last executing test programs: 2.977620382s ago: executing program 2 (id=2207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}]}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x4, 0x2, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x805) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="140012002a00438fcbd8744c85d9222d0c194b00140012000a0087ce652a6b112ac418de8a5596e20c00090018001d04", @ANYRES32=r3, @ANYBLOB="840013000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000f000000080000000000000000000000000000000000000001000000000000000f00000007000000000000000000000f050000090000"], 0x1f8}}, 0x20040000) 2.53149109s ago: executing program 2 (id=2211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4014) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 2.291643743s ago: executing program 0 (id=2214): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002e0001000000004b8dc6cb5678ffa3c8da00000000000400198004001280"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x148, 0xb, 0x148, 0x148, 0x148, 0x220, 0x240, 0x240, 0x220, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x148, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x1, 0x0, 0x1, 0x1, 0x1], 0x6, 0x4}, {0x3, [0x4, 0x2, 0x6, 0x4, 0x2, 0x7], 0x2, 0x7}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmmsg$inet(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0xd}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.290722765s ago: executing program 2 (id=2215): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="07a6000000"], 0x158}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f00000007c0)="30e3", 0x2}], 0x1, 0x0, 0x0, 0x10}, 0x20040040) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x84, 0x0, &(0x7f0000001080)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3753}}, 0x6, 0x1, 0x80000001, 0x2, 0x4, 0x9, 0x80}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000130001022cbd70000000000007000000", @ANYRES32=r4, @ANYBLOB="0084000000000080"], 0x2c}}, 0x0) 2.17727264s ago: executing program 3 (id=2216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) 2.065481851s ago: executing program 4 (id=2217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b80)={0x320, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x147}, @nested={0x308, 0x1, 0x0, 0x1, [@nested={0x304, 0xd, 0x0, 0x1, [@typed={0x6, 0x5a, 0x0, 0x0, @str='\xeb\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}, @nested={0x2e1, 0xa6, 0x0, 0x1, [@nested={0x4, 0x83}, @nested={0x4, 0x3e}, @typed={0x8, 0xf, 0x0, 0x0, @pid}, @generic="c32bf4a76b6d80d958b215d5722da11c3329fb931578bb94bdac6efb3a00428c5b7404768247da10169e3fe65c76e1b51778a24bed80b227bf25b1161d57219ff2c4f158c59eda45c55c14cc646f0bafd0872aed47c21e0619da153ca82efda184309747037183322bb0ed24ed78cbfd93f34b3e6462177ebdfef8ef35ad495044ba2ec56d1abf6df83a157c705c7b0791d7897d2e89f3f759", @nested={0x234, 0xf5, 0x0, 0x1, [@nested={0x10, 0x51, 0x0, 0x1, [@nested={0x8, 0xb8, 0x0, 0x1, [@nested={0x4, 0xef}]}, @nested={0x4, 0xcd}]}, @nested={0x21f, 0x93, 0x0, 0x1, [@generic="c3f5c72cd0fa27fd1c6812ef8e1befc6dd66baf5ffb4010bfed22627401146e7362051466d419863ff93", @generic="7925f7688169ace0cfecc23d527792f6b6a7dfe6814c3ee36fcdb8fe9325ff82d35e2dce7f5147adf53307102b43dd61927df8018decd7cd814e7fe1e20c26be1a6955e1db3230ae1febf44420e698437ea4f25385ab85b2332bc76b3e869874ecb86162ced3d690c075cd44e816e360194eadc984cbdd5e66b0b9c1b7b9db2f73469ece210d75d94e1acf6148c065b424146eccba9b59d95846d0d3799317d807e5ee8f218b482c1a480d4ed62d5e45941e335b9d", @nested={0x13c, 0x142, 0x0, 0x1, [@generic="352c67d5fc6fd9d898304b8fe2df42dd8add262d407a3b1e1ee8e1e806524e78c2557cf46a858819aaa7764e598cca6810d40c23597951909e8ad7054b916a31d649da23375477de43bf7dd115ea89729088681f0de11c79f4045d945728135678d570382ed4370e0bf9a99d567c05d20b0bfb2fc53c2e4f216c0af47c0e", @nested={0x4, 0x2a}, @generic="c7cf100e376fb37d2f0d5a2f57e36a36d627c64421fe11e61a0b012c0fa5905bd7b65b9439a2969a8e5ee440e3f43c38a813a5859d4b22fddfd850b4bc30152976fa710e8ab96100ecee9042eaa9d6983009c3103f263c67b3063bafadfaac3fbb9558bb194d32cfef71c926772ccf28740d1e53581e16fed2dd1ba34f7f6785298a94215ee89cc2c228cd0bbe451348090f36dde427c3fe307a", @typed={0x8, 0x102, 0x0, 0x0, @fd}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback}]}]}]}]}]}]}]}, 0x320}}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x69}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x402c010) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x4, 0x0, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000180)={r8, @in6={{0xa, 0x4e20, 0x14f01e40, @empty, 0x16}}, [0x4, 0x7, 0x6d18, 0x6, 0x8, 0xffffffffffff5611, 0x1, 0x9, 0x5, 0xe, 0xf, 0x4, 0x2, 0xa, 0x84cf]}, &(0x7f0000000280)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000180)={r8, @in6={{0xa, 0x4e20, 0x14f01e40, @empty, 0x16}}, [0x4, 0x7, 0x6d18, 0x6, 0x8, 0xffffffffffff5611, 0x1, 0x9, 0x5, 0xe, 0xf, 0x4, 0x2, 0xa, 0x84cf]}, &(0x7f0000000280)=0x100) 1.963029806s ago: executing program 3 (id=2219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x47a}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'netdevsim'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, 'netdevsim\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x880) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x5) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async, rerun: 64) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r8) (rerun: 64) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r6, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80000002}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) 1.946261682s ago: executing program 0 (id=2220): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@call={0x85, 0x0, 0x0, 0x43}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0xfffffffffffffc8d}, 0x4c) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000040)={@multicast1, @rand_addr=0x64010101, 0x0, "2288f0aa6457c09f1416e4d02138835a4166d0d191ca1cf78567b0ff6b85f00e", 0x10, 0x3, 0x9, 0xc89}, 0x3c) 1.836076862s ago: executing program 2 (id=2221): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x12, 0x0) syz_emit_ethernet(0x369, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x840) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0xfffffffb, 0xa, 0xc7, 0x3, 0x5]}, &(0x7f0000000240)=0x23) 1.701244983s ago: executing program 3 (id=2223): r0 = socket$inet6(0xa, 0x3, 0x2) getsockname(r0, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xff23, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 1.492125428s ago: executing program 0 (id=2224): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071101300000000007a050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}]}, 0x44}}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @broadcast}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x2}]}, 0x2c}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.409442871s ago: executing program 3 (id=2225): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001380)=@ethtool_cmd={0xa, 0x20000008, 0x57f959ea, 0x8, 0x6, 0x3, 0xc0, 0x4, 0xca, 0x2, 0x0, 0x4, 0x3, 0x3, 0x7, 0x8, [0x8, 0x34]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10004, 0x20}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x1d, 0x2, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) getsockopt$inet_mreqn(r2, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r6, 0x1) r8 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) accept$nfc_llcp(r8, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100003fa0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800040000000000"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) 1.408350122s ago: executing program 2 (id=2226): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710800e835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000100)=0x1000, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x20040804) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cb9700000000001010000001c000180060001000200000008000300ac1414370800060003000000"], 0x30}, 0x1, 0xff07}, 0x2000000) 1.389018798s ago: executing program 4 (id=2227): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010001b"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_CMD={0x1, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64080090}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000104010100000000000000000a0000000500010002"], 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xfff, 0x3, 0x9, 0x3}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8024080) 1.362967564s ago: executing program 1 (id=2228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x106, 0x106, 0xc, [@datasec={0x7, 0x8, 0x0, 0xf, 0x2, [{0x4, 0x5, 0x444}, {0x4, 0x7, 0x8b2}, {0x5, 0x7, 0x7}, {0x2, 0x6, 0x5}, {0x4, 0x1, 0x264f}, {0x4, 0x2, 0x80}, {0x1, 0x26bd, 0x9}, {0x2, 0x90000000, 0x2}], '\\W'}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0xd, 0x2}, {0x7, 0x2}, {0xf, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0xe0d}}, @typedef={0x5, 0x0, 0x0, 0x8, 0x3}, @enum={0xe, 0x6, 0x0, 0x6, 0x4, [{0xe, 0x6}, {0xd, 0x9}, {0x2bd9, 0x2}, {0xf, 0x9}, {0x9, 0x2c5c}, {0xf, 0x7}]}]}, {0x0, [0x2e, 0x2e, 0x61, 0x61, 0x5f, 0x5f, 0x0, 0x2e, 0x61, 0x61]}}, &(0x7f0000000300)=""/231, 0x12c, 0xe7, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xab, 0x0, r1, 0x2, '\x00', r2, r3, 0x3, 0x4, 0x2}, 0x50) 1.173020162s ago: executing program 1 (id=2229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 1.171964151s ago: executing program 0 (id=2230): ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000000)={0x80}) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000000c0)) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0xe8, 0x0, 0x1f0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x11, "dfa2f7fcfec7e2b610ca9d482e361c0acc864f2cd868bb450b41c7f200fb"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xffffffff, 0x0, 0xffffff00], 'veth1_to_team\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x9, 0x0, 0x45}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff000000, 0xff, 0xff], 0x4e24, 0x4e23, 0x4e24, 0x4e23, 0xd, 0x8, 0x6, 0x6, 0xfffffffd}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"fcfe", 0x1}}, @common=@eui64={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa0f, 0x614, 0xe, 0x2152, 0xe7, 0xc9eb2c7, 0x9, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf0, 0x0, 0x4c18c773a1e2695e, 0x101, 0x70bd2a, 0x25dfdbfc, {0x8a0a71fa20aff950, 0x0, 0x6}, [@generic="a42ae3fb9fd694ad504bdd0caaa2363321d9d99ae7b59824c404a4d19054e020325a67d87b725e95e514b800fb5702ebfaa04293aee8f82dd8337491a26b5726e3db0151af537f07f62550a61f373b09fd33af2b0d6545539631ea1ad0508b3dd618145979fb9401ccec7fb11bf15fc74b320a238e95e23b5ff786f44f4515d17bc94ee207463637dcd8cd9d700b2f95b7d67e16f47bfd509aea506d8ec947548dcd07bccc540b65fee615652e4b1833b48f2e82414ea30e0b67dd79335e59897bf7571bfafc634f4ca49b59fbd7f9938d0707c9", @generic="b9c432854517f4"]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x4048800) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, r3, &(0x7f0000000780)=0xfff, 0x380000000000) (async) ioctl$XFS_IOC_SCRUBV_METADATA(0xffffffffffffffff, 0xc0285840, &(0x7f0000000840)={0xe65c, 0x34be, 0x1, 0x0, 0x8, 0x7, 0x0, &(0x7f00000007c0)=[{0x15, 0x101, 0x3ff}, {0x2, 0xfe, 0xfffffffc}, {0x5, 0xfe, 0x9}, {0xf, 0x1ff, 0x7}, {0x16, 0xfe, 0x9}, {0x1a, 0xfe, 0xfffffffe}, {0xe, 0x1ff, 0x7}]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x280000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8004) (async) connect$pppl2tp(r0, &(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x3, 0x4, 0x0, 0x1, {0xa, 0x4e22, 0xe, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x1}}}, 0x3a) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000a00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2d}, 0xe) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000a40)) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000a80)) ioctl$sock_bt_hci(r4, 0x400448e3, &(0x7f0000000ac0)="c0097026e33048555a5c08e2336806498d6c72a608ada7c00647f8a5441f77bf17272283c0a78b59ac5874e7c9a31a385bd7") (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x134, r7, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbd}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x47}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffc1c8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8880}, 0x4000) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000d40)) (async) socket$rxrpc(0x21, 0x2, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000d80)="b1395279d94aad9e2e36a789babdc05685f67fc3141995b543dae606e2cbbe66f67f10c73016c3cd39a75ec29feb31f849f454d2fbfb53c451e195b3c592c307f553112d4f6ac5ac1fe6346bae9b7da1d127ee863d5bf264ee8bdc75542d258061046d3a90137a6dc1f5868af031ff117f630a5ef2d595b8d453c89711b9dbe9a05a7b12182dfdeb6d9114a92384b34cdc73d8e2e861a85d4997a47349214aae20ca233c15caeb1f6baf2f", 0xab, 0x40050, 0x0, 0x0) (async) r9 = accept(r6, &(0x7f0000000e40)=@tipc=@name, &(0x7f0000000ec0)=0x80) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000f00)=0x20, 0x4) (async) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000f40)=0x200, 0x4) (async) sendmsg$nl_route(r9, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)=@ipv4_getnexthop={0x28, 0x6a, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_FDB={0x4}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) 1.13941424s ago: executing program 4 (id=2231): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELTABLE={0x338, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xde, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a617448983"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}, @NFTA_TABLE_USERDATA={0x73, 0x6, "ee897745a0e689107c8a09377cb0ba3f248f3c7e59f0b805eaf39d5a64e101f2d7a77c1d659d048151ecdb1ab75ad6873d11b6bdaba23ff78455610fd3313d46517c07d317d000868d04398b3f44a368fa335f77c3290843bf70317c9f7cfb79204f2026fefd9d6f5d270137cf5844"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3a4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELTABLE={0x338, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xde, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a617448983"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}, @NFTA_TABLE_USERDATA={0x73, 0x6, "ee897745a0e689107c8a09377cb0ba3f248f3c7e59f0b805eaf39d5a64e101f2d7a77c1d659d048151ecdb1ab75ad6873d11b6bdaba23ff78455610fd3313d46517c07d317d000868d04398b3f44a368fa335f77c3290843bf70317c9f7cfb79204f2026fefd9d6f5d270137cf5844"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3a4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000b80)=[{&(0x7f00000000c0)=""/10, 0xa}], 0x1, 0x7, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004503005c00650000002f90780000000000000000248000000200ff000010000800000086dd080088be00000000100000000100000000000000080022ebfffffffd200000ff02000000000000000000000008006558fffffffd000000"], 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x800) (async) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14, 0x800) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x268, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x22c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x15c, 0x1, [@m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x268}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.078963034s ago: executing program 1 (id=2232): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a35901b4b87c4c3c14c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x34b}, 0x50) 977.65124ms ago: executing program 0 (id=2233): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000180)={0x2a, 0x3, 0x8000}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xfea1}}, 0x800) getpeername$qrtr(r0, 0x0, &(0x7f0000000700)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @random="fec247f36598"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x800) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) listen(r3, 0x0) shutdown(r3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000580)={{r3}, "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"}) 977.237597ms ago: executing program 1 (id=2234): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0xb0f, 0xdff, 0x800}) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x0, 0x0, 0x32, 0x0, "5f6b10a75b6b84cc10a8b30702c87e55226789005942edf904c3de760071d678eeaee1f69d3bd7469a30b7390ac77c3f31ec3d9f4e74f41e64df1dcc876c87b487bd7b2419aa746776ad121f5e74295c"}, 0xd8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400000dd0a080001400000000108000340000000000900010073797a30"], 0xc8}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e6572000000480002800800024000000084080003400000000a080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000e08000240000021140900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100003052abd70000006000000000000", @ANYRES32=0x0, @ANYBLOB="000000001638000000000000000201006970360a2f9d50bf67060000001000028006000e00010000000400120008000a00", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) 850.858537ms ago: executing program 0 (id=2235): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000000)={0x1e, 0x3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000096c0), r3) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000009c80)={0x0, 0x0, &(0x7f0000009c40)={&(0x7f0000009c00)=ANY=[@ANYBLOB="3155fe0c", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000009c80)={0x0, 0x0, &(0x7f0000009c40)={&(0x7f0000009c00)=ANY=[@ANYBLOB="3155fe0c", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf251100000008000300", @ANYRES32, @ANYBLOB="050012004000000008000300", @ANYRES32=r5, @ANYBLOB="0c00c427013f000020120fc608080300", @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xa0000001}) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x2004}) epoll_pwait(r9, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) (async) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r10 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000280)=0x60, 0x80800) ioctl$sock_SIOCGIFBR(r10, 0x8940, &(0x7f00000002c0)=@generic={0x1, 0x6, 0x8}) recvfrom$x25(r1, &(0x7f0000000140)=""/199, 0xc7, 0x2001, &(0x7f0000000240), 0x12) 843.864032ms ago: executing program 4 (id=2236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x21, 0x3, 0x5b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4e8, 0xffffffff, 0xffffffff, 0x4e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}, {0x1}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x4}, {0x4, 0x4, 0x1}, 0xf4, 0x7}}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x618) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x5, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 757.440348ms ago: executing program 4 (id=2237): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r6, 0x2, {0x2, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) sendto(r1, &(0x7f0000000a80)="9af386d95588e07e41603e1d5d772d1adb0d43975c1f1238bb9586c9400eadeca4b9bf7ee65c42782d9ab47ff7aadac1669a4afc00e0541c29a7484394bd1d66b11ffc409a6baa23a8ff6a1e89", 0x4d, 0x0, &(0x7f0000000b00)=@xdp={0x2c, 0x1, r6, 0xa}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000380)={@mcast2, 0x0}, &(0x7f0000000480)=0x14) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@ptr={0x8, 0x0, 0x0, 0x2, 0x2}, @enum64={0x7, 0x3, 0x0, 0x13, 0x0, 0x1, [{0xa, 0x6, 0x80}, {0x17d7, 0x1, 0x6}, {0xf, 0x6, 0x9cdd}]}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @struct={0x1, 0x3, 0x0, 0x4, 0x1, 0xfffffbff, [{0xd, 0x1, 0x4}, {0x7, 0x2, 0xe}, {0x2, 0x0, 0x2}]}]}, {0x0, [0x30]}}, &(0x7f0000000580)=""/49, 0x93, 0x31, 0x1, 0x1}, 0x28) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x23, &(0x7f0000000b80)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000184e0000070000000000000000000000181b0000", @ANYRES32=r0, @ANYBLOB="000010000000000018150f00000000000000b878c731dc66bff1b71a077a20b9b06ee4cbe7bcabec1078", @ANYRES32=r0, @ANYBLOB="000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b70800002d0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018410000070000000000000000000000186b00000a00000000000000000000008510000004000000"], &(0x7f0000000300)='syzkaller\x00', 0xffffffff, 0xc, &(0x7f0000000340)=""/12, 0x41000, 0x14, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000600)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xd, 0x2, 0x2}, 0x10, 0x2d6ee, 0xffffffffffffffff, 0x5, &(0x7f0000000700)=[r11], &(0x7f0000000740)=[{0x3, 0x2, 0xc, 0x2}, {0x4, 0x1, 0xf}, {0x4, 0x2, 0x3, 0x5}, {0x1, 0x5, 0xe, 0xb}, {0x1, 0x2, 0xf, 0x9}], 0x10, 0x1}, 0x94) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r7) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x108, r13, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x258d}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffff9b0}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x90}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 480.675672ms ago: executing program 3 (id=2238): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0x26}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r5 = socket$inet(0x2, 0x3, 0x2) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x86}, @NFQA_CFG_FLAGS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x100) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0x26}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) socket$inet(0x2, 0x3, 0x2) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x86}, @NFQA_CFG_FLAGS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x100) (async) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) (async) 479.950324ms ago: executing program 1 (id=2239): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r2, 0x17}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="f6185f2a8e4125", 0x7}], 0x1}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) 396.305391ms ago: executing program 4 (id=2240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r5, &(0x7f0000000a40)=[{&(0x7f00000007c0)='g', 0x1}], 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000bc0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x6, 0xfffffffd}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) sendmmsg(r1, &(0x7f0000003c40)=[{{&(0x7f0000000040)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)="6657e26afd8fdba097bd244c608e8e88e3d7684b7d5d903db329ecf3e0f257de5a5338936094451686a904ea91e5f9204bab94a899a053ca6e5a25dd76034d64829faf551ee1792d8973f9d7ed2137f132256c918c62380262704c47d8eb80dff5ea3e6dce67904b921eaa23889d70e0", 0x70}, {&(0x7f0000000280)="16a6b7a495081064e680ac0c19d9f36f64cfea1e9ccd9e0317a1d8b075014be30f9c63420767818a457b00941188a3084effd8c15449d8a3b745dee0f1a64efef1c9fe13470d60b30f1e22f24ce732a143f90ea0b142088f56bbaf0405c30c4d6578cec620ec1952faa11e35252b8d3ac08e1d6a670964f4c216e3cca347f4492be374d71008ad6031e218aedc08de1ad6b51aca6cb86f644c8f2efde7c4da94206d3f2125376b3b63b923de6e66e9b812c33aa7f0ea626c6c5e3836ab869d550dded250f81dc25dae41be78cd345eeff1af2ab86c675b95bfbbcdf5d8c20e3586bf97", 0xe3}], 0x2}}, {{&(0x7f00000003c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="6e242c36417513067b9031", 0xb}, {&(0x7f00000004c0)="19629955a217eb78858867470dc2edbbe14cced2c939f2244bc4d094fc04cb44d9006a6ad9aa7c6a33de2d0acf746aafd7b9d4859cdc717f", 0x38}, {&(0x7f0000000500)="7f7286e92f427f210a68be85ced3a858dfb61c97c420ba70144a0e40d4be6092afc2cf2a8ff8563c4469b8d55425ad197f14f0fa1812094b574cddf1c620324e50907d2e6ab2205f5a7035576801c03fb3b0df92cdc2e56710e0949903ee6b0ebb7843a2de869f982f6a1fdd772f9e3b30c223855c4cc8c79b7021a1", 0x7c}], 0x3, &(0x7f00000005c0)=[{0x40, 0x107, 0x33a, "e733269d06812b87d8444a579378966f90e23baa234ea0d33d5b2fa47933169a388789d536838978f63b6e17c72b702b"}, {0x70, 0x118, 0x1, "cf37c63f1e349284c128ed2216058583c5f642ee426bb6e7dfae44bd1010523e80fb23f1aab220aebebea8811d3bbc77fe6cfcf73be37ecca42b74e2baf449a4c1f84154046dbc1108ea9f080ff7ca179c6338b120621ad7e30c3e606228b09e"}], 0xb0}}, {{&(0x7f0000000680)=@nfc={0x27, r6, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000700)="b905dbfca6b2a022554d592f4d7b1df1a9e80c71aeee0bd311d81f7015db3c03c4eb10faff00b027b37d1f83e5f6f703814959928c6c7e25ed84531dd19b547b1bd5c78b573c927d57fc0ebe03db9f1c307bca7510d86bf55ddf345d2404ea3ec61c8dd4e43bd506801e453be038d076e039c690fd6e7ee7f34a884e7e98b37a076c00e4f4", 0x85}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="49a8ac5f470bec42d462bd0d37750893841bbe00eb1e7e8b5a069ff674c93416db25a0f09d6f456d30a748fde638db8978d216a189b8591db1504ee4a804fe31f203cab5ad197b5ccac73e7b352e838e6760da5fb9a1dd045c348ac9cf57aa02eb1e4aab5e2b25d31e915fdb010d1ef9f208016e1788a0053226", 0x7a}, {&(0x7f0000000880)="af4011b3701cab317defd72b973ad55011890b9d6a004fa3b52887fb7fbc510fbb269320debfee7b3bb9c33f2dc76c5e95b671876d025910336d6172388d7812f4c2e33738d6c321ff054bebc5a1e3c64fe133b7e2db40944bc62a8d68f1374d2b6bc2a8b01112d15ab0dacb6d9efca7d3318b034a8f2d4836887af6ecd414a0092f7c61bd62b86a6a2df9aadefaba76daa05f809f621f36d8d8e2cb837c080d84aa9a6c4dbb8ba48d87779d5f349c", 0xaf}, {&(0x7f0000003d80)="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", 0x100e}], 0x5, &(0x7f0000001f80)=[{0x108, 0x114, 0xc1, "b473acfd5ba11dc9f28e69f47713c52b1423692e22abab934b3fd5820fb2a04dc8457e67321e5e26d2abf1bd292825d3490e336637778ebd933d65956cab66d63ab1c236df351d49f6ab6fbb14dec217f8df4878c756af73c5a899cc92c69d7c7b39c785f0e3914ec7435c1b88f6b1aad983424f57d6e81df86b1c303e80583d220b9b31d09600c91efa86a07a5dd2a4188d25ff20d8d0e2a5b274b58e006e5f4dc844dde0cd13b13bd9622cc08f0440fdbaa049686c5fae183544c0dc279975bb8c249873a0229d8d66fafed430ee89e34b9ec01819589c65d5fbcc6f2fbc88115ccab677304d47d9fc8f1ef36d31cf7a"}], 0x108}}, {{&(0x7f00000020c0)=@pppoe={0x18, 0x0, {0x2, @random="969e9549b3fb", 'geneve0\x00'}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002140)="4791a95ca6ce58a2c01b80432f23e300a91c6629d0172c9378bbc8e2472fee0769ec65ddb834df4aabe5f08000dea4551e8525c489132f49e8856725e3eef7d1d0a216b577d270e36f7b15220bb49cfd00dcfe87ada468d379bae6e5178e52ba86", 0x61}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="b817d74a5e9d39c8703637549f5b81386e99a9668ba4f1d757b45038739e13ecc6a627b09179280e4aad46287f2069a66997aa69ca4a988332bc5f301cfc27b533f391b3111ab1d36bad187c1dc9dd54e3f24b6993c3b3291a39ddcf27ce464a19d828d8c77f223b519156aa64d23f84ddeaf3745cd81231c4c3f4517ba64b016938eb3bbde140b1023ff293114f94663f6189bade06c4bbaf5be0c0a2e9bce648246b24", 0xa4}, {&(0x7f0000003280)="461d10c5dac87a8c2b8f9f64046e4877947151129b0af4485269d1b5b5d0301b0d9444c8e46f12a5bbea4803a35c83bfb546aaac42792a516c24cefe7ece3ce5ce1e", 0x42}, {&(0x7f0000003300)="0a6e68e92d200e4917dd3afe99c6f8cbca1604b8771ac74e5bbec9217170cc0b0388f48ed95d9ff029da8c32363f469883a39b14b64793398345af16e4bb6d4ee1a6b4634870fea0defd37869af098c31b647e1bb5cd861450aaec3ca0c25ec7202af975913f9a0bb3ce3508f50fb632c6640119b476fca21529f1a45739a6cefbef67903097a11afe6394341da9ad6ef479ef601e32bc94df32", 0x9a}, {&(0x7f00000033c0)="c2a0fe4073b651d665f1d33965b772c951436b99873bbaabfd1805cf838208d5b273ee0e0b30dec073f94c14d0ba4f4b7eef76d414477737611059c4f9eab7dd8c12c3fea6dc6e6c43f0b3bf25e480e03ff07408b024051b4be39ef3a766807acea6de", 0x63}, {&(0x7f0000003440)="2d3bef59e3c08c824c6254c773dc96301d4f15566760d20f0cc184efe4a1ee1614d4922975c7921c218261e84f8ca363267e1018d64a6eaf540df3af9388993f295705d0f016489f96e241711dd93c52b6ca4e0cbb937248039031ab034065eeea4dbeb81981592222c2e82ea66f41ceb18c6889f9a8", 0x76}], 0x7}}, {{&(0x7f0000003540)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000035c0)="07014959a8721a6d0edc2e56584832942671dfe264d22d8e5d1f58f8c89b87de77b6e905c2f2bdfb6728ea45691903edea38231fe2cd603476db1eadf667abc983ad9c42b281", 0x46}, {&(0x7f0000003640)="564ab6e84cc0cb370c0be1a1285348149825612ad56d32d72baf7bd2de8e694aa746a7587fad95ffd7e7bfd3d301c39d176367a406c1a5b86216db5b8f48c767a9bf52a6131e9f03d2a05d282e8fed68c1c0bcb319", 0x55}, {&(0x7f00000036c0)="67805ed31ffad9ea4180e58a47faa5e2a0b0654a465862315f4e6f82b375590a23f6feba3528beda0664f855839e2cfb17be3211db7c8c412680d7d9982498ce70e1c988fc751a451e6604140d14d74a7b93938ff4322f63d0a80f2c59b3d3351fcde585c5e7f8295c54b7469760cbf51de504c6f753c12172249e55f9272fccad0bd07a27ed910c79d4267eddeb32cab457ab638a13e7f4ddb929e075cdd222f32e32d51493c535909095aa987dd5ba2705d6e9817c8a25e587e257034a23606c29b58e0f1dcc3775b7571ebeb4a0e9208e721bd11f01", 0xd7}, {&(0x7f00000037c0)="ac992bb8124c71a038023e6d88fe57c26180aad64527c137c84f4a9d54f84569324cf327ef5a521e1e4d9f02a435e0f821cd0ddebe9a8e440d71971ea0b658adc4d53e061f8a6380f055be4e0987377a9a5321a71cc08b9ec5a498e0eb340741535138442aaf487a12f985b812bc5f76952d40f8f7a8db3166b96c9e64", 0x7d}, {&(0x7f0000000940)="f82e8ad4a6f46bfdf47bde80d6938a4eb82702a32183892dc195194e803853b3598736aea96b8cff2775e4d19014d73c73ab108d9977cf3d3d7b7e685280f7c793df985e4554ed7740da0afa54b5a66922b3d91eba69c8325b962aa2da62a543ee7230df84d60381ae4803ee8b66533cdf2a8a987195404e8e87bc9e7bec906d7ff2a59c2c57d2255165d8cc862a0ae1e7c69d19a34b709083056372e3641d05b8c82c7359f2c403ea4aea07f2aa42fb527e0dbe5ffb6633bf47a1e7163c5a4122f63b3fb6e94a0a17ebff016847fc00064383d405f6712254c45781eb20eb9f1fa014c65f7fd666f954ed604795f45ae866", 0xf2}, {&(0x7f0000003940)="fd4fa6a340897220d37c1c2aaff2f0cf5f293a0585b34688a5b13f7d40282fb746a4d0483bd341b136e1fad16b9d5cae457a88e7f7bdd728869c4b09dc2663a9c029be1103f270", 0x47}], 0x6, &(0x7f0000003a40)}}], 0x5, 0x20004040) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000500aaaaaaaaaaaaaaaaaaaaaabbaaaaaaaaaaaa000000000000b6ff037c0eb8"]) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYRES16=r9, @ANYRES8=r10, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r12], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000440)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbf9, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x1c}}, 0x24040044) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$netlink(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r15, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000b80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="00012bbd7000000c000680081b0600000000000800040008000000"], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x20000001) 383.424327ms ago: executing program 2 (id=2241): socket$kcm(0x21, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendfile(r0, r4, 0x0, 0xffffffff004) 345.238µs ago: executing program 3 (id=2242): syz_emit_ethernet(0xff, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000884700000c00aaab161b17d30016da7198b49bf460b843176213b77a6e91bc34ad0f0bc2033f4f1044b58447d8605df3549091e7b951923b4e968d46bdd95cf0edd73a67a6b391a0e4c46b1710da62f563f24c9da5d06fb00386453a080079683af48fae4cfe9a6bc3804d18bcfe2115efd09bb9070450eef4c82e532e41a0a99761872d0fabb5842f7c6ada6c12d9d01ab5b971844eaef285653af2bd6cd879fcba5e97bc659eb354a31105a02f2074c307aa404b8c89be23f90f7763ae082fc71a3e85d2d4fa933631ba406b1a3186508cb446cd8b50477f62d55d3e8958212ab2f1ff386054917504"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0xcb5) accept4$unix(r2, 0x0, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x10000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="330320000a00140000f786dd3baa4b1f0f8c4632f4705e195e00"/42, 0x2a, 0x40008c1, &(0x7f0000000480)={0x11, 0x0, r3, 0x1, 0x62, 0x6, @local}, 0x14) syz_emit_ethernet(0xff, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000884700000c00aaab161b17d30016da7198b49bf460b843176213b77a6e91bc34ad0f0bc2033f4f1044b58447d8605df3549091e7b951923b4e968d46bdd95cf0edd73a67a6b391a0e4c46b1710da62f563f24c9da5d06fb00386453a080079683af48fae4cfe9a6bc3804d18bcfe2115efd09bb9070450eef4c82e532e41a0a99761872d0fabb5842f7c6ada6c12d9d01ab5b971844eaef285653af2bd6cd879fcba5e97bc659eb354a31105a02f2074c307aa404b8c89be23f90f7763ae082fc71a3e85d2d4fa933631ba406b1a3186508cb446cd8b50477f62d55d3e8958212ab2f1ff386054917504"], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) (async) listen(r2, 0x0) (async) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0xcb5) (async) accept4$unix(r2, 0x0, 0x0, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x10000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00'}) (async) sendto$packet(r1, &(0x7f0000000080)="330320000a00140000f786dd3baa4b1f0f8c4632f4705e195e00"/42, 0x2a, 0x40008c1, &(0x7f0000000480)={0x11, 0x0, r3, 0x1, 0x62, 0x6, @local}, 0x14) (async) 0s ago: executing program 1 (id=2243): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20010000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bba9"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): g up backlog [ 147.798378][ T7203] syz.3.355 (7203) used greatest stack depth: 18048 bytes left [ 148.102613][ T3113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.511678][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a110000: rx timeout, send abort [ 148.522572][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a110000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 149.009804][ T7299] Cannot find add_set index 2 as target [ 149.175051][ T3113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.782837][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.986007][ T7353] __nla_validate_parse: 70 callbacks suppressed [ 149.986029][ T7353] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.379'. [ 150.025514][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.379'. [ 150.286061][ T7367] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.293579][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 150.303311][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 150.398157][ T7366] netlink: 104 bytes leftover after parsing attributes in process `syz.1.382'. [ 150.607734][ T7380] netlink: 277 bytes leftover after parsing attributes in process `syz.4.386'. [ 150.627242][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.386'. [ 151.223086][ T3113] net_ratelimit: 1 callbacks suppressed [ 151.223111][ T3113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.321572][ T7396] netlink: 'syz.1.393': attribute type 5 has an invalid length. [ 151.448756][ T7404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.394'. [ 152.274187][ T3113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.332387][ T7444] netlink: 5 bytes leftover after parsing attributes in process `syz.0.410'. [ 152.387075][ T7444] netlink: 84 bytes leftover after parsing attributes in process `syz.0.410'. [ 152.492214][ T7447] bond2: entered promiscuous mode [ 152.498560][ T7447] bond2: entered allmulticast mode [ 152.506984][ T7447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.757663][ T7473] Bluetooth: MGMT ver 1.23 [ 152.818007][ T7474] syzkaller0: entered promiscuous mode [ 152.824284][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.853266][ T7474] syzkaller0: entered allmulticast mode [ 153.106166][ T7488] x_tables: duplicate underflow at hook 1 [ 153.311267][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.378991][ T7502] netlink: 'syz.4.425': attribute type 2 has an invalid length. [ 153.539571][ T7511] netlink: 'syz.0.429': attribute type 3 has an invalid length. [ 153.770713][ T7516] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 153.869204][ T7516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.894626][ T7529] bond1: (slave veth0_to_bond): making interface the new active one [ 153.905350][ T7529] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 153.938271][ T7516] bond1: entered promiscuous mode [ 153.950736][ T7516] veth0_to_bond: entered promiscuous mode [ 153.957052][ T7516] bond1: entered allmulticast mode [ 153.962491][ T7516] veth0_to_bond: entered allmulticast mode [ 153.987852][ T7516] macvlan2: entered promiscuous mode [ 153.993557][ T7516] macvlan2: entered allmulticast mode [ 154.002795][ T7516] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.014824][ T7516] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 154.235527][ T7535] netpci0: entered promiscuous mode [ 154.241426][ T7535] bridge0: entered promiscuous mode [ 154.247062][ T7535] netpci0: entered allmulticast mode [ 154.259882][ T7535] bridge0: entered allmulticast mode [ 154.288084][ T7535] bridge0: port 1(netpci0) entered blocking state [ 154.306797][ T7535] bridge0: port 1(netpci0) entered disabled state [ 154.521336][ T7535] bridge0: left allmulticast mode [ 154.592369][ T5639] bridge0: left promiscuous mode [ 154.599356][ T7541] veth0: entered promiscuous mode [ 154.628274][ T7549] vlan0: entered promiscuous mode [ 154.655602][ T7538] veth0: left promiscuous mode [ 155.381235][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.861087][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.106804][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.421626][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.788839][ T7522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.811959][ T7572] netlink: 'syz.3.445': attribute type 11 has an invalid length. [ 156.831543][ T7572] netlink: 'syz.3.445': attribute type 5 has an invalid length. [ 156.859938][ T7572] __nla_validate_parse: 7 callbacks suppressed [ 156.859959][ T7572] netlink: 6548 bytes leftover after parsing attributes in process `syz.3.445'. [ 156.901688][ T7577] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 157.135856][ T7590] netlink: 'syz.4.452': attribute type 22 has an invalid length. [ 157.205098][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 157.240188][ T7588] bond1: entered promiscuous mode [ 157.257140][ T7588] bond1: entered allmulticast mode [ 157.264045][ T7590] netlink: 'syz.4.452': attribute type 22 has an invalid length. [ 157.272431][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 157.337455][ T7600] batadv0: entered promiscuous mode [ 157.360287][ T7600] macsec1: entered promiscuous mode [ 157.398227][ T7600] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 157.439304][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.456'. [ 157.448807][ T7600] batadv0: left promiscuous mode [ 157.462771][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.788562][ T7618] syzkaller0: entered promiscuous mode [ 157.797444][ T7624] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 157.805567][ T7618] syzkaller0: entered allmulticast mode [ 157.820429][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 157.864670][ T7618] ip6gre1: entered allmulticast mode [ 158.076379][ T7641] netlink: 'syz.2.464': attribute type 10 has an invalid length. [ 158.226198][ T7645] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.468'. [ 158.250139][ T7645] veth0_to_bond: default FDB implementation only supports local addresses [ 158.448784][ T7645] syzkaller0: entered promiscuous mode [ 158.455399][ T7645] syzkaller0: entered allmulticast mode [ 158.502006][ T3113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.661597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.901448][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.542896][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.129628][ T7669] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 160.280016][ T7676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.476'. [ 160.383629][ T7684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.479'. [ 160.422601][ T7684] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 160.585127][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.223553][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.377262][ T7652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.532963][ T7696] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 161.621158][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.832855][ T7706] Illegal XDP return value 630112289 on prog (id 144) dev N/A, expect packet loss! [ 161.885087][ T7710] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.489'. [ 161.940804][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.022517][ T7715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'. [ 162.301143][ T7731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.375890][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 162.546397][ T7746] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 162.560014][ T7746] SET target dimension over the limit! [ 162.660789][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.803419][ T7748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.877304][ T7753] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 162.896373][ T7753] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 163.124212][ T7764] netlink: 'syz.4.507': attribute type 75 has an invalid length. [ 163.204862][ T7764] syzkaller0: entered promiscuous mode [ 163.213332][ T7764] syzkaller0: entered allmulticast mode [ 163.222850][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 163.240242][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 163.451377][ T7776] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 163.629205][ T7790] netlink: 'syz.1.514': attribute type 1 has an invalid length. [ 163.708159][ T3113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.774749][ T7794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.784951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.798450][ T7794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.812777][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.975536][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 165.223603][ T7790] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 165.478191][ T7813] geneve1: entered promiscuous mode [ 165.612102][ T7818] netlink: 'syz.4.520': attribute type 39 has an invalid length. [ 165.621887][ T7821] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.661076][ T7823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.747944][ T7823] syzkaller0: entered allmulticast mode [ 165.921995][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 166.067704][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 166.088606][ T7832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.164105][ T7835] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.177914][ T7835] bond2: (slave bond3): Enslaving as an active interface with an up link [ 166.240117][ T7845] bond2 (unregistering): (slave bond3): Releasing backup interface [ 166.259860][ T7845] bond2 (unregistering): Released all slaves [ 166.408027][ T7861] netlink: 'syz.0.533': attribute type 1 has an invalid length. [ 166.562593][ T7861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.625065][ T7864] bond1: (slave geneve2): making interface the new active one [ 166.635876][ T7864] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 166.645435][ T7867] netlink: 'syz.2.534': attribute type 12 has an invalid length. [ 166.658018][ T7867] netlink: 'syz.2.534': attribute type 29 has an invalid length. [ 166.666779][ T7867] netlink: 148 bytes leftover after parsing attributes in process `syz.2.534'. [ 166.676569][ T7870] netlink: 'syz.2.534': attribute type 12 has an invalid length. [ 166.685077][ T7870] netlink: 'syz.2.534': attribute type 29 has an invalid length. [ 166.694636][ T7870] netlink: 148 bytes leftover after parsing attributes in process `syz.2.534'. [ 166.816539][ T7879] net_ratelimit: 12 callbacks suppressed [ 166.816560][ T7879] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 166.833066][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.877253][ T7879] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 167.264564][ T7898] __nla_validate_parse: 2 callbacks suppressed [ 167.264584][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 167.286542][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.541'. [ 167.321223][ T7908] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 167.368132][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 167.558194][ T7903] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 167.662763][ T5743] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 167.704367][ T7920] netlink: 'syz.4.548': attribute type 1 has an invalid length. [ 167.769869][ T7927] netlink: 144 bytes leftover after parsing attributes in process `syz.2.550'. [ 167.861658][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.983470][ T7936] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 168.549567][ T7956] bond2: (slave gre0): Device is not bonding slave [ 168.563362][ T7966] netlink: 'syz.1.563': attribute type 1 has an invalid length. [ 168.584194][ T7956] bond2: option active_slave: invalid value (gre0) [ 168.619627][ T7969] netlink: 44 bytes leftover after parsing attributes in process `syz.1.563'. [ 168.638676][ T7956] bond2 (unregistering): Released all slaves [ 168.686973][ T7972] x_tables: duplicate underflow at hook 3 [ 168.740914][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.872007][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'. [ 168.902204][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.947665][ T7966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.985492][ T7974] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 169.009999][ T7986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.092220][ T7986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.127542][ T7992] x_tables: duplicate underflow at hook 1 [ 169.169643][ T7991] x_tables: duplicate underflow at hook 1 [ 169.653156][ T8013] netlink: 96 bytes leftover after parsing attributes in process `syz.0.572'. [ 169.717353][ T8007] lo speed is unknown, defaulting to 1000 [ 169.746444][ T8013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.572'. [ 169.881796][ T8007] lo speed is unknown, defaulting to 1000 [ 169.905659][ T8020] sctp: [Deprecated]: syz.1.577 (pid 8020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.905659][ T8020] Use struct sctp_sack_info instead [ 169.941063][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.968597][ T8022] netlink: 'syz.1.577': attribute type 10 has an invalid length. [ 170.064784][ T8022] team0 (unregistering): Port device team_slave_0 removed [ 170.102013][ T8022] team0 (unregistering): Port device team_slave_1 removed [ 170.149458][ T8007] lo speed is unknown, defaulting to 1000 [ 170.393121][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.580'. [ 170.879791][ T8058] netlink: 'syz.2.588': attribute type 26 has an invalid length. [ 170.899551][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 170.913128][ T8058] netlink: 'syz.2.588': attribute type 26 has an invalid length. [ 170.937790][ T5750] lo speed is unknown, defaulting to 1000 [ 170.949171][ T8007] infiniband sz1: set active [ 170.967324][ T8007] infiniband sz1: added lo [ 171.004073][ T8062] batadv0: entered promiscuous mode [ 171.020780][ T8062] macsec1: entered promiscuous mode [ 171.029826][ T8062] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 171.072544][ T8062] batadv0: left promiscuous mode [ 171.082463][ T8007] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 171.146170][ T8007] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 171.229855][ T8007] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 171.373927][ T8074] bond3: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 171.394496][ T8074] bond3 (unregistering): Released all slaves [ 171.445819][ T8007] RDS/IB: sz1: added [ 171.455256][ T8007] smc: adding ib device sz1 with port count 1 [ 171.462329][ T8007] smc: ib device sz1 port 1 has no pnetid [ 171.474358][ T5743] lo speed is unknown, defaulting to 1000 [ 171.487110][ T8007] lo speed is unknown, defaulting to 1000 [ 171.755835][ T8093] Unsupported ieee802154 address type: 0 [ 172.006338][ T8098] syzkaller0: entered promiscuous mode [ 172.012284][ T8098] syzkaller0: entered allmulticast mode [ 172.020988][ T5639] net_ratelimit: 3 callbacks suppressed [ 172.021007][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.213218][ T8007] lo speed is unknown, defaulting to 1000 [ 172.384882][ T8115] __nla_validate_parse: 5 callbacks suppressed [ 172.384904][ T8115] netlink: 80 bytes leftover after parsing attributes in process `syz.4.600'. [ 172.663156][ T8121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.673588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.693078][ T8121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.701603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.759588][ T8007] lo speed is unknown, defaulting to 1000 [ 172.956295][ T8133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.062137][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.102877][ T8137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'. [ 173.380602][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.387931][ C0] bridge0: topology change detected, propagating [ 173.388404][ T8146] netlink: 96 bytes leftover after parsing attributes in process `syz.1.610'. [ 173.402022][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.410708][ C0] bridge0: topology change detected, propagating [ 173.492347][ T8146] block nbd0: not configured, cannot reconfigure [ 173.727596][ T8007] lo speed is unknown, defaulting to 1000 [ 173.852109][ T8175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 173.874985][ T8175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 173.893293][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 174.104084][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.372720][ T8007] lo speed is unknown, defaulting to 1000 [ 174.596051][ T8168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.893165][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.927601][ T8207] netlink: 'syz.0.623': attribute type 26 has an invalid length. [ 175.035877][ T8207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'. [ 175.132734][ T8224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.628'. [ 175.150787][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.164510][ T8225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'. [ 175.200239][ T8225] netlink: 'syz.1.629': attribute type 7 has an invalid length. [ 175.228478][ T8225] netlink: 'syz.1.629': attribute type 8 has an invalid length. [ 175.244905][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 175.254702][ T8227] block nbd0: not configured, cannot reconfigure [ 175.289389][ T8225] gretap0: entered promiscuous mode [ 175.341028][ T8225] gretap0: left promiscuous mode [ 175.546817][ T5750] IPVS: starting estimator thread 0... [ 175.584849][ T8237] netlink: 'syz.2.631': attribute type 1 has an invalid length. [ 175.634690][ T8206] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 175.662897][ T8245] IPVS: using max 31 ests per chain, 74400 per kthread [ 176.328102][ T8282] gre1: entered promiscuous mode [ 176.360037][ T8282] gre1: entered allmulticast mode [ 176.575175][ T8290] netlink: 'syz.1.644': attribute type 2 has an invalid length. [ 176.593934][ T5295] veth1_vlan: left promiscuous mode [ 176.613221][ T8290] netlink: 'syz.1.644': attribute type 8 has an invalid length. [ 176.881083][ T8285] syzkaller0: entered promiscuous mode [ 176.899380][ T8285] syzkaller0: entered allmulticast mode [ 177.231784][ T5750] net_ratelimit: 54 callbacks suppressed [ 177.231804][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.547739][ T8353] __nla_validate_parse: 19 callbacks suppressed [ 177.547791][ T8353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.654'. [ 178.270872][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.983014][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.310933][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.454887][ T8367] netlink: 44 bytes leftover after parsing attributes in process `syz.0.657'. [ 179.843293][ T8386] netlink: 666 bytes leftover after parsing attributes in process `syz.4.663'. [ 179.908880][ T8386] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 179.978212][ T8392] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.666'. [ 180.026675][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 180.079845][ T8395] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 180.101126][ T8395] nbd: error processing sock list [ 180.181644][ T8394] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 180.188300][ T8401] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 180.190678][ T8394] nbd: error processing sock list [ 180.259798][ T8392] bond2: Invalid ad_actor_system MAC address. [ 180.267792][ T8392] bond2: option ad_actor_system: invalid value (1) [ 180.283769][ T8392] bond2 (unregistering): Released all slaves [ 180.340249][ T8406] vlan2: entered promiscuous mode [ 180.346903][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.375792][ T8406] hsr0: entered promiscuous mode [ 180.391015][ T8406] vlan2: entered allmulticast mode [ 180.396439][ T8406] hsr0: entered allmulticast mode [ 180.404247][ T8406] hsr_slave_0: entered allmulticast mode [ 180.410105][ T8406] hsr_slave_1: entered allmulticast mode [ 180.423684][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.538339][ T8419] netlink: 'syz.4.672': attribute type 11 has an invalid length. [ 180.600122][ T8422] netlink: zone id is out of range [ 180.632466][ T8422] netlink: zone id is out of range [ 180.651375][ T8421] netlink: set zone limit has 4 unknown bytes [ 180.938967][ T8440] syzkaller0: entered promiscuous mode [ 180.945562][ T8440] syzkaller0: entered allmulticast mode [ 181.380895][ T5368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.969521][ T8452] sctp: [Deprecated]: syz.0.682 (pid 8452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.969521][ T8452] Use struct sctp_sack_info instead [ 182.420857][ T5639] net_ratelimit: 1 callbacks suppressed [ 182.420888][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.046228][ T8394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.285878][ T8460] netem: change failed [ 183.302032][ T8461] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.685'. [ 183.324104][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.684'. [ 183.341651][ T8463] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.685'. [ 183.351309][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 183.379034][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.687'. [ 183.418553][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.687'. [ 183.461974][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.465129][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.684'. [ 183.508884][ T8471] gretap1: entered promiscuous mode [ 183.515567][ T8471] batman_adv: batadv0: Adding interface: gretap1 [ 183.523745][ T8471] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 183.547218][ T8471] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 183.564440][ T8475] netlink: 100 bytes leftover after parsing attributes in process `syz.2.689'. [ 183.832543][ T8479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.691'. [ 184.047670][ T8490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.696'. [ 184.500845][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.568929][ T8512] bond2: Removing last arp target with arp_interval on [ 184.607733][ T8522] bond0: entered promiscuous mode [ 184.614109][ T8522] bond_slave_0: entered promiscuous mode [ 184.620249][ T8522] bond_slave_1: entered promiscuous mode [ 184.631680][ T8522] erspan0: entered promiscuous mode [ 184.656817][ T8517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.667225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.767635][ T8531] netlink: 'syz.0.706': attribute type 20 has an invalid length. [ 184.899886][ T8531] netlink: 'syz.0.706': attribute type 20 has an invalid length. [ 184.903879][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.964597][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.005834][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.026587][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.060974][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.541561][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.632280][ T8564] netlink: 'syz.0.716': attribute type 3 has an invalid length. [ 185.655989][ T8564] netlink: 'syz.0.716': attribute type 3 has an invalid length. [ 185.734863][ T8573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.826799][ T8576] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 185.844273][ T8576] netlink: 'syz.0.718': attribute type 1 has an invalid length. [ 185.857312][ T8576] netlink: 'syz.0.718': attribute type 8 has an invalid length. [ 186.224135][ T8593] netlink: 'syz.2.723': attribute type 28 has an invalid length. [ 186.246404][ T8593] netlink: 'syz.2.723': attribute type 3 has an invalid length. [ 186.260283][ T8592] sctp: [Deprecated]: syz.0.724 (pid 8592) Use of int in max_burst socket option. [ 186.260283][ T8592] Use struct sctp_assoc_value instead [ 186.287305][ T8595] netlink: 'syz.3.725': attribute type 2 has an invalid length. [ 186.301519][ T8595] netlink: 'syz.3.725': attribute type 2 has an invalid length. [ 186.310862][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.323501][ T8595] netlink: 'syz.3.725': attribute type 1 has an invalid length. [ 186.364909][ T8597] bridge_slave_0 (unregistering): left allmulticast mode [ 186.394171][ T8597] bridge_slave_0 (unregistering): left promiscuous mode [ 186.410200][ T8597] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.583071][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.749851][ T8612] xt_hashlimit: invalid rate [ 186.923445][ T8628] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 187.229479][ T8635] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 187.255079][ T8635] bond2 (unregistering): Released all slaves [ 187.528584][ T8660] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 187.622687][ T5368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.806744][ T8671] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 188.102927][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.326644][ T8696] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 188.335562][ T8696] bond2: option packets_per_slave: allowed values 0 - 65535 [ 188.344661][ T8696] bond2 (unregistering): Released all slaves [ 188.662087][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.712640][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.020862][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.694572][ T8664] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.741311][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.022075][ T8740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.173663][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.368789][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.502728][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.528341][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.839952][ T8774] syzkaller1: entered promiscuous mode [ 191.867134][ T8774] syzkaller1: entered allmulticast mode [ 191.885616][ T7336] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.033328][ T7336] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.058912][ T7336] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.084378][ T8792] 8021q: VLANs not supported on ip6_vti0 [ 192.110083][ T7336] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.264166][ T8801] __nla_validate_parse: 27 callbacks suppressed [ 192.264186][ T8801] netlink: 168260 bytes leftover after parsing attributes in process `syz.0.764'. [ 192.491998][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 192.675923][ T8818] validate_nla: 6 callbacks suppressed [ 192.675944][ T8818] netlink: 'syz.1.771': attribute type 1 has an invalid length. [ 192.744092][ T8821] netlink: 'syz.0.772': attribute type 3 has an invalid length. [ 192.758694][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 192.760004][ T8818] bond4: entered promiscuous mode [ 192.783760][ T8826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.771'. [ 192.794219][ T8818] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.876495][ T8758] net_ratelimit: 3 callbacks suppressed [ 192.876517][ T8758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.138735][ T8838] sctp: [Deprecated]: syz.3.777 (pid 8838) Use of int in maxseg socket option. [ 193.138735][ T8838] Use struct sctp_assoc_value instead [ 193.160229][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.779'. [ 193.262746][ T8846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.780'. [ 193.289603][ T8846] netlink: 'syz.0.780': attribute type 7 has an invalid length. [ 193.325003][ T8846] netlink: 'syz.0.780': attribute type 8 has an invalid length. [ 193.348556][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 193.427886][ T8854] tipc: Enabling of bearer rejected, failed to enable media [ 193.524583][ T8858] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 193.534271][ T8859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.785'. [ 193.544879][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 193.558071][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'. [ 193.574445][ T8858] netlink: 'syz.0.784': attribute type 2 has an invalid length. [ 193.583092][ T8858] netlink: 'syz.0.784': attribute type 2 has an invalid length. [ 193.597151][ T8858] netlink: 'syz.0.784': attribute type 2 has an invalid length. [ 193.942339][ T8758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.180939][ T8777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.980986][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.021285][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.060983][ T8758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.220855][ T8781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.101275][ T8765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.142243][ T8765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.621658][ T8777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.180922][ T8758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.262530][ T8781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.221176][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.260924][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.300884][ T8758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.309153][ T8758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.342385][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.383415][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.342187][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.422215][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.461010][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.502422][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.221027][ T8777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.381117][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.542481][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.580997][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.624407][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.951032][ T5651] Bluetooth: hci1: command 0x0406 tx timeout [ 211.958150][ T5651] Bluetooth: hci2: command 0x0406 tx timeout [ 211.964362][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 212.424299][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.662193][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.700981][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.742298][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.460972][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.781080][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.821052][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.862335][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.501345][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.821325][ T8777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.902317][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.955405][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.114979][ T8777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.980961][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.541827][ T8777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.022434][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.579738][ T8879] geneve2: entered promiscuous mode [ 222.590027][ T8879] geneve2: entered allmulticast mode [ 222.648962][ T1017] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 222.675961][ T1017] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 222.728807][ T1017] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 222.759542][ T1017] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 222.774431][ T8876] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 222.804055][ T8876] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 222.836381][ T8876] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 222.938718][ T8876] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 223.044361][ T8876] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 223.062697][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.186822][ T8898] RDS: rds_bind could not find a transport for fe88::5, load rds_tcp or rds_rdma? [ 223.297337][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.793'. [ 223.494983][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.793'. [ 223.650807][ T7251] smbdirect: ib_dev[syz2] removed [ 224.024288][ T8934] ipvlan2: entered promiscuous mode [ 224.404414][ T8961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.812'. [ 224.445373][ T8960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.812'. [ 224.548375][ T8969] sctp: [Deprecated]: syz.0.814 (pid 8969) Use of int in max_burst socket option. [ 224.548375][ T8969] Use struct sctp_assoc_value instead [ 224.573904][ T8967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.813'. [ 224.618751][ T8967] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 224.663654][ T8967] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 224.983467][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.818'. [ 225.155322][ T8986] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 225.168835][ T8986] netlink: 96 bytes leftover after parsing attributes in process `syz.1.820'. [ 225.180293][ T8986] netlink: 1 bytes leftover after parsing attributes in process `syz.1.820'. [ 225.189873][ T8986] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 225.192623][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 225.200142][ T8986] netlink: 618 bytes leftover after parsing attributes in process `syz.1.820'. [ 225.403782][ T8988] bond3: entered promiscuous mode [ 225.409522][ T8988] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.556884][ T9000] syzkaller1: entered promiscuous mode [ 225.575782][ T9000] syzkaller1: entered allmulticast mode [ 225.738751][ T9004] netlink: 'syz.4.826': attribute type 2 has an invalid length. [ 225.849519][ T9017] Cannot find set identified by id 65535 to match [ 226.045950][ T9027] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 226.071054][ T9027] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 226.082001][ T30] audit: type=1804 audit(1780737612.076:5): pid=9032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.830" name="/newroot/182/cgroup.controllers" dev="tmpfs" ino=940 res=1 errno=0 [ 226.131972][ T146] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 226.153722][ T30] audit: type=1800 audit(1780737612.076:6): pid=9032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.830" name="cgroup.controllers" dev="tmpfs" ino=940 res=0 errno=0 [ 226.374500][ T9040] 8021q: VLANs not supported on ip_vti0 [ 226.515676][ T9045] bond3: option resend_igmp: invalid value (43466) [ 226.522793][ T9045] bond3: option resend_igmp: allowed values 0 - 255 [ 226.531324][ T9045] bond3 (unregistering): Released all slaves [ 227.303997][ T9052] veth0: entered promiscuous mode [ 227.403215][ T9051] veth0: left promiscuous mode [ 227.457954][ T9054] xt_cluster: node mask cannot exceed total number of nodes [ 228.715854][ T9017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.726215][ T9025] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 228.997337][ T9066] netlink: 'syz.1.843': attribute type 21 has an invalid length. [ 229.017002][ T9066] netlink: 'syz.1.843': attribute type 22 has an invalid length. [ 229.037573][ T9066] netlink: 'syz.1.843': attribute type 23 has an invalid length. [ 229.076664][ T9066] netlink: 'syz.1.843': attribute type 25 has an invalid length. [ 229.103261][ T9066] netlink: 'syz.1.843': attribute type 26 has an invalid length. [ 229.134306][ T9066] __nla_validate_parse: 2 callbacks suppressed [ 229.134324][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.843'. [ 229.279216][ T9077] openvswitch: netlink: Key type 30 is not supported [ 229.487437][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 229.555424][ T9087] netlink: 'syz.2.849': attribute type 9 has an invalid length. [ 229.620131][ T9087] syzkaller0: entered promiscuous mode [ 229.648771][ T9087] syzkaller0: entered allmulticast mode [ 229.714962][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.852'. [ 229.852942][ T9094] syzkaller0: entered promiscuous mode [ 229.867454][ T9094] syzkaller0: entered allmulticast mode [ 230.049306][ T9118] netlink: 232 bytes leftover after parsing attributes in process `syz.2.857'. [ 230.145799][ T9110] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 230.227233][ T9110] bond2 (unregistering): Released all slaves [ 230.339277][ T9115] ipvlan2: entered allmulticast mode [ 230.377583][ T9115] batadv_slave_1: entered allmulticast mode [ 230.417189][ T9115] batman_adv: batadv0: Adding interface: ipvlan2 [ 230.460106][ T9115] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.531916][ T9115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.544048][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.571872][ T9115] batman_adv: batadv0: Interface activated: ipvlan2 [ 230.621293][ T9136] validate_nla: 2 callbacks suppressed [ 230.621315][ T9136] netlink: 'syz.4.864': attribute type 10 has an invalid length. [ 230.746456][ T9136] team0 (unregistering): Port device team_slave_0 removed [ 230.853124][ T9150] netlink: 80 bytes leftover after parsing attributes in process `syz.4.864'. [ 230.853856][ T9136] team0 (unregistering): Port device team_slave_1 removed [ 231.017229][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.869'. [ 231.107645][ T9161] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 231.116296][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'. [ 231.845815][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 231.866958][ T9180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.875'. [ 231.911756][ T9173] netlink: 27 bytes leftover after parsing attributes in process `syz.1.871'. [ 231.958494][ T9180] netlink: 'syz.0.875': attribute type 3 has an invalid length. [ 232.004806][ T9165] syzkaller0: entered promiscuous mode [ 232.046973][ T9165] syzkaller0: entered allmulticast mode [ 232.968460][ T9224] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004 [ 233.321591][ T9242] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 233.572288][ T9242] bond5: entered promiscuous mode [ 233.585870][ T9242] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.813504][ T9264] netlink: set zone limit has 4 unknown bytes [ 233.823057][ T9270] netlink: zone id is out of range [ 233.828712][ T9270] netlink: zone id is out of range [ 234.145375][ T9256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.175498][ T9256] bridge0: port 3(bond4) entered blocking state [ 234.192987][ T9256] bridge0: port 3(bond4) entered disabled state [ 234.204693][ T9256] bond4: entered allmulticast mode [ 234.213753][ T9256] bond4: entered promiscuous mode [ 234.219591][ T9256] bridge0: port 3(bond4) entered blocking state [ 234.226121][ T9256] bridge0: port 3(bond4) entered listening state [ 234.309910][ T9290] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 234.489183][ T9293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.568444][ T9309] __nla_validate_parse: 8 callbacks suppressed [ 234.568464][ T9309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.908'. [ 234.754740][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 234.830380][ T9319] netlink: 'syz.1.911': attribute type 58 has an invalid length. [ 234.850664][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.911'. [ 234.952224][ T9324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.984804][ T7336] bridge0: port 3(bond4) entered disabled state [ 235.162487][ T9339] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 235.187588][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'. [ 235.531354][ T9356] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 235.658850][ T9356] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.708432][ T9363] bond3: (slave veth0_to_bond): making interface the new active one [ 235.739688][ T9363] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 235.787209][ T9370] bond3: entered promiscuous mode [ 235.800504][ T9370] veth0_to_bond: entered promiscuous mode [ 235.820689][ T9370] bond3: entered allmulticast mode [ 235.828430][ T9370] veth0_to_bond: entered allmulticast mode [ 235.979117][ T9382] netlink: 52 bytes leftover after parsing attributes in process `syz.3.924'. [ 236.414269][ T9395] syzkaller0: entered promiscuous mode [ 236.430045][ T9395] syzkaller0: entered allmulticast mode [ 236.697813][ T9408] bond5: Unable to set down delay as MII monitoring is disabled [ 236.726336][ T9408] bond5 (unregistering): Released all slaves [ 237.106191][ T9427] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 237.141332][ T9427] netlink: 224 bytes leftover after parsing attributes in process `syz.2.935'. [ 237.381181][ T5648] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 239.298363][ T9436] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 239.310963][ T9436] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 239.543396][ T9448] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 239.564986][ T9450] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 239.614437][ T9453] netlink: 'syz.4.943': attribute type 1 has an invalid length. [ 239.639542][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'. [ 239.775707][ T9457] netlink: 48 bytes leftover after parsing attributes in process `syz.4.946'. [ 239.938817][ T9464] netlink: 83 bytes leftover after parsing attributes in process `syz.4.948'. [ 239.968561][ T9464] netlink: 'syz.4.948': attribute type 12 has an invalid length. [ 240.035403][ T9464] bond3: option primary_reselect: invalid value (255) [ 240.063840][ T9464] bond3 (unregistering): Released all slaves [ 240.297813][ T9484] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 240.319069][ T9484] xt_hashlimit: overflow, try lower: 3/0 [ 240.364669][ T9481] can: request_module (can-proto-0) failed. [ 240.646084][ T9492] sctp: [Deprecated]: syz.3.957 (pid 9492) Use of int in maxseg socket option. [ 240.646084][ T9492] Use struct sctp_assoc_value instead [ 240.934307][ T9502] block nbd0: server does not support multiple connections per device. [ 241.094676][ T9502] block nbd0: shutting down sockets [ 241.231594][ T9528] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 241.264503][ T9532] netlink: 156 bytes leftover after parsing attributes in process `syz.0.956'. [ 241.884710][ T9552] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 241.938129][ T9552] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 241.987805][ T9554] netlink: 64 bytes leftover after parsing attributes in process `syz.1.967'. [ 242.079985][ T9558] bond0: (slave bond_slave_0): Releasing backup interface [ 242.207755][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 242.387066][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 242.533482][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 242.579618][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 242.664529][ T9586] netlink: 41 bytes leftover after parsing attributes in process `syz.0.972'. [ 242.718236][ T9570] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 242.813481][ T9570] bond5 (unregistering): Released all slaves [ 243.226165][ T9599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 243.269248][ T9599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 243.779232][ T9638] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 243.815889][ T9638] netlink: 'syz.0.988': attribute type 3 has an invalid length. [ 243.833727][ T9642] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20004 [ 243.973422][ T9645] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.064778][ T9645] bond4: (slave lo): Enslaving as an active interface with an up link [ 244.121449][ T9645] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 245.155733][ T9663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.764733][ T9665] batadv_slave_0: mtu less than device minimum [ 246.986907][ T9700] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 247.088821][ T9704] __nla_validate_parse: 5 callbacks suppressed [ 247.088843][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 247.162115][ T9708] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 247.182487][ T9704] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1002'. [ 247.212171][ T9708] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 247.275158][ T9708] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 247.337481][ T9708] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 247.533723][ T9725] netlink: 'syz.3.1008': attribute type 1 has an invalid length. [ 247.556285][ T9725] netlink: 'syz.3.1008': attribute type 1 has an invalid length. [ 247.589296][ T9725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1008'. [ 247.638440][ T9729] netlink: 'syz.4.1006': attribute type 11 has an invalid length. [ 247.650118][ T9730] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1008'. [ 247.663557][ T9731] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 247.779631][ T9737] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.1012'. [ 247.794454][ T9736] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.1012'. [ 247.885824][ T9742] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 247.894864][ T9742] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1013'. [ 247.904614][ T9742] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 247.912824][ T9742] netlink: 'syz.1.1013': attribute type 8 has an invalid length. [ 247.921073][ T9742] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1013'. [ 247.930186][ T9742] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1013'. [ 248.036812][ T9747] pim6reg: entered allmulticast mode [ 248.481026][ T9755] netlink: 'syz.4.1019': attribute type 21 has an invalid length. [ 248.492479][ T9755] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1019'. [ 248.740891][ T9765] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 249.281105][ T9791] IPv6: sit1: Disabled Multicast RS [ 249.369997][ T9797] gretap0: entered promiscuous mode [ 249.420124][ T9797] gretap0: left promiscuous mode [ 249.781464][ T5643] Bluetooth: hci4: command 0x0405 tx timeout [ 249.849208][ T9824] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 249.867589][ T9824] netlink: 'syz.1.1038': attribute type 4 has an invalid length. [ 250.391600][ T9841] IPVS: set_ctl: invalid protocol: 0 172.20.20.53:20003 [ 251.557681][ T9895] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 251.639691][ T9896] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.655193][ T9902] netlink: 'syz.0.1060': attribute type 83 has an invalid length. [ 251.663230][ T8761] IPVS: starting estimator thread 0... [ 251.692281][ T9900] netlink: 'syz.0.1060': attribute type 83 has an invalid length. [ 251.782612][ T9903] IPVS: using max 25 ests per chain, 60000 per kthread [ 251.819268][ T9909] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 251.846778][ T9910] tipc: Started in network mode [ 251.874685][ T9910] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 251.931343][ T9910] tipc: Enabled bearer , priority 10 [ 252.257562][ T9925] batadv0: entered promiscuous mode [ 252.289103][ T9925] macsec1: entered promiscuous mode [ 252.308519][ T9925] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 252.322463][ T9925] batadv0: left promiscuous mode [ 252.664357][ T9946] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 252.718666][ T9948] __nla_validate_parse: 50 callbacks suppressed [ 252.718686][ T9948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1076'. [ 252.923417][ T9957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1079'. [ 252.969068][ T9959] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1080'. [ 253.063539][ T8760] tipc: Node number set to 4269801492 [ 253.097761][ T9971] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 253.377983][ T9981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1087'. [ 253.609839][ T9997] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 253.706153][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 253.759522][ T9997] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.804672][ T9999] bond5: (slave geneve3): making interface the new active one [ 253.815120][ T9999] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 253.936285][T10008] team0: Port device team_slave_0 removed [ 254.450210][T10042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.469458][T10042] netlink: 'syz.0.1103': attribute type 11 has an invalid length. [ 254.647924][T10053] netlink: 'syz.1.1100': attribute type 1 has an invalid length. [ 254.726974][T10057] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1108'. [ 254.919030][T10042] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.929758][T10042] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.002990][T10053] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 255.282559][T10067] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1111'. [ 255.328427][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 256.024694][T10102] netlink: 'syz.2.1120': attribute type 1 has an invalid length. [ 256.055527][T10102] nbd: error processing sock list [ 256.232073][T10113] netlink: 'syz.1.1123': attribute type 1 has an invalid length. [ 256.265941][T10113] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1123'. [ 256.382401][ T1171] bond0: (slave bond_slave_0): interface is now down [ 256.463413][ T1171] bond0: (slave bond_slave_1): interface is now down [ 256.553872][ T1171] bond0: now running without any active interface! [ 256.968493][ T5295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 258.020709][ T5648] Bluetooth: hci4: command 0x0405 tx timeout [ 259.212314][T10116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.221660][T10138] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 259.231892][T10138] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1128'. [ 259.584511][T10139] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 259.602873][T10139] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1128'. [ 260.035389][T10187] xt_hashlimit: size too large, truncated to 1048576 [ 260.060298][T10192] ip6t_REJECT: ECHOREPLY is not supported [ 260.276925][T10207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.292206][ T3358] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.336172][ T3358] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.380075][T10208] syzkaller0: entered promiscuous mode [ 260.401837][T10208] syzkaller0: entered allmulticast mode [ 260.436915][ T3358] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.490361][ T3358] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.996619][T10227] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.1143'. [ 261.028016][T10227] netlink: Unknown conntrack attr (type=2304, max=9) [ 261.080097][T10235] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 261.104207][T10235] bond4 (unregistering): Released all slaves [ 261.175202][T10243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1147'. [ 261.198556][T10243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1147'. [ 261.377280][T10249] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1148'. [ 261.949098][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079115c00: rx timeout, send abort [ 261.959622][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079115c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 261.961526][T10278] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1157'. [ 262.223922][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 262.445620][T10296] netlink: 'syz.2.1161': attribute type 12 has an invalid length. [ 262.525998][T10299] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1163'. [ 262.538159][T10299] 1·: renamed from c0· (while UP) [ 262.561123][T10299] 1·: entered allmulticast mode [ 262.572342][T10299] hsr_slave_0: entered allmulticast mode [ 262.585717][T10301] sctp: [Deprecated]: syz.1.1162 (pid 10301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.585717][T10301] Use struct sctp_sack_info instead [ 262.616834][T10299] hsr_slave_1: entered allmulticast mode [ 262.641609][T10299] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 262.721639][T10309] netlink: 54 bytes leftover after parsing attributes in process `syz.2.1165'. [ 262.846743][T10314] netlink: 'syz.1.1166': attribute type 11 has an invalid length. [ 263.067902][T10323] bridge3: port 1(veth3) entered blocking state [ 263.090108][T10323] bridge3: port 1(veth3) entered disabled state [ 263.109066][T10323] veth3: entered allmulticast mode [ 263.117608][T10326] x_tables: duplicate underflow at hook 3 [ 263.131452][T10323] veth3: entered promiscuous mode [ 264.027566][T10385] netlink: 'syz.0.1182': attribute type 1 has an invalid length. [ 264.438231][T10392] __nla_validate_parse: 7 callbacks suppressed [ 264.438250][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1185'. [ 264.513657][T10383] nbd0: detected capacity change from 0 to 63 [ 264.536046][ T5643] block nbd0: Receive control failed (result -32) [ 264.536046][ T5648] block nbd0: Receive control failed (result -32) [ 264.560847][ T8923] block nbd0: Dead connection, failed to find a fallback [ 264.598230][ T8923] block nbd0: shutting down sockets [ 264.638824][ T8923] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.706615][ T8923] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.740022][ T8923] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.782015][ T8923] Buffer I/O error on dev nbd0, logical block 1, async page read [ 264.840151][ T8923] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.867442][ T8923] Buffer I/O error on dev nbd0, logical block 2, async page read [ 264.899414][ T8923] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.943560][ T8923] Buffer I/O error on dev nbd0, logical block 3, async page read [ 264.975087][ T8923] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.012116][ T8923] Buffer I/O error on dev nbd0, logical block 0, async page read [ 265.046462][ T8923] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.094956][ T8923] Buffer I/O error on dev nbd0, logical block 1, async page read [ 265.113144][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'. [ 265.157024][ T8923] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.193512][ T8923] Buffer I/O error on dev nbd0, logical block 2, async page read [ 265.220329][ T8923] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.272335][ T8923] Buffer I/O error on dev nbd0, logical block 3, async page read [ 265.311597][ T8923] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.367440][ T8923] Buffer I/O error on dev nbd0, logical block 0, async page read [ 265.404846][ T8923] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 265.462588][ T8923] Buffer I/O error on dev nbd0, logical block 1, async page read [ 265.492235][ T8923] ldm_validate_partition_table(): Disk read failed. [ 265.503662][ T8923] Dev nbd0: unable to read RDB block 0 [ 265.512860][ T8923] nbd0: unable to read partition table [ 265.579613][T10428] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 265.588216][ T8923] ldm_validate_partition_table(): Disk read failed. [ 265.610296][ T8923] Dev nbd0: unable to read RDB block 0 [ 265.633051][ T8923] nbd0: unable to read partition table [ 266.092573][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1197'. [ 266.188325][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1199'. [ 266.227034][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1199'. [ 266.664369][T10452] veth5: entered allmulticast mode [ 266.686502][T10465] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1205'. [ 266.699305][T10465] netlink: 'syz.1.1205': attribute type 11 has an invalid length. [ 266.710173][T10465] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1205'. [ 266.920819][T10472] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 266.963506][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 266.995500][T10475] netlink: 'syz.4.1209': attribute type 3 has an invalid length. [ 267.113792][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1210'. [ 267.177168][T10482] xt_l2tp: wrong L2TP version: 0 [ 267.258572][T10489] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 267.288585][T10489] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1213'. [ 267.316470][T10489] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 267.357871][T10489] netlink: 'syz.3.1213': attribute type 8 has an invalid length. [ 267.499819][T10489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.674121][T10516] netlink: 'syz.2.1218': attribute type 4 has an invalid length. [ 269.486897][T10612] __nla_validate_parse: 17 callbacks suppressed [ 269.486917][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 269.524497][T10611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1249'. [ 269.562683][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 269.617249][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 269.712299][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 269.735093][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 269.759249][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 269.770873][T10619] netlink: 'syz.3.1250': attribute type 30 has an invalid length. [ 269.795607][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 269.938089][T10625] IPv6: sit2: Disabled Multicast RS [ 269.968118][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 270.016022][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1247'. [ 270.062936][T10627] netlink: 'syz.0.1252': attribute type 2 has an invalid length. [ 270.340183][T10643] veth1_to_bond: entered allmulticast mode [ 270.405923][T10642] veth1_to_bond: left allmulticast mode [ 270.606879][T10657] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 271.064727][T10679] netlink: 'syz.4.1265': attribute type 10 has an invalid length. [ 271.242368][T10683] syzkaller0: entered promiscuous mode [ 271.286813][T10683] syzkaller0: entered allmulticast mode [ 271.358075][T10691] netlink: 'syz.0.1268': attribute type 4 has an invalid length. [ 272.191817][T10727] Bluetooth: MGMT ver 1.23 [ 272.216454][T10727] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 272.707467][T10746] netlink: 'syz.4.1285': attribute type 25 has an invalid length. [ 272.815522][T10744] nbd: nbd64 already in use [ 272.902552][T10746] netlink: 'syz.4.1285': attribute type 25 has an invalid length. [ 273.300236][T10765] netlink: 'syz.3.1288': attribute type 11 has an invalid length. [ 273.372771][T10765] netlink: 'syz.3.1288': attribute type 4 has an invalid length. [ 273.758930][ T8923] udevd[8923]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 274.243478][T10804] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 274.251043][T10804] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 274.257545][T10805] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 276.452325][T10770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.809294][T10825] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.840502][T10825] __nla_validate_parse: 36 callbacks suppressed [ 276.840532][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1301'. [ 276.874648][T10828] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1299'. [ 276.888109][T10826] bond0: entered promiscuous mode [ 276.905425][T10826] bond_slave_0: entered promiscuous mode [ 276.918478][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1299'. [ 276.933195][T10830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.942607][T10826] bond_slave_1: entered promiscuous mode [ 276.956613][T10831] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1301'. [ 276.967985][T10826] batadv0: entered promiscuous mode [ 276.979414][T10826] debugfs: 'hsr1' already exists in 'hsr' [ 277.019304][T10826] Cannot create hsr debugfs directory [ 277.038767][T10826] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 277.051998][T10826] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 277.076877][T10826] bond0: left promiscuous mode [ 277.099540][T10826] bond_slave_0: left promiscuous mode [ 277.118657][T10826] bond_slave_1: left promiscuous mode [ 277.132831][T10826] batadv0: left promiscuous mode [ 277.374460][T10843] tap0: tun_chr_ioctl cmd 2148553947 [ 277.401909][T10842] tap0: tun_chr_ioctl cmd 2148553947 [ 277.502606][T10848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1307'. [ 277.533840][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'. [ 277.552282][T10855] netlink: 'syz.0.1309': attribute type 11 has an invalid length. [ 277.569786][T10851] netlink: 'syz.3.1308': attribute type 21 has an invalid length. [ 277.736889][T10867] xt_hashlimit: invalid rate [ 277.746501][T10867] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 278.212578][T10895] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 278.241385][T10895] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.261855][T10895] vlan4: entered promiscuous mode [ 278.267013][T10895] bond6: entered promiscuous mode [ 278.272805][T10895] vlan4: entered allmulticast mode [ 278.278290][T10895] bond6: entered allmulticast mode [ 278.304225][T10895] bond6: (slave bridge4): making interface the new active one [ 278.312757][T10895] bridge4: entered promiscuous mode [ 278.318201][T10895] bridge4: entered allmulticast mode [ 278.326791][T10895] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 278.514154][T10901] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1319'. [ 280.646206][T10862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.921501][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 280.934649][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1329'. [ 280.958684][T10930] vlan3: entered promiscuous mode [ 281.598635][T10966] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 281.656780][T10966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1339'. [ 281.866214][T10976] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1341'. [ 281.945188][T10981] netlink: 'syz.0.1344': attribute type 1 has an invalid length. [ 281.968404][T10981] netlink: 'syz.0.1344': attribute type 11 has an invalid length. [ 281.994035][T10981] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1344'. [ 282.097750][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1346'. [ 284.488141][T10970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.747942][T11010] tipc: Enabled bearer , priority 10 [ 284.805195][T11013] gre1: entered promiscuous mode [ 284.812284][T11013] gre1: entered allmulticast mode [ 285.311823][T11037] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 285.539597][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1362'. [ 285.797087][ T8765] tipc: Node number set to 83886080 [ 285.932490][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1368'. [ 286.194658][T11084] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 286.468099][T11096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1375'. [ 286.874512][T11113] bond4: option lp_interval: invalid value (0) [ 286.887607][T11113] bond4: option lp_interval: allowed values 1 - 2147483647 [ 286.903596][T11113] bond4 (unregistering): Released all slaves [ 287.383781][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 287.459373][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.531211][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.577557][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.623062][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.638574][T11161] netlink: 'syz.2.1389': attribute type 3 has an invalid length. [ 287.666580][T11161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1389'. [ 287.681993][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.697825][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.787289][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.828473][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.868810][T11152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.098175][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'. [ 289.236162][T11225] vcan1: entered promiscuous mode [ 289.266863][T11225] vcan1: entered allmulticast mode [ 289.568564][T11247] netlink: 'syz.0.1414': attribute type 21 has an invalid length. [ 289.606744][T11247] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1414'. [ 289.663527][T11250] can: request_module (can-proto-0) failed. [ 290.022666][T11280] tipc: Enabling of bearer rejected, media not registered [ 290.624409][T11305] Cannot find add_set index 0 as target [ 291.087023][T11324] x_tables: duplicate underflow at hook 2 [ 291.202791][T11336] xt_ecn: cannot match TCP bits for non-tcp packets [ 291.317858][T11341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1437'. [ 294.008228][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1448'. [ 294.246704][T11380] netlink: 'syz.4.1453': attribute type 8 has an invalid length. [ 294.288681][T11380] sch_fq: defrate 0 ignored. [ 294.324423][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 294.361080][T11384] v: renamed from gretap0 [ 294.543328][T11395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1454'. [ 294.754182][T11412] netlink: 'syz.0.1455': attribute type 2 has an invalid length. [ 294.828505][T11412] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1455'. [ 294.977037][T11418] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 295.013656][T11421] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1460'. [ 295.121701][T11432] netlink: 'syz.3.1462': attribute type 3 has an invalid length. [ 295.398015][T11404] syz.0.1455 (11404) used greatest stack depth: 17312 bytes left [ 295.647788][T11456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1471'. [ 295.688370][T11456] net_ratelimit: 60 callbacks suppressed [ 295.688399][T11456] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 296.416436][T11499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1481'. [ 296.453619][T11499] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1481'. [ 296.709725][T11502] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 296.964174][T11522] netlink: 'syz.3.1485': attribute type 10 has an invalid length. [ 297.203249][T11528] xt_hashlimit: size too large, truncated to 1048576 [ 297.238126][T11535] netlink: 'syz.3.1488': attribute type 5 has an invalid length. [ 297.238168][T11534] netlink: 'syz.2.1489': attribute type 49 has an invalid length. [ 297.264084][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1488'. [ 297.542902][T11542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1490'. [ 297.938659][T11562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.057122][T11562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.407774][T11579] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 298.441144][T11581] openvswitch: netlink: IPv4 tun info is not correct [ 298.526441][T11591] netlink: 'syz.3.1503': attribute type 1 has an invalid length. [ 298.666848][T11591] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.688264][T11591] xt_hashlimit: size too large, truncated to 1048576 [ 298.799820][T11600] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 299.079767][T11611] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 299.369773][T11624] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 299.458149][T11624] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.471125][ T8765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.708370][T11639] __nla_validate_parse: 8 callbacks suppressed [ 299.708394][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1513'. [ 299.756706][T11643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1514'. [ 299.778648][T10367] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.788695][T10367] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.800809][ T8761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.888906][T11645] xt_limit: Overflow, try lower: 2147483648/8 [ 299.895634][ T8761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.502331][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.510575][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.580799][ T8761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.542353][ T8765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.917478][T11603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.026720][ T8779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.134662][T11674] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1521'. [ 302.150949][T11674] netlink: 'syz.4.1521': attribute type 7 has an invalid length. [ 302.169292][T11674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1521'. [ 302.277432][T11680] netlink: 209616 bytes leftover after parsing attributes in process `syz.0.1523'. [ 302.501357][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'. [ 302.502763][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'. [ 302.537655][T11692] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1527'. [ 302.581859][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.624121][T11703] netlink: 'syz.2.1530': attribute type 1 has an invalid length. [ 302.636410][T11701] syzkaller0: entered promiscuous mode [ 302.648337][T11701] syzkaller0: entered allmulticast mode [ 302.676706][T11703] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 303.336999][ T30] audit: type=1107 audit(1780737689.326:7): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 303.540646][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.643893][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.652108][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.693943][T11738] netlink: 'syz.4.1542': attribute type 8 has an invalid length. [ 303.703729][T11738] sch_fq: defrate 0 ignored. [ 303.905752][T11746] netlink: 'syz.4.1546': attribute type 142 has an invalid length. [ 304.077677][T11754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1548'. [ 304.139205][T11754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.166235][T11754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.167573][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'. [ 304.199743][T11754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.220253][T11752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.232747][T11752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.689245][T11778] bond5: entered promiscuous mode [ 304.707562][T11779] macvlan0: entered promiscuous mode [ 304.713090][T11779] macvlan0: entered allmulticast mode [ 304.720155][T11779] bond5: (slave macvlan0): Opening slave failed [ 304.765792][T11786] veth0_to_bond: entered allmulticast mode [ 304.784667][T11789] __nla_validate_parse: 2 callbacks suppressed [ 304.784687][T11789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1557'. [ 304.808294][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 304.869001][T11792] syzkaller1: entered promiscuous mode [ 304.887752][T11792] syzkaller1: entered allmulticast mode [ 305.012854][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 305.041028][T11805] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1559'. [ 305.062752][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'. [ 305.133073][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 305.293016][T11814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1564'. [ 305.457583][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1564'. [ 305.681775][T11826] veth1_to_bond: entered allmulticast mode [ 305.688695][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1566'. [ 305.706289][T11826] veth1_to_bond (unregistering): left allmulticast mode [ 305.720911][T11826] bond0: (slave bond_slave_1): Releasing backup interface [ 305.739779][ T8765] syz1: Port: 1 Link DOWN [ 305.916194][T11830] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1567'. [ 306.660727][ T8780] net_ratelimit: 2 callbacks suppressed [ 306.660745][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.760595][ T8765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.677017][T11788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.784758][ T8765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.943722][T11848] xt_ecn: cannot match TCP bits for non-tcp packets [ 307.989039][T11853] openvswitch: netlink: IP tunnel dst address not specified [ 308.072027][T11846] syzkaller0: entered promiscuous mode [ 308.091687][T11846] syzkaller0: entered allmulticast mode [ 308.256073][T11864] netlink: 'syz.3.1577': attribute type 3 has an invalid length. [ 308.488246][T11871] siw: device registration error -23 [ 308.823349][ T8765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.385972][T11903] netlink: 'syz.4.1587': attribute type 8 has an invalid length. [ 309.433368][T11903] veth1_to_team: entered promiscuous mode [ 309.476605][T11903] gretap0: entered promiscuous mode [ 309.519952][T11903] veth1_to_team: left promiscuous mode [ 309.549649][T11903] gretap0: left promiscuous mode [ 309.602166][T11913] C: renamed from lo (while UP) [ 309.617373][T11913] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 309.702555][ T8779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.873591][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.925545][T11922] x_tables: duplicate underflow at hook 2 [ 310.326628][T11937] __nla_validate_parse: 3 callbacks suppressed [ 310.326652][T11937] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1595'. [ 310.354336][T11938] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1597'. [ 310.411768][T11945] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1597'. [ 310.636289][T11937] lo speed is unknown, defaulting to 1000 [ 310.831558][T11964] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1604'. [ 310.900968][ T8765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.495917][T11992] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 311.515016][T11992] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 311.534765][T11995] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1614'. [ 311.620640][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.621258][ T8779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.942739][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.092902][T12016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1620'. [ 312.314058][T12016] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1620'. [ 312.343479][T12016] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.350947][T12016] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.629593][T12034] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 312.669480][T12034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1625'. [ 312.741762][ T8779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.985014][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.127011][T12052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.159729][T12052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.213088][T12052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.237967][T12052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.256834][T12052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.274798][T12052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.290550][T12052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.533543][T12063] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1632'. [ 313.785292][T12046] netlink: 'syz.0.1627': attribute type 16 has an invalid length. [ 313.797063][T12078] netlink: 'syz.4.1635': attribute type 63 has an invalid length. [ 313.805210][T12046] netlink: 'syz.0.1627': attribute type 17 has an invalid length. [ 313.817392][T12078] netlink: 'syz.4.1635': attribute type 63 has an invalid length. [ 314.093028][T12085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1639'. [ 314.251897][T12091] netlink: 'syz.1.1642': attribute type 21 has an invalid length. [ 314.274295][T12091] IPv6: NLM_F_CREATE should be specified when creating new route [ 314.293994][T12091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.303623][T12091] IPv6: NLM_F_CREATE should be set when creating new route [ 314.310994][T12091] IPv6: NLM_F_CREATE should be set when creating new route [ 314.318378][T12091] IPv6: NLM_F_CREATE should be set when creating new route [ 314.392074][T12091] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 314.688941][T12116] netlink: 'syz.3.1648': attribute type 30 has an invalid length. [ 314.731629][T12116] netlink: 'syz.3.1648': attribute type 30 has an invalid length. [ 314.743715][T10366] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.769944][T10366] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.808579][T12118] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 314.870140][T10366] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.889902][T12118] H: entered allmulticast mode [ 314.922379][T12118] bond0: (slave H): Enslaving as an active interface with an up link [ 314.936656][T10366] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.513389][T12146] __nla_validate_parse: 4 callbacks suppressed [ 315.513413][T12146] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1660'. [ 315.549355][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 315.575739][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 315.595615][T12146] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 315.865198][T12163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1666'. [ 316.062623][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1669'. [ 316.083178][T12170] IPVS: Unknown mcast interface: vcan0 [ 316.589280][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 316.620300][T12198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1676'. [ 316.900091][T12206] veth7: entered promiscuous mode [ 316.918901][T12206] veth7: entered allmulticast mode [ 316.938967][T12212] tipc: Enabling of bearer rejected, media not registered [ 317.023006][T12217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1683'. [ 317.220797][ T8760] net_ratelimit: 49 callbacks suppressed [ 317.220820][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.552216][T12217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1683'. [ 317.577284][T12217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1683'. [ 317.592337][T12232] openvswitch: netlink: Unknown key attributes 2 [ 317.910568][T12247] sctp: [Deprecated]: syz.4.1692 (pid 12247) Use of int in max_burst socket option. [ 317.910568][T12247] Use struct sctp_assoc_value instead [ 317.970319][T12253] Cannot find add_set index 0 as target [ 318.232341][T12268] raw_sendmsg: syz.0.1698 forgot to set AF_INET. Fix it! [ 318.253228][T12269] veth1_virt_wifi: entered promiscuous mode [ 318.261238][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.472555][T12281] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 318.821261][ T8781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.885896][T12298] validate_nla: 3 callbacks suppressed [ 318.885919][T12298] netlink: 'syz.3.1708': attribute type 1 has an invalid length. [ 318.950354][T12298] netlink: 'syz.3.1708': attribute type 4 has an invalid length. [ 319.174661][T12310] xt_ecn: cannot match TCP bits for non-tcp packets [ 319.300855][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.322637][T12312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.231000][T12358] bond4: (slave lo): Releasing backup interface [ 320.258326][T12358] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 320.340807][ T8758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.367564][T12358] bridge_slave_1: left allmulticast mode [ 320.394222][T12358] bridge_slave_1: left promiscuous mode [ 320.410298][T12358] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.467242][T12358] bond0: (slave bond_slave_0): Releasing backup interface [ 320.506387][T12358] bond0: (slave bond_slave_1): Releasing backup interface [ 320.582391][T12358] team0: Port device team_slave_0 removed [ 320.620993][T12358] team0: Port device team_slave_1 removed [ 320.631933][T12358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.639714][T12358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.650700][T12358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.658532][T12358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.668513][T12358] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.722954][T12358] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.787355][T12376] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 320.875164][T12358] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.953715][T12383] __nla_validate_parse: 12 callbacks suppressed [ 320.953762][T12383] netlink: 14540 bytes leftover after parsing attributes in process `syz.4.1732'. [ 321.105550][T12396] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1733'. [ 321.159736][T12398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1735'. [ 321.262620][T12405] netlink: 'syz.2.1738': attribute type 2 has an invalid length. [ 321.696190][T12426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1743'. [ 322.094003][T12441] set match dimension is over the limit! [ 322.304633][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 322.422065][ T8758] net_ratelimit: 4 callbacks suppressed [ 322.422084][ T8758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.851851][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 323.195200][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1765'. [ 323.340961][T12503] 8021q: VLANs not supported on wlan0 [ 323.416541][T12504] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 323.461042][ T8758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.543043][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 323.743990][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a77ac00: rx timeout, send abort [ 323.752749][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a77ac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 323.765882][T12519] netlink: 'syz.3.1773': attribute type 10 has an invalid length. [ 323.769193][T12516] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1772'. [ 323.811078][T12518] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1772'. [ 323.883140][T12519] team0: Port device dummy0 added [ 323.937209][T12519] netlink: 'syz.3.1773': attribute type 21 has an invalid length. [ 324.053420][T12520] team0: Port device dummy0 removed [ 324.110498][T12530] bridge3: entered promiscuous mode [ 324.127052][T12530] bridge3: entered allmulticast mode [ 324.427876][T12545] netlink: 'syz.4.1781': attribute type 2 has an invalid length. [ 324.503648][ T8758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.901794][ T8779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.551982][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.727881][T12618] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.884190][T12625] syzkaller0: entered allmulticast mode [ 326.248602][T12642] __nla_validate_parse: 8 callbacks suppressed [ 326.248624][T12642] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.1806'. [ 326.284523][T12642] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 326.554570][T12657] veth7: entered allmulticast mode [ 326.564657][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1812'. [ 326.580962][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.647801][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078e3c800: rx timeout, send abort [ 326.691448][T12663] veth9: entered allmulticast mode [ 326.956993][T12677] tipc: Enabled bearer , priority 24 [ 326.990601][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 327.023907][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1817'. [ 327.050988][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1817'. [ 327.147419][T12690] xt_hashlimit: size too large, truncated to 1048576 [ 327.156148][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078e3c800: abort rx timeout. Force session deactivation [ 327.581607][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.625916][ T8781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.641793][ T8758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.753126][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.799007][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.838036][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.857673][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.911930][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.942564][ T8781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.963154][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.097774][T12726] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 328.110151][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'. [ 328.467396][T12741] netlink: 'syz.4.1836': attribute type 1 has an invalid length. [ 328.611444][T12741] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.754629][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1840'. [ 328.792673][T12759] netlink: 'syz.4.1840': attribute type 13 has an invalid length. [ 328.827206][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1840'. [ 329.016229][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 329.178044][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1845'. [ 329.255187][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1845'. [ 329.473345][T12797] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 329.513245][T12797] 8021q: adding VLAN 0 to HW filter on device bond7 [ 329.538839][T12797] bond7: (slave gretap0): making interface the new active one [ 329.549937][T12797] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 329.644033][T12797] netlink: 'syz.1.1850': attribute type 3 has an invalid length. [ 329.962830][T12814] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 330.463292][T12842] netlink: 'syz.0.1866': attribute type 1 has an invalid length. [ 330.579848][T12842] 8021q: adding VLAN 0 to HW filter on device bond6 [ 330.879447][T12852] bond6: option resend_igmp: invalid value (32767) [ 330.887563][T12852] bond6: option resend_igmp: allowed values 0 - 255 [ 330.908212][T12852] bond6 (unregistering): Released all slaves [ 330.960038][T12867] geneve3: entered promiscuous mode [ 331.058183][T12875] veth0: entered promiscuous mode [ 331.070868][ T7263] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 44875 - 0 [ 331.089845][ T7263] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 44875 - 0 [ 331.101671][T12885] sctp: [Deprecated]: syz.1.1876 (pid 12885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.101671][T12885] Use struct sctp_sack_info instead [ 331.167024][ T7263] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 44875 - 0 [ 331.626678][T12863] veth0: left promiscuous mode [ 331.774416][T12911] ip6tnl2: entered promiscuous mode [ 331.807189][T12911] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 331.860340][T12911] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 331.926200][T12921] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 331.926200][T12921] Please contact the netfilter-devel mailing list or update your nftables rules. [ 331.969739][T12924] __nla_validate_parse: 16 callbacks suppressed [ 331.969759][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1886'. [ 332.483730][T12948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1894'. [ 332.587590][T12951] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1894'. [ 332.687902][T12954] netlink: 'syz.0.1895': attribute type 33 has an invalid length. [ 332.860898][ T8760] net_ratelimit: 54 callbacks suppressed [ 332.860940][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.468074][T12954] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 333.487564][ T30] audit: type=1804 audit(1780737719.466:8): pid=12962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1897" name="/newroot/373/cgroup.controllers" dev="tmpfs" ino=1930 res=1 errno=0 [ 333.519082][T12954] bond7 (unregistering): Released all slaves [ 333.586210][ T30] audit: type=1800 audit(1780737719.466:9): pid=12962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1897" name="cgroup.controllers" dev="tmpfs" ino=1930 res=0 errno=0 [ 333.903143][T12977] netlink: 'syz.0.1900': attribute type 1 has an invalid length. [ 333.922431][T12978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.946203][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.031752][ T8779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.063693][T12977] 8021q: adding VLAN 0 to HW filter on device bond7 [ 334.337809][T13002] netlink: 'syz.4.1907': attribute type 1 has an invalid length. [ 334.455382][T13002] 8021q: adding VLAN 0 to HW filter on device bond7 [ 334.482255][T13010] bond7: (slave gretap1): making interface the new active one [ 334.493641][T13010] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 334.608490][T13016] tap0: tun_chr_ioctl cmd 1074025676 [ 334.615770][T13016] tap0: owner set to 0 [ 334.626296][T13016] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 334.635752][T13016] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 334.956879][T13027] openvswitch: netlink: IP tunnel dst address not specified [ 334.981988][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.203940][T13031] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 335.534369][T13034] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.575369][T13036] 8021q: adding VLAN 0 to HW filter on device bond7 [ 335.964942][T13051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1920'. [ 336.025535][T13051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1920'. [ 336.035161][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.706334][T12967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.979502][T13061] pimreg: left allmulticast mode [ 337.060203][T13067] netlink: 'syz.4.1925': attribute type 4 has an invalid length. [ 337.077915][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.086157][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.168780][T13070] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1927'. [ 337.204359][T13073] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1927'. [ 337.207999][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 337.282510][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 337.403692][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 337.416788][T13076] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1928'. [ 337.428109][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 337.600291][T13091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1931'. [ 337.805152][T13090] syzkaller0: entered promiscuous mode [ 337.838613][T13090] syzkaller0: entered allmulticast mode [ 337.892378][T13087] syzkaller1: entered promiscuous mode [ 337.935154][T13087] syzkaller1: entered allmulticast mode [ 337.968166][T13090] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 338.089636][T13113] net_ratelimit: 4 callbacks suppressed [ 338.089657][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.109778][ T8765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.155931][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.168477][T13111] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:0 [ 338.175674][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.184930][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.199877][T13116] netlink: 'syz.0.1937': attribute type 2 has an invalid length. [ 338.210169][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.219172][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.230626][T13116] netlink: 'syz.0.1937': attribute type 1 has an invalid length. [ 338.239838][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.257346][T13116] netlink: 'syz.0.1937': attribute type 1 has an invalid length. [ 338.273338][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.299319][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.507439][T13122] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1939'. [ 338.559221][T13122] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1939'. [ 338.686483][ T30] audit: type=1804 audit(1780737724.676:10): pid=13129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1941" name="/newroot/388/cgroup.controllers" dev="tmpfs" ino=2000 res=1 errno=0 [ 338.771144][ T30] audit: type=1800 audit(1780737724.756:11): pid=13129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1941" name="cgroup.controllers" dev="tmpfs" ino=2000 res=0 errno=0 [ 338.924886][T13139] netlink: 'syz.3.1944': attribute type 1 has an invalid length. [ 338.942396][T13139] netlink: 'syz.3.1944': attribute type 2 has an invalid length. [ 338.969865][T13139] netlink: 'syz.3.1944': attribute type 1 has an invalid length. [ 339.012136][T13139] netlink: 'syz.3.1944': attribute type 2 has an invalid length. [ 339.244729][T13146] macvlan2: entered promiscuous mode [ 339.259871][T13146] macvlan2: entered allmulticast mode [ 339.277207][T13146] bond8: (slave macvlan2): Opening slave failed [ 339.314247][T13152] xt_TCPMSS: Only works on TCP SYN packets [ 340.792190][T13219] netlink: 'syz.2.1968': attribute type 3 has an invalid length. [ 340.801317][T13218] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 340.846740][T13218] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 341.087455][T13245] syzkaller1: entered promiscuous mode [ 341.105128][T13245] syzkaller1: entered allmulticast mode [ 342.118123][T13301] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 342.289778][T13313] __nla_validate_parse: 12 callbacks suppressed [ 342.289801][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1994'. [ 342.315190][T13313] validate_nla: 1 callbacks suppressed [ 342.315210][T13313] netlink: 'syz.1.1994': attribute type 1 has an invalid length. [ 342.328802][T13313] netlink: 'syz.1.1994': attribute type 1 has an invalid length. [ 342.339940][T13313] netlink: 'syz.1.1994': attribute type 2 has an invalid length. [ 342.356619][T13312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1993'. [ 342.386938][T13313] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1994'. [ 342.453539][T13317] netlink: 'syz.0.1995': attribute type 11 has an invalid length. [ 342.720927][T13332] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2000'. [ 343.142717][ T8780] net_ratelimit: 1022 callbacks suppressed [ 343.142739][ T8780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.302062][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.324899][T13397] syzkaller1: entered allmulticast mode [ 344.341046][ T8760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.522780][T13408] netlink: 'syz.3.2018': attribute type 10 has an invalid length. [ 344.701283][T13414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2019'. [ 345.109708][T13439] netlink: 'syz.3.2028': attribute type 2 has an invalid length. [ 345.143544][T13444] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2027'. [ 345.331005][T13455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.381270][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.566762][T13462] syzkaller0: entered promiscuous mode [ 345.593369][T13462] syzkaller0: entered allmulticast mode [ 345.966659][T13479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.981148][T13479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.002514][T13479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.067972][T13489] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 346.098214][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 346.120103][T13479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.144033][T13479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.182585][ T8781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.283493][T13486] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 346.306422][T13486] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 346.328461][T13486] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2043'. [ 346.357203][T13498] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2044'. [ 346.679486][T13520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2051'. [ 346.724660][T13515] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 347.197976][T13545] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 347.353247][T13545] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.496855][T13554] bond9: (slave geneve2): making interface the new active one [ 347.514486][T13554] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 347.524087][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.568491][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.629603][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.650851][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.832617][T13576] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 347.849193][T13576] syzkaller1: Linktype set failed because interface is up [ 347.859010][ T8780] syzkaller1: tun_net_xmit 90 [ 347.890975][T13580] nft_compat: unsupported protocol 0 [ 347.946896][T13579] netlink: 'syz.0.2066': attribute type 1 has an invalid length. [ 347.973133][T13579] __nla_validate_parse: 1 callbacks suppressed [ 347.973154][T13579] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2066'. [ 348.299893][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 348.501667][ T8761] net_ratelimit: 7 callbacks suppressed [ 348.501689][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.672078][T13607] bridge_slave_0: left allmulticast mode [ 348.720104][T13607] bridge_slave_0: left promiscuous mode [ 348.759121][T13607] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.848934][T13607] bridge_slave_1: left allmulticast mode [ 348.881636][T13607] bridge_slave_1: left promiscuous mode [ 348.909287][T13607] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.948647][T13629] netlink: 'syz.0.2077': attribute type 21 has an invalid length. [ 348.978388][T13629] IPv6: NLM_F_CREATE should be specified when creating new route [ 349.027248][T13607] bond1: (slave veth0_to_bond): Releasing active interface [ 349.099600][T13607] veth0_to_bond: left promiscuous mode [ 349.151001][T13607] veth0_to_bond: left allmulticast mode [ 349.194876][T13607] bond0: (slave bond_slave_0): Releasing backup interface [ 349.222126][T13607] bond0: (slave bond_slave_1): Releasing backup interface [ 349.222349][ T8779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.245005][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2081'. [ 349.276991][T13607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.286455][T13607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.295958][T13641] xt_hashlimit: size too large, truncated to 1048576 [ 349.309629][T13607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.319797][T13607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.330342][T13607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 349.362841][T13630] tipc: Enabling of bearer rejected, failed to enable media [ 349.543791][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.716351][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2084'. [ 349.745830][T13656] nft_compat: unsupported protocol 0 [ 350.092908][T13668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.104094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.147125][T13668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.156013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.172535][T13668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.181224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.287460][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2088'. [ 350.619802][T13690] Cannot find add_set index 0 as target [ 350.869800][T13701] netlink: 'syz.2.2095': attribute type 2 has an invalid length. [ 350.896310][T13701] netlink: 'syz.2.2095': attribute type 1 has an invalid length. [ 350.905756][ T8761] lo speed is unknown, defaulting to 1000 [ 350.926636][T13701] tipc: Can't bind to reserved service type 1 [ 351.332653][T13719] nbd: couldn't find a device at index 1048580 [ 352.085784][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2110'. [ 352.107003][T13758] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2109'. [ 352.293507][T13771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 352.561645][T13782] netlink: 'syz.0.2115': attribute type 10 has an invalid length. [ 352.611021][T13782] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2115'. [ 352.998304][T13810] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2122'. [ 353.040758][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2122'. [ 353.312268][T13813] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 353.368167][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2127'. [ 353.392802][T13813] bond8 (unregistering): Released all slaves [ 353.750878][ T5768] net_ratelimit: 521 callbacks suppressed [ 353.750901][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.188518][T13828] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 354.262832][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2131'. [ 354.558598][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'. [ 354.584991][T13867] netlink: 'syz.0.2135': attribute type 1 has an invalid length. [ 354.733470][T13879] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2139'. [ 354.799092][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'. [ 354.816772][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'. [ 354.832335][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.920582][T13881] netlink: 'syz.3.2140': attribute type 13 has an invalid length. [ 355.031903][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'. [ 355.101053][T13896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2144'. [ 355.118695][T13898] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 355.304073][ T8779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.639037][T13914] netlink: 'syz.4.2148': attribute type 64 has an invalid length. [ 355.682141][T13919] lo: Caught tx_queue_len zero misconfig [ 355.866218][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.116509][T13942] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 356.231035][ T5768] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 356.238559][T13948] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 356.292774][T13948] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 356.320764][T13948] netlink: 'syz.1.2154': attribute type 8 has an invalid length. [ 356.436199][T13932] syzkaller0: entered promiscuous mode [ 356.462686][T13932] syzkaller0: entered allmulticast mode [ 356.493887][T13950] netdevsim netdevsim2 : renamed from netdevsim0 [ 356.920199][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.701567][ T8781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.717257][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.951634][ T8771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.352687][ T8779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.981192][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.847681][T13999] netlink: 'syz.2.2170': attribute type 4 has an invalid length. [ 359.919397][T14002] netlink: 'syz.2.2170': attribute type 4 has an invalid length. [ 359.991352][T14000] __nla_validate_parse: 7 callbacks suppressed [ 359.991385][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2172'. [ 360.025957][ T8771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.144775][T14010] Cannot find add_set index 0 as target [ 360.328264][T14017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2177'. [ 360.444656][T14024] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2178'. [ 360.476635][T14024] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2178'. [ 360.683258][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'. [ 360.693329][T14028] netlink: 'syz.2.2179': attribute type 1 has an invalid length. [ 360.707718][T14028] netlink: 'syz.2.2179': attribute type 2 has an invalid length. [ 360.822885][T14041] tap0: tun_chr_ioctl cmd 2148553947 [ 361.062622][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.227650][T14054] macsec1: entered promiscuous mode [ 361.240980][T14054] batadv0: entered promiscuous mode [ 361.277101][T14054] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 361.302644][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'. [ 361.331347][T14054] batadv0: left promiscuous mode [ 361.345340][T14056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2186'. [ 361.382142][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2186'. [ 361.425571][T14056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2186'. [ 361.429359][ T8781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.628306][T14075] netlink: 'syz.3.2190': attribute type 25 has an invalid length. [ 361.679764][T14076] netlink: 'syz.2.2188': attribute type 1 has an invalid length. [ 361.742291][T14076] netlink: 'syz.2.2188': attribute type 2 has an invalid length. [ 361.779534][T14076] netlink: 'syz.2.2188': attribute type 1 has an invalid length. [ 361.820193][T14076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2188'. [ 362.101309][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.103025][T14099] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 362.130624][T14099] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 362.171233][T14099] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 362.213048][T14099] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 362.895827][T14114] syzkaller1: entered promiscuous mode [ 362.902751][T14114] syzkaller1: entered allmulticast mode [ 363.143050][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.181002][ T8771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.339711][T14060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.501499][ T8781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.557435][T14124] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 364.657223][T14124] geneve1: entered allmulticast mode [ 364.754382][T14141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.163983][T14160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.376359][T14167] Cannot find add_set index 4 as target [ 365.477327][T14173] netlink: zone id is out of range [ 365.488088][T14173] netlink: zone id is out of range [ 365.500218][T14173] netlink: zone id is out of range [ 365.519112][T14173] netlink: zone id is out of range [ 365.549683][T14173] netlink: zone id is out of range [ 365.622512][T14178] IPv6: sit2: Disabled Multicast RS [ 365.657151][T14178] sit2: entered allmulticast mode [ 365.833080][T14179] IPv6: sit2: Disabled Multicast RS [ 365.869690][T14179] sit2: entered allmulticast mode [ 365.919594][T14198] __nla_validate_parse: 4 callbacks suppressed [ 365.919617][T14198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2223'. [ 366.179959][T14201] veth11: entered promiscuous mode [ 366.224786][T14207] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2227'. [ 366.278269][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 366.327035][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2225'. [ 366.425287][T14219] x_tables: duplicate underflow at hook 2 [ 366.517398][T14227] Cannot find add_set index 46338 as target [ 366.612694][T14231] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 366.768860][T14231] bond10: entered promiscuous mode [ 366.802204][T14231] 8021q: adding VLAN 0 to HW filter on device bond10 [ 366.806526][T14237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2235'. [ 366.836274][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 366.854538][T14231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2234'. [ 367.131076][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2238'. [ 367.241749][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2241'. [ 367.274090][T14249] bond7: entered promiscuous mode [ 367.297774][T14249] 8021q: adding VLAN 0 to HW filter on device bond7 [ 367.309403][ T5643] block nbd1: Receive control failed (result -1) [ 367.534369][T14265] [ 367.536775][T14265] ====================================================== [ 367.543839][T14265] WARNING: possible circular locking dependency detected [ 367.550943][T14265] syzkaller #0 Not tainted [ 367.555570][T14265] ------------------------------------------------------ [ 367.562627][T14265] syz.4.2240/14265 is trying to acquire lock: [ 367.568731][T14265] ffffffff8ea85540 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 367.578452][T14265] [ 367.578452][T14265] but task is already holding lock: [ 367.585859][T14265] ffff8880500e1d60 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 367.596764][T14265] [ 367.596764][T14265] which lock already depends on the new lock. [ 367.596764][T14265] [ 367.607205][T14265] [ 367.607205][T14265] the existing dependency chain (in reverse order) is: [ 367.616785][T14265] [ 367.616785][T14265] -> #7 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}: [ 367.625008][T14265] lock_sock_nested+0x41/0x100 [ 367.630438][T14265] mptcp_subflow_create_socket+0x142/0x800 [ 367.636836][T14265] __mptcp_nmpc_sk+0x155/0x790 [ 367.642233][T14265] mptcp_bind+0xab/0x1d0 [ 367.647025][T14265] __sys_bind+0x2e3/0x410 [ 367.652050][T14265] __x64_sys_bind+0x7a/0x90 [ 367.657114][T14265] do_syscall_64+0x174/0x580 [ 367.662310][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.668788][T14265] [ 367.668788][T14265] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 367.676559][T14265] lock_sock_nested+0x41/0x100 [ 367.681880][T14265] inet_shutdown+0x6a/0x390 [ 367.687025][T14265] nbd_mark_nsock_dead+0x2e9/0x560 [ 367.692885][T14265] recv_work+0x1c2e/0x1d40 [ 367.697856][T14265] process_scheduled_works+0xb5d/0x1860 [ 367.703983][T14265] worker_thread+0xa53/0xfc0 [ 367.709124][T14265] kthread+0x389/0x470 [ 367.713741][T14265] ret_from_fork+0x514/0xb70 [ 367.718916][T14265] ret_from_fork_asm+0x1a/0x30 [ 367.724256][T14265] [ 367.724256][T14265] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 367.732002][T14265] __mutex_lock+0x1a3/0x1550 [ 367.737184][T14265] nbd_queue_rq+0x37b/0x1100 [ 367.742335][T14265] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 367.748531][T14265] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 367.755456][T14265] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 367.761996][T14265] blk_mq_run_hw_queue+0x348/0x4f0 [ 367.767661][T14265] blk_mq_dispatch_list+0xd16/0xe10 [ 367.773408][T14265] blk_mq_flush_plug_list+0x48d/0x570 [ 367.779338][T14265] __blk_flush_plug+0x3ed/0x4d0 [ 367.784829][T14265] __submit_bio+0x28d/0x580 [ 367.789886][T14265] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 367.796071][T14265] block_read_full_folio+0x599/0x830 [ 367.801941][T14265] filemap_read_folio+0x137/0x3b0 [ 367.807558][T14265] do_read_cache_folio+0x358/0x590 [ 367.813224][T14265] read_part_sector+0xb6/0x2b0 [ 367.818629][T14265] adfspart_check_ICS+0xb1/0x960 [ 367.824126][T14265] bdev_disk_changed+0x817/0x1770 [ 367.829705][T14265] blkdev_get_whole+0x380/0x510 [ 367.835173][T14265] bdev_open+0x31e/0xd30 [ 367.839962][T14265] blkdev_open+0x470/0x610 [ 367.844936][T14265] do_dentry_open+0x822/0x13a0 [ 367.850275][T14265] vfs_open+0x3b/0x340 [ 367.854888][T14265] path_openat+0x2e08/0x3860 [ 367.860126][T14265] do_file_open+0x23e/0x4a0 [ 367.865186][T14265] do_sys_openat2+0x113/0x200 [ 367.870415][T14265] __x64_sys_openat+0x138/0x170 [ 367.875820][T14265] do_syscall_64+0x174/0x580 [ 367.880967][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.887500][T14265] [ 367.887500][T14265] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 367.894753][T14265] __mutex_lock+0x1a3/0x1550 [ 367.899895][T14265] nbd_queue_rq+0xc6/0x1100 [ 367.904958][T14265] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 367.911056][T14265] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 367.917949][T14265] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 367.924490][T14265] blk_mq_run_hw_queue+0x348/0x4f0 [ 367.930151][T14265] blk_mq_dispatch_list+0xd16/0xe10 [ 367.935990][T14265] blk_mq_flush_plug_list+0x48d/0x570 [ 367.941924][T14265] __blk_flush_plug+0x3ed/0x4d0 [ 367.947338][T14265] __submit_bio+0x28d/0x580 [ 367.952404][T14265] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 367.958597][T14265] block_read_full_folio+0x599/0x830 [ 367.964432][T14265] filemap_read_folio+0x137/0x3b0 [ 367.970011][T14265] do_read_cache_folio+0x358/0x590 [ 367.975677][T14265] read_part_sector+0xb6/0x2b0 [ 367.981009][T14265] adfspart_check_ICS+0xb1/0x960 [ 367.986604][T14265] bdev_disk_changed+0x817/0x1770 [ 367.992195][T14265] blkdev_get_whole+0x380/0x510 [ 367.997682][T14265] bdev_open+0x31e/0xd30 [ 368.002477][T14265] blkdev_open+0x470/0x610 [ 368.007449][T14265] do_dentry_open+0x822/0x13a0 [ 368.012767][T14265] vfs_open+0x3b/0x340 [ 368.017390][T14265] path_openat+0x2e08/0x3860 [ 368.022547][T14265] do_file_open+0x23e/0x4a0 [ 368.027602][T14265] do_sys_openat2+0x113/0x200 [ 368.032846][T14265] __x64_sys_openat+0x138/0x170 [ 368.038261][T14265] do_syscall_64+0x174/0x580 [ 368.043403][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.049843][T14265] [ 368.049843][T14265] -> #3 (set->srcu){.+.+}-{0:0}: [ 368.057073][T14265] __synchronize_srcu+0xca/0x300 [ 368.062574][T14265] elevator_switch+0x1e8/0x7a0 [ 368.067893][T14265] elevator_change+0x2cc/0x450 [ 368.073213][T14265] elevator_set_default+0x36c/0x430 [ 368.079069][T14265] blk_register_queue+0x3e9/0x4e0 [ 368.084652][T14265] __add_disk+0x677/0xd50 [ 368.089539][T14265] add_disk_fwnode+0xfb/0x480 [ 368.094774][T14265] nbd_dev_add+0x72c/0xb50 [ 368.099748][T14265] nbd_init+0x168/0x1f0 [ 368.104610][T14265] do_one_initcall+0x250/0x870 [ 368.109935][T14265] do_initcall_level+0x104/0x190 [ 368.115511][T14265] do_initcalls+0x59/0xa0 [ 368.121352][T14265] kernel_init_freeable+0x2a6/0x3e0 [ 368.127222][T14265] kernel_init+0x1d/0x1d0 [ 368.132176][T14265] ret_from_fork+0x514/0xb70 [ 368.137329][T14265] ret_from_fork_asm+0x1a/0x30 [ 368.142654][T14265] [ 368.142654][T14265] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 368.150564][T14265] __mutex_lock+0x1a3/0x1550 [ 368.155805][T14265] elevator_change+0x1b3/0x450 [ 368.161125][T14265] elevator_set_none+0xb5/0x140 [ 368.166576][T14265] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 368.172989][T14265] nbd_start_device+0x17f/0xb10 [ 368.178415][T14265] nbd_genl_connect+0x165b/0x1cf0 [ 368.184003][T14265] genl_family_rcv_msg_doit+0x22a/0x330 [ 368.190205][T14265] genl_rcv_msg+0x61c/0x7a0 [ 368.195275][T14265] netlink_rcv_skb+0x232/0x4b0 [ 368.200678][T14265] genl_rcv+0x28/0x40 [ 368.205212][T14265] netlink_unicast+0x75c/0x8e0 [ 368.210533][T14265] netlink_sendmsg+0x813/0xb40 [ 368.215865][T14265] ____sys_sendmsg+0x972/0x9f0 [ 368.221173][T14265] ___sys_sendmsg+0x2a5/0x360 [ 368.226393][T14265] __x64_sys_sendmsg+0x1bd/0x2a0 [ 368.231901][T14265] do_syscall_64+0x174/0x580 [ 368.237053][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.243504][T14265] [ 368.243504][T14265] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 368.252216][T14265] blk_alloc_queue+0x546/0x680 [ 368.257630][T14265] __blk_mq_alloc_disk+0x197/0x390 [ 368.263294][T14265] nbd_dev_add+0x499/0xb50 [ 368.268272][T14265] nbd_init+0x168/0x1f0 [ 368.272988][T14265] do_one_initcall+0x250/0x870 [ 368.278306][T14265] do_initcall_level+0x104/0x190 [ 368.283878][T14265] do_initcalls+0x59/0xa0 [ 368.288763][T14265] kernel_init_freeable+0x2a6/0x3e0 [ 368.294525][T14265] kernel_init+0x1d/0x1d0 [ 368.299407][T14265] ret_from_fork+0x514/0xb70 [ 368.304549][T14265] ret_from_fork_asm+0x1a/0x30 [ 368.309876][T14265] [ 368.309876][T14265] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 368.317114][T14265] __lock_acquire+0x15a5/0x2cf0 [ 368.322631][T14265] lock_acquire+0x106/0x350 [ 368.327678][T14265] fs_reclaim_acquire+0x71/0x100 [ 368.333262][T14265] __kmalloc_cache_noprof+0x40/0x660 [ 368.339104][T14265] ref_tracker_alloc+0x15a/0x4c0 [ 368.344667][T14265] get_net_track+0x16e/0x230 [ 368.349987][T14265] sk_net_refcnt_upgrade+0xb2/0x130 [ 368.355733][T14265] mptcp_subflow_create_socket+0x32b/0x800 [ 368.362092][T14265] __mptcp_nmpc_sk+0x155/0x790 [ 368.367411][T14265] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 368.373862][T14265] genl_family_rcv_msg_doit+0x22a/0x330 [ 368.379955][T14265] genl_rcv_msg+0x61c/0x7a0 [ 368.385108][T14265] netlink_rcv_skb+0x232/0x4b0 [ 368.390475][T14265] genl_rcv+0x28/0x40 [ 368.395012][T14265] netlink_unicast+0x75c/0x8e0 [ 368.400334][T14265] netlink_sendmsg+0x813/0xb40 [ 368.405834][T14265] ____sys_sendmsg+0x972/0x9f0 [ 368.411139][T14265] ___sys_sendmsg+0x2a5/0x360 [ 368.416362][T14265] __x64_sys_sendmsg+0x1bd/0x2a0 [ 368.421862][T14265] do_syscall_64+0x174/0x580 [ 368.427003][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.433448][T14265] [ 368.433448][T14265] other info that might help us debug this: [ 368.433448][T14265] [ 368.443694][T14265] Chain exists of: [ 368.443694][T14265] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1 [ 368.443694][T14265] [ 368.456853][T14265] Possible unsafe locking scenario: [ 368.456853][T14265] [ 368.464325][T14265] CPU0 CPU1 [ 368.469709][T14265] ---- ---- [ 368.475098][T14265] lock(k-sk_lock-AF_INET6/1); [ 368.479982][T14265] lock(sk_lock-AF_INET6); [ 368.487056][T14265] lock(k-sk_lock-AF_INET6/1); [ 368.494468][T14265] lock(fs_reclaim); [ 368.498488][T14265] [ 368.498488][T14265] *** DEADLOCK *** [ 368.498488][T14265] [ 368.506657][T14265] 4 locks held by syz.4.2240/14265: [ 368.511891][T14265] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 368.520142][T14265] #1: ffffffff8fe38460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 368.529158][T14265] #2: ffff88805473dba0 (msk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 368.540014][T14265] #3: ffff8880500e1d60 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800 [ 368.551286][T14265] [ 368.551286][T14265] stack backtrace: [ 368.557218][T14265] CPU: 1 UID: 0 PID: 14265 Comm: syz.4.2240 Not tainted syzkaller #0 PREEMPT(full) [ 368.557247][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.557270][T14265] Call Trace: [ 368.557279][T14265] [ 368.557291][T14265] dump_stack_lvl+0xe8/0x150 [ 368.557315][T14265] print_circular_bug+0x2e1/0x300 [ 368.557343][T14265] check_noncircular+0x12e/0x150 [ 368.557369][T14265] __lock_acquire+0x15a5/0x2cf0 [ 368.557389][T14265] ? check_noncircular+0xda/0x150 [ 368.557415][T14265] ? lockdep_unlock+0x5d/0xd0 [ 368.557430][T14265] ? __lock_acquire+0x146e/0x2cf0 [ 368.557451][T14265] ? __kmalloc_cache_noprof+0x40/0x660 [ 368.557477][T14265] lock_acquire+0x106/0x350 [ 368.557494][T14265] ? __kmalloc_cache_noprof+0x40/0x660 [ 368.557526][T14265] fs_reclaim_acquire+0x71/0x100 [ 368.557553][T14265] ? __kmalloc_cache_noprof+0x40/0x660 [ 368.557578][T14265] __kmalloc_cache_noprof+0x40/0x660 [ 368.557610][T14265] ? ref_tracker_alloc+0x15a/0x4c0 [ 368.557631][T14265] ? rcu_is_watching+0x15/0xb0 [ 368.557653][T14265] ref_tracker_alloc+0x15a/0x4c0 [ 368.557675][T14265] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 368.557694][T14265] ? ref_tracker_free+0x522/0x840 [ 368.557715][T14265] ? __pfx_ref_tracker_free+0x10/0x10 [ 368.557735][T14265] ? sk_net_refcnt_upgrade+0x8c/0x130 [ 368.557752][T14265] ? mptcp_subflow_create_socket+0x32b/0x800 [ 368.557773][T14265] ? __mptcp_nmpc_sk+0x155/0x790 [ 368.557793][T14265] ? mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 368.557822][T14265] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 368.557847][T14265] ? net_passive_dec+0x177/0x250 [ 368.557956][T14265] ? __pfx_net_passive_dec+0x10/0x10 [ 368.557983][T14265] get_net_track+0x16e/0x230 [ 368.558012][T14265] sk_net_refcnt_upgrade+0xb2/0x130 [ 368.558030][T14265] mptcp_subflow_create_socket+0x32b/0x800 [ 368.558055][T14265] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 368.558079][T14265] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.558105][T14265] ? lock_sock_nested+0x6a/0x100 [ 368.558129][T14265] __mptcp_nmpc_sk+0x155/0x790 [ 368.558152][T14265] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 368.558172][T14265] ? mptcp_pm_nl_add_addr_doit+0xdc7/0x1420 [ 368.558203][T14265] ? __local_bh_enable_ip+0xd0/0x130 [ 368.558231][T14265] mptcp_pm_nl_add_addr_doit+0xe25/0x1420 [ 368.558266][T14265] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 368.558311][T14265] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 368.558335][T14265] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 368.558362][T14265] genl_family_rcv_msg_doit+0x22a/0x330 [ 368.558384][T14265] ? __asan_memcpy+0x40/0x70 [ 368.558419][T14265] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 368.558446][T14265] ? bpf_lsm_capable+0x9/0x20 [ 368.558473][T14265] ? security_capable+0x7e/0x2c0 [ 368.558541][T14265] genl_rcv_msg+0x61c/0x7a0 [ 368.558565][T14265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.558591][T14265] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 368.558620][T14265] ? __pfx_ref_tracker_free+0x10/0x10 [ 368.558645][T14265] netlink_rcv_skb+0x232/0x4b0 [ 368.558673][T14265] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.558694][T14265] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.558728][T14265] ? down_read+0x270/0x2e0 [ 368.558747][T14265] ? genl_rcv+0xd/0x40 [ 368.558767][T14265] genl_rcv+0x28/0x40 [ 368.558785][T14265] netlink_unicast+0x75c/0x8e0 [ 368.558815][T14265] netlink_sendmsg+0x813/0xb40 [ 368.558847][T14265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.558876][T14265] ? aa_sock_msg_perm+0xf1/0x1b0 [ 368.558952][T14265] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.558979][T14265] ____sys_sendmsg+0x972/0x9f0 [ 368.558996][T14265] ? __might_fault+0xaf/0x130 [ 368.559027][T14265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.559047][T14265] ? import_iovec+0x73/0xa0 [ 368.559107][T14265] ___sys_sendmsg+0x2a5/0x360 [ 368.559123][T14265] ? __lock_acquire+0x6b5/0x2cf0 [ 368.559144][T14265] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.559163][T14265] ? futex_wake+0x4ac/0x580 [ 368.559209][T14265] ? __fget_files+0x2a/0x420 [ 368.559231][T14265] ? __fget_files+0x3a0/0x420 [ 368.559257][T14265] __x64_sys_sendmsg+0x1bd/0x2a0 [ 368.559275][T14265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.559296][T14265] ? rcu_is_watching+0x15/0xb0 [ 368.559321][T14265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.559339][T14265] do_syscall_64+0x174/0x580 [ 368.559358][T14265] ? trace_irq_disable+0x3b/0x140 [ 368.559390][T14265] ? clear_bhb_loop+0x40/0x90 [ 368.559410][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.559428][T14265] RIP: 0033:0x7f6c3b19ce59 [ 368.559446][T14265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.559462][T14265] RSP: 002b:00007f6c3bff4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.559482][T14265] RAX: ffffffffffffffda RBX: 00007f6c3b416090 RCX: 00007f6c3b19ce59 [ 368.559496][T14265] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000e [ 368.559508][T14265] RBP: 00007f6c3b232d6f R08: 0000000000000000 R09: 0000000000000000 [ 368.559519][T14265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.559530][T14265] R13: 00007f6c3b416128 R14: 00007f6c3b416090 R15: 00007fff59d5e3b8 [ 368.559552][T14265]