last executing test programs: 10.831965814s ago: executing program 1 (id=6040): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000480), 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="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", 0xfb}, {&(0x7f0000000140)="a1c3ec03c1cd71256d6f46ee55dfbeceed4e5e13465c1f57e95f517d4858b9e79e4bacc5f728b110dc2649ae81", 0x2d}], 0x2}, 0x4000004) 10.721263799s ago: executing program 1 (id=6041): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x6, 0xb, 0x0, 0x0, @str='$\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, 0x1, 0x1, 0xd01, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a990390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8001) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x7, 0x0, {{0xd, 0x4, 0x3, 0x9, 0x34, 0x65, 0x0, 0x7d, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x6, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x0, [{@private=0xa010100, 0x1}, {@loopback, 0x40}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32, @ANYBLOB], 0x28}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x4, 0x7, 0x68, @mcast2, @private1, 0x80, 0x710, 0x6, 0x81}}) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) 9.92658779s ago: executing program 1 (id=6047): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00', 0x1ff}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000240)=""/129, &(0x7f0000000000)=0x81) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) close(0x3) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0xfff) write$ppp(r1, &(0x7f0000000140)="1e08", 0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x13, r0, 0x54c5a000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800) 8.920514768s ago: executing program 1 (id=6056): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x1, "be"}, &(0x7f0000000040)=0x9) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={r1, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000140)=0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000300)) 8.687809696s ago: executing program 1 (id=6059): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0xb051}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80000000, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) write$tun(r2, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "7580485a402bf08bb0a89c3f0b3c3ab25eba4a04c60808bf3507b6eb705f3c02", "e0d6370ae4bef1c38d2d97385a7d432a", {"5afb05b0120ec4dd832c0cf27c7c4c03", "b8e4daaa6228da2e49b8081579ab3712"}}}}}, 0x86) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x5e}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000640)={0x278, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x264, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x75}, @ETHTOOL_A_BITSET_VALUE={0x57, 0x4, "a63c96471ed8ed42e592fdf5fab6ee8fa545ca0235225fc1a9a2ea13ea87a9ca56cac466e87a1493b3f0e9810ee82f0f6e58ecf081b0e5c2047e6e76f3aa405b85b2519a20f9e5b052eac5841ed60d3b380453"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '}@\'*(.\'\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2529}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff0000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "cdb8feec8eefb777944fbe12886a62ae07a30adaa5312f2acc840411d2cde0ead168108b9b80d471b8126551fa407a721aa659bae36978c7b4e294263b0201bcf34f1602daea34ab87626c465d1e7295fb17f4e3ff7cbba689255a122b6fe4e345fca290b526096d48f988a779fbe18029c310aff01f48060aafcab16ea35d0d6a6589ce3ba66173d070391fd1ac"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xdc, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ' \x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x48ff8240}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$*t-@$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}]}]}]}]}, 0x278}}, 0x40002) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 7.969042886s ago: executing program 1 (id=6062): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, 0x0, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000700)=0x41, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x8, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}], 0x38}], 0x1, 0x4000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000002010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000002c9f9c3428f64b38ee0fc2f4da2c2182ce3bdbc5dd107abab5b82cf9e0db566accdede7e9c393c1f75a05fe2b926f8c388099b52d79a7f1ad8aac69731ffae13aaa6e898ca09ab11e30180a2502017e964"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) socket$inet6(0xa, 0x80802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) listen(r3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)=ANY=[@ANYBLOB="2d000000b8b544be9ef7d29431ad3881e119c3b38cd9e79edd9a13c43e01b6f8e990168b80e16fe19a16462c3cc1e30a88653ad5029bc479", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf256d00000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x8090) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18e248915b0000002500010324bd7002ffdb000000000000000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x2) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair(0x25, 0x5, 0x0, &(0x7f0000000040)) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000002840)={0x1}, 0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000001780)=""/4104, 0x1008}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000240)=""/84, 0x54}], 0x4}, 0x40) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f00000000c0)='\'\x00', 0x309000, &(0x7f0000000180)={@align=0x25b, {0x0, 0x98b8, 0xb, 0x6}}, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x44d}, {[0x6, 0x4b, 0x3, 0x4]}, 0x4, 0x22, &(0x7f0000000240)=""/34}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000001f0000540000000e0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x984505e3a9489c8e}, 0xc, &(0x7f0000000640)={&(0x7f00000009c0)={0xa8, r10, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40005) 3.418002078s ago: executing program 4 (id=6077): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) ioctl$XFS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000600)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0xb8}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}]}, &(0x7f0000000180)=0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) unshare(0x26020480) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000200)={0x2, 0x1, {0xfffffffffffffffc, @usage=0x100000000, 0x0, 0x1, 0x7, 0x7, 0x10001, 0xfffffffffffffe00, 0x8, @usage=0x9, 0xc, 0xd, [0x9, 0x3, 0x5, 0x0, 0x7ff, 0x5ff]}, {0x0, @struct={0x1, 0x1}, 0x0, 0x4, 0x8973, 0x7f, 0x5, 0x1, 0x49, @usage=0x9, 0xd1, 0x2, [0x6, 0x800, 0x6cf, 0x2, 0xdbb, 0x4]}, {0x1, @struct={0x6, 0x6}, 0x0, 0x7, 0x4, 0x8000000000000001, 0x40, 0x3, 0x20, @usage=0xd3f6, 0x6, 0xe, [0x8000, 0x1, 0x8000, 0xf, 0x5, 0x1]}, {0x5, 0x101, 0x7}}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000e00)={0x1, 0x3, @start={r11, 0x0, "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", "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"}, [0xc, 0x400, 0x4, 0x8001, 0x1, 0x6, 0x0, 0x1, 0x65, 0x2, 0x9, 0x1ff, 0x6c, 0xfff, 0x19db, 0x0, 0x1, 0x0, 0x1, 0xc2a1, 0x1ff, 0x3, 0x2094, 0x10, 0x9, 0x5, 0x100000000, 0xa400000000000000, 0x2, 0x1, 0x9, 0x100000001, 0x200, 0x1, 0x10, 0x8001, 0x4, 0x2, 0x2, 0x9, 0xffffffff, 0x3, 0x4, 0x0, 0xffff, 0x7, 0x9, 0x7ff, 0xfffffffffffffff7, 0x4, 0x0, 0x5, 0xb0ab, 0x6c44, 0xffffffffffffffff, 0x3, 0x726, 0x7fffffff, 0x8, 0x4, 0x2, 0xfffffffffffffde1, 0x2, 0x8]}) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1402, 0x0, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x200040c4) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000d80)={0x48, 0x1401, 0x1, 0x70bf2c, 0x25dfdbf9, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080) 3.112795395s ago: executing program 4 (id=6078): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x8, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x8, 0x9}, @srh={0x2c, 0x0, 0x4, 0x0, 0x8, 0x40, 0x100}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) r1 = socket(0x23, 0x80805, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x40000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffd1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r6, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r6, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032cbd7000fddbdf25010000001400ff0300000c000000000000000000000000aa"], 0x28}}, 0x40054) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000060000000000000005000000850000006f00000095"], &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r9, @ANYBLOB="01002d0c71"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) 3.025441582s ago: executing program 0 (id=6079): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x10000001, 0x5000}]}, @struct={0xe, 0x3, 0x0, 0x4, 0x0, 0x10, [{0xc, 0x1, 0x5}, {0x5, 0x0, 0x1}, {0x0, 0x2, 0x9}]}, @union={0xd, 0x3, 0x0, 0x5, 0x0, 0x9, [{0x6, 0x4, 0xfffffffe}, {0xc, 0x3, 0xb}, {0xd, 0x1, 0x5}]}]}}, &(0x7f0000000f40)=""/4089, 0x9a, 0xff9, 0xb, 0x1}, 0x28) 2.875650447s ago: executing program 0 (id=6080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newlink={0x64, 0x10, 0x401, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6200}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @gre={{0x8}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_TOS={0x5, 0x9, 0x50}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x64}}, 0x288d1) 2.702961886s ago: executing program 2 (id=6081): pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x1b, 0x0, 0x1, 0xfe, 0x6, @random="afa100"}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f00000006c0)}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYRES8=r2, @ANYRESHEX=0x0, @ANYRESOCT=r2, @ANYBLOB="8d552d7ef5297ba20fed2ff03ee8cf847d8333bff8c26e6522f41d41a167817e5c2757e7d951832b5a338a3c2d6bd0ed8a7601885dfa54a58446a63e68027ef4d1e476d472bad9dab51609732097fced8decbb14018ee910a099b0a2b440219a90040000000000000050", @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x810) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b02000000b2960000116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000140)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x92, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x8, 0x1, 0x1, 0x0, 0x1249, r3, 0x5, '\x00', r4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 2.565530332s ago: executing program 0 (id=6082): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xa3000000}}, 0x20) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000240)="f5c993fa3aff7f000b000000aef0000000000000", 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) (async) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}, {0x2b, 'cpuset'}, {0x2d, 'cpu'}, {0x2d, 'rdma'}, {0x2d, 'rdma'}, {0x2b, 'blkio'}, {0x2b, 'freezer'}]}, 0x2f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x50, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@delsa={0x10c, 0x11, 0x322, 0x70bd27, 0x25dfdbfb, {@in6=@private1, 0x4d6, 0x2, 0x3c}, [@sec_ctx={0xcf, 0x8, {0xcb, 0x8, 0x1, 0xb, 0xc3, "365b2a3b0e4472b739d2ccff92965a5af2e96b04648fe9d945eb9ec48c0e4d5a71478113a3d9047b70fd6f4a125be3ea306396c26717669141c02f5b798ad04d0de973c6a693410b82dd2ac89f89eb859b836f9a4c1a8a7a19492c4e329e9d15893ef8a93ac00ddd2bc4dffe69ffa8adec7440d7e65449ca7b40a028d3666b3dad7bb25dc37374533697899613eaa4c04225a54a9146af2cf238acabe966ffb5c3a09add85818ba8e020c3feea5270adfde36366d49b55a23557da4446baacee699a8f"}}, @offload={0xc, 0x1c, {r3, 0x2}}, @proto={0x5, 0x19, 0x32}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040090) 2.461212173s ago: executing program 3 (id=6083): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=@bridge_setlink={0x60, 0x13, 0x10, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x8, 0x1}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x39}, @IFLA_TXQLEN={0x8, 0xd, 0xfe97}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}, @IFLA_MAP={0x24, 0xe, {0x8000000000000000, 0x7, 0x0, 0x6, 0xd}}, @IFLA_IFALIASn={0x4}]}, 0x60}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, "82593c65"}]}], {0x14}}, 0x74}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$tcp_mem(r9, &(0x7f0000000140)={0x5, 0x20, 0x6, 0x20, 0xe4bb}, 0x48) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) write$tcp_mem(r8, &(0x7f00000003c0)={0x0, 0x20, 0x80000001, 0x20, 0x8000000000006}, 0xfeb0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20004000) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x4b, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x10000, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x18, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xd}]}}]}, 0x48}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x3, 0x136, [0x200000001a00, 0x0, 0x0, 0x200000001b8e, 0x200000001bbe], 0x0, 0x0, &(0x7f0000001a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x18, 0x88a2, 'veth0_to_hsr\x00', 'nr0\x00', 'team_slave_0\x00', 'bond0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0xff, 0xff, 0xf3a9e9c418b0f5f2], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@random="8359bfdb76ed", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1ae) 2.430310912s ago: executing program 0 (id=6084): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x6, 0xb, 0x0, 0x0, @str='$\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, 0x1, 0x1, 0xd01, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a990390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8001) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x7, 0x0, {{0xd, 0x4, 0x3, 0x9, 0x34, 0x65, 0x0, 0x7d, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x6, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x0, [{@private=0xa010100, 0x1}, {@loopback, 0x40}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32, @ANYBLOB], 0x28}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x4, 0x7, 0x68, @mcast2, @private1, 0x80, 0x710, 0x6, 0x81}}) r6 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) 2.304979906s ago: executing program 2 (id=6085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xbc}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}, 0x1, 0x0, 0x0, 0x420c4}, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (rerun: 32) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)=ANY=[], 0xfdef) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000004000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b000100736f636b6574000014000280080002400000000d08000140000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.838987432s ago: executing program 4 (id=6086): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x0, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) 1.65614434s ago: executing program 4 (id=6087): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000003680)=[{&(0x7f0000001400)="eb", 0x1}], 0x2000000000000138, 0xe) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001f80000000000000802000081000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000077090000fcffffffbf91000000000000b70200000200000085000000c6000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.552835337s ago: executing program 2 (id=6088): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="02017d29012918000e3580009f00011400d3de2f0600ac141415e0000001808a8972bd0b72e41082b1a3d206d2b6af6c60ab5cddcaeea9503fbad86bb4eed39266c3aaca15fd4c4462d25df645a11328ec3c533ad4226fd1857c39204d23ec390345f1"], 0xdd12}], 0x1}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007baaf8ff00000000b5080000780000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000f415b98fe3432a2b3df51477f5f05db5a95d5b"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r13, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x80000001}, {0x6, 0xfd}]}) write$ppp(r13, &(0x7f0000000140)="1e08", 0x2) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}, @IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}]}}}, @IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 1.441589986s ago: executing program 4 (id=6089): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x10, r3, 0x1, 0x25, 0x6, @random}, 0x14) (async) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x1}}, 0x10, 0x0}, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x1, 0xffff}, {0xa, 0x7}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0xd}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x7a, 0x5}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x4c}}, 0x40004) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 1.024518119s ago: executing program 0 (id=6090): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r2, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000001ffedbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a00180003030303030300004400238006001800aeff0000080017009700000008001c00ff070000060001"], 0x74}}, 0x0) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (rerun: 64) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000002f80)="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", 0xbe8}, {&(0x7f0000000580)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db06f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}], 0x7}}], 0x1, 0x8800) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x604ab000) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) (async) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000240)) 991.863007ms ago: executing program 3 (id=6091): r0 = socket$inet(0x2, 0x3, 0xa) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xd0, 0xe138, 0x198, 0xd0, 0x198, 0x1c8, 0x358, 0x358, 0x1c8, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0xfffffffffffffebc, 0xd8}, @common=@SET={0x0, 'SET\x00', 0x0, {{0x3, [0x6, 0x5, 0x5, 0x4, 0x0, 0x3], 0x2, 0x3}, {0x1, [0x4, 0x4, 0x3, 0x3, 0x0, 0x7], 0x6, 0x2}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x3, 0x1, 0x6, 0x4, 0x2], 0x4, 0x4}, {0x1, [0x2, 0x4, 0x91a73a794c99a8a0, 0x1, 0x2, 0x4], 0x0, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x249) 849.552679ms ago: executing program 4 (id=6092): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 844.577142ms ago: executing program 2 (id=6093): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="29c726bd7000fedbc8251900000008000300", @ANYRES64=r2], 0x1c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000280)=""/150, &(0x7f0000000340)=0x96) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000000150a01020000000000000000000000070900010073797a30000000000900010173797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) 822.40409ms ago: executing program 3 (id=6094): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000800)="166973159fca3fa38fb198e9a6b363ceb3e6d84d6bf686785f5f57d14a0b3457474fe6a51657e4124fcca96a873b10996816e100ed8a79b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000880)="088d85d1f427ccf9b11caca442b2a4af8e69b0c132387b8de793ab327e16f27134fe420c1f7a1589836c736d2341f792240f6f79ec9095e2206e7eaa8a8b03fb89682954d08feafc4e009b7ad23f7c18a49c875b5b7266fc799ed90a099cedfe0c5742ce1e39005e2c449470", 0x6c}, {&(0x7f0000000240)="dfaa000000000000000000", 0xb}, {&(0x7f0000003180)="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", 0xe6d}], 0x5}, 0x40080) (rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000e80)={0x10, 0x5, {0xffffffffffffffff, @struct={0xfffff801, 0xff}, 0x0, 0x1, 0x3, 0xe, 0x12, 0x8, 0x53, @usage=0x8000, 0xbb7, 0x6, [0x7, 0xf3, 0x8000000000000000, 0xff, 0x8000, 0x99]}, {0x401, @struct={0x8}, 0x0, 0xc, 0x7166, 0xcb8, 0x7fff, 0x7, 0x24, @struct={0x5, 0x4d6d}, 0x401, 0x8, [0x74, 0x9, 0x3, 0x5, 0xffffffffffff2e0c, 0x4]}, {0x1, @usage, 0x0, 0x5b, 0x81, 0x8, 0x1ff, 0x8, 0xe8, @usage=0x7, 0x2, 0x1, [0x1, 0x8, 0x7, 0xfffffffffffffffd, 0xe3f8, 0x5]}, {0xb, 0x4, 0xffff}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000000000000000000001100000851000000600000018000000000000000000000000800000650000000000000018000000000000000000000000000000950000000000000064030000000000009500f6ff00000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b0000130007800800050000000000"], 0x38}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044859}, 0x0) (async, rerun: 32) r10 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[@ANYBLOB="7c010000f2b172b7256325839d1679487d95ba9a638afd8d458ed4fc79d9c80d9b7ed14ceccc31d7de8f085f", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fbdbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x84}, 0x4) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 710.499705ms ago: executing program 0 (id=6095): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x37, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="e4f67f", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000400)="fcd83b", 0x3}, {&(0x7f0000000480)='lR', 0x2}, {&(0x7f00000004c0)="7f5e69bd", 0x4}, {&(0x7f0000000500)="e01ed5cd", 0x4}, {&(0x7f00000005c0)="2247b041a5", 0x5}, {&(0x7f00000006c0)="512d14064b", 0x5}, {&(0x7f0000000780)="bb30a1f076b7921928c0410a8d6661727b2c81", 0x13}, {&(0x7f0000000880)="45d8ceb80043", 0x6}, {&(0x7f0000000980)='HV', 0x2}], 0x9}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000b40)="54a50b9f", 0x4}, {&(0x7f0000000c00)="821e128a7850e7347915d26fcc41f97b8179c7b0e9a36229b8f784016cc5ebd53f7e8678778d4dcc0fbde4bec300ee267a347ab769e92c9a974c02232f28b6320b1c839f7ab537aed286c2e9901d6cf061b55b36c3145ea35daa541fd37c81186562084ff6e3f24d966ac0e1b9cdb2eaa972bc892752fa7966b10865b770de4700bd9694c5da4b498cf51385fc3f2654f06dfd8ba370d0e001a09c3edb918155d28d46d723e49c0265b87956ed3f17fee914ca4d2e7084ee7683e7c4c3af51125a856786d07a9efc614a2cd4bc7d9a49086644b5afd55ba531a53ebc32e33743b302cd5526545248c837564c77fe7647f224e64337ab5460c9bb6208afbb0eead1239b9146dd482041f76a58db4fd715bcfc7657137450e584ff58efd805f8a52cbcad1e425144fd0c552c07b544e29373ef62a2b090ac90d2e5f83fb68e42642b2a6fe75f9ae7069cd92486f009ea923a082d72153302cb95d5a755a12a570d4865959afe10a07670dfafcdc0ff49dfe610396c53dc96f3bf37ea29e43249eec32ae9ce447f1b3cb77a7378119bcb5cf1ce725c1497f7895a4b665b52005b26b0052b16c25599da295832c4aac9011af75af53e69ec21cb757faba918c73db82ef04d382f6e049e6d03859e14186539c0675f710d241fa99bd1947e0ebba536d14b6eef528373c4d6e5613b7b54fe34a293b984c32eb5bb33af10a82db0c7781a39c5d8271e701dc2a22eb0eabf7c59d93a21bfc70e26b7073de52ef2e1f797893025d47d226504dafbd4d28b71722c6d635a7aa98df25d631f6d5f4672b54ef7709a5219368b786333331374d857f2623f34492bd88717818f91b49cd60c6cb04c93a6c2fd677ce1684573979aa6d9870f167f3d6139596ef4e01b93acd4885d6d89b1faa1a8a5b0a3f5ae29d259c3223de253b87019b388b99ea2a1c8cdd678756eec124b46c9101c35f778bef0bcdb0b3bee2a21f9f7847e7705412ce2677dffa9ec215c39b83536606576cab1e62beb7a748a2ae76b5076683d0ef35f65f657fb254b596eac9faf5790be351096a3ced711602264756572243cccfca9d0c2e86add6860301a73ad06fde745aeb18ce486f349ac0ce7a1aa67f2603bd2d7df40c1f139650b88013311a2ac8c2a00fdcee5d5a9d8c797a918b806b5c3b4252f3bb880cffcd6bb95b96ce45dbcb9a873ddb3d1fd6e975533c63be2ce83c32915fed07b2674f9c90eebe86c0474ecc86826a3a71b13e2eb7c3a581d79903fd295342e58d1825e45ae9afb966075404878bf103a41a6317b8ba9e2ac3d6b3785ee922542eda077b68dad408eac8b5a08dea6e783201517dc9fb771d621d0cb392171a63afecb986ad6334b38058a0cc978b66cfdc8b74ff8ef1f5f4598c0b9741115b9bef4a6679fe5c3ee7ad8d94f513369b410bd43e2c8f8060aa990195bc09b", 0x401}, {&(0x7f0000001cc0)="d36a", 0x2}, {&(0x7f0000001dc0)="0230d5", 0x3}, {&(0x7f0000001e00)="fbe9214e36", 0x5}, {&(0x7f0000001f00)="ddbe27", 0x3}], 0x6}}], 0x3, 0x404c044) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c15000076000d0b20000000fcdb25030000000000040004000b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IMGETCOUNT(r2, 0x618e, 0x0) unshare(0x600) unshare(0x24000480) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x3, 0x3, 0x3]}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x20, r6, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00'}) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) unshare(0x40000000) 485.629936ms ago: executing program 2 (id=6096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x53, &(0x7f00000002c0)={0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) write$tun(r2, &(0x7f0000000440)={@void, @void, @eth={@random="16ece51f0778", @random="96fbbca85b07", @void, {@x25={0x805, {0x34bb9139617b41a3, 0x3, 0x27, "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"}}}}}, 0x1011) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 461.319801ms ago: executing program 3 (id=6097): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='bridge0\x00', 0x400, &(0x7f0000000040)={@align=0x7, {0xfff9, 0x5, 0xffff, 0x8419}}, 0xfffffff8, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) epoll_create1(0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'pim6reg0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@ifindex, 0xffffffffffffffff, 0x26, 0x2020, 0x0, @void, @void, @value=0xffffffffffffffff}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r3, @ANYBLOB="20000280", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='bridge0\x00', 0x400, &(0x7f0000000040)={@align=0x7, {0xfff9, 0x5, 0xffff, 0x8419}}, 0xfffffff8, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) (async) epoll_create1(0x80000) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'pim6reg0\x00', @broadcast}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@ifindex, 0xffffffffffffffff, 0x26, 0x2020, 0x0, @void, @void, @value=0xffffffffffffffff}, 0x20) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r3, @ANYBLOB="20000280", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) (async) 240.934907ms ago: executing program 3 (id=6098): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xb5, &(0x7f0000000600)={@random="1c70ee0bfe67", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@mpls_mc={0x8848, {[{0x80, 0x0, 0x1}, {0x32e, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}], @llc={@llc={0xaa, 0xf4, 'a4', "eb2146c4ad62e9beca9acca81dcbe5b968e401d0d9c5cc56b44772942efbc42577479dc80b152d8c1fae01cda37614f31a43162efc7cebfe8243c2d69a84a5ce4de98dfa0357e734495eb7afcd26a0cafc6a734483a98c37dd75afb2f7d56f7a538214a44f53622e72e6195bb279ab67a100fb5c21b3c1f92ddd0623827708f0f0806ecef84325"}}}}}}, &(0x7f00000006c0)={0x0, 0x1, [0x2d, 0x998, 0x3dd, 0x834]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000079000000790000000600000028c4ffff00000008000000000f0000000000000203000000080000000700000f0100000003000000080000000100000004000000b30d00000f00000005000000010000000700000005000000d63f0000000000000400000006000000220000000500000000000000800000000100000004000000fbffffff71000000005f30615f00d931e53a693a87b96858ea62eaaf5247f329977e6285ba90e275ede58819f45dace394807651653f"], 0x0, 0x9a, 0x0, 0x5}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000001780)=""/4104, 0x1008}, {&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000240)=""/84, 0x54}], 0x4}, 0x40) 144.818549ms ago: executing program 2 (id=6099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000220009215e7aa2b23a2f00006001e00ff01000005001b003a00000035598361c3626766264131f63cc24e7c86e37cda864927a5c40a1919"], 0x2c}, 0x1, 0x0, 0x0, 0x850}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000004500)=0xa57, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110ae000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x80}, 0x1, 0x0, 0x0, 0x80008c1}, 0x24000840) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0000100800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44891}, 0x44) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x5) r7 = accept4$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0xc0000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) getsockname(r7, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$pptp(0x18, 0x1, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000440)={r1, &(0x7f0000000300)='-!(.\x00', 0x44000, &(0x7f0000000340)={@_ha_fsid={[0x8e1b, 0x1]}, {0x6, 0x101, 0xd, 0x10a6dd43}}, 0x2, &(0x7f0000000380)={@_ha_fsid}, &(0x7f0000000400)=0x10001}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000001680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000001640)={&(0x7f0000004540)={0x2208, r6, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x2a}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x21e0, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x82, 0x3, "0d00469f5c8eb494421b7eaee78b7a4b260abf478a11f36131acf99908c7a7af6678bdac17f7b987453d76b011fae584a50395fd9f76d6758174e0d03be8c691834959f5a1145cb776b9ea9542dca1bdf85ce9fa630874b0bb2fb1a24fdb1c1ffcd72057b9a2842c21d9b7917b2fffeba912a1e974f45ed391baeace3ee8"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_5GHZ={0x14d, 0x1, "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"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}]}]}, 0x2208}, 0x1, 0x0, 0x0, 0x4040811}, 0x24000101) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) 0s ago: executing program 3 (id=6100): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x6, 0xb, 0x0, 0x0, @str='$\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, 0x1, 0x1, 0xd01, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a990390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8001) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x7, 0x0, {{0xd, 0x4, 0x3, 0x9, 0x34, 0x65, 0x0, 0x7d, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x6, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x0, [{@private=0xa010100, 0x1}, {@loopback, 0x40}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32, @ANYBLOB], 0x28}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x4, 0x7, 0x68, @mcast2, @private1, 0x80, 0x710, 0x6, 0x81}}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): ] lo speed is unknown, defaulting to 1000 [ 625.893037][T25031] gre0 speed is unknown, defaulting to 1000 [ 625.903926][T25081] lo speed is unknown, defaulting to 1000 [ 626.312025][T25117] syzkaller0: entered promiscuous mode [ 626.320176][T25117] syzkaller0: entered allmulticast mode [ 626.328233][T25119] tipc: Enabling of bearer rejected, failed to enable media [ 628.086624][T25081] lo speed is unknown, defaulting to 1000 [ 628.107410][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 628.115457][ C0] lec:lec_tx_timeout: lec0 [ 628.120503][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 628.318721][T25134] pim6reg99999991: entered allmulticast mode [ 628.360882][T25134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4887'. [ 628.378976][T25132] lo speed is unknown, defaulting to 1000 [ 628.394807][T25136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4886'. [ 628.699974][T25081] lo speed is unknown, defaulting to 1000 [ 628.708460][T25132] lo speed is unknown, defaulting to 1000 [ 628.741420][T25081] gre0 speed is unknown, defaulting to 1000 [ 629.161989][T25162] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4894'. [ 629.313868][T25163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4895'. [ 629.326787][T25132] lo speed is unknown, defaulting to 1000 [ 629.375095][T25167] netlink: 'syz.4.4896': attribute type 27 has an invalid length. [ 629.620084][T25167] syz_tun: left promiscuous mode [ 629.625222][T25167] syz_tun: left allmulticast mode [ 629.978402][T25167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.000423][T25167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.063535][T25167] hsr0: left promiscuous mode [ 630.341978][T25167] ip6gre2: left promiscuous mode [ 630.347004][T25167] ip6gre2: left allmulticast mode [ 630.389509][T25167] vlan2: left promiscuous mode [ 630.394313][T25167] bond2: left promiscuous mode [ 630.407585][T25167] bridge1: left promiscuous mode [ 630.412829][T25167] vlan2: left allmulticast mode [ 630.419191][T25167] bond2: left allmulticast mode [ 630.424043][T25167] bridge1: left allmulticast mode [ 630.481232][T25167] vlan3: left promiscuous mode [ 630.486043][T25167] geneve1: left promiscuous mode [ 630.496287][T25167] vlan3: left allmulticast mode [ 630.501469][T25167] geneve1: left allmulticast mode [ 630.517830][T25167] : left allmulticast mode [ 630.539309][T25167] bond11: left allmulticast mode [ 630.544423][T25167] bridge0: left promiscuous mode [ 630.557662][T25167] bridge0: left allmulticast mode [ 630.585424][ T5954] lo speed is unknown, defaulting to 1000 [ 630.592076][ T5954] syz2: Port: 1 Link DOWN [ 630.615063][T25171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.622955][T25171] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.631211][T25171] net_ratelimit: 594 callbacks suppressed [ 630.631219][T25171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 630.677441][T25132] gre0 speed is unknown, defaulting to 1000 [ 630.741161][T11587] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.761976][T25178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4898'. [ 630.762780][T11587] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.797422][T11587] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 630.806196][ T5886] lo speed is unknown, defaulting to 1000 [ 630.830430][ T5886] syz2: Port: 1 Link ACTIVE [ 630.871793][T11587] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.887779][T11587] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.906394][T11587] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 630.923402][T11587] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.943902][T11587] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.961945][T11587] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 631.023238][T25176] syzkaller0: entered promiscuous mode [ 631.029440][T25176] syzkaller0: entered allmulticast mode [ 631.692271][ T5194] udevd[5194]: worker [10361] /devices/virtual/block/nbd3 timeout; kill it [ 631.709640][ T5194] udevd[5194]: seq 17718 '/devices/virtual/block/nbd3' killed [ 632.801625][T11587] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.810938][T11587] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.819694][T11587] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 633.127628][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 633.134919][T25201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4903'. [ 633.135682][ C0] lec:lec_tx_timeout: lec0 [ 633.149563][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 633.514643][T25207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4907'. [ 633.558332][T25207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4907'. [ 633.567256][T25207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4907'. [ 633.607610][T25207] netlink: 'syz.1.4907': attribute type 14 has an invalid length. [ 634.296266][T25229] syzkaller0: entered promiscuous mode [ 634.322809][T25229] syzkaller0: entered allmulticast mode [ 635.335320][T25258] netlink: 'syz.1.4918': attribute type 1 has an invalid length. [ 635.401098][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4921'. [ 635.446874][T25258] 8021q: adding VLAN 0 to HW filter on device bond12 [ 635.455458][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4921'. [ 635.455458][T25272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4921'. [ 635.706701][T25287] netlink: 'syz.3.4923': attribute type 1 has an invalid length. [ 635.736068][T25285] syzkaller0: entered promiscuous mode [ 635.742052][T25285] syzkaller0: entered allmulticast mode [ 635.818194][T25287] bond0: entered promiscuous mode [ 635.823307][T25287] bond0: entered allmulticast mode [ 635.831104][T25287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.843474][T25295] openvswitch: netlink: Missing valid actions attribute. [ 635.877563][T25295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.948812][T25296] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.4927'. [ 636.082689][T11575] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 636.107545][T11575] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 636.140455][T11575] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 636.157973][T11575] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 636.184048][T25304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4928'. [ 636.207657][T25304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4928'. [ 636.243089][T25307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4929'. [ 636.285192][T25295] lo speed is unknown, defaulting to 1000 [ 636.682145][T25318] bond13: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 636.707944][T25318] bond13 (unregistering): Released all slaves [ 636.952987][T25295] lo speed is unknown, defaulting to 1000 [ 637.131860][T25342] netlink: 'syz.4.4938': attribute type 1 has an invalid length. [ 637.201621][T25344] ip6gre1: entered promiscuous mode [ 637.478434][T25295] lo speed is unknown, defaulting to 1000 [ 637.488527][T25295] gre0 speed is unknown, defaulting to 1000 [ 638.465568][T25389] netlink: 'syz.3.4953': attribute type 1 has an invalid length. [ 638.523208][T25391] __nla_validate_parse: 14 callbacks suppressed [ 638.523232][T25391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4954'. [ 638.546425][T25391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4954'. [ 638.967444][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 638.975667][ C0] lec:lec_tx_timeout: lec0 [ 638.982710][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 639.784878][T25421] netlink: zone id is out of range [ 639.837459][T25421] netlink: zone id is out of range [ 639.877479][T25421] netlink: zone id is out of range [ 639.882686][T25421] netlink: zone id is out of range [ 639.955373][T25421] netlink: zone id is out of range [ 640.021532][T25421] netlink: zone id is out of range [ 640.047547][T25421] netlink: zone id is out of range [ 640.090319][T25421] netlink: zone id is out of range [ 640.194116][T25446] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4970'. [ 640.376556][T25454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4971'. [ 640.599716][T25457] syzkaller0: entered promiscuous mode [ 640.605449][T25457] syzkaller0: entered allmulticast mode [ 640.651257][T25461] siw: device registration error -23 [ 640.670245][T25463] xt_ecn: cannot match TCP bits for non-tcp packets [ 640.882078][T25479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.238141][T25494] Cannot find add_set index 0 as target [ 641.252528][T25494] netlink: 'syz.4.4984': attribute type 39 has an invalid length. [ 641.282811][T25498] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4985'. [ 641.381006][T25500] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 641.535003][T25507] pim6reg: entered allmulticast mode [ 641.546281][T25507] pim6reg: left allmulticast mode [ 641.584822][T25512] netlink: 'syz.4.4989': attribute type 8 has an invalid length. [ 641.615964][T25517] pim6reg: entered allmulticast mode [ 641.621736][T25507] pim6reg: left allmulticast mode [ 641.646377][T25514] syzkaller0: entered promiscuous mode [ 641.656623][T25514] syzkaller0: entered allmulticast mode [ 641.793332][T25525] netlink: 'syz.3.4994': attribute type 2 has an invalid length. [ 642.051901][T25537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4996'. [ 642.303089][T25550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5003'. [ 642.484403][T25556] Cannot find add_set index 3 as target [ 642.596591][T25560] mac80211_hwsim hwsim62 ;: renamed from wlan0 [ 642.669719][T25563] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5007'. [ 642.855638][T25569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5009'. [ 642.896513][T25569] tipc: Enabled bearer , priority 0 [ 643.436572][T25582] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5013'. [ 643.637986][T25590] lo speed is unknown, defaulting to 1000 [ 643.806261][T25596] tipc: Resetting bearer [ 643.997388][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 644.005506][ C0] lec:lec_tx_timeout: lec0 [ 644.010366][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 644.446085][T25590] lo speed is unknown, defaulting to 1000 [ 644.995305][T25634] Bluetooth: MGMT ver 1.23 [ 645.191204][T25650] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5028'. [ 645.329627][T25590] lo speed is unknown, defaulting to 1000 [ 645.452024][T25590] gre0 speed is unknown, defaulting to 1000 [ 645.791467][T25675] lo speed is unknown, defaulting to 1000 [ 646.610942][T25675] lo speed is unknown, defaulting to 1000 [ 646.902219][T25719] netlink: 'syz.4.5042': attribute type 1 has an invalid length. [ 646.928174][T25719] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5042'. [ 646.947774][T25719] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5042'. [ 647.007212][T25719] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5042'. [ 647.095765][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5043'. [ 647.276441][T25675] lo speed is unknown, defaulting to 1000 [ 647.322818][T25675] gre0 speed is unknown, defaulting to 1000 [ 647.569002][T25742] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5047'. [ 647.587526][T25742] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5047'. [ 647.617594][T25742] netlink: 'syz.2.5047': attribute type 5 has an invalid length. [ 647.638044][T25742] netlink: 'syz.2.5047': attribute type 6 has an invalid length. [ 647.645832][T25742] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5047'. [ 647.668421][T25746] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5047'. [ 647.942810][T25749] ip6gre2: entered promiscuous mode [ 647.949200][T25749] ip6gre2: entered allmulticast mode [ 648.655916][T11581] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 648.671562][T11581] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 648.681322][ T5948] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 648.916910][T25767] netlink: 'syz.1.5052': attribute type 10 has an invalid length. [ 649.017363][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 649.025458][ C0] lec:lec_tx_timeout: lec0 [ 649.031089][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 649.224084][T25775] lo speed is unknown, defaulting to 1000 [ 649.297656][ C1] net_ratelimit: 337 callbacks suppressed [ 649.297677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.312387][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.371017][ T5159] block nbd3: Possible stuck request ffff888027020000: control (read@0,1024B). Runtime 390 seconds [ 649.382582][ T5159] block nbd3: Possible stuck request ffff888027020200: control (read@1024,1024B). Runtime 390 seconds [ 649.394414][ T5159] block nbd3: Possible stuck request ffff888027020400: control (read@2048,1024B). Runtime 390 seconds [ 649.405645][ T5159] block nbd3: Possible stuck request ffff888027020600: control (read@3072,1024B). Runtime 390 seconds [ 649.528174][ T5954] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 649.612830][T25784] syzkaller1: entered promiscuous mode [ 649.612893][ T5948] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 649.633921][T25784] syzkaller1: entered allmulticast mode [ 649.870619][T25792] netlink: 'syz.4.5059': attribute type 13 has an invalid length. [ 650.185989][T25804] netlink: 'syz.3.5063': attribute type 7 has an invalid length. [ 650.197698][T25804] netlink: 'syz.3.5063': attribute type 8 has an invalid length. [ 650.205471][T25804] netlink: 'syz.3.5063': attribute type 9 has an invalid length. [ 650.288615][T25788] lo speed is unknown, defaulting to 1000 [ 650.298530][T25775] lo speed is unknown, defaulting to 1000 [ 650.460982][T25813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5067'. [ 650.516597][T25813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5067'. [ 650.578037][T25818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5066'. [ 650.642287][T25820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.972465][T25836] netlink: 'syz.4.5071': attribute type 2 has an invalid length. [ 651.000671][T25836] !: entered promiscuous mode [ 651.042662][T25775] lo speed is unknown, defaulting to 1000 [ 651.073772][T25775] gre0 speed is unknown, defaulting to 1000 [ 651.103714][T25788] lo speed is unknown, defaulting to 1000 [ 651.575435][T25869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5081'. [ 651.816475][T25788] lo speed is unknown, defaulting to 1000 [ 651.833156][T25877] tipc: Enabling of bearer rejected, already enabled [ 651.857666][T25788] gre0 speed is unknown, defaulting to 1000 [ 651.901853][T25881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.158632][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5086'. [ 652.211941][T25897] macvtap0: entered promiscuous mode [ 652.553431][T25912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5086'. [ 652.829276][T25912] macvtap0 (unregistering): left promiscuous mode [ 653.019017][T25920] netlink: 'syz.4.5093': attribute type 1 has an invalid length. [ 653.047845][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 653.151160][T25920] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 653.228577][T25929] openvswitch: netlink: Flow key attr not present in new flow. [ 654.037639][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 654.045853][ C0] lec:lec_tx_timeout: lec0 [ 654.050551][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 654.511159][T25954] lo speed is unknown, defaulting to 1000 [ 654.950692][T25971] netlink: 'syz.4.5105': attribute type 10 has an invalid length. [ 654.977766][T25971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5105'. [ 655.096217][T25979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5109'. [ 655.115468][T25979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5109'. [ 655.120552][T25981] netlink: 'syz.0.5108': attribute type 27 has an invalid length. [ 655.252772][T25985] netlink: 'syz.0.5108': attribute type 10 has an invalid length. [ 655.320346][T25981] veth0_to_batadv: left promiscuous mode [ 655.326080][T25981] veth0_to_batadv: left allmulticast mode [ 655.360911][T25981] macsec0: left promiscuous mode [ 655.366141][T25981] macsec0: left allmulticast mode [ 655.373201][T25981] bond1: left allmulticast mode [ 655.379642][T25981] bond3: left promiscuous mode [ 655.384776][T25981] ip6gretap1: left promiscuous mode [ 655.397996][T25981] ip6gretap1: left allmulticast mode [ 655.403900][T25981] bridge2: left allmulticast mode [ 655.419534][T25981] vti1: left promiscuous mode [ 655.424569][T25981] vti1: left allmulticast mode [ 655.439477][T25981] ip6gre1: left promiscuous mode [ 655.461886][ T5954] gre0 speed is unknown, defaulting to 1000 [ 655.471730][ T5954] syz1: Port: 1 Link DOWN [ 655.479792][T25985] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 655.499882][ T5954] gre0 speed is unknown, defaulting to 1000 [ 655.500486][T25954] lo speed is unknown, defaulting to 1000 [ 656.008731][T25954] lo speed is unknown, defaulting to 1000 [ 656.016528][T25954] gre0 speed is unknown, defaulting to 1000 [ 656.235208][T26020] lo speed is unknown, defaulting to 1000 [ 656.674738][T26020] lo speed is unknown, defaulting to 1000 [ 657.118986][T26048] netlink: 'syz.3.5124': attribute type 4 has an invalid length. [ 657.155434][T26048] netlink: 'syz.3.5124': attribute type 4 has an invalid length. [ 657.215079][T26048] netlink: 'syz.3.5124': attribute type 4 has an invalid length. [ 657.315352][T26059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5128'. [ 657.396944][T26061] netlink: 'syz.3.5129': attribute type 16 has an invalid length. [ 657.546577][T26020] lo speed is unknown, defaulting to 1000 [ 657.576891][T26020] gre0 speed is unknown, defaulting to 1000 [ 657.580989][T26069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5132'. [ 657.794229][T26077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5135'. [ 658.226941][T26097] pimreg: tun_chr_ioctl cmd 35108 [ 658.515911][T26107] lo speed is unknown, defaulting to 1000 [ 658.556895][T26118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5144'. [ 658.739756][T26123] netlink: 'syz.2.5145': attribute type 13 has an invalid length. [ 658.803549][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5142'. [ 658.985852][T26125] bond6: entered allmulticast mode [ 659.016231][T26125] 8021q: adding VLAN 0 to HW filter on device bond6 [ 659.057642][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 659.065761][ C0] lec:lec_tx_timeout: lec0 [ 659.071292][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 659.298157][T12424] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 659.345581][T26107] lo speed is unknown, defaulting to 1000 [ 659.519123][T26147] lo: Caught tx_queue_len zero misconfig [ 659.550164][T26152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5151'. [ 659.820143][T26107] lo speed is unknown, defaulting to 1000 [ 659.845156][T26107] gre0 speed is unknown, defaulting to 1000 [ 659.888068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.897392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.158918][T26164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5153'. [ 660.212070][T26164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5153'. [ 660.239693][T26164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5153'. [ 660.249710][T12424] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 660.488378][T26177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5156'. [ 660.508117][T26177] veth0: Caught tx_queue_len zero misconfig [ 660.709364][T26182] netlink: 'syz.0.5157': attribute type 1 has an invalid length. [ 660.792918][T26187] IPVS: length: 48 != 8 [ 661.220903][T26190] lo speed is unknown, defaulting to 1000 [ 661.349377][T26209] netlink: 'syz.2.5166': attribute type 1 has an invalid length. [ 661.549003][T26209] 8021q: adding VLAN 0 to HW filter on device bond8 [ 661.703560][T26216] syzkaller0: entered promiscuous mode [ 661.717906][T26216] syzkaller0: entered allmulticast mode [ 662.073347][T26222] lo: entered promiscuous mode [ 662.082610][T26221] lo: left promiscuous mode [ 662.167540][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 662.302283][T26230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.319271][T26232] netlink: 'syz.0.5173': attribute type 1 has an invalid length. [ 662.341924][T26233] __nla_validate_parse: 2 callbacks suppressed [ 662.341945][T26233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5172'. [ 662.414972][T26232] 8021q: adding VLAN 0 to HW filter on device bond7 [ 662.433402][T26190] lo speed is unknown, defaulting to 1000 [ 662.468840][T26191] lo speed is unknown, defaulting to 1000 [ 662.495141][T26235] vlan0: entered promiscuous mode [ 662.503694][T26235] bond7: entered promiscuous mode [ 662.509828][T26235] vlan0: entered allmulticast mode [ 662.515256][T26235] bond7: entered allmulticast mode [ 662.666223][T26243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5176'. [ 662.683023][T26242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5175'. [ 662.701810][T26242] netlink: del zone limit has 8 unknown bytes [ 662.845169][T26249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5178'. [ 662.878456][T26251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.885776][T26251] IPv6: NLM_F_CREATE should be set when creating new route [ 662.893107][T26251] IPv6: NLM_F_CREATE should be set when creating new route [ 663.102599][T26257] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5181'. [ 663.174602][T26190] lo speed is unknown, defaulting to 1000 [ 663.189175][T26190] gre0 speed is unknown, defaulting to 1000 [ 663.264874][T26247] lo speed is unknown, defaulting to 1000 [ 663.284530][T26191] lo speed is unknown, defaulting to 1000 [ 663.423978][T26266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5184'. [ 663.687625][T26271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5186'. [ 664.077380][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 664.085472][ C0] lec:lec_tx_timeout: lec0 [ 664.091478][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 664.506932][T26247] lo speed is unknown, defaulting to 1000 [ 664.529842][T26191] lo speed is unknown, defaulting to 1000 [ 664.638935][T26191] gre0 speed is unknown, defaulting to 1000 [ 664.904572][T26312] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5196'. [ 665.469643][T26330] lo speed is unknown, defaulting to 1000 [ 665.475868][T26247] lo speed is unknown, defaulting to 1000 [ 665.742820][T26337] delete_channel: no stack [ 666.009067][T26341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5202'. [ 666.042924][T26330] lo speed is unknown, defaulting to 1000 [ 666.288394][T26346] netlink: 'syz.0.5203': attribute type 1 has an invalid length. [ 666.342289][T26347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5203'. [ 666.356230][T26346] bond8: entered promiscuous mode [ 666.364971][T26346] 8021q: adding VLAN 0 to HW filter on device bond8 [ 666.512522][T26247] gre0 speed is unknown, defaulting to 1000 [ 666.519268][T26343] lo speed is unknown, defaulting to 1000 [ 666.519305][T26330] lo speed is unknown, defaulting to 1000 [ 667.226272][T26343] lo speed is unknown, defaulting to 1000 [ 667.692927][T26358] netlink: ct family unspecified [ 667.698222][T26358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.719495][T26358] __nla_validate_parse: 1 callbacks suppressed [ 667.719518][T26358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5205'. [ 667.751821][T26330] gre0 speed is unknown, defaulting to 1000 [ 667.758337][T26343] lo speed is unknown, defaulting to 1000 [ 667.821630][T26360] netlink: 'syz.0.5206': attribute type 6 has an invalid length. [ 667.832575][T26360] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 667.896925][T26364] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5206'. [ 668.301542][T26370] bond9: invalid ARP target 0.0.0.0 specified for addition [ 668.315108][T26370] bond9: option arp_ip_target: invalid value (0) [ 668.324396][T26370] bond9 (unregistering): Released all slaves [ 668.413438][T26343] gre0 speed is unknown, defaulting to 1000 [ 668.909301][T26384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5212'. [ 669.020738][T26387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5212'. [ 669.107366][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 669.115418][ C0] lec:lec_tx_timeout: lec0 [ 669.147203][T26385] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 669.158346][T26385] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 669.479807][T26392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5214'. [ 669.489734][T26392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5214'. [ 669.519539][T26392] netlink: 'syz.0.5214': attribute type 5 has an invalid length. [ 669.551172][T26395] netlink: 'syz.4.5215': attribute type 10 has an invalid length. [ 669.586407][T26395] netlink: 'syz.4.5215': attribute type 10 has an invalid length. [ 669.632176][T11574] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.657981][T11574] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.731868][T11574] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.756076][T11574] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.571812][T26421] xfrm1: entered allmulticast mode [ 670.720947][T26425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5222'. [ 670.753967][T26425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.781567][T26430] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5224'. [ 670.791219][T26430] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 670.949271][T26427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5223'. [ 671.267418][T26445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5228'. [ 671.422644][T26443] lo speed is unknown, defaulting to 1000 [ 671.724593][T26443] lo speed is unknown, defaulting to 1000 [ 672.031021][T26443] lo speed is unknown, defaulting to 1000 [ 672.049248][T26443] gre0 speed is unknown, defaulting to 1000 [ 672.168966][T26475] netlink: 'syz.4.5237': attribute type 4 has an invalid length. [ 672.233359][T11588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.242581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.253598][T25860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.262881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.267556][T26478] wg1: entered promiscuous mode [ 672.276030][T26478] wg1: entered allmulticast mode [ 672.968767][T26492] lo speed is unknown, defaulting to 1000 [ 673.072252][T26496] IPVS: length: 24 != 3445464 [ 673.237045][T26504] __nla_validate_parse: 1 callbacks suppressed [ 673.237069][T26504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5247'. [ 673.295733][T26504] 8021q: adding VLAN 0 to HW filter on device bond13 [ 673.424615][T26492] lo speed is unknown, defaulting to 1000 [ 673.505132][T26516] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5249'. [ 673.942805][T26492] lo speed is unknown, defaulting to 1000 [ 673.943355][T26529] lo speed is unknown, defaulting to 1000 [ 673.974373][T26492] gre0 speed is unknown, defaulting to 1000 [ 674.800229][T26529] lo speed is unknown, defaulting to 1000 [ 675.167001][T26549] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 675.334413][T26529] lo speed is unknown, defaulting to 1000 [ 675.343969][T26529] gre0 speed is unknown, defaulting to 1000 [ 675.625215][T26561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5261'. [ 675.707817][T26557] rdma_rxe: rxe_newlink: failed to add wg1 [ 676.291640][T26580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5267'. [ 676.342194][T26580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.407619][ T5831] Bluetooth: hci3: command 0x0401 tx timeout [ 676.659840][T26584] lo speed is unknown, defaulting to 1000 [ 676.803438][T26597] syzkaller0: entered promiscuous mode [ 676.857400][T26597] syzkaller0: entered allmulticast mode [ 677.312696][T26605] netlink: 592 bytes leftover after parsing attributes in process `syz.4.5273'. [ 677.365660][T26608] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5273'. [ 677.367900][T11574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.380540][T26607] xt_hashlimit: size too large, truncated to 1048576 [ 677.383853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.435336][T26610] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5274'. [ 677.630685][T26613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5275'. [ 678.169837][ T6580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.179089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.244845][T26584] lo speed is unknown, defaulting to 1000 [ 678.244845][T26622] lo speed is unknown, defaulting to 1000 [ 678.513554][T26631] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5281'. [ 678.598976][T26635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5282'. [ 678.804440][T26622] lo speed is unknown, defaulting to 1000 [ 678.818954][T26584] lo speed is unknown, defaulting to 1000 [ 678.821024][T26642] syzkaller0: entered promiscuous mode [ 678.830434][T26642] syzkaller0: entered allmulticast mode [ 678.859043][T26584] gre0 speed is unknown, defaulting to 1000 [ 679.071667][T26650] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5287'. [ 679.141763][T26653] tipc: Enabling of bearer rejected, already enabled [ 679.431446][T26664] lo speed is unknown, defaulting to 1000 [ 679.447096][T26662] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5291'. [ 679.460663][ T5159] block nbd3: Possible stuck request ffff888027020000: control (read@0,1024B). Runtime 420 seconds [ 679.473392][ T5159] block nbd3: Possible stuck request ffff888027020200: control (read@1024,1024B). Runtime 420 seconds [ 679.485637][ T5159] block nbd3: Possible stuck request ffff888027020400: control (read@2048,1024B). Runtime 420 seconds [ 679.497350][ T5159] block nbd3: Possible stuck request ffff888027020600: control (read@3072,1024B). Runtime 420 seconds [ 679.590835][T26622] lo speed is unknown, defaulting to 1000 [ 679.649359][T26622] gre0 speed is unknown, defaulting to 1000 [ 680.087514][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 680.150835][T26664] lo speed is unknown, defaulting to 1000 [ 680.960675][T26664] lo speed is unknown, defaulting to 1000 [ 680.995884][T26664] gre0 speed is unknown, defaulting to 1000 [ 682.649323][T11588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.658461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.732569][T26700] mac80211_hwsim hwsim63 wlan1: Device is already in use. [ 682.749666][T26700] netlink: 'syz.2.5299': attribute type 39 has an invalid length. [ 683.091175][T26702] tipc: Failed to remove unknown binding: 66,0,0/0:1916741082/1916741084 [ 683.122782][T26702] tipc: Failed to remove unknown binding: 66,0,0/0:1916741082/1916741084 [ 683.197102][T26706] syzkaller1: entered promiscuous mode [ 683.215691][T26706] syzkaller1: entered allmulticast mode [ 683.401882][ T5886] IPVS: starting estimator thread 0... [ 683.497605][T26711] IPVS: using max 26 ests per chain, 62400 per kthread [ 683.631968][T26717] xt_policy: too many policy elements [ 683.800284][T26724] lo speed is unknown, defaulting to 1000 [ 683.927950][ T6580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.936661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.987498][T26732] netlink: 'syz.3.5309': attribute type 3 has an invalid length. [ 684.394476][T26724] lo speed is unknown, defaulting to 1000 [ 684.394490][T26735] lo speed is unknown, defaulting to 1000 [ 684.453203][T26748] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 684.578405][T26751] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 684.685639][T26760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5313'. [ 685.108556][T26735] lo speed is unknown, defaulting to 1000 [ 685.115571][T26724] lo speed is unknown, defaulting to 1000 [ 685.141204][T26724] gre0 speed is unknown, defaulting to 1000 [ 685.198038][T26773] bridge6: entered promiscuous mode [ 685.214062][T26778] netlink: 'syz.0.5320': attribute type 29 has an invalid length. [ 685.222605][T26773] bridge6: entered allmulticast mode [ 685.244080][T26773] tipc: Enabling of bearer rejected, failed to enable media [ 685.360165][T26784] netlink: 'syz.0.5323': attribute type 1 has an invalid length. [ 685.393716][T26784] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5323'. [ 685.637551][T26792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5324'. [ 685.842500][T26735] lo speed is unknown, defaulting to 1000 [ 685.861502][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.885627][T26735] gre0 speed is unknown, defaulting to 1000 [ 685.886424][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 686.240343][T26798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.485176][T26822] x_tables: duplicate underflow at hook 1 [ 687.015290][T26837] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5336'. [ 687.074871][T26835] gre0: left allmulticast mode [ 687.158461][T26839] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5337'. [ 687.401428][T26846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5341'. [ 687.418268][T26847] netlink: 'syz.0.5340': attribute type 1 has an invalid length. [ 687.475902][T26853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5341'. [ 687.579541][T26847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5340'. [ 687.597901][T26851] netlink: 'syz.1.5342': attribute type 12 has an invalid length. [ 687.606512][T26851] netlink: 'syz.1.5342': attribute type 29 has an invalid length. [ 687.629245][T26851] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5342'. [ 687.638992][T26851] netlink: 59 bytes leftover after parsing attributes in process `syz.1.5342'. [ 687.778214][T26855] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 687.830179][T26855] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 688.004771][T26847] bond10: (slave bridge7): Enslaving as an active interface with a down link [ 688.018876][T26858] 8021q: adding VLAN 0 to HW filter on device bond10 [ 688.050634][T26861] macvlan2: entered promiscuous mode [ 688.055989][T26861] macvlan2: entered allmulticast mode [ 688.063416][T26861] bond10: entered promiscuous mode [ 688.088686][T26861] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 688.107957][T26861] bond10: left promiscuous mode [ 688.352875][T26871] syzkaller1: entered promiscuous mode [ 688.358727][T26871] syzkaller1: entered allmulticast mode [ 688.408655][T11588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.417072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.633260][T26882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 688.640727][T26882] IPv6: NLM_F_CREATE should be set when creating new route [ 688.648035][T26882] IPv6: NLM_F_CREATE should be set when creating new route [ 688.978766][T26903] netlink: 'syz.2.5357': attribute type 1 has an invalid length. [ 689.001750][T26901] netlink: 'syz.4.5356': attribute type 2 has an invalid length. [ 689.004106][T26903] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 689.045727][T26901] !9: entered promiscuous mode [ 689.061636][ T6580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.070209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.118083][T26906] netlink: 'syz.4.5356': attribute type 2 has an invalid length. [ 689.139074][T26906] !9: left promiscuous mode [ 689.363386][T26921] netlink: 'syz.4.5360': attribute type 3 has an invalid length. [ 689.440334][T26924] netlink: 'syz.1.5361': attribute type 1 has an invalid length. [ 689.463527][T26923] xt_hashlimit: size too large, truncated to 1048576 [ 689.496777][T26924] 8021q: adding VLAN 0 to HW filter on device bond14 [ 689.505193][T26923] xt_hashlimit: max too large, truncated to 1048576 [ 689.656317][T26929] lo speed is unknown, defaulting to 1000 [ 689.907793][T26942] __nla_validate_parse: 8 callbacks suppressed [ 689.907817][T26942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5365'. [ 689.973932][T26945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5366'. [ 690.027682][T26945] sctp: [Deprecated]: syz.2.5366 (pid 26945) Use of int in maxseg socket option. [ 690.027682][T26945] Use struct sctp_assoc_value instead [ 690.029149][T26949] netlink: 'syz.1.5368': attribute type 12 has an invalid length. [ 690.071242][T26949] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5368'. [ 690.129512][T26949] netlink: 'syz.1.5368': attribute type 1 has an invalid length. [ 690.247273][T26949] 8021q: adding VLAN 0 to HW filter on device bond15 [ 690.274524][T26929] lo speed is unknown, defaulting to 1000 [ 690.274575][T26958] tipc: MTU too low for tipc bearer [ 690.291576][T26960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5372'. [ 690.611005][T26971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5375'. [ 690.618858][T26929] lo speed is unknown, defaulting to 1000 [ 690.635945][T26929] gre0 speed is unknown, defaulting to 1000 [ 690.968736][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 690.976622][T26982] lo speed is unknown, defaulting to 1000 [ 690.976905][ C0] lec:lec_tx_timeout: lec0 [ 691.231750][T26982] lo speed is unknown, defaulting to 1000 [ 691.413299][T26982] lo speed is unknown, defaulting to 1000 [ 691.423022][T26982] gre0 speed is unknown, defaulting to 1000 [ 692.466276][T27009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.484514][T27009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.493504][T27009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.518183][T27009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.551691][T27010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.559915][T27010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.306032][T27029] lo speed is unknown, defaulting to 1000 [ 693.434196][T26963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.715242][T27052] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.5386'. [ 693.955447][T27066] net_ratelimit: 3 callbacks suppressed [ 693.955469][T27066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.066843][T27066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.099232][T27066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.184351][T11574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.192936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.235441][T27062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.281302][T27029] lo speed is unknown, defaulting to 1000 [ 694.281312][T27071] lo speed is unknown, defaulting to 1000 [ 694.319626][T27062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.329454][T27062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.357653][T27062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.378733][T27078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5393'. [ 694.410001][T27062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.424447][T27082] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5394'. [ 694.471548][T27082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5394'. [ 694.523086][T27084] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5394'. [ 694.708094][T18400] lec:lec_start_xmit: lec0:No lecd attached [ 694.951739][T27096] bond16: option updelay: invalid value (18446744072924056005) [ 694.966753][T27096] bond16: option updelay: allowed values 0 - 2147483647 [ 695.012401][T27096] bond16 (unregistering): Released all slaves [ 695.048791][T27029] lo speed is unknown, defaulting to 1000 [ 695.048806][T27071] lo speed is unknown, defaulting to 1000 [ 695.063287][T27029] gre0 speed is unknown, defaulting to 1000 [ 695.319799][T27112] __nla_validate_parse: 1 callbacks suppressed [ 695.319821][T27112] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5401'. [ 695.382750][T27112] netlink: 'syz.0.5401': attribute type 27 has an invalid length. [ 695.725187][T27127] netlink: 'syz.1.5406': attribute type 1 has an invalid length. [ 695.739761][T27127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5406'. [ 695.742020][T27071] lo speed is unknown, defaulting to 1000 [ 695.771376][T27071] gre0 speed is unknown, defaulting to 1000 [ 695.825333][T27125] lo speed is unknown, defaulting to 1000 [ 696.767551][T27129] lo speed is unknown, defaulting to 1000 [ 696.968863][T27153] netlink: 'syz.1.5410': attribute type 2 has an invalid length. [ 696.976734][T27153] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5410'. [ 697.171244][T27129] lo speed is unknown, defaulting to 1000 [ 697.288259][T27166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5415'. [ 697.370076][T27169] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5416'. [ 697.458376][T27129] lo speed is unknown, defaulting to 1000 [ 697.463729][T27125] lo speed is unknown, defaulting to 1000 [ 697.567512][T27129] gre0 speed is unknown, defaulting to 1000 [ 697.581507][T27173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5415'. [ 698.216664][T27125] lo speed is unknown, defaulting to 1000 [ 698.417960][T27191] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5422'. [ 698.563263][T27193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5423'. [ 698.574397][T27193] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5423'. [ 698.702929][T27125] gre0 speed is unknown, defaulting to 1000 [ 698.722737][T27195] gretap0: left promiscuous mode [ 698.731550][T27195] erspan0: left promiscuous mode [ 698.829449][T27195] 8021q: adding VLAN 0 to HW filter on device .` [ 698.846189][T27195] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.885751][T27197] dummy0: left allmulticast mode [ 698.899883][T27199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5425'. [ 699.293034][T25860] net_ratelimit: 345 callbacks suppressed [ 699.293047][T25860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.307390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.927415][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms [ 699.935501][ C0] lec:lec_tx_timeout: lec0 [ 700.034140][T27223] netlink: 'syz.4.5432': attribute type 13 has an invalid length. [ 700.057473][T27223] netlink: 'syz.4.5432': attribute type 17 has an invalid length. [ 700.387030][ T5948] lo speed is unknown, defaulting to 1000 [ 700.459425][T27223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.486159][T27223] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.526756][T27223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.572965][T11574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.581443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.836068][ T5954] lo speed is unknown, defaulting to 1000 [ 701.170442][T27253] __nla_validate_parse: 2 callbacks suppressed [ 701.170466][T27253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5436'. [ 701.271560][T27255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5438'. [ 701.280869][T27255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5438'. [ 701.385989][T27264] netlink: 8210 bytes leftover after parsing attributes in process `syz.3.5438'. [ 701.462468][T27255] netlink: 8210 bytes leftover after parsing attributes in process `syz.3.5438'. [ 701.707975][T27265] lo speed is unknown, defaulting to 1000 [ 701.716009][T27272] tipc: Enabled bearer , priority 10 [ 701.733518][T27272] tipc: Enabling of bearer rejected, already enabled [ 701.949293][T27278] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5443'. [ 701.981283][T27279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5443'. [ 702.222203][T27290] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5446'. [ 702.232726][T27290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5446'. [ 702.258922][T27290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5446'. [ 702.412309][T27265] lo speed is unknown, defaulting to 1000 [ 702.546489][T27300] netlink: 'syz.1.5451': attribute type 1 has an invalid length. [ 702.673121][T27307] netlink: 'syz.1.5451': attribute type 8 has an invalid length. [ 702.686973][T27300] bond16: entered promiscuous mode [ 702.743997][T27300] 8021q: adding VLAN 0 to HW filter on device bond16 [ 702.808497][T27307] bond0: entered promiscuous mode [ 702.815483][T27307] gretap0: entered promiscuous mode [ 702.822350][T27307] gretap0: left promiscuous mode [ 703.002051][T27307] bond0: left promiscuous mode [ 703.030163][ T5900] tipc: Node number set to 1028357523 [ 703.045944][T27309] macvtap0: entered allmulticast mode [ 703.116072][T27265] lo speed is unknown, defaulting to 1000 [ 703.124111][T27265] gre0 speed is unknown, defaulting to 1000 [ 703.958337][T27345] tipc: Enabled bearer , priority 0 [ 703.982898][T27345] syzkaller0: entered promiscuous mode [ 703.989633][T27345] syzkaller0: entered allmulticast mode [ 704.063957][T27345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.072998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.249588][T27344] tipc: Resetting bearer [ 704.277050][T27344] tipc: Disabling bearer [ 704.306057][T27362] openvswitch: netlink: IP tunnel dst address not specified [ 704.614794][T27381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.623496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.638548][T27384] netlink: 'syz.3.5467': attribute type 13 has an invalid length. [ 704.669535][T27381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 704.689077][T27386] netlink: 'syz.3.5467': attribute type 13 has an invalid length. [ 704.696938][T27386] netlink: 'syz.3.5467': attribute type 11 has an invalid length. [ 704.728086][T27387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.736428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.748061][T27384] netlink: 'syz.3.5467': attribute type 11 has an invalid length. [ 705.048637][T11574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.057030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.770434][T27397] netlink: 'syz.3.5471': attribute type 8 has an invalid length. [ 706.179345][T27441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 706.252514][T27441] __nla_validate_parse: 7 callbacks suppressed [ 706.252539][T27441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5480'. [ 706.262438][T27444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5479'. [ 706.319941][T27447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.328552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.349265][T27440] xt_CT: No such helper "netbios-ns" [ 706.360088][T27445] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.607251][T27453] lo speed is unknown, defaulting to 1000 [ 706.960100][T27453] lo speed is unknown, defaulting to 1000 [ 707.197167][T27453] lo speed is unknown, defaulting to 1000 [ 707.205506][T27453] gre0 speed is unknown, defaulting to 1000 [ 708.047806][T27493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5493'. [ 708.059040][T27491] lo speed is unknown, defaulting to 1000 [ 708.083568][T27493] netlink: 'syz.0.5493': attribute type 7 has an invalid length. [ 708.114655][T27493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5493'. [ 708.135706][T27495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5493'. [ 708.159013][T27495] netlink: 'syz.0.5493': attribute type 7 has an invalid length. [ 708.180591][T27495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5493'. [ 708.203070][T27493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5493'. [ 708.283619][T27493] bond0: entered promiscuous mode [ 708.327421][T27493] bond_slave_0: entered promiscuous mode [ 708.333252][T27493] bond_slave_1: entered promiscuous mode [ 708.367677][T27493] dummy0: entered promiscuous mode [ 708.373056][T27493] bridge0: entered promiscuous mode [ 708.389048][T27493] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode [ 708.409447][T27493] bond0: left promiscuous mode [ 708.414274][T27493] bond_slave_0: left promiscuous mode [ 708.427683][T27498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5494'. [ 708.436972][T27493] bond_slave_1: left promiscuous mode [ 708.442936][T27493] dummy0: left promiscuous mode [ 708.457619][T27493] bridge0: left promiscuous mode [ 708.462782][T27493] mac80211_hwsim hwsim55 wlan1: left promiscuous mode [ 708.620443][T27491] lo speed is unknown, defaulting to 1000 [ 708.927835][T27512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5498'. [ 709.148305][T27512] syzkaller0: entered promiscuous mode [ 709.160627][T27512] syzkaller0: entered allmulticast mode [ 709.168908][T27491] lo speed is unknown, defaulting to 1000 [ 709.186145][T27491] gre0 speed is unknown, defaulting to 1000 [ 709.537019][ T5159] block nbd3: Possible stuck request ffff888027020000: control (read@0,1024B). Runtime 450 seconds [ 709.548788][ T5159] block nbd3: Possible stuck request ffff888027020200: control (read@1024,1024B). Runtime 450 seconds [ 709.559967][ T5159] block nbd3: Possible stuck request ffff888027020400: control (read@2048,1024B). Runtime 450 seconds [ 709.571378][ T5159] block nbd3: Possible stuck request ffff888027020600: control (read@3072,1024B). Runtime 450 seconds [ 710.104542][T27530] xt_hashlimit: size too large, truncated to 1048576 [ 710.111825][T27530] xt_hashlimit: max too large, truncated to 1048576 [ 710.809084][T11577] net_ratelimit: 2 callbacks suppressed [ 710.809109][T11577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.823141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.743601][T27532] netlink: 'syz.1.5502': attribute type 1 has an invalid length. [ 711.778043][T27532] netlink: 'syz.1.5502': attribute type 2 has an invalid length. [ 711.785841][T27532] netlink: 'syz.1.5502': attribute type 3 has an invalid length. [ 711.794609][T27535] netlink: 'syz.0.5503': attribute type 1 has an invalid length. [ 711.827997][T27535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5503'. [ 711.909701][T27544] tipc: Enabled bearer , priority 0 [ 711.941071][T27544] syzkaller0: entered promiscuous mode [ 711.946686][T27544] syzkaller0: entered allmulticast mode [ 711.987875][T27544] tipc: Resetting bearer [ 712.025404][T27543] tipc: Resetting bearer [ 712.097945][T11577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.106356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.165633][T27543] tipc: Disabling bearer [ 712.293239][T27556] netlink: 'syz.4.5509': attribute type 1 has an invalid length. [ 712.332459][T27556] netlink: 'syz.4.5509': attribute type 2 has an invalid length. [ 712.395111][T27556] netlink: 'syz.4.5509': attribute type 1 has an invalid length. [ 713.789758][T27597] bond10: option lacp_rate: invalid value (128) [ 713.820954][T27607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5520'. [ 713.837857][T27597] bond10 (unregistering): Released all slaves [ 713.970788][T27611] lo speed is unknown, defaulting to 1000 [ 714.543598][T27611] lo speed is unknown, defaulting to 1000 [ 714.608277][T27643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5530'. [ 714.954811][T27611] lo speed is unknown, defaulting to 1000 [ 714.989455][T27611] gre0 speed is unknown, defaulting to 1000 [ 714.998845][T27666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5535'. [ 715.233076][T27666] bond9: option resend_igmp: invalid value (2878) [ 715.239739][T27666] bond9: option resend_igmp: allowed values 0 - 255 [ 715.287942][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 715.296941][T27666] bond9 (unregistering): Released all slaves [ 715.379101][T27677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5537'. [ 715.436856][T27677] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5537'. [ 715.544008][T27685] xt_HMARK: proto mask must be zero with L3 mode [ 715.681402][T27689] netlink: 'syz.3.5541': attribute type 2 has an invalid length. [ 715.697657][T27689] netlink: 'syz.3.5541': attribute type 2 has an invalid length. [ 716.102207][T27715] netlink: 'syz.0.5547': attribute type 93 has an invalid length. [ 716.270622][T27709] bond11: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 716.385046][T27709] bond11 (unregistering): Released all slaves [ 716.570311][T11576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.579628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.208281][T11576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.216645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.265887][T27753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5555'. [ 717.333846][T27750] lo speed is unknown, defaulting to 1000 [ 717.578833][T27764] netlink: 'syz.4.5559': attribute type 3 has an invalid length. [ 717.627074][T27764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5559'. [ 717.636934][T27764] nbd: must specify a size in bytes for the device [ 717.715437][T27770] syzkaller1: entered promiscuous mode [ 717.751954][T27768] nbd: couldn't find device at index 4 [ 717.752256][T27770] syzkaller1: entered allmulticast mode [ 717.786046][T27750] lo speed is unknown, defaulting to 1000 [ 718.237602][T27756] lo speed is unknown, defaulting to 1000 [ 718.237879][ T5900] lo speed is unknown, defaulting to 1000 [ 718.258835][ T5900] syz2: Port: 1 Link DOWN [ 718.421729][T27750] lo speed is unknown, defaulting to 1000 [ 718.469639][T27750] gre0 speed is unknown, defaulting to 1000 [ 718.490995][T27779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5562'. [ 718.500504][T27779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5562'. [ 718.791493][T27794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.800309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.810099][T27794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.819626][T25860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.906704][T27794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.929470][T27793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.945348][T27756] lo speed is unknown, defaulting to 1000 [ 719.471860][T27756] lo speed is unknown, defaulting to 1000 [ 719.488142][T27756] gre0 speed is unknown, defaulting to 1000 [ 719.573028][T27815] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 720.070422][T27821] siw: device registration error -23 [ 720.078255][T27811] lo speed is unknown, defaulting to 1000 [ 720.638497][T27811] lo speed is unknown, defaulting to 1000 [ 720.805151][T27811] lo speed is unknown, defaulting to 1000 [ 720.812617][T27811] gre0 speed is unknown, defaulting to 1000 [ 721.560378][T27842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5580'. [ 721.577560][T27842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5580'. [ 721.605605][T27845] net_ratelimit: 3 callbacks suppressed [ 721.605625][T27845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.640334][T27845] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.694764][T27847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5582'. [ 721.704363][T27847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5582'. [ 721.745463][T27847] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 721.924370][T27849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5583'. [ 722.310729][T27856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.319643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.342295][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.351010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.362297][T27858] syzkaller0: entered promiscuous mode [ 722.439570][T27858] syzkaller0: entered allmulticast mode [ 722.968758][T11588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.977137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.068343][T27885] netlink: 'syz.2.5598': attribute type 9 has an invalid length. [ 723.077248][T27884] netlink: 'syz.2.5598': attribute type 9 has an invalid length. [ 723.085186][T27884] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5598'. [ 723.096536][T27885] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5598'. [ 723.153185][T27888] netlink: 'syz.1.5597': attribute type 10 has an invalid length. [ 723.163800][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5595'. [ 723.281847][T27887] 8021q: adding VLAN 0 to HW filter on device bond13 [ 723.317887][T27886] macsec1: entered promiscuous mode [ 723.336501][T27886] bond13: entered promiscuous mode [ 723.376372][T27886] bond13: left promiscuous mode [ 723.489254][T27899] A link change request failed with some changes committed already. Interface gre4 may have been left with an inconsistent configuration, please check. [ 723.545478][T27901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5601'. [ 723.930116][T27922] syzkaller0: entered promiscuous mode [ 723.933182][T27926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5609'. [ 723.945583][T27922] syzkaller0: entered allmulticast mode [ 723.956131][T27924] netlink: 'syz.1.5607': attribute type 1 has an invalid length. [ 723.968081][T27907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5603'. [ 724.018934][T27923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5603'. [ 724.031057][T27924] 8021q: adding VLAN 0 to HW filter on device bond17 [ 724.059815][T27933] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5610'. [ 724.092991][T27924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5607'. [ 724.127867][T27922] tipc: Enabled bearer , priority 0 [ 724.143376][T27933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5610'. [ 724.171600][T27917] netlink: 'syz.0.5604': attribute type 11 has an invalid length. [ 724.190825][T27924] bond17 (unregistering): Released all slaves [ 724.254789][T27920] tipc: Resetting bearer [ 724.318987][T27920] tipc: Disabling bearer [ 724.784313][T27959] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004 [ 725.053191][T27980] netlink: 'syz.0.5619': attribute type 1 has an invalid length. [ 725.140551][T27980] 8021q: adding VLAN 0 to HW filter on device bond11 [ 725.182433][T27983] bond11: (slave geneve4): making interface the new active one [ 725.192204][T27983] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 725.221762][T27984] pimreg9: entered allmulticast mode [ 725.254756][ T6580] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.264391][ T6580] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.283201][ T6580] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.295305][ T6580] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.428622][T27992] netlink: 'syz.0.5622': attribute type 1 has an invalid length. [ 725.679899][T27999] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20000 [ 725.745066][T28004] bridge0: port 1(vlan2) entered blocking state [ 725.763919][T28004] bridge0: port 1(vlan2) entered disabled state [ 725.787680][T28004] vlan2: entered allmulticast mode [ 725.793791][T28004] bond0: entered allmulticast mode [ 725.809493][T28004] bond_slave_0: entered allmulticast mode [ 725.825820][T28004] bond_slave_1: entered allmulticast mode [ 725.834277][T28004] dummy0: entered allmulticast mode [ 725.840973][T28004] bridge0: entered allmulticast mode [ 725.846309][T28004] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 725.858759][T28004] vlan2: left allmulticast mode [ 725.864105][T28004] bond0: left allmulticast mode [ 725.869598][T28004] bond_slave_0: left allmulticast mode [ 725.875105][T28004] bond_slave_1: left allmulticast mode [ 725.882205][T28004] dummy0: left allmulticast mode [ 725.888634][T28004] bridge0: left allmulticast mode [ 725.893880][T28004] mac80211_hwsim hwsim55 wlan1: left allmulticast mode [ 726.001973][T28010] lo speed is unknown, defaulting to 1000 [ 726.153755][T28030] netlink: 'syz.0.5634': attribute type 5 has an invalid length. [ 726.245894][T28010] lo speed is unknown, defaulting to 1000 [ 726.427101][T28049] ip6t_srh: unknown srh invflags 4000 [ 726.453324][T28049] tunl0: Caught tx_queue_len zero misconfig [ 726.911282][T28079] net_ratelimit: 1 callbacks suppressed [ 726.911303][T28079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.962012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.971131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.979406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.037719][T28010] lo speed is unknown, defaulting to 1000 [ 727.046545][T28010] gre0 speed is unknown, defaulting to 1000 [ 727.092227][T28079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.162206][T28079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.197014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.209178][T28079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.218020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.266779][T28077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.443006][T28108] pim6reg: entered allmulticast mode [ 727.487625][T28108] pim6reg: left allmulticast mode [ 727.537458][T28113] netlink: 'syz.3.5654': attribute type 1 has an invalid length. [ 727.734114][T28119] bond10: (slave geneve4): making interface the new active one [ 727.764513][T28119] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 727.865837][T28113] 8021q: adding VLAN 0 to HW filter on device bond10 [ 727.895371][T11588] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 727.911051][T11588] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 728.188362][T28119] tipc: Resetting bearer [ 728.247579][T11588] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 728.264048][T11588] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 728.308471][T28133] lo speed is unknown, defaulting to 1000 [ 728.718964][T28153] __nla_validate_parse: 12 callbacks suppressed [ 728.718989][T28153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5661'. [ 728.857019][T28149] lo speed is unknown, defaulting to 1000 [ 728.873790][T28133] lo speed is unknown, defaulting to 1000 [ 729.386237][T28172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5665'. [ 729.435135][T28172] nbd: nbd0 already in use [ 729.440166][T28172] block nbd0: NBD_DISCONNECT [ 729.444820][T28172] block nbd0: Send disconnect failed -32 [ 729.451297][T28172] block nbd0: Send disconnect failed -32 [ 729.469553][T28172] pimreg: left allmulticast mode [ 729.540821][T28141] ip6t_srh: unknown srh invflags BA61 [ 729.611392][T28172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.648462][T25173] gre0 speed is unknown, defaulting to 1000 [ 729.657611][T25173] syz1: Port: 1 Link ACTIVE [ 729.662253][T25173] gre0 speed is unknown, defaulting to 1000 [ 729.708438][T28133] lo speed is unknown, defaulting to 1000 [ 729.718119][T28133] gre0 speed is unknown, defaulting to 1000 [ 729.792779][T28149] lo speed is unknown, defaulting to 1000 [ 729.993844][T28181] batman_adv: batadv0: Adding interface: macvtap1 [ 730.008652][T28181] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.057055][T28181] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 730.299874][T28149] lo speed is unknown, defaulting to 1000 [ 730.322334][T28149] gre0 speed is unknown, defaulting to 1000 [ 730.547985][T28173] siw: device registration error -23 [ 730.603748][T28193] tc_dump_action: action bad kind [ 730.759977][T28197] netlink: 'syz.2.5672': attribute type 1 has an invalid length. [ 730.983549][T28197] 8021q: adding VLAN 0 to HW filter on device bond9 [ 731.164460][T28206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5675'. [ 731.203604][T28204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5674'. [ 731.477933][T28218] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.5678'. [ 731.507015][T28218] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5678'. [ 731.519651][T28218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5678'. [ 731.538119][T28218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5678'. [ 731.634795][T28214] syzkaller1: entered promiscuous mode [ 731.642452][T28214] syzkaller1: entered allmulticast mode [ 732.318313][T28240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5682'. [ 732.327509][T28240] net_ratelimit: 5 callbacks suppressed [ 732.327529][T28240] openvswitch: netlink: Flow actions attr not present in new flow. [ 733.075704][T28264] siw: device registration error -23 [ 733.312362][T28277] lo speed is unknown, defaulting to 1000 [ 733.712010][T28285] netlink: 'syz.0.5694': attribute type 1 has an invalid length. [ 733.848672][T25860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.857099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.012363][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5697'. [ 734.133773][T28277] lo speed is unknown, defaulting to 1000 [ 734.324184][T28304] x_tables: duplicate underflow at hook 4 [ 734.332318][T28304] netlink: 'syz.3.5698': attribute type 2 has an invalid length. [ 734.344789][T28304] netlink: 'syz.3.5698': attribute type 8 has an invalid length. [ 734.353305][T28304] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5698'. [ 734.489141][ T6572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.497734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.531845][T28306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5698'. [ 734.549531][T28306] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5698'. [ 734.671519][T28311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5700'. [ 734.689662][T28311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5700'. [ 734.735459][T28277] lo speed is unknown, defaulting to 1000 [ 734.767512][T28277] gre0 speed is unknown, defaulting to 1000 [ 734.930700][T28327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5704'. [ 735.517229][T28359] lo speed is unknown, defaulting to 1000 [ 735.641078][T28363] syzkaller1: entered promiscuous mode [ 735.646626][T28363] syzkaller1: entered allmulticast mode [ 735.701157][T28373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5712'. [ 735.736722][T28374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5712'. [ 736.068495][T28384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5714'. [ 736.143939][T28359] lo speed is unknown, defaulting to 1000 [ 736.305027][T28401] tipc: Failed to remove unknown binding: 66,0,0/1028357523:868613516/868613518 [ 736.362392][T28401] tipc: Failed to remove unknown binding: 66,0,0/1028357523:868613516/868613517 [ 736.412866][T28401] tipc: Failed to remove unknown binding: 66,0,0/1028357523:868613516/868613518 [ 736.444886][T28401] tipc: Failed to remove unknown binding: 66,0,0/1028357523:868613516/868613517 [ 736.479449][T28405] syzkaller1: entered promiscuous mode [ 736.495303][T28405] syzkaller1: entered allmulticast mode [ 736.828677][T28359] lo speed is unknown, defaulting to 1000 [ 736.836841][T28359] gre0 speed is unknown, defaulting to 1000 [ 738.009080][T28433] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 738.438732][T28452] IPVS: length: 528 != 736 [ 738.607843][T28467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.977406][T11576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.986273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.108460][T28476] bond11 (unregistering): Released all slaves [ 739.339779][T28486] netlink: 'syz.3.5737': attribute type 10 has an invalid length. [ 739.353546][T28486] __nla_validate_parse: 2 callbacks suppressed [ 739.353566][T28486] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5737'. [ 739.614618][ T5159] block nbd3: Possible stuck request ffff888027020000: control (read@0,1024B). Runtime 480 seconds [ 739.626848][ T5159] block nbd3: Possible stuck request ffff888027020200: control (read@1024,1024B). Runtime 480 seconds [ 739.638048][ T5159] block nbd3: Possible stuck request ffff888027020400: control (read@2048,1024B). Runtime 480 seconds [ 739.650123][ T5159] block nbd3: Possible stuck request ffff888027020600: control (read@3072,1024B). Runtime 480 seconds [ 739.710269][T28492] netlink: 'syz.4.5739': attribute type 20 has an invalid length. [ 739.724698][T28492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5739'. [ 739.814836][T28498] xt_hashlimit: size too large, truncated to 1048576 [ 740.249789][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.258405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.444852][T28536] bridge10: entered promiscuous mode [ 740.524598][T28534] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 740.550545][T28534] team0 (unregistering): Port device team_slave_0 removed [ 740.572555][T28534] team0 (unregistering): Failed to send options change via netlink (err -105) [ 740.585700][T28534] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 740.613513][T28534] team0 (unregistering): Port device team_slave_1 removed [ 740.625202][T28534] team0 (unregistering): Failed to send options change via netlink (err -105) [ 740.646720][T28534] team0 (unregistering): Failed to send port change of device netdevsim0 via netlink (err -105) [ 740.660681][T28534] team0 (unregistering): Port device netdevsim0 removed [ 740.685514][T28538] tipc: Enabling of bearer rejected, already enabled [ 740.695017][T28552] GUP no longer grows the stack in syz.4.5749 (28552): 200000003000-20000000a000 (200000001000) [ 740.717401][T28552] CPU: 1 UID: 0 PID: 28552 Comm: syz.4.5749 Not tainted syzkaller #0 PREEMPT(full) [ 740.717432][T28552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.717446][T28552] Call Trace: [ 740.717455][T28552] [ 740.717464][T28552] dump_stack_lvl+0xe8/0x150 [ 740.717504][T28552] __get_user_pages+0x2453/0x29d0 [ 740.717539][T28552] ? __lock_acquire+0x6b5/0x2cf0 [ 740.717588][T28552] ? __gup_longterm_locked+0xc4e/0x1630 [ 740.717621][T28552] ? down_read_killable+0x1bb/0x340 [ 740.717649][T28552] __gup_longterm_locked+0xdcf/0x1630 [ 740.717707][T28552] gup_fast_fallback+0x1d82/0x22e0 [ 740.717779][T28552] ? __pfx_gup_fast_fallback+0x10/0x10 [ 740.717807][T28552] ? futex_unqueue+0x22/0x240 [ 740.717830][T28552] ? futex_unqueue+0x22/0x240 [ 740.717853][T28552] ? is_valid_gup_args+0x11f/0x200 [ 740.717885][T28552] ? get_user_pages_fast+0x4d/0xb0 [ 740.717916][T28552] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 740.717947][T28552] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 740.717972][T28552] iov_iter_get_pages2+0x5e/0xa0 [ 740.717997][T28552] __se_sys_vmsplice+0x7b3/0x1490 [ 740.718049][T28552] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 740.718078][T28552] ? __pfx_futex_wait+0x10/0x10 [ 740.718119][T28552] ? vfs_write+0x9c3/0xb90 [ 740.718204][T28552] do_syscall_64+0x14d/0xf80 [ 740.718239][T28552] ? trace_irq_disable+0x3b/0x150 [ 740.718257][T28552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.718279][T28552] ? clear_bhb_loop+0x40/0x90 [ 740.718302][T28552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.718322][T28552] RIP: 0033:0x7f210499c819 [ 740.718342][T28552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.718360][T28552] RSP: 002b:00007f210585c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 740.718382][T28552] RAX: ffffffffffffffda RBX: 00007f2104c16180 RCX: 00007f210499c819 [ 740.718397][T28552] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 740.718411][T28552] RBP: 00007f2104a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 740.718424][T28552] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 740.718437][T28552] R13: 00007f2104c16218 R14: 00007f2104c16180 R15: 00007ffe7edce0a8 [ 740.718470][T28552] [ 741.018465][T28547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5748'. [ 741.080242][T28554] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 741.112911][T28560] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5753'. [ 741.133874][T28560] netlink: 364 bytes leftover after parsing attributes in process `syz.4.5753'. [ 741.412309][T28568] bond12: Unable to set down delay as MII monitoring is disabled [ 741.435530][T28584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5757'. [ 741.470429][T28584] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5757'. [ 741.472192][T28568] bond12 (unregistering): Released all slaves [ 741.517838][T28584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.546735][T28584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.555060][T28591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5758'. [ 741.563242][T28584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.606420][T28574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5757'. [ 741.619497][T28592] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 741.636046][T28573] lo speed is unknown, defaulting to 1000 [ 741.719161][T28572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.778831][T28596] netlink: 'syz.1.5759': attribute type 1 has an invalid length. [ 741.804731][T28596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5759'. [ 741.846175][T28598] : entered promiscuous mode [ 742.365311][T28573] lo speed is unknown, defaulting to 1000 [ 742.374456][T28609] netlink: 'syz.4.5762': attribute type 2 has an invalid length. [ 742.410743][T28609] !9: entered promiscuous mode [ 742.549395][T28639] netlink: 'syz.2.5768': attribute type 10 has an invalid length. [ 742.609658][T28644] netlink: 'syz.2.5768': attribute type 10 has an invalid length. [ 742.805802][T28638] nbd0: detected capacity change from 0 to 127 [ 742.833855][ T5831] block nbd0: Receive control failed (result -104) [ 742.835057][ T51] block nbd0: Receive control failed (result -32) [ 743.158839][T28665] netlink: 'syz.2.5772': attribute type 1 has an invalid length. [ 743.232169][T28573] lo speed is unknown, defaulting to 1000 [ 743.262219][T28573] gre0 speed is unknown, defaulting to 1000 [ 743.412231][T28678] batadv0: entered allmulticast mode [ 743.646735][T28686] netlink: 'syz.1.5780': attribute type 1 has an invalid length. [ 743.943289][T28695] netlink: 'syz.1.5784': attribute type 1 has an invalid length. [ 744.055628][T28702] net_ratelimit: 2 callbacks suppressed [ 744.055652][T28702] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 744.090398][T18414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.098889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.185519][T28706] hsr_slave_1 (unregistering): left promiscuous mode [ 744.265686][T28711] netlink: 'syz.4.5789': attribute type 1 has an invalid length. [ 744.386892][T28711] 8021q: adding VLAN 0 to HW filter on device bond14 [ 744.488005][T28722] __nla_validate_parse: 10 callbacks suppressed [ 744.488029][T28722] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5788'. [ 744.532944][T28711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.550309][T28712] IPVS: Error connecting to the multicast addr [ 744.611275][T28726] batadv_slave_1: entered promiscuous mode [ 744.718127][T28727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5791'. [ 744.818985][T28727] batadv_slave_1 (unregistering): left promiscuous mode [ 744.826689][T28727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 745.227860][T28742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5796'. [ 745.437247][T28749] validate_nla: 1 callbacks suppressed [ 745.453234][T28749] netlink: 'syz.0.5799': attribute type 2 has an invalid length. [ 745.473437][T28749] netlink: 'syz.0.5799': attribute type 2 has an invalid length. [ 745.573918][T28752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5800'. [ 745.618807][T28757] gre1: entered promiscuous mode [ 745.694448][T28759] syzkaller0: entered promiscuous mode [ 745.711693][T28759] syzkaller0: entered allmulticast mode [ 746.007984][T11576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.016461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.030444][T28790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5811'. [ 746.128841][T28785] netlink: 'syz.2.5808': attribute type 13 has an invalid length. [ 746.190421][T25173] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 746.516419][T28823] netlink: 'syz.2.5820': attribute type 1 has an invalid length. [ 746.563782][T28823] 8021q: adding VLAN 0 to HW filter on device bond10 [ 746.632456][T28829] bond10: (slave veth5): Enslaving as an active interface with a down link [ 746.641975][T28818] lo speed is unknown, defaulting to 1000 [ 746.738648][T28831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5821'. [ 746.767613][T25173] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 746.887673][T28832] nbd5: detected capacity change from 0 to 63 [ 746.980971][T28840] tipc: Enabled bearer , priority 0 [ 747.000207][T28840] syzkaller0: entered promiscuous mode [ 747.008873][T28840] syzkaller0: entered allmulticast mode [ 747.082508][T28818] lo speed is unknown, defaulting to 1000 [ 747.093569][T28840] tipc: Resetting bearer [ 747.136457][T28847] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5825'. [ 747.149416][T28840] tipc: Disabling bearer [ 747.293024][T28855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5828'. [ 747.302447][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.314105][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 747.560452][ T5831] block nbd5: Receive control failed (result -104) [ 747.642157][T28865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5830'. [ 747.661324][T28865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5830'. [ 747.781224][T28818] lo speed is unknown, defaulting to 1000 [ 747.792256][T28818] gre0 speed is unknown, defaulting to 1000 [ 747.810453][T28851] lec0: mtu less than device minimum [ 747.825522][T28851] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 747.868245][T28850] lec:lec_atm_close: lec0: Shut down! [ 748.191028][T28883] lo speed is unknown, defaulting to 1000 [ 748.575507][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 749.394147][T28883] lo speed is unknown, defaulting to 1000 [ 749.401363][T28913] sctp: [Deprecated]: syz.1.5844 (pid 28913) Use of int in max_burst socket option deprecated. [ 749.401363][T28913] Use struct sctp_assoc_value instead [ 749.524170][T28924] netlink: 'syz.2.5845': attribute type 4 has an invalid length. [ 749.524170][T28923] netlink: 'syz.2.5845': attribute type 4 has an invalid length. [ 749.838765][T28883] lo speed is unknown, defaulting to 1000 [ 749.846449][T28883] gre0 speed is unknown, defaulting to 1000 [ 749.860305][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.865366][T28933] syzkaller0: entered promiscuous mode [ 749.868896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.882823][T28933] syzkaller0: entered allmulticast mode [ 749.975179][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 749.990565][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 750.000326][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 750.029476][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 750.038518][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 750.313018][T28934] lo speed is unknown, defaulting to 1000 [ 750.352551][T28937] nft_compat: unsupported protocol 0 [ 750.791962][ T6572] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 750.952030][T11576] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 751.000290][ T6572] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 751.120795][T11576] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 751.129912][T18413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.138388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.182019][ T49] dvmrp0: left allmulticast mode [ 751.409869][ T49] bond1 (unregistering): (slave geneve2): Releasing active interface [ 751.444675][ T49] bond2 (unregistering): (slave bridge1): Releasing active interface [ 751.727938][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.736881][ T49] bond_slave_0: left promiscuous mode [ 751.744725][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.754208][ T49] bond_slave_1: left promiscuous mode [ 751.760251][ T49] bond0 (unregistering): Released all slaves [ 751.771328][ T49] bond1 (unregistering): Released all slaves [ 751.788261][ T49] bond2 (unregistering): Released all slaves [ 751.803403][ T49] bond3 (unregistering): Released all slaves [ 751.826358][ T49] bond4 (unregistering): (slave veth5): Releasing active interface [ 751.835573][ T49] bond4 (unregistering): Released all slaves [ 751.849406][ T49] bond5 (unregistering): Released all slaves [ 751.865533][ T49] bond6 (unregistering): Released all slaves [ 751.886147][ T49] bond7 (unregistering): Released all slaves [ 751.899771][ T49] bond8 (unregistering): Released all slaves [ 751.913222][ T49] bond9 (unregistering): Released all slaves [ 751.926256][ T49] bond10 (unregistering): Released all slaves [ 751.941751][ T49] bond11 (unregistering): Released all slaves [ 751.961125][ T49] bond12 (unregistering): (slave veth8): Releasing active interface [ 751.972156][ T49] bond12 (unregistering): Released all slaves [ 751.990208][ T49] bond13 (unregistering): Released all slaves [ 752.003773][ T49] bond14 (unregistering): Released all slaves [ 752.063752][T28934] lo speed is unknown, defaulting to 1000 [ 752.167691][ T51] Bluetooth: hci1: command tx timeout [ 752.222449][ T49] : left promiscuous mode [ 752.330913][ T49] !: left promiscuous mode [ 752.430714][ T49] !9: left promiscuous mode [ 752.597550][ T49] tipc: Disabling bearer [ 752.623726][ T49] tipc: Left network mode [ 752.634851][T28955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.643814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.678713][T28934] lo speed is unknown, defaulting to 1000 [ 752.679304][T28960] __nla_validate_parse: 2 callbacks suppressed [ 752.679320][T28960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5854'. [ 752.692322][T28934] gre0 speed is unknown, defaulting to 1000 [ 752.765773][T28962] netlink: 'syz.1.5855': attribute type 21 has an invalid length. [ 752.786527][T28960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5854'. [ 752.809757][T28962] netem: change failed [ 752.853307][T28960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5854'. [ 752.967471][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 752.975589][ C0] lec:lec_tx_timeout: lec0 [ 753.024945][T28969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5856'. [ 753.209402][T28973] bridge0: Device is already in use. [ 753.629087][T28986] : renamed from lo (while UP) [ 754.256923][ T51] Bluetooth: hci1: command tx timeout [ 754.621539][T29017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.630374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.643754][T29017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5867'. [ 754.711364][T29030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5870'. [ 754.751622][ T49] mac80211_hwsim hwsim52 wlan0 (unregistering): left allmulticast mode [ 754.796253][T29033] IPVS: set_ctl: invalid protocol: 44 172.20.20.55:20002 [ 754.872156][T29030] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5870'. [ 755.115665][T29049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5868'. [ 755.166584][T29049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5868'. [ 755.182607][T29050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5871'. [ 755.197759][T29050] nbd: must specify an index to disconnect [ 755.376818][T28934] chnl_net:caif_netlink_parms(): no params data found [ 755.608619][ T6572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.617083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.047078][T29087] netlink: 'syz.0.5880': attribute type 21 has an invalid length. [ 756.134816][T28934] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.207662][T28934] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.221155][T29094] netlink: 'syz.0.5880': attribute type 1 has an invalid length. [ 756.227777][T28934] bridge_slave_0: entered allmulticast mode [ 756.237596][T28934] bridge_slave_0: entered promiscuous mode [ 756.255789][T29087] netlink: 'syz.0.5880': attribute type 4 has an invalid length. [ 756.276290][T29095] netlink: 'syz.1.5881': attribute type 15 has an invalid length. [ 756.328516][ T51] Bluetooth: hci1: command tx timeout [ 756.354071][T28934] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.387050][T28934] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.410638][T28934] bridge_slave_1: entered allmulticast mode [ 756.444416][T28934] bridge_slave_1: entered promiscuous mode [ 756.616873][T29113] netlink: 'syz.2.5883': attribute type 13 has an invalid length. [ 756.634072][T29094] bond12: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 756.656388][T29113] netlink: 'syz.2.5883': attribute type 17 has an invalid length. [ 756.703199][T29094] bond12 (unregistering): Released all slaves [ 756.774241][T29100] sch_tbf: burst 0 is lower than device tunl0 mtu (129) ! [ 757.308401][T29108] bridge0: left promiscuous mode [ 757.456490][T29113] 8021q: adding VLAN 0 to HW filter on device ` [ 757.466024][T29113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 757.509713][T28934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.539620][T28934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.578483][ T49] hsr_slave_0: left promiscuous mode [ 757.597761][ T49] hsr_slave_1: left promiscuous mode [ 757.606380][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.625022][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.696147][ T49] pim6reg99999991 (unregistering): left allmulticast mode [ 757.809902][T29159] __nla_validate_parse: 40 callbacks suppressed [ 757.809926][T29159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5893'. [ 757.941367][ T49] team0 (unregistering): Port device team_slave_1 removed [ 757.969486][ T49] team0 (unregistering): Port device team_slave_0 removed [ 758.384210][T29159] vxcan3: entered allmulticast mode [ 758.398501][T29163] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5894'. [ 758.407629][ T51] Bluetooth: hci1: command tx timeout [ 758.429563][T28934] team0: Port device team_slave_0 added [ 758.450134][T28934] team0: Port device team_slave_1 added [ 758.461846][T29154] lo speed is unknown, defaulting to 1000 [ 758.652069][T28934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.679538][T28934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.737839][T28934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.739535][T29173] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5895'. [ 758.786509][T28934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.820177][T28934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.897708][T28934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.169397][T28934] hsr_slave_0: entered promiscuous mode [ 759.198574][T28934] hsr_slave_1: entered promiscuous mode [ 759.205310][T28934] debugfs: 'hsr0' already exists in 'hsr' [ 759.214644][T29193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5899'. [ 759.227622][T28934] Cannot create hsr debugfs directory [ 759.377205][ T49] IPVS: stop unused estimator thread 0... [ 759.409019][T29187] lo speed is unknown, defaulting to 1000 [ 759.414937][T29154] lo speed is unknown, defaulting to 1000 [ 759.994046][T28934] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 760.024056][T18400] lec:lec_start_xmit: lec0:No lecd attached [ 760.070082][T29225] sctp: [Deprecated]: syz.1.5904 (pid 29225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 760.070082][T29225] Use struct sctp_sack_info instead [ 760.090837][T29225] sctp: [Deprecated]: syz.1.5904 (pid 29225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 760.090837][T29225] Use struct sctp_sack_info instead [ 760.118500][T29226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5904'. [ 760.132716][T29217] hm3): entered promiscuous mode [ 760.240382][T28934] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 760.301395][T29230] geneve3: entered allmulticast mode [ 760.312003][T29154] gre0 speed is unknown, defaulting to 1000 [ 760.319555][T29187] lo speed is unknown, defaulting to 1000 [ 760.372460][T28934] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 760.679146][T28934] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 760.959033][T29259] ip6gre0: Caught tx_queue_len zero misconfig [ 760.965263][T29259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5910'. [ 761.211187][T28934] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 761.256452][T28934] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 761.305082][T28934] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 761.360618][T28934] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 761.405797][T29187] gre0 speed is unknown, defaulting to 1000 [ 761.556208][T29287] netlink: 'syz.3.5914': attribute type 2 has an invalid length. [ 761.570728][T29287] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5914'. [ 761.866603][T28934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.924011][T28934] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.960936][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.968203][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.974426][T29302] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 762.021338][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.028919][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.046618][T29298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5917'. [ 762.103860][T29305] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5918'. [ 762.115613][T29305] netlink: 'syz.1.5918': attribute type 2 has an invalid length. [ 762.560142][T29312] netlink: 'syz.3.5919': attribute type 1 has an invalid length. [ 762.938017][T29312] 8021q: adding VLAN 0 to HW filter on device bond11 [ 763.378462][T28934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.112812][T29357] lo speed is unknown, defaulting to 1000 [ 764.399903][T28934] veth0_vlan: entered promiscuous mode [ 764.437202][T28934] veth1_vlan: entered promiscuous mode [ 764.523787][T28934] veth0_macvtap: entered promiscuous mode [ 764.558014][T28934] veth1_macvtap: entered promiscuous mode [ 764.623346][T28934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.683128][T29370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5928'. [ 764.696589][T28934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.784017][ T95] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.821069][ T95] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.850006][ T95] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.913206][ T95] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.037392][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 765.045507][ C0] lec:lec_tx_timeout: lec0 [ 765.083130][T29383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5930'. [ 765.281407][T29385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5930'. [ 765.328293][T29383] 8021q: adding VLAN 0 to HW filter on device bond12 [ 765.494814][T29357] lo speed is unknown, defaulting to 1000 [ 765.541286][ T6579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.557312][ T6579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.701160][ T6579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.713879][ T6579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.768514][T29401] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5932'. [ 765.809040][T29401] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5932'. [ 765.830398][T29402] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5932'. [ 765.847186][T29402] netlink: 'syz.3.5932': attribute type 2 has an invalid length. [ 765.886688][T29406] netlink: 'syz.2.5931': attribute type 1 has an invalid length. [ 765.904847][T29406] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5931'. [ 766.029131][T29410] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5846'. [ 766.038710][T29410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5846'. [ 766.057430][T29410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5846'. [ 766.179605][T29357] gre0 speed is unknown, defaulting to 1000 [ 766.269278][T29424] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 766.679344][T29441] lo speed is unknown, defaulting to 1000 [ 766.834609][T29445] netlink: 'syz.2.5940': attribute type 1 has an invalid length. [ 767.652408][T29441] lo speed is unknown, defaulting to 1000 [ 768.008129][ T5831] Bluetooth: hci1: command 0x0405 tx timeout [ 768.039012][T29441] gre0 speed is unknown, defaulting to 1000 [ 768.433425][T29472] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 768.448047][T29472] bond11 (unregistering): Released all slaves [ 768.495162][T29475] tipc: Enabled bearer , priority 0 [ 768.563334][T29475] syzkaller0: entered promiscuous mode [ 768.571085][T29475] syzkaller0: entered allmulticast mode [ 768.586402][T29475] tipc: Resetting bearer [ 768.600523][T29474] tipc: Resetting bearer [ 769.701111][ T5159] block nbd3: Possible stuck request ffff888027020000: control (read@0,1024B). Runtime 510 seconds [ 769.712382][ T5159] block nbd3: Possible stuck request ffff888027020200: control (read@1024,1024B). Runtime 510 seconds [ 769.724455][ T5159] block nbd3: Possible stuck request ffff888027020400: control (read@2048,1024B). Runtime 510 seconds [ 769.736844][ T5159] block nbd3: Possible stuck request ffff888027020600: control (read@3072,1024B). Runtime 510 seconds [ 770.694215][T29474] tipc: Disabling bearer [ 770.730757][T29482] tipc: Started in network mode [ 770.735831][T29482] tipc: Node identity 00000000000000000038770000000001, cluster identity 4711 [ 770.759856][T29482] tipc: Enabling of bearer rejected, failed to enable media [ 771.139006][T29508] sch_tbf: burst 0 is lower than device sit0 mtu (1536) ! [ 771.146922][T29507] netlink: 'syz.1.5959': attribute type 1 has an invalid length. [ 771.346820][T29521] x_tables: duplicate underflow at hook 2 [ 771.422967][T29520] pim6reg: entered allmulticast mode [ 771.447655][T29518] pim6reg: left allmulticast mode [ 771.448761][T29507] __nla_validate_parse: 3 callbacks suppressed [ 771.448779][T29507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5959'. [ 771.533774][T29530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5959'. [ 771.584006][T29530] bond17: entered allmulticast mode [ 771.631231][T29530] 8021q: adding VLAN 0 to HW filter on device bond17 [ 771.886521][T29537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 772.193538][T29552] lo speed is unknown, defaulting to 1000 [ 772.556033][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5974'. [ 772.561839][T29575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5973'. [ 772.572458][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5974'. [ 772.653945][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5974'. [ 772.675274][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5974'. [ 772.685536][T29577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5974'. [ 772.769190][T29585] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5975'. [ 772.903537][T29593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5977'. [ 772.915341][ T5159] block nbd0: Connection timed out, retrying (0/2 alive) [ 772.924114][ T5159] block nbd0: Connection timed out, retrying (0/2 alive) [ 772.931695][ T5159] block nbd0: Connection timed out, retrying (0/2 alive) [ 772.938954][ T5159] block nbd0: Connection timed out, retrying (0/2 alive) [ 772.946213][ T5159] block nbd0: Dead connection, failed to find a fallback [ 772.953546][ T5159] block nbd0: shutting down sockets [ 772.959325][ T5159] blk_print_req_error: 137 callbacks suppressed [ 772.959343][ T5159] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.975357][ T5159] buffer_io_error: 137 callbacks suppressed [ 772.975375][ T5159] Buffer I/O error on dev nbd0, logical block 3, async page read [ 772.989365][ T5159] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 772.999233][ T5159] Buffer I/O error on dev nbd0, logical block 2, async page read [ 773.007939][ T5159] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 773.017643][ T5159] Buffer I/O error on dev nbd0, logical block 1, async page read [ 773.025504][ T5159] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 773.035509][ T5159] Buffer I/O error on dev nbd0, logical block 0, async page read [ 773.043836][T13629] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 773.057396][T13629] Buffer I/O error on dev nbd0, logical block 0, async page read [ 773.067574][T13629] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 773.070428][T29593] tipc: Enabled bearer , priority 0 [ 773.083808][T13629] Buffer I/O error on dev nbd0, logical block 1, async page read [ 773.083903][T13629] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 773.083930][T13629] Buffer I/O error on dev nbd0, logical block 2, async page read [ 773.083971][T13629] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 773.083996][T13629] Buffer I/O error on dev nbd0, logical block 3, async page read [ 773.084056][T13629] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 773.084083][T13629] Buffer I/O error on dev nbd0, logical block 0, async page read [ 773.084136][T13629] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 773.084161][T13629] Buffer I/O error on dev nbd0, logical block 1, async page read [ 773.084859][T13629] ldm_validate_partition_table(): Disk read failed. [ 773.175264][T13629] Dev nbd0: unable to read RDB block 0 [ 773.181804][T13629] nbd0: unable to read partition table [ 773.199026][T13629] ldm_validate_partition_table(): Disk read failed. [ 773.206199][T13629] Dev nbd0: unable to read RDB block 0 [ 773.228076][T13629] nbd0: unable to read partition table [ 773.394481][T29593] syzkaller0: entered promiscuous mode [ 773.400817][T29593] syzkaller0: entered allmulticast mode [ 773.409047][T29593] tipc: Resetting bearer [ 773.434085][T29597] pim6reg1: entered promiscuous mode [ 773.441162][T29597] pim6reg1: entered allmulticast mode [ 773.452946][T29552] lo speed is unknown, defaulting to 1000 [ 773.605347][T29609] netlink: 'syz.1.5981': attribute type 2 has an invalid length. [ 773.650384][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 773.672006][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 773.681150][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 773.696741][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 773.708210][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 773.715343][T29586] tipc: Resetting bearer [ 774.114059][T29622] netlink: 'syz.1.5985': attribute type 4 has an invalid length. [ 775.715385][T29586] tipc: Disabling bearer [ 775.749288][T29552] gre0 speed is unknown, defaulting to 1000 [ 775.767746][ T51] Bluetooth: hci3: command tx timeout [ 775.823692][T29610] lo speed is unknown, defaulting to 1000 [ 776.145046][T29641] syzkaller0: entered promiscuous mode [ 776.171364][T29641] 0: reclassify loop, rule prio 0, protocol 800 [ 776.320827][T29647] syzkaller0: entered promiscuous mode [ 776.326700][T29647] syzkaller0: entered allmulticast mode [ 776.355395][T29610] lo speed is unknown, defaulting to 1000 [ 776.512267][T29648] lo speed is unknown, defaulting to 1000 [ 776.689396][T29659] __nla_validate_parse: 2 callbacks suppressed [ 776.689419][T29659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5998'. [ 777.028314][T29664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5998'. [ 777.077415][T29648] lo speed is unknown, defaulting to 1000 [ 777.321135][T29648] gre0 speed is unknown, defaulting to 1000 [ 777.369137][ T5159] block nbd5: Possible stuck request ffff888027108000: control (read@0,1024B). Runtime 30 seconds [ 777.379977][ T5159] block nbd5: Possible stuck request ffff888027108200: control (read@1024,1024B). Runtime 30 seconds [ 777.391291][ T5159] block nbd5: Possible stuck request ffff888027108400: control (read@2048,1024B). Runtime 30 seconds [ 777.402394][ T5159] block nbd5: Possible stuck request ffff888027108600: control (read@3072,1024B). Runtime 30 seconds [ 777.626957][T29610] gre0 speed is unknown, defaulting to 1000 [ 777.847492][ T51] Bluetooth: hci3: command tx timeout [ 777.978096][T29673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6001'. [ 778.029905][T29675] netlink: 428 bytes leftover after parsing attributes in process `syz.1.6002'. [ 778.144647][T29673] bond13: option resend_igmp: invalid value (2878) [ 778.151646][T29673] bond13: option resend_igmp: allowed values 0 - 255 [ 778.168817][T29673] bond13 (unregistering): Released all slaves [ 778.230489][T29675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6002'. [ 778.701770][T29687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6007'. [ 778.735491][T29686] tap0: tun_chr_ioctl cmd 1074025677 [ 778.757865][T29686] tap0: linktype set to 6 [ 779.432718][T29699] veth1: entered allmulticast mode [ 779.928799][ T51] Bluetooth: hci3: command tx timeout [ 780.024245][T29610] chnl_net:caif_netlink_parms(): no params data found [ 780.372254][T29723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6016'. [ 780.404990][T29727] sctp: [Deprecated]: syz.1.6017 (pid 29727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 780.404990][T29727] Use struct sctp_sack_info instead [ 780.435654][T29731] netlink: 'syz.3.6018': attribute type 2 has an invalid length. [ 780.453497][T29732] netlink: 'syz.3.6018': attribute type 2 has an invalid length. [ 780.465339][T29610] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.485977][T29610] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.494548][T29610] bridge_slave_0: entered allmulticast mode [ 780.525133][T29610] bridge_slave_0: entered promiscuous mode [ 780.586607][T29723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6016'. [ 780.622385][T29731] !: entered promiscuous mode [ 780.671095][T29610] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.700394][T29610] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.715713][T29610] bridge_slave_1: entered allmulticast mode [ 780.744080][T29610] bridge_slave_1: entered promiscuous mode [ 780.763503][T29729] syzkaller1: entered promiscuous mode [ 780.769574][T29729] syzkaller1: entered allmulticast mode [ 780.777516][T11576] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.786485][T11576] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.800757][T29743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.884705][T11578] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.894453][T11578] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.937023][T29610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.963607][T29610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.004787][T29746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6020'. [ 781.004840][T29745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6020'. [ 781.075167][T29610] team0: Port device team_slave_0 added [ 781.096548][T29610] team0: Port device team_slave_1 added [ 781.172819][T29610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.180146][T29610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.211669][T29610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.223543][T29752] lo speed is unknown, defaulting to 1000 [ 781.225253][T29610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.238387][T29610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.270288][T29610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.353209][T29610] hsr_slave_0: entered promiscuous mode [ 781.369330][T29610] hsr_slave_1: entered promiscuous mode [ 781.375838][T29610] debugfs: 'hsr0' already exists in 'hsr' [ 781.397811][T29610] Cannot create hsr debugfs directory [ 781.633227][T29760] syzkaller0: entered promiscuous mode [ 781.640869][T29760] syzkaller0: entered allmulticast mode [ 781.648388][T29767] netlink: 'syz.1.6027': attribute type 1 has an invalid length. [ 781.671425][T29752] lo speed is unknown, defaulting to 1000 [ 781.745377][T29768] netlink: 'syz.1.6027': attribute type 1 has an invalid length. [ 781.797733][T29768] __nla_validate_parse: 8 callbacks suppressed [ 781.797754][T29768] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6027'. [ 781.951907][T29610] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.988832][T29610] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.007972][ T51] Bluetooth: hci3: command tx timeout [ 782.076316][T29780] xt_connbytes: Forcing CT accounting to be enabled [ 782.085130][T29610] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.107838][T29610] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.149709][T29752] gre0 speed is unknown, defaulting to 1000 [ 782.224164][T29610] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.255229][T29610] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.356038][T29610] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.368690][T29610] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.742445][T11587] tipc: Subscription rejected, illegal request [ 782.757152][T29610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 782.777111][T29610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 782.802809][T29610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 782.869093][T29610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 782.925492][T29807] netlink: 'syz.2.6038': attribute type 1 has an invalid length. [ 783.044928][T29807] bond11: entered promiscuous mode [ 783.066637][T29807] bond11: entered allmulticast mode [ 783.084813][T29807] 8021q: adding VLAN 0 to HW filter on device bond11 [ 783.114794][T29811] macvlan2: entered promiscuous mode [ 783.122609][T29811] macvlan2: entered allmulticast mode [ 783.213821][T29813] netlink: 'syz.1.6039': attribute type 11 has an invalid length. [ 783.383765][T29817] openvswitch: netlink: Multiple metadata blocks provided [ 783.386390][T29610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.441178][T29610] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.571289][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.578566][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.589921][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.597593][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.632564][T29817] netlink: 'syz.1.6041': attribute type 2 has an invalid length. [ 783.665261][T29817] !9: entered promiscuous mode [ 783.704885][T29817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6041'. [ 784.309630][T29610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.521646][T29610] veth0_vlan: entered promiscuous mode [ 784.619446][T29610] veth1_vlan: entered promiscuous mode [ 784.699978][T29859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6051'. [ 784.725018][T29859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6051'. [ 784.738031][T29610] veth0_macvtap: entered promiscuous mode [ 784.740862][T29859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6051'. [ 784.769077][T29610] veth1_macvtap: entered promiscuous mode [ 784.832326][T29610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.871976][T29610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.887008][T11576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.912627][T11576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.942278][T11576] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.958083][T11576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.056138][T29872] netlink: 'syz.4.6055': attribute type 1 has an invalid length. [ 785.102952][T29872] vlan2: entered allmulticast mode [ 785.112049][T29872] vlan0: entered allmulticast mode [ 785.117612][T29872] veth0_vlan: entered allmulticast mode [ 785.157624][T29870] lo speed is unknown, defaulting to 1000 [ 785.272975][T11576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.304250][T11576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.360725][T29876] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6057'. [ 785.416681][T29878] openvswitch: netlink: Multiple metadata blocks provided [ 785.676902][T29882] syzkaller1: entered promiscuous mode [ 785.681231][T29884] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6059'. [ 785.701349][T29882] syzkaller1: entered allmulticast mode [ 785.773295][T29881] netlink: 'syz.4.6058': attribute type 2 has an invalid length. [ 785.827199][T29883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6058'. [ 785.851193][T29887] netlink: 'syz.2.6060': attribute type 21 has an invalid length. [ 785.901221][ T6579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.910651][ T6579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.926715][T29881] !9: entered promiscuous mode [ 785.946952][T29870] lo speed is unknown, defaulting to 1000 [ 786.063105][T29881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6058'. [ 786.356440][T29898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5980'. [ 786.582148][T29898] vlan2: entered promiscuous mode [ 786.610057][T29898] bridge0: entered promiscuous mode [ 787.025068][T29906] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6066'. [ 787.042804][T29870] gre0 speed is unknown, defaulting to 1000 [ 787.065762][T29910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6067'. [ 787.066387][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 787.118737][T29910] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 787.118757][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 787.135652][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 787.144908][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 787.152785][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 787.232163][T29910] netlink: 'syz.2.6067': attribute type 4 has an invalid length. [ 787.319972][T29907] lo speed is unknown, defaulting to 1000 [ 787.576543][T29919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6070'. [ 787.608659][T29919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6070'. [ 788.138611][T29931] openvswitch: netlink: Multiple metadata blocks provided [ 788.425392][T29936] netlink: 'syz.0.6073': attribute type 2 has an invalid length. [ 788.527793][T29931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6073'. [ 788.533447][T29907] lo speed is unknown, defaulting to 1000 [ 788.777677][T29936] !9: entered promiscuous mode [ 788.851397][T29931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6073'. [ 789.208826][ T51] Bluetooth: hci4: command tx timeout [ 789.525081][T29907] gre0 speed is unknown, defaulting to 1000 [ 789.562866][T29946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.633651][T29946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.748544][T29946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.771508][T29946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.797819][T29947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.850745][T29947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.880410][T29947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.900907][T29947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.925436][T29947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.975875][T29947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.586480][T29954] syzkaller1: entered promiscuous mode [ 790.598556][T29954] syzkaller1: entered allmulticast mode [ 790.826620][T29962] netlink: 'syz.4.6077': attribute type 1 has an invalid length. [ 791.300413][ T51] Bluetooth: hci4: command tx timeout [ 791.521568][T29976] xt_l2tp: invalid flags combination: 0 [ 791.546401][T29907] chnl_net:caif_netlink_parms(): no params data found [ 791.741748][T29907] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.751103][T29907] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.760954][T29907] bridge_slave_0: entered allmulticast mode [ 791.770068][T29907] bridge_slave_0: entered promiscuous mode [ 791.779603][T29907] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.786935][T29907] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.796221][T29907] bridge_slave_1: entered allmulticast mode [ 791.804545][T29907] bridge_slave_1: entered promiscuous mode [ 791.909433][T29907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.124365][T29997] netlink: 'syz.0.6084': attribute type 2 has an invalid length. [ 792.185465][T29907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.330444][T29986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6084'. [ 792.571824][T29997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6084'. [ 792.720252][T30013] xt_hashlimit: size too large, truncated to 1048576 [ 792.988958][T29907] team0: Port device team_slave_0 added [ 793.049849][T29907] team0: Port device team_slave_1 added [ 793.178145][T29907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.188806][T29907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.264669][T29907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.329740][T29907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.349473][T29907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.373208][ T5831] Bluetooth: hci4: command tx timeout [ 793.423581][T29907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.548743][T30032] lo speed is unknown, defaulting to 1000 [ 793.700350][T30046] ipt_ECN: cannot use operation on non-tcp rule [ 793.765994][T29907] hsr_slave_0: entered promiscuous mode [ 793.788922][T29907] hsr_slave_1: entered promiscuous mode [ 793.806388][T29907] debugfs: 'hsr0' already exists in 'hsr' [ 793.813833][T29907] Cannot create hsr debugfs directory [ 793.998186][T30056] netlink: 'syz.2.6099': attribute type 30 has an invalid length. [ 794.129469][T30056] netlink: 'syz.2.6099': attribute type 1 has an invalid length. [ 794.149349][T30056] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6099'. [ 794.163098][T30056] netlink: 658 bytes leftover after parsing attributes in process `syz.2.6099'. [ 794.195373][T30056] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6099'. [ 794.290779][T30060] netlink: 'syz.3.6100': attribute type 2 has an invalid length. [ 794.344778][T30060] !9: entered promiscuous mode [ 794.414765][T30032] lo speed is unknown, defaulting to 1000 [ 794.414812][T30043] lo speed is unknown, defaulting to 1000 [ 794.526354][T30061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6100'. [ 794.651693][ T31] INFO: task udevd:10361 blocked for more than 143 seconds. [ 794.665013][ T31] Not tainted syzkaller #0 [ 794.677022][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.689612][ T31] task:udevd state:D stack:22496 pid:10361 tgid:10361 ppid:5194 task_flags:0x400140 flags:0x00080802 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 794.703788][ T31] Call Trace: [ 794.717958][ T31] [ 794.724060][ T31] __schedule+0x15dd/0x52d0 [ 794.735296][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 794.746472][ T31] ? __pfx___schedule+0x10/0x10 [ 794.756736][ T31] ? schedule+0x90/0x360 [ 794.767423][ T31] schedule+0x164/0x360 [ 794.776951][ T31] io_schedule+0x7f/0xd0 [ 794.785982][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 794.799846][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 794.824235][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 794.842718][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 794.861892][ T31] do_read_cache_folio+0x1ad/0x590 [ 794.881001][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 794.893808][ T31] read_part_sector+0xb6/0x2b0 [ 794.904345][ T31] adfspart_check_POWERTEC+0x92/0xef0 [ 794.917315][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 794.932575][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 794.947503][ T31] bdev_disk_changed+0x7ba/0x1550 [ 794.958205][ T31] ? bdev_open+0xe0/0xd30 [ 794.970222][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 794.981803][ T31] blkdev_get_whole+0x380/0x510 [ 794.992429][ T31] bdev_open+0x31e/0xd30 [ 795.007936][ T31] blkdev_open+0x470/0x610 [ 795.012531][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 795.027382][ T31] do_dentry_open+0x785/0x14e0 [ 795.032231][ T31] vfs_open+0x3b/0x340 [ 795.036474][ T31] ? path_openat+0x2df0/0x3860 [ 795.044199][ T31] path_openat+0x2e08/0x3860 [ 795.051998][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 795.058356][ T31] ? stack_depot_save_flags+0x33/0x810 [ 795.064003][ T31] ? __pfx_path_openat+0x10/0x10 [ 795.069635][ T31] ? __x64_sys_openat+0x138/0x170 [ 795.074815][ T31] ? do_syscall_64+0x14d/0xf80 [ 795.117288][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.127803][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 795.132816][ T31] do_file_open+0x23e/0x4a0 [ 795.178092][ T31] ? __pfx_do_file_open+0x10/0x10 [ 795.183234][ T31] ? _raw_spin_unlock+0x28/0x50 [ 795.204564][ T31] ? alloc_fd+0x64b/0x6c0 [ 795.210194][ T31] do_sys_openat2+0x113/0x200 [ 795.215115][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 795.221641][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 795.227680][ T31] ? rcu_is_watching+0x15/0xb0 [ 795.232697][ T31] __x64_sys_openat+0x138/0x170 [ 795.237786][ T31] do_syscall_64+0x14d/0xf80 [ 795.242487][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.248659][ T31] ? clear_bhb_loop+0x40/0x90 [ 795.253367][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.259358][ T31] RIP: 0033:0x7f2823aa7407 [ 795.263801][ T31] RSP: 002b:00007ffe4b3f4e40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 795.272312][ T31] RAX: ffffffffffffffda RBX: 00007f28241a4880 RCX: 00007f2823aa7407 [ 795.280520][ T31] RDX: 00000000000a0800 RSI: 000055da8df1cf60 RDI: ffffffffffffff9c [ 795.289293][ T31] RBP: 000055da8df03910 R08: 0000000000000000 R09: 0000000000000000 [ 795.297852][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055da8df23f60 [ 795.305913][ T31] R13: 000055da8df11190 R14: 0000000000000000 R15: 000055da8df23f60 [ 795.314030][ T31] [ 795.327801][ T31] [ 795.327801][ T31] Showing all locks held in the system: [ 795.336456][ T31] 1 lock held by khungtaskd/31: [ 795.341447][ T31] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 795.351426][ T31] 2 locks held by getty/5582: [ 795.356131][ T31] #0: ffff8880360030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 795.366056][ T31] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 795.376494][ T31] 1 lock held by udevd/10361: [ 795.382255][ T31] #0: ffff888026f15358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 795.391576][ T31] 1 lock held by udevd/23731: [ 795.396267][ T31] #0: ffff888026fed358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 795.405716][ T31] 8 locks held by syz-executor/29907: [ 795.411203][ T31] #0: ffff8880355fa420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 795.420215][ T31] #1: ffff88807f1fac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 795.430066][ T31] #2: ffff888026524b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 795.441215][ T31] #3: ffffffff8f43d968 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 795.447533][ T5831] Bluetooth: hci4: command tx timeout [ 795.452012][ T31] #4: ffff888028de9130 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 795.467585][ T31] #5: ffff888028deb260 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 795.477906][ T31] #6: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680 [ 795.486849][ T31] #7: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 795.499050][ T31] 6 locks held by syz.4.6092/30032: [ 795.504290][ T31] #0: ffffffff8fbbacf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 795.513916][ T31] #1: ffffffff8f921690 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 795.523736][ T31] #2: ffffffff8f921850 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 795.534681][ T31] #3: ffff8880337c0ff8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 795.545746][ T31] #4: ffff8880337c12f0 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 795.555416][ T31] #5: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 795.564822][ T31] 6 locks held by syz.0.6095/30043: [ 795.570093][ T31] #0: ffffffff8fbbacf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 795.579633][ T31] #1: ffffffff8f921690 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 795.589363][ T31] #2: ffffffff8f921850 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 795.599270][ T31] #3: ffff8880543b8ff8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 795.611053][ T31] #4: ffff8880543b92f0 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 795.620913][ T31] #5: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 795.630353][ T31] 6 locks held by syz.0.6095/30046: [ 795.635594][ T31] #0: ffffffff8fbbacf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 795.645993][ T31] #1: ffffffff8f921690 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 795.655778][ T31] #2: ffffffff8f921850 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 795.665714][ T31] #3: ffff888034cdcff8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 795.676567][ T31] #4: ffff888034cdd2f0 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 795.686222][ T31] #5: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 795.699486][ T31] 3 locks held by syz.2.6099/30059: [ 795.704740][ T31] #0: ffff888077b9e3c8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 795.715447][ T31] #1: ffffffff8fc35ab0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 795.726865][ T31] #2: ffffffff8e764800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 795.737428][ T31] 1 lock held by syz.3.6100/30060: [ 795.742566][ T31] #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 795.752084][ T31] [ 795.754436][ T31] ============================================= [ 795.754436][ T31] [ 795.773728][ T31] NMI backtrace for cpu 0 [ 795.773748][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 795.773770][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 795.773783][ T31] Call Trace: [ 795.773792][ T31] [ 795.773801][ T31] dump_stack_lvl+0xe8/0x150 [ 795.773834][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 795.773859][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 795.773887][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 795.773914][ T31] sys_info+0x135/0x170 [ 795.773933][ T31] watchdog+0xfd9/0x1030 [ 795.773957][ T31] ? watchdog+0x21a/0x1030 [ 795.773984][ T31] kthread+0x388/0x470 [ 795.774005][ T31] ? __pfx_watchdog+0x10/0x10 [ 795.774021][ T31] ? __pfx_kthread+0x10/0x10 [ 795.774041][ T31] ret_from_fork+0x51e/0xb90 [ 795.774068][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 795.774091][ T31] ? __switch_to+0xc7d/0x1450 [ 795.774115][ T31] ? __pfx_kthread+0x10/0x10 [ 795.774133][ T31] ret_from_fork_asm+0x1a/0x30 [ 795.774168][ T31] [ 795.774178][ T31] Sending NMI from CPU 0 to CPUs 1: [ 795.807451][T30046] lo speed is unknown, defaulting to 1000 [ 795.811172][ C1] NMI backtrace for cpu 1 [ 795.811188][ C1] CPU: 1 UID: 0 PID: 30046 Comm: syz.0.6095 Not tainted syzkaller #0 PREEMPT(full) [ 795.811207][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 795.811218][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 795.811243][ C1] Code: e8 fe b4 84 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f fd ee fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 795.811257][ C1] RSP: 0018:ffffc90003557050 EFLAGS: 00000002 [ 795.811273][ C1] RAX: 1ffffffff34bb300 RBX: 00000000000003fd RCX: 0000000000000000 [ 795.811286][ C1] RDX: 00000000000003fd RSI: 0000000000028207 RDI: 0000000000028208 [ 795.811297][ C1] RBP: ffffffff9a5d9c50 R08: ffff888141ea0237 R09: 1ffff110283d4046 [ 795.811309][ C1] R10: dffffc0000000000 R11: ffffffff8540f920 R12: dffffc0000000000 [ 795.811321][ C1] R13: 0000000000000000 R14: ffffffff9a5d99c0 R15: 0000000000000000 [ 795.811333][ C1] FS: 00007fd10eae26c0(0000) GS:ffff888125555000(0000) knlGS:0000000000000000 [ 795.811345][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.811357][ C1] CR2: 00007f582ddb2000 CR3: 0000000068e8e000 CR4: 00000000003526f0 [ 795.811375][ C1] Call Trace: [ 795.811382][ C1] [ 795.811391][ C1] wait_for_lsr+0x1a1/0x2f0 [ 795.811413][ C1] serial8250_console_write+0x1348/0x1ba0 [ 795.811438][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 795.811456][ C1] ? lock_acquire+0xf0/0x2e0 [ 795.811479][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 795.811497][ C1] ? console_flush_all+0x123/0xb20 [ 795.811513][ C1] console_flush_all+0x718/0xb20 [ 795.811531][ C1] ? console_flush_all+0x123/0xb20 [ 795.811550][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 795.811568][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 795.811588][ C1] console_unlock+0xd1/0x1c0 [ 795.811612][ C1] ? __pfx_console_unlock+0x10/0x10 [ 795.811636][ C1] ? vprintk_emit+0x2cf/0x560 [ 795.811657][ C1] ? vprintk_emit+0x2cf/0x560 [ 795.811680][ C1] vprintk_emit+0x485/0x560 [ 795.811703][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 795.811730][ C1] _printk+0xdd/0x130 [ 795.811749][ C1] ? __pfx__printk+0x10/0x10 [ 795.811767][ C1] ? mutex_is_locked+0x17/0x50 [ 795.811789][ C1] ? rtnl_is_locked+0x15/0x20 [ 795.811809][ C1] ? __ethtool_get_link_ksettings+0xd7/0x170 [ 795.811831][ C1] ib_get_eth_speed+0x468/0x7f0 [ 795.811848][ C1] ? rxe_query_port+0x7e/0x3d0 [ 795.811871][ C1] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 795.811892][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 795.811910][ C1] ? rxe_query_port+0x6b/0x3d0 [ 795.811933][ C1] rxe_query_port+0x93/0x3d0 [ 795.811957][ C1] ib_query_port+0x170/0x830 [ 795.811976][ C1] ib_setup_port_attrs+0x294/0x2380 [ 795.811998][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 795.812019][ C1] ? trace_contention_end+0x3d/0x150 [ 795.812043][ C1] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 795.812064][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 795.812088][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 795.812120][ C1] ? device_add+0x70b/0xb70 [ 795.812141][ C1] add_one_compat_dev+0x448/0x650 [ 795.812161][ C1] ? down_read+0x272/0x2e0 [ 795.812177][ C1] rdma_dev_init_net+0x243/0x2f0 [ 795.812197][ C1] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 795.812215][ C1] ? __kmalloc_noprof+0x37d/0x760 [ 795.812238][ C1] ops_init+0x35c/0x5c0 [ 795.812260][ C1] setup_net+0x118/0x340 [ 795.812278][ C1] ? __pfx_setup_net+0x10/0x10 [ 795.812296][ C1] ? preinit_net+0x47d/0x780 [ 795.812314][ C1] copy_net_ns+0x50e/0x730 [ 795.812332][ C1] create_new_namespaces+0x3e7/0x6a0 [ 795.812354][ C1] ? security_capable+0x7e/0x2c0 [ 795.812379][ C1] unshare_nsproxy_namespaces+0x11a/0x160 [ 795.812402][ C1] ksys_unshare+0x51d/0x930 [ 795.812429][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 795.812451][ C1] ? rcu_is_watching+0x15/0xb0 [ 795.812478][ C1] __x64_sys_unshare+0x38/0x50 [ 795.812500][ C1] do_syscall_64+0x14d/0xf80 [ 795.812522][ C1] ? trace_irq_disable+0x3b/0x150 [ 795.812536][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.812552][ C1] ? clear_bhb_loop+0x40/0x90 [ 795.812571][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.812586][ C1] RIP: 0033:0x7fd10db9c819 [ 795.812601][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.812615][ C1] RSP: 002b:00007fd10eae2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 795.812631][ C1] RAX: ffffffffffffffda RBX: 00007fd10de16180 RCX: 00007fd10db9c819 [ 795.812643][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 795.812653][ C1] RBP: 00007fd10dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 795.812664][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.812674][ C1] R13: 00007fd10de16218 R14: 00007fd10de16180 R15: 00007fff5603cb88 [ 795.812695][ C1] [ 795.813735][T30043] lo speed is unknown, defaulting to 1000 [ 795.897526][T30032] gre0 speed is unknown, defaulting to 1000 [ 795.902659][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 795.902681][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 795.902704][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 795.902716][ T31] Call Trace: [ 795.902725][ T31] [ 795.902734][ T31] vpanic+0x56c/0xa60 [ 795.902765][ T31] ? __pfx___schedule+0x10/0x10 [ 795.902792][ T31] ? __pfx_vpanic+0x10/0x10 [ 795.902826][ T31] panic+0xc5/0xd0 [ 795.902851][ T31] ? __pfx_panic+0x10/0x10 [ 795.902877][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 795.902910][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 795.902937][ T31] watchdog+0x1023/0x1030 [ 795.902962][ T31] ? watchdog+0x21a/0x1030 [ 795.902987][ T31] kthread+0x388/0x470 [ 795.903023][ T31] ? __pfx_watchdog+0x10/0x10 [ 795.903039][ T31] ? __pfx_kthread+0x10/0x10 [ 795.903060][ T31] ret_from_fork+0x51e/0xb90 [ 795.903088][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 795.903111][ T31] ? __switch_to+0xc7d/0x1450 [ 795.903137][ T31] ? __pfx_kthread+0x10/0x10 [ 795.903158][ T31] ret_from_fork_asm+0x1a/0x30 [ 795.903200][ T31] [ 795.909551][ T31] Kernel Offset: disabled