last executing test programs: 4.66154203s ago: executing program 3 (id=7938): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) 4.364476094s ago: executing program 0 (id=7940): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000540)={&(0x7f0000000040)=0x7, 0xd, &(0x7f00000002c0)=[{}, {}, {}], &(0x7f0000000500)}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYRES16=r1], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) 4.24960895s ago: executing program 4 (id=7941): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x2}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x40088a0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000a002430180004"], 0x2c}}, 0x0) recvfrom(r2, &(0x7f0000000000)=""/100, 0x64, 0x40000000, &(0x7f0000000080)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-camellia-asm\x00'}, 0x80) 4.109303587s ago: executing program 3 (id=7943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) shutdown(r4, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) recvmmsg(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x102, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000001540)=0x7, 0x3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x42) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r6) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000000503000000000000cf185d3cc66210"], 0x14}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.943534678s ago: executing program 0 (id=7944): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8}]}}]}, 0x3c}}, 0x0) (async) 3.879736018s ago: executing program 2 (id=7945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbf91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r2, &(0x7f0000000040)='l', 0xfef4, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.76873068s ago: executing program 4 (id=7947): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='*#-[#\x00', 0x40000, &(0x7f0000000040)={@align=0x5, {0x8000, 0x3, 0x0, 0xffffffff80000000}}, 0x80000000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)}, {[0x1cffdda3, 0x5c, 0x80000001]}, 0x80000000, 0x48, &(0x7f0000000100)=""/72}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=0xffffffffffffffff, 0xc, 0x1, 0x34, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4000}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0xb, &(0x7f0000000400)=@raw=[@alu={0x4, 0x137d8d1db7dcc155, 0x2, 0xc, 0x5, 0xfffffffffffffffe, 0x7ffffffffffffffe}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}], &(0x7f0000000480)='GPL\x00', 0x8, 0x1000, &(0x7f00000004c0)=""/4096, 0x41000, 0x76, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0x9, 0x1d3b, 0x1b}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001540)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001580)=[{0x2, 0x1, 0xe, 0xa}, {0x0, 0x5, 0xe, 0xc}], 0x10, 0xcb78}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r3, r0, 0x2c, 0x8, 0x0, @void, @value=r4, @void, @void, r2}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000001680), r0) writev(r4, &(0x7f0000001a00)=[{&(0x7f00000016c0)="151e87ebf5410231b43dc49cc3856f91d299acf67d6d6607412f29256e1850a11228361dd9fbb39e3313f87061d72270db4cc0ba00c258b8d7b2e4ee2b292cb0fd01e37443218e41cf1e88f24377b1d15a90289b617dd577542cede8d35653c90eb0386beba67b7c7b419e9fca8b553b1d6b597fe7eb5d869731fcd2afa1dd1c5dca850999fe473e8f9401841d5f64fcfa7ca57fcf2d8ed8084135345321797e6a0b50082d5f7aa8334531c4ba39d751547a4d2eac27a7ad6ec0226e3b76b88b58", 0xc1}, {&(0x7f00000017c0)="8e2bed555ee4374d0ca29e091ed5e86a581f2c45c685a428cfb06d9966b21a6cb9b3650d95ae32197f21439be85561430e2daedae96e9748db82618e3eb95d96af9faf4824c981a3422c32663031", 0x4e}, {&(0x7f0000001840)="9d059f5252bc55c73788d6b22a276006d35897d6aed1deabd85e1c21a04816d2b7e4c860036bf3927f7f45a3a9a1081ead36752808af75ce158cc48d49d43830e55fd5d7def6a67570377b6bad72cc59912cd01e8e9f2c4510e149898770d2b2df651578192f0f0143ea208f3ecb4729aa9d2dcd9750a7fcd375ae78cd0250d4b8a2bf", 0x83}, {&(0x7f0000001900)="3317f2cb575ca05baf90311a13586fb4fdd3a23b2678bbc4c4b84e0272e14064437ae9bf1c5aad68700c969f741e6ac127e6e56a4fb6ab66821c606db510b85e8bac3dc1c229a471180dd9facbb83bfae736f28f13cfa096523caf1050f5b9d35dcff46f8c5938647259ccb490d57d0fdb52fa26ac311851e5cae94879366c6e86f711e3c51b3bd3a73f2fe1d4f7b6b67836394dd5e156f8c7aca365c509ada44165eb76675fd233798128d6646327b2a5039bbe9bce0c1d820b23a347bd620be3f0d2d7a2e21435c97a331714139c7aba2be5", 0xd3}], 0x4) r5 = openat$cgroup_devices(r0, &(0x7f0000001a40)='devices.allow\x00', 0x2, 0x0) ioctl(r1, 0xfff, &(0x7f0000001a80)="718991e724b4c56d4ff9cb09816374e0b2857cd0298472b05b41467163f972dd245e17aac8c426e884") r6 = socket$pppoe(0x18, 0x1, 0x0) write$cgroup_devices(r5, &(0x7f0000001ac0)={'c', ' *:* ', 'wm\x00'}, 0x9) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) write$cgroup_devices(r0, &(0x7f0000001d40)={'b', ' *:* ', 'm\x00'}, 0x8) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000001d80)={{r5}, "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"}) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000002d80)) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000030c0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003080)={&(0x7f0000002e40)={0x214, 0xa, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0x85, 0xd, 0x1, 0x0, "3cc81ad0cf595bd6d82a27987ca0d4328609da01e0719d89e778eb0fb2adc5738f75ef7e58f52d2ba20f0426304c8faa1475dd85d03ea7585558105a9e27356e4021bf488d1e3bf8efa219617f6f3056b4268eef0ab42446741400ce4b630f676853f58bb716729759c896f4fbf5a258a92c821682175a6875213a7f8e900e715d"}, @NFTA_SET_DESC={0x13c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x130, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x56}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd90}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x617a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3fe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa00000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa9e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x214}, 0x1, 0x0, 0x0, 0x44000}, 0x20048000) splice(r7, &(0x7f0000003100)=0x2, r3, &(0x7f0000003140)=0x3, 0x5, 0x6) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000031c0)={@private1, 0x0}, &(0x7f0000003200)=0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000003340)={r6, &(0x7f0000003240)=')\x00', 0x202401, &(0x7f0000003280)={@_ha_fsid={[0x7fffffff, 0x3fc]}, {0x9, 0x1ff, 0x8, 0x1}}, 0x5a, &(0x7f00000032c0), &(0x7f0000003300)=0x7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003180)={@ifindex=r8, r0, 0x2b, 0x0, 0x0, @void, @value=r9, @void, @void, r2}, 0x20) close(r5) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000003380)=0x6) r10 = accept$phonet_pipe(r9, &(0x7f00000033c0), &(0x7f0000003400)=0x10) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r10, 0x40109441, &(0x7f0000003440)={0x3, 0x1}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000034c0)=@filter={'filter\x00', 0xe, 0x4, 0x618, 0xffffffff, 0x0, 0x2f0, 0x110, 0xffffffff, 0xffffffff, 0x548, 0x548, 0x548, 0xffffffff, 0x4, &(0x7f0000003480), {[{{@ipv6={@private2, @mcast2, [0xffffff00, 0xff000000], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'wg0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x16, 0x3, 0x6, 0x58}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x1, "9a6b1fd751b05aeb35a521ac909e646906c5ad7c820627978cdf3370b14a"}}}, {{@uncond, 0x0, 0x1a0, 0x1e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x5, 0x3, 0x20, 0x0, 'syz1\x00', 0x61}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "622d51711609573bf1f74bddbe2b725f8a3f02e491b6321e1b5a6c5bc336"}}, {{@uncond, 0x0, 0x218, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x9, [0xfffffff9, 0x2370], 0x2, 0x2, 0x2, [@dev={0xfe, 0x80, '\x00', 0x14}, @remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @loopback, @mcast1, @empty, @mcast2, @empty], 0xb}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xffff7b5c, 0x40, 0x5, {0x69}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x8, 0x2, 0x6, 0x4, 0xca4, 0x81, 0xfffffff7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000003b40)={0x0, 0x56cd, 0x0, 0x4b25, 0x800}, &(0x7f0000003b80)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000003bc0)={r12, 0xf, 0x8}, &(0x7f0000003c00)=0x8) 3.494673978s ago: executing program 0 (id=7948): syz_emit_ethernet(0xde, &(0x7f0000001900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff810000000800450000cc000000000001907864010100ac1414aa00000000032c00004c000000000000000089000000000000e0000002862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac141400ffffffff7f000001e000000286480000000000074b6cefc500000cdf61168c24ac88ad078c010a2189ea43a2149b8400020012c94400040000008f51a80e5f48fd74060011ccf0294e2a3bdb4aa42b249e8e0c1a44145600"/222], 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x33) 3.483236701s ago: executing program 4 (id=7949): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x1000, "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"}, &(0x7f0000001040)=0x1008) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000001080)={r2, @in={{0x2, 0x4e20, @private=0xa010101}}}, 0x84) 3.354216107s ago: executing program 1 (id=7950): r0 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r0, 0x3a, 0x1, 0x0, 0x20000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(0xffffffffffffffff, 0x0, 0x40000020) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000040)=0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r5}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r5}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r7], 0x20}}, 0x8080) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r7], 0x20}}, 0x8080) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r4], 0x34}}, 0x4008000) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r4], 0x34}}, 0x4008000) 3.352897233s ago: executing program 0 (id=7951): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x37, &(0x7f00000003c0)=""/235, &(0x7f00000004c0)=0xeb) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000500)=0x0) sendmsg$nl_generic(r6, &(0x7f0000000a80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000540)={0x4e0, 0x35, 0x2, 0x70bd29, 0x25dfdbfc, {0x1e}, [@generic="12a0762eacca460fc7db985a92a4c0767231a08f6a341e405dab9cba5b223b3b7453c2c0e2b4f9feaa762fdd76f88ada93b2676c03e09226a044b37517fe8515ea4e855d52cdd4387d06d505", @generic="cb90885a44085f979c20bcbac72d29af1b59ee42537883b98a558de807f4d2435fd8b5a605d75964e7b1a7b2cf52bafeb554d3ceef2b7f34ca4b854d58b2484864bb89b3dff38f7c72171fbcfa6e8c34c29ce1b1d541efcfe090fc760795d06ebe1e30b2566a83b46c2f844ae20847ac6fb533cabdfe6313e83fce2c87493e", @nested={0xaa, 0x68, 0x0, 0x1, [@generic="b4751c1dbd096386431c5d4b94c1b58c6638bb56884b2aa1d94c8826cddac3d5c99a7de9c33f361a43d5737491cb08d12d4862f6bb8e3807a87f69f8dec88aab5d256452394fe8a792586f16711d7cd4c5106b108a4334cb0933913396144c1aec809ec4fa77770f0512a67799d99b5d926811891c79b79c221143314a3931cbd27337b948fa1402248a1db69b4db001f7883fff3731919ce9d2439960edfa3ce328", @nested={0x4, 0x99}]}, @generic="880211c4517132c7c763f9bdc139f97fd366e0866fff003318c89c73c8167f85beea513c61e0a486388c3cb6639409f3c00dde3227b03965335bf8fc22ca5d3fc122aa5a0ff99ec86a821a5f85989b6024d50c09d546f7493fb5c8032b29599d1bee09df28c4cc14bfec8ce4953a7102905ce8d7d54ad63f74", @generic="b7c78bfaf829f21337896a9cee441bb8a5f31e1b32b234f13706be1f99f61f169d25772cacaf225074afc8a029d82b3ea32b184e727ae39d70e9e82ee17ca2e84c871c271b09c8929e4f8c2fe6c16ac547ccec0becb672688c571351bd0d775a000c642c05db79be6c46a2b3f451d4dbab5b9db1e3613b73a6e45fa9b4f7925f97706bc19e6f19f03e39529cc3890c940e43e02d91878827aea0f7901a9438323bc80fff28bae6ac17f759453b775f399384d046b2e8996c965022f7ffbc45c70bf17d10e892503e0bdc573e3c8dbfe0aec97d2c927c2160afe3c78ef4eab6e5ab0be5", @nested={0x1d5, 0xb, 0x0, 0x1, [@typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x14a}, @typed={0x8, 0x131, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x14d}, @generic="e0cb0a64d4a5fbc60d3f4a367155af5766bd16229910df49feade125ffa4778d739674144f02a845ab7035d77d499bd602055e32c87e3e2b6266ff9e12ca666e51b0716c09c16da56f3eaf18f0dc4b0cde7984f00a8599e790ff444bf8135d62a7f1a0abf2b6ad013fc3d0b13ac164ce6afe0d3b46b871b4fbaf3c8277fbd6c50f3a8a0c0f46e9192a087f2265915fa93f03ef1af49fff3dd728", @generic="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"]}, @typed={0x11, 0x116, 0x0, 0x0, @str='/dev/net/tun\x00'}, @generic="01ee92d48db7caef14c9"]}, 0x4e0}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) (async) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x11) socketpair(0x23, 0x1, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) (async) r11 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000b00)={0x80, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe, 0x1a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000004) (async) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="d6c63431ed10fa91db6ef07b3a06c44f1440e23d82238e19a1297e83b7bc44d00d5bb6170400dc5735cb8b4196d24bb5cf8978886782775f1f4add955f37a653c8412ade69b561da3616e2838c91c6312ea639702328d0284a6c6a1881c38f28616e10b5cf4e6a857a42363c831e21ad550cbdd34c6115be6c0c0a36cb7493350c578216231a750fd6ab1db1fc979d58b9a4139548872ce46e38ad784bc7546d3415a8d55b8379e33387f44b47757b2157ebd4f1", 0xb4) 3.204805756s ago: executing program 4 (id=7952): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}]}], {0x14}}, 0x60}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), 0x0}, 0x20) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r4, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r8, 0xb15, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x1400c000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40448cc) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c, 0x11, r0, 0x100000000) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r14 = accept(r13, 0x0, 0x0) recvmsg(r14, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 2.917722974s ago: executing program 3 (id=7953): r0 = socket(0x40000000015, 0x5, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10102) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xc7f0}, 0x10) (async, rerun: 64) write(r2, &(0x7f0000000600)="240000001a005f0214f9f4070009040081000000fd000002000000000800040001e628d9", 0x24) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) (async) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)="7091408aac879d00a10b9251bf53e0e08b680b55b1418985f36ec002e07e722e18f405ab6edce1499402b5c1d9865f5aeef65501967216be9f3f69c994542f2c92295e5554bf3dc6841b68f297de359e5d3bf36339cbb3335f1b577886c658c2d6465e096f0c44b16d1dc5b87b0d88622433fff4e6d338f2c57ec6498eddb024f60636af5a8bbb44b8f019a15187648d1e5e4b800b2ca23d242c581bf72310d98d42a17c735367cdc72e6c730a041466efb7d97d017d9477f19510e234b050f828b1f9fdeb454dd82f2d65ee9a1e7ba8d99915f614917a2d7072d2cffff9a0d5", 0xe0}], 0x1}, 0x24000801) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611", 0x2c}, {&(0x7f0000001a80)="7cdb015fbb1990080000006a2615837b6487d32d2fb46cbd152314980741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b03d0369ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe9216c8b8ba00820c3de3c53bdba305901d7103513c9c2b71ea428a38f832416f3cafeccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68d54e854db809b155cc566b08f25c90861e29ab717f760ad57bbfd48e867a91d63c1ac78aafe22fc56f053ed1cc606f0", 0xdc}, {&(0x7f0000000800)="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", 0xe0b}], 0x3}, 0x24000008) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeff00c}, {0x6}]}, 0x10) (async) sendto(r7, 0x0, 0x0, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.725580752s ago: executing program 2 (id=7954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0xfffffffffffffd93}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x0, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0xfffffffffffffd93}}, 0x0) (async) 2.416945132s ago: executing program 1 (id=7955): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f00000002c0)={'dummy0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000580)=0x8, 0x6d5a0a95) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a000008001500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r1, @ANYBLOB="04000280233736eb51f3bca1446ec2f92fc9cecff74c55580ca8617fa79f92196d866d4cc56ee9572b522c4e66916104f1a34bcbf7b772cb9c4c15986026fd14de88348b05180530242fe3fec0cc67ebbc6c404b6ea36b93220968d5"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x48810) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xfff2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) 2.384623346s ago: executing program 2 (id=7956): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$inet(0x2, 0xa, 0xd) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) socket$nl_generic(0x10, 0x3, 0x10) epoll_pwait(0xffffffffffffffff, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000400), 0xffffffffffffff71) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x32, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000240), &(0x7f00000003c0), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r12, 0x1, 0x70bd24, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r10, @ANYRESOCT=0x0], 0xb4}, 0x1, 0x0, 0x0, 0x4040854}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 2.174508624s ago: executing program 0 (id=7957): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x8, 0x10}], 0x1, 0x40800) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r2}, 0x38) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94) 2.162857237s ago: executing program 3 (id=7958): socket$netlink(0x10, 0x3, 0x9) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0xe4, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xe4}}, 0x0) socket$kcm(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cbefb59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5401afeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ebe4c24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xce843ee}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbf3d827}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5255b78e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f71323b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d0b7489}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69206e55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48c3d4a2}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4035}, 0x4804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r8, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.011847866s ago: executing program 4 (id=7959): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x309, 0x0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x4, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x69, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @typedef={0xa, 0x0, 0x0, 0x8, 0x5}, @fwd={0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x4}}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x3, [{0x7, 0x3, 0x9}, {0x7, 0x8d0, 0x8}]}, @union={0x1, 0x5, 0x0, 0x5, 0x0, 0x8, [{0x8, 0x5, 0x6}, {0x0, 0x4, 0xe}, {0x4, 0x3, 0xffff}, {0x8, 0x5, 0x5}, {0x4, 0x4}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x1a, 0x0, 0x70, 0x4}, @enum64={0x10, 0x2, 0x0, 0x13, 0x1, 0xd, [{0x3, 0x7, 0x1ff}, {0xe, 0x5, 0x1}]}]}, {0x0, [0x30, 0xc2]}}, &(0x7f0000000300)=""/4096, 0x114, 0x1000, 0x0, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x80, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, r1, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x309}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf8, 0xf8, 0x4, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x69, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @typedef={0xa, 0x0, 0x0, 0x8, 0x5}, @fwd={0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x4}}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x3, [{0x7, 0x3, 0x9}, {0x7, 0x8d0, 0x8}]}, @union={0x1, 0x5, 0x0, 0x5, 0x0, 0x8, [{0x8, 0x5, 0x6}, {0x0, 0x4, 0xe}, {0x4, 0x3, 0xffff}, {0x8, 0x5, 0x5}, {0x4, 0x4}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x1a, 0x0, 0x70, 0x4}, @enum64={0x10, 0x2, 0x0, 0x13, 0x1, 0xd, [{0x3, 0x7, 0x1ff}, {0xe, 0x5, 0x1}]}]}, {0x0, [0x30, 0xc2]}}, &(0x7f0000000300)=""/4096, 0x114, 0x1000, 0x0, 0x6}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f0000000340)) (async) splice(r2, 0x0, r3, 0x0, 0x80, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, r1, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) (async) 1.663119987s ago: executing program 0 (id=7960): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8108}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x10c, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf16}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0xffffffffffffffa7, 0x2, 0xffffff7f}, @TIPC_NLA_MON_REF={0x0, 0x2, 0xfffc0000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a7b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf31b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x2080}, 0x40) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c20000004001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x81) 1.424773773s ago: executing program 1 (id=7961): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x3, 0x8d01}) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000080)={0x8000000000000001, 0xfffffffffffff6de, 0x0, 0x80000001, 0x2, 0x0, [{0x1, 0x2, 0x4, '\x00', 0x808}, {0x5, 0x6, 0x8, '\x00', 0x1008}]}) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) (async) r4 = accept4$inet(r0, &(0x7f00000009c0)={0x2, 0x0, @multicast1}, &(0x7f0000000a00)=0x10, 0x800) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000a40)={0xffff, 0xd, 0x4, 0x0, 0x0, [{{r1}, 0xfffffffffffffff8}, {{r3}, 0x100000}, {{r4}, 0x2}, {{r2}, 0x9}]}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000b00)="b274ab12537f9ba4118bd2eabd1b90f3", 0x10) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000b40), 0x8) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000b80)={r1}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000c40)={0x1, 0x9, 0x5}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f80)={'vlan1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000fc0)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000001000)={'sit0\x00', 0x0, 0x700, 0x8000, 0x5, 0x8, {{0x11, 0x4, 0x3, 0x9, 0x44, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @remote, {[@timestamp_addr={0x44, 0x14, 0xf0, 0x1, 0xe, [{@multicast1, 0x6}, {@rand_addr=0x64010101, 0x5}]}, @end, @lsrr={0x83, 0x1b, 0x62, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast]}]}}}}}) sendmsg$inet(r5, &(0x7f0000001240)={&(0x7f0000000c80)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000cc0)="817157adc119be3c3e6119be9241c3d6d7a8d7b3c26ca9d3e95c18ec550627af3924e7e90421d8b3a879ed0cbba1444945e4d630408b0ad74263feb02f707639361eebe140cf461c85db94dd411a6bd68e7972145a19ca6af52a6771439f806ea20aaca6b28c97111fa9575399247439e6ac675d7297beef48fd6eae636d7b89c6ad4f8d88b74893b9ca458ed101d7ff1e7e4ba32ed2f459a1634360523be8ada5bfbe202c770abd7160b23ba3f43c7a94ff5f3f551cbc3c74809106152d59d2", 0xc0}, {&(0x7f0000000d80)="c64829df576d3d8655c2dc20c7f14fe6bbff", 0x12}, {&(0x7f0000000dc0)="efabe66eec55977c891cba28501175cee20fc13187178b3d11a5bdb398933032b27f12acfbec85987cae0c937caa25cb11e5d1a1940797bfdbc17cf478b8aa0debad03bb40c68becdeadf19b4b7b7263910790ff81350b4f0f5a0afd49bb0d911450e17cbf40a5ed4e8ebf75bcb45c8743bae4261ae1a1c40ef0d012afad", 0x7e}, {&(0x7f0000000e40)="54919f3d0551ec0db4603112f0a45e740f45d96069be0e7e3441ffb21403c6536692b8798c3ced0e0013d7884668cb8dd7620927bf7328eb88e16fd8d103a10ef511ce9bc3aa5881d8549658d3230a33be0055ad9c9149232d89ec9f166f7f51683a1e057ec6d1cb436fea2a536202280de8f1a0f320eb044bee68489ecae64ccc6324350ca0b46bc44fa302949327df2e5d5b19ffa917182d2e45fb3bcf915fd5453b96c75da372117bcaaa81a116f3817756fa2759ccffce99685341ec61abb062bad7839169f0eea41c3bfd70a070d2ba23a332c4", 0xd6}], 0x4, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x89, 0x3, '$'}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0x64, 0x0, 0x7, {[@cipso={0x86, 0x2d, 0x3, [{0x6, 0xc, "2336659e912c6ee941ed"}, {0x2, 0x6, "95e46722"}, {0x0, 0x5, "9ae087"}, {0x7, 0x6, "8ac8ab40"}, {0x0, 0xa, "d2e5305362931eab"}]}, @timestamp_prespec={0x44, 0x24, 0xdc, 0x3, 0x5, [{@broadcast, 0x31}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3c}}, {@broadcast, 0x8000}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @multicast2}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x44, 0x0, [{0x1, 0x2}, {0x5, 0x12, "616514b2a2741b62079916ea19ce42aa"}, {0x6, 0xc, "f3a7ed3225ffa05381b2"}, {0x2, 0x9, "896795d086507c"}, {0x2, 0x4, '~f'}, {0x0, 0x9, "b4cf83639fe30b"}, {0x5, 0x8, "472432407ac2"}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x180}, 0x4000044) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001280)) (async) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000012c0)={'ip6erspan0\x00', 0x9}) (async) socketpair(0xa, 0x1, 0x10001, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r10, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=@newneigh={0x24, 0x1c, 0x37915ab1a23056ed, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x0, r7, 0x80, 0x0, 0x1}, [@NDA_PROTOCOL={0x5, 0xc, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000001440)={r6}) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000001480)) (async) r13 = accept$inet(r11, &(0x7f00000014c0), &(0x7f0000001500)=0x10) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001540)={0x36, 0x7, 0x5, 0x0, 0x0, [{{r13}, 0x67}, {{r6}, 0x4}, {{r11}, 0x6}, {{r12}, 0xffffffffffff8000}, {{r10}, 0x1}]}) (async) r14 = getpid() syz_open_procfs$namespace(r14, &(0x7f0000001600)='ns/ipc\x00') (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)={0x1d, 0x12, 0x1, 0x7, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x13}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @mcast2, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, 0x98) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.018403352s ago: executing program 3 (id=7962): r0 = socket$inet6(0xa, 0x802, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010101, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @remote}}}], 0x20}, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e22, 0x2, @empty, 0x49}}, 0x1000, 0x1, 0xb5d5, 0xc479, 0x3}, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r4, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x0, [@null, @bcast, @bcast, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000000)={0x0, 0x6, [0x2, 0x8, 0x4, 0x200, 0xfff, 0x800]}) getsockopt$bt_BT_SECURITY(r3, 0x11, 0x4, 0x0, 0x1000000000000) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x3, 0x3, 0x4, 0xa, 0x3, 0xc, 0x4}, @jmp={0x5, 0x0, 0x6, 0x0, 0x8, 0xfffffffffffffff9, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 892.084341ms ago: executing program 4 (id=7963): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 794.352192ms ago: executing program 1 (id=7964): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, 0x0, &(0x7f0000000300)) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) 791.955369ms ago: executing program 2 (id=7965): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000062a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001db136174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x4040080) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x70, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000a4b000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) 791.443377ms ago: executing program 3 (id=7966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44880) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff9f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x50}}, 0x4040004) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) 511.368283ms ago: executing program 1 (id=7967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f000000be40)={0x1000000, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xfa0, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null]}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r3, 0xef8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) r5 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000440)={'ipvs\x00'}, &(0x7f0000000480)=0x1e) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003f00), r6) sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003f40)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28861}, 0x8040) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20004005) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 468.280663ms ago: executing program 2 (id=7968): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000740)=0x8, 0x4) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000b0600000000000000000000030000040500010007000000db11d48de53c8e4633f6657c353a634a98ee3f639b3a7ea39395d5285a5c797ae182789071845718a5b70328c4159c1729cc0600000000000000556b20641e5c836683da9bc026e208601eeeab0d6825dbf0f660d5d0da"], 0x1c}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000003080500000000000000000000000000000004000480060002400009000079a71d750dcaf1070033c62d57daebebef59faf3d51b8f1674d479b8a4d877000000000000"], 0x28}}, 0x8000) 218.288284ms ago: executing program 1 (id=7969): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000000b06050000000000000020000000000005000100070000000900020073797a3100000000040007"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18002947d8d70000000000000000009500"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x25, 0x800, 0x8) sendmsg$inet6(r6, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000001600)=[{&(0x7f00000002c0)="000010000000008f77eba78370d43af594d595fd8a92f6db62a19b301092b90d2868ebf151ee4acd08f88e8fc7b6df6d07fa218e564ef8202e43b8b7dee97a2244c6262306111aa7cea426fce874fc166c02e564f4aad14aba149ace702a3d", 0x5f}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fe", 0x1b}, {&(0x7f0000001700)="006c25000000624e76546ba1d82d3e925d67f92f6851ebb3c99751c5fee2d86feb1f8c45f2dfc67cb796a1a879d4707cf18e9a0096823cf171c4b669bfdbf9abdc49f3cd47646d155c79006ad8fdb1b8e63e8a7b1f4b2906759af6457d7830e2503d7aee9d48538113c77bd819e6bc7e9e1f82f0c11c9f3c65e0f4aa14179afd7a998318c6f6d4db9862b29b6a2625691426dbe0040912b49dfa3ba7b45fdcd7bbf865", 0xa3}, {&(0x7f0000000280)='+', 0x1}, {&(0x7f0000000480)="20141f43bb859daa29dc2638c640f40cbc30f28ba697c19e2ef53b88f3a81e918f84676ff5dbcb3104042cf962bf8431a0989d5f90f5a0a9df11cbca0e64f864ccedd2d4f0f67f72ca0d386b510d60d4aa3ed4a20a7d36067af2bfeed68a75e4370766511e41c746900abc2013fb9b10d68d96ad1f18c9318727fc427fe4df2ca932d4a1adefbd45344108d766f58dc3e41fe29d2c1627f569e045cd03029136fcc4b402c34cfa25f0471cf6e7a95da06d183b10e49869bec4ef0c93f825df47062053116ec79baa2947e990ac0425d72b9f04b1fa852503fa23cc788d0fa60986aef735492d12471b95a25b053873a90db4b85c4d670fbf5546dea04337ec7b1aa3da33eab6a36fbee542148e0b67ebfc4bbc4f2ebc7cc4d067dcfeb40019eae994c069774d1b317369eacf5e89a6a824865fc910900cdcc3bd1154624eb0d520eb66a6581e856760be7fc3c430f24eb2c40e0118a9ae5d5c44307932783167e6c5e6a346317a1f7a77082cf1bcef698f08512165b80f3871cec6f0989e793854598b555467553bbb5c89a27db375e251644770e62695a2bd44a3bca0fd4653c1c6f752884ca36ce849a6c2849aa33aafd13530f451e6fbbc72840e67ab60c65f4912e6ec2e8b3605285d21f072254a1f03d10cf7ad5117c97571f00547fa6b55a4cfe60238ff14a042764e8c558b7f226d6a75d368af03093734dfc1e62c1ebe254eb6d6e6ea27864b1bba39a5e987e540c9434811928373c8f8f6b289470ea05c28940a2722ca1008a7d1fdee71787e493191eead7baeee0f76efd31d046fb80cd5d51e7b32e40902506fbb5b7d19270cbca32e2756e54b420ffe68d0801362d207c987b654d739827cf6b92684ee97d8518c3a08d0a814b600fcd40f4e7feef77747fd31ea133c9dc828b01ccf1ad0f2b81c4af410354d87269707751841d02439386766995fb0f6b0f5ca01d2f191966902cfbf521e5fa7387d4cfa7eda4116225371bb9877057893970a03bc3654f6f631feb560125d026bdd06cf9fcf7cf3a57efbb4f28658d24dd7e5930ade8b3741fcfd292d69f4e50f7a501e8b8743d76f2dc2cd8ea04b252e1c891e869a36f935334e3fa5af1792df13e019edf0a83852380be3bbbbcb5d58a4fad86172aea40e221a2f2a1ceddd8135e0a4f7f826757f7abf01f59643916b7b2747c712237068223d2d3b882be8a393a7a7d698bc013fa659d29715cb8d579d0ad0bc7d5f1e213686037a243f168130f7d3116d825742c8da553a4411ff855f857bb872054dc088d8090dadd14ef12a7761f2f0053698113bcf5b70f4cc4aebc7fac3cb06de2552e116c3f6a4e06fe36dfb68b8b67839b03449dfcd9668d429393c640de39337880c81f30946cb692b35833b118fdf4b4a9854f11b6ee7a5e8917bb2f034c3648ca59157b0cbfc8eeed52be6cba58289ca49a09616b29aa89414f4583b597808637fa8c94b13cf3495c7e9e5e5e349e02262d976aad775b4cf8606630cf379454ae55cfb85313c4d5eebf543b6167e8b105b1943cb5f642c0d8a6c231a6591eb52e36e04fece78712c615466853772273e082755c1d346a2dc39912fbcd9864587b7eb550addc384092652df5cda87b32b5da8cd8b2de7e87f1f684b8fb7b4e931765503285388ef597c8aea717eda23df040bed17b021bdad85f47a19fcc1dac73891b5a7", 0x4b8}], 0x5}, 0x20008b88) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xfff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000a40)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000a80)=@expire={0x3d8, 0x18, 0x400, 0x70bd2b, 0x25dfdbfb, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e20, 0x1, 0x4e21, 0x3, 0x2, 0x80, 0x80, 0x67, r5, r7}, {@in=@local, 0x4d3, 0x33}, @in=@private=0xa010101, {0xe, 0x1, 0xe, 0x4a, 0x10000, 0x8, 0xffffffffffffffff, 0x900000}, {0x9, 0x3, 0x0, 0x80000000}, {0xffffffff, 0x6, 0x2}, 0x70bd2b, 0x3505, 0xa, 0x1, 0x0, 0x120}, 0x7}, [@sa={0xe4, 0x6, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in6=@private0, 0x4e20, 0x0, 0x4e21, 0x7fff, 0xa, 0x20, 0x20, 0x2, r5, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d5, 0x32}, @in=@empty, {0x4, 0x97, 0x1, 0xe0ee, 0x4, 0x9, 0xf, 0x9a}, {0x6, 0x6, 0x4, 0x5}, {0x400, 0xc}, 0x70bd29, 0x0, 0x2, 0x4, 0x8, 0x14}}, @sec_ctx={0x105, 0x8, {0x101, 0x8, 0x0, 0x5, 0xf9, "01c4e9ad3b9314404533cc65ef660cebc1e5411e1e9dd8eeabe8edd2c62199246d5a3420c01331884a22b6cb3b32bf724f61a533a87a839358a5601eb65a39845fae96bd41e097e523e42344f329ee722bf5172c3ca64e60e3e2de3ac1a008a29a8b023878d0f63496ec2ea9090a6091ae12e9e882cabbc38143a844d7136e1ddbb88ec660b28b828b4ccedb7be9a13082f27b69a102579973561cba6280eb9120ba378574c76d5c3fb0f8668f7fba084959adc51e2d125e0bac6db313387bee3ea94cbbf8480cdf76b97efd17d9e92be4d188db60f0a602a3ab6d11bd6c78ecbe6010e99076fb15c97f1978afca7fd47924ce0199538403ae"}}, @extra_flags={0x8, 0x18, 0x101}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@private=0xa010101, 0x4e20, 0x4, 0x4e20, 0x1, 0xa, 0x20, 0x80, 0xff, r5, 0xee00}, {@in6=@local, 0x4d4, 0x32}, @in6=@loopback, {0x7, 0x9, 0x7, 0x7, 0xff, 0x6, 0x5, 0x4}, {0x9, 0x3, 0x7, 0x100}, {0x3, 0x8, 0xfff}, 0x70bd26, 0x3507, 0x2, 0x2, 0xa}}, @etimer_thresh={0x8, 0xc, 0x2}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 0s ago: executing program 2 (id=7970): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="611283000000000061138c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5f0321e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf9a87c0f0c8cd51e56d9e5e7708f156b6cb08566bc86ba6997bb7ae18b9cdf9e6cfda9c6390190e2d468e8c38a818a6a1397b5fbbaa4ddc9a36df424135a28d1e5eaa50850ade812fe83ac7ea0136dc3729879ca51977eef8c2c546938b7b8a4656a71a783b302d7918e6c206af735e9a985cd4cda46d39bca00ff4aa309fd6a598af5e0199f1eb562875450c10d95b7ffb00"/759], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r5, 0x80) accept$netrom(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$SIOCNRDECOBS(r5, 0x89e2) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r7, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r4, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004850}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000100)=0x201, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, &(0x7f0000000040)={0x0, 0x3, [0x6068, 0x2f, 0x7f, 0x401, 0x96, 0x8]}) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[]}, 0x78) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): rt 1(bridge_slave_0) entered disabled state [ 762.713641][T30316] bridge_slave_0: entered allmulticast mode [ 762.723606][T30316] bridge_slave_0: entered promiscuous mode [ 762.733470][T30417] lo: entered promiscuous mode [ 762.738707][T30417] netlink: 'syz.2.6383': attribute type 2 has an invalid length. [ 762.757246][T30316] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.773780][T30316] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.793210][T30316] bridge_slave_1: entered allmulticast mode [ 762.803107][T30316] bridge_slave_1: entered promiscuous mode [ 762.952345][T30316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.977411][T30433] netlink: 'syz.3.6387': attribute type 1 has an invalid length. [ 762.990005][T30316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.077767][T30430] bond9: (slave geneve2): making interface the new active one [ 763.105336][T30430] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 763.136215][T12312] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 763.147941][T12312] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 763.180696][T30316] team0: Port device team_slave_0 added [ 763.204642][T30316] team0: Port device team_slave_1 added [ 763.221503][T12312] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 763.291578][T12312] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 763.301936][T30316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.323591][T30316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.380664][T30316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.396979][T30316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.404464][T30316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.452701][T30316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.471284][T30451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6395'. [ 763.567970][T30458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6397'. [ 763.621445][T30461] IPVS: set_ctl: invalid protocol: 135 0.0.0.53:20000 [ 763.654122][T30316] hsr_slave_0: entered promiscuous mode [ 763.669445][T30316] hsr_slave_1: entered promiscuous mode [ 763.688584][T30316] debugfs: 'hsr0' already exists in 'hsr' [ 763.703861][T30316] Cannot create hsr debugfs directory [ 763.716410][ T5174] block nbd3: Connection timed out, retrying (0/2 alive) [ 763.725446][ T5174] block nbd3: Connection timed out, retrying (0/2 alive) [ 763.738467][ T5174] block nbd3: Connection timed out, retrying (0/2 alive) [ 763.746239][ T5174] block nbd3: Connection timed out, retrying (0/2 alive) [ 763.753728][ T25] block nbd3: Dead connection, failed to find a fallback [ 763.764007][ T25] block nbd3: shutting down sockets [ 763.771215][ T25] blk_print_req_error: 138 callbacks suppressed [ 763.771236][ T25] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.789330][ T25] buffer_io_error: 138 callbacks suppressed [ 763.789350][ T25] Buffer I/O error on dev nbd3, logical block 2, async page read [ 763.805058][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.814322][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 763.822570][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.833054][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 763.841045][ T25] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.850124][ T25] Buffer I/O error on dev nbd3, logical block 3, async page read [ 763.861713][T29473] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.872172][T29473] Buffer I/O error on dev nbd3, logical block 0, async page read [ 763.880170][T29473] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.889718][T29473] Buffer I/O error on dev nbd3, logical block 1, async page read [ 763.897764][T29473] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.907007][T29473] Buffer I/O error on dev nbd3, logical block 2, async page read [ 763.915277][T29473] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.924425][T29473] Buffer I/O error on dev nbd3, logical block 3, async page read [ 763.934109][T29473] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.944121][T29473] Buffer I/O error on dev nbd3, logical block 0, async page read [ 763.952567][T29473] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 763.962565][T29473] Buffer I/O error on dev nbd3, logical block 1, async page read [ 763.973676][T29473] ldm_validate_partition_table(): Disk read failed. [ 763.985766][T29473] Dev nbd3: unable to read RDB block 0 [ 763.993759][T29473] nbd3: unable to read partition table [ 764.043889][T29473] ldm_validate_partition_table(): Disk read failed. [ 764.078820][T29473] Dev nbd3: unable to read RDB block 0 [ 764.089974][T29473] nbd3: unable to read partition table [ 764.114310][ T5843] Bluetooth: hci0: command tx timeout [ 764.125953][T30480] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002 [ 764.145204][T30479] netlink: 'syz.2.6403': attribute type 1 has an invalid length. [ 764.150588][T30477] : entered promiscuous mode [ 764.159869][T30480] netlink: 312 bytes leftover after parsing attributes in process `syz.0.6402'. [ 764.269493][T30479] 8021q: adding VLAN 0 to HW filter on device bond4 [ 764.317929][T30485] bond4: (slave ip6erspan0): making interface the new active one [ 764.331456][T30485] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 764.429949][T30496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6407'. [ 764.443679][T30496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6407'. [ 764.465317][T30316] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.477076][T30316] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 52637 - 0 [ 764.488684][T30316] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 764.579208][T30316] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.589332][T30316] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 52637 - 0 [ 764.602657][T30316] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 764.661892][T30316] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.673399][T30316] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 52637 - 0 [ 764.683857][T30316] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 764.750271][T30316] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.767749][T30316] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 52637 - 0 [ 764.778530][T30316] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 765.362167][T30499] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 765.371082][T30499] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 765.384177][T30499] tipc: Resetting bearer [ 765.405713][T30499] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 765.412106][T30499] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 765.460105][T30499] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 765.466662][T30499] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 765.511918][T30499] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 765.519745][T30499] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 765.564373][T30499] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 765.570452][T30499] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 765.631158][ C0] net_ratelimit: 17 callbacks suppressed [ 765.631181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.791657][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.191405][T27577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.511432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.832018][T27577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.912346][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.231552][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.239927][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.250402][T30487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.267320][T30515] netlink: 'syz.3.6413': attribute type 11 has an invalid length. [ 767.277214][T30316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 767.301391][T30515] __nla_validate_parse: 1 callbacks suppressed [ 767.301409][T30515] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.6413'. [ 767.354436][T30316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.369815][T30316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 767.443840][T30316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 767.470958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.480870][T30526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6415'. [ 767.489863][T30526] openvswitch: netlink: Flow actions attr not present in new flow. [ 767.498169][T30316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 767.537804][T30316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 767.559284][T30316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 767.585054][T30316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 767.614375][T30530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6416'. [ 767.658599][T30530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6416'. [ 767.667283][T30542] Bluetooth: MGMT ver 1.23 [ 767.687900][T30545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6418'. [ 767.708611][T30546] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 767.718016][T30549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6418'. [ 767.732645][T30545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6418'. [ 767.920582][T30556] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6423'. [ 767.934753][T30558] sctp: [Deprecated]: syz.4.6424 (pid 30558) Use of int in maxseg socket option. [ 767.934753][T30558] Use struct sctp_assoc_value instead [ 767.996609][T30316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.086023][T30562] syzkaller0: entered promiscuous mode [ 768.093208][T30562] syzkaller0: entered allmulticast mode [ 768.135719][T30316] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.184498][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.191790][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.285874][T30571] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6429'. [ 768.401437][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.408720][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.507507][T30579] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6432'. [ 768.529240][T30581] netlink: 'syz.3.6433': attribute type 1 has an invalid length. [ 768.553759][T30581] netlink: 'syz.3.6433': attribute type 1 has an invalid length. [ 768.853648][T30597] lo: entered allmulticast mode [ 769.043136][T12300] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.053396][T12300] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.092398][T12300] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.128094][T12300] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 769.176258][T30613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.318275][T30316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.351565][T30619] bond2: entered promiscuous mode [ 769.357369][T30619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 769.435197][T30316] veth0_vlan: entered promiscuous mode [ 769.448532][T30316] veth1_vlan: entered promiscuous mode [ 769.508351][T30316] veth0_macvtap: entered promiscuous mode [ 769.523223][T30316] veth1_macvtap: entered promiscuous mode [ 769.550384][T30316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.581908][T30316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.600554][ T8659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.616767][ T8659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.633427][T12300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.652305][T12300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.977945][ T6143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.998180][ T6143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.056231][ T6143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.065083][ T6143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.223768][T30649] syz_tun: entered allmulticast mode [ 770.281938][T30655] netlink: 'syz.0.6453': attribute type 1 has an invalid length. [ 770.302057][T30656] netlink: 'syz.0.6453': attribute type 1 has an invalid length. [ 770.514781][T30654] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 770.541151][T30654] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 770.589744][T30654] bond1: (slave ip6gre1): making interface the new active one [ 770.626272][T30654] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 770.671106][ C0] net_ratelimit: 15 callbacks suppressed [ 770.671125][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.707162][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 770.727075][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 770.739115][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 770.765249][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 770.777687][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 771.003877][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.325148][T30682] lec:lec_start_xmit: lec0:No lecd attached [ 771.380070][T30691] syzkaller0: entered promiscuous mode [ 771.391737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.394746][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.402034][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.424978][T30691] syzkaller0: entered allmulticast mode [ 771.447648][T30696] netlink: zone id is out of range [ 771.462568][T30696] netlink: zone id is out of range [ 771.476059][T30696] netlink: zone id is out of range [ 771.482045][T30696] netlink: zone id is out of range [ 771.497605][T30696] netlink: zone id is out of range [ 771.507483][T30694] syzkaller1: entered promiscuous mode [ 771.533075][T30694] syzkaller1: entered allmulticast mode [ 771.559344][T30668] lo speed is unknown, defaulting to 1000 [ 772.235674][T30708] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 772.285019][T30708] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002 [ 772.343519][T30710] netlink: 'syz.2.6470': attribute type 4 has an invalid length. [ 772.524945][T30724] __nla_validate_parse: 9 callbacks suppressed [ 772.524967][T30724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6475'. [ 772.833319][ T5843] Bluetooth: hci3: command tx timeout [ 772.915734][T30668] chnl_net:caif_netlink_parms(): no params data found [ 773.128463][T30668] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.135834][T30668] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.139003][T30756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6482'. [ 773.145536][T30668] bridge_slave_0: entered allmulticast mode [ 773.165895][T30668] bridge_slave_0: entered promiscuous mode [ 773.175192][T30668] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.183947][T30668] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.192689][T30668] bridge_slave_1: entered allmulticast mode [ 773.194623][T30759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6482'. [ 773.200627][T30668] bridge_slave_1: entered promiscuous mode [ 773.323960][T30668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.344864][T30668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.405175][T30668] team0: Port device team_slave_0 added [ 773.408785][T30765] netlink: 'syz.0.6485': attribute type 11 has an invalid length. [ 773.417319][T30668] team0: Port device team_slave_1 added [ 773.419607][T30765] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6485'. [ 773.497277][T30668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.508692][T30668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.538867][T30668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.592136][T30668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.599144][T30668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.644453][T30668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.737056][T30776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6488'. [ 773.769503][T30668] hsr_slave_0: entered promiscuous mode [ 773.780202][T30668] hsr_slave_1: entered promiscuous mode [ 773.796478][T30668] debugfs: 'hsr0' already exists in 'hsr' [ 773.806150][T30668] Cannot create hsr debugfs directory [ 773.984487][T30785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6493'. [ 774.305440][T30797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6498'. [ 774.306424][T30668] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.332226][T30797] netlink: 'syz.0.6498': attribute type 1 has an invalid length. [ 774.347175][T30668] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.363466][T30668] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 774.445346][T30806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6501'. [ 774.482784][T30811] xt_nat: multiple ranges no longer supported [ 774.559481][T30802] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 774.576718][T30802] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 774.623743][T30815] xt_TPROXY: Can be used only with -p tcp or -p udp [ 774.647864][T30815] netlink: 'syz.4.6504': attribute type 11 has an invalid length. [ 774.657346][T30815] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6504'. [ 774.668175][T30805] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 774.696064][T30806] netlink: 'syz.1.6501': attribute type 1 has an invalid length. [ 774.707673][T30816] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6504'. [ 774.720437][T30806] netlink: 'syz.1.6501': attribute type 2 has an invalid length. [ 774.747687][T30812] bond2: (slave gretap1): making interface the new active one [ 774.759489][T30812] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 774.798613][T30668] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.813272][T30668] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.823700][T30668] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 774.849252][T30820] IPVS: Error connecting to the multicast addr [ 774.912822][ T5843] Bluetooth: hci3: command tx timeout [ 774.922655][T30668] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.944665][T30668] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.969019][T30668] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 775.046278][T30668] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.056382][T30668] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.068037][T30668] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 775.107454][T30836] sctp: [Deprecated]: syz.0.6510 (pid 30836) Use of int in max_burst socket option. [ 775.107454][T30836] Use struct sctp_assoc_value instead [ 775.451548][T30856] wireguard0: entered promiscuous mode [ 775.490502][T30856] wireguard0: entered allmulticast mode [ 775.533621][T30855] veth1_mac: renamed from veth0_vlan (while UP) [ 775.870935][ C0] net_ratelimit: 72 callbacks suppressed [ 775.870958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.920112][T30668] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 775.948395][T30668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 775.961730][T30668] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 775.986648][T30668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 776.004887][T30668] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 776.038482][T30668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 776.090457][T30668] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 776.099181][T30884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.120266][T30668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 776.192091][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.350813][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 776.354386][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.358905][ C0] lec:lec_tx_timeout: lec0 [ 776.359679][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 776.516142][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.556930][T30668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.597872][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.863585][T30668] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.898143][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.905496][ T6153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.910988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.958626][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.965991][ T6153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.991769][ T5843] Bluetooth: hci3: command tx timeout [ 777.151077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.231440][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.472178][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.540097][T30668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.627026][T30948] __nla_validate_parse: 7 callbacks suppressed [ 777.627050][T30948] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6536'. [ 777.683566][T30948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6536'. [ 777.688937][T30668] veth0_vlan: entered promiscuous mode [ 777.728003][T30668] veth1_vlan: entered promiscuous mode [ 777.818083][T30668] veth0_macvtap: entered promiscuous mode [ 777.849765][T30668] veth1_macvtap: entered promiscuous mode [ 777.916099][T30668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.956795][T30668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.998466][ T88] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.034618][ T88] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.084282][ T88] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.103822][ T88] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.378876][T30961] netlink: 'syz.4.6540': attribute type 10 has an invalid length. [ 778.389883][T12300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.423577][T12300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.458275][T30961] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 778.492985][T30960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.542374][T12300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.560945][T12300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.069678][T30986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6548'. [ 779.082929][ T5843] Bluetooth: hci3: command tx timeout [ 779.138007][T30991] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6549'. [ 779.452627][T31009] netlink: 'syz.4.6553': attribute type 1 has an invalid length. [ 779.465139][T31009] netlink: 'syz.4.6553': attribute type 1 has an invalid length. [ 779.478049][T31009] netlink: 'syz.4.6553': attribute type 1 has an invalid length. [ 779.549797][T31012] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 779.722043][T31024] sctp: [Deprecated]: syz.1.6559 (pid 31024) Use of int in max_burst socket option deprecated. [ 779.722043][T31024] Use struct sctp_assoc_value instead [ 779.856666][T31025] macvtap1: entered allmulticast mode [ 779.881777][T31025] veth0_macvtap: entered allmulticast mode [ 779.919557][T31026] syzkaller1: entered promiscuous mode [ 779.926876][T31026] syzkaller1: entered allmulticast mode [ 779.958346][T31022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6558'. [ 780.088922][T31037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6563'. [ 780.166785][T31042] netlink: 'syz.2.6564': attribute type 1 has an invalid length. [ 780.263053][T31046] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 780.298357][T31046] netlink: 'syz.3.6566': attribute type 23 has an invalid length. [ 780.524333][T31064] netlink: 'syz.3.6570': attribute type 1 has an invalid length. [ 780.532655][T31064] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6570'. [ 780.542191][T31064] netlink: 'syz.3.6570': attribute type 1 has an invalid length. [ 780.561240][T31064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6570'. [ 781.001434][ C1] net_ratelimit: 14 callbacks suppressed [ 781.001456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.035286][T31087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.071236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.166569][T31092] xt_connbytes: Forcing CT accounting to be enabled [ 781.391096][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 781.399273][ C0] lec:lec_tx_timeout: lec0 [ 781.405200][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 781.413981][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.616583][T31116] tipc: Started in network mode [ 781.622213][T31116] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 781.648904][T31116] tipc: Enabled bearer , priority 10 [ 781.746283][T31126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6589'. [ 781.804705][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.031114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.110916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.433584][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.435158][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.504003][T31159] wlan0: mtu less than device minimum [ 782.602039][T31165] netlink: 'syz.3.6598': attribute type 32 has an invalid length. [ 782.611284][T31168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6599'. [ 782.638647][T31165] netlink: 'syz.3.6598': attribute type 32 has an invalid length. [ 782.653344][T31165] netlink: 'syz.3.6598': attribute type 32 has an invalid length. [ 782.761117][ T806] tipc: Node number set to 4269801488 [ 782.900411][T31184] syzkaller0: entered promiscuous mode [ 782.931090][T31184] syzkaller0: entered allmulticast mode [ 783.079977][T31189] __nla_validate_parse: 1 callbacks suppressed [ 783.080021][T31189] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6605'. [ 783.323296][T31201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6609'. [ 783.415398][T31205] mac80211_hwsim hwsim63 ÿ: renamed from wlan1 [ 783.448080][T31207] netlink: 548 bytes leftover after parsing attributes in process `syz.2.6610'. [ 784.038140][T31223] IPVS: set_ctl: invalid protocol: 51 172.20.20.37:20004 [ 784.061957][T31223] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004 [ 784.077360][T31223] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 784.954701][T31278] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6622'. [ 785.245563][T31293] delete_channel: no stack [ 785.632740][T31318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6634'. [ 785.889877][T31330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 785.891109][T31327] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6635'. [ 785.897385][T31330] IPv6: NLM_F_CREATE should be set when creating new route [ 786.115377][ T5842] net_ratelimit: 16 callbacks suppressed [ 786.115402][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.229516][T31341] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 786.270898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.421770][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 786.429851][ C0] lec:lec_tx_timeout: lec0 [ 786.434913][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 786.591367][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.599730][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.014103][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.311320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.552510][T31410] vlan3: entered allmulticast mode [ 787.570812][T31410] bond0: entered allmulticast mode [ 787.583088][T31412] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6658'. [ 787.596521][T31410] bond_slave_0: entered allmulticast mode [ 787.604339][T31410] bond_slave_1: entered allmulticast mode [ 787.632429][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.685454][T31412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.702468][T31412] bond_slave_0: left allmulticast mode [ 787.713313][T31417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6660'. [ 787.725785][T31412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.737189][T31412] bond_slave_1: left allmulticast mode [ 787.747654][T31412] bond0 (unregistering): Released all slaves [ 787.766111][T31418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6660'. [ 787.775567][T31418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6660'. [ 787.817161][T31417] validate_nla: 62 callbacks suppressed [ 787.817180][T31417] netlink: 'syz.3.6660': attribute type 10 has an invalid length. [ 787.868678][T31417] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.876541][T31417] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.908809][T31417] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.916177][T31417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.923803][T31417] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.931122][T31417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.946824][T31417] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 787.979307][T31401] bridge3: entered promiscuous mode [ 787.993008][T31401] bridge3: entered allmulticast mode [ 788.060221][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.159210][T31434] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6663'. [ 788.350928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.409870][T31447] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6666'. [ 788.440999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.875901][T31469] tipc: Enabled bearer , priority 10 [ 788.929222][T31468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6669'. [ 788.964868][T31467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6669'. [ 789.048404][T31475] macvlan0: entered promiscuous mode [ 789.370370][T31487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6675'. [ 789.557371][T31500] netlink: 'syz.4.6679': attribute type 16 has an invalid length. [ 789.576460][T31500] netlink: 'syz.4.6679': attribute type 17 has an invalid length. [ 789.697266][T31498] 8021q: adding VLAN 0 to HW filter on device bond3 [ 789.722942][T31498] bond3 (unregistering): Released all slaves [ 789.804502][T31509] netlink: 'syz.1.6682': attribute type 12 has an invalid length. [ 789.815633][T31509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6682'. [ 789.880888][T31511] bond3: option resend_igmp: invalid value (32767) [ 789.894552][T31511] bond3: option resend_igmp: allowed values 0 - 255 [ 789.915802][T31522] ip6t_srh: unknown srh invflags 4000 [ 789.916017][T31520] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 789.944179][T31511] bond3 (unregistering): Released all slaves [ 790.218137][T31538] netlink: 'syz.4.6693': attribute type 3 has an invalid length. [ 790.758707][T31563] xt_cgroup: xt_cgroup: no path or classid specified [ 791.022213][T31573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6701'. [ 791.157070][ T5926] net_ratelimit: 11 callbacks suppressed [ 791.157093][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.169237][T31578] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6703'. [ 791.303768][T31580] netlink: 'syz.2.6704': attribute type 28 has an invalid length. [ 791.314701][T31580] IPv6: NLM_F_CREATE should be specified when creating new route [ 791.450840][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 791.459055][ C0] lec:lec_tx_timeout: lec0 [ 791.464197][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 791.471124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.551294][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.627228][T31588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6708'. [ 791.684400][T31588] veth1_macvtap: left promiscuous mode [ 791.791325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.803308][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.884496][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.911205][T31602] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6714'. [ 792.070540][T31619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.211616][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.240330][T31625] syzkaller0: entered promiscuous mode [ 792.258193][T31625] syzkaller0: entered allmulticast mode [ 792.511509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.561720][T31636] netlink: 'syz.1.6724': attribute type 2 has an invalid length. [ 792.591049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.768323][T31641] netlink: 'syz.3.6726': attribute type 1 has an invalid length. [ 792.866455][T31641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 792.939819][T31651] netlink: 'syz.1.6729': attribute type 1 has an invalid length. [ 792.978024][T31647] bond3: (slave veth0_to_bond): making interface the new active one [ 793.016711][T31647] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 793.049150][T31655] ipt_rpfilter: unknown options [ 793.102515][T31651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 793.196745][T31660] vlan2: entered promiscuous mode [ 793.202849][T31665] __nla_validate_parse: 6 callbacks suppressed [ 793.202868][T31665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6732'. [ 793.220344][T31665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6732'. [ 793.229616][T31660] bond1: entered promiscuous mode [ 793.235880][T31663] xt_TPROXY: Can be used only with -p tcp or -p udp [ 793.249336][T31660] vlan2: entered allmulticast mode [ 793.254852][T31660] bond1: entered allmulticast mode [ 793.338660][T31651] bond1: (slave bridge1): making interface the new active one [ 793.366927][T31651] bridge1: entered promiscuous mode [ 793.381829][T31651] bridge1: entered allmulticast mode [ 793.402499][T31651] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 793.414032][ T6143] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.437639][ T6143] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.529051][ T6143] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.559974][ T6143] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.884124][T31704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6743'. [ 793.938517][T31709] xt_hashlimit: size too large, truncated to 1048576 [ 794.397205][T31733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6752'. [ 794.673458][T31751] Cannot find add_set index 2 as target [ 794.813809][T31757] netlink: 'syz.1.6761': attribute type 12 has an invalid length. [ 794.867272][T31764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6762'. [ 794.893558][T31764] netlink: 'syz.2.6762': attribute type 5 has an invalid length. [ 794.898668][T31757] bond2: option primary_reselect: invalid value (255) [ 794.911215][T31764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6762'. [ 794.927571][T31757] bond2 (unregistering): Released all slaves [ 795.028463][T31764] geneve2: entered promiscuous mode [ 795.045418][T31764] geneve2: entered allmulticast mode [ 795.078777][T12311] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 795.093896][T12311] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 795.105544][T12311] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 795.115537][T12311] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 795.176290][T31777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6764'. [ 795.247108][T31778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6764'. [ 795.684230][T31802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6769'. [ 795.701475][T31802] netlink: 'syz.2.6769': attribute type 7 has an invalid length. [ 795.715193][T31802] netlink: 'syz.2.6769': attribute type 8 has an invalid length. [ 795.730115][T31802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6769'. [ 796.271104][ C0] net_ratelimit: 16 callbacks suppressed [ 796.271128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.353852][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.470929][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 796.479084][ C0] lec:lec_tx_timeout: lec0 [ 796.484132][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 796.526505][T31833] nbd4: detected capacity change from 0 to 63 [ 796.552355][ T5843] block nbd4: Receive control failed (result -32) [ 796.556603][ T5841] block nbd4: Receive control failed (result -32) [ 796.563777][T31542] block nbd4: Send control failed (result -32) [ 796.608478][T31542] block nbd4: Request send failed, requeueing [ 796.615413][ T25] block nbd4: Dead connection, failed to find a fallback [ 796.625950][ T25] block nbd4: shutting down sockets [ 796.631546][ T25] blk_print_req_error: 138 callbacks suppressed [ 796.631566][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.642964][T31542] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.647999][ T25] buffer_io_error: 138 callbacks suppressed [ 796.648015][ T25] Buffer I/O error on dev nbd4, logical block 0, async page read [ 796.671097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.679804][T31542] Buffer I/O error on dev nbd4, logical block 1, async page read [ 796.688225][T31542] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.697611][T31542] Buffer I/O error on dev nbd4, logical block 2, async page read [ 796.707944][T31542] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.717275][T31542] Buffer I/O error on dev nbd4, logical block 3, async page read [ 796.725779][T31542] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.735154][T31542] Buffer I/O error on dev nbd4, logical block 0, async page read [ 796.743587][T31542] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.753089][T31542] Buffer I/O error on dev nbd4, logical block 1, async page read [ 796.761717][T31542] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.770842][T31542] Buffer I/O error on dev nbd4, logical block 2, async page read [ 796.778784][T31542] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.788446][T31542] Buffer I/O error on dev nbd4, logical block 3, async page read [ 796.796487][T31542] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.821288][T31542] Buffer I/O error on dev nbd4, logical block 0, async page read [ 796.844131][T31542] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.859770][T31542] Buffer I/O error on dev nbd4, logical block 1, async page read [ 796.896164][T31542] ldm_validate_partition_table(): Disk read failed. [ 796.993894][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.009006][T31542] Dev nbd4: unable to read RDB block 0 [ 797.036526][T31872] netlink: 'syz.4.6782': attribute type 3 has an invalid length. [ 797.054900][T31542] nbd4: unable to read partition table [ 797.085095][T31872] netlink: 'syz.4.6782': attribute type 1 has an invalid length. [ 797.248236][T31864] syzkaller0: left promiscuous mode [ 797.254238][T31542] ldm_validate_partition_table(): Disk read failed. [ 797.276705][T31864] syzkaller0: left allmulticast mode [ 797.280673][T31542] Dev nbd4: unable to read RDB block 0 [ 797.294946][T31542] nbd4: unable to read partition table [ 797.335549][T31876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 797.376400][T31878] syzkaller0: entered promiscuous mode [ 797.394107][T31881] tunl0: entered promiscuous mode [ 797.399692][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.413426][T31881] netlink: 'syz.1.6785': attribute type 3 has an invalid length. [ 797.572144][T31889] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20001 [ 797.634157][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.711099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.738832][T31893] bridge0: port 3(macsec1) entered blocking state [ 797.745232][T31899] sctp: [Deprecated]: syz.1.6792 (pid 31899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 797.745232][T31899] Use struct sctp_sack_info instead [ 797.779874][T31893] bridge0: port 3(macsec1) entered disabled state [ 797.791623][T31893] macsec1: entered allmulticast mode [ 797.805972][T31893] macsec1: left allmulticast mode [ 798.033953][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.198023][T31933] netlink: 'syz.1.6802': attribute type 32 has an invalid length. [ 798.235065][T31933] __nla_validate_parse: 9 callbacks suppressed [ 798.235087][T31933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6802'. [ 798.270550][T31936] netlink: 'syz.1.6802': attribute type 32 has an invalid length. [ 798.306078][T31933] bond2: Setting coupled_control to off (0) [ 798.313919][T31936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6802'. [ 798.383432][T31936] bond3: Setting coupled_control to off (0) [ 798.438381][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.472307][T31951] netlink: 'syz.1.6807': attribute type 21 has an invalid length. [ 798.486321][T31951] netlink: 'syz.1.6807': attribute type 6 has an invalid length. [ 798.495045][T31951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6807'. [ 798.495347][T31953] netlink: 'syz.1.6807': attribute type 21 has an invalid length. [ 798.532709][T31929] syzkaller0: entered promiscuous mode [ 798.552986][T31929] syzkaller0: entered allmulticast mode [ 798.564269][T31951] x_tables: duplicate underflow at hook 1 [ 798.569495][T31953] netlink: 'syz.1.6807': attribute type 6 has an invalid length. [ 798.575099][T31956] x_tables: duplicate underflow at hook 1 [ 798.594954][T31953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6807'. [ 798.746267][T31964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6810'. [ 798.761159][T31964] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6810'. [ 798.776147][T31963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6810'. [ 798.787837][T31963] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6810'. [ 798.840646][T31970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6813'. [ 798.932112][T31975] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6815'. [ 799.683556][T32010] nbd: must specify at least one socket [ 799.816719][T32018] hsr_slave_1 (unregistering): left promiscuous mode [ 800.666382][T32065] netlink: 'syz.1.6844': attribute type 1 has an invalid length. [ 801.258228][T32092] netlink: 'syz.0.6852': attribute type 3 has an invalid length. [ 801.465947][T32098] net_ratelimit: 22 callbacks suppressed [ 801.465968][T32098] vlan0: mtu greater than device maximum [ 801.490762][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 801.498885][ C0] lec:lec_tx_timeout: lec0 [ 801.505063][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 801.566716][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.659536][T32106] tipc: Started in network mode [ 801.670214][T32106] tipc: Node identity ac14140f, cluster identity 4711 [ 801.685795][T32106] tipc: Enabled bearer , priority 10 [ 801.697599][ T5905] IPVS: starting estimator thread 0... [ 801.792045][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.805732][T32111] IPVS: using max 28 ests per chain, 67200 per kthread [ 801.871099][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.117647][T32133] sit2: entered promiscuous mode [ 802.123116][T32133] sit2: entered allmulticast mode [ 802.192468][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.457902][T32155] netlink: 'syz.1.6874': attribute type 11 has an invalid length. [ 802.573621][T32145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.589006][T32145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.592732][ T5841] Bluetooth: hci3: command tx timeout [ 802.600647][T32145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 802.622009][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.662381][T32163] veth0: entered promiscuous mode [ 802.672554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.721157][T32163] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 802.742780][T32162] veth0: left promiscuous mode [ 802.911126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.929022][T32145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.956539][T32145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.981943][T32145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 803.109436][ T5905] tipc: Node number set to 2886997007 [ 803.234311][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.296107][T32145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.323247][T32145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.364135][T32145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 803.398356][T32197] netlink: 'syz.0.6886': attribute type 32 has an invalid length. [ 803.413728][T32198] x_tables: duplicate underflow at hook 3 [ 803.430591][T32197] netlink: 'syz.0.6886': attribute type 32 has an invalid length. [ 803.559580][T32204] netlink: 'syz.1.6887': attribute type 1 has an invalid length. [ 803.572460][T32145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.587955][T32145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.598753][T32145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 803.788223][T32217] __nla_validate_parse: 22 callbacks suppressed [ 803.788247][T32217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6890'. [ 803.831364][T32217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6890'. [ 803.916728][T32220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6890'. [ 804.092682][T12312] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.121712][T12312] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 804.144620][T12312] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 804.199476][T12312] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.216334][T32241] netlink: 'syz.0.6895': attribute type 1 has an invalid length. [ 804.224355][T12312] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 804.224392][T12312] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 804.265636][T12300] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.282249][T12300] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 804.307054][T12300] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 804.373491][T32241] 8021q: adding VLAN 0 to HW filter on device bond3 [ 804.415814][ T8659] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.453359][ T8659] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 804.496943][ T8659] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 804.497334][T32254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6895'. [ 804.624131][T32241] bond3: (slave bridge4): making interface the new active one [ 804.657333][T32241] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 804.710062][T32264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6899'. [ 804.757321][T32268] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6900'. [ 804.770309][T32268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6900'. [ 804.784318][T32268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6900'. [ 804.868857][T32271] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 804.910367][T32271] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 804.988715][T32271] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 805.140614][T32271] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 805.167398][T32284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6903'. [ 805.511154][T32297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6905'. [ 805.578795][T32297] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 806.510953][ C0] net_ratelimit: 16 callbacks suppressed [ 806.510984][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.526785][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 806.534979][ C0] lec:lec_tx_timeout: lec0 [ 806.539623][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 806.824024][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.832271][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.846380][T32366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.877151][T32364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.070959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.070983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.194655][T32379] xt_hashlimit: size too large, truncated to 1048576 [ 807.314856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.393340][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.512645][T32398] netlink: 'syz.2.6936': attribute type 1 has an invalid length. [ 807.530271][T32398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.327026][T32442] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 808.375865][T32442] bond5 (unregistering): Released all slaves [ 808.627298][T32456] IPVS: length: 8 != 1152 [ 808.759052][T32431] lo speed is unknown, defaulting to 1000 [ 808.791550][T32465] netlink: 'syz.2.6957': attribute type 2 has an invalid length. [ 808.800915][T32467] __nla_validate_parse: 49 callbacks suppressed [ 808.800936][T32467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6960'. [ 808.895821][ T8659] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.919050][ T8659] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.942191][ T8659] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.978882][ T8659] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.172022][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 809.595966][T32498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6970'. [ 809.638708][T32498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6970'. [ 809.695944][T32498] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.6970'. [ 810.154708][T32507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6973'. [ 810.224088][T32507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6973'. [ 810.352581][T32507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 810.405645][T32527] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6977'. [ 810.601780][T32539] netlink: 'syz.2.6981': attribute type 1 has an invalid length. [ 810.614619][T32539] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6981'. [ 810.635327][T32539] netlink: 'syz.2.6981': attribute type 1 has an invalid length. [ 810.654685][T32539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6981'. [ 810.726953][T32541] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6982'. [ 810.968439][T32551] xt_NFQUEUE: number of total queues is 0 [ 811.090384][T32564] sctp: [Deprecated]: syz.2.6990 (pid 32564) Use of int in max_burst socket option. [ 811.090384][T32564] Use struct sctp_assoc_value instead [ 811.269986][T32572] netlink: 'syz.2.6993': attribute type 2 has an invalid length. [ 811.370594][T32576] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.429867][T32576] bridge_slave_0 (unregistering): left allmulticast mode [ 811.440016][T32576] bridge_slave_0 (unregistering): left promiscuous mode [ 811.450026][T32576] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.551045][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 811.559163][ C0] lec:lec_tx_timeout: lec0 [ 811.565163][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 811.571732][ T5926] net_ratelimit: 19 callbacks suppressed [ 811.571752][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.849261][T32597] netlink: 'syz.1.7001': attribute type 7 has an invalid length. [ 811.920341][T32597] ip6gretap0: entered promiscuous mode [ 811.954322][T32597] syz_tun: entered promiscuous mode [ 811.979950][T32597] debugfs: 'hsr1' already exists in 'hsr' [ 812.003663][T32597] Cannot create hsr debugfs directory [ 812.054264][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.271208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.560476][T32642] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 812.564123][T32637] netlink: 'syz.4.7010': attribute type 61 has an invalid length. [ 812.592258][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.693720][T32634] syzkaller0: entered promiscuous mode [ 812.714818][T32634] syzkaller0: entered allmulticast mode [ 812.914180][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.094840][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.310874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.633898][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.961107][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.896883][T32702] __nla_validate_parse: 11 callbacks suppressed [ 814.896905][T32702] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7027'. [ 816.751854][ T5926] net_ratelimit: 12 callbacks suppressed [ 816.751879][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.012520][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.263936][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.390783][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 817.398910][ C0] lec:lec_tx_timeout: lec0 [ 817.405587][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 817.471840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.795179][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.951145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.032751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.217459][T32744] syzkaller0: entered allmulticast mode [ 818.288622][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.351027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.513105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.578692][ T5842] IPVS: starting estimator thread 0... [ 818.674471][ T301] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7052'. [ 818.684353][T32765] IPVS: using max 28 ests per chain, 67200 per kthread [ 818.791717][ T305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7053'. [ 818.838319][ T305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7053'. [ 819.121602][ T314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7055'. [ 819.149325][ T314] tipc: Enabling of bearer rejected, media not registered [ 819.800265][ T352] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 819.961639][ T357] netlink: 'syz.0.7065': attribute type 1 has an invalid length. [ 819.969822][ T357] netlink: 'syz.0.7065': attribute type 2 has an invalid length. [ 820.602312][ T376] netlink: 'syz.4.7072': attribute type 1 has an invalid length. [ 820.613407][ T372] netlink: 'syz.2.7071': attribute type 21 has an invalid length. [ 820.635928][ T376] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7072'. [ 820.691125][ T375] netlink: 'syz.4.7072': attribute type 1 has an invalid length. [ 820.726105][ T375] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7072'. [ 820.842212][ T393] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7078'. [ 820.852554][ T393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7078'. [ 820.869842][ T393] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7078'. [ 820.892370][ T393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7078'. [ 820.919762][ T393] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7078'. [ 820.990319][ T393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7078'. [ 821.091773][ T396] netlink: 'syz.2.7078': attribute type 2 has an invalid length. [ 821.105375][ T396] netlink: 'syz.2.7078': attribute type 11 has an invalid length. [ 821.124829][ T396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7078'. [ 821.315599][ T419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7085'. [ 821.732701][ T454] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 821.951864][ T5941] net_ratelimit: 18 callbacks suppressed [ 821.951889][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.032464][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.191195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.282679][ T6153] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 822.370594][ T499] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 822.383742][ T499] bond6 (unregistering): Released all slaves [ 822.420852][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 822.428927][ C0] lec:lec_tx_timeout: lec0 [ 822.434401][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 822.523850][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.657818][ T505] lo speed is unknown, defaulting to 1000 [ 822.670997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.991750][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.072039][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.566164][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.710836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.032693][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.139151][ T546] netlink: 'syz.3.7115': attribute type 1 has an invalid length. [ 824.148600][ T546] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 824.278363][ T554] bond5: entered promiscuous mode [ 824.294869][ T554] 8021q: adding VLAN 0 to HW filter on device bond5 [ 824.310247][ T554] ipvlan2: entered allmulticast mode [ 824.316081][ T554] bond5: entered allmulticast mode [ 824.326840][ T554] ipvlan3: entered allmulticast mode [ 824.512172][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 825.215243][ T489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.536443][ T586] netlink: 'syz.3.7126': attribute type 21 has an invalid length. [ 825.574699][ T589] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 825.593628][ T590] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 825.659404][ T590] __nla_validate_parse: 12 callbacks suppressed [ 825.659426][ T590] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7127'. [ 825.690302][ T599] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7127'. [ 826.157742][ T631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7139'. [ 826.320359][ T639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7140'. [ 826.342432][ T642] netlink: 'syz.3.7142': attribute type 14 has an invalid length. [ 826.349011][ T639] netlink: 'syz.2.7140': attribute type 23 has an invalid length. [ 826.709954][ T656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7146'. [ 826.748294][ T659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7147'. [ 826.963945][ T674] xt_l2tp: wrong L2TP version: 0 [ 826.999638][ T676] tipc: Enabling of bearer rejected, failed to enable media [ 827.018818][ T674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7152'. [ 827.152122][ T5898] net_ratelimit: 13 callbacks suppressed [ 827.152146][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.440752][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 827.448892][ C0] lec:lec_tx_timeout: lec0 [ 827.455818][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 827.465079][ T715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7163'. [ 827.544323][ T715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7163'. [ 827.566443][ T715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7163'. [ 827.646062][ T725] syz_tun: refused to change device tx_queue_len [ 827.719224][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.846982][ T731] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 827.862165][ T737] openvswitch: netlink: Flow actions attr not present in new flow. [ 827.871404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.891032][ T731] syzkaller1: Refused to change device type [ 828.001437][ T739] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 828.023105][ T742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 828.116277][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.191442][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.521051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.755115][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.536835][T12314] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.555301][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 829.571887][T12314] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 830.121830][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 830.287111][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 830.866752][ T863] rdma_op ffff88802a3539f0 conn xmit_rdma 0000000000000000 [ 830.975352][ T867] __nla_validate_parse: 6 callbacks suppressed [ 830.975376][ T867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7212'. [ 831.148201][ T878] xt_hashlimit: size too large, truncated to 1048576 [ 831.165819][ T878] SET target dimension over the limit! [ 831.272868][ T884] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7220'. [ 831.282547][ T884] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7220'. [ 831.319874][ T890] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7222'. [ 831.522196][ T901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7225'. [ 831.868135][ T927] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7233'. [ 831.903546][ T927] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7233'. [ 831.928549][ T927] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7233'. [ 831.966018][ T927] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7233'. [ 831.976176][ T927] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7233'. [ 832.014515][ T948] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 832.052390][ T950] syzkaller0: entered promiscuous mode [ 832.082054][ T950] syzkaller0: entered allmulticast mode [ 832.194071][ C1] net_ratelimit: 22 callbacks suppressed [ 832.194092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.209259][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.434246][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.472916][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 832.481142][ C0] lec:lec_tx_timeout: lec0 [ 832.486117][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 832.927587][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.070906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.071003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.266720][ T1035] openvswitch: netlink: Multiple metadata blocks provided [ 833.437689][ T1044] tipc: Failed to remove unknown binding: 66,0,0/0:1291435420/1291435422 [ 833.469888][ T1044] tipc: Failed to remove unknown binding: 66,0,0/0:1291435420/1291435421 [ 833.479419][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.490216][ T1044] tipc: Failed to remove unknown binding: 66,0,0/0:1291435420/1291435422 [ 833.502368][ T1044] tipc: Failed to remove unknown binding: 66,0,0/0:1291435420/1291435421 [ 833.564985][T12309] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.578360][T12309] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.604663][ T1054] nbd: must specify at least one socket [ 833.781803][ T1068] Cannot find del_set index 4 as target [ 833.822760][ T1078] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 833.824654][ T1072] netlink: 'syz.3.7268': attribute type 8 has an invalid length. [ 833.839738][ T1071] netlink: 'syz.3.7268': attribute type 8 has an invalid length. [ 833.905215][ T1071] bond0: entered promiscuous mode [ 833.926370][ T1071] bond_slave_0: entered promiscuous mode [ 833.943930][ T1071] bond_slave_1: entered promiscuous mode [ 833.951261][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 833.962549][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.963045][ T1071] bridge0: entered promiscuous mode [ 833.990344][ T1071] gretap0: entered promiscuous mode [ 834.001122][ T1071] bond0: left promiscuous mode [ 834.006311][ T1071] bond_slave_0: left promiscuous mode [ 834.017041][ T1071] bond_slave_1: left promiscuous mode [ 834.026001][ T1071] bridge0: left promiscuous mode [ 834.041032][ T1071] gretap0: left promiscuous mode [ 834.069658][ T1072] bond0: entered promiscuous mode [ 834.079265][ T1072] bond_slave_0: entered promiscuous mode [ 834.095276][ T1072] bond_slave_1: entered promiscuous mode [ 834.101381][ T1072] bridge0: entered promiscuous mode [ 834.108036][ T1072] gretap0: entered promiscuous mode [ 834.114183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.128077][ T1072] bond0: left promiscuous mode [ 834.133084][ T1072] bond_slave_0: left promiscuous mode [ 834.138696][ T1072] bond_slave_1: left promiscuous mode [ 834.145934][ T1072] bridge0: left promiscuous mode [ 834.154511][ T1072] gretap0: left promiscuous mode [ 834.172333][ T1097] tipc: Started in network mode [ 834.180887][ T1097] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 834.219297][ T1097] tipc: Enabled bearer , priority 14 [ 834.515685][ T1118] netlink: 'syz.2.7278': attribute type 1 has an invalid length. [ 834.571333][ T1118] 8021q: adding VLAN 0 to HW filter on device bond7 [ 834.626875][ T1118] bond7: entered promiscuous mode [ 834.642730][ T1118] bond7: entered allmulticast mode [ 834.673252][ T1129] 8021q: adding VLAN 0 to HW filter on device bond7 [ 834.682436][ T1133] netlink: 'syz.3.7280': attribute type 1 has an invalid length. [ 835.333218][ T5898] tipc: Node number set to 10463914 [ 835.938376][ T1194] netlink: 'syz.0.7301': attribute type 10 has an invalid length. [ 836.003504][ T1194] syz_tun: entered promiscuous mode [ 836.078173][ T1194] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 836.226335][ T1217] netlink: 'syz.3.7307': attribute type 3 has an invalid length. [ 836.255543][ T1217] __nla_validate_parse: 49 callbacks suppressed [ 836.255567][ T1217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7307'. [ 836.397452][ T1227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7311'. [ 836.522556][ T1232] netlink: 'syz.3.7312': attribute type 4 has an invalid length. [ 836.563099][ T1232] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7312'. [ 836.605663][ T1227] macvtap1: entered promiscuous mode [ 836.616236][ T1227] vlan0: entered promiscuous mode [ 836.630650][ T1227] macvtap1: entered allmulticast mode [ 836.642614][ T1227] vlan0: entered allmulticast mode [ 836.651616][ T1227] veth0_vlan: entered allmulticast mode [ 836.772480][ T1238] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 836.827791][ T1238] bond4: (slave lo): Enslaving as an active interface with an up link [ 836.889415][ T1237] bond4: option mode: unable to set because the bond device has slaves [ 836.920159][ T1237] bond4: option mode: unable to set because the bond device has slaves [ 836.925741][ T1254] sock: sock_timestamping_bind_phc: sock not bind to device [ 836.973857][ T1237] bond4: option mode: unable to set because the bond device has slaves [ 836.999437][ T1254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7317'. [ 837.006069][ T1237] bond4: option mode: unable to set because the bond device has slaves [ 837.032057][ T1237] bond4: option mode: unable to set because the bond device has slaves [ 837.045132][ T1257] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 837.062758][ T1237] bond4: option mode: unable to set because the bond device has slaves [ 837.098568][ T1237] bond4: option mode: unable to set because the bond device has slaves [ 837.147563][ T1237] bond4: option mode: unable to set because the bond device has slaves [ 837.188513][ T1237] bond4: option mode: unable to set because the bond device has slaves [ 837.206108][ T1237] bond4: option mode: unable to set because the bond device has slaves [ 837.231482][ C0] net_ratelimit: 54 callbacks suppressed [ 837.231505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.241239][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.261711][ T1238] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 837.314187][ T1238] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 837.319559][ T1269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7323'. [ 837.347262][ T1269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7323'. [ 837.453129][ T1237] bond4: option mode: unable to set because the bond device has slaves [ 837.500924][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 837.509045][ C0] lec:lec_tx_timeout: lec0 [ 837.515176][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 837.632042][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.711146][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 837.778564][ T1289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7325'. [ 837.804488][ T1292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7327'. [ 837.947301][ T1292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7327'. [ 838.143319][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.270910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.281266][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.371871][ T1323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7335'. [ 838.392403][ T1324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 838.508357][ T1329] sctp: [Deprecated]: syz.3.7336 (pid 1329) Use of int in max_burst socket option deprecated. [ 838.508357][ T1329] Use struct sctp_assoc_value instead [ 838.675712][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.083738][ T1364] netlink: 'syz.2.7343': attribute type 1 has an invalid length. [ 839.105359][ T1344] netlink: 'syz.3.7340': attribute type 7 has an invalid length. [ 839.151527][ T1344] netlink: 'syz.3.7340': attribute type 8 has an invalid length. [ 839.242652][ T1372] netlink: 'syz.2.7345': attribute type 1 has an invalid length. [ 839.769031][ T1396] netlink: 'syz.3.7350': attribute type 9 has an invalid length. [ 839.778582][ T1392] netlink: 'syz.3.7350': attribute type 9 has an invalid length. [ 840.206895][ T1420] syzkaller0: entered promiscuous mode [ 840.215825][ T1420] syzkaller0: entered allmulticast mode [ 840.353070][T12314] wlan1: Trigger new scan to find an IBSS to join [ 840.363784][ T1430] netlink: 'syz.2.7363': attribute type 1 has an invalid length. [ 840.381576][ T1430] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 840.676939][ T1448] : entered promiscuous mode [ 841.341250][ T1478] __nla_validate_parse: 10 callbacks suppressed [ 841.341276][ T1478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7375'. [ 841.453997][ T1483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7377'. [ 841.564681][ T1483] bond6: entered promiscuous mode [ 841.572421][ T1483] 8021q: adding VLAN 0 to HW filter on device bond6 [ 841.717419][ T1483] ipvlan2: entered allmulticast mode [ 841.724465][ T1483] bond6: entered allmulticast mode [ 841.988667][ T1518] ip6erspan1: entered allmulticast mode [ 842.070430][ T1525] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7384'. [ 842.169914][ T1528] xt_hashlimit: size too large, truncated to 1048576 [ 842.271357][ T5898] net_ratelimit: 13 callbacks suppressed [ 842.271381][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.430892][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 842.439288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.531801][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 842.540031][ C0] lec:lec_tx_timeout: lec0 [ 842.544902][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 842.567541][ T1542] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7388'. [ 842.833047][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.842355][ T1551] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7391'. [ 842.869750][ T1551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7391'. [ 842.889768][ T1552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7389'. [ 842.900471][ T1551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7391'. [ 843.231018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.311821][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.320204][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.392385][T12300] wlan1: Trigger new scan to find an IBSS to join [ 843.471112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.717669][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.825302][ T1600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7404'. [ 843.873062][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.930207][ T1597] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 843.958335][ T1597] bond6 (unregistering): Released all slaves [ 844.007793][ T1602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7405'. [ 844.031013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.294385][ T1624] ksmbd: Unknown IPC event: 3, ignore. [ 844.313787][ T1628] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003 [ 844.330203][T12313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.338081][ T1630] ipt_rpfilter: unknown options [ 844.615666][ T1644] netlink: 'syz.1.7419': attribute type 178 has an invalid length. [ 844.690660][ T1650] tipc: Enabling of bearer rejected, failed to enable media [ 845.405905][ T1682] netlink: 'syz.4.7433': attribute type 1 has an invalid length. [ 845.441833][ T1675] xfrm1: entered promiscuous mode [ 845.461973][ T1675] xfrm1: entered allmulticast mode [ 845.669681][ T1690] nbd: illegal input index 2958377 [ 846.125110][ T1711] : renamed from veth1_vlan (while UP) [ 846.238560][ T1715] netlink: 'syz.2.7443': attribute type 1 has an invalid length. [ 846.589832][ T1739] netlink: 'syz.2.7451': attribute type 1 has an invalid length. [ 846.637974][ T1739] netlink: 'syz.2.7451': attribute type 4 has an invalid length. [ 846.729029][ T1739] __nla_validate_parse: 9 callbacks suppressed [ 846.729051][ T1739] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7451'. [ 846.930339][ T1753] IPv6: NLM_F_CREATE should be specified when creating new route [ 846.938837][ T1753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7455'. [ 847.260213][ T1736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7452'. [ 847.272561][ T1736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7452'. [ 847.297820][ T1736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7452'. [ 847.323932][ T1736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7452'. [ 847.333630][ T1736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7452'. [ 847.360842][ T1736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7452'. [ 847.392349][ C1] net_ratelimit: 12 callbacks suppressed [ 847.392372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.412424][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.473786][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.512245][ T1777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7463'. [ 847.566765][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 847.574879][ C0] lec:lec_tx_timeout: lec0 [ 847.579493][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 847.631614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.736222][ T1776] veth1_to_hsr: Unable to set peer notification delay as MII monitoring is disabled [ 847.757129][ T1776] veth1_to_hsr (unregistering): Released all slaves [ 847.866245][ T1777] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 847.918308][ T1777] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 847.936510][ T1777] gretap1: entered promiscuous mode [ 847.959546][ T1777] gretap1: entered allmulticast mode [ 848.033521][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.090369][ T1787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7466'. [ 848.123502][ T1790] netlink: 'syz.2.7467': attribute type 5 has an invalid length. [ 848.186187][ T1787] bond5: entered promiscuous mode [ 848.212491][ T1787] bond5: entered allmulticast mode [ 848.384567][ T1803] netlink: 'syz.3.7471': attribute type 1 has an invalid length. [ 848.392691][ T1802] netlink: 'syz.3.7471': attribute type 1 has an invalid length. [ 848.516580][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.670881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.696045][ T1824] netlink: 'syz.3.7477': attribute type 11 has an invalid length. [ 848.918232][ T1840] syzkaller1: entered promiscuous mode [ 848.935697][ T1840] syzkaller1: entered allmulticast mode [ 849.059532][ T1847] delete_channel: no stack [ 849.073236][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.402097][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.551629][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.431094][ T5905] net_ratelimit: 11 callbacks suppressed [ 852.431112][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.671454][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.831213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.232412][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.313297][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.471392][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.711197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.720018][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.870992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.950731][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6370 ms [ 853.958811][ C0] lec:lec_tx_timeout: lec0 [ 853.964128][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 854.272063][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.551087][ C0] net_ratelimit: 12 callbacks suppressed [ 857.551112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.872622][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.031018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.111094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.432009][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.512897][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.911263][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.071607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.472089][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.552381][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.710780][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 859.718858][ C0] lec:lec_tx_timeout: lec0 [ 859.723760][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 859.732231][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 862.591137][T14376] net_ratelimit: 11 callbacks suppressed [ 862.591160][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.605040][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.911473][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.071191][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.231080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.632795][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.111995][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.271062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.601594][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.671491][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.471900][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 865.480069][ C0] lec:lec_tx_timeout: lec0 [ 865.485526][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 867.631540][ T5842] net_ratelimit: 11 callbacks suppressed [ 867.631565][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.791437][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.273126][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.431338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.681052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.692806][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.830995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.831099][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.312120][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.470915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.501418][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 870.509475][ C0] lec:lec_tx_timeout: lec0 [ 870.514443][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 870.606420][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 872.991722][ T5941] net_ratelimit: 14 callbacks suppressed [ 872.991742][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.471755][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.630822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.713194][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.031504][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.511538][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.671389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.752247][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.053792][ T1894] __nla_validate_parse: 2 callbacks suppressed [ 875.053812][ T1894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7496'. [ 875.071699][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.105127][ T1894] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7496'. [ 875.114354][ T1894] nbd: illegal input index -8454144 [ 875.252357][ T1899] bond8: option fail_over_mac: invalid value (16) [ 875.274465][ T1899] bond8 (unregistering): Released all slaves [ 875.311007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.521563][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 875.529671][ C0] lec:lec_tx_timeout: lec0 [ 875.536302][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 875.539497][ T1927] netlink: 'syz.4.7502': attribute type 1 has an invalid length. [ 875.553056][ T1927] netlink: 'syz.4.7502': attribute type 1 has an invalid length. [ 875.591131][ T1927] netlink: 'syz.4.7502': attribute type 1 has an invalid length. [ 875.645348][ T1927] netlink: 'syz.4.7502': attribute type 2 has an invalid length. [ 875.726817][ T1927] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7502'. [ 876.178997][ T1958] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7510'. [ 876.199923][ T1955] xt_l2tp: v2 tid > 0xffff: 1114244 [ 876.242603][ T1955] tipc: Enabling of bearer rejected, failed to enable media [ 876.355213][T12314] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 876.462150][ T1969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7514'. [ 876.495971][ T1970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7513'. [ 876.512285][ T1970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7513'. [ 876.523861][ T1970] netlink: 'syz.4.7513': attribute type 12 has an invalid length. [ 876.537566][ T1970] netlink: 'syz.4.7513': attribute type 11 has an invalid length. [ 876.556428][ T1965] syzkaller0: entered promiscuous mode [ 876.562759][ T1965] syzkaller0: entered allmulticast mode [ 876.570482][ T1975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7515'. [ 876.611119][ T1969] netlink: 576 bytes leftover after parsing attributes in process `syz.1.7514'. [ 876.643564][ T1978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7517'. [ 878.204408][ T5926] net_ratelimit: 13 callbacks suppressed [ 878.204443][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.680494][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.689478][ T6153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.719959][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.732030][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.831012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.233908][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.331033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.391028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.798185][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.551715][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 880.559768][ C0] lec:lec_tx_timeout: lec0 [ 880.564699][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 881.088638][ T2005] __nla_validate_parse: 1 callbacks suppressed [ 881.088659][ T2005] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7526'. [ 881.134933][ T2008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7523'. [ 881.225109][ T2010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7528'. [ 881.225199][ T2005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7526'. [ 881.440280][ T2005] ip6gretap0 (unregistering): left promiscuous mode [ 881.474154][ T2019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7529'. [ 881.653371][ T2023] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7531'. [ 881.932127][ T2030] delete_channel: no stack [ 881.977905][ T2034] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7535'. [ 882.282064][ T2053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7539'. [ 882.698558][ T2060] netlink: 'syz.4.7540': attribute type 10 has an invalid length. [ 882.746295][ T2060] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 882.767720][ T2068] netlink: 'syz.0.7542': attribute type 7 has an invalid length. [ 882.784588][ T2068] netlink: 'syz.0.7542': attribute type 8 has an invalid length. [ 882.813762][ T2068] netlink: 208 bytes leftover after parsing attributes in process `syz.0.7542'. [ 882.896161][ T2071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7543'. [ 882.998449][ T30] audit: type=1804 audit(1777221855.089:11): pid=2065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7541" name="/newroot/196/cgroup.controllers" dev="tmpfs" ino=1019 res=1 errno=0 [ 883.035022][ T2074] netlink: 'syz.4.7544': attribute type 1 has an invalid length. [ 883.063018][ T30] audit: type=1800 audit(1777221855.089:12): pid=2065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7541" name="cgroup.controllers" dev="tmpfs" ino=1019 res=0 errno=0 [ 883.177967][ T2074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 883.371389][ T2089] pim6reg: entered allmulticast mode [ 883.392967][ T5941] net_ratelimit: 20 callbacks suppressed [ 883.392992][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.416813][ T2096] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 883.579608][ T2109] netlink: 'syz.4.7554': attribute type 1 has an invalid length. [ 883.654880][ T2109] bond6: entered promiscuous mode [ 883.670797][ T2109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 883.872079][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.960162][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.008843][ T2109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 884.023315][ T2109] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 884.031128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.052616][ T2109] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 884.073041][ T2109] bond6: (slave ip6gre1): making interface the new active one [ 884.081630][ T2109] ip6gre1: entered promiscuous mode [ 884.090138][ T2109] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 884.113840][ T2130] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 884.449970][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.517322][ T2156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 884.529313][ T2158] bond4: (slave lo): Releasing backup interface [ 884.556799][ T2158] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 884.573283][ T2158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 884.998598][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.070971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.296166][ T2196] netlink: 'syz.1.7576': attribute type 9 has an invalid length. [ 885.484954][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.548205][ T2208] team0: Port device team_slave_0 removed [ 885.772104][ T2226] netlink: 'syz.3.7584': attribute type 4 has an invalid length. [ 885.882742][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.350757][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 886.358989][ C0] lec:lec_tx_timeout: lec0 [ 886.365482][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 886.868660][ T2285] pim6reg: entered allmulticast mode [ 887.099613][ T2299] __nla_validate_parse: 13 callbacks suppressed [ 887.099634][ T2299] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7602'. [ 887.226864][ T2308] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7603'. [ 887.246957][ T2308] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7603'. [ 887.258116][ T2308] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7603'. [ 887.269446][ T2308] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7603'. [ 887.300235][ T2308] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7603'. [ 887.316726][T12309] tipc: Resetting bearer [ 887.347281][ T2308] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7603'. [ 887.368845][ T2308] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7603'. [ 887.413605][ T2308] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7603'. [ 887.443297][ T2308] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7603'. [ 887.650884][ T2332] sctp: [Deprecated]: syz.4.7610 (pid 2332) Use of int in max_burst socket option deprecated. [ 887.650884][ T2332] Use struct sctp_assoc_value instead [ 887.746068][ T2340] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 887.767406][ T2338] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 887.887166][ T2345] batadv0: entered promiscuous mode [ 887.902912][ T2345] macsec2: entered promiscuous mode [ 887.917752][ T2345] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 887.932601][ T2345] batadv0: left promiscuous mode [ 887.998825][ T2352] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 888.012592][ T2352] bond8 (unregistering): Released all slaves [ 888.591386][ T5941] net_ratelimit: 12 callbacks suppressed [ 888.591410][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.911113][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.073869][ T2420] netlink: 'syz.0.7634': attribute type 15 has an invalid length. [ 889.136370][T12297] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 889.145883][ T2420] netlink: 'syz.0.7634': attribute type 15 has an invalid length. [ 889.171901][T12297] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 889.183777][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.230934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.267303][ T2428] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 889.295130][T12297] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 889.306293][T12297] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 889.632379][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.793137][ T5842] page_pool_release_retry() stalled pool shutdown: id 216, 1 inflight 60 sec [ 889.951396][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.998039][ T2460] netlink: 'syz.1.7643': attribute type 1 has an invalid length. [ 890.138539][ T2470] netlink: 'syz.2.7647': attribute type 7 has an invalid length. [ 890.141292][ T2460] 8021q: adding VLAN 0 to HW filter on device bond7 [ 890.190909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.209057][ T2472] openvswitch: netlink: IP tunnel dst address not specified [ 890.212462][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.231385][ T2470] netlink: 'syz.2.7647': attribute type 8 has an invalid length. [ 890.271010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.556301][ T2499] netlink: 'syz.1.7656': attribute type 1 has an invalid length. [ 890.725646][ T2499] 8021q: adding VLAN 0 to HW filter on device bond8 [ 890.855248][ T2514] syz_tun: entered promiscuous mode [ 890.872084][ T2514] syz_tun: left promiscuous mode [ 891.391331][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 891.399461][ C0] lec:lec_tx_timeout: lec0 [ 891.405631][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 892.150547][ T2601] __nla_validate_parse: 44 callbacks suppressed [ 892.150571][ T2601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7677'. [ 892.191886][ T2601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7677'. [ 892.333667][ T2613] netlink: 'syz.3.7680': attribute type 58 has an invalid length. [ 892.357429][ T2613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7680'. [ 892.583982][ T2618] netlink: 'syz.0.7679': attribute type 25 has an invalid length. [ 892.666836][ T2618] netlink: 294 bytes leftover after parsing attributes in process `syz.0.7679'. [ 892.716730][ T2636] netlink: 'syz.1.7684': attribute type 21 has an invalid length. [ 892.786019][ T2641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7686'. [ 892.867717][ T2647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7686'. [ 892.920115][ T2641] macvlan2: entered allmulticast mode [ 892.938478][ T2641] dummy0: entered allmulticast mode [ 892.944386][ T2641] dummy0: entered promiscuous mode [ 892.990986][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 893.045761][ T2651] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7690'. [ 893.056881][ T2651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7690'. [ 893.072735][ T2651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7690'. [ 893.085232][ T2658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7689'. [ 893.102089][ T2651] netlink: 'syz.3.7690': attribute type 3 has an invalid length. [ 893.114475][ T2651] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 893.256973][ T2664] gretap0: entered promiscuous mode [ 893.275803][ T2664] gretap0: entered allmulticast mode [ 893.307826][ T2667] geneve2: entered promiscuous mode [ 893.322446][ T2667] geneve2: entered allmulticast mode [ 893.536107][ T5926] IPVS: starting estimator thread 0... [ 893.652404][ T2692] IPVS: using max 24 ests per chain, 57600 per kthread [ 893.791350][ T5898] net_ratelimit: 19 callbacks suppressed [ 893.791374][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.828790][ T2705] openvswitch: netlink: Multiple metadata blocks provided [ 893.967038][ T2713] C: renamed from lo [ 893.973100][ T2713] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 894.430917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.440609][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.832841][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.002759][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.470993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.479512][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.871847][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.420762][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 896.428849][ C0] lec:lec_tx_timeout: lec0 [ 896.435812][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 896.504245][ T2690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 896.961877][ T2763] 8021q: adding VLAN 0 to HW filter on device bond8 [ 897.040062][ T2761] hsr_slave_0 (unregistering): left promiscuous mode [ 897.240097][ T2785] netlink: 'syz.2.7717': attribute type 1 has an invalid length. [ 897.355560][ T2799] __nla_validate_parse: 6 callbacks suppressed [ 897.355582][ T2799] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7721'. [ 897.439503][ T2799] syzkaller1: entered promiscuous mode [ 897.456336][ T2799] syzkaller1: entered allmulticast mode [ 897.479852][ T2804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7722'. [ 897.567590][ T2808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7724'. [ 897.577929][ T2808] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7724'. [ 897.588831][ T2808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7724'. [ 897.602194][ T2808] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7724'. [ 897.612445][ T2808] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7724'. [ 898.147461][ T2849] bond9: option fail_over_mac: invalid value (16) [ 898.174705][ T2849] bond9 (unregistering): Released all slaves [ 898.183172][ T2853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7735'. [ 898.344904][ T2868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7735'. [ 898.379771][ T2868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7735'. [ 898.501354][ T2875] netlink: 'syz.3.7735': attribute type 10 has an invalid length. [ 898.562267][ T2853] 8021q: adding VLAN 0 to HW filter on device bond6 [ 898.598220][ T2875] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.605872][ T2875] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.992632][ T5941] net_ratelimit: 12 callbacks suppressed [ 898.992656][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.073690][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.128328][ T2901] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 899.140035][ T2901] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 899.374604][ T2883] lo speed is unknown, defaulting to 1000 [ 899.449164][ T2920] netlink: 'syz.1.7754': attribute type 1 has an invalid length. [ 899.586223][ T2920] bond10: entered promiscuous mode [ 899.601396][ T2920] 8021q: adding VLAN 0 to HW filter on device bond10 [ 899.631276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.640508][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.718719][ T2928] bond10: (slave bridge5): making interface the new active one [ 899.733140][ T2928] bridge5: entered promiscuous mode [ 899.757275][ T2928] bridge5: left promiscuous mode [ 899.900553][ T2931] bond6 (unregistering): Released all slaves [ 900.031649][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.271016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.671065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.680407][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.750973][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.074617][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.244803][ T2982] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 901.265376][ T2982] bond7 (unregistering): Released all slaves [ 901.450771][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 901.458919][ C0] lec:lec_tx_timeout: lec0 [ 901.465301][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 901.497865][ T3010] netlink: 'syz.0.7781': attribute type 4 has an invalid length. [ 901.510989][ T3010] netlink: 'syz.0.7781': attribute type 1 has an invalid length. [ 901.645194][ T3017] xt_hashlimit: size too large, truncated to 1048576 [ 901.679911][ T3017] xt_hashlimit: size too large, truncated to 1048576 [ 901.720490][ T3020] netlink: 'syz.2.7782': attribute type 5 has an invalid length. [ 902.326284][ T3052] netlink: 'syz.0.7790': attribute type 11 has an invalid length. [ 902.343825][ T3047] syzkaller0: entered promiscuous mode [ 902.369051][ T3047] syzkaller0: entered allmulticast mode [ 902.398583][ T3054] __nla_validate_parse: 11 callbacks suppressed [ 902.398615][ T3054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7792'. [ 902.891328][ T3087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7800'. [ 902.896055][ T3081] syzkaller0: entered promiscuous mode [ 902.940473][ T3081] syzkaller0: entered allmulticast mode [ 902.963060][ T3089] x_tables: duplicate underflow at hook 1 [ 903.220329][ T3097] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 903.301177][ T3097] bond0: (slave lo): Error: Device can not be enslaved while up [ 903.326460][ T3101] netlink: 'syz.2.7805': attribute type 1 has an invalid length. [ 903.375505][ T3107] x_tables: duplicate underflow at hook 1 [ 903.559418][ T3111] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7808'. [ 904.089086][ T3148] netlink: 'syz.1.7817': attribute type 1 has an invalid length. [ 904.111043][ C0] net_ratelimit: 13 callbacks suppressed [ 904.111064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.125024][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.221894][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.266373][ T3148] macvlan2: entered promiscuous mode [ 904.284143][ T3148] macvlan2: entered allmulticast mode [ 904.315544][ T3148] bond11: entered promiscuous mode [ 904.333989][ T3148] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 904.375059][ T3148] bond11: left promiscuous mode [ 904.397921][ T3164] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 904.758962][ T3173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7822'. [ 904.830937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.840252][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.895912][ T30] audit: type=1804 audit(1777221876.989:13): pid=3179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7824" name="/newroot/434/cgroup.controllers" dev="tmpfs" ino=2219 res=1 errno=0 [ 904.927016][ T30] audit: type=1800 audit(1777221877.019:14): pid=3179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7824" name="cgroup.controllers" dev="tmpfs" ino=2219 res=0 errno=0 [ 905.120556][ T3184] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7825'. [ 905.151788][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.225525][ T3188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7827'. [ 905.225534][ T3189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7827'. [ 905.245416][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.572111][ T3217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7835'. [ 905.613459][ T3217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7835'. [ 905.624279][ T3219] ipt_ECN: cannot use operation on non-tcp rule [ 905.871263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.882258][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.956975][ T3244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7842'. [ 906.073480][ T3251] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 906.099404][ T8659] tipc: Subscription rejected, illegal request [ 906.378313][ T3266] netlink: 'syz.0.7849': attribute type 1 has an invalid length. [ 906.480754][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 906.488915][ C0] lec:lec_tx_timeout: lec0 [ 906.494881][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 906.558052][ T3281] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 906.567910][ T3281] syzkaller0: entered promiscuous mode [ 906.574091][ T3281] syzkaller0: entered allmulticast mode [ 906.890425][ T3300] sctp: [Deprecated]: syz.2.7859 (pid 3300) Use of int in maxseg socket option. [ 906.890425][ T3300] Use struct sctp_assoc_value instead [ 906.990318][ T3304] Unknown options in mask b7f2 [ 907.032151][ T3308] xt_l2tp: invalid flags combination: 8 [ 907.726049][ T6146] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 908.553779][ T3344] netlink: 'syz.0.7870': attribute type 2 has an invalid length. [ 908.614695][ T3344] __nla_validate_parse: 5 callbacks suppressed [ 908.614719][ T3344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7870'. [ 908.895348][ T3355] netlink: 'syz.4.7872': attribute type 1 has an invalid length. [ 908.916474][ T3353] macvlan0: entered promiscuous mode [ 909.259321][ T3368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7875'. [ 909.284022][ T3368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7875'. [ 909.489510][ T806] net_ratelimit: 17 callbacks suppressed [ 909.489533][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.526728][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.599118][ T3355] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 909.716596][ T3371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7877'. [ 909.777789][T14386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.786279][ T3372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7877'. [ 909.837219][ T3372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7877'. [ 910.039918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.162153][ T3384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 910.177167][T14386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.193237][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.299724][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.911127][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.071001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.527408][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 911.535622][ C0] lec:lec_tx_timeout: lec0 [ 911.587408][ T3422] netlink: 'syz.4.7888': attribute type 20 has an invalid length. [ 911.650344][ T3422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7888'. [ 911.660102][ T3426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7889'. [ 911.879702][ T3435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 911.968927][ T3422] netlink: 'syz.4.7888': attribute type 20 has an invalid length. [ 912.023777][ T3422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7888'. [ 912.109061][ T3440] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.7893'. [ 913.736172][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7908'. [ 913.863978][ T3492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7908'. [ 914.368227][ T3519] netlink: 'syz.2.7912': attribute type 1 has an invalid length. [ 914.597961][ T806] net_ratelimit: 19 callbacks suppressed [ 914.597983][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.658537][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.671474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.693894][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.733697][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.806555][ T3519] bond10: entered promiscuous mode [ 914.944450][ T3519] 8021q: adding VLAN 0 to HW filter on device bond10 [ 915.237003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.488104][ T3521] bond10: (slave bridge7): making interface the new active one [ 915.526350][ T3521] bridge7: entered promiscuous mode [ 915.554655][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.573363][ T3552] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 915.607411][ T3521] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 915.631253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.858903][T27577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.890326][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.001619][ T3563] SET target dimension over the limit! [ 916.294349][ T3569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7921'. [ 916.570513][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7924'. [ 916.708930][ T3584] netlink: 'syz.4.7926': attribute type 1 has an invalid length. [ 916.739688][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7925'. [ 916.810336][ T3584] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 917.129389][ T3600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7930'. [ 917.507045][ T3611] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7928'. [ 918.175591][ T3633] netlink: 'syz.3.7938': attribute type 13 has an invalid length. [ 918.350387][ T3633] gretap0: refused to change device tx_queue_len [ 918.385271][ T3637] netlink: 'syz.2.7937': attribute type 3 has an invalid length. [ 918.415247][ T3637] netlink: 'syz.2.7937': attribute type 3 has an invalid length. [ 918.627921][ T3648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7941'. [ 918.905533][ T3652] tipc: Enabled bearer , priority 0 [ 918.949729][ T3652] syzkaller0: entered promiscuous mode [ 918.983748][ T3652] syzkaller0: entered allmulticast mode [ 919.048525][ T3660] batadv_slave_1: entered promiscuous mode [ 919.125368][ T3652] tipc: Resetting bearer [ 919.146375][ T3660] batadv_slave_1: left promiscuous mode [ 919.179182][ T3650] tipc: Resetting bearer [ 919.503229][ T3650] tipc: Disabling bearer [ 919.555936][ T3672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.711382][ C1] net_ratelimit: 18 callbacks suppressed [ 919.711403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.771546][ T3672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.782865][ T3680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7952'. [ 919.805673][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.940553][ T3677] ip6_vti0: entered promiscuous mode [ 919.983460][ T3677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7950'. [ 920.267214][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.348637][T27577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.432498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.489133][ T3695] nbd: nbd2 already in use [ 920.528489][T14376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.554164][ T3697] block nbd2: NBD_DISCONNECT [ 920.579200][ T3697] block nbd2: Send disconnect failed -32 [ 920.635652][ T3697] block nbd2: shutting down sockets [ 920.891178][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.899852][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.041134][ T8661] veth0_to_bridge: left allmulticast mode [ 921.060907][ T8661] veth0_to_bridge: left promiscuous mode [ 921.079473][ T8661] bridge0: port 3(veth0_to_bridge) entered disabled state [ 921.127631][ T8661] bridge_slave_1: left allmulticast mode [ 921.142703][ T8661] bridge_slave_1: left promiscuous mode [ 921.148756][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.173533][ T8661] bridge_slave_0: left allmulticast mode [ 921.179272][ T8661] bridge_slave_0: left promiscuous mode [ 921.185869][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.364087][T27577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.474008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.815125][ T3721] netlink: 'syz.4.7963': attribute type 13 has an invalid length. [ 922.018344][ T3727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7966'. [ 922.457481][ T3734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7968'. [ 922.948231][ T3746] [ 922.950641][ T3746] ====================================================== [ 922.957690][ T3746] WARNING: possible circular locking dependency detected [ 922.964818][ T3746] syzkaller #0 Not tainted [ 922.969249][ T3746] ------------------------------------------------------ [ 922.976303][ T3746] syz.2.7970/3746 is trying to acquire lock: [ 922.982310][ T3746] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 922.991583][ T3746] [ 922.991583][ T3746] but task is already holding lock: [ 922.998969][ T3746] ffff8880311cf370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 923.008427][ T3746] [ 923.008427][ T3746] which lock already depends on the new lock. [ 923.008427][ T3746] [ 923.018858][ T3746] [ 923.018858][ T3746] the existing dependency chain (in reverse order) is: [ 923.027898][ T3746] [ 923.027898][ T3746] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 923.035936][ T3746] _raw_spin_lock_bh+0x36/0x50 [ 923.041585][ T3746] nr_rt_ioctl+0x215/0xf90 [ 923.046983][ T3746] sock_do_ioctl+0x101/0x320 [ 923.052213][ T3746] sock_ioctl+0x5c6/0x7f0 [ 923.057094][ T3746] __se_sys_ioctl+0xfc/0x170 [ 923.062243][ T3746] do_syscall_64+0x15f/0xf80 [ 923.067468][ T3746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.073916][ T3746] [ 923.073916][ T3746] -> #1 (nr_node_list_lock){+.-.}-{3:3}: [ 923.081788][ T3746] _raw_spin_lock_bh+0x36/0x50 [ 923.087127][ T3746] nr_rt_device_down+0xbe/0x860 [ 923.092522][ T3746] nr_device_event+0x137/0x150 [ 923.097898][ T3746] notifier_call_chain+0x1ad/0x3d0 [ 923.103559][ T3746] __dev_notify_flags+0x16d/0x310 [ 923.109182][ T3746] netif_change_flags+0xe8/0x1a0 [ 923.114668][ T3746] dev_change_flags+0x130/0x270 [ 923.120102][ T3746] dev_ioctl+0x7b4/0x1150 [ 923.125045][ T3746] sock_do_ioctl+0x23e/0x320 [ 923.130185][ T3746] sock_ioctl+0x5c6/0x7f0 [ 923.135066][ T3746] __se_sys_ioctl+0xfc/0x170 [ 923.140305][ T3746] do_syscall_64+0x15f/0xf80 [ 923.145445][ T3746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.151885][ T3746] [ 923.151885][ T3746] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 923.159911][ T3746] __lock_acquire+0x15a5/0x2cf0 [ 923.165323][ T3746] lock_acquire+0x106/0x350 [ 923.170391][ T3746] _raw_spin_lock_bh+0x36/0x50 [ 923.175708][ T3746] nr_rt_ioctl+0x40c/0xf90 [ 923.180666][ T3746] sock_do_ioctl+0x101/0x320 [ 923.185802][ T3746] sock_ioctl+0x5c6/0x7f0 [ 923.190675][ T3746] __se_sys_ioctl+0xfc/0x170 [ 923.195818][ T3746] do_syscall_64+0x15f/0xf80 [ 923.200968][ T3746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.207886][ T3746] [ 923.207886][ T3746] other info that might help us debug this: [ 923.207886][ T3746] [ 923.218133][ T3746] Chain exists of: [ 923.218133][ T3746] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 923.218133][ T3746] [ 923.232000][ T3746] Possible unsafe locking scenario: [ 923.232000][ T3746] [ 923.239478][ T3746] CPU0 CPU1 [ 923.244865][ T3746] ---- ---- [ 923.250358][ T3746] lock(&nr_node->node_lock); [ 923.255392][ T3746] lock(nr_node_list_lock); [ 923.262558][ T3746] lock(&nr_node->node_lock); [ 923.269884][ T3746] lock(nr_neigh_list_lock); [ 923.274618][ T3746] [ 923.274618][ T3746] *** DEADLOCK *** [ 923.274618][ T3746] [ 923.282799][ T3746] 2 locks held by syz.2.7970/3746: [ 923.288030][ T3746] #0: ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 923.297562][ T3746] #1: ffff8880311cf370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 923.307263][ T3746] [ 923.307263][ T3746] stack backtrace: [ 923.313173][ T3746] CPU: 1 UID: 0 PID: 3746 Comm: syz.2.7970 Not tainted syzkaller #0 PREEMPT(full) [ 923.313200][ T3746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 923.313214][ T3746] Call Trace: [ 923.313222][ T3746] [ 923.313233][ T3746] dump_stack_lvl+0xe8/0x150 [ 923.313267][ T3746] print_circular_bug+0x2e1/0x300 [ 923.313294][ T3746] check_noncircular+0x12e/0x150 [ 923.313321][ T3746] __lock_acquire+0x15a5/0x2cf0 [ 923.313364][ T3746] ? nr_rt_ioctl+0x40c/0xf90 [ 923.313382][ T3746] lock_acquire+0x106/0x350 [ 923.313411][ T3746] ? nr_rt_ioctl+0x40c/0xf90 [ 923.313432][ T3746] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 923.313456][ T3746] ? nr_rt_ioctl+0x821/0xf90 [ 923.313476][ T3746] ? nr_rt_ioctl+0x40c/0xf90 [ 923.313502][ T3746] _raw_spin_lock_bh+0x36/0x50 [ 923.313527][ T3746] ? nr_rt_ioctl+0x40c/0xf90 [ 923.313545][ T3746] nr_rt_ioctl+0x40c/0xf90 [ 923.313569][ T3746] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 923.313594][ T3746] ? apparmor_capable+0x126/0x170 [ 923.313719][ T3746] ? capable+0x88/0xe0 [ 923.313748][ T3746] ? nr_ioctl+0x1b1/0x3b0 [ 923.313776][ T3746] sock_do_ioctl+0x101/0x320 [ 923.313804][ T3746] ? __pfx_sock_do_ioctl+0x10/0x10 [ 923.313829][ T3746] ? do_futex+0x333/0x420 [ 923.313857][ T3746] sock_ioctl+0x5c6/0x7f0 [ 923.313884][ T3746] ? __pfx_sock_ioctl+0x10/0x10 [ 923.313908][ T3746] ? __fget_files+0x2a/0x420 [ 923.313930][ T3746] ? __fget_files+0x3a0/0x420 [ 923.313950][ T3746] ? __fget_files+0x2a/0x420 [ 923.313972][ T3746] ? bpf_lsm_file_ioctl+0x9/0x20 [ 923.314000][ T3746] ? __pfx_sock_ioctl+0x10/0x10 [ 923.314026][ T3746] __se_sys_ioctl+0xfc/0x170 [ 923.314054][ T3746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.314077][ T3746] do_syscall_64+0x15f/0xf80 [ 923.314105][ T3746] ? trace_irq_disable+0x3b/0x140 [ 923.314133][ T3746] ? clear_bhb_loop+0x40/0x90 [ 923.314156][ T3746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.314178][ T3746] RIP: 0033:0x7fb3cf19cdd9 [ 923.314198][ T3746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.314217][ T3746] RSP: 002b:00007fb3cff9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.314240][ T3746] RAX: ffffffffffffffda RBX: 00007fb3cf416270 RCX: 00007fb3cf19cdd9 [ 923.314256][ T3746] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000008 [ 923.314270][ T3746] RBP: 00007fb3cf232d69 R08: 0000000000000000 R09: 0000000000000000 [ 923.314285][ T3746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.314299][ T3746] R13: 00007fb3cf416308 R14: 00007fb3cf416270 R15: 00007fffd922fb48 [ 923.314324][ T3746] [ 923.732460][ T8661] gretap0 (unregistering): left promiscuous mode [ 923.779836][ T8661] team0: Port device gretap1 removed [ 923.824839][ T8661] bond13 (unregistering): (slave gretap2): Releasing active interface [ 924.229897][ T8661] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 924.750870][ C1] net_ratelimit: 9 callbacks suppressed [ 924.750894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.563418][ T8661] bond0 (unregistering): left promiscuous mode [ 925.569776][ T8661] bond_slave_0: left promiscuous mode [ 925.575729][ T8661] bond_slave_1: left promiscuous mode [ 925.582654][ T8661] batadv0: left promiscuous mode [ 925.603473][ T8661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.632714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.642601][ T8661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.664527][ T8661] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 925.682952][ T8661] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 925.697598][ T8661] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 925.718911][ T8661] bond0 (unregistering): Released all slaves [ 925.730192][ T8661] bond1 (unregistering): Released all slaves [ 925.746126][ T8661] bond2 (unregistering): Released all slaves [ 925.763712][ T8661] bond3 (unregistering): Released all slaves [ 925.777284][ T8661] bond4 (unregistering): Released all slaves [ 925.790173][ T8661] bond5 (unregistering): Released all slaves [ 925.804851][ T8661] bond6 (unregistering): Released all slaves [ 925.819844][ T8661] bond7 (unregistering): Released all slaves [ 925.838207][ T8661] bond8 (unregistering): Released all slaves [ 925.856702][ T8661] bond9 (unregistering): Released all slaves [ 925.879191][ T8661] bond10 (unregistering): Released all slaves [ 925.895501][ T8661] bond11 (unregistering): Released all slaves [ 925.914048][ T8661] bond12 (unregistering): Released all slaves [ 925.932479][ T8661] bond13 (unregistering): Released all slaves [ 925.963855][ T3721] gretap0: refused to change device tx_queue_len [ 926.005339][ T3721] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 926.073194][ T3729] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7966'. [ 926.152592][ T3746] bridge_slave_0: left allmulticast mode [ 926.165138][ T3746] bridge_slave_0: left promiscuous mode [ 926.203045][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.250866][ T3746] bridge_slave_1: left allmulticast mode [ 926.258900][ T3746] bridge_slave_1: left promiscuous mode [ 926.278254][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.361344][ T3746] team0: Port device team_slave_0 removed [ 926.387987][ T3746] team0: Port device team_slave_1 removed [ 926.429777][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.444731][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.484535][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.492478][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.532908][ T3746] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 926.585393][ T8661] : left promiscuous mode [ 926.711085][ T8661] tipc: Left network mode [ 926.927606][T12303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.937431][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.132247][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.390887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.980161][ T8661] hsr_slave_0: left promiscuous mode [ 927.999084][ T8661] 0·: left promiscuous mode [ 928.032661][ T8661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 928.057744][ T8661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.069090][ T8661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.094587][ T8661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 928.108494][ T8661] batman_adv: batadv0: Interface deactivated: dummy0 [ 928.116263][ T8661] batman_adv: batadv0: Removing interface: dummy0 [ 928.137550][ T8661] dummy0: left allmulticast mode [ 928.143463][ T8661] veth0_macvtap: left promiscuous mode [ 928.676639][ T8661] team0 (unregistering): Port device team_slave_1 removed [ 928.697643][ T8661] team0 (unregistering): Port device team_slave_0 removed [ 928.905505][T20327] lec:lec_start_xmit: lec0:No lecd attached [ 929.654373][ T8661] IPVS: stop unused estimator thread 0... [ 929.790857][ C1] net_ratelimit: 42 callbacks suppressed [ 929.790880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.951548][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.033196][T27577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.191095][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.830669][ C0] sched: DL replenish lagged too much [ 930.831834][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.230826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.038922][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 932.672217][ T8661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.684030][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.701062][ T806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog