last executing test programs: 2.200167632s ago: executing program 3 (id=6650): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x42, 0xfffff00c}, {0x6, 0x0, 0x56, 0xffffffff}]}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000d, 0x11, r2, 0x100000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="79360b92d73f0d8eeeea59485483", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040014}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r7, @ANYRES64=r6, @ANYRES64=r8, @ANYRES32=0x0, @ANYBLOB="0800150002b31400"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0xf39ca9827ccfe526) syz_emit_ethernet(0xcf, &(0x7f0000000180)={@remote, @empty, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x6, 0x1, 0x3}}, {@llc_tr={0x11, {@snap={0xd1cda7576dfd38f2, 0x0, "ebdf", "e4a40f", 0x88b5, "10d3786ce693d52c7b912544092911c7d00455484cf02728ddfd3650a31943cd950dd4821f5f320653b5474726692ee1bb15f8b4eb3f9589154b9d6fbeb4e2de2dc365113c3b81bc22864497a471f9a9ed25a20f51cea22d91fa2b2af809108316e6bce9562373b04b38219fb242a4c3274501d05f8628efccf40d403beca16d576c25a4ae26ce56b2684f1548132c3cbae2c9bf57167b8b7b5b5bc4dc1d6c135da5eae6342cd50e76b9ee48091ed032"}}}}}, &(0x7f0000000280)={0x1, 0x4, [0x1c0, 0x474, 0xbab, 0xbbe]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) 2.198865304s ago: executing program 2 (id=6651): socket(0x10, 0x80002, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x10001, 0x800, 0x2}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r1, &(0x7f0000000580), 0x0, 0xc841, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @loopback, 0x82}, 0x1c) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (async) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f00000001c0)=0x6, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r3, &(0x7f0000000780)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) (async) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) (async) socketpair(0x1, 0x2, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000019000100000000000014f1330000802000001f2db19479bf4707ae11247a34a30011000500003e4d296d00d3daaa49296b7b5b56a8068920fdc87b39d261120fd60d5f507095b7263ec56a2c24545a5bd6eb4bfbdcaa17907b96f99fc4f9e3fbe8c0c584dd5dc4bc65836eadfea9c059c4815b15e6813d719e28ff1130394b168446a4ec16fa0add4a11aa3eb49ca9a5128ff71fd5f674175eb40ae166e09e39f313b22f87263d6bccfc74fde4a6db50f8c717cc42f61d03fb3a2c6bc1c631e91bdba26075f45ca374522b5837b50c1c38548f0e94a32845e55b8c154077f1ceace4be3b7dced9695cd615b683c022a4e37e7d65ecdb84a2d6359905848d72d9326c78ca25360de139b8fdffbb3d9fa405160a1294bfc7d60981c183301e8af07665c3596f4c6386cff9034271ac9a19cc7bac4b6fd89a490f9f99747d32", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x1}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r6, @ANYBLOB="0000000000d9dff6f5ab630000001e00000000000b0800000000", @ANYRESDEC=r4, @ANYRES16, @ANYBLOB='\x00'/28], 0x48) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x20000000000000a8, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000005000000010040008000000018110021", @ANYRES64=r8, @ANYRES8=r8, @ANYRESHEX, @ANYRESDEC=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x25dfdbfe, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 2.074534948s ago: executing program 2 (id=6653): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000140)={0x2a, 0x1}, 0xc) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) unshare(0x22020600) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r4, 0xc040ff0b, 0x1) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000003c0)='macsec0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r5, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f0000001840)=""/4104, 0x1008}, {&(0x7f0000000240)=""/62, 0x3e}], 0x5}, 0x70001}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x75}, {{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0xb}], 0x6, 0x102, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x1, &(0x7f0000000180)="0100203200"/20, 0x14) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002fd4cddc4dda5459b72dfd81572b1c532089435b74c61a52c3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x20, 0x1, 0x3, 0xfffffff3, {{0xa, 0x4, 0x2, 0x9, 0x28, 0x66, 0x0, 0xfc, 0x29, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x13, 0x89, [@rand_addr=0x64010100, @rand_addr=0x64010102, @empty, @multicast2]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000280)={@private2, 0x7c, r9}) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000400)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffff7f000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100ff0f20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702007ee22cfb00b70300000000000085000000760000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcef, 0x0, 0x0, 0x0}, 0x94) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000007240)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) 1.966486791s ago: executing program 3 (id=6657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e1e, @rand_addr=0x64010102}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.871894237s ago: executing program 3 (id=6659): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)="1a36c5", 0x3}, {&(0x7f0000000080)="a77b4f9f261bef64e17986f9b86aa5fc77bf5aeef6144c16e876", 0x1a}, {&(0x7f0000000180)="f62196e64af8", 0x6}], 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x5}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000000)={'erspan0', 0x32, 0x36}, 0xa) 1.780816601s ago: executing program 4 (id=6660): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503, 0x7441}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x824}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004800}, 0x40) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000280)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2d, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3691}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3b46}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0xe, 0x9, 0xe, 0x536, 0x2}, @jmp={0x5, 0x0, 0x4, 0x0, 0x5, 0x40}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(r1, 0x6, 0xd, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60004844) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000500)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)={0x14, 0x38, 0x1, 0x70bd28, 0xffffffff, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) listen(r1, 0x73c7) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x74, r9, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2001c015}, 0x4008054) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x7}]}}}]}, 0x3c}}, 0x28000000) 1.780145849s ago: executing program 2 (id=6661): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0100000009", 0x5) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000580)='veth0_to_batadv\x00'}) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x10, 0x8e, 0x9, 0x12, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x2, 0x14, 0x10}, @sadb_key={0x2, 0x9, 0x28, 0x0, "be36c5164c"}, @sadb_lifetime={0x4, 0x3, 0x3, 0x6, 0x100, 0x1}, @sadb_sa={0x2, 0x1, 0x4d3, 0x8, 0x6, 0x43, 0x1}, @sadb_ident={0x2, 0xeabe2ab48be49900, 0x0, 0x0, 0xa}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}]}, 0x90}}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r1, &(0x7f0000000540)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) socket$kcm(0x10, 0x0, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x10c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xdc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xc4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x9, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x8}, {0x1000, 0x4, 0x58, 0x10}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x10c}}, 0x2000c800) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000780)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x1, 0xfffffffffffffff5, 0x80, 0x2, 0x9], 0x0, 0x0}, 0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0x8}]}, {0x0, [0x61, 0x61, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0x9b2987a6}, 0x28) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180), 0x10) 1.767924606s ago: executing program 3 (id=6662): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000010003c0069706f69620000002c000280060003000100000006000300010000000600020001000000060002000000c128226dfbbf63fefcbfba199d6a0000000000009baffec313108ded97b051b22e88a4ef5e04796821c0a07afc26c53e1cb1948a1c63290c70bd2ed91d3f9fa9a52736ba4ebb14c153a24ea684063bf1827bb104bab5324e66bd01010000000000002b252a9f9a3be044b3635109cab7a36c647ff5380a5538491f4d924b38f1746c86488e04dbb00a9710df25f0f5debb3d4398373941c13df2eb4a64fd87ca8c9db6ad92d3b4f14a0c13b530886137d35359763da30ec8a3b830d46af33e9d7c625b1652e544c236424f0d94d33d09bad452410a83f40493f435a870d6e55a127eecffa99208d3fba57872d15d7e8645bec79c5c75551547c336145e86df0a0000000000", @ANYRES32=r1, @ANYBLOB], 0x64}, 0x1, 0xba01}, 0x0) accept$alg(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x7ff, @ipv4={'\x00', '\xff\xff', @local}, 0x42bc8}, 0x1c) sendfile(r4, r3, 0x0, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.596591142s ago: executing program 4 (id=6664): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x10, 0x0, 0x4a, @remote, @loopback, 0x8000, 0x7800, 0xfffffffb, 0xb}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xe8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x48, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001500)={'sit0\x00', &(0x7f0000001400)={'syztnl2\x00', r4, 0x8000, 0x1, 0xc47, 0x7, {{0x29, 0x4, 0x3, 0x24, 0xa4, 0x68, 0x0, 0x9, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x7, 0xa, [@multicast2]}, @generic={0x82, 0x12, "b646656ccca574492cbc240aa9705dc3"}, @ssrr={0x89, 0x1f, 0x3b, [@rand_addr=0x64010102, @multicast1, @private=0x7, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, @remote, @local]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x10, "2bf67e951313544057ff473bbfd1"}, @timestamp_prespec={0x44, 0x3c, 0xc9, 0x3, 0x5, [{@loopback}, {@private=0xa010102}, {@rand_addr=0x64010100, 0x2400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x551}, {@broadcast, 0x8}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'batadv0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001e00)=[{{&(0x7f0000000800)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)="a10bb64ea019996ad34a015d81c4ac0c5c63b7be6e1bc268b2b03329067abc5f7a70a74272f0c3dfa5f919e1c5bfda27797215270037d997956d90a119e6c977133bf8c908e441a8ef22371239d4f95d137f71e6ecb23c826e732408efcf1d3b42", 0x61}, {&(0x7f00000008c0)="5b96b39db597f536313dd3cd5745beab90d896f9b177ee50cec7e157cf18e65d3729cea9e8ad3526473ce07f8ea9a01f7d91db13761260c134604d9ec61d5ad3fbb1cc252fa85cf696c3e35d3b83254f", 0x50}, {&(0x7f0000000940)="bfbe3273adcb731918d2162da99b52ae25b0cd3afab9602049a79c670d7559c2c29065bbf363c0dd14c4dadbb54126ec45e0f4338d0871b5fbf1b1b2ef2a54af2cd7692f5e1b43e7885ac8b3d3e3bc4a1da3d774d710ce2ba3fcbe1716c8abb7844d7efb5eefc59e42e78b0293d35fe8c18fb1591d1ff8452f8084115d0eaf569852dbd9b1878616c74a", 0x8a}, {&(0x7f0000000a00)="496021f0eb6e2b79344820f949f720363fb6538720d4779629b2c5802ed41fa69b754e03378b8257802add1ee9c6a7248d76d5fa4d6e96e3563a349f71d0a5e533855e230aab62378a4ac1321d9e98b1c20023997eabdc5b61ba7a232b26f511708b009b4858c6f96b5ab15e0ecb6da8b31435f8788cf0a1c1261cd48c744d41dc3d1679837a9b4212dcce0dde8ba6e63debcca8dc12fc50fe2776f90ff068cbc323e5dba83db9844e11e4bd456f5928222ea1b47522146a2463c6c111f22d9cb741c435f9d7624034cdc13f84207cb173e46ff4fd3aa2ee557b6652a25ca0cd70a1458f95236ea208ca0c96f08838f176e6c1baf4153b2f", 0xf8}, {&(0x7f0000000b00)="792edcb7c88d13526f398955f9972a1cf4283abaac80daf62e695686d4927baac105ff45c050d82127d12131f95ad6be21e3e5938ec15ede01b46bb588d13c89588f9008191451567af466505ca33061ad1286f7a61c0d1cf4919b4d7b1d54c1d56d1568a09503a813bcb5bd152f5b178ea39d0ce1c4ac0e6f0e6d60b5c98895f4a0961cc93e67b1ea8f6dc222de95f4741a4a1fdd1a7337c7f071ca6a0af4349d25c4e8dd100c94b5561138438ddea704a2b010e65d9e365bee08ffede49bafaadba04355d9ee54d15cd118aa2e07c102443742c8c2410182686c842db34de59356b2c91804220a1fc137355c", 0xed}, {&(0x7f0000000c00)="0eef0a6a15273263d6f55016d162e6dfd070cb3e7917632ca1af28a244a04ad0de2be1cbe21c3d4029d869e8703c7fb277bcdc0e9e69caf79905dd2e96a3bd1ea6801d160e6c085d6fa5cd7f21bef819a6ade67966eea91f6eb20d89d581166c0adca1ed16c96beaa855cd17d7e2baf7ace9e57e41063efd0862bc1581c43e4e0bcd8e4ca857e88bc8e7334be7c8f5db4562c343a85712b046fb91c5e1dfa7a77eba48baa93f1362fe592650185d12356644c02f53627896417352a954b4cc26513cbe76ab", 0xc5}], 0x6, &(0x7f0000000d80)=[@ip_ttl={{0x14}}, @ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xb8, [@dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, @remote, @local, @local, @multicast2]}, @ssrr={0x89, 0x7, 0x43, [@private=0xa010100]}, @generic={0x86, 0x4, "970a"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x187}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x45}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}], 0x110}}, {{&(0x7f0000000ec0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000f00)="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", 0xfe}, {&(0x7f0000001000)="501a122140c32563dba686685d6a239215e9615292a58df8802c0a051af8d717feca6d3513b912888d43a9e5d16fcb9affd46d60ee537951143d2632dd687b4dbc7cb17786b86b46b38d1a1a042fb4776bfcf542fbc9139672448c7f34651b1580712221bba5dde8", 0x68}, {&(0x7f0000001080)="3aeb9ed72cc4a5a55c40ae25a3c5723a869bad8b73dcd7fcda2c3ae53de3257d8165ae416aaa2d6b7d6c8a5e87cee4f2429205f7816f23b34db6f43a4e2e9614061091d15bf968b3ded098dec6c9dab2f74a72995b45e40e3b519ac119539c8938cd63a52c03b5c7ea", 0x69}], 0x3}}, {{&(0x7f0000001140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000001180)="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", 0xff}, {&(0x7f0000001280)="5178505dd4cc67c5982847f7019e0b633d231d74069d02fb13b4b96e2a23cebe315f4edc321be16fc0dc97a3f9db94d8a4d6aa020832382705caa04e765126c266b8299f284d0fa9b0ff", 0x4a}, {&(0x7f0000001300)="ea2b7defe9936d953ec850b4a779322595d466dd88c333afd8d30f590994b55ce9951b0532e090f24691bc42adc37830363af8c0cb064ace5695a17c9402d671f61c1c53cd083475202a08695574a787d66f62e3f5cb1324ae6b61f2512cb5c80a6be8244227774de58dc1ac57faa20be8c82f708fc8968aa9f05c37dcc85d4690bc34adff6a097237aaff5b1785bcafa32df6ab18b9c2a183af589cc36c352b4cfa670aa971b6b30090f6a1274ea767e373191c250c3dfd7e84", 0xba}], 0x3, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x35}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}], 0x60}}, {{&(0x7f0000001600)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001640)="d685d596509a1d21c546487578c5", 0xe}, {&(0x7f0000001680)="902a9c7c00a14d693857ae1648fbd123d4afd18b67064702f63223c50b9f0a5533b0967973acd601fe84583c6920358c84b1035eb1e94990601c892218ed3441e00042ce8e099788df13b1194634d04946d8f7027ff882a645d73944fc615fa60c63647e874dfa5e6404daa95dc5ebe0a5438b323de9dfb8fc88bb568fff8fb931c7f59cb6b232e8221da91a2da3bc1e0af3ccddf22e6a8da8b20f584cf6bc20431a8639c651828ead972405f20076313656eab378f8c557bd0af2c89dbef7651e269a6d08a99321e9d643f9a3849724a3aecde0411580", 0xd7}], 0x2, &(0x7f00000017c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}], 0x70}}, {{&(0x7f0000001840)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001880)="98221dff9e658747d472425d63d34b9fbd355c5d631a640eabd8c64a9aa346f3bacf30476fa08d90d63a080927c19767114c0cc447a782f6efbd627e6e9c244c77fe675a5e518502e861d647f3cb755dfb0c9e8e07a42aafaf29480093d5d7cbe2cd615339b1846872550ad3934f4dfb49a9b427db4118e5582206bbeca64c6a7ee1a8b17e3530fe5a84a20359cac501e8683d07ce2be36a6d24ac8ae2450dd15eb3bf69", 0xa4}, {&(0x7f0000001940)="e1bb5c8590b4ff3f5feba91edeb030a52544324153f9c98c20ea28c145e2e0c1be3e74a9fd30d449", 0x28}, {&(0x7f0000001980)="d56acdf6f2d8aecffe1965a7d2c0a9c9abb2c122ee5ec10bf21c7e10b386d0cb70ecdfc9fc82a52e1a81d9b478a7c0b4e51a1fbc33c2f3e191020e400f457d1f4ddf910b7adef91299a867255f0b5b0943cf870e8e104aee79baf1a5ac0597f22d52c4427fb9e6e5108ddfbd1132843211520cbc1f47b29895f2a90a1825eec568a0b20c68cdfeb984aaf7c557dc64420f95c02b6a354fb97e7bb02a4e4b77b8ce60d892eded89a8e18f8596aefee5923a1544646430d38d63e6bb2e75da74166a88", 0xc2}], 0x3, &(0x7f0000001b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8d7c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010102, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}], 0x68}}, {{&(0x7f0000001b80)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001bc0)="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", 0xfa}, {&(0x7f0000001cc0)="5c7f51df572b8fd7196759e4247bce8e19938a557304fdec7eb7fe9aa46e1a1ea90046bd637bf5d28841be404cd195a45c72c7e33de4c9f127b2c8af", 0x3c}, {&(0x7f0000001d00)="d35e9cf7d6cc82f08d0234950ca91299b8afb220f34bef893509fadfca133068db52081442844001b4e6655e53ab45e49b31b9ae24e7f6d80043c18c3d9bcd94b4a3c6c45719537156a938f0e1855fde959dc07ec371c69aded7f76e2dd195eb561280184d4fd9e97e0dde4ec01e569026803e35", 0x74}], 0x3, &(0x7f0000001dc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe39}}, @ip_ttl={{0x14, 0x0, 0x2, 0x19}}], 0x30}}], 0x6, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400000048031180"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'tunl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x9, 0x1ff, {{0x23, 0x4, 0x1, 0x2b, 0x8c, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@end, @ssrr={0x89, 0xb, 0x20, [@empty, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0x6e, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x9}, {@multicast1, 0x51}, {@rand_addr=0x64010102, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x59, 0x3, 0x4, [{@rand_addr=0x64010100, 0x518}, {@local}, {@empty, 0xffffffff}]}, @timestamp={0x44, 0x2c, 0x5a, 0x0, 0x2, [0x9, 0x5, 0xffff, 0x6, 0x0, 0x5, 0x7fff, 0x7, 0x81, 0x8]}, @generic={0x88, 0x6, "b5ad8b19"}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004005}, 0x20000001) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1.111592081s ago: executing program 0 (id=6666): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0xe040400) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r4}, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@empty, @broadcast, r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 984.105279ms ago: executing program 0 (id=6668): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r3, 0x211, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4885}, 0x40000) r4 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, &(0x7f0000000040)=0xfffffffffffffffe, r5, 0x0, 0xb, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)="64ecf9eaf0400ea33689d9ebcb3c37b33924a19c7f217525314ad3ef1c5f128defdcb64ace5639d1e1", 0x29) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x46, 0x0, 0xa}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe80"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x40840) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1b8}}, 0xc740f2040320bf40) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00f70000", @ANYRES16=r8, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 982.173541ms ago: executing program 1 (id=6669): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 981.785109ms ago: executing program 3 (id=6670): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) (async) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r7, @ANYBLOB="010026bd0100000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="6b00330050100f00ffffffffffff08021100"], 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r7, @ANYBLOB="010026bd0100000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="6b00330050100f00ffffffffffff08021100"], 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff1, 0x2}, {}, {0xfff3, 0xfff9}}}, 0x24}}, 0x44080) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r11, &(0x7f00000088c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x79ff, @dev={0xfe, 0x80, '\x00', 0x13}, 0x9}, 0x1c, 0x0}}], 0x1, 0x4001c00) ioctl$sock_SIOCSIFBR(r10, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2], 0x78}}, 0x0) 964.924452ms ago: executing program 4 (id=6671): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000100)=0x1008001, 0x4) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0xd0, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0xfffffffffffffd4d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC, @NLBL_CIPSOV4_A_MLSLVLLOC={0xffffff61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0xff47}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0xd0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r7, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) write$cgroup_devices(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC=r4], 0x9) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x5, 0x4, [0x3, 0x0, 0x2, 0xc5]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000280)={r11, @in={{0x2, 0x4e23, @broadcast}}, 0x5, 0x9}, &(0x7f0000000340)=0x90) getpeername$inet(r8, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) 963.296436ms ago: executing program 1 (id=6672): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/227, 0xe3}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x2}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r4 = socket$inet6(0xa, 0x2, 0x800001) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 889.699782ms ago: executing program 2 (id=6673): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x15c, 0x14, 0x4, 0x70bd26, 0x25dfdbfd, {0x25, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "c3eaf8927496b5165ed5ed3f280907b00aef9c4f0752e9d998a91ba062fcbe87d0a5b3628cefd1fce49861ad097b48a01425f441e7fbe01692d4b220f1e89f4c5ffd20797b9924888cfeacc3879551304712750901af3a47159e4b2cd652f1d5992fbf0b017a640d7355bcadb598cd02f0badb0440833175057ac7ce9fc939ca754469b85ff312ef742de9cd57c1df59e13c874390daa8eaf9fe760f75d4746ac7340ac63b40b8c0866529f361603ad61a5cb2cefd456f7de9cebaf39ee46dbac6dc30"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "d524e8efbc059c7b93695e003c086f2427d4a60d1df9f7b799291ec6c73210e3317e907f25f877ce19bed4a06a147399183867"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "ec92496f0035c298a9ca9d77de0884f7b7fc68075a2df39b6f95e7109e4b8795c4a04740f2619c95cc76ba3201259834273f3e6c1a8efe5c208118b4df9e656cad"}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) getsockname(r2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000280)=0x7fffffff, 0x4) 776.493358ms ago: executing program 0 (id=6674): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x776}, 0x50) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) (async) r5 = getpid() (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x30, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003540)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000035c0)) (async) sendmsg$unix(r2, &(0x7f0000003680)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000003600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8}}}], 0x40, 0x4004000}, 0x4000080) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@getlink={0x24, 0x12, 0x18efde40b3708357, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}]}, 0x24}}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580115bdc5, 0x12, r9, 0x0) (async) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x3401, 0x285}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r11, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) writev(r11, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) 765.704647ms ago: executing program 2 (id=6675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x10, 0x5, 0x2102a}, 0x2c) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x5, 0x1, 0x2}) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xb6ee}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xa6a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20004894) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x11, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x58}}, 0x0) write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRESOCT], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf000000) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x10, 0x5, 0x2102a}, 0x2c) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x5, 0x1, 0x2}) (async) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xb6ee}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xa6a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20004894) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_vlan={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x11, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x58}}, 0x0) (async) write$tun(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRESOCT], 0xfdef) (async) 671.138696ms ago: executing program 4 (id=6676): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x30}, 0x80) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x2, 0xffffffffffffffff, 0x4}, 0x38) (rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0xfffffffc}}, 0x2f) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x1}, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) (rerun: 32) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) close(r1) (rerun: 64) socket$unix(0x1, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000440)={'wlan0\x00', 0x600}) (rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "042000", 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x1b59, 0x8}}}}}}}, 0x42) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000003b80)={0x10000001}) (async) write(r9, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000000c0)={0x8, 'erspan0\x00', {'dummy0\x00'}, 0x6}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 392.508359ms ago: executing program 1 (id=6677): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x144, 0xac, 0x107, 0x70bd2b, 0x25dfdbff, {0x1, 0x7c}, [@nested={0xffffffffffffff8c, 0x1}, @typed={0x0, 0xb5, 0x0, 0x0, @binary="c053b8c8ddc1cd39414101fe1da0a85164be07ba3bf44d88e9b43869092bb6aba43511be181c0b4aa3f982db5ea6a5dbac58fc5474b3e07f3320dc4b84b5b7cb64a9e4b7ccd0eaceb5d7c255dd7c4f5bb7dc3f2443cf44f21cec6b53d68936d1720a8614319ff630c6a9d2e95007e0ecb5287ea885f7ebb375aed3e8cb0315084e1a77df86c009b34b3f63fff6fc731cd5d69459bb5bc0f9"}]}, 0x144}}, 0x800) (async) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000001800), &(0x7f0000000540)=0x80) 327.85732ms ago: executing program 4 (id=6678): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000380)=""/7, 0x29000, 0x1800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x21912b, 0x4) socket$tipc(0x1e, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000800ca8004000180"], 0x1c}}, 0x0) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f00000000c0)=0x3, 0x4) r3 = accept(r0, &(0x7f00000001c0)=@generic, &(0x7f0000000240)=0x80) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x50) pipe(&(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) 281.878786ms ago: executing program 0 (id=6679): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x52}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x2e}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0xa8, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8c, 0x3, 0x0, 0x1, [@nested={0x85, 0x4, 0x0, 0x1, [@typed={0x79, 0xf7, 0x0, 0x0, @binary="cd8e3cc57397f7468e98ea188c500222fb52fba902c2f289a796dfd9095aad35149c5ba6e18b74fc3d5cec2ab66a725ccb9642ab37a1f311db173baf169f86479d69a8cde5cfdca1c079974e6c37219f819ad6ae1e93f9330140781c3b7968a9b96247d4f993abeb1f701f8db6e8fa126e3cc7a396"}, @generic="1cf8636601"]}]}]}, 0xa8}}, 0xc010) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32, @ANYBLOB="08000b00e000000108000200ac1414bb140006"], 0x60}}, 0x814) 278.764421ms ago: executing program 1 (id=6680): setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)="b554c036d09c4d9452ff5af8bf06da5d7566f31a1e6e38599cde350bf416668d68aada87faa9bbee35c921ad5e4085d27abfafb2d8fe8b9ca515379d06495e8a1139efe7d2989ea3dd57834c46b380b0bbc2e277009c7fba07c0d5b5c029d229ee59e392c7105208a5ea9c5a6e7f901580f26144", 0x74) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207", 0x25}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d23", 0x1f}, {&(0x7f0000000300)="df3b46a13300"/18, 0x12}, {&(0x7f0000001480)="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", 0xe9f}], 0x5}, 0x20004080) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)={0x1, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r2, 0x9, 0x18}, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000001020300000000000000000002000000240002801400018008000100ac1e000108000200e00000020c000280"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x4010) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)="b554c036d09c4d9452ff5af8bf06da5d7566f31a1e6e38599cde350bf416668d68aada87faa9bbee35c921ad5e4085d27abfafb2d8fe8b9ca515379d06495e8a1139efe7d2989ea3dd57834c46b380b0bbc2e277009c7fba07c0d5b5c029d229ee59e392c7105208a5ea9c5a6e7f901580f26144", 0x74) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x11, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207", 0x25}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d23", 0x1f}, {&(0x7f0000000300)="df3b46a13300"/18, 0x12}, {&(0x7f0000001480)="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", 0xe9f}], 0x5}, 0x20004080) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)={0x1}, 0x8) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r2, 0x9, 0x18}, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000001020300000000000000000002000000240002801400018008000100ac1e000108000200e00000020c000280"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x4010) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) (async) 163.470787ms ago: executing program 0 (id=6681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=@updpolicy={0x100, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0, 0x4}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x3}, [@sec_ctx={0x46, 0x8, {0x42, 0x8, 0x1, 0xc, 0x3a, "13eb74e4a0836cc1831eb08ed8b48ff4d8712235b3b39208655afeed2d369d56836f913f11ba2b2478eba2b0130fd91283f4d1579a2aac4853e2"}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0xc004004) r1 = socket$inet6(0xa, 0x3, 0xff) sendto(r1, 0x0, 0x3f, 0x4000810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=@updpolicy={0x100, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xc, 0x0, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0, 0x4}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x3}, [@sec_ctx={0x46, 0x8, {0x42, 0x8, 0x1, 0xc, 0x3a, "13eb74e4a0836cc1831eb08ed8b48ff4d8712235b3b39208655afeed2d369d56836f913f11ba2b2478eba2b0130fd91283f4d1579a2aac4853e2"}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0xc004004) (async) socket$inet6(0xa, 0x3, 0xff) (async) sendto(r1, 0x0, 0x3f, 0x4000810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) (async) 162.239401ms ago: executing program 2 (id=6682): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno', 0xa) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0xe}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000040000701feffffff00000000017c0000040042800c00018006000600800a00001c0002801600148008000d"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x3c, 0x4, 0x0, 0x10000000, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) 161.753647ms ago: executing program 1 (id=6683): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "15b4013a41a0ab29"}}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a", 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000480011012abd7000fedbdf250a006000", @ANYRES32=r2, @ANYBLOB="02000000080002000700000008000200070000000800020000000000140001"], 0x50}}, 0x10) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) sendto$inet6(r4, 0x0, 0x0, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) socket$kcm(0x10, 0x2, 0x0) unshare(0x2c020400) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c"], 0xd8}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 161.19593ms ago: executing program 4 (id=6684): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c000000020603"], 0x6c}}, 0x4000) r0 = socket(0x21, 0x80000, 0x7) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f00000002c0)=""/83, 0x53}, {&(0x7f00000003c0)=""/92, 0x5c}], 0x3, &(0x7f0000000d80)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000001d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001e00)=""/88, 0x58}, {&(0x7f0000001e80)=""/22, 0x16}, {&(0x7f0000001ec0)=""/242, 0xf2}, {&(0x7f0000001fc0)=""/231, 0xe7}, {&(0x7f00000020c0)=""/113, 0x71}, {&(0x7f0000002140)=""/255, 0xff}], 0x6}, 0x1}, {{&(0x7f00000022c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002340)=""/24, 0x18}, {&(0x7f0000002380)=""/120, 0x78}, {&(0x7f0000002400)=""/67, 0x43}, {&(0x7f0000002480)=""/94, 0x5e}], 0x4, &(0x7f0000002540)=""/143, 0x8f}, 0x7bcb}, {{&(0x7f0000002600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002680)=""/82, 0x52}, {&(0x7f0000002700)=""/97, 0x61}, {&(0x7f0000002780)=""/24, 0x18}], 0x3, &(0x7f0000002800)=""/200, 0xc8}, 0x8000}], 0x4, 0x40030002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001b00010326bd7000fcdbdf250a010101000000000000000000000000ac1414aa0000000000000000000000004e2400004f2000450200c02032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b2035d39b3b7409a890000b889e702fd6f0e00000065784391b078bb964755517a849e8f000000000000ff010000000000000200000000000000000000000000002880000000000000000400000000001f0006000000000000000500006d00000000000000000000000102940000000000000000000000000c001500bf000000090000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) recvfrom$unix(r1, &(0x7f00000004c0)=""/249, 0xf9, 0x10022, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}}, 0x42) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {0x10}, {0x2, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x6, 0xa2d6, 0x33, 0xc}}}}]}, 0x48}}, 0x24008004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0b020500f52c44f6bc20c725000025bd7000fcdbdf2503001700db00000002004e21ac1414bb"], 0x28}}, 0x20008004) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009f080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x8040040}, 0x0) 56.193757ms ago: executing program 3 (id=6685): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="016f0800010000270000004500003800000000008490783fffff20ac1414aa00000000c51e1eef2b2ce3e819671ce92969f2c82201d5774e2bcd47e85dc294fb45519ae90fc10a4c3d423eb09ce8142834aafde2529957a769199958273fa72cb049d41cee7ecec51730f3ed102857c436e3d31b7b0a20abf222a2761109790704293f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9a00000690780018090300050a00"/24], 0x46) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x5, 0x0, &(0x7f00000009c0)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98847fa6d197b433186f53cdcdb93a4722bf30", 0x46}], 0x2}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8) 55.640565ms ago: executing program 0 (id=6686): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000540)={{0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x2001, &(0x7f0000000240)={@align=0xa0af64d, {0xf, 0xb, 0x7, 0x5}}, 0xd93a, &(0x7f0000000280), &(0x7f00000002c0)}, {[0xfff, 0x10001, 0x1, 0x8]}, 0x2, 0xcd, &(0x7f0000000440)=""/205}) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000600)=@fragment={0x2b, 0x0, 0x2, 0x0, 0x0, 0xf, 0x64}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r2, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}, 0x406}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x400000000000192, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002e0000010000000000000000180000801400000000000000000000000006000000000001"], 0x28}], 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0xeb12f7ec3f912030, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000004850000000c000000b70700000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_getmulticast={0x14, 0x3a, 0x0, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x8040) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0xfffffffffffffe24) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, 0x0}, 0x20) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r7, 0x50) r8 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r8, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r8, 0x3) r9 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r9, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2a73affa3c52d8c9, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x94) listen(r9, 0x3) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x94}}, 0x80c1) setsockopt(r7, 0x3, 0x8, &(0x7f00000007c0)="5403020e2fd161ba452ccad0738a00fdc9c8bd303d3f9b293385d697573eadf1eea9bff8ff1b5ba5703e4cad9d65c456f8e5ae0ed737f7e1a2e81854efeafdf5f90d17a8ebef76a252cbe0b0a5614832371b14498ead3e11dd83055de244f0977971b79862f06145413c65171ceafe010c9a5df4e6915a17e9df1690223ab51724f6b5d9ca8ca6434f59e307595043313d16785f2004296de9ae8b019738a4aaf900b4bbaac385e673b617cec4f66a81be2c4dcc14d20458a7c61a3c0d755102181daa8b1da286d666061bf6b7953c18531bc30058f46d4cdc143b6fed301d07a92de4a74e3c9bc972ca5a09c40731ccb56a", 0xf2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 0s ago: executing program 1 (id=6687): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x10048, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f49653c33f31e27e4afe9db1ca25c4f48779593728b46224d0fb46f215ba7153da91ff4b4b5f99c6bcdcc2e2ffc27ad1a86687b0a967a033c5f2d589145bc1d41952e2e6f43d0af7768f714e6ddbddcceaf3f5bd7066b903bd659ba802414ccca078b47decf575ce264f32b07a2c028c4cb37d1e22c2310d843f8a4c950bc910d2bb581b571fd216b802f4249bd083438788fcba4340ce9ec0e50122a02efa8982d34b1d6139596785c3eaa085cb6d81f7bc3ac62fbce404bca13803132898c264b9878a89b8f3c1c0896bff53d31f35b3a84e2fe670bf14b2cf7476a223b28804241c79053f59778b013e3f255d5f7f876b058b92502dae18d2de2b7a71acf2c78a31e114c3eafe527244fa31b2c3614f905f6aaf7250949bc2a9b5a744f30f2e3aa12f1417bb26dd3892cbf728f886c1c13cb2f471ebaf75fa1905cf086089b255421567d730e09b698996c51771e3a99068fd9c16f1f772f3e1f885f846db2829b39b8d2465703ea8db3fda4a01ae1e4a40eeedfa5b3312a4285b5f31ac198a5e3848d4d3db2cb6207e552f544dbfee360f735be849a812043343a834c04a6622ac806224f0ece7336a8c7bb9d6c15ca1d93b0d3d804922e35baad1ddf5b1773f9102c18c398f026865ee64ce85a70ee7c3514e5bd13e935956b76d9db1140e514e5cfe228023008ba9f8a6c7951a03b2001e2b16c5bac060eaf1d1b2b49ddd29a280dd3218c4a0456c3754f944d2d185f861786c29a89615f09d4d4aec0e3ce62bdf09cf121caa73c18d4e78762b2c154a007c0ea9df2223dc4b932a75d6e57910684cd6f7a94e4988d10a6854aced312bde517c8eee5f3e0a14675b08668a0d53982f7e953cf600b5ac2e4afcce547160dc4fff59466b75aae0fa4badec300d858c4e87c1181fd587182dca134470020ee1b08517a11f8ba982a0f1286702d11cf3b056dfc0278342a11f85f1ab3e5be02ce71b28ae4272db7ccdc886774a111fc620730bb68855a3c5d6d45a3274f45db3c4f299bdce8cb50afa3def586266f32a6120629941878df287e0e138acfb1b919dbcc1511811ae5a27a14117fd4ecf6147748e4b7ebb0160cd4f44bc4a17ffc24dc146d575e8488f5ffdbba99c5900722a7c2dea32021544706c70afa67b16024fc8d3d4dc2efa63a0f1008a5f388e4f3fd57624d05052f1a8e2aa0d41fb04a2b87a75008c1c64f352b76b1c271f2240924c7ae15094284bc72abc4806d978030a8013310f9fc65cf1215a1af8f5a074f40b16267f0e319219e2d27fbd6cc08a0e3a37370228db56209e43c5a9b21776b8f175a31aa9227eaa22d4d1f76bceb91aa25e52b4198bd8a9566119c4f1e76d414c9b67572da2a5c6df6694c18af00db08bb61e5aa0b0f2f772fdd480ad4d3297a01f4fde3ce1e45f37eddd8e61da5f02bad8749d84cb3627482b475b497b7db68ea9a894729e2a13fe72adc9c689cc9ed7bda13eda65d34ec300cbfbeb1ab15e7740594ddbc6bd4dd594ca915fba5ece0baab14388b972e221707ef0e4d80424dffbe4508627a13b460b043c5f46b965f5904685cb5224b45d708726e47bd1e4d14f2545f853c9fc979a3ca21f809aacbbf500f751316586b328f93e22b881c22c9cbda4c12d04d5775c763042f62c739dda385a5b49c4bc9fc9b7f8cdd50d50f5e375808b09e5be753b3106c59078e337dfc4d114bd89d9a2995edf5b03fe37bfdf445369c5ba139624c59b25de375caa92f6dcf21e9cf164cba69247174e9571a3c5f3e1c8decd0ac77dd69f8efdb7bf413edb87cf92d587aee0aeab659aa5d27af007e025eacc18e369a34b765298ef3cfc1b7fff5be29a75bcbed99cba4faa8e45f6d2903cb798f575b049aeefb3e8351ee5f2e6b0eb2d3e0721847a1b8f2094fc48d17b4163d35a1d7a1c8665c0e63103f5fee04f528c6df8530bb09e2de4411ef1973c2f63f909ca9f26b6b9a33bb6c50d9e77a3b7b8412695a281ab16daa627030c95a1d1f752cf744435084aa60178ecaf34cdf5e5f1abbece9235f1f9c2ba98ad5cf2b7669d0ba2fd709d87d6066f91e58e5cad29915240290632b56e293068f95084b495fa9038476e1e7e4ae0dee429c6b6db7db12dcb3baac23272d111f51e94287fc3d4791362d12578ccb8a5fedf37e96d00d0613ffe0647ff2d625bd7fdf679b5ba69a65c6d64703cf4253f0993b8cf412d32b85b8aa8c7af24469419be15b63b593f3747bee75d35f5b8e8f6a7c587bfa56d8622fd7c468fd328034bc7e735f8d90acc690be38cc657a53271040792898f2ab566f58a3ce47a9ec5769428f44dc52a27cedcd85f65eb857fe9676a7ae264c505b5a9e80530f384f4a0d45bc5895c72d28640015fa6b19bf9afcc8f87d3427653b44c5869d8368a520f0440601400fa3dfb0577f83b92304875ead2014027edc3e02edf657ed6fb5c67e5bf7af437563371c0c3b2feaa7f20819a6ed737dd8f28c2e0d9304b1b0895a0012e9c3e27f3e160c1682e600cbb2b7d4ee350b8398bdd46e860322b5c323930f8c4f66ea831d736c076f98fcef243709587c01c5f193901605b9c201c4888a8df4ddc6565f2ddee29c20562422b2396284b171af70fd18e5efd7cded9cbbcdabf86829287234415b1fb33f5d112039b1b5acccd97c9a967ce96895f4147bd2296eec3bb7cf8cdf0dd58232c2166aa3575f00b9ec381e9016b8717f9f4318c4279942203d7ea754f54899bfd66026af7879546f2c763a466f06b80804bbdd4cb1b0de35b2d6fe0603aa21950193a8050ef5392ec82094d39ab93a5dc7ca131efa21a460a59f27ceaa6e88291259c08eadf996723356dfbe6037bda8da4c1722d274c30de9aad036cf7f913d64c93e534d4df24722fc3a2aff2f76a2822c743c8ca419ab755452ecab775f80821cbd41ecf4562100ffa82003d032c57a8ff5b3cc11a4c5616ef51806f7ed9e710fb2cb26f96194a1683be1998fbf478336420322a50cadaff6013345f847649878fba8c12a8f39362e853421bf9ea61683cea0181851087274e2606dc4ed37d84705140db662ff0fe355458a995075762b580585b2c2b64cdfac997f8b8cd1db2dd2834180153d7715e1d72cbab197f25795e32decd8e1ffd83ccb04a7d31d8257e3ee8d2ad977285e2d6d5fa779693eedeb12479e3a15816a9d82a020af98161ec9a995a2cfcaacf5fa816d2bc1976261a3cdd46a522c3a607e44be753229c29ae714eacaf1f8344ee614fc551c15a60ae92e97544f3356c5dcea817eb32fc687b3d3e9adb81c29519255daa1ce4cf037e33c9ce4a39a976437c52d3e001d6c6c980f5aba85229e53fa23259afc9f4efa69b2dd10bc4413e07f48f71b76c01236ed17f157b190456ccb70ba481afd28bb0c0a34119179bd54a1f23b90589b953abad8f9951a16f90604f8662787effb61d19208eb7cb95e3cc138e1aaf074982864ba8a3723722649f8928856587a6d96fb7e7baaa93dafac573cf6e0fa0ea812904699dab8b25e996fb9b56c3dc732fd2a0d5c7a669046b53e3b43e2da3c7fa89142714857264e9ffbb33b129f4edc2fe2f143d7c20d49544af0ca06ea97f889101b4628d97ea275a6ee4a777d36e5a0e698c4c900a4cf3355eabf1eea1da94f0ff824d0821753eb9977a4bcdc7afad9a5aef48d0e5ebb51203dc362cbe1a5b1c690363357d6f0772297fcebe7da6a848f6a831ec86fcc6f8acaa2b7d860688c4db700d058df414e0a7e786dbdf8ec877279bb0b0326e4985976e719c99c19e5fdf9ff8a3291796675a5c26e56d22b8bee87ea9d5b7b85ee1f0bf053c5f8feae2cf88b6a7f1e229a1d5bc7a1f173aadb2c866097e5d369277c3d8acfbaf0f3693ebca90ae3e06c35e078fc9586109277b2a95eeae22b2640fadc7da2a4160e381237c3bf7975739bfac8d493575167d7ae17f534fea406fb397a3fc7e37b7caeb2237159153a232a2b77aa7b9ddcee8d6c3e081f09d857df40aa961d95008ec88e74c29e402803fca1b4923987290b956157965ee60481f16d39975455f398c3833b50c358ba54b6d38d6884f92e42497e9afa886091376fbbe10c2e14aa7451987a347517fdbdb2838620bfcc7f6a52bbe50b4f03aea41d398cfd2b9d8380a05a5c2774272d7877ee3318b665b9d3fc219adda225caf5b02ba2e4c28cc33fc39a494270bfface801244a5ecf213f268610a0848ae93fea1e214763e6204aa98f21ede11282b4034973686a4cce3acff7473cd3a84a1340e271c0954311c4a4c4fab3f7801db312b3960030591a078e0cb1a224079d8b135d4dc73c507f079cc92384f18a624eefe8dc1d197425111782d2dcd1b96c5e67a672257a48a45ee7fd30518c0d26772c698f517d4e5c7feb8d5ebee292e86dd4137e4976c7507d19dd8d39fee8434a47da4a84b37a331227bb4c71213d0a20f9fa69d94521cf1b75364c5c2d4070206dd5d06588a65f94a5bea5d433519e631139d43a40add76ce7a4ae0b58e66579a3e94dd49daa5975d264e4fea35d2e37e99b5b196e4980b6a9a8d57ce347916421847288dcc9df747ce2d1d670adf8c69584ab5fc7d4d5ba0401f61da6027efe109205b8234364e8b1d11ae29e2380dc399aa7f504f41e6c8a9f973fe00ccfd07a9b3e98a60275ca738d439489af487ca503629b4c9fd904ea5d85785a25e9b73ce909b7e6539b2cba653f2d034ec0f4b6a3b18918c8835ba5034d638b1fb03fac7f263b8deb51cbda12932f0faecf8a86ca31698bbebf40010f099ab679ea222d80a0c77eebdddde7fb5cd079e928a2fddf7e3702fb220e0d49f2620284ef4cd3b165119322e0b7f24926de4ccac5ee24788f424ed8af3c2d9cfadfc835d1de3d2c82f7d2c33e90b30d2e13e9b92e84808772c319ecd3e5be1619e1343f0279952261d368f12db54e93488e02ec6b185fdf95456a2761249e04962937f089c3feddf6a75c9fcb8ad5c252ab0de0fcc0d1b961e861fb8b7eee57938225110b085b2cdc336b60915e3ea44d61623cbc1ae334c97ac1623661f428116aa0894c207dd95db16a7dcf0f8b0b0e19f33355d3c56e307dae069e34abdc43203f85f2c43e3a1c1bd5e6f34352fc40210bc53301121e3fcb8e9fbff690c4d68abf2d61d23e1cda71b2a5c63d5cc2b13d924404fd7f6b57ed27fde37a971b804e6aec28088bd9fc97bb380c4980d026c41b7ed356e345e6ef6a3781d8a5229aa2db6341f257a3ca0c809b589ac97c4bdd62a0a3b5f1bb75f9bf3330587e30371cfc3d03765edb1c364d4cfefba10a874b2e4e6ffc640efbb6f5281c92eb9aef75ce831cd8fe30352dfbb9cc16e333e8d97ad6539b0dc318475523fcb33f83cdbb81735a90aa2f8dff82cb715de3d35646df5358e493a6363a7cec173af7142120b90390ddaf65bd9634a0d6b354d60e9218994fe1b5292925964037d3117118a41c72317665cb1653b102ff4005c6cee143c0623c6ee62f211fe4537de2ea2c203dcba5ad9c40b6e5cdf45a3383d4696039f79a06e590b827019baab09ad23b0b538bfb31e689233e30b32aaddfc638938d2bd0eebc4d5315503e83b15cde33a1e3dbae7fc6198164cabc035bfb4851aa41aafdc8cc991d55cb3feb5999c306f2574cd2c136a282f4e58d012853db00b0f624e00145dd122f217f4afc45937c89d00d8b33bdc92", 0xfff}, {&(0x7f00000011c0)="14d5", 0x2}], 0x2, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x10048, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) (async) pipe(&(0x7f0000000040)) (async) write(r1, &(0x7f0000000340), 0x11000) (async) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0xfff}, {&(0x7f00000011c0)="14d5", 0x2}], 0x2, 0xf) (async) kernel console output (not intermixed with test programs): ink: 12 bytes leftover after parsing attributes in process `syz.1.5454'. [ 673.146678][T27033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5457'. [ 673.263716][T27039] netlink: 'syz.3.5456': attribute type 8 has an invalid length. [ 673.445754][T27044] tipc: Enabled bearer , priority 0 [ 673.502686][T27043] tipc: Disabling bearer [ 673.573389][T27057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5460'. [ 673.947986][T27096] xt_bpf: check failed: parse error [ 674.034445][T27098] netlink: 'syz.2.5473': attribute type 1 has an invalid length. [ 674.213835][T27098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 674.239974][T27108] IPVS: length: 80 != 24 [ 674.245883][T27108] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5474'. [ 674.305539][T27120] netlink: 'syz.4.5475': attribute type 30 has an invalid length. [ 674.398081][T27120] bond5: option arp_missed_max: invalid value (0) [ 674.435897][T27120] bond5: option arp_missed_max: allowed values 1 - 255 [ 674.454986][T27120] bond5 (unregistering): Released all slaves [ 674.514164][T27135] lo speed is unknown, defaulting to 1000 [ 674.564613][T27129] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.5481'. [ 674.776912][T27156] netlink: 'syz.2.5486': attribute type 1 has an invalid length. [ 674.854858][T27160] sctp: [Deprecated]: syz.2.5486 (pid 27160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.854858][T27160] Use struct sctp_sack_info instead [ 675.024318][T27161] ip6erspan1: entered allmulticast mode [ 675.156993][T27164] netlink: 'syz.1.5488': attribute type 1 has an invalid length. [ 675.212979][T27165] ip6tnl3: entered promiscuous mode [ 675.295511][T27170] netlink: 'syz.2.5490': attribute type 1 has an invalid length. [ 675.304088][T27170] netlink: 'syz.2.5490': attribute type 2 has an invalid length. [ 676.569900][T27221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5499'. [ 676.580237][T27221] netlink: 'syz.0.5499': attribute type 1 has an invalid length. [ 676.602037][T27221] 8021q: adding VLAN 0 to HW filter on device bond9 [ 676.625478][T27221] bond9: (slave veth9): Enslaving as an active interface with a down link [ 676.651332][T27221] bond9: (slave veth11): Enslaving as an active interface with a down link [ 678.215765][T27167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.559915][T27245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5502'. [ 678.571812][T27240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5506'. [ 678.584890][T27240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5506'. [ 678.594452][T27240] netlink: 'syz.1.5506': attribute type 15 has an invalid length. [ 678.640058][T27238] veth5: entered allmulticast mode [ 678.918618][ T7218] lec:lec_start_xmit: lec0:No lecd attached [ 678.957590][T27268] RDS: rds_bind could not find a transport for ::ffff:172.20.20.27, load rds_tcp or rds_rdma? [ 679.224194][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5517'. [ 679.233771][T27277] bond0: option packets_per_slave: invalid value (1725438578) [ 679.242472][T27277] bond0: option packets_per_slave: allowed values 0 - 65535 [ 679.302342][T27286] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5520'. [ 679.493338][T27295] tipc: Resetting bearer [ 679.625597][T27303] xt_CT: No such helper "syz0" [ 679.705804][T27311] netlink: 'syz.4.5526': attribute type 39 has an invalid length. [ 679.973906][T27331] vlan0: entered allmulticast mode [ 679.992770][T27331] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5530'. [ 680.251691][T27342] netlink: 'syz.2.5534': attribute type 10 has an invalid length. [ 680.298577][T27342] syz_tun: left allmulticast mode [ 680.303959][T27342] bridge0: port 1(syz_tun) entered disabled state [ 680.354615][T27342] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 680.374550][T27348] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.5535'. [ 680.423798][T27348] openvswitch: netlink: Duplicate key (type 3). [ 680.430569][T27353] sctp: [Deprecated]: syz.0.5535 (pid 27353) Use of int in maxseg socket option. [ 680.430569][T27353] Use struct sctp_assoc_value instead [ 680.475040][T27356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5537'. [ 680.489275][T27352] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5534'. [ 680.502301][T27355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5537'. [ 680.789986][T27368] xt_CT: No such helper "snmp_trap" [ 680.915367][T27374] sctp: [Deprecated]: syz.0.5540 (pid 27374) Use of int in max_burst socket option deprecated. [ 680.915367][T27374] Use struct sctp_assoc_value instead [ 680.949143][T27384] mac80211_hwsim hwsim50 wlan1: Caught tx_queue_len zero misconfig [ 681.111224][T27392] team0 (unregistering): Port device team_slave_0 removed [ 681.135996][T27392] team0 (unregistering): Port device team_slave_1 removed [ 681.155606][T27392] team0 (unregistering): Port device bridge1 removed [ 681.168074][T27395] netlink: 'syz.0.5549': attribute type 1 has an invalid length. [ 681.211573][T27395] 8021q: adding VLAN 0 to HW filter on device bond10 [ 681.333199][T27395] bond10: (slave veth15): Enslaving as an active interface with a down link [ 681.375755][T27400] netlink: 'syz.2.5551': attribute type 4 has an invalid length. [ 681.406074][T27395] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 681.415696][T27407] netlink: 'syz.1.5550': attribute type 1 has an invalid length. [ 681.424980][T27407] netlink: 'syz.1.5550': attribute type 9 has an invalid length. [ 681.429273][T27395] bond10: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 681.460981][T27410] netlink: 'syz.2.5551': attribute type 4 has an invalid length. [ 681.504168][T27400] netlink: 'syz.2.5551': attribute type 4 has an invalid length. [ 681.589751][T27408] lo speed is unknown, defaulting to 1000 [ 681.605041][T27416] netlink: 'syz.3.5553': attribute type 2 has an invalid length. [ 681.703989][ T30] audit: type=1800 audit(1775990844.008:34): pid=27422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5554" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2441 res=0 errno=0 [ 681.925610][T27434] batman_adv: batadv0: Adding interface: dummy0 [ 681.939145][T27434] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.987979][T27440] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 682.016598][T27435] xt_CT: No such helper "netbios-ns" [ 682.022081][T27434] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 682.727911][T27482] hmac(sha224: entered promiscuous mode [ 682.826284][T27482] syzkaller0: entered promiscuous mode [ 682.836945][T27488] tipc: New replicast peer: 127.0.0.1 [ 682.844920][T27488] tipc: Enabled bearer , priority 6 [ 683.573241][T27506] __nla_validate_parse: 20 callbacks suppressed [ 683.573254][T27506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5577'. [ 683.938482][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 683.946580][ C0] lec:lec_tx_timeout: lec0 [ 684.896417][T27497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5576'. [ 685.020677][T27520] delete_channel: no stack [ 685.387834][T27551] lo: left allmulticast mode [ 685.394678][T27551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.462170][T27553] syzkaller0: entered promiscuous mode [ 685.467796][T27553] syzkaller0: entered allmulticast mode [ 685.546673][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5588'. [ 685.857468][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 685.867358][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 686.222460][T27606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5601'. [ 686.341841][T27619] macsec2: entered promiscuous mode [ 686.350231][T27619] virt_wifi0: entered promiscuous mode [ 686.474426][T27623] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 686.488367][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 686.495003][ C1] bridge0: topology change detected, propagating [ 686.517397][T27624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5606'. [ 686.555374][T27624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5606'. [ 686.569454][T27624] validate_nla: 5 callbacks suppressed [ 686.569473][T27624] netlink: 'syz.1.5606': attribute type 6 has an invalid length. [ 686.580359][ T30] audit: type=1804 audit(1775990848.888:35): pid=27628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5606" name="/newroot/482/cgroup.controllers" dev="tmpfs" ino=2479 res=1 errno=0 [ 686.609398][ T30] audit: type=1800 audit(1775990848.888:36): pid=27628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5606" name="cgroup.controllers" dev="tmpfs" ino=2479 res=0 errno=0 [ 686.672587][T27631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5610'. [ 686.719656][T27634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5610'. [ 686.856208][T27641] syzkaller1: entered promiscuous mode [ 686.862127][T27641] syzkaller1: entered allmulticast mode [ 686.883841][T27641] ipvlan2: entered promiscuous mode [ 686.934320][T27642] lo speed is unknown, defaulting to 1000 [ 687.206009][T27657] sctp: [Deprecated]: syz.0.5616 (pid 27657) Use of int in max_burst socket option. [ 687.206009][T27657] Use struct sctp_assoc_value instead [ 687.310971][T27659] syzkaller0: entered promiscuous mode [ 687.334929][T27659] syzkaller0: entered allmulticast mode [ 687.392994][T27659] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5617'. [ 687.678171][T27673] lo speed is unknown, defaulting to 1000 [ 688.070339][T27695] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5622'. [ 688.418988][T11436] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 688.739970][T27702] batadv_slave_0: Caught tx_queue_len zero misconfig [ 689.379570][T27752] __nla_validate_parse: 3 callbacks suppressed [ 689.379589][T27752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5638'. [ 689.445812][T27763] dvmrp0: entered allmulticast mode [ 689.559873][T27769] xt_hashlimit: size too large, truncated to 1048576 [ 689.565791][T27772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5644'. [ 689.600237][T27771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5644'. [ 689.664561][T27779] netlink: 'syz.0.5645': attribute type 33 has an invalid length. [ 689.985848][T27788] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5648'. [ 690.006736][T27788] netlink: 'syz.0.5648': attribute type 2 has an invalid length. [ 690.038939][T27788] lo: Caught tx_queue_len zero misconfig [ 690.095073][T27794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5649'. [ 690.239270][T27805] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5651'. [ 690.355389][T27811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5653'. [ 690.620111][T27824] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5655'. [ 690.725170][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 690.737578][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 690.751876][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 690.760486][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 690.770660][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 690.944501][T27826] lo speed is unknown, defaulting to 1000 [ 690.946769][T27837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5658'. [ 690.976421][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 690.984503][ C0] lec:lec_tx_timeout: lec0 [ 691.423235][T27852] lo speed is unknown, defaulting to 1000 [ 691.446564][T27826] chnl_net:caif_netlink_parms(): no params data found [ 691.592444][T27866] bridge_slave_1: Caught tx_queue_len zero misconfig [ 691.687030][T27826] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.705153][T27826] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.714305][T27826] bridge_slave_0: entered allmulticast mode [ 691.750628][T27826] bridge_slave_0: entered promiscuous mode [ 691.773172][T27826] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.781193][T27826] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.789506][T27826] bridge_slave_1: entered allmulticast mode [ 691.797787][T27826] bridge_slave_1: entered promiscuous mode [ 692.127843][T27826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.178066][T27826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.193895][T27913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5677'. [ 692.369476][T27826] team0: Port device team_slave_0 added [ 692.393795][T27921] lo speed is unknown, defaulting to 1000 [ 692.404125][T27826] team0: Port device team_slave_1 added [ 692.562615][T27826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.570055][T27826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.602701][T27826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.644337][T27826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.673125][T27826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.720476][T27826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.809578][ T5145] Bluetooth: hci0: command tx timeout [ 693.189154][T27826] hsr_slave_0: entered promiscuous mode [ 693.205950][T27826] hsr_slave_1: entered promiscuous mode [ 693.220481][T27826] debugfs: 'hsr0' already exists in 'hsr' [ 693.235791][T27826] Cannot create hsr debugfs directory [ 693.479223][T27967] lo speed is unknown, defaulting to 1000 [ 694.392026][T27826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 694.406561][T27826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 694.453102][T27826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 694.465807][T27826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 694.486564][T28023] syzkaller0: entered promiscuous mode [ 694.506232][T28023] syzkaller0: entered allmulticast mode [ 694.534287][T28023] tipc: Enabled bearer , priority 0 [ 694.562297][T28022] tipc: Resetting bearer [ 694.597970][T28022] tipc: Disabling bearer [ 694.761006][T27826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.807917][T27826] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.846638][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.853953][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.877075][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.884293][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.892813][ T5145] Bluetooth: hci0: command tx timeout [ 694.942392][T28054] netlink: 'syz.2.5701': attribute type 4 has an invalid length. [ 694.951564][T28054] __nla_validate_parse: 2 callbacks suppressed [ 694.951582][T28054] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5701'. [ 695.064412][T28058] openvswitch: netlink: Flow actions attr not present in new flow. [ 695.299347][T28064] lo speed is unknown, defaulting to 1000 [ 695.415070][T27826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.435997][T28074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5707'. [ 695.876331][T28088] tipc: Enabled bearer , priority 0 [ 695.913465][T28095] syzkaller1: entered promiscuous mode [ 695.939041][T28095] syzkaller1: entered allmulticast mode [ 696.021126][T28104] netlink: 'syz.2.5713': attribute type 3 has an invalid length. [ 696.049302][T28106] netlink: 'syz.2.5713': attribute type 3 has an invalid length. [ 696.159091][T28109] netlink: 'syz.2.5715': attribute type 13 has an invalid length. [ 696.230287][T28110] netlink: 'syz.3.5714': attribute type 10 has an invalid length. [ 696.283046][T28116] netlink: 'syz.3.5714': attribute type 10 has an invalid length. [ 696.331584][T28117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5716'. [ 696.765559][T27826] veth0_vlan: entered promiscuous mode [ 696.801619][T27826] veth1_vlan: entered promiscuous mode [ 696.978869][ T5145] Bluetooth: hci0: command tx timeout [ 696.987498][T28113] syzkaller1: entered promiscuous mode [ 696.994181][T28113] syzkaller1: entered allmulticast mode [ 697.170092][T27826] veth0_macvtap: entered promiscuous mode [ 697.199361][T27826] veth1_macvtap: entered promiscuous mode [ 697.276080][T27826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.335129][T27826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.421668][T12914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.451850][T12914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.489185][T12914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.703552][T12914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.930117][T12914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.949069][T12914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.974870][T28140] Bluetooth: MGMT ver 1.23 [ 698.091926][T12914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.093840][T28143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5720'. [ 698.100185][T12914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.129727][T28143] openvswitch: netlink: Flow key attr not present in new flow. [ 698.275696][T28146] syzkaller0: entered promiscuous mode [ 698.287162][T28146] syzkaller0: entered allmulticast mode [ 698.324766][T28146] tipc: Enabled bearer , priority 0 [ 698.351555][T28145] tipc: Resetting bearer [ 698.389400][T28145] tipc: Disabling bearer [ 698.535217][T28156] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 698.584980][T28155] netlink: 'syz.1.5726': attribute type 10 has an invalid length. [ 698.611541][T28155] wlan1: mtu greater than device maximum [ 698.617230][T28155] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 698.645036][T28162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5727'. [ 698.670205][T28155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5726'. [ 698.705550][ T5145] block nbd2: Receive control failed (result -32) [ 698.796062][T28162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.923821][T28162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.951322][T28172] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5728'. [ 699.059527][ T5145] Bluetooth: hci0: command tx timeout [ 699.131614][T28162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.316321][T28162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.357874][T28195] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5733'. [ 699.402987][T28194] netlink: 'syz.3.5734': attribute type 21 has an invalid length. [ 699.412522][T28194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5734'. [ 699.474606][T28190] lo speed is unknown, defaulting to 1000 [ 699.663359][T28208] syzkaller0: entered promiscuous mode [ 699.669356][T28208] syzkaller0: entered allmulticast mode [ 699.713259][T28208] tipc: Enabled bearer , priority 0 [ 699.727814][ T1340] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.794431][T28217] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 699.846462][T28217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5739'. [ 699.863935][ T1330] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.920264][ T1330] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.941699][T28202] tipc: Resetting bearer [ 699.978129][T28202] tipc: Disabling bearer [ 700.022206][T12914] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.120777][T28225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5741'. [ 700.157193][T28226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5742'. [ 700.179777][T28226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5742'. [ 700.226547][T28225] bridge0: port 3(syz_tun) entered disabled state [ 700.363652][ T1340] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.478996][ T1340] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.500926][ T1340] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.535856][ T1340] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.614011][T28254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5748'. [ 700.627314][T28256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5746'. [ 700.637775][T28256] tipc: Enabling of bearer rejected, failed to enable media [ 700.752742][T28260] bond0 (unregistering): Released all slaves [ 700.945754][T28262] openvswitch: netlink: IP tunnel dst address not specified [ 701.130183][ T5145] Bluetooth: hci0: command tx timeout [ 701.258157][T28274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5753'. [ 701.275214][T28274] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 701.349829][T28309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5760'. [ 701.378898][T28309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5760'. [ 701.396118][T28309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5760'. [ 701.423555][T28318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5760'. [ 701.433620][T28309] netlink: 'syz.0.5760': attribute type 5 has an invalid length. [ 701.571366][T28327] delete_channel: no stack [ 701.579366][T28327] netlink: 'syz.0.5765': attribute type 1 has an invalid length. [ 702.677209][T28376] 8021q: adding VLAN 0 to HW filter on device bond7 [ 702.746004][T28377] veth0_to_bond: entered promiscuous mode [ 702.776867][T28377] bond7: (slave macvlan2): Enslaving as an active interface with an up link [ 703.081712][T28407] netlink: 'syz.1.5785': attribute type 18 has an invalid length. [ 703.108703][T28407] netlink: 'syz.1.5785': attribute type 18 has an invalid length. [ 703.263810][T28417] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.343364][T28417] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.433308][T28417] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.514734][T28417] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.571458][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.592729][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.799132][T12914] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.819384][T12914] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.934057][ T1330] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.964933][ T1330] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.275335][T28481] xt_hashlimit: size too large, truncated to 1048576 [ 704.422270][T28471] lo speed is unknown, defaulting to 1000 [ 704.510617][T12914] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.526045][T12914] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.561027][T12914] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.811675][T12914] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.960451][T28521] xt_HMARK: proto mask must be zero with L3 mode [ 705.218527][T28538] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 705.227023][T28538] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 705.237350][T28534] __nla_validate_parse: 17 callbacks suppressed [ 705.237371][T28534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5820'. [ 705.327762][T28534] bond1: entered promiscuous mode [ 705.370772][T28534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 705.422297][T28538] tipc: Enabled bearer , priority 0 [ 705.478024][T28537] lo speed is unknown, defaulting to 1000 [ 705.711351][T28559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5823'. [ 705.752432][T28559] netlink: 74 bytes leftover after parsing attributes in process `syz.4.5823'. [ 705.797562][T28559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5823'. [ 705.811167][T28561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5824'. [ 705.915225][T28561] netlink: 'syz.3.5824': attribute type 2 has an invalid length. [ 706.086132][T28561] !: entered promiscuous mode [ 706.150694][T28581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5829'. [ 706.333759][T28593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5829'. [ 706.396987][T28593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5829'. [ 706.431724][T28581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5829'. [ 706.469652][T28593] netlink: 'syz.2.5829': attribute type 18 has an invalid length. [ 706.493070][T28589] bond6 (unregistering): Released all slaves [ 706.802767][T28606] tipc: Enabling of bearer rejected, already enabled [ 706.822891][T28606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.834875][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5833'. [ 707.029144][T28615] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 707.038628][T28615] syzkaller1: linktype set to 805 [ 707.218259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.383928][T28622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.602863][T28625] tipc: Invalid UDP bearer configuration [ 707.602918][T28625] tipc: Enabling of bearer rejected, failed to enable media [ 707.790670][T28645] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 707.812753][T28645] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 707.891602][T28643] bond12: entered allmulticast mode [ 707.906367][T28636] macvlan2: entered promiscuous mode [ 707.918926][T28636] macvlan2: entered allmulticast mode [ 707.935055][T28636] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 708.013510][T28648] macvlan4: entered promiscuous mode [ 708.021589][T28648] bond12: (slave macvlan4): Opening slave failed [ 708.122764][T28666] netlink: 'syz.0.5845': attribute type 21 has an invalid length. [ 708.131431][T28666] netlink: 'syz.0.5845': attribute type 4 has an invalid length. [ 708.187847][T28669] ipvlan2: entered allmulticast mode [ 708.204828][T28674] netlink: 'syz.0.5845': attribute type 1 has an invalid length. [ 708.226364][T28669] syz_tun: entered allmulticast mode [ 708.249017][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.450452][T28680] lo speed is unknown, defaulting to 1000 [ 709.288300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.573313][T28752] sctp: [Deprecated]: syz.0.5863 (pid 28752) Use of int in maxseg socket option. [ 709.573313][T28752] Use struct sctp_assoc_value instead [ 710.280162][T28791] __nla_validate_parse: 18 callbacks suppressed [ 710.280184][T28791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5874'. [ 710.328284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.370035][T28793] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5875'. [ 710.653929][T28805] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5878'. [ 710.948629][T28815] openvswitch: netlink: Multiple metadata blocks provided [ 711.017388][T28815] bridge8: entered promiscuous mode [ 711.284281][T28843] lo speed is unknown, defaulting to 1000 [ 711.368259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.412666][T28853] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5890'. [ 711.423896][T28855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5891'. [ 711.455429][T28855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5891'. [ 711.468766][T28855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5891'. [ 711.481978][T28855] netlink: 'syz.1.5891': attribute type 1 has an invalid length. [ 711.495045][T28855] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5891'. [ 711.543666][T28860] syzkaller0: entered promiscuous mode [ 711.579376][T28860] syzkaller0: entered allmulticast mode [ 711.654777][T28865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.667121][T28865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 711.983534][T28880] lo: entered allmulticast mode [ 712.023842][T28880] tunl0: entered allmulticast mode [ 712.056384][T28880] gre0: entered allmulticast mode [ 712.105859][T28896] netlink: 'syz.0.5901': attribute type 1 has an invalid length. [ 712.116948][T28880] gretap0: entered allmulticast mode [ 712.138660][T28896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.222687][T28901] netlink: 'syz.0.5901': attribute type 11 has an invalid length. [ 712.231106][T28880] erspan0: entered allmulticast mode [ 712.241038][T28880] ip_vti0: entered allmulticast mode [ 712.262835][T28880] ip6_vti0: entered allmulticast mode [ 712.271588][T28880] sit0: entered allmulticast mode [ 712.297952][T28880] ip6tnl0: entered allmulticast mode [ 712.310394][T28880] ip6gre0: entered allmulticast mode [ 712.342361][T28880] ip6gretap0: entered allmulticast mode [ 712.381496][T28880] vcan0: entered allmulticast mode [ 712.413306][T28880] nlmon0: entered allmulticast mode [ 712.418657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.438804][T28880] 0ªX¹¦À: entered allmulticast mode [ 712.459614][T28880] batadv0: entered allmulticast mode [ 712.475279][T28880] veth0: entered allmulticast mode [ 712.511256][T28880] veth1: entered allmulticast mode [ 712.535957][T28880] wg0: entered allmulticast mode [ 712.547438][T28880] wg1: entered allmulticast mode [ 712.561692][T28880] wg2: entered allmulticast mode [ 712.570471][T28880] veth0_to_bridge: entered allmulticast mode [ 712.581667][T28880] bridge_slave_0: entered allmulticast mode [ 712.591837][T28880] veth1_to_bridge: entered allmulticast mode [ 712.602576][T28880] bridge_slave_1: entered allmulticast mode [ 712.616308][T28880] veth0_to_bond: entered allmulticast mode [ 712.630523][T28880] ÿ: entered allmulticast mode [ 712.640279][T28880] veth1_to_bond: entered allmulticast mode [ 712.651842][T28880] bond_slave_1: entered allmulticast mode [ 712.659335][T28880] veth0_to_team: entered allmulticast mode [ 712.682987][T28880] veth1_to_team: entered allmulticast mode [ 712.697268][T28880] veth1_to_batadv: entered allmulticast mode [ 712.713162][T28880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.721896][T28880] batadv_slave_1: entered allmulticast mode [ 712.739569][T28880] xfrm0: entered allmulticast mode [ 712.757544][T28880] veth0_to_hsr: entered allmulticast mode [ 712.777976][T28880] hsr_slave_0: entered allmulticast mode [ 712.793363][T28880] veth1_to_hsr: entered allmulticast mode [ 712.805264][T28880] hsr_slave_1: entered allmulticast mode [ 712.822590][T28880] veth1_virt_wifi: entered allmulticast mode [ 712.831944][T28880] veth0_virt_wifi: entered allmulticast mode [ 712.864854][T28880] virt_wifi0: entered allmulticast mode [ 712.873413][T28880] veth1_vlan: entered allmulticast mode [ 712.885981][T28880] veth0_vlan: entered allmulticast mode [ 712.892345][T28880] vlan0: entered allmulticast mode [ 712.897716][T28880] vlan1: entered allmulticast mode [ 712.904925][T28880] macvlan0: entered allmulticast mode [ 712.915641][T28880] macvlan1: entered allmulticast mode [ 712.926133][T28880] ipvlan0: entered allmulticast mode [ 712.932956][T28880] ipvlan1: entered allmulticast mode [ 712.945913][T28880] veth1_macvtap: entered allmulticast mode [ 712.977680][T28880] macsec0: entered allmulticast mode [ 712.989957][T28880] geneve0: entered allmulticast mode [ 713.007431][T28880] geneve1: entered allmulticast mode [ 713.029041][T28880] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 713.036382][T28880] vxlan0: entered allmulticast mode [ 713.042487][T28880] bond1: entered allmulticast mode [ 713.047941][T28880] mac80211_hwsim hwsim51 wlan2: entered allmulticast mode [ 713.060783][T28880] bridge_slave_1.: entered allmulticast mode [ 713.067320][T28880] bond2: entered allmulticast mode [ 713.077360][T28880] l24): entered allmulticast mode [ 713.085180][T28880] tipc: Resetting bearer [ 713.097328][T28880] mac80211_hwsim hwsim48 syzkaller0: left promiscuous mode [ 713.113569][T28880] rose0: entered allmulticast mode [ 713.121620][T28880] bridge0: entered allmulticast mode [ 713.127479][T28880] bridge1: entered allmulticast mode [ 713.138521][T28880] bond3: left promiscuous mode [ 713.143583][T28880] bond3: entered allmulticast mode [ 713.153486][T28880] syztnl2: entered allmulticast mode [ 713.159090][T28880] mac80211_hwsim hwsim62 wlan3: entered allmulticast mode [ 713.166425][T28880] bond4: entered allmulticast mode [ 713.171857][T28880] bond5: entered allmulticast mode [ 713.177290][T28880] erspan1: entered allmulticast mode [ 713.183196][T28880] úÁàél24): entered allmulticast mode [ 713.188961][T28880] ip6tnl1: entered allmulticast mode [ 713.194421][T28880] ip6tnl2: entered allmulticast mode [ 713.200323][T28880] mac80211_hwsim hwsim70 wlan4: entered allmulticast mode [ 713.207641][T28880] vxlan1: entered allmulticast mode [ 713.213735][T28880] gretap1: entered allmulticast mode [ 713.219782][T28880] bridge2: entered allmulticast mode [ 713.232320][T28880] bond6: entered allmulticast mode [ 713.237719][T28880] geneve2: entered allmulticast mode [ 713.243955][T28880] mac80211_hwsim hwsim73 wlan5: entered allmulticast mode [ 713.251958][T28880] veth2: entered allmulticast mode [ 713.257248][T28880] veth3: entered allmulticast mode [ 713.263472][T28880] mac80211_hwsim hwsim74 wlan6: entered allmulticast mode [ 713.270962][T28880] mac80211_hwsim hwsim75 wlan7: entered allmulticast mode [ 713.279064][T28880] virt_wifi0: left promiscuous mode [ 713.284416][T28880] macsec1: left promiscuous mode [ 713.292360][T28880] macsec1: entered allmulticast mode [ 713.302233][T28880] ip6gre1: left promiscuous mode [ 713.314858][T28880] geneve3: entered allmulticast mode [ 713.321878][T28880] veth4: entered allmulticast mode [ 713.327182][T28880] ip6erspan0: entered allmulticast mode [ 713.333599][T28880] bond0: entered allmulticast mode [ 713.339717][T28880] mac80211_hwsim hwsim82 wlan8: entered allmulticast mode [ 713.347399][T28880] bond7: entered allmulticast mode [ 713.353970][T28880] macvlan2: entered allmulticast mode [ 713.374689][T28880] netdevsim netdevsim3 eth0: entered allmulticast mode [ 713.382146][T28880] netdevsim netdevsim3 eth1: entered allmulticast mode [ 713.389513][T28880] netdevsim netdevsim3 eth2: entered allmulticast mode [ 713.396574][T28880] netdevsim netdevsim3 eth3: entered allmulticast mode [ 713.404081][T28880] !: entered allmulticast mode [ 713.497397][T28903] gretap1: entered promiscuous mode [ 713.516020][T28906] syz0: Port: 1 Link DOWN [ 713.518952][ T49] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.539665][ T49] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.570636][T28927] netlink: 'syz.3.5903': attribute type 1 has an invalid length. [ 713.612468][ T49] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.620863][T28927] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5903'. [ 713.666326][ T49] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.794870][T28934] bridge0: port 1(syz_tun) entered blocking state [ 713.801518][T28934] bridge0: port 1(syz_tun) entered forwarding state [ 713.817085][T28934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.827242][T28934] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.849275][T28934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 713.894216][T28926] syzkaller1: entered promiscuous mode [ 713.907355][T28926] syzkaller1: entered allmulticast mode [ 714.022508][T28944] netlink: 'syz.4.5908': attribute type 12 has an invalid length. [ 714.044681][T28944] netlink: 'syz.4.5908': attribute type 29 has an invalid length. [ 714.056420][T28944] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5908'. [ 714.084028][T28944] netlink: 'syz.4.5908': attribute type 1 has an invalid length. [ 714.264945][T28957] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 714.273799][T28957] tipc: Resetting bearer [ 714.418280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.688641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.218318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.895821][T29058] openvswitch: netlink: VXLAN extension message has 186 unknown bytes. [ 716.004882][T29046] syzkaller0: entered promiscuous mode [ 716.020709][T29046] syzkaller0: entered allmulticast mode [ 716.044945][T29053] __nla_validate_parse: 4 callbacks suppressed [ 716.044967][T29053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5939'. [ 716.252267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.293439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.895041][T29067] syzkaller0: entered promiscuous mode [ 718.027834][T29084] lo speed is unknown, defaulting to 1000 [ 718.092507][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5949'. [ 718.328588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.690613][T29042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.883579][T29109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5952'. [ 718.907403][T29104] lo speed is unknown, defaulting to 1000 [ 719.206716][T29131] netlink: 'syz.0.5959': attribute type 1 has an invalid length. [ 719.231283][T29133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.357992][T29142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5963'. [ 719.378292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.389503][T29133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5961'. [ 719.501699][T29152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5961'. [ 719.536369][T29143] lo speed is unknown, defaulting to 1000 [ 719.614480][T29152] tipc: Resetting bearer [ 719.711901][ T1330] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.738771][ T1330] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.784721][ T1330] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.817314][ T1330] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.965167][T29183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5973'. [ 719.991376][T29183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5973'. [ 720.012232][T29183] bridge0: left allmulticast mode [ 720.085250][T29191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5976'. [ 720.418597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.504464][T29206] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5979'. [ 720.655737][T29211] syzkaller1: entered promiscuous mode [ 720.670048][T29211] syzkaller1: entered allmulticast mode [ 721.195505][T29254] lo speed is unknown, defaulting to 1000 [ 721.234505][T29264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5992'. [ 721.244402][T29264] vlan0: entered promiscuous mode [ 721.448349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.539864][T29288] netlink: 'syz.3.5998': attribute type 13 has an invalid length. [ 721.547951][T29288] netlink: 'syz.3.5998': attribute type 17 has an invalid length. [ 721.646848][T29288] lo: left allmulticast mode [ 721.686252][T29288] tunl0: left allmulticast mode [ 721.719577][T29288] gre0: left allmulticast mode [ 721.735059][T29288] gretap0: left allmulticast mode [ 721.772339][T29288] erspan0: left allmulticast mode [ 721.786316][T29288] ip_vti0: left allmulticast mode [ 721.840236][T29288] ip6_vti0: left allmulticast mode [ 721.850181][T29288] sit0: left allmulticast mode [ 721.864709][T29288] ip6tnl0: left allmulticast mode [ 721.876496][T29288] ip6gre0: left allmulticast mode [ 721.898444][T29288] ip6gretap0: left allmulticast mode [ 721.913019][T29288] vcan0: left allmulticast mode [ 721.919988][T29288] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.927650][T29288] nlmon0: left allmulticast mode [ 721.935036][T29288] 0ªX¹¦À: left allmulticast mode [ 721.941498][T29288] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 721.995509][T29286] syzkaller1: entered promiscuous mode [ 722.001510][T29286] syzkaller1: entered allmulticast mode [ 722.184807][T29310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6003'. [ 722.276456][ T30] audit: type=1107 audit(1775990884.578:37): pid=29313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='A kû]õ©&ðé¿ ^74\áq8º••†™­ýîª XHÚ¥‘#,ä2^›)}Å2ŠO€îGßÏ’ž«eŽaü…]Œ7”"Šs*9_Au…è~À"¹„V¦Ò–÷n: É@%õ:?$J* =ÝÝ\ikåcÂtz³nY!¼\æcrb [ 722.276456][ T30] ˜ò5j¸àæ„ã‘)xá¦Ê~$°&ªKˆ9' [ 722.343083][T29314] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6004'. [ 722.354092][T29318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6006'. [ 722.488305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.534055][T29325] "syz.0.6009" (29325) uses obsolete ecb(arc4) skcipher [ 722.644964][T29328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6007'. [ 722.779596][T29340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6012'. [ 722.970449][T29352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6017'. [ 723.005235][ T30] audit: type=1800 audit(1775990885.308:38): pid=29354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6018" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3066 res=0 errno=0 [ 723.016916][T29352] bond6: entered promiscuous mode [ 723.034301][T29352] 8021q: adding VLAN 0 to HW filter on device bond6 [ 723.200273][T29364] batadv0: entered promiscuous mode [ 723.210299][T29364] bond0: entered promiscuous mode [ 723.215581][T29364] bond_slave_0: entered promiscuous mode [ 723.238960][T29364] bond_slave_1: entered promiscuous mode [ 723.528367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.810312][T29387] xt_bpf: check failed: parse error [ 724.578384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.608327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.982990][T29364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 726.174136][T29409] No such timeout policy "syz1" [ 726.353419][T29420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6031'. [ 726.402092][T29420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6031'. [ 726.468921][ T145] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.485982][ T145] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.544709][ T145] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.573668][T29439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6036'. [ 726.610761][T29429] lo speed is unknown, defaulting to 1000 [ 726.616587][ T145] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.658231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.883929][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 726.894182][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 726.894785][T29453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6041'. [ 726.914458][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 726.923026][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 726.934457][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 727.002437][T29454] lo speed is unknown, defaulting to 1000 [ 727.320185][T29469] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6043'. [ 727.334686][T17055] bridge0: port 1(syz_tun) entered disabled state [ 727.365744][T29475] netlink: 'syz.1.6043': attribute type 1 has an invalid length. [ 727.375630][T29475] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6043'. [ 727.420496][T17055] syz_tun (unregistering): left allmulticast mode [ 727.452867][T17055] syz_tun (unregistering): left promiscuous mode [ 727.481221][T17055] bridge0: port 1(syz_tun) entered disabled state [ 727.698270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.136394][T29510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6050'. [ 728.136411][T29497] lo speed is unknown, defaulting to 1000 [ 728.193124][T29510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6050'. [ 728.221519][T29517] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 728.236728][T29517] bond3 (unregistering): Released all slaves [ 728.333840][T29454] chnl_net:caif_netlink_parms(): no params data found [ 728.584232][T29536] openvswitch: netlink: Message has 8 unknown bytes. [ 728.591282][T29536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.694606][T29454] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.707402][T29454] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.716447][T29454] bridge_slave_0: entered allmulticast mode [ 728.725014][T29454] bridge_slave_0: entered promiscuous mode [ 728.736730][T29454] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.738557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.754131][T29454] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.762892][T29454] bridge_slave_1: entered allmulticast mode [ 728.771822][T29454] bridge_slave_1: entered promiscuous mode [ 728.795091][T29542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6059'. [ 728.863658][T29530] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6056'. [ 728.892594][T29454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.949654][T29454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.969001][ T5145] Bluetooth: hci5: command tx timeout [ 728.996046][T29559] netlink: 'syz.3.6062': attribute type 1 has an invalid length. [ 729.221647][T29454] team0: Port device team_slave_0 added [ 729.234087][T29454] team0: Port device team_slave_1 added [ 729.299465][T29454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.306453][T29454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.345134][T29454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.367875][T29566] syzkaller1: entered promiscuous mode [ 729.377163][T29566] syzkaller1: entered allmulticast mode [ 729.411651][T29454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.418978][T29454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.445946][T29454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.687971][T29454] hsr_slave_0: entered promiscuous mode [ 729.703794][T29454] hsr_slave_1: entered promiscuous mode [ 729.711733][T29454] debugfs: 'hsr0' already exists in 'hsr' [ 729.717597][T29454] Cannot create hsr debugfs directory [ 729.778260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.046236][T29617] ipvlan0: left allmulticast mode [ 730.272792][T29616] lo speed is unknown, defaulting to 1000 [ 730.752789][T29454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 730.767464][T29454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 730.816974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.049985][ T5145] Bluetooth: hci5: command tx timeout [ 731.279886][T29454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 731.397914][T29454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 731.487919][T29681] __nla_validate_parse: 8 callbacks suppressed [ 731.487937][T29681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6091'. [ 731.508633][T29681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6091'. [ 731.701527][T29696] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 731.816757][T29454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.848258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.854944][T29454] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.891143][T12914] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.898398][T12914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.915250][ T1340] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.922460][ T1340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.022057][T29705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6099'. [ 732.033814][T29712] netlink: 'syz.3.6100': attribute type 32 has an invalid length. [ 732.190167][T29709] sctp: [Deprecated]: syz.2.6096 (pid 29709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.190167][T29709] Use struct sctp_sack_info instead [ 732.256237][T29709] netlink: 'syz.2.6096': attribute type 1 has an invalid length. [ 732.309993][T29709] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6096'. [ 732.426332][T29730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6103'. [ 732.486545][T29454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.621572][T29454] veth0_vlan: entered promiscuous mode [ 732.693019][T29454] veth1_vlan: entered promiscuous mode [ 732.790936][T29742] netlink: 'syz.3.6107': attribute type 58 has an invalid length. [ 732.814920][T29454] veth0_macvtap: entered promiscuous mode [ 732.844560][T29454] veth1_macvtap: entered promiscuous mode [ 732.888401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.947894][T29454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.972170][T29454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.996338][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.007260][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.025857][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.041003][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.129146][ T5145] Bluetooth: hci5: command tx timeout [ 733.938317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.623827][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.651319][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.768322][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.776176][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.811045][T29781] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6119'. [ 734.968239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.979567][T29794] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 735.014346][T29797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6040'. [ 735.030189][T29803] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 735.209834][ T5145] Bluetooth: hci5: command tx timeout [ 735.477923][T29825] xt_TCPMSS: Only works on TCP SYN packets [ 735.552527][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 735.565809][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 735.579291][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 735.609232][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 735.620681][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.660926][T29830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6131'. [ 735.680340][T29826] lo speed is unknown, defaulting to 1000 [ 735.805353][T29830] hsr_slave_1 (unregistering): left promiscuous mode [ 735.937014][T17899] syz_tun (unregistering): left allmulticast mode [ 735.949373][T17899] syz_tun (unregistering): left promiscuous mode [ 735.960378][T17899] bridge0: port 1(syz_tun) entered disabled state [ 736.008356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.026465][T29841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6134'. [ 736.170554][T29847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6135'. [ 736.204668][T29826] chnl_net:caif_netlink_parms(): no params data found [ 736.228882][T29847] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 736.396934][T29866] netlink: 'syz.2.6139': attribute type 1 has an invalid length. [ 736.419713][T29863] Cannot find del_set index 1 as target [ 736.444974][T29826] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.454946][T29826] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.463245][T29826] bridge_slave_0: entered allmulticast mode [ 736.472381][T29826] bridge_slave_0: entered promiscuous mode [ 736.483324][T29826] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.490829][T29826] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.498704][T29826] bridge_slave_1: entered allmulticast mode [ 736.506638][T29826] bridge_slave_1: entered promiscuous mode [ 736.508939][T29866] netlink: 'syz.2.6139': attribute type 2 has an invalid length. [ 736.576272][T29826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.604703][T29826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.665671][T29826] team0: Port device team_slave_0 added [ 736.670153][T29883] __nla_validate_parse: 4 callbacks suppressed [ 736.670172][T29883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6144'. [ 736.679839][T29826] team0: Port device team_slave_1 added [ 736.755954][T29826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.763230][T29826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.790424][T29826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.800498][T29887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6146'. [ 736.804970][T29826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.820819][T29826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.855172][T29826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.951448][T29826] hsr_slave_0: entered promiscuous mode [ 736.971841][T29826] hsr_slave_1: entered promiscuous mode [ 736.978910][T29826] debugfs: 'hsr0' already exists in 'hsr' [ 736.984687][T29826] Cannot create hsr debugfs directory [ 736.996599][T29892] macsec1: entered promiscuous mode [ 737.002695][T29892] batadv0: entered promiscuous mode [ 737.010499][T29892] batadv0: left promiscuous mode [ 737.029024][T29893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6147'. [ 737.048316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.056519][T29893] vlan0: entered promiscuous mode [ 737.063936][T29893] batadv0: entered promiscuous mode [ 737.201471][T29895] lo speed is unknown, defaulting to 1000 [ 737.558927][T29826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 737.569081][T29826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 737.579910][T29826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 737.594303][T29826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 737.665485][T29826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.685834][T29826] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.692550][ T5145] Bluetooth: hci1: command tx timeout [ 737.709180][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.716294][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.732002][T12914] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.739256][T12914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.899497][T29826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.987953][T29826] veth0_vlan: entered promiscuous mode [ 738.001278][T29826] veth1_vlan: entered promiscuous mode [ 738.052686][T29826] veth0_macvtap: entered promiscuous mode [ 738.067443][T29826] veth1_macvtap: entered promiscuous mode [ 738.087989][T29826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.095405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.107543][T29826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.125095][ T1095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.135906][ T1095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.153666][ T1095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.175521][ T1095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.248081][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.263674][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.292298][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.301575][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.346730][T29912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6124'. [ 738.357288][T29912] openvswitch: netlink: Flow actions attr not present in new flow. [ 738.368994][T29912] netlink: 'syz.3.6124': attribute type 1 has an invalid length. [ 738.376832][T29912] netlink: 'syz.3.6124': attribute type 6 has an invalid length. [ 738.385079][T29912] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6124'. [ 738.396878][T29912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6124'. [ 738.407385][T29912] openvswitch: netlink: Flow actions attr not present in new flow. [ 739.128411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.769514][ T5145] Bluetooth: hci1: command tx timeout [ 740.178421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.208332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.848925][ T5145] Bluetooth: hci1: command tx timeout [ 742.248428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.298392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.709265][ T7218] lec:lec_start_xmit: lec0:No lecd attached [ 743.928921][ T5145] Bluetooth: hci1: command tx timeout [ 744.328416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.368512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.408389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.299543][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 747.448458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.488342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.968357][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 748.976404][ C0] lec:lec_tx_timeout: lec0 [ 748.981063][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 749.528349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.568500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.608293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.648420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.688870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.998578][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 754.006632][ C0] lec:lec_tx_timeout: lec0 [ 754.728419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.768359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.991940][T29926] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6153'. [ 756.108718][T29929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6154'. [ 756.151356][T29929] netlink: 'syz.0.6154': attribute type 1 has an invalid length. [ 756.159471][T29929] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6154'. [ 756.227660][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 756.249327][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 756.282478][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 756.305309][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 756.315389][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 756.413669][T29943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6155'. [ 756.496142][T29939] lo speed is unknown, defaulting to 1000 [ 756.595580][T18538] syz_tun (unregistering): left promiscuous mode [ 756.628319][T18538] bridge0: port 3(syz_tun) entered disabled state [ 756.689807][T29957] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6159'. [ 756.708023][T29935] lo speed is unknown, defaulting to 1000 [ 756.793516][T29957] xt_CT: No such helper "syz1" [ 756.808282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.853732][T29960] lo speed is unknown, defaulting to 1000 [ 756.891592][T29965] syzkaller0: entered promiscuous mode [ 756.899624][T29965] syzkaller0: entered allmulticast mode [ 757.165814][T29973] tipc: Started in network mode [ 757.174667][T29973] tipc: Node identity 82ddae823ca5, cluster identity 4711 [ 757.184840][T29973] tipc: Enabled bearer , priority 0 [ 757.236386][T29973] tipc: Resetting bearer [ 757.262280][T29972] tipc: Disabling bearer [ 757.382457][T29991] netlink: 'syz.0.6166': attribute type 1 has an invalid length. [ 757.456105][ T58] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.540541][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.711820][ T1340] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.732648][ T1340] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.759960][T30002] vti0: entered promiscuous mode [ 757.764961][T30002] vti0: entered allmulticast mode [ 757.817418][T29935] chnl_net:caif_netlink_parms(): no params data found [ 757.848322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.857828][ T49] bridge_slave_0: left promiscuous mode [ 757.896653][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.942944][T30004] netlink: 'syz.2.6170': attribute type 1 has an invalid length. [ 758.217910][T30030] netlink: 'syz.4.6175': attribute type 1 has an invalid length. [ 758.227273][T30030] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6175'. [ 758.342606][ T49] batman_adv: batadv0: Removing interface: gretap3 [ 758.418819][ T5145] Bluetooth: hci4: command tx timeout [ 758.888390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.901048][ T49] bridge11 (unregistering): left allmulticast mode [ 758.912705][ T49] team0: Port device bridge11 removed [ 758.962771][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.974148][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.984748][ T49] bond0 (unregistering): Released all slaves [ 758.994606][ T49] bond1 (unregistering): Released all slaves [ 759.009164][ T49] bond2 (unregistering): Released all slaves [ 759.024020][ T49] bond3 (unregistering): (slave veth9): Releasing active interface [ 759.034578][ T49] bond3 (unregistering): Released all slaves [ 759.047666][ T49] bond4 (unregistering): Released all slaves [ 759.063366][ T49] bond5 (unregistering): Released all slaves [ 759.076068][ T49] bond6 (unregistering): Released all slaves [ 759.093514][ T49] bond7 (unregistering): Released all slaves [ 759.114257][ T49] bond8 (unregistering): Released all slaves [ 759.127005][ T49] bond9 (unregistering): Released all slaves [ 759.142434][ T49] bond10 (unregistering): Released all slaves [ 759.160419][ T49] bond11 (unregistering): Released all slaves [ 759.175764][ T49] bond12 (unregistering): Released all slaves [ 759.188606][ T49] bond13 (unregistering): Released all slaves [ 759.210044][T30010] syzkaller0: entered promiscuous mode [ 759.215595][T30010] syzkaller0: entered allmulticast mode [ 759.246351][T30017] ip6erspan0: entered allmulticast mode [ 759.478872][ T49] tipc: Disabling bearer [ 759.487992][ T49] tipc: Left network mode [ 759.664298][T30054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6181'. [ 759.729706][T30037] syzkaller1: entered promiscuous mode [ 759.744393][T30037] syzkaller1: entered allmulticast mode [ 759.928570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.037034][T29935] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.046220][T29935] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.054861][T29935] bridge_slave_0: entered allmulticast mode [ 760.063897][T29935] bridge_slave_0: entered promiscuous mode [ 760.115022][T30056] lo speed is unknown, defaulting to 1000 [ 760.143172][T29935] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.165249][T29935] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.217170][T29935] bridge_slave_1: entered allmulticast mode [ 760.237791][T29935] bridge_slave_1: entered promiscuous mode [ 760.370140][T30079] netlink: 'syz.0.6183': attribute type 11 has an invalid length. [ 760.389987][T30079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6183'. [ 760.395102][T29935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.427228][T29935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.465169][T30079] netlink: 'syz.0.6183': attribute type 11 has an invalid length. [ 760.485188][T30079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6183'. [ 760.504225][ T5145] Bluetooth: hci4: command tx timeout [ 760.543740][ T1340] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.553523][ T1340] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.620131][ T1340] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.629227][ T1340] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.707763][T29935] team0: Port device team_slave_0 added [ 760.723119][T29935] team0: Port device team_slave_1 added [ 760.804233][T29935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.819521][T29935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.868564][T29935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.968335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.022765][T29935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.036991][T29935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.068113][T29935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.206620][ T49] hsr_slave_0: left promiscuous mode [ 761.213232][ T49] hsr_slave_1: left promiscuous mode [ 761.229985][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.272134][ T49] pim6reg (unregistering): left allmulticast mode [ 761.355213][ T49] team0 (unregistering): Port device macvlan2 removed [ 761.385287][T30113] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 761.400948][T28909] IPVS: starting estimator thread 0... [ 761.488972][T30117] IPVS: using max 33 ests per chain, 79200 per kthread [ 761.822073][ T49] team0 (unregistering): Port device team_slave_1 removed [ 761.860169][ T49] team0 (unregistering): Port device team_slave_0 removed [ 762.008915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.267790][T30145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6193'. [ 762.326928][T29935] hsr_slave_0: entered promiscuous mode [ 762.337172][T29935] hsr_slave_1: entered promiscuous mode [ 762.344315][T29935] debugfs: 'hsr0' already exists in 'hsr' [ 762.351370][T29935] Cannot create hsr debugfs directory [ 762.462794][T30154] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6195'. [ 762.576045][ T5145] Bluetooth: hci4: command tx timeout [ 762.869627][T30168] syzkaller0: entered promiscuous mode [ 762.875142][T30168] syzkaller0: entered allmulticast mode [ 763.042626][T29935] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.058402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.086416][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6201'. [ 763.176719][ T49] IPVS: stop unused estimator thread 0... [ 763.393264][T29935] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.625067][T29935] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.766184][T30220] lo speed is unknown, defaulting to 1000 [ 763.851999][T29935] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.876149][T30221] lo speed is unknown, defaulting to 1000 [ 763.886937][T30227] 8021q: VLANs not supported on nlmon0 [ 763.902794][T30227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6209'. [ 764.087526][T30231] bond1 (unregistering): Released all slaves [ 764.098277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.160274][T30235] bond1 (unregistering): Released all slaves [ 764.531560][T30260] lo speed is unknown, defaulting to 1000 [ 764.648675][ T5145] Bluetooth: hci4: command tx timeout [ 764.661272][T29935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 764.704943][T30262] xt_CT: No such helper "syz1" [ 764.716141][T30258] syzkaller0: entered promiscuous mode [ 764.725331][T30258] syzkaller0: entered allmulticast mode [ 764.781117][T29935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 764.865167][T29935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 764.952572][T29935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 765.037971][T30276] syzkaller0: entered promiscuous mode [ 765.057549][T30276] syzkaller0: entered allmulticast mode [ 765.128262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.206268][T30297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6220'. [ 765.257576][T30303] netlink: 'syz.0.6220': attribute type 13 has an invalid length. [ 765.273044][T30303] netlink: 'syz.0.6220': attribute type 17 has an invalid length. [ 765.544900][T30303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 765.745637][T30321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.765036][T30321] syzkaller0: entered promiscuous mode [ 765.778891][T30321] syzkaller0: entered allmulticast mode [ 765.790854][T30321] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 765.867503][T30328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6227'. [ 765.957063][T29935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.012842][T29935] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.079136][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.086291][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.161559][T12914] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.168787][T12914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.178305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.244783][T30348] netlink: 4276 bytes leftover after parsing attributes in process `syz.0.6230'. [ 766.394459][T30342] smc: net device hsr0 applied user defined pnetid SYZ2 [ 766.451155][T30351] lo speed is unknown, defaulting to 1000 [ 766.566082][T30357] syzkaller0: entered promiscuous mode [ 766.572476][T30357] syzkaller0: entered allmulticast mode [ 766.670342][T30359] syzkaller1: entered promiscuous mode [ 766.676057][T30359] syzkaller1: entered allmulticast mode [ 766.931364][T30379] netlink: 'syz.4.6237': attribute type 1 has an invalid length. [ 766.976052][T30379] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6237'. [ 767.001175][T30379] NCSI netlink: No device for ifindex 0 [ 767.018282][T30376] netlink: 'syz.4.6237': attribute type 1 has an invalid length. [ 767.026056][T30376] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6237'. [ 767.040542][T30376] NCSI netlink: No device for ifindex 0 [ 767.131171][T29935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.218283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.359213][T30393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6238'. [ 767.563019][T29935] veth0_vlan: entered promiscuous mode [ 767.734529][T29935] veth1_vlan: entered promiscuous mode [ 767.971383][T29935] veth0_macvtap: entered promiscuous mode [ 768.004389][T29935] veth1_macvtap: entered promiscuous mode [ 768.080424][T29935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.189220][T29935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.233187][T12914] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.248279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.261045][T12914] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.294146][T12914] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.309303][T12914] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.335206][T30434] syzkaller0: entered promiscuous mode [ 768.347985][T30434] syzkaller0: entered allmulticast mode [ 768.369978][T30439] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6248'. [ 768.621310][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.647672][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.738465][T12914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.754237][T12914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.767199][T30453] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 769.024362][T30468] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 769.034625][T30468] CPU: 1 UID: 0 PID: 30468 Comm: syz.1.6150 Not tainted syzkaller #0 PREEMPT(full) [ 769.034651][T30468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 769.034664][T30468] Call Trace: [ 769.034672][T30468] [ 769.034682][T30468] dump_stack_lvl+0xe8/0x150 [ 769.034720][T30468] sysfs_warn_dup+0x8e/0xa0 [ 769.034754][T30468] sysfs_do_create_link_sd+0xc0/0x110 [ 769.034789][T30468] device_add_class_symlinks+0x1cf/0x240 [ 769.034824][T30468] device_add+0x475/0xb70 [ 769.034858][T30468] wiphy_register+0x1dc5/0x2dc0 [ 769.034898][T30468] ? __pfx_wiphy_register+0x10/0x10 [ 769.034920][T30468] ? __pfx_netdev_run_todo+0x10/0x10 [ 769.034941][T30468] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 769.034974][T30468] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 769.035015][T30468] ieee80211_register_hw+0x3cb7/0x4980 [ 769.035039][T30468] ? __lock_acquire+0x6b5/0x2cf0 [ 769.035083][T30468] ? ieee80211_register_hw+0x1841/0x4980 [ 769.035132][T30468] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 769.035163][T30468] ? __hrtimer_setup+0x181/0x200 [ 769.035192][T30468] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 769.035216][T30468] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 769.035271][T30468] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 769.035299][T30468] ? kstrndup+0xbf/0x160 [ 769.035346][T30468] hwsim_new_radio_nl+0xf6a/0x1c00 [ 769.035401][T30468] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 769.035442][T30468] ? rcu_is_watching+0x15/0xb0 [ 769.035471][T30468] ? trace_kmalloc+0x2a/0x110 [ 769.035501][T30468] ? __nla_parse+0x40/0x60 [ 769.035528][T30468] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 769.035551][T30468] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 769.035582][T30468] genl_family_rcv_msg_doit+0x22a/0x330 [ 769.035610][T30468] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 769.035645][T30468] ? bpf_lsm_capable+0x9/0x20 [ 769.035674][T30468] ? security_capable+0x7e/0x2c0 [ 769.035712][T30468] genl_rcv_msg+0x61c/0x7a0 [ 769.035741][T30468] ? __pfx_genl_rcv_msg+0x10/0x10 [ 769.035761][T30468] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 769.035791][T30468] ? __lock_acquire+0x6b5/0x2cf0 [ 769.035833][T30468] netlink_rcv_skb+0x232/0x4b0 [ 769.035863][T30468] ? __pfx_genl_rcv_msg+0x10/0x10 [ 769.035888][T30468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 769.035935][T30468] ? down_read+0x272/0x2e0 [ 769.035956][T30468] ? genl_rcv+0xd/0x40 [ 769.035978][T30468] genl_rcv+0x28/0x40 [ 769.035995][T30468] netlink_unicast+0x80f/0x9b0 [ 769.036029][T30468] ? __pfx_netlink_unicast+0x10/0x10 [ 769.036056][T30468] ? netlink_sendmsg+0x650/0xb40 [ 769.036081][T30468] ? skb_put+0x11b/0x210 [ 769.036112][T30468] netlink_sendmsg+0x813/0xb40 [ 769.036149][T30468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.036180][T30468] ? aa_sock_msg_perm+0xf1/0x1b0 [ 769.036202][T30468] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 769.036229][T30468] ____sys_sendmsg+0x972/0x9f0 [ 769.036257][T30468] ? futex_unqueue+0x211/0x240 [ 769.036291][T30468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 769.036339][T30468] ? import_iovec+0x73/0xa0 [ 769.036369][T30468] ___sys_sendmsg+0x2a5/0x360 [ 769.036405][T30468] ? __pfx____sys_sendmsg+0x10/0x10 [ 769.036443][T30468] ? futex_wait+0x29a/0x380 [ 769.036503][T30468] ? __fget_files+0x2a/0x420 [ 769.036522][T30468] ? __fget_files+0x3a0/0x420 [ 769.036549][T30468] __x64_sys_sendmsg+0x1bd/0x2a0 [ 769.036580][T30468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 769.036620][T30468] ? rcu_is_watching+0x15/0xb0 [ 769.036663][T30468] do_syscall_64+0x14d/0xf80 [ 769.036683][T30468] ? trace_irq_disable+0x3b/0x150 [ 769.036701][T30468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.036722][T30468] ? clear_bhb_loop+0x40/0x90 [ 769.036748][T30468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.036768][T30468] RIP: 0033:0x7f846479c819 [ 769.036789][T30468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.036807][T30468] RSP: 002b:00007f846557e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.036829][T30468] RAX: ffffffffffffffda RBX: 00007f8464a15fa0 RCX: 00007f846479c819 [ 769.036844][T30468] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 769.036858][T30468] RBP: 00007f8464832c91 R08: 0000000000000000 R09: 0000000000000000 [ 769.036870][T30468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.036883][T30468] R13: 00007f8464a16038 R14: 00007f8464a15fa0 R15: 00007ffe620304f8 [ 769.036918][T30468] [ 769.298601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.810859][T30486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6256'. [ 769.863033][T30482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6256'. [ 769.924464][T30482] syzkaller0: entered promiscuous mode [ 769.948964][T30482] syzkaller0: entered allmulticast mode [ 770.042082][T30493] netlink: 'syz.4.6259': attribute type 3 has an invalid length. [ 770.052125][T30493] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6259'. [ 770.074123][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 770.085420][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 770.107556][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 770.122468][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 770.130485][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 770.297908][T30494] lo speed is unknown, defaulting to 1000 [ 770.338606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.410867][T30507] Cannot find add_set index 2 as target [ 770.639987][T30513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6261'. [ 770.640128][T18262] bond0: (slave syz_tun): Releasing backup interface [ 770.703791][T30513] nbd: couldn't find a device at index 65546 [ 771.045006][T30494] chnl_net:caif_netlink_parms(): no params data found [ 771.366787][T30546] ip6gretap0: entered promiscuous mode [ 771.378396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.402165][T30546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6268'. [ 771.459434][T30546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6268'. [ 771.592472][T30546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6268'. [ 771.615741][ T1095] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.649572][T30546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6268'. [ 771.676805][T30494] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.704479][T30494] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.729475][T30494] bridge_slave_0: entered allmulticast mode [ 771.747530][T30494] bridge_slave_0: entered promiscuous mode [ 771.788932][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.844505][T30494] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.857686][T30494] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.874234][T30494] bridge_slave_1: entered allmulticast mode [ 771.896091][T30494] bridge_slave_1: entered promiscuous mode [ 771.906487][ T58] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.930687][T30564] lo speed is unknown, defaulting to 1000 [ 771.940209][T30570] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.948052][T30570] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.103363][T30494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.136854][ T36] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.178576][ T5834] Bluetooth: hci2: command tx timeout [ 772.233753][T30494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.270024][ T1330] bridge_slave_1: left allmulticast mode [ 772.275728][ T1330] bridge_slave_1: left promiscuous mode [ 772.282215][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.418234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.364969][ T1330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.378462][ T1330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.389261][ T1330] bond0 (unregistering): Released all slaves [ 773.403101][ T1330] bond1 (unregistering): Released all slaves [ 773.425422][ T1330] bond2 (unregistering): Released all slaves [ 773.448392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.462069][ T1330] bond3 (unregistering): Released all slaves [ 773.483662][ T1330] bond4 (unregistering): Released all slaves [ 773.507388][ T1330] bond5 (unregistering): Released all slaves [ 773.536596][ T1330] bond6 (unregistering): Released all slaves [ 773.561967][ T1330] bond7 (unregistering): Released all slaves [ 773.620582][T30595] 8021q: VLANs not supported on caif0 [ 773.682547][T30494] team0: Port device team_slave_0 added [ 773.705634][T30494] team0: Port device team_slave_1 added [ 773.790242][ T1330] : left promiscuous mode [ 773.850308][T30494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.861012][T30494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.888448][T30494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.901106][ T1330] hmac(sha224: left promiscuous mode [ 773.923055][T30494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.933110][T30494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.962164][T30494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.000669][ T1330] tipc: Left network mode [ 774.056882][T30494] hsr_slave_0: entered promiscuous mode [ 774.067112][T30494] hsr_slave_1: entered promiscuous mode [ 774.087229][T30494] debugfs: 'hsr0' already exists in 'hsr' [ 774.107975][T30494] Cannot create hsr debugfs directory [ 774.249033][ T5834] Bluetooth: hci2: command tx timeout [ 774.345947][T30494] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.431726][T30494] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.494934][T30494] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.498306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.592055][ T1330] hsr_slave_0: left promiscuous mode [ 774.598902][ T1330] hsr_slave_1: left promiscuous mode [ 774.604852][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.613415][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.622682][ T1330] batman_adv: batadv0: Removing interface: dummy0 [ 774.887163][T30494] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.101603][T30575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.132920][T30494] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 775.192653][T30494] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 775.316988][T30494] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 775.380453][T30642] syzkaller1: entered promiscuous mode [ 775.386068][T30642] syzkaller1: entered allmulticast mode [ 775.446820][ T1330] IPVS: stop unused estimator thread 0... [ 775.457963][T30494] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 775.528384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.563819][T30646] 8021q: VLANs not supported on ip_vti0 [ 775.606200][T30630] syzkaller1: left promiscuous mode [ 775.623776][T30630] syzkaller1: left allmulticast mode [ 776.038075][T30494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.083554][T30494] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.100563][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.107778][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.148207][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.155423][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.318080][T30685] __nla_validate_parse: 30 callbacks suppressed [ 776.318099][T30685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6290'. [ 776.328822][ T5834] Bluetooth: hci2: command tx timeout [ 776.568650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.690423][T30703] netlink: 'syz.1.6293': attribute type 1 has an invalid length. [ 776.806545][T30709] macvlan2: entered promiscuous mode [ 776.846342][T30709] macvlan2: entered allmulticast mode [ 776.960967][T30494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.007846][T30494] veth0_vlan: entered promiscuous mode [ 777.039406][T30724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6296'. [ 777.080555][T30494] veth1_vlan: entered promiscuous mode [ 777.103726][T30722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6296'. [ 777.113542][T30722] netlink: 'syz.3.6296': attribute type 2 has an invalid length. [ 777.203999][T30494] veth0_macvtap: entered promiscuous mode [ 777.247591][T30494] veth1_macvtap: entered promiscuous mode [ 777.355544][T30494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.406544][T30494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.456204][T11438] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.476699][T11438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.507069][T11438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.536842][T11438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.609229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.656626][T30745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6302'. [ 777.681169][T11438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.694704][T11438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.746094][T30748] veth4: entered promiscuous mode [ 777.767447][T30747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6303'. [ 777.792364][T30745] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.6302'. [ 777.793657][T11438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.802699][T30745] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6302'. [ 777.859069][T11438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.033595][T30751] lo speed is unknown, defaulting to 1000 [ 778.116720][T30758] syzkaller0: entered promiscuous mode [ 778.126443][T30758] syzkaller0: entered allmulticast mode [ 778.250917][T30769] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6307'. [ 778.416078][ T5834] Bluetooth: hci2: command tx timeout [ 778.474152][T30777] dvmrp1: entered allmulticast mode [ 778.534846][T30781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6310'. [ 778.648781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.071023][T30807] netlink: 'syz.3.6320': attribute type 1 has an invalid length. [ 779.142048][T30810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6321'. [ 779.507819][T30823] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.515122][T30823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.522982][T30823] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.530383][T30823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.698393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.960824][T30843] syzkaller0: entered promiscuous mode [ 779.982961][T30843] syzkaller0: entered allmulticast mode [ 780.642517][T30888] netlink: 'syz.4.6342': attribute type 3 has an invalid length. [ 780.728256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.777015][T30893] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0001 with DS=0x67 [ 780.787205][T30898] syzkaller0: entered promiscuous mode [ 780.798473][T30898] syzkaller0: entered allmulticast mode [ 781.316662][T30924] netlink: 'syz.1.6350': attribute type 30 has an invalid length. [ 781.336684][T30924] netlink: 'syz.1.6350': attribute type 29 has an invalid length. [ 781.357755][T30924] __nla_validate_parse: 6 callbacks suppressed [ 781.357772][T30924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6350'. [ 781.402348][T30927] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6352'. [ 781.421620][T30931] netlink: 'syz.0.6353': attribute type 3 has an invalid length. [ 781.435346][T30924] erspan0: entered promiscuous mode [ 781.443009][T30931] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6353'. [ 781.494911][T30928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6351'. [ 781.504516][T30928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6351'. [ 781.514355][T30928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6351'. [ 781.526049][T30928] netlink: 'syz.3.6351': attribute type 5 has an invalid length. [ 781.637696][T30934] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 781.660819][T30934] bond1 (unregistering): Released all slaves [ 781.718628][T30940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6356'. [ 781.733622][T30940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6356'. [ 781.778405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.851294][T30950] sctp: [Deprecated]: syz.2.6358 (pid 30950) Use of int in max_burst socket option. [ 781.851294][T30950] Use struct sctp_assoc_value instead [ 781.914145][T30957] sctp: [Deprecated]: syz.2.6358 (pid 30957) Use of int in max_burst socket option. [ 781.914145][T30957] Use struct sctp_assoc_value instead [ 781.934713][T30953] syzkaller0: entered promiscuous mode [ 781.940910][T30953] syzkaller0: entered allmulticast mode [ 781.977831][T30958] netlink: 'syz.0.6360': attribute type 8 has an invalid length. [ 782.002818][T30954] lo speed is unknown, defaulting to 1000 [ 782.017861][T30950] netlink: 'syz.2.6358': attribute type 3 has an invalid length. [ 782.019988][T30958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6360'. [ 782.053744][T30958] bond0: entered promiscuous mode [ 782.059916][T30958] bond_slave_0: entered promiscuous mode [ 782.066907][T30958] bond_slave_1: entered promiscuous mode [ 782.077242][T30958] gretap0: entered promiscuous mode [ 782.109113][T30958] bond0: left promiscuous mode [ 782.114009][T30958] bond_slave_0: left promiscuous mode [ 782.139390][T30958] bond_slave_1: left promiscuous mode [ 782.151444][T30958] gretap0: left promiscuous mode [ 782.397228][T30977] netlink: 'syz.0.6367': attribute type 1 has an invalid length. [ 782.566973][T30977] bond1: (slave bridge1): making interface the new active one [ 782.576097][T30977] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 782.598068][T30993] ip6erspan0: entered allmulticast mode [ 782.644204][T30991] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 782.818255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.829577][T31005] syzkaller0: entered promiscuous mode [ 782.835197][T31005] syzkaller0: entered allmulticast mode [ 782.916370][T31010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6375'. [ 783.014708][T31013] netlink: 'syz.0.6376': attribute type 1 has an invalid length. [ 783.022792][T31013] netlink: 'syz.0.6376': attribute type 2 has an invalid length. [ 783.032554][T31013] netlink: 'syz.0.6376': attribute type 1 has an invalid length. [ 783.357483][T31034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 783.367411][T31034] team0: Port device bond1 added [ 783.848405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.997614][T31049] syzkaller0: entered promiscuous mode [ 784.003971][T31049] syzkaller0: entered allmulticast mode [ 784.705868][T31056] netlink: 'syz.1.6389': attribute type 33 has an invalid length. [ 784.715161][T31056] `: renamed from team0 (while UP) [ 784.888256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.436261][T30981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 785.706947][T31067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 785.763268][T31064] syzkaller1: entered promiscuous mode [ 785.781713][T31064] syzkaller1: entered allmulticast mode [ 785.831661][T11438] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.901584][T11438] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.928488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.931188][ T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.960182][ T58] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.239637][T31102] netlink: 'syz.3.6403': attribute type 13 has an invalid length. [ 786.258772][T31101] sctp: [Deprecated]: syz.4.6402 (pid 31101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 786.258772][T31101] Use struct sctp_sack_info instead [ 786.275818][T31105] sctp: [Deprecated]: syz.4.6402 (pid 31105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 786.275818][T31105] Use struct sctp_sack_info instead [ 786.365402][T31107] can: request_module (can-proto-5) failed. [ 786.395098][T31102] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.402415][T31102] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.500753][T31102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.515637][T31102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.665701][ T1340] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.683208][ T1340] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.704598][ T1340] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.724576][ T1340] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.865283][T31127] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 786.968978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.057150][T31144] netlink: 'syz.1.6415': attribute type 30 has an invalid length. [ 787.094588][T31144] bond1: option arp_missed_max: invalid value (0) [ 787.102323][T31144] bond1: option arp_missed_max: allowed values 1 - 255 [ 787.113647][T31144] bond1 (unregistering): Released all slaves [ 788.008464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.058297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.088418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.128337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.168559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.208335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.248476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.288916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.328793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.378290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.408465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.448434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.498503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.528374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.568474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.609477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.658458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.688299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.728459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.429692][ T7218] lec:lec_start_xmit: lec0:No lecd attached [ 807.768330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.734697][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 808.808479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.848283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.888500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.928315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.938885][T31186] netlink: 'syz.1.6423': attribute type 30 has an invalid length. [ 812.171085][T31202] bridge2: entered allmulticast mode [ 812.189145][T31205] __nla_validate_parse: 7 callbacks suppressed [ 812.189167][T31205] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6430'. [ 812.217605][T31205] netlink: 'syz.2.6430': attribute type 1 has an invalid length. [ 812.230971][T31208] tipc: Enabled bearer , priority 0 [ 812.248948][T31208] syzkaller0: entered promiscuous mode [ 812.256355][T31208] syzkaller0: entered allmulticast mode [ 812.341358][T31208] tipc: Resetting bearer [ 812.352517][T31206] tipc: Resetting bearer [ 812.467978][T31206] tipc: Disabling bearer [ 812.516946][T31232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6439'. [ 812.677187][T31246] netlink: 'syz.0.6442': attribute type 4 has an invalid length. [ 812.700668][T31246] netlink: 15538 bytes leftover after parsing attributes in process `syz.0.6442'. [ 812.821184][T31254] can: request_module (can-proto-0) failed. [ 812.839069][T31258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6447'. [ 812.968466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.976793][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5540 ms [ 812.984838][ C0] lec:lec_tx_timeout: lec0 [ 812.990100][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 813.226484][T31281] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6452'. [ 813.238907][T31281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6452'. [ 813.416226][T31288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6455'. [ 813.426899][T31288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6455'. [ 813.438732][T31288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 813.445968][T31288] IPv6: NLM_F_CREATE should be set when creating new route [ 813.512759][T31295] netlink: 548 bytes leftover after parsing attributes in process `syz.2.6454'. [ 813.735290][T31310] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 813.783967][T31310] bond4 (unregistering): Released all slaves [ 813.802950][T31319] netlink: 'syz.0.6461': attribute type 63 has an invalid length. [ 813.895915][T27958] bond2: left allmulticast mode [ 813.909445][T27958] bridge0: port 3(bond2) entered disabled state [ 813.941714][T27958] dvmrp1: left allmulticast mode [ 814.018229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.420453][T27958] bond1 (unregistering): (slave geneve2): Releasing active interface [ 814.614197][T27958] bond0 (unregistering): left promiscuous mode [ 814.620980][T27958] bond_slave_0: left promiscuous mode [ 814.626555][T27958] bond_slave_1: left promiscuous mode [ 814.634469][T27958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.661688][T27958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.674512][T27958] bond0 (unregistering): Released all slaves [ 814.696206][T27958] bond1 (unregistering): Released all slaves [ 814.722239][T27958] bond2 (unregistering): Released all slaves [ 814.747783][T27958] bond3 (unregistering): Released all slaves [ 814.771088][T27958] bond4 (unregistering): Released all slaves [ 814.794987][T27958] bond5 (unregistering): (slave veth7): Releasing active interface [ 814.811936][T27958] bond5 (unregistering): Released all slaves [ 814.827456][T27958] bond6 (unregistering): Released all slaves [ 814.841034][T27958] bond7 (unregistering): Released all slaves [ 814.874171][T27958] bond8 (unregistering): Released all slaves [ 814.897456][T27958] bond9 (unregistering): (slave veth9): Releasing active interface [ 814.909369][T27958] bond9 (unregistering): (slave veth11): Releasing active interface [ 814.925783][T27958] bond9 (unregistering): Released all slaves [ 814.944002][T27958] bond10 (unregistering): (slave veth15): Releasing active interface [ 814.955345][T27958] bond10 (unregistering): Released all slaves [ 814.991824][T31326] netlink: 'syz.1.6464': attribute type 66 has an invalid length. [ 815.043904][T31351] syzkaller0: entered promiscuous mode [ 815.058403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.068267][T31351] syzkaller0: entered allmulticast mode [ 815.143114][T31321] lo speed is unknown, defaulting to 1000 [ 815.168997][T27958] tipc: Left network mode [ 815.263999][T31374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6471'. [ 815.396943][T31371] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.462152][T31371] bridge_slave_0 (unregistering): left allmulticast mode [ 815.487816][T31371] bridge_slave_0 (unregistering): left promiscuous mode [ 815.495333][T31371] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.802753][T31391] ip6tnl1: entered promiscuous mode [ 815.822885][T31399] netlink: 'syz.3.6480': attribute type 3 has an invalid length. [ 815.834571][T31399] netlink: 'syz.3.6480': attribute type 3 has an invalid length. [ 815.865157][T31395] bridge_slave_1: left allmulticast mode [ 815.872942][T31395] bridge_slave_1: left promiscuous mode [ 815.889542][T31395] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.094742][T31409] xt_hashlimit: size too large, truncated to 1048576 [ 816.098300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.345493][T27958] batadv0: left promiscuous mode [ 816.439172][T31429] netlink: 'syz.0.6490': attribute type 3 has an invalid length. [ 816.472684][T27958] hsr_slave_0: left promiscuous mode [ 816.491359][T27958] hsr_slave_1: left promiscuous mode [ 816.497568][T27958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.542766][T27958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.063485][T27958] pim6reg99999991 (unregistering): left allmulticast mode [ 817.128738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.220699][T27958] team0 (unregistering): Port device team_slave_1 removed [ 817.237069][T27958] team0 (unregistering): Port device team_slave_0 removed [ 817.354603][T31430] __nla_validate_parse: 7 callbacks suppressed [ 817.354624][T31430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6487'. [ 817.433185][ T1330] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.458058][T31458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6496'. [ 817.475432][ T1330] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.502606][T31241] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.574175][T31241] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.661294][T31469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6500'. [ 818.008547][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 818.016624][ C0] lec:lec_tx_timeout: lec0 [ 818.035173][T31465] bridge3: entered promiscuous mode [ 818.074159][T31484] 8021q: VLANs not supported on xfrm0 [ 818.086213][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6505'. [ 818.118894][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6505'. [ 818.139041][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6505'. [ 818.158545][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6505'. [ 818.168318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.183388][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6505'. [ 818.203729][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6505'. [ 818.239394][T31483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6505'. [ 818.386020][T27958] IPVS: stop unused estimator thread 0... [ 818.592519][T31500] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 818.723661][T31511] openvswitch: netlink: Flow key attr not present in new flow. [ 818.785676][T31514] delete_channel: no stack [ 818.795624][T31514] netlink: 'syz.3.6513': attribute type 1 has an invalid length. [ 819.208389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.379886][T31537] syzkaller0: entered promiscuous mode [ 819.409080][T31537] syzkaller0: entered allmulticast mode [ 819.600361][T31543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 819.774144][T31555] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 819.882387][T31562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 819.889715][T31562] IPv6: NLM_F_CREATE should be set when creating new route [ 819.933809][T31562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 819.941117][T31562] IPv6: NLM_F_CREATE should be set when creating new route [ 820.248534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.353395][ T30] audit: type=1800 audit(1775990982.658:39): pid=31588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6529" name="memory.events" dev="tmpfs" ino=217 res=0 errno=0 [ 820.640635][T31606] bridge2: entered promiscuous mode [ 820.646060][T31606] bridge2: entered allmulticast mode [ 821.288432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.328249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.959842][T31566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 823.156568][T31623] __nla_validate_parse: 18 callbacks suppressed [ 823.156586][T31623] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6538'. [ 823.166294][T31622] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6537'. [ 823.181316][T31623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6538'. [ 823.192270][T31617] xt_connbytes: Forcing CT accounting to be enabled [ 823.327801][T31633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6540'. [ 823.354846][T31626] syzkaller0: entered promiscuous mode [ 823.373837][T31626] syzkaller0: entered allmulticast mode [ 823.378406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.476487][T31640] x_tables: duplicate underflow at hook 1 [ 823.551816][T31647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.902859][T31667] tipc: Started in network mode [ 823.907909][T31667] tipc: Node identity ac14140f, cluster identity 4711 [ 823.928052][T31667] tipc: New replicast peer: 255.255.255.255 [ 823.948093][T31667] tipc: Enabled bearer , priority 6 [ 824.031971][T31680] IPVS: Unknown mcast interface: team0 [ 824.074163][T31680] netlink: 'syz.1.6550': attribute type 21 has an invalid length. [ 824.180591][T31689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6550'. [ 824.190877][T31680] netlink: 'syz.1.6550': attribute type 22 has an invalid length. [ 824.200859][T31680] netlink: 'syz.1.6550': attribute type 23 has an invalid length. [ 824.210146][T31680] netlink: 'syz.1.6550': attribute type 25 has an invalid length. [ 824.219146][T31680] netlink: 'syz.1.6550': attribute type 26 has an invalid length. [ 824.227138][T31680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6550'. [ 824.319653][T31695] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6553'. [ 824.408623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.484943][T31700] syzkaller0: entered promiscuous mode [ 824.490703][T31700] syzkaller0: entered allmulticast mode [ 824.831151][T31705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.845773][T31705] ipip0: entered promiscuous mode [ 824.851440][T31705] ipip0: entered allmulticast mode [ 824.948685][ T5889] tipc: Node number set to 2886997007 [ 825.448406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.488641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.927253][T31669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 827.056621][T31716] netlink: 'syz.4.6561': attribute type 8 has an invalid length. [ 827.085466][T31716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6561'. [ 827.116891][T31720] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6562'. [ 827.171890][ T5834] block nbd3: Receive control failed (result -1) [ 827.199507][T31716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6561'. [ 827.431422][T31740] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 827.528404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.126007][T31768] bridge_slave_1: left allmulticast mode [ 828.132349][T31768] bridge_slave_1: left promiscuous mode [ 828.138215][T31768] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.212979][T31773] __nla_validate_parse: 2 callbacks suppressed [ 828.212998][T31773] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6572'. [ 828.233546][T31762] syzkaller1: entered promiscuous mode [ 828.240926][T31773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6572'. [ 828.258906][T31762] syzkaller1: entered allmulticast mode [ 828.274661][T31775] syzkaller0: entered promiscuous mode [ 828.285932][T31775] syzkaller0: entered allmulticast mode [ 828.296680][T31779] netlink: 'syz.4.6570': attribute type 1 has an invalid length. [ 828.445178][T31787] gretap1: entered allmulticast mode [ 828.454729][T31787] bond4: (slave gretap1): making interface the new active one [ 828.464124][T31787] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 828.514441][T31788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6575'. [ 828.539652][T31791] team0: Device ipvlan2 failed to register rx_handler [ 828.562687][T31779] lo speed is unknown, defaulting to 1000 [ 828.568756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.615839][T31801] syzkaller1: entered promiscuous mode [ 828.633606][T31801] syzkaller1: entered allmulticast mode [ 828.803095][T31811] netlink: 'syz.0.6580': attribute type 3 has an invalid length. [ 828.817070][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6580'. [ 828.853131][T31813] C: renamed from team_slave_0 (while UP) [ 828.867315][T31813] netlink: 'syz.2.6579': attribute type 2 has an invalid length. [ 828.875838][T31813] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6579'. [ 828.885200][T31813] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 828.934131][T31813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6579'. [ 829.055411][T31824] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6583'. [ 829.299224][T31831] bond1: entered promiscuous mode [ 829.305509][T31831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 829.330001][T31840] netlink: 'syz.0.6587': attribute type 29 has an invalid length. [ 829.365823][T31840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6587'. [ 829.399480][T31846] veth1_macvtap: left promiscuous mode [ 829.405002][T31846] macsec0: entered allmulticast mode [ 829.489007][T31855] netlink: 'syz.3.6591': attribute type 1 has an invalid length. [ 829.552184][T31862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6594'. [ 829.571272][T31855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 829.608377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.631132][T31871] bond2: (slave geneve2): making interface the new active one [ 829.638697][T31858] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6592'. [ 829.651198][T31871] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 829.717375][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 829.753003][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 829.818850][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 829.960568][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 830.343315][T31904] openvswitch: netlink: Multiple metadata blocks provided [ 830.630164][T31919] lo: entered promiscuous mode [ 830.635257][T31919] lo: entered allmulticast mode [ 830.648128][T31919] tunl0: entered promiscuous mode [ 830.658231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.667454][T31919] tunl0: entered allmulticast mode [ 830.680328][T31919] gre0: entered promiscuous mode [ 830.699412][T31919] gre0: entered allmulticast mode [ 830.720645][T31919] gretap0: entered promiscuous mode [ 830.727168][T31919] gretap0: entered allmulticast mode [ 830.739198][T31919] erspan0: entered promiscuous mode [ 830.744514][T31919] erspan0: entered allmulticast mode [ 830.756667][T31919] ip_vti0: entered promiscuous mode [ 830.762233][T31919] ip_vti0: entered allmulticast mode [ 830.774049][T31919] ip6_vti0: entered promiscuous mode [ 830.774066][T31929] netlink: 'syz.3.6603': attribute type 1 has an invalid length. [ 830.779608][T31919] ip6_vti0: entered allmulticast mode [ 831.083451][T31945] lo speed is unknown, defaulting to 1000 [ 831.688396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.841300][T31982] syzkaller0: entered promiscuous mode [ 831.846930][T31982] syzkaller0: entered allmulticast mode [ 832.467129][T32018] vlan2: entered promiscuous mode [ 832.538767][T32018] veth1_to_bridge: entered promiscuous mode [ 832.646351][T32021] bridge0: port 3(syz_tun) entered blocking state [ 832.680548][T32021] bridge0: port 3(syz_tun) entered disabled state [ 832.698873][T32021] syz_tun: entered allmulticast mode [ 832.709816][T32021] syz_tun: entered promiscuous mode [ 832.715754][T32021] bridge0: port 3(syz_tun) entered blocking state [ 832.722957][T32021] bridge0: port 3(syz_tun) entered forwarding state [ 832.738276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.876558][T32035] netlink: 'syz.2.6632': attribute type 12 has an invalid length. [ 832.903218][T32036] veth1_macvtap: default FDB implementation only supports local addresses [ 833.277370][T32062] __nla_validate_parse: 14 callbacks suppressed [ 833.277393][T32062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6637'. [ 833.349837][T32068] netlink: 'syz.1.6637': attribute type 1 has an invalid length. [ 833.364515][T32068] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6637'. [ 833.768380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.814724][T32094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6646'. [ 833.841584][T32098] tipc: Started in network mode [ 833.856845][T32098] tipc: Node identity ac14140f, cluster identity 4711 [ 833.876287][T32098] tipc: New replicast peer: 255.255.255.255 [ 833.896313][T32098] tipc: Enabled bearer , priority 6 [ 834.056924][T32108] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6650'. [ 834.075330][T32106] netlink: 3992 bytes leftover after parsing attributes in process `syz.4.6649'. [ 834.086840][T32110] SET target dimension over the limit! [ 834.283757][T32125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6656'. [ 834.301530][T32125] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6656'. [ 834.319185][T32125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6656'. [ 834.491740][T32135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6660'. [ 834.536691][T32140] lo speed is unknown, defaulting to 1000 [ 834.598456][T32143] sctp: [Deprecated]: syz.2.6661 (pid 32143) Use of int in maxseg socket option. [ 834.598456][T32143] Use struct sctp_assoc_value instead [ 834.630797][T32144] netlink: 'syz.3.6662': attribute type 1 has an invalid length. [ 834.680477][T32144] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6662'. [ 834.808228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.057818][T17038] tipc: Node number set to 2886997007 [ 835.314862][T32173] IPv6: NLM_F_REPLACE set, but no existing node found! [ 835.410206][T32176] netlink: 'syz.4.6671': attribute type 5 has an invalid length. [ 835.565445][T32188] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 835.632737][T32192] xt_hashlimit: size too large, truncated to 1048576 [ 835.727950][ T5889] IPVS: starting estimator thread 0... [ 835.818325][T32200] IPVS: using max 27 ests per chain, 64800 per kthread [ 835.848371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.994333][T32212] netlink: 'syz.0.6679': attribute type 11 has an invalid length. [ 836.173429][T32220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.237339][T32226] [ 836.239713][T32226] ====================================================== [ 836.246749][T32226] WARNING: possible circular locking dependency detected [ 836.253965][T32226] syzkaller #0 Not tainted [ 836.258387][T32226] ------------------------------------------------------ [ 836.265406][T32226] syz.4.6684/32226 is trying to acquire lock: [ 836.271467][T32226] ffff88806acd4f18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 836.280441][T32226] [ 836.280441][T32226] but task is already holding lock: [ 836.287811][T32226] ffff88802a0cf800 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 836.297295][T32226] [ 836.297295][T32226] which lock already depends on the new lock. [ 836.297295][T32226] [ 836.307731][T32226] [ 836.307731][T32226] the existing dependency chain (in reverse order) is: [ 836.316740][T32226] [ 836.316740][T32226] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 836.324651][T32226] __mutex_lock+0x19f/0x1300 [ 836.329766][T32226] elevator_change+0x1b3/0x450 [ 836.335135][T32226] elevator_set_none+0xb5/0x140 [ 836.340499][T32226] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 836.346822][T32226] nbd_start_device+0x17f/0xb10 [ 836.352185][T32226] nbd_genl_connect+0x165b/0x1cf0 [ 836.357724][T32226] genl_family_rcv_msg_doit+0x22a/0x330 [ 836.363814][T32226] genl_rcv_msg+0x61c/0x7a0 [ 836.368933][T32226] netlink_rcv_skb+0x232/0x4b0 [ 836.374212][T32226] genl_rcv+0x28/0x40 [ 836.378704][T32226] netlink_unicast+0x80f/0x9b0 [ 836.383979][T32226] netlink_sendmsg+0x813/0xb40 [ 836.389265][T32226] ____sys_sendmsg+0x972/0x9f0 [ 836.394547][T32226] ___sys_sendmsg+0x2a5/0x360 [ 836.399785][T32226] __x64_sys_sendmsg+0x1bd/0x2a0 [ 836.405328][T32226] do_syscall_64+0x14d/0xf80 [ 836.410437][T32226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.416841][T32226] [ 836.416841][T32226] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 836.425440][T32226] blk_alloc_queue+0x546/0x680 [ 836.430724][T32226] __blk_mq_alloc_disk+0x197/0x390 [ 836.436360][T32226] nbd_dev_add+0x499/0xb50 [ 836.441295][T32226] nbd_init+0x168/0x1f0 [ 836.445975][T32226] do_one_initcall+0x250/0x8d0 [ 836.451271][T32226] do_initcall_level+0x104/0x190 [ 836.456730][T32226] do_initcalls+0x59/0xa0 [ 836.461577][T32226] kernel_init_freeable+0x2a6/0x3e0 [ 836.467321][T32226] kernel_init+0x1d/0x1d0 [ 836.472165][T32226] ret_from_fork+0x51e/0xb90 [ 836.477291][T32226] ret_from_fork_asm+0x1a/0x30 [ 836.482575][T32226] [ 836.482575][T32226] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 836.489793][T32226] fs_reclaim_acquire+0x71/0x100 [ 836.495260][T32226] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 836.501576][T32226] __alloc_skb+0x1d0/0x7d0 [ 836.506597][T32226] __ip6_append_data+0x2d6d/0x3f70 [ 836.512225][T32226] ip6_append_data+0x10f/0x280 [ 836.517929][T32226] rawv6_sendmsg+0x12d3/0x18e0 [ 836.523262][T32226] ____sys_sendmsg+0x80a/0x9f0 [ 836.528589][T32226] ___sys_sendmsg+0x2a5/0x360 [ 836.533803][T32226] __x64_sys_sendmsg+0x1bd/0x2a0 [ 836.539277][T32226] do_syscall_64+0x14d/0xf80 [ 836.544385][T32226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.550792][T32226] [ 836.550792][T32226] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 836.558523][T32226] lock_sock_nested+0x41/0x100 [ 836.563852][T32226] inet_shutdown+0x6a/0x390 [ 836.568981][T32226] nbd_mark_nsock_dead+0x2e9/0x560 [ 836.574618][T32226] recv_work+0x1c7f/0x1d90 [ 836.579549][T32226] process_scheduled_works+0xb6e/0x18c0 [ 836.585612][T32226] worker_thread+0xa53/0xfc0 [ 836.590713][T32226] kthread+0x388/0x470 [ 836.595294][T32226] ret_from_fork+0x51e/0xb90 [ 836.600426][T32226] ret_from_fork_asm+0x1a/0x30 [ 836.605720][T32226] [ 836.605720][T32226] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 836.613369][T32226] __mutex_lock+0x19f/0x1300 [ 836.618555][T32226] nbd_queue_rq+0x37b/0x1100 [ 836.623667][T32226] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 836.629738][T32226] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 836.636585][T32226] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 836.643079][T32226] blk_mq_run_hw_queue+0x348/0x4f0 [ 836.648797][T32226] blk_mq_dispatch_list+0xd16/0xe10 [ 836.654525][T32226] blk_mq_flush_plug_list+0x48d/0x570 [ 836.660412][T32226] __blk_flush_plug+0x3ed/0x4d0 [ 836.665779][T32226] __submit_bio+0x28d/0x580 [ 836.670833][T32226] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 836.677067][T32226] block_read_full_folio+0x599/0x830 [ 836.682998][T32226] filemap_read_folio+0x137/0x3b0 [ 836.688552][T32226] do_read_cache_folio+0x358/0x590 [ 836.694360][T32226] read_part_sector+0xb6/0x2b0 [ 836.699725][T32226] adfspart_check_ICS+0xa5/0xa40 [ 836.705182][T32226] bdev_disk_changed+0x7ba/0x1550 [ 836.710734][T32226] blkdev_get_whole+0x380/0x510 [ 836.716160][T32226] bdev_open+0x31e/0xd30 [ 836.720915][T32226] blkdev_open+0x470/0x610 [ 836.725848][T32226] do_dentry_open+0x785/0x14e0 [ 836.731139][T32226] vfs_open+0x3b/0x340 [ 836.735732][T32226] path_openat+0x2e08/0x3860 [ 836.740834][T32226] do_file_open+0x23e/0x4a0 [ 836.745859][T32226] do_sys_openat2+0x113/0x200 [ 836.751054][T32226] __x64_sys_openat+0x138/0x170 [ 836.756421][T32226] do_syscall_64+0x14d/0xf80 [ 836.761608][T32226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.768101][T32226] [ 836.768101][T32226] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 836.775314][T32226] __mutex_lock+0x19f/0x1300 [ 836.780418][T32226] nbd_queue_rq+0xc6/0x1100 [ 836.785433][T32226] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 836.791668][T32226] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 836.798509][T32226] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 836.805188][T32226] blk_mq_run_hw_queue+0x348/0x4f0 [ 836.810815][T32226] blk_mq_dispatch_list+0xd16/0xe10 [ 836.816616][T32226] blk_mq_flush_plug_list+0x48d/0x570 [ 836.822500][T32226] __blk_flush_plug+0x3ed/0x4d0 [ 836.827864][T32226] __submit_bio+0x28d/0x580 [ 836.832968][T32226] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 836.839118][T32226] block_read_full_folio+0x599/0x830 [ 836.844947][T32226] filemap_read_folio+0x137/0x3b0 [ 836.850483][T32226] do_read_cache_folio+0x358/0x590 [ 836.856107][T32226] read_part_sector+0xb6/0x2b0 [ 836.861397][T32226] adfspart_check_ICS+0xa5/0xa40 [ 836.866845][T32226] bdev_disk_changed+0x7ba/0x1550 [ 836.872378][T32226] blkdev_get_whole+0x380/0x510 [ 836.877765][T32226] bdev_open+0x31e/0xd30 [ 836.882517][T32226] blkdev_open+0x470/0x610 [ 836.887448][T32226] do_dentry_open+0x785/0x14e0 [ 836.892724][T32226] vfs_open+0x3b/0x340 [ 836.897307][T32226] path_openat+0x2e08/0x3860 [ 836.902406][T32226] do_file_open+0x23e/0x4a0 [ 836.907417][T32226] do_sys_openat2+0x113/0x200 [ 836.912954][T32226] __x64_sys_openat+0x138/0x170 [ 836.918326][T32226] do_syscall_64+0x14d/0xf80 [ 836.923440][T32226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.929849][T32226] [ 836.929849][T32226] -> #0 (set->srcu){.+.+}-{0:0}: [ 836.936963][T32226] __lock_acquire+0x15a5/0x2cf0 [ 836.942334][T32226] lock_sync+0x9d/0x120 [ 836.947092][T32226] __synchronize_srcu+0xca/0x300 [ 836.952543][T32226] elevator_switch+0x1e8/0x7a0 [ 836.957823][T32226] elevator_change+0x2cc/0x450 [ 836.963108][T32226] elevator_set_default+0x36c/0x430 [ 836.968914][T32226] blk_register_queue+0x366/0x430 [ 836.974466][T32226] __add_disk+0x677/0xd50 [ 836.979313][T32226] add_disk_fwnode+0xfb/0x480 [ 836.984505][T32226] nbd_dev_add+0x72c/0xb50 [ 836.989428][T32226] nbd_genl_connect+0x962/0x1cf0 [ 836.994876][T32226] genl_family_rcv_msg_doit+0x22a/0x330 [ 837.000937][T32226] genl_rcv_msg+0x61c/0x7a0 [ 837.005964][T32226] netlink_rcv_skb+0x232/0x4b0 [ 837.011246][T32226] genl_rcv+0x28/0x40 [ 837.015740][T32226] netlink_unicast+0x80f/0x9b0 [ 837.021014][T32226] netlink_sendmsg+0x813/0xb40 [ 837.026291][T32226] ____sys_sendmsg+0x972/0x9f0 [ 837.031925][T32226] ___sys_sendmsg+0x2a5/0x360 [ 837.037296][T32226] __x64_sys_sendmsg+0x1bd/0x2a0 [ 837.042836][T32226] do_syscall_64+0x14d/0xf80 [ 837.048384][T32226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.054832][T32226] [ 837.054832][T32226] other info that might help us debug this: [ 837.054832][T32226] [ 837.065095][T32226] Chain exists of: [ 837.065095][T32226] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 837.065095][T32226] [ 837.078756][T32226] Possible unsafe locking scenario: [ 837.078756][T32226] [ 837.086202][T32226] CPU0 CPU1 [ 837.091561][T32226] ---- ---- [ 837.096914][T32226] lock(&q->elevator_lock); [ 837.101513][T32226] lock(&q->q_usage_counter(io)#49); [ 837.109419][T32226] lock(&q->elevator_lock); [ 837.116564][T32226] sync(set->srcu); [ 837.120454][T32226] [ 837.120454][T32226] *** DEADLOCK *** [ 837.120454][T32226] [ 837.128590][T32226] 6 locks held by syz.4.6684/32226: [ 837.133783][T32226] #0: ffffffff8fc3a090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 837.141978][T32226] #1: ffffffff8fc39ec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 837.151049][T32226] #2: ffff8880517689d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 837.161412][T32226] #3: ffff88802a0cf890 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x115/0x430 [ 837.171446][T32226] #4: ffff88802a0cf2f8 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 837.182342][T32226] #5: ffff88802a0cf800 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 837.192175][T32226] [ 837.192175][T32226] stack backtrace: [ 837.198055][T32226] CPU: 0 UID: 0 PID: 32226 Comm: syz.4.6684 Not tainted syzkaller #0 PREEMPT(full) [ 837.198074][T32226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 837.198085][T32226] Call Trace: [ 837.198094][T32226] [ 837.198103][T32226] dump_stack_lvl+0xe8/0x150 [ 837.198127][T32226] print_circular_bug+0x2e1/0x300 [ 837.198153][T32226] check_noncircular+0x12e/0x150 [ 837.198180][T32226] __lock_acquire+0x15a5/0x2cf0 [ 837.198206][T32226] ? check_path+0x21/0x40 [ 837.198236][T32226] ? lockdep_unlock+0x5d/0xd0 [ 837.198258][T32226] ? __lock_acquire+0x146e/0x2cf0 [ 837.198286][T32226] ? __synchronize_srcu+0xb6/0x300 [ 837.198310][T32226] lock_sync+0x9d/0x120 [ 837.198334][T32226] ? __synchronize_srcu+0xb6/0x300 [ 837.198361][T32226] __synchronize_srcu+0xca/0x300 [ 837.198386][T32226] ? do_raw_spin_lock+0x12b/0x2f0 [ 837.198407][T32226] ? __pfx___synchronize_srcu+0x10/0x10 [ 837.198436][T32226] ? read_tsc+0x9/0x20 [ 837.198458][T32226] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 837.198480][T32226] ? synchronize_srcu+0x20d/0x270 [ 837.198506][T32226] elevator_switch+0x1e8/0x7a0 [ 837.198531][T32226] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 837.198561][T32226] elevator_change+0x2cc/0x450 [ 837.198587][T32226] ? do_raw_spin_unlock+0xf5/0x210 [ 837.198610][T32226] elevator_set_default+0x36c/0x430 [ 837.198637][T32226] ? __pfx_elevator_set_default+0x10/0x10 [ 837.198667][T32226] ? disk_register_independent_access_ranges+0x2db/0x380 [ 837.198692][T32226] ? blk_crypto_sysfs_register+0x11c/0x170 [ 837.198716][T32226] blk_register_queue+0x366/0x430 [ 837.198749][T32226] __add_disk+0x677/0xd50 [ 837.198777][T32226] ? down_read+0x272/0x2e0 [ 837.198795][T32226] add_disk_fwnode+0xfb/0x480 [ 837.198820][T32226] nbd_dev_add+0x72c/0xb50 [ 837.198840][T32226] ? __pfx_nbd_dev_add+0x10/0x10 [ 837.198865][T32226] ? bpf_lsm_capable+0x9/0x20 [ 837.198886][T32226] ? security_capable+0x7e/0x2c0 [ 837.198908][T32226] ? radix_tree_lookup+0x25c/0x290 [ 837.198930][T32226] nbd_genl_connect+0x962/0x1cf0 [ 837.198947][T32226] ? __pfx___nla_validate_parse+0x10/0x10 [ 837.198969][T32226] ? __pfx_nbd_genl_connect+0x10/0x10 [ 837.198995][T32226] ? rcu_is_watching+0x15/0xb0 [ 837.199016][T32226] ? trace_kmalloc+0x2a/0x110 [ 837.199034][T32226] ? __nla_parse+0x40/0x60 [ 837.199052][T32226] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 837.199069][T32226] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 837.199087][T32226] genl_family_rcv_msg_doit+0x22a/0x330 [ 837.199105][T32226] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 837.199126][T32226] ? __lock_acquire+0x6b5/0x2cf0 [ 837.199147][T32226] genl_rcv_msg+0x61c/0x7a0 [ 837.199164][T32226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 837.199178][T32226] ? __pfx_nbd_genl_connect+0x10/0x10 [ 837.199196][T32226] ? __lock_acquire+0x6b5/0x2cf0 [ 837.199218][T32226] netlink_rcv_skb+0x232/0x4b0 [ 837.199239][T32226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 837.199254][T32226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 837.199280][T32226] ? down_read+0x272/0x2e0 [ 837.199295][T32226] ? genl_rcv+0xd/0x40 [ 837.199309][T32226] genl_rcv+0x28/0x40 [ 837.199321][T32226] netlink_unicast+0x80f/0x9b0 [ 837.199342][T32226] ? __pfx_netlink_unicast+0x10/0x10 [ 837.199360][T32226] ? netlink_sendmsg+0x650/0xb40 [ 837.199379][T32226] ? skb_put+0x11b/0x210 [ 837.199400][T32226] netlink_sendmsg+0x813/0xb40 [ 837.199423][T32226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.199444][T32226] ? aa_sock_msg_perm+0xf1/0x1b0 [ 837.199459][T32226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 837.199478][T32226] ____sys_sendmsg+0x972/0x9f0 [ 837.199504][T32226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.199528][T32226] ? import_iovec+0x73/0xa0 [ 837.199548][T32226] ___sys_sendmsg+0x2a5/0x360 [ 837.199571][T32226] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.199595][T32226] ? futex_wake+0x4ac/0x580 [ 837.199626][T32226] ? __fget_files+0x2a/0x420 [ 837.199639][T32226] ? __fget_files+0x3a0/0x420 [ 837.199656][T32226] __x64_sys_sendmsg+0x1bd/0x2a0 [ 837.199679][T32226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 837.199704][T32226] ? rcu_is_watching+0x15/0xb0 [ 837.199729][T32226] do_syscall_64+0x14d/0xf80 [ 837.199744][T32226] ? trace_irq_disable+0x3b/0x150 [ 837.199757][T32226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.199773][T32226] ? clear_bhb_loop+0x40/0x90 [ 837.199790][T32226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.199805][T32226] RIP: 0033:0x7fd17f59c819 [ 837.199821][T32226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.199836][T32226] RSP: 002b:00007fd180470028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.199853][T32226] RAX: ffffffffffffffda RBX: 00007fd17f815fa0 RCX: 00007fd17f59c819 [ 837.199866][T32226] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 837.199876][T32226] RBP: 00007fd17f632c91 R08: 0000000000000000 R09: 0000000000000000 [ 837.199886][T32226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.199896][T32226] R13: 00007fd17f816038 R14: 00007fd17f815fa0 R15: 00007ffdad6c29d8 [ 837.199914][T32226] [ 837.692643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.757906][T32226] nbd: socks must be embedded in a SOCK_ITEM attr [ 837.781745][T31244] block nbd64: NBD_DISCONNECT [ 837.927846][T31192] udevd[31192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 838.738864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.768675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.808453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.528301][ T5834] Bluetooth: hci0: command 0x0405 tx timeout [ 841.848969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.888445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.928979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.968455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.018718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog