last executing test programs: 3m52.125627667s ago: executing program 3 (id=3212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0xfdfdffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010a000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="29b000004a04000008001b000000000014001680100001800c00090009000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x80000001, @mcast2, 0x4}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYBLOB="c986"], 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x0) 3m47.449974294s ago: executing program 3 (id=3234): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r4, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) 3m34.322388403s ago: executing program 3 (id=3247): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x200042, 0x0, 0x3}, 0x10) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x40000000015, 0x805, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0) getsockopt(r5, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xc21000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000008", @ANYRES16=0x0, @ANYBLOB="080028bd7000fbdbdf2536000000"], 0x14}}, 0x20000000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="040028bd00000000df9a09030000"], 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x8851) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000001200038e79090082ffff0000000000000000000000000000000024c63a33c670fe80000000000000000000000000001000"/66], 0x42) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bind$bt_hci(r1, &(0x7f00000005c0)={0x1f, 0x2, 0x2}, 0x6) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000280), &(0x7f0000000240)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m30.257992844s ago: executing program 3 (id=3260): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104e0000000000630a0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'dvmrp0\x00', @local}) 3m29.481278164s ago: executing program 3 (id=3264): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x501, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) sendmsg$alg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44005) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xa5, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) 3m28.336734871s ago: executing program 4 (id=3272): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37}, 0x28) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x1403, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) 3m28.225553589s ago: executing program 4 (id=3273): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 3m27.376923154s ago: executing program 4 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r3, 0x4}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40) 3m26.463354229s ago: executing program 4 (id=3275): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 3m26.277490926s ago: executing program 4 (id=3276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_xfrm(0x10, 0x3, 0x6) 3m26.119959692s ago: executing program 3 (id=3278): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {0xfff3}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x12b88}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0xff000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048848}, 0xc884) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r11, 0x2}, &(0x7f0000001100)=0x8) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r14}}, 0x18}}, 0x4090) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r11, 0xffffe13d}, &(0x7f0000000300)=0x8) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x20}], 0x1}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) 3m26.030703391s ago: executing program 4 (id=3279): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x8, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x5, 0x3}]}]}, 0x13c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r7, 0x801054db, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r6}, &(0x7f0000000300)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0xe4, 0x10, 0x40d, 0x70bd2d, 0x1ffffdfc, {0x0, 0x0, 0x0, r10, 0x60046}, [@IFLA_AF_SPEC={0xc4, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x10}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xae}]}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xa5}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_MPLS={0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x64, r13, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x4040) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) 3m10.871209193s ago: executing program 32 (id=3278): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {0xfff3}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x12b88}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0xff000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048848}, 0xc884) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r11, 0x2}, &(0x7f0000001100)=0x8) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x18, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r14}}, 0x18}}, 0x4090) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r11, 0xffffe13d}, &(0x7f0000000300)=0x8) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r15, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x20}], 0x1}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) 3m10.758547672s ago: executing program 33 (id=3279): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x8, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x5, 0x3}]}]}, 0x13c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r7, 0x801054db, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r6}, &(0x7f0000000300)=0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0xe4, 0x10, 0x40d, 0x70bd2d, 0x1ffffdfc, {0x0, 0x0, 0x0, r10, 0x60046}, [@IFLA_AF_SPEC={0xc4, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x3a}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x10}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xae}]}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xa5}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_MPLS={0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x64, r13, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x4040) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) 2.329402208s ago: executing program 5 (id=4428): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8a800, 0x0) close(r1) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x200, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1000}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x9}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x1}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}]}}]}, 0x50}}, 0x8000) (async) sendto$packet(r4, &(0x7f0000000240)="bad33075218151db00316f3a277f953286ddd1dc9119f992e83de525e4a40e81692d09dc6b6b0ef1", 0x28, 0x22008001, &(0x7f0000000080)={0x11, 0x88a8, r7, 0x1, 0xda, 0x6, @multicast}, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 32) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket(0x25, 0x5, 0x4) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2.13318515s ago: executing program 5 (id=4433): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001b80)={{0x0, 0x8, 0x7, 0x5, 0x7, 0x6, 0x1, 0x42de1e82, 0x58bf, 0x40, 0xffffffff, 0x8, 0xffff, 0x4, 0x1}, 0x18, [0x0, 0x0, 0x0]}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x9a, 0xa1, &(0x7f00000003c0)="37bad1c3c425e2a8ef3dac559c4a992c100a7aefff57f339c7d20b24ec61cc553b0efc201031c39cdecfe41b1d38828523fa2161e5dd5ef8432ff73ea9359eeb68b2747a6e059b6a9d2a97821ba3d31b96f6ac12f8d903a5a0c79b9dd75f3314711bad63814f907a88200c88ba6f61965fce766252806b11d757418423e840a64180fc98acf0efd3ad5cd3e81d18ae3257d7aab6e32d64a6c438", &(0x7f0000000140)=""/161, 0xffff0811, 0x0, 0xa2, 0x6f, &(0x7f0000000540)="f3a78169e1028eff3f4f6049753aac3f21ba5fb8c4aec89bbc73fb9b492ed8a8905b660a60f539f676cad6ed2c3087d1596ad69055e0d24eeaae239c831198449d39110c49fabcbe643983702d25b730eb44084747148e38d5ef648ee0fb684e2ab5fea9fd371552289b8ece9abff5b80aaecd22d8cd9fe36bc032c1d5aaa967395492653bce629b8ec87cbff63f70991d7cffd602b537a1e67374622759d61de887", &(0x7f0000000640)="ed451a1130237cf0d791691609834dc164e2a892d5dfef5ab8c1a58a2687f02ff3c649d0c1480bb85812c4af86a80b0a1ce317619e2f0fd1b2ea9c950dd452daaa273847be930188253e57e73edf5392f5a0098d7b8f6379379ae9a4ac6dde6d2d8b200bd9cb9cece85b58a3cc1769", 0x0, 0x0, 0x8}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x7, 0x4, 0x4c8, 0x0, 0x0, 0x2d0, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010100, 0xff000000, 0xff000000, 0x0, 0x3, {@mac=@random="adb2ed4d9d9d", {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x3, 0xb, 0x3, 0xd, 0x7, 0x1, 'veth1_to_hsr\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x2}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:locale_t:s0\x00'}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0xffffff00, 0x4, 0xb, {@mac=@local, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x1, 0x8, 0x800, 0x9, 0x3, 0x8, 'vcan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0xa0}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="8a69ca1f79fb", @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000340)={'nat\x00', 0x0, 0x3, 0x6e, [0xfa, 0xf, 0x5, 0x9, 0x3, 0x7f], 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=""/110}, &(0x7f0000000100)=0x78) 1.999888752s ago: executing program 2 (id=4435): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) socket(0x9, 0x3, 0xa2f) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000040)={'wlan0\x00'}) 1.859248609s ago: executing program 2 (id=4437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x4, 0x5, 0x7}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 1.67086291s ago: executing program 1 (id=4439): unshare(0x26020400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) (async) unshare(0x20000) socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000280)={0xa, 0x0, 0xb6, @empty, 0x0, 0x2}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 1.575288203s ago: executing program 2 (id=4440): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80000000}, 0x10}, 0x94) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4f) (async) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000080a00000008000100", @ANYRES64], 0x1c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='gretap0\x00') (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x44}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48090}, 0x4008801) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x18, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) syz_emit_ethernet(0xc1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @random="59dbe31da42c", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @multicast, @rand_addr=0x64010101}}}}, 0x0) 1.550819805s ago: executing program 6 (id=4441): getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x819f, 0x2}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r0, 0x6, 0x1}, &(0x7f00000000c0)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x6, 0x3, 0x8}) bind$qrtr(r1, &(0x7f0000000140)={0x2a, 0x2, 0x1}, 0xc) write$rfkill(r1, &(0x7f0000000180)={0x6, 0x5, 0x2, 0x1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002240)={r1, 0x0, 0x8, 0x1000, &(0x7f00000001c0)="9e5ab404b6be3f49", &(0x7f0000000200)=""/4096, 0x3, 0x0, 0x3d, 0x1000, &(0x7f0000001200)="9277bbe780d904d8838bd06d077470d8c6a0f9299dc215ce2f1f9f473bddb2e1663e25227d623ce7d10caee7f20b01629090924f44ed265201cbfa3daa", &(0x7f0000001240)="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", 0x4, 0x0, 0x956}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000023c0)={@map=r1, 0x14, 0x0, 0x6c6, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000002300), &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002380)=[0x0, 0x0]}, 0x40) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000002400)={0xc1c4, 'syz0\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000002440)=0x3, 0x4) unshare(0xc040980) unshare(0x20200) unshare(0xbd5ab7f33821a178) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000002480)={0x0, 0x1000000000, 0x0, [0x447, 0x2, 0x2, 0x0, 0x6], [0x6, 0x2, 0x70, 0x3fc, 0x8, 0x5, 0x80000001, 0x3b83, 0x1, 0xd07, 0x401, 0x0, 0x14f92ea4, 0x800, 0xb, 0x6, 0x101, 0x8, 0x10, 0x7f, 0x9, 0x0, 0x4, 0x9, 0x8, 0x14, 0x2, 0x10001, 0x4, 0xffffffffffff1500, 0x5699, 0x6, 0x19b, 0x0, 0x4, 0x8000000000000001, 0x8, 0x4, 0x5, 0x4, 0x6bc, 0x100, 0x4, 0x7, 0x5, 0x6, 0x100, 0xffffffffffff7fff, 0x8, 0x9, 0x0, 0x0, 0x0, 0x9, 0x9, 0x10001, 0x83, 0x0, 0x96, 0x5, 0x3, 0x0, 0xf, 0x72, 0x277, 0x9, 0x0, 0xb9a, 0x5, 0x9, 0x7, 0x8000000000000001, 0x2, 0xf75, 0x1, 0x7, 0x6, 0x6, 0xffffffff, 0x2, 0xffffffffffff3396, 0x5c8b, 0x400, 0x4, 0x7f3b, 0x8, 0xffff, 0x9, 0x8000, 0x4, 0x3, 0x400, 0x5, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0xe9, 0x7, 0x3, 0x9c, 0x9, 0x0, 0x4, 0x2, 0xf0c, 0x7, 0x8, 0x9, 0x3, 0x0, 0xfffffffffffffffd, 0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x5, 0x2, 0xd]}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000028c0)={r3, 0x3ff, 0x5b, 0x1}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000002cc0), &(0x7f0000002d00)=0x4) unshare(0x50000) bpf$TOKEN_CREATE(0x24, &(0x7f0000002d40)={0x0, r1}, 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000002d80)='netdevsim0\x00', 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000002dc0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000002fc0)={&(0x7f0000002e00), 0xc, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x90, r5, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70008, {0x10, 0x5, 0x3, 0x5}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x3800000, {0x9, 0x80, 0x648f, 0xfcf0}}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac01}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x204b}, @NL80211_ATTR_PMK={0x26, 0xfe, "9e809c5e2e83bdfc1bad5c4385b210924ac3e9cf950dce1c86b64c8961dd80748fd6"}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x90}}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000003000)={0x0, 0xd23d, 0x8c57}, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000003040)) socket$nl_route(0x10, 0x3, 0x0) accept4$tipc(r1, 0x0, &(0x7f0000003080), 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$XFS_IOC_FSCOUNTS(r7, 0x80205871, &(0x7f00000030c0)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000003100)={0x1, 'veth0\x00', {}, 0x9}) 1.458112708s ago: executing program 0 (id=4442): r0 = socket$inet(0x10, 0x3, 0x81) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x36}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000200)=""/21, &(0x7f0000000240)=0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@can_delroute={0x34, 0x19, 0x400, 0x70bd27, 0x25dfdbfc, {0x1d, 0x1, 0x3}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "274e32b73b71080b"}, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) (async) r4 = socket$packet(0x11, 0x3, 0x300) connect(r4, &(0x7f0000000280)=@rc={0x1f, @any, 0x4}, 0x80) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[{0x0, 0xe, 0xbf, 0x3}, {0x0, 0x5, 0x5, 0x10}, {0x3, 0x0, 0x80, 0x8}, {0x5, 0x1}, {0xd5, 0x2, 0x3, 0x6eef}, {0x6, 0x4, 0x3, 0x10}, {0x0, 0x0, 0x2, 0x2}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x7, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x74a849580afd22a, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdc9}, 0x48) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x14, 0x6, 0x7) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r5) sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf252b0000000c0005000201aaaaaaaaaaaa08000200", @ANYRES64=r6], 0x28}, 0x1, 0x0, 0x0, 0x10800}, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x1000000, 0x4) 1.457354566s ago: executing program 2 (id=4443): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000017c0)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x108, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd9, 0x66, 0x0, 0x1, [@nested={0x24, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.456565543s ago: executing program 5 (id=4444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4815}, 0x20000040) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = accept$unix(r3, &(0x7f00000002c0), &(0x7f0000000140)=0x6e) recvmmsg(r6, &(0x7f0000003040)=[{{&(0x7f0000000540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/249, 0xf9}], 0x1, &(0x7f00000005c0)=""/9, 0x9}, 0x6}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000740)=""/42, 0x2a}], 0x2, &(0x7f0000000980)=""/237, 0xed}, 0x3ff}, {{&(0x7f0000000a80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/1, 0x1}], 0x1, &(0x7f0000000b80)=""/78, 0x4e}, 0x7f}, {{&(0x7f0000000c00)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000c80)=""/29, 0x1d}, {&(0x7f0000000cc0)=""/203, 0xcb}, {&(0x7f0000000dc0)=""/144, 0x90}, {&(0x7f0000000e80)=""/246, 0xf6}, {&(0x7f0000000f80)=""/55, 0x37}, {&(0x7f0000000fc0)=""/82, 0x52}, {&(0x7f0000001040)=""/128, 0x80}, {&(0x7f00000010c0)=""/21, 0x15}, {&(0x7f0000001100)=""/156, 0x9c}], 0x9, &(0x7f0000001280)=""/19, 0x13}, 0x9}, {{&(0x7f00000012c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001340)=""/185, 0xb9}, {&(0x7f0000001400)=""/36, 0x24}, {&(0x7f0000001440)=""/111, 0x6f}, {&(0x7f00000014c0)=""/77, 0x4d}], 0x4, &(0x7f0000001580)=""/4096, 0x1000}, 0x10001}, {{&(0x7f0000002580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002600)=""/124, 0x7c}, {&(0x7f0000002680)=""/104, 0x68}, {&(0x7f0000002700)=""/239, 0xef}, {&(0x7f0000002800)=""/71, 0x47}, {&(0x7f0000002880)=""/245, 0xf5}, {&(0x7f0000002980)=""/252, 0xfc}, {&(0x7f0000002a80)=""/222, 0xde}, {&(0x7f0000002b80)=""/171, 0xab}, {&(0x7f0000002c40)=""/99, 0x63}], 0x9, &(0x7f0000002d80)=""/221, 0xdd}, 0x9}, {{&(0x7f0000002e80)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002f00)=""/141, 0x8d}], 0x1, &(0x7f0000003000)=""/5, 0x5}, 0x7}], 0x7, 0x40000020, &(0x7f0000003200)={0x0, 0x3938700}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xcac, 0x0, 0x0, 0x9, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x11, 0x8, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="f10013007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, &(0x7f0000003240)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@default, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000044000900000000aae8feffd005"], 0x1c}}, 0x24000044) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000b7a7ffea2b908c080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100908fc5eb0007010000f8ff13ffbfa40000100000000704c611abcd14490000f0ffffffb70200000800"/98, @ANYRESOCT=r8, @ANYBLOB="0000000000000000b7ed00000800000085000000a00000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', r5, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.379830654s ago: executing program 6 (id=4445): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES64=r2, @ANYRESHEX=r1], 0x38}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000080)=[{0x94, 0x0, 0x4}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x14b841, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x14b841, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'macvtap0\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'veth0_vlan\x00', @broadcast}) write$tun(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x195) (async) write$tun(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x195) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) getsockopt$ax25_int(r6, 0x101, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) getsockopt$ax25_int(r6, 0x101, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$can_j1939(r0, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfd}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000580)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000000c0)="734fdd19fdb42a34774b2156abba92a7a7d71053ae3fc24c676c4dce5d690c", 0x1f}], 0x1, &(0x7f00000008c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}}, 0x18) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1000, 0x4) getsockname$netlink(r1, &(0x7f0000000500), &(0x7f0000000540)=0xc) sendmmsg$inet(r7, &(0x7f0000000000), 0x0, 0x0) accept4(r3, &(0x7f0000000600)=@ax25={{0x3, @null}, [@remote, @bcast, @default, @null, @rose, @default, @null, @null]}, &(0x7f0000000280)=0x80, 0x800) socket$inet6(0xa, 0x80002, 0x88) (async) socket$inet6(0xa, 0x80002, 0x88) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003380)) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003380)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000033c0)=0x10001, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1.339990417s ago: executing program 1 (id=4446): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}}, 0x0, 0x32}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)="56dcc561bfe6520bc5bb1d62a58e55169c931288082e7fb4fe6396c45057dcb8", &(0x7f0000000040)=""/39, 0x4}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) socket(0xa, 0xa, 0xfffff1fa) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x0) listen(r1, 0x4) 1.269638636s ago: executing program 0 (id=4447): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x6}, 0x94) 1.269154116s ago: executing program 2 (id=4448): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052cbd7000fdffffff02181000", @ANYRES32=r1, @ANYBLOB="08000100ac1e010108000200e000000207004100ac14141e08000400e0000001080009000000010008000200"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30c33d133}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095", @ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x1010, r2, 0x524da000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r5, 0x0, 0x0, 0x20000840, &(0x7f0000001480)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x81}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0xa}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x44000001}, 0x200080c4) r6 = accept$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) bind$packet(r6, &(0x7f0000000280)={0x11, 0x7, r3, 0x1, 0x9b, 0x6, @local}, 0x14) 1.23786779s ago: executing program 5 (id=4449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r6, &(0x7f0000005280)=[{{&(0x7f00000003c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)=""/44, 0x2c}, {&(0x7f0000000480)=""/210, 0xd2}], 0x2, &(0x7f00000005c0)=""/210, 0xd2}}, {{&(0x7f00000006c0)=@ax25={{}, [@null, @default, @default, @netrom, @netrom, @remote, @netrom, @rose]}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/210, 0xd2}, {&(0x7f0000000840)=""/181, 0xb5}, {&(0x7f0000000900)=""/186, 0xba}], 0x3}, 0x9}, {{&(0x7f0000000a00)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/252, 0xfc}], 0x1}}, {{&(0x7f0000000bc0)=@hci, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/207, 0xcf}], 0x2, &(0x7f0000001d80)=""/89, 0x59}, 0xbb2e}, {{&(0x7f0000001e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001e80)=""/95, 0x5f}, {&(0x7f0000001f00)=""/137, 0x89}, {&(0x7f0000001fc0)=""/12, 0xc}, {&(0x7f0000002000)=""/253, 0xfd}, {&(0x7f0000002100)=""/191, 0xbf}], 0x5, &(0x7f0000002240)=""/183, 0xb7}, 0x635}, {{&(0x7f0000002300)=@ieee802154, 0x80, &(0x7f0000002400)=[{&(0x7f0000002380)=""/99, 0x63}], 0x1, &(0x7f0000002440)}, 0xfff}, {{&(0x7f0000002480)=@rc, 0x80, &(0x7f0000002880)=[{&(0x7f0000002500)=""/137, 0x89}, {&(0x7f00000025c0)=""/110, 0x6e}, {&(0x7f0000002640)=""/179, 0xb3}, {&(0x7f0000002700)=""/213, 0xd5}, {&(0x7f0000002800)=""/90, 0x5a}], 0x5, &(0x7f0000002900)=""/70, 0x46}, 0xfffffbff}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002980)=""/150, 0x96}, {&(0x7f0000002a40)=""/254, 0xfe}, {&(0x7f0000002b40)=""/205, 0xcd}, {&(0x7f0000002c40)=""/59, 0x3b}, {&(0x7f0000002c80)=""/235, 0xeb}, {&(0x7f0000002d80)=""/235, 0xeb}, {&(0x7f0000002e80)=""/69, 0x45}], 0x7, &(0x7f0000002f80)=""/115, 0x73}, 0x7ff}, {{&(0x7f0000003000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/23, 0x17}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/194, 0xc2}], 0x4, &(0x7f0000005200)=""/98, 0x62}, 0x8}], 0x9, 0x10000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r8, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @broadcast, @empty}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r11, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, 0x0) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r12 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r13, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 1.137955632s ago: executing program 0 (id=4450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="2f462737b3c07dcc66e3b8850b44eadccec6b4d736870965e84f19b16b922ad74d1733d2f99902940476daabca27ab02082ab04dfcad20a910f9641f38e8c7577a27ac2a08b341a8b8d2482bd6a9d2891207e008c351ec076a1e30216170dea8140d87f9efb4695c70f558523c61150cc2a110afca051e5e7bf08431e763341ae586b074104463fbe00cb781313e5cf9c7a8d9174d1e8f77313b7719c43202b94d77c0"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2fefc040", @ANYRES16=r4, @ANYBLOB="0100010000000000000801000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5424c0008804800008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b200009801c000080060001000200000008000200ffffffff05000300000000000800050001000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r4, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x4c, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)={0xf00, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xffff, @empty, 0xb}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x77}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0xe70, 0x8, 0x0, 0x1, [{0x31c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cd2657691dbdbe65b3cfd3ad2c3110667590b48aa345eb58a3207181dea2645a"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x284, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x29}, 0x10001}}]}, {0x8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x51c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1b98add10ecb562feb28a27cbe94869d706c11de89a23298410dcdea423a3c0b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a541ff1cc00b6aaf397502b0898c7431229ecf96618c04de232151b5e7517651"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3a8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0xf9}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0ec945674b83115f0e9477533427ab3f7f15dab0e623cfa81ccdb04435026d05"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x5ac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x438, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x5e}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0x7}}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "72d818f9721dcc89287f0036f42c8236e67cc2a45d776ae965154916e3dac84e"}]}]}]}, 0xf00}, 0x1, 0x0, 0x0, 0x8000}, 0x4c004) 1.041604128s ago: executing program 1 (id=4451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0xa, r7, 0x36, r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 985.535184ms ago: executing program 6 (id=4452): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xe}, &(0x7f0000000080)=0x8) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a8020000180140003000000200000000000edff"], 0x40}}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x165, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x12f, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0x8, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37ada"}, {0x0, 0x1, "0000000500000000260004"}, {}, {0x0, 0x4, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2d"}, {0x2, 0x9, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a"}, {0x21, 0x6, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c8837473"}, {}, {0x0, 0x4, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e"}]}}}}}}, 0x0) (async) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) r6 = socket$inet6(0xa, 0x80000, 0x9) (rerun: 32) r7 = accept4(r6, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) close(0x3) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000280), 0x4) 865.070098ms ago: executing program 0 (id=4453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x600540, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local, @local, @val={@void, {0x8100, 0x6, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x100, @mcast2, 0x28000000}]}, &(0x7f0000000240)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x7d, &(0x7f00000009c0)=@assoc_value={r4, 0x3}, 0x8) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x101) r6 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80800) bind$phonet(r6, &(0x7f0000000180)={0x23, 0x4, 0x1, 0x10}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7fffffff, 0xed31, 0x200}) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(r0) 802.017108ms ago: executing program 2 (id=4454): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) shutdown(r1, 0x0) recvmmsg$unix(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x4) sendto$l2tp6(r1, &(0x7f0000000480)="9427ed6d6e21da0cd394c2b7f1dc7171dfb0e0a47c051ace1042c5acbb997bc601e051773acf212a39c92a0d4db447aa775780a764397cb3d70d9b2224bb78dd724e978430cfff2f6d64a69b1a8778956cc50959", 0x54, 0x890, &(0x7f00000001c0)={0xa, 0x0, 0x18, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000001d00)=[{{0x0, 0xfffffffffffffdac, &(0x7f0000000200)=[{&(0x7f0000000100)="5b32138f0b05c8a4c24025400789d6e24e8cad1c620ab12f874d6651c601cfaa9004ad3a6298b95f3e19b1ea3aebb7aa59c3376063ec56745adb134e56a85253d29785a52f70ca03cea4f66e59cbb4747c677e5edc6732a548f0712c6bce2fff31d6abeda4ec75162792af9ae9e0598016a95bd348889d5321d44bcab5a838e14bdd46e715cf72acc1b6b4045f635584a53602990fdd2b34362b476b3be14a085a", 0xa1}], 0x1, 0x0, 0x0, 0x4008000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0x28, 0x20008880}}], 0x2, 0x44054) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="3ced0000001000030400000000000000000000045d457086465bb0246b8629b4a0e0eb1ae0b596f293d20372f3adaafe99281d7285ac4727ab90cf78e871b9413aad78841a65daf967d8f5f81b37b60463b0129429d2ef25a97043352d80cd3f962f56e8b9362afca5d3c14fc88df89eb2c064691e6f2e1a3ab8efdce653c5a03febd0b0be31c3fed7d761fd78318eb866", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800b00010062726964676500000c0002800800050001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xd, 0x4, 0x1000000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8f}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x24000000) 732.480968ms ago: executing program 6 (id=4455): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="180000002a00010026bdf000fcdbdf020400220004000d80"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 594.571489ms ago: executing program 6 (id=4456): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) syz_emit_ethernet(0x7e, &(0x7f0000001180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@fragment={0x11, 0x0, 0xff, 0x0, 0x0, 0x4, 0x67}, @dstopts={0x32, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44010) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='vlan0\x00', 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000e0053ee0b02016f7000000080402"], 0x1c}}, 0x0) 549.25435ms ago: executing program 1 (id=4457): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x1d, &(0x7f0000000380), 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x1d, &(0x7f0000000380), 0x8) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 505.946288ms ago: executing program 0 (id=4458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtaction={0xfc, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0xe8, 0x1, [@m_ctinfo={0xe4, 0x11f, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffff000}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc1c}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x2, 0x5, 0x8001, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x6f, 0x6, "228de5308a1510efb44327cc3519c5191ceaed315e535a9892066a59ffd8d5bad37715e8c277a9601e738fa375cfe0b47364bdd4fdd63cc0fe43e754a1e430a25e753576842ecd6f436a733be7ccdd39c44b47eeb7d3c821d64df4ce308054673c75b66517f4d108147cf2"}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) (async, rerun: 64) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000013180)={0x0, 0x1, 0x6, @local}, 0x10) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000002940)={'syztnl2\x00', 0x0, 0x40, 0x7800, 0x21ae, 0x7ff, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}}) (async) syz_emit_ethernet(0x75, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000670000000000069078ac1414bbac1414aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000c8fd75a55cea55431a0df064535453f6f0b9378c3fad9bbbcf42a208000d74cfeb0000c75e46b1c0d4c5a14e8ce3e28fd727913a5d10640077167a00e7dc89"], 0x0) 398.314999ms ago: executing program 1 (id=4459): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r3, 0xf, 0xfab6, 0x2, 0x6, 0x80}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x64}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 205.191829ms ago: executing program 6 (id=4460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) (async) 100.380079ms ago: executing program 5 (id=4461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xa, 0x148, 0x120, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xb6, 0x8, [0xb, 0x24, 0x24, 0x19, 0x3e, 0x19, 0x31, 0x3b, 0x5, 0x40, 0x12, 0x33, 0x3b, 0x3f, 0x3b, 0x7], 0x0, 0x7fff, 0x1}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x67, 0x0, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x1, 0x81, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_emit_ethernet(0x125, &(0x7f0000000180)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x117, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x103, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100, @val=0x80}, "3bdf043a47851faada484115d3d6a21fd2df9137e6640fd0a3608cda724f3ee6d6c7467d8ac5cfab52c0de2d4b3d95edd2ddb7ad531ed2cfaa11711dceda32cd4eae9d3767556f615085c86a42b917f025d6ef74c2241c9cae46a1dd48147c0b03c8f57e6773a8e5753a45c95e511e74649c3b4ea9cf415f18ab7d61291cf5961a65e13e9a5cf0c3665cbe67436b288edc006878b0ab4a317b8d04071cf97bb6dcfa910fd354afb1a2ea85a22f825afe68176103cf57363db9b92731fd48e55acedf2dfcb3573c69ace21ebc684e3104b705b8a13f6d8bdeb62e323ab005d7cfb636edd4cb4fb503bab272f1984d9e83e40470"}}}}}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x400, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x4c}}, 0x44890) 98.620903ms ago: executing program 0 (id=4462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a280000000b0a01040000000000000000010000090900010073797a3100000000080004000000000214000000020a0102000000000000000000000009140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x40091}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000000000000000000000000000000000eb021973b0e21b58fa25e667f750e490a920d7079023ccbbe6bbb93bb9d8705d1f9bd37a5908ab093074bbe9864bdfc07b531c2f389faca06c8af812eac91f0cbf046afd49e6ea6f47a8b01"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r8, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) write$cgroup_subtree(r8, &(0x7f0000000340)={[{0x6, 'cpuacct'}, {0x2b, 'pids'}, {0x2d, 'cpuacct'}, {0x2d, 'memory'}, {0x2d, 'memory'}, {0x2b, 'cpuset'}, {0x2b, 'devices'}]}, 0x39) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20044000) 6.793956ms ago: executing program 5 (id=4463): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000380)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'dvmrp0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x4, 0x6, 0xb2, 0x5, 0x1, @mcast2, @private0, 0xed, 0x8000, 0x2, 0x1}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@deltclass={0x3c, 0x29, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0xf}, {0xa}, {0xf, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0xb3}}, @TCA_RATE={0x6, 0x5, {0xc3, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="1800000055003d0902000000fcdbdf25070000006d8de168937268156df872f24dae966b98818edc0ebeefa250d3c887a2726efef89c692b39af93a88c04b5e746ee7d777d061b87629f2da2f40e6d80ed2b1baf9b3118f70bcfd398e24f8a26b692d0925f98c49c75fb14f019dd3b84fc7f0f2d62f39cb2a0722a0ae6a2a20c13d7c7ba6c9d13fb2408f6c80a3a03c29b1b78f329f342a68e42f69f11e121dbbe86e4b71e3020f0954ef3b4c74d87c1d3fae73c2cedf20ed4f24b0289e3c0bd88eb2461d682824f0fffde5dc5b1e81ce2dd08a28f4468332df532da6feb11d28b0ad4", @ANYRES32=r4], 0x18}}, 0x4090) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/3434], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', r4, @fallback=0x7}, 0x94) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63", 0x8}], 0x1}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="110000006a"], 0xfe33) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r9, r10, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r11, 0x4) close(r11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_SET_OP_VERSION(r12, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) 0s ago: executing program 1 (id=4464): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x74}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaeaaffffffffff74ab00450001280000000000019078ac1e0001ffffffff0e0090787fff01fbfffffff30054271e"], 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0x20, 0x8, [0x0, 0x0, 0x2a10, 0xc, 0x5, 0x0, 0x0, 0xffffffff]}}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0xa}, 0x20) (async) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'ip6gre0\x00'}}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0) (async) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab", 0x1}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x20040001) (async) close(0x3) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="22bac3377cd27e4258f6d87bdc23fc2ebeb6f78574f840d5486705693f7828fbf08187a4deb6b408df339ee1d23d9f497b93dd95eea992cc189b05cc7f3ea6cffd0d9eacc56c8eee512e2130a2382e9e5074cf41b6b14fc7e1fb74dce479a83bb039ed86e0ea43d957d5bf8b45b685465a11b61d8a10e273e1e2349cc8a9c3cd5628215c423fd8021ab1368d65192f6cff7566a740bc46182bb8569fd013a2cf7cded635cabf501553a47c9f6ae65d"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) kernel console output (not intermixed with test programs): 44 bytes leftover after parsing attributes in process `syz.0.3140'. [ 407.179607][T17142] team0: Port device team_slave_0 added [ 407.206610][T17142] team0: Port device team_slave_1 added [ 407.306292][T17142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.316029][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.349203][T17142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.377356][T17142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.384820][T17142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.414329][T17142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.440608][T17249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3141'. [ 407.494810][T17142] hsr_slave_0: entered promiscuous mode [ 407.502511][T17142] hsr_slave_1: entered promiscuous mode [ 407.509479][T17142] debugfs: 'hsr0' already exists in 'hsr' [ 407.518421][T17142] Cannot create hsr debugfs directory [ 407.530940][T17254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.622629][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 407.843098][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3147'. [ 408.046030][T17142] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 408.098414][T17142] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 408.123485][T17142] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.141795][T17142] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 408.244289][T17142] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 408.265378][T17142] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 408.289616][T17142] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.313163][T17142] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 408.336559][T17296] netlink: 'syz.0.3153': attribute type 4 has an invalid length. [ 408.344929][T17296] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3153'. [ 408.414516][T17296] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3153'. [ 408.430432][T17142] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 408.451113][T17142] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 408.482155][T17142] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.504353][T17142] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 408.618886][T17142] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 408.663283][T17142] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 408.707766][T17142] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.735861][T17142] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 408.763330][ T5834] Bluetooth: hci4: command tx timeout [ 409.513685][T17142] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.549881][T17142] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.622723][T17142] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.716735][T17142] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.731713][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.783684][T17363] SET target dimension over the limit! [ 410.003698][T17142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.035601][T17375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.067412][T17382] netlink: 'syz.2.3173': attribute type 9 has an invalid length. [ 410.087506][T17142] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.187507][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.194810][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.247014][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.254295][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.842540][ T5834] Bluetooth: hci4: command tx timeout [ 410.923150][T17142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.029020][T17425] __nla_validate_parse: 12 callbacks suppressed [ 411.029045][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3181'. [ 411.053785][T17422] bond17: entered allmulticast mode [ 411.067863][T17426] bridge7: entered promiscuous mode [ 411.075998][T17426] bridge7: entered allmulticast mode [ 411.086492][T17426] bond17: (slave bridge7): Enslaving as an active interface with an up link [ 411.104153][T17425] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3181'. [ 411.118852][T17425] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3181'. [ 411.128966][T17425] ve: renamed from macvlan0 (while UP) [ 411.402092][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 411.410192][ C0] lec:lec_tx_timeout: lec0 [ 411.416819][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 411.511324][T17142] veth0_vlan: entered promiscuous mode [ 411.557436][T17142] veth1_vlan: entered promiscuous mode [ 411.593881][T17445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3186'. [ 411.609378][T17445] veth0_to_bridge: entered promiscuous mode [ 411.624417][T17445] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3186'. [ 411.636840][T17443] veth0_to_bridge: left promiscuous mode [ 411.737404][T17142] veth0_macvtap: entered promiscuous mode [ 411.771212][T17142] veth1_macvtap: entered promiscuous mode [ 411.824861][T17448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3188'. [ 411.861576][T17142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.874796][T17450] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3189'. [ 411.897045][T17142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.955898][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.972019][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.980795][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.007308][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.060209][T17455] : entered promiscuous mode [ 412.292484][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.355539][T17461] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3192'. [ 412.381915][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.389800][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.445721][T17472] netlink: 'syz.0.3195': attribute type 1 has an invalid length. [ 412.458082][T17470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.473398][T17470] bond0: (slave batadv0): Releasing backup interface [ 412.481220][T17470] batadv0 (unregistering): left promiscuous mode [ 412.488922][T17470] batadv0 (unregistering): left allmulticast mode [ 412.516877][T17468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'. [ 412.519641][T17475] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 412.652899][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.710520][T17481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3197'. [ 412.720974][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.931915][ T5834] Bluetooth: hci4: command tx timeout [ 413.283577][ T7465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.168192][T17144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.181756][T17144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.193664][T17144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 414.208960][T17144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.229280][T17144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.509632][T17503] bond1 (unregistering): Released all slaves [ 414.847701][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.000079][T17509] wg1 speed is unknown, defaulting to 1000 [ 415.219610][T17526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.226990][T17526] IPv6: NLM_F_CREATE should be set when creating new route [ 416.282092][T17144] Bluetooth: hci3: command tx timeout [ 416.435398][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 416.443493][ C0] lec:lec_tx_timeout: lec0 [ 416.459930][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 417.093757][T17527] __nla_validate_parse: 3 callbacks suppressed [ 417.093782][T17527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3210'. [ 417.258805][T17537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.421294][ T35] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.436622][ T35] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 60901 - 0 [ 417.588652][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3214'. [ 417.959934][T17509] chnl_net:caif_netlink_parms(): no params data found [ 417.969829][T17554] netlink: 'syz.4.3215': attribute type 3 has an invalid length. [ 418.053007][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.312354][T17509] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.337146][T17509] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.355572][T17509] bridge_slave_0: entered allmulticast mode [ 418.365532][T17144] Bluetooth: hci3: command tx timeout [ 418.386133][T17509] bridge_slave_0: entered promiscuous mode [ 418.407958][T17509] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.426287][T17509] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.448142][T17509] bridge_slave_1: entered allmulticast mode [ 418.469537][T17509] bridge_slave_1: entered promiscuous mode [ 418.605655][T17509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.675478][T17509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.853270][T17509] team0: Port device team_slave_0 added [ 418.898486][T17509] team0: Port device team_slave_1 added [ 419.087502][T17509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.109823][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.205087][T17509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.270063][T17509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.300307][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.410502][T17509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.843829][T17509] hsr_slave_0: entered promiscuous mode [ 419.871209][T17509] hsr_slave_1: entered promiscuous mode [ 419.916146][T17509] debugfs: 'hsr0' already exists in 'hsr' [ 419.933965][T17509] Cannot create hsr debugfs directory [ 419.965045][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3221'. [ 419.975899][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.259241][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3222'. [ 420.442730][T17144] Bluetooth: hci3: command tx timeout [ 420.852326][T17605] Cannot find set identified by id 0 to match [ 421.180471][ C0] sched: DL replenish lagged too much [ 421.485070][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 421.493388][ C0] lec:lec_tx_timeout: lec0 [ 421.514546][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 421.727946][ T35] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.781800][ T35] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 60901 - 0 [ 422.522971][T17144] Bluetooth: hci3: command tx timeout [ 423.805187][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.725412][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.323988][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 427.332051][ C0] lec:lec_tx_timeout: lec0 [ 427.348063][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 429.565032][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.487200][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.366802][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 432.375157][ C0] lec:lec_tx_timeout: lec0 [ 432.392096][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 432.936249][T17647] tunl0: mtu less than device minimum [ 432.994656][ T35] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.048246][ T35] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60901 - 0 [ 433.055666][ T7465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.770008][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'. [ 433.999910][T17680] syzkaller1: entered promiscuous mode [ 434.011421][T17680] syzkaller1: entered allmulticast mode [ 434.544477][ T7465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.941067][T17686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.325449][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.391269][ T35] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.435154][ T35] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60901 - 0 [ 437.117862][T17699] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 437.414664][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 437.422872][ C0] lec:lec_tx_timeout: lec0 [ 437.444811][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 437.853620][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3253'. [ 438.189643][T17721] netlink: 'syz.0.3258': attribute type 1 has an invalid length. [ 438.236988][T17721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.497104][T17721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.518046][T17721] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 438.531158][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.613711][T17721] bond3: (slave vcan1): Error -95 calling set_mac_address [ 438.781387][T17729] bridge_slave_0: left allmulticast mode [ 438.787531][T17729] bridge_slave_0: left promiscuous mode [ 438.842638][T17729] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.987808][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069d4bc00: rx timeout, send abort [ 439.023636][T17729] bridge_slave_1: left allmulticast mode [ 439.040124][T17729] bridge_slave_1: left promiscuous mode [ 439.064642][T17729] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.128799][T17729] bond0: (slave bond_slave_0): Releasing backup interface [ 439.243477][T17729] bond0: (slave bond_slave_1): Releasing backup interface [ 439.339248][T17729] team0: Port device team_slave_0 removed [ 439.393783][T17729] team0: Port device team_slave_1 removed [ 439.417917][T17729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.436325][T17729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.469774][T17729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.481088][T17729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.488871][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069d4b800: rx timeout, send abort [ 439.497899][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069d4bc00: abort rx timeout. Force session deactivation [ 439.553443][T17729] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 439.578120][T17743] netlink: 'syz.2.3262': attribute type 21 has an invalid length. [ 439.592809][T17743] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.986517][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807aeeb400: rx timeout, send abort [ 439.995446][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807aeeb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 440.013250][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069d4b800: abort rx timeout. Force session deactivation [ 440.365383][T17761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3267'. [ 440.643074][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3269'. [ 440.751135][T17771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.766224][T17771] netlink: 'syz.4.3270': attribute type 4 has an invalid length. [ 441.086293][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.588784][ T35] bridge_slave_1: left allmulticast mode [ 441.599361][ T35] bridge_slave_1: left promiscuous mode [ 441.606816][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.634176][ T35] ¾x9ÿ: left allmulticast mode [ 441.639320][ T35] ¾x9ÿ: left promiscuous mode [ 441.646018][ T35] bridge0: port 1(1¾x9ÿ) entered disabled state [ 442.074207][ T35] bond7 (unregistering): (slave ip6gre1): Releasing backup interface [ 442.227735][ T35] bond2 (unregistering): (slave vti0): Releasing backup interface [ 442.254950][ T35] vti0 (unregistering): left promiscuous mode [ 442.429537][ T35] bond5 (unregistering): (slave gretap2): Releasing active interface [ 442.457475][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 442.465854][ C0] lec:lec_tx_timeout: lec0 [ 442.483532][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 442.498380][ T35] bond16 (unregistering): (slave gretap3): Releasing active interface [ 443.808433][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.288690][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.844211][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.498039][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 447.506878][ C0] lec:lec_tx_timeout: lec0 [ 447.523745][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 450.043618][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.834218][ T35] bond17 (unregistering): (slave bridge7): Releasing backup interface [ 453.256720][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.271533][ T35] bond_slave_0: left promiscuous mode [ 453.277865][ T35] bond_slave_0: left allmulticast mode [ 453.298229][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.318298][ T35] bond_slave_1: left promiscuous mode [ 453.326432][ T35] bond_slave_1: left allmulticast mode [ 453.333277][ T35] bond0 (unregistering): Released all slaves [ 453.348368][ T35] bond1 (unregistering): Released all slaves [ 453.375889][ T35] bond2 (unregistering): Released all slaves [ 453.402856][ T35] bond3 (unregistering): Released all slaves [ 453.436985][ T35] bond4 (unregistering): Released all slaves [ 453.464085][ T35] bond5 (unregistering): Released all slaves [ 453.491050][ T35] bond6 (unregistering): Released all slaves [ 453.516892][ T35] bond7 (unregistering): Released all slaves [ 453.573761][ T35] bond8 (unregistering): Released all slaves [ 453.595167][ T35] bond9 (unregistering): Released all slaves [ 453.624668][ T35] bond10 (unregistering): (slave lo): Releasing backup interface [ 453.637775][ T35] bond10 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 453.684846][ T35] bond10 (unregistering): Released all slaves [ 453.725973][ T35] bond11 (unregistering): (slave vcan0): Releasing backup interface [ 453.740514][ T35] bond11 (unregistering): Released all slaves [ 453.767059][ T35] bond12 (unregistering): Released all slaves [ 453.807452][ T35] bond13 (unregistering): (slave veth0_to_bond): Releasing active interface [ 453.852804][ T35] bond13 (unregistering): (slave bond14): Releasing active interface [ 453.866256][ T35] bond13 (unregistering): Released all slaves [ 453.896614][ T35] bond14 (unregistering): Released all slaves [ 453.897842][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6370 ms [ 453.911081][ C0] lec:lec_tx_timeout: lec0 [ 453.934477][ T35] bond15 (unregistering): Released all slaves [ 453.955888][ T35] bond16 (unregistering): Released all slaves [ 453.980930][ T35] bond17 (unregistering): Released all slaves [ 454.091866][T17795] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 455.342346][T17861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3288'. [ 455.783799][T17870] lo: entered promiscuous mode [ 455.799169][T17870] tunl0: entered promiscuous mode [ 455.828177][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.865473][T17870] gre0: entered promiscuous mode [ 455.913500][T17870] gretap0: entered promiscuous mode [ 455.946732][T17870] erspan0: entered promiscuous mode [ 455.977811][T17870] ip_vti0: entered promiscuous mode [ 456.185399][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3292'. [ 456.262312][T17881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3292'. [ 456.471515][ T29] audit: type=1107 audit(1773862940.182:3): pid=17885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 456.571940][ T29] audit: type=1107 audit(1773862940.212:4): pid=17885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 456.689276][T17892] netlink: 'syz.0.3295': attribute type 12 has an invalid length. [ 456.877996][T17894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3296'. [ 456.888263][ T35] : left promiscuous mode [ 458.130273][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.927807][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 458.954674][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.964300][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.974947][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.983017][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.270598][T17144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 459.283427][T17144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 459.292366][T17144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 459.301633][T17144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 459.313952][T17144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 460.925967][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.083460][T17144] Bluetooth: hci1: command tx timeout [ 461.402702][T17144] Bluetooth: hci6: command tx timeout [ 461.563809][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.162010][T17144] Bluetooth: hci1: command tx timeout [ 463.488986][T17144] Bluetooth: hci6: command tx timeout [ 465.242878][T17144] Bluetooth: hci1: command tx timeout [ 465.562341][T17144] Bluetooth: hci6: command tx timeout [ 465.750127][ T35] tipc: Disabling bearer [ 465.812330][ T35] tipc: Left network mode [ 465.858248][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 465.922411][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 465.931621][T17929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3301'. [ 465.992481][T17928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3301'. [ 466.020604][T17917] wg1 speed is unknown, defaulting to 1000 [ 466.125769][T17922] wg1 speed is unknown, defaulting to 1000 [ 466.239212][T17929] geneve2: entered promiscuous mode [ 466.253818][T17929] geneve2: entered allmulticast mode [ 466.412252][T17935] Cannot find set identified by id 1 to match [ 466.482888][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3303'. [ 466.694194][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.722371][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 467.322414][T17144] Bluetooth: hci1: command tx timeout [ 467.328521][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.417892][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.642635][T17144] Bluetooth: hci6: command tx timeout [ 469.805650][T17980] vlan3: entered promiscuous mode [ 469.836358][T17980] bridge0: entered promiscuous mode [ 470.184630][T17988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3310'. [ 471.222506][ T35] pimreg3 (unregistering): left allmulticast mode [ 471.468393][ T35] team0 (unregistering): Port device team_slave_1 removed [ 471.508495][ T35] team0 (unregistering): Port device team_slave_0 removed [ 471.806302][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.443211][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.008958][T17922] chnl_net:caif_netlink_parms(): no params data found [ 473.136092][T17917] chnl_net:caif_netlink_parms(): no params data found [ 473.374076][T17509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 474.163683][T18029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3315'. [ 474.473659][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 474.485032][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 474.493933][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 474.540599][T18029] bond4: entered promiscuous mode [ 474.588456][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 474.597089][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.895377][T18036] wg1 speed is unknown, defaulting to 1000 [ 475.120081][T17922] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.139510][T17922] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.159969][T17922] bridge_slave_0: entered allmulticast mode [ 475.177045][T17922] bridge_slave_0: entered promiscuous mode [ 475.208716][T17917] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.229934][T17917] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.246850][T17917] bridge_slave_0: entered allmulticast mode [ 475.271219][T17917] bridge_slave_0: entered promiscuous mode [ 475.290626][T17922] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.312497][T17922] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.330743][T17922] bridge_slave_1: entered allmulticast mode [ 475.348623][T17922] bridge_slave_1: entered promiscuous mode [ 475.390567][T17917] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.402425][T17917] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.432244][T17917] bridge_slave_1: entered allmulticast mode [ 475.451153][T17917] bridge_slave_1: entered promiscuous mode [ 475.732558][T17917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.769015][T17917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.820429][T17922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.411951][T11610] lec:lec_start_xmit: lec0:No lecd attached [ 476.534756][T17922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.603465][T18063] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 476.681845][T17144] Bluetooth: hci2: command tx timeout [ 476.796015][T18069] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3319'. [ 476.888525][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'. [ 476.927609][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.191900][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.213551][T17917] team0: Port device team_slave_0 added [ 477.269200][T17922] team0: Port device team_slave_0 added [ 477.290390][T17917] team0: Port device team_slave_1 added [ 477.348095][T17922] team0: Port device team_slave_1 added [ 477.433252][T17922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.440731][T17922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.469395][T17922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.515289][T17922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.522905][T17922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.560888][T17922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.588172][T17917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.595687][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.625052][T17917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.654350][T17917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.661528][T17917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.700407][T17917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.818760][T17922] hsr_slave_0: entered promiscuous mode [ 477.828405][T17922] hsr_slave_1: entered promiscuous mode [ 477.836070][T17922] debugfs: 'hsr0' already exists in 'hsr' [ 477.843885][T17922] Cannot create hsr debugfs directory [ 477.926496][T17917] hsr_slave_0: entered promiscuous mode [ 477.934370][T17917] hsr_slave_1: entered promiscuous mode [ 477.943242][T17917] debugfs: 'hsr0' already exists in 'hsr' [ 477.949028][T17917] Cannot create hsr debugfs directory [ 478.098611][T18036] chnl_net:caif_netlink_parms(): no params data found [ 478.204485][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.618489][T18036] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.629287][T18036] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.637637][T18036] bridge_slave_0: entered allmulticast mode [ 478.646791][T18036] bridge_slave_0: entered promiscuous mode [ 478.707497][T18036] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.732221][T18036] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.750151][T18036] bridge_slave_1: entered allmulticast mode [ 478.763226][T17144] Bluetooth: hci2: command tx timeout [ 478.779820][T18036] bridge_slave_1: entered promiscuous mode [ 478.985842][T18086] netlink: 'syz.2.3321': attribute type 4 has an invalid length. [ 478.999039][T18036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.039793][T18036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.049481][T17922] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 479.183002][T17922] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 479.209973][T18089] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3322'. [ 479.229470][T17922] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 479.251395][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3322'. [ 479.268240][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3322'. [ 479.346805][T17922] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 479.411584][T18036] team0: Port device team_slave_0 added [ 479.423609][T18036] team0: Port device team_slave_1 added [ 480.071621][T17917] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 480.128518][T18036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.139642][T18036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.167012][T18036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.168081][T18106] nbd: must specify a device to reconfigure [ 480.187591][T17917] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 480.208296][T18036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.216153][T18036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.251447][T18036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.304291][T17917] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 480.339307][T17917] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 480.368020][T18114] netlink: 'syz.0.3328': attribute type 8 has an invalid length. [ 480.386502][T18114] sch_fq: defrate 0 ignored. [ 480.518921][T18036] hsr_slave_0: entered promiscuous mode [ 480.526666][T18036] hsr_slave_1: entered promiscuous mode [ 480.534844][T18036] debugfs: 'hsr0' already exists in 'hsr' [ 480.540753][T18036] Cannot create hsr debugfs directory [ 480.635246][T18125] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3330'. [ 480.727734][T18130] netlink: 'syz.2.3331': attribute type 1 has an invalid length. [ 480.738108][T18130] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3331'. [ 480.755032][T18130] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3331'. [ 480.776003][T18121] syzkaller0: entered promiscuous mode [ 480.782283][T18121] syzkaller0: entered allmulticast mode [ 480.842249][T17144] Bluetooth: hci2: command tx timeout [ 481.195373][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.286429][T17922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.363138][T18141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3336'. [ 481.374420][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.422129][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 481.430216][ C0] lec:lec_tx_timeout: lec0 [ 481.500842][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3337'. [ 481.645076][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.850509][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.894335][T17922] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.998688][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.006098][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.123681][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.130990][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.197892][T17917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.286585][T18171] netlink: 'syz.0.3342': attribute type 1 has an invalid length. [ 482.426329][T18171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 482.515040][T18174] bond5: (slave veth0_to_bond): making interface the new active one [ 482.525741][T18174] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 482.547229][T17917] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.674986][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.682247][ T8668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.692712][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.706741][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.713963][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.861039][T18036] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 482.922464][T17144] Bluetooth: hci2: command tx timeout [ 482.927879][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.961296][T18036] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 483.116711][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.143552][T18036] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 483.151389][T18203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3350'. [ 483.156116][T18036] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 483.293781][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.332279][ T8667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.483153][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.540479][T18220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3353'. [ 483.574624][T17922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.034010][ T35] bridge_slave_1: left allmulticast mode [ 484.057111][ T35] bridge_slave_1: left promiscuous mode [ 484.083763][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.120166][ T35] bridge_slave_0: left allmulticast mode [ 484.152765][ T35] bridge_slave_0: left promiscuous mode [ 484.158694][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.178494][ T35] bridge_slave_1: left allmulticast mode [ 484.194116][ T35] bridge_slave_1: left promiscuous mode [ 484.200147][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.214211][ T35] bridge_slave_0: left allmulticast mode [ 484.220032][ T35] bridge_slave_0: left promiscuous mode [ 484.252929][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.294479][ T35] ip6gretap0: left allmulticast mode [ 484.299944][ T35] ip6gretap0: left promiscuous mode [ 484.322332][ T35] bridge0: port 1(ip6gretap0) entered disabled state [ 484.439207][T18244] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3354'. [ 484.606453][T18249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3356'. [ 484.725392][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.760851][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.788043][ T35] bond0 (unregistering): Released all slaves [ 484.969304][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.983741][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.994727][ T35] bond0 (unregistering): Released all slaves [ 485.152389][ T35] bond0 (unregistering): Released all slaves [ 485.276756][ T35] erspan0 (unregistering): left promiscuous mode [ 485.321041][ T35] bond10 (unregistering): (slave geneve3): Releasing active interface [ 485.337132][ T35] bond6 (unregistering): (slave geneve2): Releasing active interface [ 485.676415][ T35] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 485.684850][ T35] bridge7 (unregistering): left promiscuous mode [ 485.718640][ T35] bond0 (unregistering): Released all slaves [ 485.729632][ T35] bond1 (unregistering): Released all slaves [ 485.744381][ T35] bond2 (unregistering): Released all slaves [ 485.758925][ T35] bond3 (unregistering): Released all slaves [ 485.773382][ T35] bond4 (unregistering): Released all slaves [ 485.789115][ T35] bond5 (unregistering): (slave lo): Releasing backup interface [ 485.810677][ T35] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 485.826029][ T35] bond5 (unregistering): Released all slaves [ 485.840437][ T35] bond6 (unregistering): Released all slaves [ 485.854133][ T35] bond7 (unregistering): Released all slaves [ 485.867954][ T35] bond8 (unregistering): Released all slaves [ 485.881257][ T35] bond9 (unregistering): Released all slaves [ 485.900710][ T35] bond10 (unregistering): Released all slaves [ 485.934094][T18253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3356'. [ 485.965290][T18036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.142432][T18036] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.267029][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.274356][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.413187][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.420416][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.482163][ T35] tipc: Disabling bearer [ 486.510898][ T35] tipc: Left network mode [ 486.522827][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.663838][T17917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.738285][T17922] veth0_vlan: entered promiscuous mode [ 486.963455][T17922] veth1_vlan: entered promiscuous mode [ 487.544066][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3363'. [ 487.553576][T18308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3363'. [ 487.589669][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3363'. [ 487.632515][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3363'. [ 487.698115][T17922] veth0_macvtap: entered promiscuous mode [ 487.806947][T17922] veth1_macvtap: entered promiscuous mode [ 487.854323][T18316] veth0: entered promiscuous mode [ 487.941224][T17922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.984529][T17922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.001498][T18036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.015029][T18314] veth0: left promiscuous mode [ 488.476539][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.552163][ T1061] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.655709][ T1061] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.672182][ T1061] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.681068][ T1061] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.729248][T17917] veth0_vlan: entered promiscuous mode [ 488.980481][T17917] veth1_vlan: entered promiscuous mode [ 489.094905][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.181984][T18036] veth0_vlan: entered promiscuous mode [ 489.198438][ T9] IPVS: starting estimator thread 0... [ 489.216253][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.268661][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.315325][T18356] IPVS: using max 25 ests per chain, 60000 per kthread [ 489.337400][T18036] veth1_vlan: entered promiscuous mode [ 489.426279][ T35] hsr_slave_0: left promiscuous mode [ 489.443364][ T35] hsr_slave_1: left promiscuous mode [ 489.454972][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.465595][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.490155][ T35] hsr_slave_0: left promiscuous mode [ 489.504186][ T35] hsr_slave_1: left promiscuous mode [ 489.513774][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.522626][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.534572][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.546265][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.570310][ T35] hsr_slave_0: left promiscuous mode [ 489.590035][ T35] hsr_slave_1: left promiscuous mode [ 489.600926][ T35] hsr_slave_0: left promiscuous mode [ 489.610655][ T35] hsr_slave_1: left promiscuous mode [ 489.640445][ T35] veth1_macvtap: left promiscuous mode [ 489.648555][ T35] veth0_macvtap: left promiscuous mode [ 489.654722][ T35] veth1_vlan: left promiscuous mode [ 489.660040][ T35] veth0_vlan: left promiscuous mode [ 489.667244][ T35] veth1_macvtap: left promiscuous mode [ 489.674811][ T35] veth0_macvtap: left promiscuous mode [ 489.680602][ T35] veth1_vlan: left promiscuous mode [ 489.686032][ T35] veth0_vlan: left promiscuous mode [ 490.175519][ T35] team0 (unregistering): Port device team_slave_1 removed [ 490.196980][ T35] team0 (unregistering): Port device team_slave_0 removed [ 490.482448][ T35] team0 (unregistering): Port device ÿ removed [ 490.499186][ T35] team0 (unregistering): Port device team_slave_0 removed [ 491.156179][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.166466][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.181187][T18370] tipc: Enabling of bearer rejected, failed to enable media [ 491.227086][T17917] veth0_macvtap: entered promiscuous mode [ 491.377940][T17917] veth1_macvtap: entered promiscuous mode [ 491.529157][T18036] veth0_macvtap: entered promiscuous mode [ 491.566130][T18036] veth1_macvtap: entered promiscuous mode [ 491.664479][T17917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.786985][T17917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.826019][T18036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.888341][T18036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.918015][ T8667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.939688][ T8667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.011249][ T8667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.052863][ T8667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.084666][ T8667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.161561][ T8667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.186073][ T8667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.197676][T18416] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 492.267926][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3382'. [ 492.288909][ T8667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.715362][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.725228][T18438] netlink: 'syz.6.3384': attribute type 1 has an invalid length. [ 492.751974][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.844197][T18438] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 492.956919][ T8667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.988909][ T8667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.020908][ T8668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.074083][ T8668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.261312][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.297992][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.422888][T18450] unsupported nlmsg_type 40 [ 493.784959][T18471] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 494.204426][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.213314][T18492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3395'. [ 494.521620][T18505] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 494.536455][T18480] tipc: Enabling of bearer rejected, failed to enable media [ 494.554027][T18505] netlink: 'syz.1.3396': attribute type 39 has an invalid length. [ 494.616222][T18500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.844238][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.030909][ T35] IPVS: stop unused estimator thread 0... [ 495.361596][T18529] netlink: 'syz.2.3401': attribute type 1 has an invalid length. [ 495.461240][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'. [ 496.127521][T17914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.728960][T18554] rdma_op ffff88807bbb39f0 conn xmit_rdma 0000000000000000 [ 498.381545][T18532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3402'. [ 498.391139][T18532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3402'. [ 498.401169][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 498.746962][T18567] netlink: 'syz.5.3409': attribute type 1 has an invalid length. [ 498.823693][T18567] batman_adv: batadv0: Adding interface: bridge1 [ 498.844717][T18567] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.886883][T18567] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 499.088818][T18576] netlink: 'syz.6.3412': attribute type 2 has an invalid length. [ 499.114614][T18576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 499.242414][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.282018][T18586] bridge0: port 3(bond0) entered blocking state [ 499.288726][T18586] bridge0: port 3(bond0) entered disabled state [ 499.312724][T18586] bond0: entered allmulticast mode [ 499.320738][T18586] bond_slave_0: entered allmulticast mode [ 499.330250][T18586] bond_slave_1: entered allmulticast mode [ 499.346870][T18586] bridge1: entered allmulticast mode [ 499.404601][T18586] bond0: entered promiscuous mode [ 499.409725][T18586] bond_slave_0: entered promiscuous mode [ 499.422760][T18586] bond_slave_1: entered promiscuous mode [ 499.428746][T18586] bridge1: entered promiscuous mode [ 499.438447][T18586] bridge0: port 3(bond0) entered blocking state [ 499.446030][T18586] bridge0: port 3(bond0) entered forwarding state [ 500.072197][T18623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3420'. [ 500.778791][ T8667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.897434][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 502.372493][T17922] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 502.419388][T17922] CPU: 0 UID: 0 PID: 17922 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 502.419422][T17922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.419436][T17922] Call Trace: [ 502.419444][T17922] [ 502.419453][T17922] dump_stack_lvl+0xe8/0x150 [ 502.419496][T17922] dump_header+0xd3/0x4c0 [ 502.419559][T17922] oom_kill_process+0x3ab/0x970 [ 502.419605][T17922] out_of_memory+0x106c/0x1410 [ 502.419625][T17922] ? percpu_ref_put+0x19/0x180 [ 502.419667][T17922] ? __pfx___mutex_lock+0x10/0x10 [ 502.419750][T17922] ? __pfx_out_of_memory+0x10/0x10 [ 502.419768][T17922] ? do_raw_spin_unlock+0xf5/0x210 [ 502.419804][T17922] try_charge_memcg+0xc53/0x1560 [ 502.419830][T17922] ? __lock_acquire+0x6b5/0x2cf0 [ 502.419872][T17922] ? __pfx_try_charge_memcg+0x10/0x10 [ 502.419891][T17922] ? xa_load+0x60/0x210 [ 502.419944][T17922] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 502.419972][T17922] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 502.419999][T17922] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 502.420027][T17922] __swap_cache_prepare_and_add+0x52a/0x700 [ 502.420077][T17922] swap_cache_alloc_folio+0xf1/0x240 [ 502.420111][T17922] swap_cluster_readahead+0x369/0x690 [ 502.420146][T17922] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 502.420190][T17922] ? get_vma_policy+0x27b/0x3c0 [ 502.420219][T17922] swapin_readahead+0x196/0xc50 [ 502.420261][T17922] ? __pfx_swapin_readahead+0x10/0x10 [ 502.420292][T17922] ? swap_table_get+0x1e/0x260 [ 502.420317][T17922] ? swap_table_get+0x1e/0x260 [ 502.420340][T17922] ? swap_table_get+0x1e/0x260 [ 502.420366][T17922] ? swap_table_get+0x216/0x260 [ 502.420393][T17922] ? swap_cache_get_folio+0x513/0x520 [ 502.420427][T17922] do_swap_page+0x56f/0x5a20 [ 502.420476][T17922] ? do_raw_spin_unlock+0xf5/0x210 [ 502.420498][T17922] ? do_swap_page+0x127/0x5a20 [ 502.420522][T17922] ? __pfx_do_swap_page+0x10/0x10 [ 502.420545][T17922] ? __pte_offset_map+0x1ae/0x240 [ 502.420586][T17922] ? pte_offset_map_rw_nolock+0xea/0x160 [ 502.420618][T17922] handle_mm_fault+0x12d2/0x3310 [ 502.420645][T17922] ? lockdep_hardirqs_on+0x7a/0x110 [ 502.420711][T17922] ? handle_mm_fault+0xee/0x3310 [ 502.420748][T17922] ? __pfx_handle_mm_fault+0x10/0x10 [ 502.420773][T17922] ? lock_vma_under_rcu+0x45a/0x500 [ 502.420823][T17922] do_user_addr_fault+0xa73/0x1340 [ 502.420878][T17922] ? rcu_is_watching+0x15/0xb0 [ 502.420906][T17922] ? trace_page_fault_user+0x84/0x210 [ 502.420934][T17922] exc_page_fault+0x6a/0xc0 [ 502.420963][T17922] asm_exc_page_fault+0x26/0x30 [ 502.420985][T17922] RIP: 0033:0x7f8ea115cfce [ 502.421005][T17922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 502.421021][T17922] RSP: 002b:00007ffeabf5b278 EFLAGS: 00010246 [ 502.421041][T17922] RAX: 0000000000000000 RBX: 000055556a025500 RCX: 00007f8ea115cfce [ 502.421054][T17922] RDX: 00007ffeabf5b2d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.421066][T17922] RBP: 00007ffeabf5b33c R08: 0000000000000000 R09: 0000000000000000 [ 502.421078][T17922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 502.421090][T17922] R13: 00000000000927c0 R14: 000000000007a5c5 R15: 00007ffeabf5b390 [ 502.421126][T17922] [ 502.421134][T17922] memory: usage 307200kB, limit 307200kB, failcnt 156 [ 502.766540][T17922] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 502.774739][T17922] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 502.782494][T17922] Memory cgroup stats for /syz6: [ 502.782898][T17922] cache 0 [ 502.790827][T17922] rss 0 [ 502.793998][T17922] rss_huge 0 [ 502.797219][T17922] shmem 0 [ 502.800199][T17922] mapped_file 0 [ 502.806101][T17922] dirty 0 [ 502.809089][T17922] writeback 0 [ 502.812498][T17922] workingset_refault_anon 1 [ 502.817042][T17922] workingset_refault_file 0 [ 502.822136][T17922] swap 204800 [ 502.828624][T17922] swapcached 208896 [ 502.832777][T17922] pgpgin 537 [ 502.836355][T17922] pgpgout 536 [ 502.839976][T17922] pgfault 1400 [ 502.845002][T17922] pgmajfault 0 [ 502.848448][T17922] inactive_anon 4096 [ 502.859238][T17922] active_anon 0 [ 502.864646][T17922] inactive_file 0 [ 502.868340][T17922] active_file 0 [ 502.872349][T17922] unevictable 0 [ 502.875845][T17922] hierarchical_memory_limit 314572800 [ 502.881343][T17922] hierarchical_memsw_limit 9223372036854771712 [ 502.888374][T17922] total_cache 0 [ 502.896879][T17922] total_rss 0 [ 502.900234][T17922] total_rss_huge 0 [ 502.904770][T17922] total_shmem 0 [ 502.908262][T17922] total_mapped_file 0 [ 502.912309][T17922] total_dirty 0 [ 502.915790][T17922] total_writeback 0 [ 502.919622][T17922] total_workingset_refault_anon 1 [ 502.929737][T17922] total_workingset_refault_file 0 [ 502.937850][T17922] total_swap 204800 [ 502.952609][T17922] total_swapcached 208896 [ 502.957099][T17922] total_pgpgin 540 [ 502.960901][T17922] total_pgpgout 539 [ 502.965572][T17922] total_pgfault 1403 [ 502.969512][T17922] total_pgmajfault 0 [ 502.976555][T17922] total_inactive_anon 4096 [ 502.981022][T17922] total_active_anon 0 [ 502.985864][T17922] total_inactive_file 0 [ 502.990115][T17922] total_active_file 0 [ 502.994625][T17922] total_unevictable 0 [ 502.998728][T17922] anon_cost 0 [ 503.010312][T17922] file_cost 0 [ 503.014137][T17922] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3423,pid=18633,uid=0 [ 503.040740][T17922] Memory cgroup out of memory: Killed process 18633 (syz.6.3423) total-vm:102420kB, anon-rss:1244kB, file-rss:22796kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 505.084729][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.732930][T17914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.366467][T12190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.297478][T18664] netlink: 'syz.6.3431': attribute type 1 has an invalid length. [ 507.313807][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3431'. [ 507.322957][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 507.322995][ C0] lec:lec_tx_timeout: lec0 [ 507.557230][T18685] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3434'. [ 507.633104][T18690] xt_cgroup: path and classid specified [ 507.718879][T18690] bond0: entered promiscuous mode [ 507.784954][T18690] bond_slave_0: entered promiscuous mode [ 507.806249][T18690] bond_slave_1: entered promiscuous mode [ 507.865639][T18685] syzkaller1: entered promiscuous mode [ 507.875599][T18685] syzkaller1: entered allmulticast mode [ 508.272574][T18718] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 508.734283][T18740] x_tables: duplicate underflow at hook 2 [ 508.970371][T18747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3449'. [ 509.020652][T18747] bridge_slave_1: left allmulticast mode [ 509.051829][T18747] bridge_slave_1: left promiscuous mode [ 509.083951][T18747] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.151381][T18754] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3452'. [ 509.162776][T18725] infiniband syz1: set down [ 509.167830][T18725] infiniband syz1: added ipvlan0 [ 509.225511][T18725] RDS/IB: syz1: added [ 509.230791][T18725] smc: adding ib device syz1 with port count 1 [ 509.248306][T18725] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 509.287407][T18747] bridge_slave_0: left allmulticast mode [ 509.323378][T18747] bridge_slave_0: left promiscuous mode [ 509.348756][T18747] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.396561][T18760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.757396][T18776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3458'. [ 509.917151][T18777] bridge3: port 1(veth3) entered blocking state [ 509.924455][ T29] audit: type=1800 audit(1773862993.642:5): pid=18784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3459" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=100 res=0 errno=0 [ 509.932040][T18777] bridge3: port 1(veth3) entered disabled state [ 509.964649][T18777] veth3: entered allmulticast mode [ 509.973181][T18777] veth3: entered promiscuous mode [ 510.034719][T18776] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3458'. [ 510.087709][T18776] bridge3: port 2(veth0_to_bond) entered blocking state [ 510.121854][T18776] bridge3: port 2(veth0_to_bond) entered disabled state [ 510.129326][T18776] veth0_to_bond: entered allmulticast mode [ 510.154106][T18776] veth0_to_bond: entered promiscuous mode [ 510.204414][T12190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.396299][T18798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3462'. [ 510.407134][T18799] netlink: 'syz.1.3463': attribute type 1 has an invalid length. [ 510.448531][T18799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3463'. [ 510.897570][T18819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3467'. [ 511.304397][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3470'. [ 511.779086][T18852] sctp: [Deprecated]: syz.1.3473 (pid 18852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.779086][T18852] Use struct sctp_sack_info instead [ 512.126779][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.145650][T18869] netlink: 'syz.2.3477': attribute type 1 has an invalid length. [ 512.164933][T18862] delete_channel: no stack [ 512.189175][T17914] IPVS: starting estimator thread 0... [ 512.214693][T18872] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 512.305588][T18875] IPVS: using max 30 ests per chain, 72000 per kthread [ 512.410857][T18881] __nla_validate_parse: 3 callbacks suppressed [ 512.410880][T18881] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 512.470292][T18881] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 512.574962][T18890] netlink: 'syz.6.3481': attribute type 1 has an invalid length. [ 512.636340][T18892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 512.675368][T18896] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3481'. [ 512.686931][T18892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3483'. [ 512.704704][T18892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3483'. [ 512.759056][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'. [ 512.793158][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'. [ 513.040801][T18909] vlan2: entered promiscuous mode [ 513.061958][T18909] bridge0: entered promiscuous mode [ 514.343349][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3498'. [ 514.516320][T18955] macvtap1: entered promiscuous mode [ 514.522150][T18955] vlan0: entered promiscuous mode [ 514.527885][T18955] macvtap1: entered allmulticast mode [ 514.533503][T18955] vlan0: entered allmulticast mode [ 514.538965][T18955] veth0_vlan: entered allmulticast mode [ 514.947796][T18981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3502'. [ 515.326640][T17914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.404513][T17144] Bluetooth: hci2: command tx timeout [ 515.583002][T19006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.590387][T19006] IPv6: NLM_F_CREATE should be set when creating new route [ 515.694461][T19011] netlink: 'syz.2.3510': attribute type 12 has an invalid length. [ 515.760244][T19013] netlink: 'syz.6.3507': attribute type 1 has an invalid length. [ 515.970409][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.569481][T19037] gtp0: entered promiscuous mode [ 516.604810][T19037] gtp0: entered allmulticast mode [ 517.105524][T19063] netlink: 'syz.0.3521': attribute type 8 has an invalid length. [ 517.218588][T19068] xt_policy: too many policy elements [ 517.803248][T19101] netlink: 'syz.5.3532': attribute type 24 has an invalid length. [ 517.853908][T19107] __nla_validate_parse: 12 callbacks suppressed [ 517.853933][T19107] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3533'. [ 517.884079][ T8667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.894171][T19101] netlink: 'syz.5.3532': attribute type 1 has an invalid length. [ 517.917366][T19101] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3532'. [ 517.979842][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3532'. [ 518.158016][T19124] netlink: 'syz.0.3535': attribute type 3 has an invalid length. [ 518.225389][T19124] IPv6: sit1: Disabled Multicast RS [ 518.244608][T19124] sit1: entered allmulticast mode [ 518.677181][T19150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3542'. [ 519.072520][T19166] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3545'. [ 519.293268][T19184] siw: device registration error -23 [ 519.461391][T19191] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 519.699685][T19206] Bluetooth: MGMT ver 1.23 [ 519.727685][T19204] tipc: Started in network mode [ 519.744431][T19204] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 519.782874][T19204] tipc: Enabled bearer , priority 2 [ 520.488499][T19232] netlink: 'syz.5.3563': attribute type 4 has an invalid length. [ 520.595259][T19245] IPVS: Unknown mcast interface: pim6reg0 [ 520.922392][ T5916] tipc: Node number set to 10463914 [ 520.931253][T19256] netlink: 'syz.2.3570': attribute type 1 has an invalid length. [ 520.980611][T19256] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3570'. [ 521.084263][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.136074][T19273] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3571'. [ 521.171288][T19276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 521.279030][T19287] netlink: 'syz.5.3571': attribute type 2 has an invalid length. [ 523.643761][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.898668][T19258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.121485][T19291] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.154639][T19294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.161982][T19294] IPv6: NLM_F_CREATE should be set when creating new route [ 524.167772][T19299] xt_cluster: node mask cannot exceed total number of nodes [ 524.260575][T19300] bond1 (unregistering): Released all slaves [ 524.924110][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.935086][T12190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.949116][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.958826][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.205419][ T8667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.408785][ T8667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.963778][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.523197][T17914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.531602][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.083301][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.445746][T11610] lec:lec_start_xmit: lec0:No lecd attached [ 540.282749][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.854525][ T8667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.133452][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.461858][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 544.469917][ C0] lec:lec_tx_timeout: lec0 [ 545.259207][T19496] xt_hashlimit: size too large, truncated to 1048576 [ 545.388380][T19512] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3583'. [ 545.405933][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.526013][T19516] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ2 [ 545.744688][T19518] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 545.747370][T19521] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3585'. [ 545.786352][T19518] bond1: option packets_per_slave: allowed values 0 - 65535 [ 545.819499][T19518] bond1 (unregistering): Released all slaves [ 546.009424][T19527] pimreg: entered allmulticast mode [ 546.309919][T19542] netlink: 'syz.5.3593': attribute type 1 has an invalid length. [ 546.330547][T19542] netlink: 'syz.5.3593': attribute type 2 has an invalid length. [ 546.353100][T19542] netlink: 'syz.5.3593': attribute type 1 has an invalid length. [ 546.374785][T19542] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3593'. [ 546.398124][T19547] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3595'. [ 546.509476][T19553] netlink: 'syz.5.3599': attribute type 3 has an invalid length. [ 546.522696][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.548383][T19553] tipc: Enabling of bearer rejected, failed to enable media [ 546.591909][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3598'. [ 546.637124][T19559] tc_dump_action: action bad kind [ 546.976701][T19585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3608'. [ 547.026671][T19586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3607'. [ 547.043833][T19586] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3607'. [ 547.311017][T19595] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.369720][T19607] netlink: 'syz.5.3611': attribute type 8 has an invalid length. [ 547.439860][T19604] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 547.441209][T19598] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 547.561379][T19615] netlink: 'syz.0.3618': attribute type 9 has an invalid length. [ 547.562500][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.625662][T19621] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3617'. [ 547.639592][T19595] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.656255][T19617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3616'. [ 547.705143][T19595] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.741257][T19617] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 547.766299][T19617] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 547.794537][T19617] team0: Failed to send options change via netlink (err -105) [ 547.822178][T19617] team0: Port device batadv1 added [ 547.830768][T19628] netlink: 'syz.2.3620': attribute type 1 has an invalid length. [ 547.855540][T19618] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 547.876494][T19618] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 547.908097][T19618] team0: Failed to send options change via netlink (err -105) [ 547.937601][T19618] team0: Port device batadv2 added [ 547.994555][T19595] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.199877][ T35] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.293635][ T35] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.321155][T19646] netlink: 'syz.6.3624': attribute type 10 has an invalid length. [ 548.334291][T19648] x_tables: duplicate underflow at hook 3 [ 548.345847][ T35] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.389311][ T8667] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.580106][T19652] bond6: entered promiscuous mode [ 548.586005][T19652] bond6: entered allmulticast mode [ 548.603269][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.613111][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.624111][T19652] 8021q: adding VLAN 0 to HW filter on device bond6 [ 548.725964][T19669] syz_tun: entered allmulticast mode [ 548.744043][T19668] syz_tun: left allmulticast mode [ 548.768204][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.645056][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.154710][ T8668] smc: removing ib device syz1 [ 550.444079][T19746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.685803][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.860464][T19761] netlink: 'syz.2.3657': attribute type 83 has an invalid length. [ 550.900775][T19761] netlink: 'syz.2.3657': attribute type 5 has an invalid length. [ 550.923818][T19764] __nla_validate_parse: 3 callbacks suppressed [ 550.923841][T19764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3659'. [ 550.981475][T19761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3657'. [ 551.081272][T19775] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3661'. [ 551.642184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.652145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.722295][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.808523][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.983778][T19824] netlink: 'syz.2.3670': attribute type 22 has an invalid length. [ 553.011105][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3670'. [ 553.136097][T19829] netlink: 'syz.1.3671': attribute type 1 has an invalid length. [ 553.295966][T19839] netlink: 'syz.5.3673': attribute type 1 has an invalid length. [ 553.345220][T19829] bond1: entered promiscuous mode [ 553.354239][T19829] bond1: entered allmulticast mode [ 553.406847][T19829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.431100][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.484150][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.530583][T19834] macvlan2: entered promiscuous mode [ 553.536160][T19834] macvlan2: entered allmulticast mode [ 553.548067][T19834] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 553.608391][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.653546][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.752914][ T5931] net_ratelimit: 3 callbacks suppressed [ 553.752938][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.802485][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.118411][T19867] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3679'. [ 554.278277][T19873] netlink: 'syz.0.3681': attribute type 9 has an invalid length. [ 554.304924][T19848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.372406][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.545664][T19882] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3685'. [ 554.619774][T19889] netlink: 'syz.5.3684': attribute type 2 has an invalid length. [ 554.660158][T19888] netlink: 'syz.5.3684': attribute type 2 has an invalid length. [ 554.672094][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3684'. [ 554.690859][T19891] bridge0: mtu less than device minimum [ 554.707551][T19888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3684'. [ 554.817811][T19902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'. [ 554.842035][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.850600][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.036657][T19915] sctp: [Deprecated]: syz.5.3693 (pid 19915) Use of int in max_burst socket option. [ 555.036657][T19915] Use struct sctp_assoc_value instead [ 555.207907][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3694'. [ 555.588431][T19940] syzkaller0: entered promiscuous mode [ 555.609901][T19940] syzkaller0: entered allmulticast mode [ 555.883834][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.899836][T19960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.910156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.947615][T19960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.041298][T19962] __nla_validate_parse: 2 callbacks suppressed [ 556.041322][T19962] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3708'. [ 556.138349][T19965] tipc: Enabling of bearer rejected, failed to enable media [ 556.406119][T19981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3712'. [ 556.458633][T19987] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3714'. [ 556.658744][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3716'. [ 556.711869][T19997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'. [ 556.760037][T19997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3718'. [ 557.021570][T20015] netlink: 'syz.1.3723': attribute type 10 has an invalid length. [ 557.066543][T20015] netlink: 396 bytes leftover after parsing attributes in process `syz.1.3723'. [ 557.102935][T20015] netlink: 'syz.1.3723': attribute type 13 has an invalid length. [ 557.132698][T20015] gretap0: refused to change device tx_queue_len [ 557.614326][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058172400: rx timeout, send abort [ 558.114118][T20071] IPv6: NLM_F_CREATE should be specified when creating new route [ 558.114482][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025602c00: rx timeout, send abort [ 558.122607][T20071] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.131199][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058172400: abort rx timeout. Force session deactivation [ 558.137847][T20071] IPv6: NLM_F_CREATE should be set when creating new route [ 558.165222][T20069] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3739'. [ 558.274187][T20082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3737'. [ 558.332192][T20082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3737'. [ 558.608656][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058171000: rx timeout, send abort [ 558.617975][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058171000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 558.632944][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025602c00: abort rx timeout. Force session deactivation [ 558.840369][T20107] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 559.002402][ T5916] net_ratelimit: 7 callbacks suppressed [ 559.002425][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.115734][T20131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.638597][T20156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.826571][T20173] openvswitch: netlink: IP tunnel dst address not specified [ 560.009459][T20177] netlink: 'syz.6.3766': attribute type 8 has an invalid length. [ 560.045205][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.081486][T20184] x_tables: duplicate underflow at hook 1 [ 560.123783][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.396161][T20194] netlink: 'syz.1.3771': attribute type 11 has an invalid length. [ 560.665344][T20201] ip6tnl0: entered promiscuous mode [ 560.670893][T20201] ip6tnl0: entered allmulticast mode [ 560.888799][T20223] netem: unknown loss type 0 [ 560.922203][T20223] netem: change failed [ 560.925100][T17914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.092576][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.101705][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.114292][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.229610][T20242] __nla_validate_parse: 9 callbacks suppressed [ 561.229635][T20242] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3785'. [ 561.259736][T20245] netlink: 'syz.2.3786': attribute type 1 has an invalid length. [ 561.332648][T20245] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3786'. [ 561.374738][T20245] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3786'. [ 561.388207][T20245] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3786'. [ 561.462287][T20258] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3788'. [ 562.306770][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3801'. [ 562.354399][T20316] block nbd0: Unsupported socket: should be TCP or UNIX. [ 562.857494][T20334] syzkaller0: entered promiscuous mode [ 562.891206][T20334] syzkaller0: entered allmulticast mode [ 563.005608][T20348] syzkaller0: entered promiscuous mode [ 563.011306][T20348] syzkaller0: entered allmulticast mode [ 563.076779][T20352] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3812'. [ 563.270325][T20362] netlink: 'syz.2.3815': attribute type 1 has an invalid length. [ 563.332297][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 563.773512][T20369] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3816'. [ 563.816150][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3816'. [ 564.064601][T20374] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3816'. [ 564.081827][T20374] net_ratelimit: 11 callbacks suppressed [ 564.081856][T20374] openvswitch: netlink: Flow key attr not present in new flow. [ 564.288597][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.528240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.323571][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.804440][T20354] lo speed is unknown, defaulting to 1000 [ 565.815768][T20362] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 565.835156][T20373] kthread_run failed with err -4 [ 565.871132][T20354] lo speed is unknown, defaulting to 1000 [ 565.883037][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.883067][T20354] lo speed is unknown, defaulting to 1000 [ 566.364577][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.516604][T20403] netlink: 'syz.0.3824': attribute type 2 has an invalid length. [ 566.545450][T20403] netlink: 'syz.0.3824': attribute type 8 has an invalid length. [ 566.553254][T20402] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.563810][T20403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3824'. [ 566.584442][T20354] infiniband syz0: set active [ 566.589410][T20354] infiniband syz0: added lo [ 566.621159][ T24] lo speed is unknown, defaulting to 1000 [ 566.655413][T20354] RDS/IB: syz0: added [ 566.659567][T20354] smc: adding ib device syz0 with port count 1 [ 566.668729][T20354] smc: ib device syz0 port 1 has no pnetid [ 566.685437][T20402] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.724829][T20408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3827'. [ 566.736940][ T24] lo speed is unknown, defaulting to 1000 [ 566.755540][T20354] lo speed is unknown, defaulting to 1000 [ 566.757769][T20408] netlink: 'syz.0.3827': attribute type 3 has an invalid length. [ 566.783949][T20402] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.803456][T20408] netlink: 'syz.0.3827': attribute type 3 has an invalid length. [ 566.849154][T20408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3827'. [ 566.864381][T20402] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.003495][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.012115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.125257][ T8668] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.219213][T20423] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.301963][T20423] tipc: Resetting bearer [ 567.337148][T20423] tipc: Resetting bearer [ 567.388574][T20422] tipc: Resetting bearer [ 567.398608][ T154] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.407030][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.440907][T20354] lo speed is unknown, defaulting to 1000 [ 567.448422][ T8668] tipc: Resetting bearer [ 567.491595][ T154] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.544247][ T154] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.691104][T20432] syzkaller0: entered promiscuous mode [ 567.697411][T20432] syzkaller0: entered allmulticast mode [ 567.746899][T20442] sctp: [Deprecated]: syz.2.3836 (pid 20442) Use of int in max_burst socket option deprecated. [ 567.746899][T20442] Use struct sctp_assoc_value instead [ 567.775184][T20442] syzkaller1: entered promiscuous mode [ 567.780809][T20442] syzkaller1: entered allmulticast mode [ 568.357828][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 568.365945][ C0] lec:lec_tx_timeout: lec0 [ 568.444693][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.483564][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.732804][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.056054][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.064683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.093954][T20354] lo speed is unknown, defaulting to 1000 [ 570.419438][T20465] netlink: 'syz.0.3841': attribute type 1 has an invalid length. [ 570.444928][T20465] netlink: 'syz.0.3841': attribute type 4 has an invalid length. [ 570.472596][T20465] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3841'. [ 570.523684][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.647605][T20470] bond1: entered promiscuous mode [ 570.653906][T20470] bond1: entered allmulticast mode [ 570.662941][T20470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.675917][T20354] lo speed is unknown, defaulting to 1000 [ 570.905491][T20487] xt_socket: unknown flags 0x50 [ 570.997079][T20492] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3850'. [ 571.013021][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.021701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.350448][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3856'. [ 571.523417][T20354] lo speed is unknown, defaulting to 1000 [ 571.552857][T20515] syzkaller0: entered promiscuous mode [ 571.558660][T20515] syzkaller0: entered allmulticast mode [ 571.568673][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.686846][T20528] netlink: 'syz.2.3858': attribute type 2 has an invalid length. [ 571.727970][T20528] netlink: 'syz.2.3858': attribute type 2 has an invalid length. [ 572.071262][T20544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3863'. [ 572.125757][T20538] bond7: entered promiscuous mode [ 572.131118][T20538] bond7: entered allmulticast mode [ 572.137103][T20538] 8021q: adding VLAN 0 to HW filter on device bond7 [ 572.165499][T20354] lo speed is unknown, defaulting to 1000 [ 572.602441][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.726670][T20574] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3873'. [ 572.753290][T20573] xt_TPROXY: Can be used only with -p tcp or -p udp [ 572.914913][T20579] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3876'. [ 572.931760][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.979397][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 572.998570][T20586] netlink: 'syz.2.3877': attribute type 1 has an invalid length. [ 573.022003][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 573.025150][T20586] netlink: 'syz.2.3877': attribute type 2 has an invalid length. [ 573.062600][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 573.063657][T20354] lo speed is unknown, defaulting to 1000 [ 573.077281][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 573.077464][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 573.077634][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 573.077805][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 573.138746][T20586] netlink: 'syz.2.3877': attribute type 1 has an invalid length. [ 573.349414][T20597] team0: Device wireguard0 is of different type [ 574.610069][T20662] netlink: 'syz.5.3898': attribute type 1 has an invalid length. [ 574.627504][T20662] netlink: 'syz.5.3898': attribute type 1 has an invalid length. [ 574.640144][T20662] netlink: 'syz.5.3898': attribute type 2 has an invalid length. [ 574.688460][ T5916] net_ratelimit: 3 callbacks suppressed [ 574.688486][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.762976][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.110383][T20687] openvswitch: netlink: IP tunnel dst address not specified [ 575.449331][T20704] netlink: 'syz.1.3910': attribute type 23 has an invalid length. [ 575.483512][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.659625][T20711] syzkaller1: entered promiscuous mode [ 575.666293][T20711] syzkaller1: entered allmulticast mode [ 575.725167][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.835904][T20715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.844134][T20718] openvswitch: netlink: IP tunnel dst address not specified [ 575.868729][T20715] netlink: 'syz.2.3915': attribute type 13 has an invalid length. [ 575.884896][T20715] gretap0: refused to change device tx_queue_len [ 575.892476][T20715] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 576.762513][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.243003][T20793] IPv6: NLM_F_CREATE should be specified when creating new route [ 577.469525][T20810] __nla_validate_parse: 39 callbacks suppressed [ 577.469555][T20810] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3945'. [ 577.717641][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3946'. [ 577.802196][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.841899][T20826] vlan0: entered promiscuous mode [ 577.847010][T20826] geneve1: entered promiscuous mode [ 577.867622][T20826] vlan0: entered allmulticast mode [ 577.888583][T20826] geneve1: entered allmulticast mode [ 577.919288][T20828] validate_nla: 2 callbacks suppressed [ 577.919311][T20828] netlink: 'syz.2.3951': attribute type 9 has an invalid length. [ 577.959336][T20831] netlink: 'syz.6.3952': attribute type 29 has an invalid length. [ 577.972968][T20831] netlink: 'syz.6.3952': attribute type 29 has an invalid length. [ 577.990483][T20831] netlink: 500 bytes leftover after parsing attributes in process `syz.6.3952'. [ 578.162151][T20840] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3955'. [ 578.472420][T20855] netlink: 'syz.1.3959': attribute type 3 has an invalid length. [ 578.480318][T20855] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3959'. [ 578.502097][T20855] netlink: 'syz.1.3959': attribute type 25 has an invalid length. [ 578.970313][T20860] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3961'. [ 579.019733][T20861] wg1 speed is unknown, defaulting to 1000 [ 579.045894][T20861] lo speed is unknown, defaulting to 1000 [ 579.224913][T20870] netlink: 'syz.6.3964': attribute type 62 has an invalid length. [ 579.244960][T20869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3965'. [ 579.257260][T20870] netlink: 'syz.6.3964': attribute type 1 has an invalid length. [ 579.342882][T20874] netlink: 'syz.6.3964': attribute type 3 has an invalid length. [ 579.393959][T20873] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3965'. [ 579.660669][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3968'. [ 579.747893][T20884] bond2: Invalid ad_actor_system MAC address. [ 579.754259][T20884] bond2: option ad_actor_system: invalid value (1) [ 579.777495][T20884] bond2 (unregistering): Released all slaves [ 579.896495][ T24] net_ratelimit: 4 callbacks suppressed [ 579.896520][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.962880][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.136402][T20901] netlink: 'syz.1.3972': attribute type 1 has an invalid length. [ 580.196777][T20902] syzkaller0: entered promiscuous mode [ 580.231434][T20902] syzkaller0: entered allmulticast mode [ 580.433762][T20915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3977'. [ 580.604069][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.616399][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.625994][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.634874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.699799][T20925] netlink: 'syz.5.3980': attribute type 1 has an invalid length. [ 580.923438][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.984636][T20931] netlink: zone id is out of range [ 580.995927][T20931] netlink: zone id is out of range [ 581.001307][T20931] netlink: zone id is out of range [ 581.786527][T20968] ipt_REJECT: TCP_RESET invalid for non-tcp [ 583.667126][T21011] __nla_validate_parse: 5 callbacks suppressed [ 583.667152][T21011] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3997'. [ 584.603521][ T1061] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.650979][ T1061] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.681244][ T1061] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.701039][ T154] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.083822][ T796] net_ratelimit: 56 callbacks suppressed [ 585.083847][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.181925][T21037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4005'. [ 585.205775][T21037] validate_nla: 1 callbacks suppressed [ 585.205800][T21037] netlink: 'syz.5.4005': attribute type 10 has an invalid length. [ 585.231036][T21037] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.238946][T21037] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.300211][T21037] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.307578][T21037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.316759][T21037] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.324114][T21037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.376116][T21037] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 585.732805][T21060] netlink: 'syz.5.4011': attribute type 1 has an invalid length. [ 585.741520][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.749765][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.769365][T21064] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 585.882326][T21012] Bluetooth: hci6: command 0x0406 tx timeout [ 585.889011][T21012] Bluetooth: hci1: command 0x0406 tx timeout [ 586.083651][T21079] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4016'. [ 586.122656][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.246129][T21085] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4018'. [ 586.397774][T21093] x_tables: duplicate underflow at hook 1 [ 586.537472][T21101] 8021q: VLANs not supported on ip6_vti0 [ 586.834579][T21114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4029'. [ 586.928828][T21120] tipc: Started in network mode [ 586.934717][T21120] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 586.959529][T21120] tipc: Enabled bearer , priority 2 [ 587.037648][T21120] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4029'. [ 587.072686][T21126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4034'. [ 587.116217][T21126] vlan2: entered promiscuous mode [ 587.163271][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.200511][T21128] batadv1: entered allmulticast mode [ 587.642479][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.645348][T21135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.751352][T21135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.788250][T21138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.806126][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4042'. [ 587.832464][T21154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.945141][T21154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.966497][T21162] netlink: 'syz.5.4044': attribute type 20 has an invalid length. [ 587.977873][T21162] IPv6: NLM_F_CREATE should be specified when creating new route [ 588.012683][T21167] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 588.086247][ T796] tipc: Node number set to 10463914 [ 588.196537][T21174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.223347][T21173] netlink: 'syz.2.4048': attribute type 19 has an invalid length. [ 588.273156][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4048'. [ 588.989987][T21207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4056'. [ 589.059678][T21209] netlink: 'syz.5.4057': attribute type 2 has an invalid length. [ 589.513160][T21227] bond2: (slave ip6gretap1): making interface the new active one [ 589.532436][T21227] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 589.563925][T21227] bridge_slave_0: invalid flags given to default FDB implementation [ 590.202584][ T5881] net_ratelimit: 5 callbacks suppressed [ 590.202611][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.283067][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.682407][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.323963][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.332544][T21185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.490680][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.502130][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.544605][ T5931] hid-generic 0005:0C45:0000.0001: item fetching failed at offset 0/1 [ 591.555838][ T5931] hid-generic 0005:0C45:0000.0001: probe with driver hid-generic failed with error -22 [ 591.628605][T21242] netem: change failed [ 592.237845][T21275] wg1 speed is unknown, defaulting to 1000 [ 592.254869][T21281] delete_channel: no stack [ 592.268425][T21275] lo speed is unknown, defaulting to 1000 [ 592.329231][T21283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.363338][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.448077][T21283] netlink: 'syz.2.4075': attribute type 10 has an invalid length. [ 592.449783][T21291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4079'. [ 592.491727][T21283] netlink: 396 bytes leftover after parsing attributes in process `syz.2.4075'. [ 592.539092][T21294] wg1 speed is unknown, defaulting to 1000 [ 592.678853][T21299] Unsupported ieee802154 address type: 0 [ 593.239454][T21294] lo speed is unknown, defaulting to 1000 [ 593.381398][T21313] syzkaller0: entered promiscuous mode [ 593.386730][T21322] netlink: 'syz.1.4086': attribute type 2 has an invalid length. [ 593.402674][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.411247][T21322] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4086'. [ 593.417526][T21313] syzkaller0: entered allmulticast mode [ 593.735153][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.782496][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4090'. [ 594.561374][T21363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4097'. [ 594.651243][T21369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4098'. [ 594.679415][T21370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4098'. [ 594.910296][T21373] xt_hashlimit: size too large, truncated to 1048576 [ 595.457817][T21400] Cannot find add_set index 4 as target [ 595.482225][ T5916] net_ratelimit: 3 callbacks suppressed [ 595.482254][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.606542][T21406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.065170][T21429] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4112'. [ 596.320482][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4118'. [ 596.426512][T21443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'. [ 596.522025][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.762313][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.867643][T21459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4123'. [ 597.242758][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.252040][T12190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.419823][T21486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4130'. [ 597.434807][T21493] netlink: 'syz.0.4132': attribute type 1 has an invalid length. [ 597.523097][T21493] netlink: 'syz.0.4132': attribute type 1 has an invalid length. [ 597.563476][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.606057][T21502] netlink: 'syz.6.4136': attribute type 3 has an invalid length. [ 597.625788][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4136'. [ 597.693768][T21506] netlink: 'syz.0.4137': attribute type 1 has an invalid length. [ 597.796563][T21513] netlink: 'syz.2.4135': attribute type 32 has an invalid length. [ 597.823173][T21513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4135'. [ 597.951079][T21513] bond2: option coupled_control: invalid value (52) [ 598.000299][T21513] bond2 (unregistering): Released all slaves [ 598.456595][T21534] bond3: option all_slaves_active: invalid value (222) [ 598.470821][T21534] bond3 (unregistering): Released all slaves [ 598.528567][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.612741][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.730539][T21558] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 599.153086][ T9] IPVS: starting estimator thread 0... [ 599.259167][T21595] TCP: TCP_TX_DELAY enabled [ 599.264367][T21592] IPVS: using max 24 ests per chain, 57600 per kthread [ 599.570218][T21587] wg1 speed is unknown, defaulting to 1000 [ 599.630645][T21587] lo speed is unknown, defaulting to 1000 [ 599.844880][T21604] __nla_validate_parse: 3 callbacks suppressed [ 599.844907][T21604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'. [ 599.895265][T21608] netlink: 'syz.6.4159': attribute type 1 has an invalid length. [ 600.294480][T21626] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4165'. [ 600.682985][ T796] net_ratelimit: 3 callbacks suppressed [ 600.683010][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.766980][T21647] vcan0: entered promiscuous mode [ 600.794287][T21647] vcan0: entered allmulticast mode [ 600.858947][T21658] netlink: 'syz.2.4172': attribute type 23 has an invalid length. [ 600.996728][T21645] syzkaller1: entered promiscuous mode [ 601.009205][T21645] syzkaller1: entered allmulticast mode [ 601.221079][T21661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.282875][T21665] gre1: entered promiscuous mode [ 601.322646][T21665] gre1: entered allmulticast mode [ 601.586006][T21677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.723145][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.282700][ T1061] wlan1: Trigger new scan to find an IBSS to join [ 602.594438][T21719] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 602.646231][T21724] tipc: Failed to remove unknown binding: 66,0,0/10463914:167947864/167947865 [ 602.698524][T21724] tipc: Failed to remove unknown binding: 66,0,0/10463914:167947864/167947865 [ 602.751211][T21727] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4198'. [ 602.767196][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.796920][T21731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4201'. [ 602.843491][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.991481][T21738] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4203'. [ 603.003251][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.011785][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.046474][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4202'. [ 603.056006][T21739] bond0: left allmulticast mode [ 603.060923][T21739] bond_slave_0: left allmulticast mode [ 603.082590][T21739] bond_slave_1: left allmulticast mode [ 603.095247][T21739] bridge1: left allmulticast mode [ 603.107327][T21739] bond0: left promiscuous mode [ 603.120822][T21739] bond_slave_0: left promiscuous mode [ 603.133912][T21739] bond_slave_1: left promiscuous mode [ 603.139755][T21739] bridge1: left promiscuous mode [ 603.147566][T21739] bridge0: port 3(bond0) entered disabled state [ 603.197340][T21739] bridge_slave_1: left allmulticast mode [ 603.208728][T21739] bridge_slave_1: left promiscuous mode [ 603.218292][T21739] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.236383][T21739] bridge_slave_0: left allmulticast mode [ 603.244679][T21739] bridge_slave_0: left promiscuous mode [ 603.253894][T21739] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.417490][T21760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4209'. [ 603.432542][T21748] tipc: Invalid UDP bearer configuration [ 603.432611][T21748] tipc: Enabling of bearer rejected, failed to enable media [ 603.468359][T21755] netlink: 'syz.0.4207': attribute type 1 has an invalid length. [ 603.477424][T21755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4207'. [ 603.490393][T21755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4207'. [ 603.497121][T21760] wg1 speed is unknown, defaulting to 1000 [ 603.524925][T21755] netlink: 'syz.0.4207': attribute type 2 has an invalid length. [ 603.541485][T21755] netlink: 'syz.0.4207': attribute type 2 has an invalid length. [ 603.548559][T21760] lo speed is unknown, defaulting to 1000 [ 603.582905][T21755] netlink: 'syz.0.4207': attribute type 2 has an invalid length. [ 603.615024][T21770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4210'. [ 603.803689][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.990508][T21787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 604.249167][T11610] lec:lec_start_xmit: lec0:No lecd attached [ 604.574201][T21813] netlink: 'syz.5.4222': attribute type 1 has an invalid length. [ 604.597632][T21804] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 604.608062][T21804] team0: Device macvlan2 is already an upper device of the team interface [ 604.849545][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.008976][T21826] __nla_validate_parse: 69 callbacks suppressed [ 605.009004][T21826] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4226'. [ 605.324809][ T1334] wlan1: Trigger new scan to find an IBSS to join [ 605.450856][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4232'. [ 605.469984][T21848] gre1: entered promiscuous mode [ 605.494656][T21848] gre1: entered allmulticast mode [ 605.645573][T21853] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4233'. [ 605.672580][T21862] ip6gre1: entered allmulticast mode [ 605.857831][T21870] netlink: zone id is out of range [ 605.874575][T21870] netlink: zone id is out of range [ 605.879997][T21870] netlink: zone id is out of range [ 605.887600][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.895844][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.912518][T21870] netlink: zone id is out of range [ 605.920741][T21870] netlink: zone id is out of range [ 605.951746][T21870] netlink: del zone limit has 4 unknown bytes [ 606.070207][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4241'. [ 606.122639][T21883] Cannot find set identified by id 1 to match [ 606.149730][T21887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.158352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.183121][T21889] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4242'. [ 606.223347][T21889] 0·: renamed from hsr_slave_1 (while UP) [ 606.235211][T21889] 0·: entered allmulticast mode [ 606.503554][T21913] netlink: 'syz.0.4248': attribute type 1 has an invalid length. [ 606.563083][T21913] netlink: 'syz.0.4248': attribute type 1 has an invalid length. [ 606.594281][T21913] netlink: 'syz.0.4248': attribute type 1 has an invalid length. [ 606.631573][T21913] netlink: 'syz.0.4248': attribute type 1 has an invalid length. [ 606.650876][T21913] netlink: 'syz.0.4248': attribute type 1 has an invalid length. [ 607.190259][T21957] vlan1: entered allmulticast mode [ 607.196931][T21957] veth0_vlan: entered allmulticast mode [ 608.282546][ T8668] wlan1: Creating new IBSS network, BSSID ae:78:e3:90:ad:6a [ 609.321787][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 609.330183][ C0] lec:lec_tx_timeout: lec0 [ 609.747862][T21926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.762839][T21942] validate_nla: 28 callbacks suppressed [ 609.762864][T21942] netlink: 'syz.2.4255': attribute type 1 has an invalid length. [ 609.780715][T21942] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4255'. [ 609.790528][T21942] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4255'. [ 609.805617][T21942] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4255'. [ 609.991127][T21967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4262'. [ 610.057989][T21970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4263'. [ 610.085873][T21970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4263'. [ 610.105820][T21972] netlink: 'syz.5.4264': attribute type 2 has an invalid length. [ 610.134251][T21974] netlink: 'syz.5.4264': attribute type 2 has an invalid length. [ 613.802659][ T154] net_ratelimit: 5 callbacks suppressed [ 613.802685][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.882967][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.733051][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.002405][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.648192][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.042103][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.769862][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 625.402718][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.334018][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.791355][T21995] netlink: 'syz.0.4266': attribute type 22 has an invalid length. [ 629.799718][T21995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4266'. [ 629.864989][T21995] netlink: 'syz.0.4266': attribute type 22 has an invalid length. [ 629.873788][ T1334] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.891186][T12190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.899650][T21995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4266'. [ 629.920074][ T1334] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.967003][ T1334] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.023048][ T63] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.281957][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 630.290107][ C0] lec:lec_tx_timeout: lec0 [ 630.395569][T22025] netlink: 'syz.0.4277': attribute type 21 has an invalid length. [ 630.405435][T22025] IPv6: NLM_F_CREATE should be specified when creating new route [ 630.452586][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.912136][T22057] netlink: 'syz.1.4285': attribute type 1 has an invalid length. [ 630.979312][T22050] syzkaller0: entered promiscuous mode [ 631.008295][T22050] syzkaller0: entered allmulticast mode [ 631.015058][T22059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4285'. [ 632.014916][T22099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4296'. [ 633.929109][T22093] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 633.944316][T22093] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 634.041055][T22105] lo: Caught tx_queue_len zero misconfig [ 634.132974][T22118] netlink: 'syz.1.4298': attribute type 8 has an invalid length. [ 634.466850][T22127] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4302'. [ 634.583535][T22143] netlink: 'syz.2.4305': attribute type 18 has an invalid length. [ 635.074392][T22166] netlink: 54 bytes leftover after parsing attributes in process `syz.2.4312'. [ 635.109904][T22166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4312'. [ 635.375178][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4317'. [ 635.563427][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.584894][T22189] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.604763][T22196] sctp: [Deprecated]: syz.2.4323 (pid 22196) Use of int in max_burst socket option. [ 635.604763][T22196] Use struct sctp_assoc_value instead [ 635.644433][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.786814][T22200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4325'. [ 635.820982][T22197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.832999][T22197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.965546][T22210] netlink: 'syz.6.4328': attribute type 9 has an invalid length. [ 636.175316][T22220] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 636.198251][T22218] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4331'. [ 636.210172][T22218] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4331'. [ 636.379979][T22235] netlink: 'syz.0.4335': attribute type 4 has an invalid length. [ 636.653626][T22252] netlink: 212304 bytes leftover after parsing attributes in process `syz.6.4341'. [ 636.674933][T22252] openvswitch: netlink: Message has 6 unknown bytes. [ 636.711159][T22254] syzkaller0: entered promiscuous mode [ 636.748164][T22254] syzkaller0: entered allmulticast mode [ 636.831146][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4345'. [ 636.922295][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.993019][T22277] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4350'. [ 637.042989][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4350'. [ 637.061900][T22277] block nbd3: Unsupported socket: should be TCP or UNIX. [ 637.365536][T22291] syzkaller0: entered promiscuous mode [ 637.371185][T22291] syzkaller0: entered allmulticast mode [ 640.349492][T22300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 640.588245][T22340] __nla_validate_parse: 4 callbacks suppressed [ 640.588266][T22340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4362'. [ 640.594979][T22342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4362'. [ 640.601488][T22342] vxcan2: entered allmulticast mode [ 640.675367][T22340] vxcan2: entered allmulticast mode [ 640.682892][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.767575][T22335] syzkaller0: entered promiscuous mode [ 640.774455][ T8668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.783593][ T63] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 640.796859][T22353] netlink: 'syz.1.4364': attribute type 17 has an invalid length. [ 640.797072][T22335] syzkaller0: entered allmulticast mode [ 640.815470][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4364'. [ 640.835576][T22353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4364'. [ 640.835914][T22355] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4367'. [ 641.035537][T22363] netlink: 'syz.2.4371': attribute type 1 has an invalid length. [ 643.363647][T22355] veth0_to_team: entered promiscuous mode [ 643.370788][T22355] veth0_to_team: left promiscuous mode [ 643.387133][T22363] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 643.708921][T22384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4376'. [ 644.058165][T22392] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.253223][T22392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.266093][T22392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.376491][T22406] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 644.414316][ T5881] wg1 speed is unknown, defaulting to 1000 [ 644.421808][ T1334] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.428957][ T5881] syz2: Port: 1 Link DOWN [ 644.469372][ T1334] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.494657][ T1334] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.536638][ T1334] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.573614][ T1061] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.607946][ T1061] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.638913][ T1061] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 644.688952][ T1061] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.755480][T22429] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20001 [ 644.798972][T22429] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 644.822775][T22426] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4387'. [ 644.836617][T22429] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20001 [ 644.848791][T22429] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20004 [ 644.873114][T22426] syzkaller1: entered promiscuous mode [ 644.878655][T22426] syzkaller1: entered allmulticast mode [ 645.015107][T22442] IPVS: Unknown mcast interface: vcan0 [ 645.078090][T22449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4392'. [ 645.180451][T22452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.308042][T22459] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 645.318997][T22463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4399'. [ 645.885910][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.129543][T22518] netlink: 'syz.5.4412': attribute type 1 has an invalid length. [ 646.150473][T22518] nbd: error processing sock list [ 646.226191][T22521] block nbd0: reconnected socket [ 646.226727][ T5834] block nbd0: Receive control failed (result -107) [ 646.270191][T22523] nbd: nbd0 already in use [ 646.284878][T22523] block nbd0: NBD_DISCONNECT [ 646.290702][T22523] block nbd0: Send disconnect failed -32 [ 646.353781][T22523] block nbd0: Send disconnect failed -32 [ 646.365398][T22523] block nbd0: shutting down sockets [ 646.464406][T22534] IPv6: sit2: Disabled Multicast RS [ 646.523974][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.532762][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.549712][T12190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.570427][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.586031][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.620651][T22537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4420'. [ 646.744282][T22548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4424'. [ 646.803347][T22557] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4424'. [ 646.985943][T22570] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4429'. [ 647.198491][T22572] bond4: Unable to set down delay as MII monitoring is disabled [ 647.255095][T22572] bond4 (unregistering): Released all slaves [ 647.846614][T22614] netlink: 'syz.2.4443': attribute type 1 has an invalid length. [ 647.860781][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4444'. [ 648.143849][T22635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4449'. [ 648.174934][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4449'. [ 648.238065][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4449'. [ 648.279887][T22635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4449'. [ 648.411550][T22640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4451'. [ 648.457601][T22640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.509239][T22640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.688928][T22661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.122186][T22679] ipt_rpfilter: unknown options [ 649.196242][T22683] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 649.310210][T22694] [ 649.312590][T22694] ====================================================== [ 649.319641][T22694] WARNING: possible circular locking dependency detected [ 649.326820][T22694] syzkaller #0 Not tainted [ 649.331248][T22694] ------------------------------------------------------ [ 649.338270][T22694] syz.1.4464/22694 is trying to acquire lock: [ 649.344371][T22694] ffffffff8e882e40 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 649.353712][T22694] [ 649.353712][T22694] but task is already holding lock: [ 649.361078][T22694] ffff888032964538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 649.370434][T22694] [ 649.370434][T22694] which lock already depends on the new lock. [ 649.370434][T22694] [ 649.380842][T22694] [ 649.380842][T22694] the existing dependency chain (in reverse order) is: [ 649.390119][T22694] [ 649.390119][T22694] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 649.397866][T22694] __mutex_lock+0x19f/0x1300 [ 649.402989][T22694] __ipv6_dev_mc_inc+0x4e/0xa50 [ 649.408372][T22694] __ipv6_sock_mc_join+0x503/0x750 [ 649.414010][T22694] ipv6_mcast_join_leave+0x1a2/0x240 [ 649.419895][T22694] do_ipv6_setsockopt+0x18f7/0x31c0 [ 649.425648][T22694] ipv6_setsockopt+0x59/0x170 [ 649.430854][T22694] do_sock_setsockopt+0x17c/0x1b0 [ 649.436432][T22694] __x64_sys_setsockopt+0x13d/0x1b0 [ 649.442163][T22694] do_syscall_64+0x14d/0xf80 [ 649.447279][T22694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.453701][T22694] [ 649.453701][T22694] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 649.461533][T22694] lock_sock_nested+0x48/0x100 [ 649.466898][T22694] inet_shutdown+0x6a/0x390 [ 649.472061][T22694] nbd_mark_nsock_dead+0x2e9/0x560 [ 649.477810][T22694] recv_work+0x1c7f/0x1d90 [ 649.482863][T22694] process_scheduled_works+0xb02/0x1830 [ 649.489050][T22694] worker_thread+0xa50/0xfc0 [ 649.494165][T22694] kthread+0x388/0x470 [ 649.498810][T22694] ret_from_fork+0x51e/0xb90 [ 649.503938][T22694] ret_from_fork_asm+0x1a/0x30 [ 649.509243][T22694] [ 649.509243][T22694] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 649.516891][T22694] __mutex_lock+0x19f/0x1300 [ 649.522004][T22694] nbd_queue_rq+0x37b/0x1100 [ 649.527123][T22694] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 649.533322][T22694] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 649.540288][T22694] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 649.546975][T22694] blk_mq_run_hw_queue+0x348/0x4f0 [ 649.552738][T22694] blk_mq_dispatch_list+0xd16/0xe10 [ 649.558459][T22694] blk_mq_flush_plug_list+0x48d/0x570 [ 649.564449][T22694] __blk_flush_plug+0x3ed/0x4d0 [ 649.569982][T22694] __submit_bio+0x28d/0x580 [ 649.575017][T22694] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 649.582245][T22694] block_read_full_folio+0x599/0x830 [ 649.588222][T22694] filemap_read_folio+0x137/0x3b0 [ 649.593784][T22694] do_read_cache_folio+0x358/0x590 [ 649.599422][T22694] read_part_sector+0xb6/0x2b0 [ 649.605053][T22694] adfspart_check_ICS+0xa5/0xa40 [ 649.610518][T22694] bdev_disk_changed+0x7ba/0x1550 [ 649.616258][T22694] blkdev_get_whole+0x380/0x510 [ 649.621771][T22694] bdev_open+0x31e/0xd30 [ 649.626534][T22694] blkdev_open+0x470/0x610 [ 649.631474][T22694] do_dentry_open+0x785/0x14e0 [ 649.636766][T22694] vfs_open+0x3b/0x340 [ 649.641374][T22694] path_openat+0x2e08/0x3860 [ 649.646544][T22694] do_file_open+0x23e/0x4a0 [ 649.651597][T22694] do_sys_openat2+0x113/0x200 [ 649.656916][T22694] __x64_sys_openat+0x138/0x170 [ 649.662306][T22694] do_syscall_64+0x14d/0xf80 [ 649.667422][T22694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.673931][T22694] [ 649.673931][T22694] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 649.681159][T22694] __mutex_lock+0x19f/0x1300 [ 649.686329][T22694] nbd_queue_rq+0xc6/0x1100 [ 649.691450][T22694] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 649.697520][T22694] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 649.704374][T22694] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 649.710964][T22694] blk_mq_run_hw_queue+0x348/0x4f0 [ 649.716609][T22694] blk_mq_dispatch_list+0xd16/0xe10 [ 649.722419][T22694] blk_mq_flush_plug_list+0x48d/0x570 [ 649.728318][T22694] __blk_flush_plug+0x3ed/0x4d0 [ 649.733780][T22694] __submit_bio+0x28d/0x580 [ 649.738815][T22694] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 649.744968][T22694] block_read_full_folio+0x599/0x830 [ 649.750779][T22694] filemap_read_folio+0x137/0x3b0 [ 649.756331][T22694] do_read_cache_folio+0x358/0x590 [ 649.761975][T22694] read_part_sector+0xb6/0x2b0 [ 649.767351][T22694] adfspart_check_ICS+0xa5/0xa40 [ 649.772910][T22694] bdev_disk_changed+0x7ba/0x1550 [ 649.778456][T22694] blkdev_get_whole+0x380/0x510 [ 649.783832][T22694] bdev_open+0x31e/0xd30 [ 649.788593][T22694] blkdev_open+0x470/0x610 [ 649.793535][T22694] do_dentry_open+0x785/0x14e0 [ 649.798917][T22694] vfs_open+0x3b/0x340 [ 649.803515][T22694] path_openat+0x2e08/0x3860 [ 649.808627][T22694] do_file_open+0x23e/0x4a0 [ 649.813739][T22694] do_sys_openat2+0x113/0x200 [ 649.818949][T22694] __x64_sys_openat+0x138/0x170 [ 649.824334][T22694] do_syscall_64+0x14d/0xf80 [ 649.829533][T22694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.835948][T22694] [ 649.835948][T22694] -> #3 (set->srcu){.+.+}-{0:0}: [ 649.843172][T22694] __synchronize_srcu+0xca/0x3e0 [ 649.848637][T22694] elevator_switch+0x1e8/0x7a0 [ 649.854064][T22694] elevator_change+0x2cc/0x450 [ 649.859361][T22694] elevator_set_default+0x36c/0x430 [ 649.865074][T22694] blk_register_queue+0x366/0x430 [ 649.870623][T22694] __add_disk+0x677/0xd50 [ 649.875477][T22694] add_disk_fwnode+0xfb/0x480 [ 649.880856][T22694] nbd_dev_add+0x72c/0xb50 [ 649.885974][T22694] nbd_init+0x168/0x1f0 [ 649.890773][T22694] do_one_initcall+0x250/0x8d0 [ 649.896070][T22694] do_initcall_level+0x104/0x190 [ 649.901563][T22694] do_initcalls+0x59/0xa0 [ 649.906599][T22694] kernel_init_freeable+0x2a6/0x3e0 [ 649.912591][T22694] kernel_init+0x1d/0x1d0 [ 649.917454][T22694] ret_from_fork+0x51e/0xb90 [ 649.922575][T22694] ret_from_fork_asm+0x1a/0x30 [ 649.927958][T22694] [ 649.927958][T22694] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 649.936391][T22694] __mutex_lock+0x19f/0x1300 [ 649.941505][T22694] elevator_change+0x1b3/0x450 [ 649.947050][T22694] elevator_set_none+0xb5/0x140 [ 649.952425][T22694] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 649.958760][T22694] nbd_start_device+0x17f/0xb10 [ 649.964227][T22694] nbd_genl_connect+0x165b/0x1cf0 [ 649.969793][T22694] genl_family_rcv_msg_doit+0x22a/0x330 [ 649.975937][T22694] genl_rcv_msg+0x61c/0x7a0 [ 649.981043][T22694] netlink_rcv_skb+0x232/0x4b0 [ 649.986549][T22694] genl_rcv+0x28/0x40 [ 649.991141][T22694] netlink_unicast+0x80f/0x9b0 [ 649.996601][T22694] netlink_sendmsg+0x813/0xb40 [ 650.001892][T22694] ____sys_sendmsg+0x972/0x9f0 [ 650.007264][T22694] ___sys_sendmsg+0x2a5/0x360 [ 650.012577][T22694] __x64_sys_sendmsg+0x1bd/0x2a0 [ 650.018037][T22694] do_syscall_64+0x14d/0xf80 [ 650.023156][T22694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.029571][T22694] [ 650.029571][T22694] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 650.038183][T22694] blk_alloc_queue+0x546/0x680 [ 650.043668][T22694] __blk_mq_alloc_disk+0x197/0x390 [ 650.049825][T22694] nbd_dev_add+0x499/0xb50 [ 650.054856][T22694] nbd_init+0x168/0x1f0 [ 650.059541][T22694] do_one_initcall+0x250/0x8d0 [ 650.064935][T22694] do_initcall_level+0x104/0x190 [ 650.070404][T22694] do_initcalls+0x59/0xa0 [ 650.075317][T22694] kernel_init_freeable+0x2a6/0x3e0 [ 650.081044][T22694] kernel_init+0x1d/0x1d0 [ 650.085897][T22694] ret_from_fork+0x51e/0xb90 [ 650.091011][T22694] ret_from_fork_asm+0x1a/0x30 [ 650.096312][T22694] [ 650.096312][T22694] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 650.103532][T22694] __lock_acquire+0x15a5/0x2cf0 [ 650.108923][T22694] lock_acquire+0xf0/0x2e0 [ 650.114035][T22694] fs_reclaim_acquire+0x71/0x100 [ 650.119506][T22694] __kmalloc_cache_noprof+0x40/0x660 [ 650.125313][T22694] __ipv6_dev_mc_inc+0x44f/0xa50 [ 650.130879][T22694] __ipv6_sock_mc_join+0x503/0x750 [ 650.136599][T22694] inet6_addr_add+0x3cf/0xb20 [ 650.141949][T22694] inet6_rtm_newaddr+0xa17/0xe30 [ 650.147407][T22694] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 650.152935][T22694] netlink_rcv_skb+0x232/0x4b0 [ 650.158322][T22694] netlink_unicast+0x80f/0x9b0 [ 650.163607][T22694] netlink_sendmsg+0x813/0xb40 [ 650.169075][T22694] ____sys_sendmsg+0x972/0x9f0 [ 650.174359][T22694] ___sys_sendmsg+0x2a5/0x360 [ 650.179817][T22694] __x64_sys_sendmsg+0x1bd/0x2a0 [ 650.185628][T22694] do_syscall_64+0x14d/0xf80 [ 650.190746][T22694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.197374][T22694] [ 650.197374][T22694] other info that might help us debug this: [ 650.197374][T22694] [ 650.208166][T22694] Chain exists of: [ 650.208166][T22694] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 650.208166][T22694] [ 650.221317][T22694] Possible unsafe locking scenario: [ 650.221317][T22694] [ 650.229238][T22694] CPU0 CPU1 [ 650.234715][T22694] ---- ---- [ 650.240256][T22694] lock(&idev->mc_lock); [ 650.244861][T22694] lock(sk_lock-AF_INET6); [ 650.252034][T22694] lock(&idev->mc_lock); [ 650.258985][T22694] lock(fs_reclaim); [ 650.263071][T22694] [ 650.263071][T22694] *** DEADLOCK *** [ 650.263071][T22694] [ 650.271333][T22694] 3 locks held by syz.1.4464/22694: [ 650.276632][T22694] #0: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 650.286138][T22694] #1: ffff8880342d2360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_addr_add+0x3be/0xb20 [ 650.296247][T22694] #2: ffff888032964538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 650.305935][T22694] [ 650.305935][T22694] stack backtrace: [ 650.311833][T22694] CPU: 1 UID: 0 PID: 22694 Comm: syz.1.4464 Not tainted syzkaller #0 PREEMPT(full) [ 650.311855][T22694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.311866][T22694] Call Trace: [ 650.311874][T22694] [ 650.311881][T22694] dump_stack_lvl+0xe8/0x150 [ 650.311909][T22694] print_circular_bug+0x2e1/0x300 [ 650.311936][T22694] check_noncircular+0x12e/0x150 [ 650.311962][T22694] __lock_acquire+0x15a5/0x2cf0 [ 650.311983][T22694] ? rcu_is_watching+0x15/0xb0 [ 650.312007][T22694] ? __mutex_lock+0x319/0x1300 [ 650.312029][T22694] lock_acquire+0xf0/0x2e0 [ 650.312047][T22694] ? __kmalloc_cache_noprof+0x40/0x660 [ 650.312066][T22694] ? __pfx___mutex_lock+0x10/0x10 [ 650.312083][T22694] fs_reclaim_acquire+0x71/0x100 [ 650.312103][T22694] ? __kmalloc_cache_noprof+0x40/0x660 [ 650.312119][T22694] __kmalloc_cache_noprof+0x40/0x660 [ 650.312137][T22694] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 650.312159][T22694] __ipv6_dev_mc_inc+0x44f/0xa50 [ 650.312182][T22694] __ipv6_sock_mc_join+0x503/0x750 [ 650.312204][T22694] ? __local_bh_enable_ip+0xd0/0x130 [ 650.312225][T22694] inet6_addr_add+0x3cf/0xb20 [ 650.312249][T22694] inet6_rtm_newaddr+0xa17/0xe30 [ 650.312268][T22694] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 650.312281][T22694] ? __dev_queue_xmit+0x277/0x3890 [ 650.312390][T22694] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 650.312404][T22694] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 650.312429][T22694] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 650.312449][T22694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 650.312468][T22694] ? ref_tracker_free+0x693/0x840 [ 650.312543][T22694] ? __copy_skb_header+0xa3/0x4a0 [ 650.312561][T22694] ? __pfx_ref_tracker_free+0x10/0x10 [ 650.312584][T22694] netlink_rcv_skb+0x232/0x4b0 [ 650.312606][T22694] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 650.312635][T22694] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 650.312658][T22694] ? netlink_deliver_tap+0x2e/0x1b0 [ 650.312681][T22694] netlink_unicast+0x80f/0x9b0 [ 650.312702][T22694] ? __pfx_netlink_unicast+0x10/0x10 [ 650.312720][T22694] ? netlink_sendmsg+0x650/0xb40 [ 650.312740][T22694] ? skb_put+0x11b/0x210 [ 650.312764][T22694] netlink_sendmsg+0x813/0xb40 [ 650.312788][T22694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 650.312810][T22694] ? aa_sock_msg_perm+0xf1/0x1b0 [ 650.312836][T22694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 650.312855][T22694] ____sys_sendmsg+0x972/0x9f0 [ 650.312871][T22694] ? futex_unqueue+0x211/0x240 [ 650.312906][T22694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.312924][T22694] ? import_iovec+0x73/0xa0 [ 650.312982][T22694] ___sys_sendmsg+0x2a5/0x360 [ 650.312999][T22694] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.313016][T22694] ? futex_wait+0x29a/0x380 [ 650.313048][T22694] ? __fget_files+0x2a/0x420 [ 650.313071][T22694] ? __fget_files+0x3a0/0x420 [ 650.313097][T22694] __x64_sys_sendmsg+0x1bd/0x2a0 [ 650.313114][T22694] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 650.313134][T22694] ? rcu_is_watching+0x15/0xb0 [ 650.313159][T22694] do_syscall_64+0x14d/0xf80 [ 650.313174][T22694] ? trace_irq_disable+0x3b/0x150 [ 650.313198][T22694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.313215][T22694] ? clear_bhb_loop+0x40/0x90 [ 650.313233][T22694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.313249][T22694] RIP: 0033:0x7f4ff019c799 [ 650.313266][T22694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.313282][T22694] RSP: 002b:00007f4ff1032028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.313300][T22694] RAX: ffffffffffffffda RBX: 00007f4ff0415fa0 RCX: 00007f4ff019c799 [ 650.313312][T22694] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 650.313322][T22694] RBP: 00007f4ff0232c99 R08: 0000000000000000 R09: 0000000000000000 [ 650.313333][T22694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.313342][T22694] R13: 00007f4ff0416038 R14: 00007f4ff0415fa0 R15: 00007fffbf988d98 [ 650.313360][T22694] [ 651.002986][T12190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.652251][ T1061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.661448][T22464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.670201][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.158252][T22684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 652.282261][T12190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.762488][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.042585][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog