fd3c18bbc3c783202f2d65f8d3f89ac196b4e0bd39dceb85efb016b9216ffcd3e919b90ec711dcb981d680d5c2489844bab07ae597c93765597ffb66d437ead6dcaa40923065ca2b3bee6f9b134e365b45dec60fe413e32297a07c72e50638bc6b787d43626d3dbb5128f95df05260e9167be2e0d2b452053ed325b72a5550ff097e50428621e69562b90b5b9dc26a2a4e24cc8ca312b44d"}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac=@broadcast}}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x65e7}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x15f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x812) ioctl$sock_SIOCBRDELBR(r10, 0x40049409, 0x0) 0s ago: executing program 1 (id=18761): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r3, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c00018014620300fc01000000000000000000000000000114000400fe8000000000000000000000000000aa"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}]}, 0x28}}, 0x40000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800000000fedbdf251700000008000300", @ANYRES32=r9, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800090000000000040003800500020000000000c24e85e04cf859be801287ccb31c6b75208f0b2764f9003105fa78dbe34e8644a20b7210dce304278e9f8f6424bf26ba9887734dddba41982a7df4ba654d6eff8cecc0394f0b309a28251e4930e15f414b92b19db9040d61ed7f5eb1682470436fed294e821e44f2fd865938b06985732074218be3b1a4197d1ef732"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3000000018b3bfba5373f1dcdaff00000a800000ff0300060000000014000100200100000000000000000000000000005320d752c67de4dd42ad5942a0dd993bb82199addc41b9b064921bcc70979458d8447f31b9d70cf085850f65dedcefe9d8491a724c35ef0ae9354f53dbbd808da3bc14ee868b36de22553593e58e4834a362bdbf26f31976634d7c69553f1787a9b3aefafbff02b9d7c95cf538da92ccdeacc0fa"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x125) kernel console output (not intermixed with test programs): [ 1401.157510][ T929] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 1401.167543][ T929] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1401.198814][ T929] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.218238][ T929] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.256307][ T929] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 1401.275680][ T929] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1401.414784][T17885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17791'. [ 1401.535479][T17892] netlink: 34 bytes leftover after parsing attributes in process `syz.0.17792'. [ 1401.635587][T17900] .`: entered promiscuous mode [ 1401.976473][ T929] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1402.009272][ T929] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.050325][ T929] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1402.080041][ T929] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1402.443711][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1402.497748][T17927] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17801'. [ 1402.536974][T17927] netlink: 'syz.4.17801': attribute type 1 has an invalid length. [ 1402.684761][T17938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17803'. [ 1403.512164][T17958] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17806'. [ 1403.546674][T17958] netlink: 47 bytes leftover after parsing attributes in process `syz.4.17806'. [ 1403.581563][T17958] netlink: 'syz.4.17806': attribute type 6 has an invalid length. [ 1403.631845][T17958] netlink: 'syz.4.17806': attribute type 6 has an invalid length. [ 1403.681734][T17963] ieee802154 phy1 wpan1: encryption failed: -22 [ 1403.893646][ T938] net_ratelimit: 153 callbacks suppressed [ 1403.893670][ T938] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1404.016054][T17967] bond29: invalid ARP target 0.0.0.0 specified for addition [ 1404.024235][ T946] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1404.048106][T17967] bond29: option arp_ip_target: invalid value (0) [ 1404.103775][ T48] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1404.150511][T17967] bond29 (unregistering): Released all slaves [ 1404.163269][ T48] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1404.233895][ T929] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1404.283329][T16435] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1404.323602][ T3376] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1404.393572][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.402629][ T48] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1404.464552][ T946] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1404.465740][T17981] lo speed is unknown, defaulting to 1000 [ 1404.546147][T17974] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1404.578942][T17981] lo speed is unknown, defaulting to 1000 [ 1404.655179][ T961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.678919][ T961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.725253][T18040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17819'. [ 1405.787066][T18039] netlink: 'syz.1.17818': attribute type 12 has an invalid length. [ 1405.905676][T18026] block nbd1: server does not support multiple connections per device. [ 1405.947099][T18026] block nbd1: shutting down sockets [ 1406.797120][T18061] lo speed is unknown, defaulting to 1000 [ 1406.834757][T18061] lo speed is unknown, defaulting to 1000 [ 1407.523645][T18098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17831'. [ 1407.593422][T18098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17831'. [ 1407.846917][T18098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17831'. [ 1407.871633][T18098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17831'. [ 1408.321663][T18113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17833'. [ 1408.582008][T18123] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17836'. [ 1408.952698][ T956] net_ratelimit: 300 callbacks suppressed [ 1408.952723][ T956] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1408.989613][ T956] bond0: (slave ip6gretap3): failed to get link speed/duplex [ 1409.128676][ T961] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1409.179650][ T956] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 1409.179963][ T961] bond0: (slave ip6gretap3): failed to get link speed/duplex [ 1409.324528][ T929] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1409.359159][ T929] bond0: (slave ip6gretap3): failed to get link speed/duplex [ 1409.481903][T18159] lo speed is unknown, defaulting to 1000 [ 1409.493745][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.505866][T16435] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1409.541048][T16435] bond0: (slave ip6gretap3): failed to get link speed/duplex [ 1409.581759][T18159] lo speed is unknown, defaulting to 1000 [ 1409.683538][ T929] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1409.738750][T18173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17844'. [ 1409.778224][T18138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1409.838509][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17845'. [ 1410.195645][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17847'. [ 1410.235575][T18189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17847'. [ 1411.463235][T18217] nbd: couldn't find a device at index 0 [ 1412.546603][T18252] .`: left promiscuous mode [ 1413.461406][T18271] __nla_validate_parse: 6 callbacks suppressed [ 1413.461432][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17868'. [ 1413.510482][ T938] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1413.531134][ T938] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.556092][ T938] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1413.581511][ T938] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1413.610612][ T938] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1413.630662][ T938] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.643797][ T938] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1413.653957][ T938] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1413.739014][ T938] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1413.760650][ T938] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.769928][ T938] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 1413.780102][ T938] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1413.808745][T18276] lo speed is unknown, defaulting to 1000 [ 1413.847300][T18276] lo speed is unknown, defaulting to 1000 [ 1413.967450][ T938] net_ratelimit: 136 callbacks suppressed [ 1413.967476][ T938] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1414.023108][ T938] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1414.045292][ T3376] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1414.083125][ T3376] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1414.116195][ T3376] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1414.143510][ T3376] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1414.164773][ T3376] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1414.193188][ T3376] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1414.224155][ T961] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1414.253365][ T961] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1414.291731][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17872'. [ 1414.300948][T18292] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17872'. [ 1414.930062][T18315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17879'. [ 1415.076647][T18310] 8021q: adding VLAN 0 to HW filter on device .` [ 1415.161088][T18310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.200424][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17878'. [ 1415.351739][T18310] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1415.372037][T18310] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1415.730753][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17883'. [ 1415.809706][T18339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17883'. [ 1415.848016][T18338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17884'. [ 1416.729745][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17887'. [ 1417.244050][T18370] lo speed is unknown, defaulting to 1000 [ 1417.316395][T18370] lo speed is unknown, defaulting to 1000 [ 1417.555676][T18374] geneve1: Caught tx_queue_len zero misconfig [ 1417.803362][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1418.845498][T18393] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17894'. [ 1418.984878][T16435] net_ratelimit: 163 callbacks suppressed [ 1418.984903][T16435] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1419.058659][T16435] bond0: (slave ip6gretap3): failed to get link speed/duplex [ 1419.203173][ T938] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1419.263839][ T938] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1419.313502][ T938] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1419.342112][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17895'. [ 1419.343127][ T938] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1419.412472][ T946] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1419.453490][ T938] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1419.484598][ T938] bond0: (slave ip6gretap3): failed to get link speed/duplex [ 1419.561370][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17895'. [ 1419.577328][T18405] siw: device registration error -23 [ 1419.603562][ T938] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1420.604130][T18429] bond9: left promiscuous mode [ 1420.609579][T18429] bond10: left promiscuous mode [ 1420.614946][T18429] vti0: left promiscuous mode [ 1420.622685][T18429] bond11: left promiscuous mode [ 1420.629243][T18429] bond13: left promiscuous mode [ 1420.638615][T18429] syzkaller1: left promiscuous mode [ 1420.644695][T18429] syzkaller1: left allmulticast mode [ 1420.654396][T18429] bond15: left promiscuous mode [ 1420.659744][T18429] bond15: left allmulticast mode [ 1420.668000][T18429] veth19: left promiscuous mode [ 1420.676538][T18429] team1: left promiscuous mode [ 1420.681394][T18429] team1: left allmulticast mode [ 1420.687390][T18429] team2: left promiscuous mode [ 1420.692249][T18429] team2: left allmulticast mode [ 1420.701943][T18429] geneve6: left promiscuous mode [ 1420.717590][T18429] bond0: left promiscuous mode [ 1420.723824][T18430] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 1421.984269][T18458] nbd: couldn't find a device at index 0 [ 1422.141307][T18469] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17911'. [ 1422.806274][T18474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.504328][T18499] tipc: Resetting bearer [ 1423.566040][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.828521][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17918'. [ 1424.003340][ T946] net_ratelimit: 121 callbacks suppressed [ 1424.003367][ T946] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1424.063297][ T946] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1424.103038][ T961] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1424.134955][ T961] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1424.163905][T18499] veth0_vlan: left promiscuous mode [ 1424.194578][ T946] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1424.235370][ T946] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1424.273032][ T48] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1424.304057][ T48] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1424.323099][ T946] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1424.343061][ T946] bond0: (slave ip6gretap3): link status up, enabling it in 0 ms [ 1424.962651][T18499] ip6gre2: left allmulticast mode [ 1424.984074][ T5774] lo speed is unknown, defaulting to 1000 [ 1424.997775][ T5774] syz2: Port: 1 Link DOWN [ 1425.371636][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17920'. [ 1425.607448][T18550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17923'. [ 1425.636428][T18550] nbd: must specify a size in bytes for the device [ 1425.653402][T18551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17924'. [ 1425.802254][T18556] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1425.862784][T18562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17924'. [ 1425.968767][T18566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17927'. [ 1426.165238][T18572] netlink: 'syz.0.17928': attribute type 3 has an invalid length. [ 1426.892142][T18593] erspan0: left promiscuous mode [ 1427.051916][T18593] 8021q: adding VLAN 0 to HW filter on device  [ 1427.107057][T18593] tipc: Resetting bearer [ 1427.168846][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17933'. [ 1427.618907][T18609] IPVS: stopping master sync thread 8272 ... [ 1428.298521][T18593] veth1_vlan: left promiscuous mode [ 1428.328686][T18593] veth1_vlan: entered promiscuous mode [ 1428.339826][T18593] tipc: Resetting bearer [ 1428.346734][T18593] tipc: Resetting bearer [ 1428.375808][T18593] veth1_macvtap: left promiscuous mode [ 1428.385782][T18593] veth1_macvtap: entered promiscuous mode [ 1428.486804][T18608] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1428.529040][T18608] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1428.572780][T18608] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1428.655126][ T929] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.673508][T18652] netlink: 'syz.2.17939': attribute type 1 has an invalid length. [ 1428.686001][ T938] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.744846][T12368] lo speed is unknown, defaulting to 1000 [ 1428.893568][T18652] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1428.963970][T18650] bond19: (slave geneve7): making interface the new active one [ 1429.015603][T18650] bond19: (slave geneve7): Enslaving as an active interface with an up link [ 1429.049413][ T938] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.058664][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17943'. [ 1429.091932][ T938] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.116605][T18650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17939'. [ 1429.140438][T18655] netlink: 'syz.2.17939': attribute type 8 has an invalid length. [ 1429.155613][T18655] sch_fq: defrate 0 ignored. [ 1429.248764][T18662] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.17941'. [ 1429.292506][T18669] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1429.357907][T18669] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1429.407861][T18669] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1429.417500][T18674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17944'. [ 1429.491892][T18669] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1429.769543][T18684] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap7 [ 1429.797138][T18684] batman_adv: batadv0: Adding interface: gretap7 [ 1429.810401][T18684] batman_adv: batadv0: The MTU of interface gretap7 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1429.863239][T18689] netlink: 'syz.1.17948': attribute type 29 has an invalid length. [ 1429.863808][T18684] batman_adv: batadv0: Interface activated: gretap7 [ 1429.906050][T18689] netlink: 'syz.1.17948': attribute type 29 has an invalid length. [ 1429.928140][T18689] netlink: 'syz.1.17948': attribute type 29 has an invalid length. [ 1429.956299][T18689] netlink: 'syz.1.17948': attribute type 29 has an invalid length. [ 1429.991500][T18689] netlink: 'syz.1.17948': attribute type 29 has an invalid length. [ 1430.109701][T18700] GUP no longer grows the stack in syz.0.17950 (18700): 200000003000-20000000a000 (200000001000) [ 1430.144793][T18700] CPU: 0 UID: 0 PID: 18700 Comm: syz.0.17950 Not tainted syzkaller #0 PREEMPT(full) [ 1430.144822][T18700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1430.144834][T18700] Call Trace: [ 1430.144843][T18700] [ 1430.144852][T18700] dump_stack_lvl+0xe8/0x150 [ 1430.144880][T18700] __get_user_pages+0x2378/0x2730 [ 1430.144933][T18700] ? __gup_longterm_locked+0xc4e/0x1630 [ 1430.144960][T18700] ? down_read_killable+0x1bb/0x340 [ 1430.144994][T18700] __gup_longterm_locked+0xdcf/0x1630 [ 1430.145023][T18700] ? lock_acquire+0x106/0x350 [ 1430.145064][T18700] gup_fast_fallback+0x1d84/0x20d0 [ 1430.145125][T18700] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1430.145155][T18700] ? futex_unqueue+0x22/0x240 [ 1430.145178][T18700] ? futex_unqueue+0x22/0x240 [ 1430.145195][T18700] ? futex_unqueue+0x22/0x240 [ 1430.145214][T18700] ? is_valid_gup_args+0x11f/0x200 [ 1430.145239][T18700] ? get_user_pages_fast+0x4d/0xb0 [ 1430.145265][T18700] __iov_iter_get_pages_alloc+0x370/0xa10 [ 1430.145298][T18700] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1430.145342][T18700] iov_iter_get_pages2+0x5e/0xa0 [ 1430.145371][T18700] __se_sys_vmsplice+0x7c7/0x1620 [ 1430.145416][T18700] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1430.145443][T18700] ? __pfx_futex_wait+0x10/0x10 [ 1430.145478][T18700] ? fdget+0x148/0x1e0 [ 1430.145523][T18700] ? put_files_struct+0x256/0x350 [ 1430.145546][T18700] ? 0xffffffffff600000 [ 1430.145602][T18700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.145625][T18700] do_syscall_64+0x174/0x580 [ 1430.145646][T18700] ? trace_irq_disable+0x3b/0x140 [ 1430.145672][T18700] ? clear_bhb_loop+0x40/0x90 [ 1430.145697][T18700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.145717][T18700] RIP: 0033:0x7fe590d9ce59 [ 1430.145736][T18700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.145753][T18700] RSP: 002b:00007fe591bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1430.145776][T18700] RAX: ffffffffffffffda RBX: 00007fe591015fa0 RCX: 00007fe590d9ce59 [ 1430.145790][T18700] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1430.145802][T18700] RBP: 00007fe590e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1430.145814][T18700] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1430.145826][T18700] R13: 00007fe591016038 R14: 00007fe591015fa0 R15: 00007ffff4310e78 [ 1430.145860][T18700] [ 1430.401808][T18689] netlink: 'syz.1.17948': attribute type 29 has an invalid length. [ 1430.417250][T18713] netlink: 'syz.3.17951': attribute type 4 has an invalid length. [ 1430.420142][T18689] __nla_validate_parse: 7 callbacks suppressed [ 1430.420162][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17948'. [ 1430.425374][T18706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17951'. [ 1430.465934][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17948'. [ 1430.475447][ T5647] lo speed is unknown, defaulting to 1000 [ 1430.482190][ T5647] syz2: Port: 1 Link ACTIVE [ 1430.483890][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17948'. [ 1430.563456][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17948'. [ 1430.587900][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17948'. [ 1430.601192][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17948'. [ 1430.617577][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17948'. [ 1430.627140][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17948'. [ 1430.627556][ T938] net_ratelimit: 35 callbacks suppressed [ 1430.627572][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.636508][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17948'. [ 1430.980540][T18728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.992450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.526327][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.537164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.163693][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.563722][T18715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1433.897320][T18786] sctp: [Deprecated]: syz.3.17964 (pid 18786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1433.897320][T18786] Use struct sctp_sack_info instead [ 1434.830295][T18813] validate_nla: 47 callbacks suppressed [ 1434.830318][T18813] netlink: 'syz.4.17971': attribute type 1 has an invalid length. [ 1435.332127][T29398] page_pool_release_retry() stalled pool shutdown: id 465, 1 inflight 60 sec [ 1435.503951][T18817] netlink: 'syz.4.17972': attribute type 1 has an invalid length. [ 1435.748393][T18817] bond19: entered promiscuous mode [ 1435.759810][T18817] bond19: entered allmulticast mode [ 1435.772495][T18817] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1435.868536][T18820] erspan1: entered allmulticast mode [ 1435.875369][T18772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.922526][T18820] bond19: (slave erspan1): making interface the new active one [ 1435.945438][T18820] erspan1: entered promiscuous mode [ 1435.998506][T18820] bond19: (slave erspan1): Enslaving as an active interface with an up link [ 1436.375540][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.640695][T18857] __nla_validate_parse: 49 callbacks suppressed [ 1436.640715][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17977'. [ 1437.040786][T18863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17978'. [ 1437.451315][T18868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17979'. [ 1438.283685][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.293058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.629677][T18822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1438.929234][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.937885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.111842][T18879] xt_hashlimit: size too large, truncated to 1048576 [ 1439.162570][T18876] netlink: 'syz.3.17980': attribute type 3 has an invalid length. [ 1439.199802][T18876] netlink: 666 bytes leftover after parsing attributes in process `syz.3.17980'. [ 1439.238170][T18887] netlink: 'syz.4.17982': attribute type 1 has an invalid length. [ 1439.310267][T18887] netlink: 224 bytes leftover after parsing attributes in process `syz.4.17982'. [ 1439.479356][T18894] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1439.503620][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.527420][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17981'. [ 1440.207578][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.186816][T18923] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1441.546869][T18943] netlink: 244 bytes leftover after parsing attributes in process `syz.0.17991'. [ 1441.634931][T18947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17991'. [ 1441.851157][T18947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17991'. [ 1442.154312][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.164258][T18947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17991'. [ 1442.443404][T18976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17994'. [ 1442.629218][T18967] sctp: [Deprecated]: syz.1.17994 (pid 18967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1442.629218][T18967] Use struct sctp_sack_info instead [ 1442.682389][T18977] bridge0: port 1(batadv2) entered blocking state [ 1442.721480][T18977] bridge0: port 1(batadv2) entered disabled state [ 1442.730870][T18977] batadv2: entered allmulticast mode [ 1442.755017][T18977] batadv2: entered promiscuous mode [ 1443.068595][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17997'. [ 1443.083413][ T961] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1443.093790][ T961] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1444.045258][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.054287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.684290][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.698043][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.057318][T18960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1445.092305][T18969] netlink: 'syz.1.17994': attribute type 1 has an invalid length. [ 1445.124906][T18969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17994'. [ 1445.461965][T19005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18003'. [ 1445.504951][T19005] ip6gre4: entered promiscuous mode [ 1445.518041][T19005] ip6gre4: entered allmulticast mode [ 1445.521202][T19008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18000'. [ 1445.560341][T19005] netlink: 'syz.4.18003': attribute type 6 has an invalid length. [ 1445.581298][T19005] netlink: 72 bytes leftover after parsing attributes in process `syz.4.18003'. [ 1445.638774][ T5654] block nbd1: Receive control failed (result -1) [ 1445.741767][T19015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18004'. [ 1445.970628][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.124049][T19025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18005'. [ 1446.423437][T19029] netlink: 'syz.4.18007': attribute type 1 has an invalid length. [ 1446.800523][T19029] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1447.192442][T19043] netlink: 'syz.3.18010': attribute type 2 has an invalid length. [ 1447.254684][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.971137][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18012'. [ 1448.479452][T19063] erspan0: entered promiscuous mode [ 1448.534831][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1448.538925][T19063] macsec0: entered allmulticast mode [ 1448.558368][T19063] erspan0: entered allmulticast mode [ 1448.889315][T19074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18014'. [ 1448.997543][T19074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18014'. [ 1449.325880][T19071] syzkaller0: entered promiscuous mode [ 1449.339545][T19071] syzkaller0: entered allmulticast mode [ 1449.804721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.813155][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.829933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.445863][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.449750][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.640989][T19052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1450.899109][T19112] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1450.921188][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18020'. [ 1450.932173][T19112] unsupported nla_type 216 [ 1450.940332][T19111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18021'. [ 1450.972587][T19112] netlink: zone id is out of range [ 1450.979066][T19112] netlink: zone id is out of range [ 1450.985285][T19112] netlink: zone id is out of range [ 1450.990945][T19112] netlink: zone id is out of range [ 1451.059823][T19112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18020'. [ 1451.108239][T19080] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1451.206142][T19115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18022'. [ 1453.005899][T16435] net_ratelimit: 21 callbacks suppressed [ 1453.005955][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.300243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.574632][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.585273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.175703][T19115] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR [ 1456.211264][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.223514][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.300953][T19118] veth23: entered allmulticast mode [ 1456.699054][T19136] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1456.700831][T19134] netlink: 88 bytes leftover after parsing attributes in process `syz.1.18026'. [ 1456.733926][T19134] nbd: must specify a size in bytes for the device [ 1457.131527][T19147] xt_hashlimit: size too large, truncated to 1048576 [ 1457.484219][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.127676][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.390320][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18032'. [ 1458.671207][T19169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18035'. [ 1458.683162][T19167] netlink: 'syz.0.18034': attribute type 1 has an invalid length. [ 1458.735999][T19164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18033'. [ 1458.757677][T19164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.800016][T19167] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1459.146579][T19182] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18034'. [ 1459.301171][T19184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18039'. [ 1460.047318][T19191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18040'. [ 1460.209936][T19153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1460.689535][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.701800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.759961][T19211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18042'. [ 1460.891283][T19213] bridge0: port 1(batadv2) entered blocking state [ 1460.937610][T19213] bridge0: port 1(batadv2) entered disabled state [ 1460.989745][T19213] batadv2: entered allmulticast mode [ 1461.064887][T19213] batadv2: entered promiscuous mode [ 1461.385882][ T3376] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1461.395342][ T3376] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1461.442084][T19228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18046'. [ 1461.519981][T19217] IPVS: Scheduler module ip_vs_ not found [ 1461.727518][T19233] netlink: 'syz.1.18047': attribute type 13 has an invalid length. [ 1461.968667][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.969939][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.252126][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18050'. [ 1462.792557][T16435] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1462.822541][T16435] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1462.849606][T16435] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1462.906296][T16435] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 1463.073833][T19262] sctp: [Deprecated]: syz.3.18051 (pid 19262) Use of int in max_burst socket option. [ 1463.073833][T19262] Use struct sctp_assoc_value instead [ 1463.186864][T19266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18052'. [ 1463.244797][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.774787][T19285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18056'. [ 1463.884257][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.419179][T19300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.608829][T19302] lo speed is unknown, defaulting to 1000 [ 1464.674015][T19302] lo speed is unknown, defaulting to 1000 [ 1464.695312][T19309] netlink: 'syz.2.18060': attribute type 7 has an invalid length. [ 1464.876332][T19308] lo speed is unknown, defaulting to 1000 [ 1464.938360][T19308] lo speed is unknown, defaulting to 1000 [ 1465.204554][T19315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18062'. [ 1465.253237][T19315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18062'. [ 1465.301052][T19315] netlink: 'syz.3.18062': attribute type 4 has an invalid length. [ 1466.449900][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.459371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.338076][T19344] lo speed is unknown, defaulting to 1000 [ 1467.483461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.491932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.724935][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.739256][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.769031][T19359] syzkaller0: entered promiscuous mode [ 1467.789784][T19359] syzkaller0: entered allmulticast mode [ 1467.838796][T19344] lo speed is unknown, defaulting to 1000 [ 1469.005597][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.650641][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.160722][T19387] SET target dimension over the limit! [ 1472.226809][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.236157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.496241][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.496840][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.133159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.141552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.154276][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.775540][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.006970][T19412] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1476.122594][T19412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.147556][T19416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18076'. [ 1476.896306][T19430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.126950][T19430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.180238][T19430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.312018][T19430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.358153][T19444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.864518][T19415] erspan0: left allmulticast mode [ 1477.918466][T29398] lo speed is unknown, defaulting to 1000 [ 1477.929891][ T956] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.942953][T29398] syú2: Port: 1 Link DOWN [ 1477.978450][ T956] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.133252][ T956] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.170461][ T956] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.242701][T19442] lo speed is unknown, defaulting to 1000 [ 1478.270348][T19442] lo speed is unknown, defaulting to 1000 [ 1478.357630][T19458] netlink: 'syz.3.18082': attribute type 13 has an invalid length. [ 1478.391115][T19458] netlink: 'syz.3.18082': attribute type 17 has an invalid length. [ 1478.566296][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18082'. [ 1478.950201][T19458] gretap0: left promiscuous mode [ 1478.988951][T19458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.007094][T19458] tipc: Resetting bearer [ 1479.016255][T19458] tipc: Resetting bearer [ 1479.030714][T19458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1479.245227][ T3376] net_ratelimit: 95 callbacks suppressed [ 1479.245251][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.263849][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.305727][T19458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1479.317013][T19458] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1479.340005][T19458] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1479.377843][T29398] lo speed is unknown, defaulting to 1000 [ 1479.400535][T12368] lo speed is unknown, defaulting to 1000 [ 1479.436298][T19484] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18084'. [ 1479.601052][T19483] netlink: 208 bytes leftover after parsing attributes in process `syz.1.18085'. [ 1479.634432][T19483] netlink: 'syz.1.18085': attribute type 2 has an invalid length. [ 1479.668445][T19487] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18086'. [ 1479.736674][T19483] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.18085'. [ 1479.772299][T19491] netlink: 108 bytes leftover after parsing attributes in process `syz.4.18086'. [ 1480.022627][T19491] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1480.119060][T19503] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1480.253330][T19487] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1480.300057][T19492] lo speed is unknown, defaulting to 1000 [ 1480.499484][T19492] lo speed is unknown, defaulting to 1000 [ 1482.299374][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18094'. [ 1482.728101][T19562] netlink: 292 bytes leftover after parsing attributes in process `syz.3.18097'. [ 1483.036736][T19570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18097'. [ 1483.075425][T19573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18096'. [ 1483.088363][T19567] bond22: (slave macvlan0): Releasing active interface [ 1483.383783][T19553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1483.724928][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.734289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.971610][T19592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.038903][T19592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.109488][T19592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.148448][T19592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.176146][T19592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.293417][ T29] audit: type=1800 audit(1780530538.835:22): pid=19569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18098" name="memory.events" dev="tmpfs" ino=18509 res=0 errno=0 [ 1484.364014][ T3376] net_ratelimit: 48 callbacks suppressed [ 1484.364038][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.382050][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.552834][T19597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18101'. [ 1484.881808][T19570] vlan1 (unregistering): left allmulticast mode [ 1484.910172][T19570] geneve0 (unregistering): left allmulticast mode [ 1484.945220][T19570] vlan1 (unregistering): left promiscuous mode [ 1484.977770][T19570] geneve0 (unregistering): left promiscuous mode [ 1484.999633][T19570] bridge0: port 3(vlan1) entered disabled state [ 1485.490294][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18105'. [ 1485.574635][ T5654] block nbd4: Receive control failed (result -1) [ 1485.857965][T19622] netlink: 'syz.0.18104': attribute type 1 has an invalid length. [ 1485.911331][T19622] netlink: 'syz.0.18104': attribute type 2 has an invalid length. [ 1485.957937][T19627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18108'. [ 1485.986076][T19622] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18104'. [ 1486.283214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.291572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.489041][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18109'. [ 1486.594305][T19639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18111'. [ 1486.882242][T19650] netlink: 'syz.4.18113': attribute type 11 has an invalid length. [ 1487.149255][T19652] bond29 (unregistering): Released all slaves [ 1487.458747][T19669] __nla_validate_parse: 5 callbacks suppressed [ 1487.458771][T19669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18114'. [ 1487.497404][T19637] bridge16: entered promiscuous mode [ 1487.548812][T19637] bridge16: entered allmulticast mode [ 1488.762830][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18119'. [ 1488.825808][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18119'. [ 1488.960227][T19704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18121'. [ 1488.981088][T19703] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18117'. [ 1489.409164][T19713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18122'. [ 1490.263484][ T3376] batman_adv: batadv2: IGMP Querier appeared [ 1490.270627][ T3376] batman_adv: batadv2: MLD Querier appeared [ 1490.359860][ T29] audit: type=1804 audit(1780530544.895:23): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.18123" name="/newroot/3668/cgroup.controllers" dev="tmpfs" ino=18539 res=1 errno=0 [ 1490.435781][ T29] audit: type=1800 audit(1780530544.895:24): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18123" name="cgroup.controllers" dev="tmpfs" ino=18539 res=0 errno=0 [ 1491.363235][T19729] block nbd8: server does not support multiple connections per device. [ 1491.405762][T19729] block nbd8: shutting down sockets [ 1491.937162][ T3376] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1491.937553][T19724] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1491.970811][ T3376] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.005567][T19724] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1492.006040][ T3376] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1492.041594][ T3376] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.053745][T19724] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1492.086421][ T3376] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1492.143930][ T3376] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.177322][ T3376] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.230047][ T3376] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.275993][ T3376] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1492.413269][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18130'. [ 1492.534140][T19750] netlink: 'syz.3.18129': attribute type 1 has an invalid length. [ 1492.575952][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18129'. [ 1492.658091][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18130'. [ 1493.120923][T19762] netlink: 'syz.4.18135': attribute type 10 has an invalid length. [ 1493.379495][T19768] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18133'. [ 1493.416317][T19770] netlink: 'syz.4.18136': attribute type 10 has an invalid length. [ 1493.654320][T19770] tap0: tun_chr_ioctl cmd 1074025677 [ 1493.715470][T19770] tap0: linktype set to 773 [ 1493.852178][T19770] : entered promiscuous mode [ 1494.630539][T19796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18140'. [ 1494.781187][T19802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18138'. [ 1494.904920][T19802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18138'. [ 1495.075493][T19795] lo speed is unknown, defaulting to 1000 [ 1495.128970][T19798] lo speed is unknown, defaulting to 1000 [ 1495.137291][T19795] lo speed is unknown, defaulting to 1000 [ 1495.210905][T19798] lo speed is unknown, defaulting to 1000 [ 1495.244043][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.253231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.386435][T19817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18143'. [ 1495.886048][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.104340][T19837] netlink: 'syz.2.18145': attribute type 2 has an invalid length. [ 1496.289982][T19837] netlink: 'syz.2.18145': attribute type 2 has an invalid length. [ 1496.627625][T19828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1497.374511][T19832] macsec3: entered promiscuous mode [ 1497.742084][T19855] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18148'. [ 1497.989661][T19858] netlink: 156 bytes leftover after parsing attributes in process `syz.1.18148'. [ 1498.075378][T19855] lo speed is unknown, defaulting to 1000 [ 1498.153465][T19855] lo speed is unknown, defaulting to 1000 [ 1498.778830][T19868] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1499.731781][T19876] tipc: Resetting bearer [ 1500.381566][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.393336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.210615][T19917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18156'. [ 1501.350051][ T5761] lo speed is unknown, defaulting to 1000 [ 1501.375054][ T5761] syz2: Port: 1 Link DOWN [ 1501.645277][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.837006][T19931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18160'. [ 1502.028990][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18159'. [ 1502.058452][T19925] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1502.985009][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18161'. [ 1503.146348][T19953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18163'. [ 1504.057006][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18165'. [ 1504.314299][T19970] netlink: 'syz.4.18169': attribute type 10 has an invalid length. [ 1504.370527][T19971] syzkaller0: entered promiscuous mode [ 1504.402784][T19971] syzkaller0: entered allmulticast mode [ 1504.789299][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18171'. [ 1504.945649][T19989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18173'. [ 1505.074428][T19991] erspan0: left promiscuous mode [ 1505.096175][T19992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18174'. [ 1505.210803][T19991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.256089][T19991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.343452][T19991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1505.459933][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.468195][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.574367][T19991] batadv_slave_1: left promiscuous mode [ 1505.732508][T19991] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1505.756106][T19991] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1505.784329][T19991] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1505.798924][T19991] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1505.810708][T19991] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1505.829945][T18526] lo speed is unknown, defaulting to 1000 [ 1505.842075][T18526] syú2: Port: 1 Link ACTIVE [ 1505.888814][T20009] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18177'. [ 1505.964770][ T961] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.992398][ T961] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.020026][ T961] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.127191][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.136796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.328797][T20016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18178'. [ 1506.358995][T20017] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1506.376348][ T961] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.396341][T20017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18179'. [ 1506.489767][T20017] netlink: zone id is out of range [ 1506.502806][T20017] netlink: zone id is out of range [ 1506.515009][T20017] netlink: zone id is out of range [ 1506.529683][T20017] netlink: zone id is out of range [ 1506.547835][T20017] netlink: zone id is out of range [ 1506.669895][T20017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18179'. [ 1507.097373][T20032] netlink: 'syz.2.18182': attribute type 10 has an invalid length. [ 1507.130985][T20028] syzkaller0: entered promiscuous mode [ 1507.142774][T20028] syzkaller0: entered allmulticast mode [ 1508.168068][T20065] __nla_validate_parse: 4 callbacks suppressed [ 1508.168093][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18188'. [ 1508.208960][T20066] netlink: 'syz.2.18187': attribute type 10 has an invalid length. [ 1508.225594][T20065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18188'. [ 1508.270910][T20067] netlink: 41 bytes leftover after parsing attributes in process `syz.2.18187'. [ 1508.287338][T20067] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18187'. [ 1511.245837][ T938] net_ratelimit: 19 callbacks suppressed [ 1511.245882][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.261090][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.896924][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.906308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.543106][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.978995][T20067] netlink: 41 bytes leftover after parsing attributes in process `syz.2.18187'. [ 1514.327405][T20078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18190'. [ 1514.440237][T20087] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1514.447743][T20078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18190'. [ 1514.498633][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18193'. [ 1514.589926][T20087] netlink: zone id is out of range [ 1514.613110][T20087] netlink: zone id is out of range [ 1514.628954][T20087] netlink: zone id is out of range [ 1514.628954][T20094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18196'. [ 1514.662519][T20087] netlink: zone id is out of range [ 1514.680367][T20096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18193'. [ 1514.694627][T20087] netlink: zone id is out of range [ 1514.780780][T20099] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18194'. [ 1515.197304][T20112] netlink: 'syz.1.18197': attribute type 10 has an invalid length. [ 1515.271214][T20118] netlink: 41 bytes leftover after parsing attributes in process `syz.1.18197'. [ 1515.299338][T20118] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18197'. [ 1515.328309][T20118] netlink: 41 bytes leftover after parsing attributes in process `syz.1.18197'. [ 1515.378055][T20119] netlink: 'syz.0.18199': attribute type 11 has an invalid length. [ 1515.417019][T20121] netlink: 'syz.4.18200': attribute type 10 has an invalid length. [ 1516.260538][T20129] syzkaller0: entered promiscuous mode [ 1516.266647][T20129] syzkaller0: entered allmulticast mode [ 1517.005501][ T956] net_ratelimit: 25 callbacks suppressed [ 1517.005527][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.020346][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.654893][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.664417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.312465][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.800648][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.810245][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.018694][T20133] syzkaller1: entered promiscuous mode [ 1523.025065][T20133] syzkaller1: entered allmulticast mode [ 1523.097104][T20140] syzkaller0: entered promiscuous mode [ 1523.102761][T20140] syzkaller0: entered allmulticast mode [ 1523.427043][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.441152][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.451699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.536746][T20162] __nla_validate_parse: 6 callbacks suppressed [ 1523.536785][T20162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18208'. [ 1524.488785][T20166] netlink: 292 bytes leftover after parsing attributes in process `syz.0.18209'. [ 1524.647706][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18209'. [ 1528.534544][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.544441][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.545293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.554518][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.165056][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1529.236776][T20172] x_tables: duplicate underflow at hook 1 [ 1529.390212][T20182] netlink: 'syz.4.18213': attribute type 10 has an invalid length. [ 1529.527397][T20187] netlink: 41 bytes leftover after parsing attributes in process `syz.4.18213'. [ 1529.581933][T20187] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18213'. [ 1529.602470][T20189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18215'. [ 1529.633957][T20187] netlink: 41 bytes leftover after parsing attributes in process `syz.4.18213'. [ 1529.845783][T20199] netlink: 256 bytes leftover after parsing attributes in process `syz.1.18217'. [ 1530.208122][T20212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18219'. [ 1530.911117][T20230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18222'. [ 1531.122808][T20230] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1531.180042][T20232] lo speed is unknown, defaulting to 1000 [ 1531.206646][T20236] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1531.326457][T20232] lo speed is unknown, defaulting to 1000 [ 1531.679793][T20245] netlink: 292 bytes leftover after parsing attributes in process `syz.4.18225'. [ 1531.771702][T20249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18225'. [ 1531.826681][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18224'. [ 1532.877812][T20272] netlink: 'syz.1.18230': attribute type 10 has an invalid length. [ 1532.996339][T20278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.050224][T20278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.091852][T20278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.701942][T20271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1533.796637][T20294] bridge0: port 1(erspan0) entered blocking state [ 1533.815155][T20294] bridge0: port 1(erspan0) entered disabled state [ 1533.823775][T20292] net_ratelimit: 50 callbacks suppressed [ 1533.823796][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.847867][T20294] erspan0: entered allmulticast mode [ 1533.873083][T20294] erspan0: left allmulticast mode [ 1533.940054][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.992394][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.040492][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.075789][T20298] lo speed is unknown, defaulting to 1000 [ 1534.102119][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.113384][T20298] lo speed is unknown, defaulting to 1000 [ 1534.132484][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.149755][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.171663][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.191172][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.214653][T20292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.576342][T20309] tipc: Enabled bearer , priority 2 [ 1534.746781][T20306] lo speed is unknown, defaulting to 1000 [ 1534.811568][T20313] batman_adv: batadv0: Adding interface: ipvlan1 [ 1534.833044][T20313] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 1534.911370][T20313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan0 [ 1534.943796][T20313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.956607][T20313] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 1534.972043][T20306] lo speed is unknown, defaulting to 1000 [ 1534.972043][T20311] lo speed is unknown, defaulting to 1000 [ 1535.021633][T20311] lo speed is unknown, defaulting to 1000 [ 1535.051432][T20320] __nla_validate_parse: 7 callbacks suppressed [ 1535.051455][T20320] netlink: 41 bytes leftover after parsing attributes in process `syz.2.18241'. [ 1535.116839][T20320] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18241'. [ 1535.268868][T20320] netlink: 41 bytes leftover after parsing attributes in process `syz.2.18241'. [ 1535.540146][T20327] netlink: 41 bytes leftover after parsing attributes in process `syz.3.18242'. [ 1535.565295][T20327] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18242'. [ 1535.759698][T20327] netlink: 41 bytes leftover after parsing attributes in process `syz.3.18242'. [ 1536.421553][T20343] netlink: 'syz.2.18246': attribute type 10 has an invalid length. [ 1536.455336][T20343] netlink: 41 bytes leftover after parsing attributes in process `syz.2.18246'. [ 1536.467264][T20343] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18246'. [ 1536.497770][T20343] netlink: 41 bytes leftover after parsing attributes in process `syz.2.18246'. [ 1536.518794][T20349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18248'. [ 1538.582771][T20359] xt_CT: No such helper "snmp" [ 1540.099505][ T956] net_ratelimit: 48 callbacks suppressed [ 1540.099565][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.146321][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.126887][T20382] __nla_validate_parse: 1 callbacks suppressed [ 1541.126908][T20382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18264'. [ 1541.162584][T20387] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18254'. [ 1541.208956][T20383] bridge0: port 1(vlan0) entered blocking state [ 1541.230691][T20383] bridge0: port 1(vlan0) entered disabled state [ 1541.277644][T20383] vlan0: entered allmulticast mode [ 1541.333781][T20383] vlan0: entered promiscuous mode [ 1541.369116][T20383] dummy0: entered promiscuous mode [ 1542.285266][T20402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18261'. [ 1542.498623][T20399] bridge17: entered promiscuous mode [ 1542.524345][T20399] bridge17: entered allmulticast mode [ 1543.130088][T20423] netlink: 208 bytes leftover after parsing attributes in process `syz.0.18268'. [ 1543.165055][T20423] netlink: 'syz.0.18268': attribute type 2 has an invalid length. [ 1543.268456][T20417] tipc: Enabled bearer , priority 2 [ 1543.296658][T20426] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.18268'. [ 1543.428804][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18265'. [ 1543.886132][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.895228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.311866][T20445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18275'. [ 1544.312459][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18273'. [ 1544.795658][T20454] bridge21: entered promiscuous mode [ 1544.847147][T20454] bridge21: entered allmulticast mode [ 1545.353578][T20460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18279'. [ 1545.541886][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18279'. [ 1545.804532][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.821042][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.343378][T20484] tipc: Enabled bearer , priority 2 [ 1546.716880][T20492] lo speed is unknown, defaulting to 1000 [ 1546.777790][T20492] lo speed is unknown, defaulting to 1000 [ 1546.828349][T20503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18289'. [ 1547.845125][T20519] tipc: Resetting bearer [ 1548.038315][T20529] Cannot find del_set index 0 as target [ 1548.097938][T20521] bridge16: entered promiscuous mode [ 1548.113289][T20521] bridge16: entered allmulticast mode [ 1548.540432][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18298'. [ 1548.692281][T20536] syzkaller0: entered promiscuous mode [ 1548.716436][T20536] syzkaller0: entered allmulticast mode [ 1549.068374][ T29] audit: type=1800 audit(1780530603.605:25): pid=20527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18296" name="memory.events" dev="tmpfs" ino=18902 res=0 errno=0 [ 1549.653142][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.663686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.923726][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.058258][T20568] netlink: 188 bytes leftover after parsing attributes in process `syz.3.18306'. [ 1551.068223][T20568] openvswitch: netlink: Flow key attr not present in new flow. [ 1551.114023][T20568] netlink: 1720 bytes leftover after parsing attributes in process `syz.3.18306'. [ 1551.586445][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.499108][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.342126][T20565] bond9: entered allmulticast mode [ 1555.353258][T20565] ipip0: entered allmulticast mode [ 1555.365492][T20565] bond9: left allmulticast mode [ 1555.371273][T20565] ipip0: left allmulticast mode [ 1555.404549][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.415141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.778476][T20580] syzkaller0: entered promiscuous mode [ 1555.801799][T20580] syzkaller0: entered allmulticast mode [ 1556.295756][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18316'. [ 1556.692905][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.325308][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.940914][T20620] netlink: 'syz.0.18321': attribute type 10 has an invalid length. [ 1557.968530][T20620] syz_tun: entered promiscuous mode [ 1557.988442][T20620] netlink: 41 bytes leftover after parsing attributes in process `syz.0.18321'. [ 1558.022670][T20620] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18321'. [ 1558.059514][T20620] netlink: 41 bytes leftover after parsing attributes in process `syz.0.18321'. [ 1558.563056][T20634] syzkaller0: entered promiscuous mode [ 1558.572625][T20634] syzkaller0: entered allmulticast mode [ 1558.787329][T20639] netlink: 'syz.2.18329': attribute type 11 has an invalid length. [ 1558.819769][T20639] netlink: 'syz.2.18329': attribute type 11 has an invalid length. [ 1558.844427][T20643] siw: device registration error -23 [ 1558.894356][T20639] netlink: 204 bytes leftover after parsing attributes in process `syz.2.18329'. [ 1558.956325][T20649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18332'. [ 1559.015931][T20642] syzkaller0: entered promiscuous mode [ 1559.047287][T20642] syzkaller0: entered allmulticast mode [ 1559.248246][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.181137][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.190599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.451297][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1563.100976][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.887964][T20652] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1564.900548][T20652] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1564.911977][T20652] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1565.013563][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.281634][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18336'. [ 1565.296591][T20680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18338'. [ 1565.940412][T20689] netlink: 'syz.4.18341': attribute type 10 has an invalid length. [ 1565.987945][T20689] netlink: 41 bytes leftover after parsing attributes in process `syz.4.18341'. [ 1566.038174][T20689] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18341'. [ 1566.122926][T20689] netlink: 41 bytes leftover after parsing attributes in process `syz.4.18341'. [ 1566.154717][T20693] syzkaller0: entered promiscuous mode [ 1566.170389][T20693] syzkaller0: entered allmulticast mode [ 1566.523586][T20705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18346'. [ 1566.735510][T20705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18346'. [ 1566.806245][T20712] lo speed is unknown, defaulting to 1000 [ 1566.844317][T20712] lo speed is unknown, defaulting to 1000 [ 1566.882680][T20712] lo speed is unknown, defaulting to 1000 [ 1566.929541][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.938725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.561930][T20723] syzkaller0: entered promiscuous mode [ 1567.585321][T20723] syzkaller0: entered allmulticast mode [ 1568.008564][T20712] infiniband syz0: set active [ 1568.032241][T20712] infiniband syz0: added lo [ 1568.149562][T20712] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1568.203502][T20712] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1568.213355][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.223690][T20712] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1568.229722][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.296855][T20712] RDS/IB: syz0: added [ 1568.302362][T20712] smc: adding ib device syz0 with port count 1 [ 1568.313736][T20712] smc: ib device syz0 port 1 has no pnetid [ 1569.249843][T20758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.774632][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.696382][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.705505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.967911][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.976339][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.324456][T12351] lo speed is unknown, defaulting to 1000 [ 1574.341750][T12368] lo speed is unknown, defaulting to 1000 [ 1574.358912][T20712] lo speed is unknown, defaulting to 1000 [ 1574.434842][T20772] 8021q: VLANs not supported on wg2 [ 1574.575921][T20775] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1574.721775][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18354'. [ 1574.957675][T20786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18358'. [ 1575.022636][T20786] ip6gre3: entered promiscuous mode [ 1575.064039][T20786] ip6gre3: entered allmulticast mode [ 1575.089615][T20788] netlink: 'syz.0.18358': attribute type 6 has an invalid length. [ 1575.109207][T20791] netlink: 'syz.2.18357': attribute type 10 has an invalid length. [ 1575.115090][T20788] netlink: 72 bytes leftover after parsing attributes in process `syz.0.18358'. [ 1575.211707][T20793] netlink: 41 bytes leftover after parsing attributes in process `syz.2.18357'. [ 1575.272543][T20793] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18357'. [ 1575.352438][T20793] netlink: 41 bytes leftover after parsing attributes in process `syz.2.18357'. [ 1575.363093][T20712] lo speed is unknown, defaulting to 1000 [ 1575.399196][T20794] netlink: 41 bytes leftover after parsing attributes in process `syz.1.18359'. [ 1575.443771][T20794] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18359'. [ 1575.517536][T20794] netlink: 41 bytes leftover after parsing attributes in process `syz.1.18359'. [ 1575.805282][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.870724][T20801] netlink: 'syz.0.18361': attribute type 5 has an invalid length. [ 1575.955698][T20801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18361'. [ 1576.250918][T20804] syz_tun: left promiscuous mode [ 1576.281922][T20804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.353515][T20804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1576.379546][T20814] netlink: 'syz.2.18362': attribute type 7 has an invalid length. [ 1576.392105][T20813] netlink: 'syz.1.18363': attribute type 1 has an invalid length. [ 1577.038151][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.149330][T20804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1577.180425][T20804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1577.195281][T20804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1577.205291][T20804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1577.214634][T20804] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1577.306619][T20813] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR [ 1577.446746][T20712] lo speed is unknown, defaulting to 1000 [ 1577.484688][T20821] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1577.501012][T20821] syzkaller1: Refused to change device type [ 1577.550857][ T961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.675093][ T961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.699465][ T961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.718797][T20809] lo speed is unknown, defaulting to 1000 [ 1577.788651][T20809] lo speed is unknown, defaulting to 1000 [ 1577.794831][T20826] lo speed is unknown, defaulting to 1000 [ 1577.805531][T20826] lo speed is unknown, defaulting to 1000 [ 1578.101733][T20842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.446393][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.455461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.548043][T20809] lo speed is unknown, defaulting to 1000 [ 1579.086181][T20826] lo speed is unknown, defaulting to 1000 [ 1579.601401][T20863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.666061][T20712] lo speed is unknown, defaulting to 1000 [ 1579.738922][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.747844][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.821806][T20870] netlink: 'syz.0.18372': attribute type 10 has an invalid length. [ 1579.899041][T20871] __nla_validate_parse: 6 callbacks suppressed [ 1579.899060][T20871] netlink: 41 bytes leftover after parsing attributes in process `syz.0.18372'. [ 1579.915225][T20871] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18372'. [ 1579.975269][T20863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.040969][T20870] syz_tun: entered promiscuous mode [ 1580.164376][T20871] netlink: 41 bytes leftover after parsing attributes in process `syz.0.18372'. [ 1580.266384][T20863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.300330][T20712] lo speed is unknown, defaulting to 1000 [ 1580.414830][T20863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.639461][ T961] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.802637][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.931267][ T3376] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.021414][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.124083][T20878] netlink: 41 bytes leftover after parsing attributes in process `syz.0.18373'. [ 1581.137187][ T3376] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.193424][T20878] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18373'. [ 1581.233367][T20878] netlink: 41 bytes leftover after parsing attributes in process `syz.0.18373'. [ 1581.523465][T20881] netlink: 'syz.1.18375': attribute type 1 has an invalid length. [ 1581.545194][T20881] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18375'. [ 1581.569379][T20881] syzkaller0: entered promiscuous mode [ 1581.576135][T20881] syzkaller0: entered allmulticast mode [ 1581.590132][T20881] tipc: Enabled bearer , priority 0 [ 1581.655597][T20876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18374'. [ 1581.679789][T20882] tipc: Resetting bearer [ 1581.762220][T20880] tipc: Resetting bearer [ 1581.863381][T20880] tipc: Disabling bearer [ 1581.993984][T20892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18378'. [ 1582.018799][T20893] netlink: 'syz.0.18377': attribute type 10 has an invalid length. [ 1582.248079][T20893] netlink: 41 bytes leftover after parsing attributes in process `syz.0.18377'. [ 1582.282414][T20896] nbd: couldn't find device at index 0 [ 1582.289819][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.384504][T20904] netlink: 'syz.2.18381': attribute type 9 has an invalid length. [ 1582.495294][T20905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.507110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.592480][T20905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.609184][T18526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.659886][T18526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.779471][T20907] nbd: couldn't find device at index 0 [ 1583.308517][T20903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.624558][T20946] lo speed is unknown, defaulting to 1000 [ 1584.662767][T20946] lo speed is unknown, defaulting to 1000 [ 1584.713109][T20946] lo speed is unknown, defaulting to 1000 [ 1584.807605][ T29] audit: type=1800 audit(1780530639.345:26): pid=20934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.18389" name="memory.events" dev="tmpfs" ino=18773 res=0 errno=0 [ 1585.322042][T20963] __nla_validate_parse: 7 callbacks suppressed [ 1585.322063][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18397'. [ 1585.377148][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18397'. [ 1585.484376][ T961] net_ratelimit: 6 callbacks suppressed [ 1585.484396][ T961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.498835][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.512188][T20971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18398'. [ 1585.626074][T20963] bond20: Removing last arp target with arp_interval on [ 1586.214046][T20996] netlink: 'syz.2.18402': attribute type 1 has an invalid length. [ 1586.353906][ T961] syzkaller1: tun_net_xmit 86 [ 1586.474671][T21002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18402'. [ 1586.554096][T21004] siw: device registration error -23 [ 1586.765835][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.820514][T21002] macvlan2: entered promiscuous mode [ 1586.860841][T21002] macvlan2: entered allmulticast mode [ 1586.892563][T21005] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1586.929085][T21005] syzkaller1: Linktype set failed because interface is up [ 1586.959551][T21010] pim6reg: entered allmulticast mode [ 1587.390598][T21026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.534782][T21026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.552482][T21033] netlink: 'syz.1.18414': attribute type 13 has an invalid length. [ 1587.577685][T21026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.591373][T21033] netlink: 'syz.1.18414': attribute type 17 has an invalid length. [ 1587.687972][T21026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.747021][T21026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.747130][T21030] tipc: Resetting bearer [ 1587.834666][T21028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.864943][T21028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.980792][T21049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18415'. [ 1588.063800][T21051] netlink: 'syz.0.18415': attribute type 3 has an invalid length. [ 1588.127010][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18414'. [ 1588.856657][T18526] lo speed is unknown, defaulting to 1000 [ 1588.914759][T21033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.924836][T21033] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.938657][T21033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.074457][T12368] lo speed is unknown, defaulting to 1000 [ 1589.522296][T21066] siw: device registration error -23 [ 1589.571007][T21061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18418'. [ 1589.849903][T21075] lo speed is unknown, defaulting to 1000 [ 1589.898524][T21080] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18420'. [ 1589.946416][T21075] lo speed is unknown, defaulting to 1000 [ 1589.998131][T21075] lo speed is unknown, defaulting to 1000 [ 1590.456752][T21090] lo speed is unknown, defaulting to 1000 [ 1590.481174][T21090] lo speed is unknown, defaulting to 1000 [ 1591.109284][T21090] lo speed is unknown, defaulting to 1000 [ 1591.949227][T21116] net_ratelimit: 96 callbacks suppressed [ 1591.949279][T21116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.967123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.151162][T21118] netlink: 'syz.2.18432': attribute type 10 has an invalid length. [ 1592.211240][T21124] netlink: 'syz.0.18433': attribute type 13 has an invalid length. [ 1592.229449][T21124] netlink: 'syz.0.18433': attribute type 17 has an invalid length. [ 1592.271859][T21115] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1592.272765][T21117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.425878][T21129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.526235][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.575925][T21128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18433'. [ 1592.632430][T21121] tipc: Resetting bearer [ 1592.694726][T21109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.559898][T21124] syz_tun: left promiscuous mode [ 1593.621807][T21124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.667453][T21124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.714548][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.760699][T21124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1593.776204][T21124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1593.811511][T21124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1593.850052][T21124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1593.865052][T21124] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1594.150874][T21138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18438'. [ 1594.288856][T21146] siw: device registration error -23 [ 1594.445439][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.859643][T21154] IPv6: sit5: Disabled Multicast RS [ 1595.927698][T21179] batman_adv: batadv0: Removing interface: ipvlan0 [ 1595.933427][T21186] netlink: 'syz.4.18447': attribute type 13 has an invalid length. [ 1595.947277][T21179] batman_adv: batadv0: Removing interface: ipvlan1 [ 1595.966764][T21186] netlink: 'syz.4.18447': attribute type 17 has an invalid length. [ 1596.396115][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18447'. [ 1597.327752][T21182] batman_adv: batadv0: Interface deactivated: gretap7 [ 1597.408071][ T42] lo speed is unknown, defaulting to 1000 [ 1597.498533][T21186] 8021q: adding VLAN 0 to HW filter on device .` [ 1597.526450][T21186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1597.686244][T21186] veth1_macvtap: left promiscuous mode [ 1597.695690][T21186] veth0_macvtap: left promiscuous mode [ 1597.703784][T21186] veth0_macvtap: entered promiscuous mode [ 1597.714725][T21186] veth1_macvtap: entered promiscuous mode [ 1597.731806][T21186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1597.752314][T21186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1597.769584][T21186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1597.780376][T21186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1597.809820][T21186] net_ratelimit: 3 callbacks suppressed [ 1597.809881][T21186] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1597.920319][ T3281] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.951340][ T3281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.991827][ T3281] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1598.012637][ T3281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.036481][ T42] lo speed is unknown, defaulting to 1000 [ 1598.063352][ T3281] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1598.092232][ T5654] block nbd3: Receive control failed (result -32) [ 1598.107873][ T3281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.120076][T12369] lo speed is unknown, defaulting to 1000 [ 1598.284490][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.847492][T21253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.927994][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.383686][T21256] lo speed is unknown, defaulting to 1000 [ 1599.392355][T21256] lo speed is unknown, defaulting to 1000 [ 1599.452726][T21256] lo speed is unknown, defaulting to 1000 [ 1599.544009][T21273] netlink: 'syz.0.18465': attribute type 10 has an invalid length. [ 1599.566115][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.626119][T21276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18465'. [ 1600.204854][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.214063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.216629][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.831288][T21294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1600.843920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1602.267483][T21323] netlink: 'syz.3.18476': attribute type 1 has an invalid length. [ 1602.431758][T21331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18479'. [ 1602.681747][T21323] netlink: 104 bytes leftover after parsing attributes in process `syz.3.18476'. [ 1602.712008][T21318] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1602.731694][T21318] bond29: (slave bond30): making interface the new active one [ 1602.743554][T21318] bond29: (slave bond30): Enslaving as an active interface with an up link [ 1603.137968][T21350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18484'. [ 1603.167970][T21349] syzkaller0: entered promiscuous mode [ 1603.191202][T21349] syzkaller0: entered allmulticast mode [ 1603.798285][T21371] x_tables: duplicate underflow at hook 1 [ 1604.014957][T21379] net_ratelimit: 5 callbacks suppressed [ 1604.014981][T21379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.045887][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.203669][T21387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18494'. [ 1604.263105][T21389] tipc: Enabled bearer , priority 2 [ 1604.684131][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1604.934486][T21385] ip6erspan3: entered allmulticast mode [ 1605.131325][T21406] bond0: Caught tx_queue_len zero misconfig [ 1605.308815][T21410] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18499'. [ 1605.328466][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.372034][T21413] netlink: 'syz.4.18499': attribute type 3 has an invalid length. [ 1605.819543][T21423] netlink: 'syz.0.18500': attribute type 1 has an invalid length. [ 1605.862539][T21423] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18500'. [ 1605.889777][T21424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18500'. [ 1605.965815][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.974917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1605.984210][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.051328][T21463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18510'. [ 1607.126781][T21461] tipc: Enabling of bearer rejected, already enabled [ 1607.890562][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.213681][T21476] netlink: 'syz.3.18514': attribute type 10 has an invalid length. [ 1608.250514][T21476] netlink: 41 bytes leftover after parsing attributes in process `syz.3.18514'. [ 1608.293671][T21476] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18514'. [ 1608.331084][T21476] netlink: 41 bytes leftover after parsing attributes in process `syz.3.18514'. [ 1608.564067][T21485] lo speed is unknown, defaulting to 1000 [ 1608.668086][T21485] lo speed is unknown, defaulting to 1000 [ 1608.792177][T21485] lo speed is unknown, defaulting to 1000 [ 1609.791030][T21522] tipc: Failed to remove unknown binding: 66,0,0/3758096385:59053568/59053569 [ 1609.811496][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.855213][T21522] tipc: Failed to remove unknown binding: 66,0,0/3758096385:59053568/59053569 [ 1610.127108][T21523] lo speed is unknown, defaulting to 1000 [ 1610.178336][T21532] tipc: Enabling of bearer rejected, already enabled [ 1610.262109][T21523] lo speed is unknown, defaulting to 1000 [ 1610.387752][T21523] lo speed is unknown, defaulting to 1000 [ 1610.451729][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.088627][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.727006][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.735027][ T5654] block nbd8: Receive control failed (result -22) [ 1611.736592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.754262][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1611.827578][T21563] nbd8: detected capacity change from 0 to 32 [ 1611.871063][T21487] block nbd8: Dead connection, failed to find a fallback [ 1611.945505][T21487] block nbd8: shutting down sockets [ 1612.003322][T21487] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.078002][T21487] buffer_io_error: 18 callbacks suppressed [ 1612.078025][T21487] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1612.150778][T21487] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.208567][T21487] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1612.263975][T21487] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.305625][T21487] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1612.356787][T21487] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.401408][T21487] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1612.443265][T21487] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.480729][T21487] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1612.524797][T21487] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.581671][T21487] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1612.643257][T21487] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.685157][T21487] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1612.723257][T21487] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.773966][T21487] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1612.780326][T21580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18531'. [ 1612.807289][T21487] ldm_validate_partition_table(): Disk read failed. [ 1612.831778][T21487] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.843721][T21580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18531'. [ 1612.892598][T21487] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1612.909304][T21487] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1612.930988][T21487] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1612.973155][T21487] Dev nbd8: unable to read RDB block 0 [ 1613.001718][T21487] nbd8: unable to read partition table [ 1613.073783][T21487] ldm_validate_partition_table(): Disk read failed. [ 1613.150061][T21572] lo speed is unknown, defaulting to 1000 [ 1613.165198][T21572] lo speed is unknown, defaulting to 1000 [ 1613.168121][T21487] Dev nbd8: unable to read RDB block 0 [ 1613.175299][T21572] lo speed is unknown, defaulting to 1000 [ 1613.241245][T21487] nbd8: unable to read partition table [ 1613.660983][T21596] tipc: New replicast peer: 255.255.255.255 [ 1613.697525][T21596] tipc: Enabled bearer , priority 10 [ 1614.232549][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.279776][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.331863][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.352728][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.411991][T21612] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1614.553495][T21615] tunl0: left allmulticast mode [ 1614.569022][T21615] syz_tun: left allmulticast mode [ 1614.815781][T21608] net_ratelimit: 441 callbacks suppressed [ 1614.815805][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.857829][T21623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18542'. [ 1614.863297][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.888883][T21623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18542'. [ 1614.942909][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1614.990318][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.031617][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.058111][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.076402][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.101222][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.137207][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.174151][T21608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1615.996188][T21633] x_tables: duplicate underflow at hook 2 [ 1617.739962][T21670] netlink: 'syz.2.18550': attribute type 10 has an invalid length. [ 1618.006484][T21679] netlink: 'syz.0.18554': attribute type 10 has an invalid length. [ 1618.073138][T21679] syz_tun: entered promiscuous mode [ 1618.105689][T21683] netlink: 41 bytes leftover after parsing attributes in process `syz.0.18554'. [ 1618.142434][T21683] netlink: 140 bytes leftover after parsing attributes in process `syz.0.18554'. [ 1618.198606][T21683] netlink: 41 bytes leftover after parsing attributes in process `syz.0.18554'. [ 1618.272410][T21685] tipc: Enabling of bearer rejected, already enabled [ 1618.708408][T21678] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1618.733612][T21678] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1618.888647][T21702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18559'. [ 1619.205076][T21713] netlink: 'syz.3.18559': attribute type 3 has an invalid length. [ 1620.603558][ T48] net_ratelimit: 577 callbacks suppressed [ 1620.603581][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1620.625562][T21740] netlink: 'syz.2.18568': attribute type 10 has an invalid length. [ 1621.076781][ T29] audit: type=1800 audit(1780530675.615:27): pid=21728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18565" name="memory.events" dev="tmpfs" ino=19235 res=0 errno=0 [ 1621.351317][T21733] Cannot find del_set index 0 as target [ 1621.536816][T21754] bridge0: port 2(erspan0) entered blocking state [ 1621.552144][T21754] bridge0: port 2(erspan0) entered disabled state [ 1621.578609][T21756] netlink: 'syz.1.18571': attribute type 10 has an invalid length. [ 1621.581166][T21754] erspan0: entered allmulticast mode [ 1621.630746][T21760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.662511][T21754] erspan0: entered promiscuous mode [ 1621.664195][T21761] netlink: 41 bytes leftover after parsing attributes in process `syz.1.18571'. [ 1621.693571][T21760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.713485][T21761] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18571'. [ 1621.753495][T21760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.767683][T21758] erspan0: left allmulticast mode [ 1621.785471][T21758] erspan0: left promiscuous mode [ 1621.797832][T21760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.801945][T21758] bridge0: port 2(erspan0) entered disabled state [ 1621.846949][T21760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.858794][T21754] netlink: 68 bytes leftover after parsing attributes in process `syz.4.18573'. [ 1621.868699][T21754] netlink: 64 bytes leftover after parsing attributes in process `syz.4.18573'. [ 1621.878121][T21760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.888783][T21760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.905775][T21760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.926626][T21761] netlink: 41 bytes leftover after parsing attributes in process `syz.1.18571'. [ 1621.940064][T21760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1622.307317][T21771] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18575'. [ 1623.386834][T21785] __nla_validate_parse: 1 callbacks suppressed [ 1623.386857][T21785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18579'. [ 1624.336759][T21798] netlink: 'syz.1.18582': attribute type 10 has an invalid length. [ 1624.600860][T21802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18583'. [ 1625.743451][T21820] net_ratelimit: 1020 callbacks suppressed [ 1625.743502][T21820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.783586][T21820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.813379][T21820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.838741][T21820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.876066][T21820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.903589][T21820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.947864][T21820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.968607][T21820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.983070][T21820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1625.997647][T21820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.200289][T21811] Cannot find del_set index 0 as target [ 1626.759631][T21832] netlink: 41 bytes leftover after parsing attributes in process `syz.1.18588'. [ 1626.773343][T21832] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18588'. [ 1626.864856][T21838] netlink: 'syz.4.18590': attribute type 10 has an invalid length. [ 1626.888093][T21838] netlink: 41 bytes leftover after parsing attributes in process `syz.4.18590'. [ 1626.913932][T21835] pim6reg1: entered promiscuous mode [ 1626.919497][T21838] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18590'. [ 1626.928862][T21835] pim6reg1: entered allmulticast mode [ 1626.945095][T21838] netlink: 41 bytes leftover after parsing attributes in process `syz.4.18590'. [ 1630.370494][T21872] netlink: 'syz.1.18601': attribute type 13 has an invalid length. [ 1630.412014][T21872] netlink: 'syz.1.18601': attribute type 17 has an invalid length. [ 1630.453581][T21874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18601'. [ 1630.475852][T21867] netlink: 'syz.3.18600': attribute type 10 has an invalid length. [ 1630.504422][T21862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18599'. [ 1630.988152][T21894] netlink: 'syz.2.18606': attribute type 10 has an invalid length. [ 1631.059855][T21896] netlink: 41 bytes leftover after parsing attributes in process `syz.2.18606'. [ 1631.060619][T21892] tipc: Resetting bearer [ 1631.086762][T21896] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18606'. [ 1631.348669][ T10] lo speed is unknown, defaulting to 1000 [ 1631.352681][T21896] netlink: 41 bytes leftover after parsing attributes in process `syz.2.18606'. [ 1631.369692][T21903] netlink: 'syz.3.18609': attribute type 13 has an invalid length. [ 1631.405704][T21903] netlink: 'syz.3.18609': attribute type 17 has an invalid length. [ 1631.520311][T21906] netlink: 'syz.4.18611': attribute type 142 has an invalid length. [ 1631.563540][ T946] net_ratelimit: 1023 callbacks suppressed [ 1631.563562][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1631.949740][T21903] tipc: Resetting bearer [ 1631.956698][T21903] tipc: Resetting bearer [ 1631.970268][T21903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1631.977895][T21903] tipc: Resetting bearer [ 1631.984733][T21903] tipc: Resetting bearer [ 1632.000139][T21903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.047398][T21903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1632.059949][T21903] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1632.070097][T21903] veth1_macvtap: left promiscuous mode [ 1632.081036][T21903] veth0_macvtap: left promiscuous mode [ 1632.089656][T21903] veth0_macvtap: entered promiscuous mode [ 1632.121942][T21903] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check. [ 1632.146178][ T10] lo speed is unknown, defaulting to 1000 [ 1632.179121][ T10] syz2: Port: 1 Link ACTIVE [ 1632.764279][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.967456][T21947] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1633.024598][T21936] can: request_module (can-proto-5) failed. [ 1633.095801][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.107079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.185897][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.194450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.248278][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.256776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.304640][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.596326][T21960] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 1633.643437][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18621'. [ 1633.704600][T21969] netlink: 'syz.0.18625': attribute type 13 has an invalid length. [ 1633.727286][T21971] netlink: 244 bytes leftover after parsing attributes in process `syz.1.18624'. [ 1633.736802][T21969] netlink: 'syz.0.18625': attribute type 17 has an invalid length. [ 1633.769671][T21975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18625'. [ 1633.811582][T21977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18624'. [ 1633.836393][T21969] syz_tun: left promiscuous mode [ 1633.943317][T21964] netlink: 'syz.3.18622': attribute type 10 has an invalid length. [ 1634.105162][T21977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18624'. [ 1635.238918][ T5654] block nbd9: Receive control failed (result -1) [ 1635.810254][T22023] __nla_validate_parse: 5 callbacks suppressed [ 1635.810275][T22023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18634'. [ 1636.336384][T22029] syzkaller0: entered promiscuous mode [ 1636.336456][T22033] netlink: 'syz.4.18636': attribute type 13 has an invalid length. [ 1636.336476][T22033] netlink: 'syz.4.18636': attribute type 17 has an invalid length. [ 1636.369106][T22029] syzkaller0: entered allmulticast mode [ 1636.410438][T22033] tipc: Resetting bearer [ 1636.425632][T22034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18636'. [ 1637.324523][ T3376] net_ratelimit: 13 callbacks suppressed [ 1637.324546][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.967748][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.536323][T22077] netlink: 52 bytes leftover after parsing attributes in process `syz.4.18645'. [ 1638.604839][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.127814][T22093] netlink: 'syz.4.18649': attribute type 13 has an invalid length. [ 1639.163561][T22093] netlink: 'syz.4.18649': attribute type 17 has an invalid length. [ 1639.171299][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.202784][T22097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18649'. [ 1639.263370][T22093] tipc: Resetting bearer [ 1639.384850][T22093] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1639.883831][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.893105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.085988][T22124] netlink: 64 bytes leftover after parsing attributes in process `syz.0.18658'. [ 1640.276692][T22121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18657'. [ 1640.287484][T22124] netlink: 'syz.0.18658': attribute type 1 has an invalid length. [ 1640.648979][T22134] netlink: 'syz.0.18658': attribute type 3 has an invalid length. [ 1640.741408][T22134] netlink: 3 bytes leftover after parsing attributes in process `syz.0.18658'. [ 1640.971022][T22138] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1641.013511][T22147] netlink: 'syz.2.18659': attribute type 13 has an invalid length. [ 1641.041494][T22147] netlink: 'syz.2.18659': attribute type 17 has an invalid length. [ 1641.049745][T22138] bond18: (slave bond19): making interface the new active one [ 1641.066256][T22138] bond18: (slave bond19): Enslaving as an active interface with an up link [ 1641.355766][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18659'. [ 1641.419852][T22144] tipc: Resetting bearer [ 1641.527085][T22161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18664'. [ 1641.648694][T22162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18666'. [ 1641.772550][T22144] tipc: Resetting bearer [ 1642.061525][T22147] 8021q: adding VLAN 0 to HW filter on device  [ 1642.080288][T22147] tipc: Resetting bearer [ 1642.087183][T22147] tipc: Resetting bearer [ 1642.119436][ T946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.128660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.143543][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.221928][T22147] veth1_vlan: left promiscuous mode [ 1642.250977][T22147] veth1_vlan: entered promiscuous mode [ 1642.297856][T22147] veth1_macvtap: left promiscuous mode [ 1642.310333][T22147] veth1_macvtap: entered promiscuous mode [ 1643.086118][ T938] net_ratelimit: 1 callbacks suppressed [ 1643.086140][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.112352][T22191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18671'. [ 1643.117664][T22199] Cannot find del_set index 0 as target [ 1643.324661][T22195] netlink: 'syz.2.18671': attribute type 3 has an invalid length. [ 1643.734585][T22212] netlink: 'syz.3.18675': attribute type 13 has an invalid length. [ 1643.775848][T22212] netlink: 'syz.3.18675': attribute type 17 has an invalid length. [ 1643.819278][T22212] tipc: Resetting bearer [ 1643.826194][T22214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18675'. [ 1643.867510][T22212] tipc: Resetting bearer [ 1643.918296][T22212] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check. [ 1644.252434][T22221] netlink: 'syz.3.18677': attribute type 13 has an invalid length. [ 1644.291272][T22221] netlink: 'syz.3.18677': attribute type 17 has an invalid length. [ 1644.364020][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.508239][T22219] tipc: Resetting bearer [ 1644.590478][T22219] tipc: Resetting bearer [ 1644.665924][T22229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18678'. [ 1644.729868][T22231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18677'. [ 1644.817878][ T29] audit: type=1800 audit(1780530699.355:28): pid=22207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18674" name="memory.events" dev="tmpfs" ino=19128 res=0 errno=0 [ 1645.015597][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1645.240532][T22241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1645.452109][ T42] lo speed is unknown, defaulting to 1000 [ 1645.490964][T22221] tipc: Resetting bearer [ 1645.515010][T22221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1645.531563][T22221] tipc: Resetting bearer [ 1645.552330][T22221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1645.638674][T22221] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1645.661908][T22221] veth0_macvtap: left promiscuous mode [ 1645.681585][T22221] veth0_macvtap: entered promiscuous mode [ 1645.696658][T22221] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check. [ 1645.767598][T22245] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved [ 1645.783112][ T42] lo speed is unknown, defaulting to 1000 [ 1647.109972][T22263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18686'. [ 1647.260220][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.270686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.568823][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1647.708078][T22273] netlink: 'syz.3.18687': attribute type 10 has an invalid length. [ 1647.769295][T22273] netlink: 41 bytes leftover after parsing attributes in process `syz.3.18687'. [ 1647.847013][T22273] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18687'. [ 1647.924482][T22273] netlink: 41 bytes leftover after parsing attributes in process `syz.3.18687'. [ 1648.242421][T22296] netlink: 'syz.0.18694': attribute type 13 has an invalid length. [ 1648.277933][T22296] netlink: 'syz.0.18694': attribute type 17 has an invalid length. [ 1648.559202][T22302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18694'. [ 1648.580050][T22303] netlink: 'syz.3.18695': attribute type 13 has an invalid length. [ 1648.613027][T22303] netlink: 'syz.3.18695': attribute type 17 has an invalid length. [ 1648.797182][T22295] tipc: Resetting bearer [ 1648.875874][T22308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18695'. [ 1649.485120][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.045159][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.403117][T22296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.427862][T22296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1650.470921][ T3281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1650.554799][T22296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1650.575595][T22296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1650.581682][T22327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18699'. [ 1650.596465][T22296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1650.622205][T22296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1650.644206][T22296] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1650.709266][T22300] tipc: Resetting bearer [ 1650.766373][T22300] tipc: Resetting bearer [ 1651.550720][T22303] tipc: Resetting bearer [ 1651.589951][T22303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.629388][T22303] tipc: Resetting bearer [ 1651.690093][T22303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.867277][T22303] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1651.896569][T22303] veth0_macvtap: left promiscuous mode [ 1651.911276][T22303] veth0_macvtap: entered promiscuous mode [ 1651.933996][T22303] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check. [ 1652.002739][ T5774] lo speed is unknown, defaulting to 1000 [ 1652.008078][ T5754] lo speed is unknown, defaulting to 1000 [ 1652.415214][T22345] netlink: 'syz.1.18702': attribute type 10 has an invalid length. [ 1652.685705][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1652.694460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.228484][T22355] netlink: 'syz.3.18705': attribute type 10 has an invalid length. [ 1653.326214][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.329585][T22364] netlink: 41 bytes leftover after parsing attributes in process `syz.3.18705'. [ 1653.403233][T22364] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18705'. [ 1653.446579][T22364] netlink: 41 bytes leftover after parsing attributes in process `syz.3.18705'. [ 1653.566939][T22374] netlink: 'syz.0.18710': attribute type 13 has an invalid length. [ 1653.593500][T22374] netlink: 'syz.0.18710': attribute type 17 has an invalid length. [ 1653.959802][T22379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18710'. [ 1654.016133][T22372] tipc: Resetting bearer [ 1654.606515][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.051858][T22374] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.076887][T22374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1655.098961][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.155613][T22374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1655.169345][T22374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1655.189136][T22374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1655.206141][T22374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1655.225926][T22374] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1655.245371][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.325418][T22397] netlink: 'syz.1.18714': attribute type 13 has an invalid length. [ 1655.358607][T22397] netlink: 'syz.1.18714': attribute type 17 has an invalid length. [ 1655.428951][T22396] tipc: Resetting bearer [ 1655.652032][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18714'. [ 1656.300829][T22397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1656.314746][T22397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.329380][T22397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1656.347561][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.358868][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1656.457369][T22397] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1656.474038][ T42] lo speed is unknown, defaulting to 1000 [ 1656.504813][T22409] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1656.524653][T22332] lo speed is unknown, defaulting to 1000 [ 1656.562771][T22409] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1656.593284][T22409] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1656.776403][T22423] netlink: 'syz.0.18719': attribute type 10 has an invalid length. [ 1656.819788][T22423] syz_tun: entered promiscuous mode [ 1657.242317][T22432] netlink: 'syz.3.18723': attribute type 1 has an invalid length. [ 1657.271540][T22435] netlink: 'syz.1.18721': attribute type 10 has an invalid length. [ 1657.301268][T22432] netlink: 224 bytes leftover after parsing attributes in process `syz.3.18723'. [ 1657.326515][T22435] netlink: 41 bytes leftover after parsing attributes in process `syz.1.18721'. [ 1657.368497][T22435] netlink: 140 bytes leftover after parsing attributes in process `syz.1.18721'. [ 1657.376195][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18724'. [ 1657.381465][T22435] netlink: 41 bytes leftover after parsing attributes in process `syz.1.18721'. [ 1657.400167][T22432] netlink: 'syz.3.18723': attribute type 10 has an invalid length. [ 1657.420631][T22432] netlink: 'syz.3.18723': attribute type 10 has an invalid length. [ 1657.602588][T22446] tipc: Resetting bearer [ 1657.608740][T22446] tipc: Resetting bearer [ 1657.618274][T22446] tipc: Resetting bearer [ 1657.624706][T22446] tipc: Resetting bearer [ 1657.652717][T22446] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1657.905097][T22452] lo speed is unknown, defaulting to 1000 [ 1657.924917][T22455] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1657.946511][T22452] lo speed is unknown, defaulting to 1000 [ 1657.979173][T22452] lo speed is unknown, defaulting to 1000 [ 1658.443848][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.452907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.041376][T22481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18734'. [ 1659.777790][T22496] netlink: 'syz.1.18737': attribute type 10 has an invalid length. [ 1660.116478][T22502] veth0_vlan: entered allmulticast mode [ 1660.208706][T16435] tipc: Resetting bearer [ 1660.330772][T22501] net_ratelimit: 3 callbacks suppressed [ 1660.330794][T22501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.345626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.366893][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.378235][T22501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.388936][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.403428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.450102][T22501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18740'. [ 1660.531908][T22509] netlink: 'syz.3.18743': attribute type 13 has an invalid length. [ 1660.881761][T22500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.891334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.460622][T22509] tipc: Resetting bearer [ 1661.469807][T22509] tipc: Resetting bearer [ 1661.647149][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.659181][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.918286][T22563] tipc: Enabled bearer , priority 0 [ 1663.047789][T22569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18754'. [ 1663.158910][T22563] syzkaller0: entered promiscuous mode [ 1663.183070][T22563] syzkaller0: entered allmulticast mode [ 1663.189483][T22572] netlink: 'syz.1.18755': attribute type 10 has an invalid length. [ 1663.199741][T22563] tipc: Resetting bearer [ 1663.259859][T22561] tipc: Resetting bearer [ 1663.704461][T22559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18753'. [ 1664.293285][T22588] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18758'. [ 1665.338577][T22598] net_ratelimit: 344 callbacks suppressed [ 1665.338601][T22598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.396614][T22598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.417151][T22598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.434124][T22598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.451435][T22598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.478518][T22598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.495369][T22598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.512479][T22598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.538637][T22598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.565326][T22598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.578932][T22605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18760'. [ 1665.827823][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880aa610400: rx timeout, send abort [ 1666.347256][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880aa613000: rx timeout, send abort [ 1666.355554][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880aa610400: abort rx timeout. Force session deactivation [ 1666.459545][T22614] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18761'. [ 1666.863781][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880aa613000: abort rx timeout. Force session deactivation [ 1670.692692][T22561] tipc: Disabling bearer [ 1670.707084][T22539] [ 1670.709670][T22539] ====================================================== [ 1670.716901][T22539] WARNING: possible circular locking dependency detected [ 1670.723947][T22539] syzkaller #0 Not tainted [ 1670.728586][T22539] ------------------------------------------------------ [ 1670.735640][T22539] syz.3.18747/22539 is trying to acquire lock: [ 1670.741844][T22539] ffffffff8ea85600 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 1670.751315][T22539] [ 1670.751315][T22539] but task is already holding lock: [ 1670.758720][T22539] ffff888034d8e530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 1670.767996][T22539] [ 1670.767996][T22539] which lock already depends on the new lock. [ 1670.767996][T22539] [ 1670.778436][T22539] [ 1670.778436][T22539] the existing dependency chain (in reverse order) is: [ 1670.787805][T22539] [ 1670.787805][T22539] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 1670.795416][T22539] __mutex_lock+0x1a3/0x1550 [ 1670.800570][T22539] __ipv6_dev_mc_inc+0x4e/0xa50 [ 1670.805968][T22539] addrconf_join_solict+0x104/0x190 [ 1670.811712][T22539] __ipv6_dev_ac_inc+0x87b/0xaf0 [ 1670.817224][T22539] ipv6_sock_ac_join+0x6a8/0x880 [ 1670.822730][T22539] do_ipv6_setsockopt+0x203a/0x3150 [ 1670.828498][T22539] ipv6_setsockopt+0x59/0x170 [ 1670.833847][T22539] do_sock_setsockopt+0x17c/0x1b0 [ 1670.839494][T22539] __x64_sys_setsockopt+0x13d/0x1b0 [ 1670.845279][T22539] do_syscall_64+0x174/0x580 [ 1670.850434][T22539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.856890][T22539] [ 1670.856890][T22539] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1670.864761][T22539] lock_sock_nested+0x41/0x100 [ 1670.870098][T22539] inet_shutdown+0x6a/0x390 [ 1670.875258][T22539] nbd_mark_nsock_dead+0x2e9/0x560 [ 1670.880935][T22539] sock_shutdown+0x15e/0x260 [ 1670.886526][T22539] nbd_clear_sock+0x24/0x170 [ 1670.891745][T22539] nbd_config_put+0x2dd/0x580 [ 1670.897006][T22539] nbd_genl_connect+0x19d5/0x1cf0 [ 1670.902608][T22539] genl_family_rcv_msg_doit+0x22a/0x330 [ 1670.908730][T22539] genl_rcv_msg+0x61c/0x7a0 [ 1670.913793][T22539] netlink_rcv_skb+0x232/0x4b0 [ 1670.919126][T22539] genl_rcv+0x28/0x40 [ 1670.923680][T22539] netlink_unicast+0x75c/0x8e0 [ 1670.929016][T22539] netlink_sendmsg+0x813/0xb40 [ 1670.934342][T22539] ____sys_sendmsg+0x972/0x9f0 [ 1670.939652][T22539] ___sys_sendmsg+0x2a5/0x360 [ 1670.944886][T22539] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1670.950393][T22539] do_syscall_64+0x174/0x580 [ 1670.955641][T22539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.962102][T22539] [ 1670.962102][T22539] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1670.969799][T22539] __mutex_lock+0x1a3/0x1550 [ 1670.974957][T22539] nbd_queue_rq+0x37b/0x1100 [ 1670.980195][T22539] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1670.986381][T22539] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1670.993270][T22539] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1670.999803][T22539] blk_mq_run_hw_queue+0x348/0x4f0 [ 1671.005480][T22539] blk_mq_dispatch_list+0xd16/0xe10 [ 1671.011269][T22539] blk_mq_flush_plug_list+0x48d/0x570 [ 1671.017219][T22539] __blk_flush_plug+0x3ed/0x4d0 [ 1671.022716][T22539] __submit_bio+0x28d/0x580 [ 1671.027768][T22539] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1671.033950][T22539] block_read_full_folio+0x7b7/0x830 [ 1671.039773][T22539] filemap_read_folio+0x137/0x3b0 [ 1671.045346][T22539] do_read_cache_folio+0x358/0x590 [ 1671.051005][T22539] read_part_sector+0xb6/0x2b0 [ 1671.056312][T22539] adfspart_check_ICS+0xb1/0x960 [ 1671.061789][T22539] bdev_disk_changed+0x817/0x1770 [ 1671.067359][T22539] blkdev_get_whole+0x380/0x510 [ 1671.072760][T22539] bdev_open+0x31e/0xd30 [ 1671.077636][T22539] blkdev_open+0x470/0x610 [ 1671.082599][T22539] do_dentry_open+0x822/0x13a0 [ 1671.087917][T22539] vfs_open+0x3b/0x340 [ 1671.092556][T22539] path_openat+0x2e08/0x3860 [ 1671.097728][T22539] do_file_open+0x23e/0x4a0 [ 1671.102800][T22539] do_sys_openat2+0x113/0x200 [ 1671.108045][T22539] __x64_sys_openat+0x138/0x170 [ 1671.113471][T22539] do_syscall_64+0x174/0x580 [ 1671.118727][T22539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.125199][T22539] [ 1671.125199][T22539] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1671.132470][T22539] __mutex_lock+0x1a3/0x1550 [ 1671.137629][T22539] nbd_queue_rq+0xc6/0x1100 [ 1671.142955][T22539] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1671.149076][T22539] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1671.155986][T22539] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1671.162534][T22539] blk_mq_run_hw_queue+0x348/0x4f0 [ 1671.168187][T22539] blk_mq_dispatch_list+0xd16/0xe10 [ 1671.174103][T22539] blk_mq_flush_plug_list+0x48d/0x570 [ 1671.180026][T22539] __blk_flush_plug+0x3ed/0x4d0 [ 1671.185454][T22539] __submit_bio+0x28d/0x580 [ 1671.190528][T22539] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1671.196715][T22539] block_read_full_folio+0x7b7/0x830 [ 1671.203070][T22539] filemap_read_folio+0x137/0x3b0 [ 1671.208736][T22539] do_read_cache_folio+0x358/0x590 [ 1671.214657][T22539] read_part_sector+0xb6/0x2b0 [ 1671.219988][T22539] adfspart_check_ICS+0xb1/0x960 [ 1671.225467][T22539] bdev_disk_changed+0x817/0x1770 [ 1671.231036][T22539] blkdev_get_whole+0x380/0x510 [ 1671.236432][T22539] bdev_open+0x31e/0xd30 [ 1671.241473][T22539] blkdev_open+0x470/0x610 [ 1671.246436][T22539] do_dentry_open+0x822/0x13a0 [ 1671.251736][T22539] vfs_open+0x3b/0x340 [ 1671.256433][T22539] path_openat+0x2e08/0x3860 [ 1671.261616][T22539] do_file_open+0x23e/0x4a0 [ 1671.266698][T22539] do_sys_openat2+0x113/0x200 [ 1671.271947][T22539] __x64_sys_openat+0x138/0x170 [ 1671.277451][T22539] do_syscall_64+0x174/0x580 [ 1671.282610][T22539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.289083][T22539] [ 1671.289083][T22539] -> #3 (set->srcu){.+.+}-{0:0}: [ 1671.296464][T22539] __synchronize_srcu+0xca/0x300 [ 1671.302039][T22539] elevator_switch+0x1e8/0x7a0 [ 1671.307499][T22539] elevator_change+0x2cc/0x450 [ 1671.312865][T22539] elevator_set_default+0x36c/0x430 [ 1671.318637][T22539] blk_register_queue+0x3e9/0x4e0 [ 1671.324240][T22539] __add_disk+0x677/0xd50 [ 1671.329225][T22539] add_disk_fwnode+0xfb/0x480 [ 1671.334464][T22539] nbd_dev_add+0x72c/0xb50 [ 1671.339466][T22539] nbd_init+0x168/0x1f0 [ 1671.344188][T22539] do_one_initcall+0x250/0x870 [ 1671.349676][T22539] do_initcall_level+0x104/0x190 [ 1671.355187][T22539] do_initcalls+0x59/0xa0 [ 1671.360089][T22539] kernel_init_freeable+0x2a6/0x3e0 [ 1671.365861][T22539] kernel_init+0x1d/0x1d0 [ 1671.370750][T22539] ret_from_fork+0x514/0xb70 [ 1671.375889][T22539] ret_from_fork_asm+0x1a/0x30 [ 1671.381222][T22539] [ 1671.381222][T22539] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1671.389096][T22539] __mutex_lock+0x1a3/0x1550 [ 1671.394253][T22539] elevator_change+0x1b3/0x450 [ 1671.399773][T22539] elevator_set_none+0xb5/0x140 [ 1671.405209][T22539] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1671.412025][T22539] nbd_start_device+0x17f/0xb10 [ 1671.417443][T22539] nbd_genl_connect+0x165b/0x1cf0 [ 1671.423036][T22539] genl_family_rcv_msg_doit+0x22a/0x330 [ 1671.429156][T22539] genl_rcv_msg+0x61c/0x7a0 [ 1671.434211][T22539] netlink_rcv_skb+0x232/0x4b0 [ 1671.439544][T22539] genl_rcv+0x28/0x40 [ 1671.444096][T22539] netlink_unicast+0x75c/0x8e0 [ 1671.449414][T22539] netlink_sendmsg+0x813/0xb40 [ 1671.454749][T22539] ____sys_sendmsg+0x972/0x9f0 [ 1671.460064][T22539] ___sys_sendmsg+0x2a5/0x360 [ 1671.465299][T22539] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1671.470785][T22539] do_syscall_64+0x174/0x580 [ 1671.475942][T22539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.482523][T22539] [ 1671.482523][T22539] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1671.491502][T22539] blk_alloc_queue+0x546/0x680 [ 1671.496824][T22539] __blk_mq_alloc_disk+0x197/0x390 [ 1671.502484][T22539] nbd_dev_add+0x499/0xb50 [ 1671.507469][T22539] nbd_init+0x168/0x1f0 [ 1671.512185][T22539] do_one_initcall+0x250/0x870 [ 1671.517610][T22539] do_initcall_level+0x104/0x190 [ 1671.523122][T22539] do_initcalls+0x59/0xa0 [ 1671.528090][T22539] kernel_init_freeable+0x2a6/0x3e0 [ 1671.533878][T22539] kernel_init+0x1d/0x1d0 [ 1671.538782][T22539] ret_from_fork+0x514/0xb70 [ 1671.543927][T22539] ret_from_fork_asm+0x1a/0x30 [ 1671.549255][T22539] [ 1671.549255][T22539] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1671.556600][T22539] __lock_acquire+0x15a5/0x2cf0 [ 1671.562024][T22539] lock_acquire+0x106/0x350 [ 1671.567085][T22539] fs_reclaim_acquire+0x71/0x100 [ 1671.572588][T22539] __kmalloc_cache_noprof+0x40/0x660 [ 1671.578428][T22539] __ipv6_dev_mc_inc+0x44f/0xa50 [ 1671.583903][T22539] __ipv6_sock_mc_join+0x503/0x750 [ 1671.589665][T22539] inet6_addr_add+0x3cf/0xb20 [ 1671.595000][T22539] inet6_rtm_newaddr+0xa17/0xe30 [ 1671.600589][T22539] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1671.606068][T22539] netlink_rcv_skb+0x232/0x4b0 [ 1671.611389][T22539] netlink_unicast+0x75c/0x8e0 [ 1671.616698][T22539] netlink_sendmsg+0x813/0xb40 [ 1671.622012][T22539] ____sys_sendmsg+0x972/0x9f0 [ 1671.627404][T22539] ___sys_sendmsg+0x2a5/0x360 [ 1671.632621][T22539] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1671.638110][T22539] do_syscall_64+0x174/0x580 [ 1671.643284][T22539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.649751][T22539] [ 1671.649751][T22539] other info that might help us debug this: [ 1671.649751][T22539] [ 1671.660018][T22539] Chain exists of: [ 1671.660018][T22539] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 1671.660018][T22539] [ 1671.672938][T22539] Possible unsafe locking scenario: [ 1671.672938][T22539] [ 1671.680412][T22539] CPU0 CPU1 [ 1671.685877][T22539] ---- ---- [ 1671.691251][T22539] lock(&idev->mc_lock); [ 1671.695600][T22539] lock(sk_lock-AF_INET6); [ 1671.702644][T22539] lock(&idev->mc_lock); [ 1671.709530][T22539] lock(fs_reclaim); [ 1671.713637][T22539] [ 1671.713637][T22539] *** DEADLOCK *** [ 1671.713637][T22539] [ 1671.721816][T22539] 3 locks held by syz.3.18747/22539: [ 1671.727143][T22539] #0: ffffffff8fdc8e80 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 1671.736720][T22539] #1: ffff8880323f0260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_addr_add+0x3be/0xb20 [ 1671.746653][T22539] #2: ffff888034d8e530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 1671.756373][T22539] [ 1671.756373][T22539] stack backtrace: [ 1671.762307][T22539] CPU: 1 UID: 0 PID: 22539 Comm: syz.3.18747 Not tainted syzkaller #0 PREEMPT(full) [ 1671.762332][T22539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1671.762344][T22539] Call Trace: [ 1671.762354][T22539] [ 1671.762364][T22539] dump_stack_lvl+0xe8/0x150 [ 1671.762388][T22539] print_circular_bug+0x2e1/0x300 [ 1671.762414][T22539] check_noncircular+0x12e/0x150 [ 1671.762441][T22539] __lock_acquire+0x15a5/0x2cf0 [ 1671.762464][T22539] ? rcu_is_watching+0x15/0xb0 [ 1671.762494][T22539] ? trace_contention_end+0x3d/0x140 [ 1671.762520][T22539] ? __mutex_lock+0x319/0x1550 [ 1671.762545][T22539] ? __kmalloc_cache_noprof+0x40/0x660 [ 1671.762569][T22539] lock_acquire+0x106/0x350 [ 1671.762587][T22539] ? __kmalloc_cache_noprof+0x40/0x660 [ 1671.762613][T22539] ? __pfx___mutex_lock+0x10/0x10 [ 1671.762636][T22539] fs_reclaim_acquire+0x71/0x100 [ 1671.762663][T22539] ? __kmalloc_cache_noprof+0x40/0x660 [ 1671.762687][T22539] __kmalloc_cache_noprof+0x40/0x660 [ 1671.762713][T22539] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 1671.762735][T22539] __ipv6_dev_mc_inc+0x44f/0xa50 [ 1671.762760][T22539] __ipv6_sock_mc_join+0x503/0x750 [ 1671.762785][T22539] inet6_addr_add+0x3cf/0xb20 [ 1671.762808][T22539] inet6_rtm_newaddr+0xa17/0xe30 [ 1671.762837][T22539] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 1671.762859][T22539] ? __dev_queue_xmit+0x2b6/0x3950 [ 1671.762885][T22539] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1671.762910][T22539] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 1671.762934][T22539] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1671.762953][T22539] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1671.762969][T22539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1671.762985][T22539] ? ref_tracker_free+0x693/0x840 [ 1671.763007][T22539] ? __pfx_ref_tracker_free+0x10/0x10 [ 1671.763032][T22539] netlink_rcv_skb+0x232/0x4b0 [ 1671.763054][T22539] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1671.763071][T22539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1671.763097][T22539] ? netlink_deliver_tap+0x2e/0x1b0 [ 1671.763117][T22539] ? netlink_deliver_tap+0x2e/0x1b0 [ 1671.763139][T22539] netlink_unicast+0x75c/0x8e0 [ 1671.763163][T22539] netlink_sendmsg+0x813/0xb40 [ 1671.763188][T22539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1671.763209][T22539] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1671.763235][T22539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1671.763261][T22539] ____sys_sendmsg+0x972/0x9f0 [ 1671.763282][T22539] ? __might_fault+0xaf/0x130 [ 1671.763308][T22539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1671.763333][T22539] ? import_iovec+0x73/0xa0 [ 1671.763357][T22539] ___sys_sendmsg+0x2a5/0x360 [ 1671.763376][T22539] ? __lock_acquire+0x6b5/0x2cf0 [ 1671.763399][T22539] ? __pfx____sys_sendmsg+0x10/0x10 [ 1671.763422][T22539] ? futex_wait+0x2a2/0x390 [ 1671.763459][T22539] ? __fget_files+0x2a/0x420 [ 1671.763489][T22539] ? __fget_files+0x3a0/0x420 [ 1671.763515][T22539] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1671.763537][T22539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1671.763563][T22539] ? rcu_is_watching+0x15/0xb0 [ 1671.763589][T22539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.763609][T22539] do_syscall_64+0x174/0x580 [ 1671.763628][T22539] ? trace_irq_disable+0x3b/0x140 [ 1671.763656][T22539] ? clear_bhb_loop+0x40/0x90 [ 1671.763676][T22539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.763694][T22539] RIP: 0033:0x7f0bce19ce59 [ 1671.763712][T22539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.763727][T22539] RSP: 002b:00007f0bcf0b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1671.763746][T22539] RAX: ffffffffffffffda RBX: 00007f0bce415fa0 RCX: 00007f0bce19ce59 [ 1671.763759][T22539] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c [ 1671.763771][T22539] RBP: 00007f0bce232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1671.763783][T22539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1671.763794][T22539] R13: 00007f0bce416038 R14: 00007f0bce415fa0 R15: 00007ffd98791988 [ 1671.763816][T22539] [ 1671.914554][ T1024] net_ratelimit: 684 callbacks suppressed [ 1671.914588][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.944910][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.983207][ T5647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.989959][T22599] tipc: Enabling of bearer rejected, already enabled [ 1672.164541][ T5647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1672.443293][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.163639][T16435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.004396][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.084897][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.093319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.644109][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.652734][ T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1677.658919][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.923970][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.204419][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.213034][ T938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.222167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog