last executing test programs: 2m7.527524337s ago: executing program 3 (id=2519): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x19, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x627, 0x0, 0x0, 0x0, 0x800000}, {}, {}, [@exit, @generic={0xd9, 0x2, 0x0, 0x3, 0x2}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3ff}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) readv(r4, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6tnl0\x00', r3, 0x4, 0x2, 0x25, 0x4, 0x28, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x7800, 0x3, 0xfffffe01}}) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x200000, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3], [0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x20000000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)=ANY=[@ANYBLOB="f8010000", @ANYRES16=0x0, @ANYBLOB="1e012dbd7000fbdbdf25130000004400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020076657468315f746f5f627269646765001400020067656e65766530000000000000000000080003000300000090000180080003000300000014000200776c616e310000000000000000000000080003000000000008000300030000001400020076657468315f6d6163767461700000001400020070696d726567300000000000000000001400020074756e6c30000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468305f746f5f6272696467650008000100", @ANYRES32=r3, @ANYBLOB="4400018008000100", @ANYRES32=r3, @ANYBLOB="140002006272696467655f736c6176655f31000008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r3, @ANYBLOB="4c00018014000200726f7365300000000000000000000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="0800013e", @ANYRES32=r7, @ANYBLOB="14000200766c616e31000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000300030000000c00018008000100", @ANYRES32=r3, @ANYBLOB="5c000180140002006d6163766c616e31000000000000000014000200776c616e3100000000000000000000000800030003000000080003000100000008000100", @ANYRES32=r3, @ANYBLOB="080003000000000008000300010000000800030000000000"], 0x1f8}, 0x1, 0x0, 0x0, 0x400c884}, 0x20004801) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'ip6_vti0\x00', 0x4900}) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0xb) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r12, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000e40)=ANY=[@ANYBLOB="d2a565b6263c12697069b811bc89f163e734372251dc2334fcb224d05e574130d25080a073b6c54dc77b962882bbebebf04bb87493dec1900c26a8b06dad40c565b6312c62072b33a740df", @ANYRES16=r13, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0xa0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013f00000000009500170000000000"], &(0x7f00000009c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m6.142497687s ago: executing program 1 (id=2523): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000005c0)="80", 0x1, 0x30040084, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) recvmsg(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40000000) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000046f10000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3100000000280004800800024000000000080001400000fc041400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000151400000011000100"/229], 0xe8}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000120000001c0012800b0001006970b667726500000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x40040) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) recvfrom(r3, &(0x7f0000000400)=""/151, 0x97, 0x1, &(0x7f00000004c0)=@caif=@rfm={0x25, 0x101, "20f400559dc8a384424009b8171bd4c1"}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x1, 0x40, 0x6, 0x9, {{0x36, 0x4, 0x2, 0x9, 0xd8, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x97, 0x3, [{0x5, 0x7, "28cc883d68"}, {0x2, 0x11, "df7801471abbb01ae1320b6cda3a5c"}, {0x0, 0x12, "c84a24f3741fb3249d2ade9feeadb7bf"}, {0x5, 0x9, "2e7604ea50fd29"}, {0x2, 0x12, "005bfcd324eff6c07309d99c4be451a9"}, {0x7, 0xf, "34ed3eb5b849aac9d93338caf0"}, {0x1, 0x10, "62a45c0a2b51e12767dceeed5425"}, {0x2, 0x11, "7e8daf90715c9db90a90cc74bb9d20"}, {0x6, 0xf, "28babdfe000000000000000000"}, {0x60e443be50b23a5e, 0xd, "fd7cd899557208a06ae67e"}]}, @ssrr={0x89, 0x1b, 0x75, [@broadcast, @remote, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010100]}, @timestamp={0x44, 0xc, 0xc5, 0x0, 0xf, [0x8, 0xfcf7]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@delqdisc={0x48, 0x25, 0x8, 0x78bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xc}, {0xffff, 0xffff}, {0xa, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x66, '\x00', 0x480000, 0x10, 0x1, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44001}, 0x240410c1) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f00000000c0)) 2m6.026808235s ago: executing program 2 (id=2524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async) shutdown(r2, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) (async) sendto$inet(r2, &(0x7f0000000280)='\x00\x00', 0x2, 0x200408d0, 0x0, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x5, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_query]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x77, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m5.374819713s ago: executing program 2 (id=2528): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1835eb265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21900c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b710000004d0012803b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71a338c0c6a42d17"], 0xb4}}, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x7d, 0x0, &(0x7f0000000300)=0x9b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x90) 2m4.501325301s ago: executing program 2 (id=2530): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @rand_addr=0x64010102}, {0x2, 0x4e24, @local}, 0x392, 0x0, 0x0, 0x0, 0x886, &(0x7f0000000080)='veth0_to_bond\x00', 0x0, 0x600, 0x3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @rand_addr=0x64010102}, {0x2, 0x4e24, @local}, 0x392, 0x0, 0x0, 0x0, 0x886, &(0x7f0000000080)='veth0_to_bond\x00', 0x0, 0x600, 0x3}) (async) 2m4.435344557s ago: executing program 0 (id=2532): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x7, 0xffffffff}, 0x100, './file0\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000440)={{r0, &(0x7f0000000140)=',\x87/@/-/:^-#$\xb3,\\\\\x00', 0x8100, &(0x7f0000000180)={@align=0xff, {0x4, 0x8, 0x6a1b, 0x4}}, 0x4, &(0x7f00000001c0), &(0x7f0000000200)}, 0x2, &(0x7f0000000400)=[{0x3, 0x2, &(0x7f0000000240)='[:+:\x00', &(0x7f0000000280)="2cdd7eb8e6d6b70830e5c1b2f646bfb3f6896024cc37d4bf1a27a84572a956127e3481ec052fe1ebff39664d3d754329be3861651433d0174b0ad58cc3e2d0c644c1e1a29a9666ac587d0ea98629df7197265c1724f2a14007225bc0628b15b1b19a4d6a21d50663e7aafba83ce62d2f7626a58dfdcf4fd703c72d3cc6a866fbfa835a9028fdaaac01d868e9c35eb2cf24403c0f99786371a0913e328699c21069d8ec8557d1d9b768686df53486f1e952082db990b8692afde9dd854f9511486bf68337853d45b0af9bbea52b291f2f4d9586832f0085d5c1cb5917d036d00c12ee", 0xe2, 0x28}, {0x2, 0x1, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="d73f074e38e7eba8", 0x8}]}) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000004c0)={{0xa, 0x4e23, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, {0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x0, {[0x7, 0x800, 0x1, 0x7ff, 0x0, 0x6, 0xf0, 0x9]}}, 0x5c) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000540)={{0x0, 0x81, 0x5, 0x6, 0xf009, 0x2, 0xffffffff7fffffff, 0x4, 0x3, 0xfffffff7, 0x1, 0x81, 0x1ff, 0x1000, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001540)={{r2, 0x0, 0x5, 0x7ff, 0x2, 0x4959, 0x0, 0x4, 0x1, 0x484, 0x8, 0xbd5, 0x7, 0xc4, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$FITHAW(r0, 0xc0045878) recvmmsg(r1, &(0x7f00000035c0)=[{{&(0x7f0000001600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001680)}], 0x1}, 0x2}, {{&(0x7f0000001700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001780)=""/205, 0xcd}, {&(0x7f0000001880)=""/150, 0x96}], 0x2, &(0x7f0000001980)=""/101, 0x65}, 0x400}, {{&(0x7f0000001a00)=@ax25={{0x3, @null}, [@null, @rose, @netrom, @rose, @remote, @default, @netrom, @netrom]}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001a80)=""/131, 0x83}, {&(0x7f0000001b40)=""/195, 0xc3}, {&(0x7f0000001c40)=""/62, 0x3e}], 0x3, &(0x7f0000001cc0)=""/2, 0x2}, 0xfffffff9}, {{&(0x7f0000001d00)=@generic, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/91, 0x5b}, {&(0x7f0000001e00)=""/140, 0x8c}, {&(0x7f0000001ec0)=""/41, 0x29}], 0x3, &(0x7f0000001f40)=""/249, 0xf9}, 0x7}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002040)=""/191, 0xbf}], 0x1}, 0x1}, {{&(0x7f0000002140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000002500)=[{&(0x7f00000021c0)=""/194, 0xc2}, {&(0x7f00000022c0)=""/31, 0x1f}, {&(0x7f0000002300)=""/168, 0xa8}, {&(0x7f00000023c0)=""/123, 0x7b}, {&(0x7f0000002440)=""/185, 0xb9}], 0x5, &(0x7f0000002580)=""/40, 0x28}, 0x8}, {{&(0x7f00000025c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002640)=""/206, 0xce}, {&(0x7f0000002740)=""/191, 0xbf}, {&(0x7f0000002800)=""/8, 0x8}, {&(0x7f0000002840)=""/91, 0x5b}, {&(0x7f00000028c0)=""/24, 0x18}, {&(0x7f0000002900)=""/239, 0xef}, {&(0x7f0000002a00)=""/143, 0x8f}, {&(0x7f0000002ac0)=""/137, 0x89}, {&(0x7f0000002b80)=""/252, 0xfc}, {&(0x7f0000002c80)=""/59, 0x3b}], 0xa, &(0x7f0000002d80)=""/11, 0xb}, 0x2e671575}, {{&(0x7f0000002dc0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002e40)=""/178, 0xb2}, {&(0x7f0000002f00)=""/243, 0xf3}, {&(0x7f0000003000)=""/136, 0x88}, {&(0x7f00000030c0)=""/61, 0x3d}, {&(0x7f0000003100)=""/112, 0x70}, {&(0x7f0000003180)=""/107, 0x6b}, {&(0x7f0000003200)=""/255, 0xff}], 0x7}, 0x7}, {{&(0x7f0000003380)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003400)=""/213, 0xd5}], 0x1, &(0x7f0000003540)=""/69, 0x45}, 0x6}], 0x9, 0x40000121, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000003800)) connect$rds(0xffffffffffffffff, &(0x7f0000003840)={0x2, 0x4e21, @local}, 0x10) epoll_pwait(0xffffffffffffffff, &(0x7f0000003880)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffb, &(0x7f0000003900)={[0x12f]}, 0x8) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000003940)={0x70c, 0xfff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f000000e280)={0xffffff01, 0x401, 0x5, 0x233, 0x400}, 0x14) getpeername$inet(r0, &(0x7f000000e2c0)={0x2, 0x0, @private}, &(0x7f000000e300)=0x10) r6 = openat$nci(0xffffffffffffff9c, &(0x7f000000e340), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f000000e380)={{0xff, @loopback, 0x4e22, 0x4, 'nq\x00', 0x8, 0x0, 0x69}, {@broadcast, 0x4e21, 0x0, 0xd85, 0x1, 0x9}}, 0x44) r7 = bpf$MAP_CREATE(0x0, &(0x7f000000e400)=@bloom_filter={0x1e, 0x1ff, 0x5, 0xfffffffd, 0x6940, r1, 0x81, '\x00', 0x0, r1, 0x2, 0x3, 0x3, 0x6}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f000000e680)={r3, &(0x7f000000e580)='\x00', 0x10002, &(0x7f000000e5c0)={@align=0x4, {0x0, 0x4, 0x7, 0x7fffffffffffffff}}, 0xc60c, &(0x7f000000e600), &(0x7f000000e640)=0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000e800)={0x11, 0xa, &(0x7f000000e480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb059, 0x0, 0x0, 0x0, 0xfffeffff}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @alu={0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0xfffffffffffffff0}, @map_val={0x18, 0x9, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xb}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}]}, &(0x7f000000e500)='GPL\x00', 0x1000, 0x10, &(0x7f000000e540)=""/16, 0x41100, 0x20, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f000000e6c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f000000e700)=[r1, r1], &(0x7f000000e740)=[{0x3, 0x1, 0x10, 0xc}, {0x4, 0x4, 0x2, 0x8}, {0x5, 0x1, 0x5, 0x3}, {0x2, 0x1, 0xd, 0x1}, {0x5, 0x4, 0xb, 0x9}, {0x1, 0x4, 0x9, 0x8}, {0x5, 0x3, 0x10}, {0x3, 0x8f, 0x3, 0x2}, {0x0, 0x3, 0xd, 0x2}], 0x10, 0x9}, 0x94) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f000000e8c0)={{0xa, 0x4e22, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x92a2}, {0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x0, {[0x8, 0x1, 0x5, 0x538, 0x52, 0x4, 0x20000000]}}, 0x5c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f000000fa40)={{r1, &(0x7f000000e940)='[:+:\x00', 0x400082, &(0x7f000000e980)={@align=0x8000000000000000, {0xa6, 0x9, 0xda48, 0x1}}, 0xffff, &(0x7f000000e9c0)={@_ha_fsid}, &(0x7f000000ea00)=0x8001}, {[0x3, 0x5, 0x47, 0x1ff]}, 0xd, 0x1000, &(0x7f000000ea40)=""/4096}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f000000fb00), r4) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r9, &(0x7f000000fbc0)={&(0x7f000000fac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000fb80)={&(0x7f000000fb40)={0x3c, r10, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x2008a030) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$x25(0x9, 0x5, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f000000fd00)={&(0x7f000000fc00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f000000fcc0)={&(0x7f000000fc80)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x7b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x40) 2m4.423680906s ago: executing program 1 (id=2533): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, 0x0, 0x0) socket(0xa, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8144, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x2, r5, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) clock_gettime(0x0, 0x0) select(0x0, 0x0, &(0x7f0000000180)={0x0, 0x401, 0x5, 0x2, 0x7, 0xc3fe, 0x7, 0x7}, 0x0, &(0x7f0000000280)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 2m3.922092783s ago: executing program 2 (id=2534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0xfffffffc, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1b, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x5, {{0xfffffff8}}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2m3.465241472s ago: executing program 0 (id=2536): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x401, 0xa733, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 2m3.379072896s ago: executing program 3 (id=2537): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001880)={@map, 0xffffffffffffffff, 0x16}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0) 2m3.166466295s ago: executing program 2 (id=2538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x14, 0x18, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) socket(0x23, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 2m2.918854695s ago: executing program 1 (id=2539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={&(0x7f0000000000), 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x16c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x140, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_MAX_P={0x8, 0x3, 0x100}, @TCA_RED_FLAGS={0xc, 0x4, {0x1, 0x1}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x2}]}}]}, 0x16c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={&(0x7f0000000000), 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x37, 0x1, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r7, &(0x7f0000006dc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10002, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110a90000000000720ac0ff0100000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r11, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r10], 0x38}}, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000440)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "fb3599", 0x68, 0x3, 0x0, @loopback, @mcast1, {[@hopopts={0x33, 0xb, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0x2, [0x665c, 0x6c, 0x1, 0xd9, 0x6b1daa84, 0xfffffffffffffffe]}}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @mcast1}, @pad1]}, @dstopts={0x32}]}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180104b8298f3c02000005000082015678000000f0ffffff00dfaa461dbbae02f3009500"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 2m2.807320266s ago: executing program 4 (id=2540): r0 = socket(0x10, 0x3, 0x0) getpeername$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000340)=@ethtool_coalesce={0xe, 0xfffff800, 0x7, 0x8000, 0x401, 0x8, 0x0, 0x777, 0x9, 0xb, 0x4, 0x8462, 0x3, 0x3, 0x6522f4db, 0x3, 0x400, 0xd, 0xfff, 0x3ff, 0x9, 0x5, 0x7}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000700000012bbd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="0c0001800500060000000000a6e58d9c14a7cfcfe6a300dd271f97056ac31d495415b451f9127638a76b0bf2e2896a5a1cab5ed02f46b49ad9095a6b1492d9269de3"], 0x24}}, 0x0) 2m2.6660491s ago: executing program 3 (id=2541): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000c806}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000180)={0x6, 'tunl0\x00', {0x1}, 0x1}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/net\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8807}, 0x4040080) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000340)={r0, 0x7, 0x3, "eff0b47722054565686f20469200220d39f6487d3d3f7b57c9fa37b30afab628e65fa888a1729dcdb02861a4e4a516fc619fb52471af4801e9e7e39299d348c09b42d69b1dec5ad96a077c33a9d2e4e0fc252c9f4e1db01de1f39fb894cf32f5ad3c46148d696adab041351e6d73ff3daee14638cfd7a050953d0c26899a2648276e90e03ffd167bac263ec199307eb9ade006fa24a189a3387a1476f0d7232f1dfa50e489cebe726dfa09b3a1aa917655"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0818da26f38a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="82e4e31bfbac"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="51c9ca3afba3"}, @NL80211_ATTR_MAC={0xa}]}, 0x88}}, 0x11) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r5 = socket$inet6(0xa, 0x3a1a32b00bddeb4d, 0x10001) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="16e629f170231eea6f5f5c63492d360b1e2562c0848d7e4727342fa769c72d827a49d61e58edfe88fa374b688b94bb1a0d38fec86a36814aa3bc4ceca3c9925cf7ad4f60581a4e37105a0e91d73acc372426", 0x52}, {&(0x7f0000000740)="02bdd6cb9c844f026362d98cd23ebd87c6903e1790eac92c5a2a70c6c669714e33c4a8740a926f87c56b99f673", 0x2d}, {&(0x7f0000000780)="df80d3c4a7bd92581361841375b7b3d83be2e53315fa094fb65680ede7ad1ea33b47d532ae7db1880ec92b59edde2ed0a805f7081645bae96d329b13e7df9addc8115e5025c7e0f77df6f3f37955d798b7e3c6a84806c80cb82f1e93e05ff16b0776d2139f997f075206a1ca88e6e2703f7f5150a1d75a34ce862c4cb6af15aee302ec2092087162a5d7dfe5afb972b20c66f5868c4cb73cb435b23ec8f747a180b3abe77551dfc54bbacd3b0e190913052a449d87a1b6423bd5f1387aabfe061817c7837393ed3d38079f82", 0xcc}, {&(0x7f0000000880)="a98088de175058240d83600af8be56e494dae3c3d1f03d0df33bdd764f7daa62eda4c0e023a05ea83c9a5433246870fbe7a40f0ccebcb106cdce6b95afa8dcfb5625c5b49a91be61e399cd51db4daeef8d1ababd5fcffc3f5de781da40196de26e8725a83f4468a51e674b868ec9c2d5c71fbb8f4d", 0x75}, {&(0x7f0000000900)="37e1101b4e3a66d86e757ff96515438c03d3da0ac6fb922ffd8b4276cc6b4a70", 0x20}, {&(0x7f0000000940)="e6fe0aea6c923f8465d560e4e302ec36219d77f4a7c1d9591d56b5f3a0246fc929eff1d5338eb99019672f089bad40c31b828f968165c43c8bf608339c773a0283120e25c5c62c171404eb25daeb2f6339b967567228bccd2ba85aedbe140de3a7fa372c2d623d143720acd34fdd398b1d85ac71b899c76af73e74b4a252448e7f305b7e", 0x84}], 0x6, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x78}}], 0x1, 0xc020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000001c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x348}, 0xc, &(0x7f0000001c00)={&(0x7f0000000b80)={0x1060, 0x1, 0x5, 0x1182, 0x0, 0x0, {0x3, 0x0, 0x2}, [{{0x254, 0x1, {{0x1}, 0x8, 0x81, 0x8001, 0xff, 0x8, 'syz1\x00', "ab288da7da14b71453116df2cc188f0f7ca6c44fc6d162349b6fdc0e570add11", "fca018e03e2e100018a333b695d8672e39488be5d3fdd14054a659966471ff90", [{0x1000, 0x9, {0x1, 0x20200000}}, {0xd, 0x1, {0x1, 0x8c8}}, {0x40, 0x4d, {0x2, 0x1}}, {0x4, 0x0, {0x3, 0x10}}, {0x8000, 0x100, {0x1, 0x1ff}}, {0x8000, 0xa, {0x3, 0x6}}, {0x4a5, 0xc, {0x2, 0x1ff}}, {0x6, 0x4, {0x0, 0xf0}}, {0x3, 0xb5, {0x0, 0xc}}, {0x8, 0x0, {0x1, 0x4}}, {0xf, 0x2, {0x3, 0x971}}, {0x8, 0xf, {0x0, 0x5}}, {0x8000, 0x0, {0x3, 0x2}}, {0x1, 0x400, {0x0, 0x7bea89cf}}, {0x4, 0xff, {0x3, 0xfffffffd}}, {0x3, 0x8, {0x0, 0xffffff96}}, {0xfff, 0x70, {0x1, 0x8}}, {0x6, 0xf, {0x1, 0x9}}, {0x8, 0x0, {0x3, 0x2}}, {0x3, 0x3, {0x3, 0x3}}, {0x3, 0x7, {0x2, 0x3}}, {0x2, 0x3, {0x3, 0xffffff29}}, {0x8, 0x1, {0x1, 0x8}}, {0x5, 0x58c, {0x3, 0x1}}, {0x4, 0x3, {0x2, 0x7}}, {0x8, 0x8, {0x1, 0x1}}, {0x3, 0xac4, {0x0, 0x4}}, {0xc, 0x101, {0x2, 0x6}}, {0x6, 0x5, {0x14576dad26c737f7, 0x5}}, {0x8a, 0xc2a, {0x0, 0x2}}, {0x1, 0xb4f}, {0x0, 0x5, {0x1, 0x9bc}}, {0x3, 0x9, {0x0, 0x3a6}}, {0xff80, 0x8, {0x3, 0x5}}, {0x3, 0x3, {0x1, 0x5}}, {0x3, 0x3e53}, {0x6, 0x5, {0x1, 0x2}}, {0xd44, 0xa, {0x3, 0x2}}, {0xfff, 0x439}, {0x6, 0x4, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x8000}, 0x5, 0x2, 0xffff, 0x7fff, 0xb, 'syz1\x00', "f54b4fa0a90f55152b773f7a88a5d01da5218d7acc4b768bcc377c1e51e655d5", "586ece0949212b86e0ceecb6d3cb2a3f8fb42408c4dfc53279b5e3599bbd5b4b", [{0x6, 0x1e8, {0x0, 0x7}}, {0x1, 0x7, {0x0, 0x4}}, {0x3, 0x6, {0x1, 0x5}}, {0x5, 0xfff7, {0x0, 0x4}}, {0xd252, 0x81, {0x3, 0x6}}, {0x7ff, 0x9, {0x2, 0x9}}, {0x2, 0xecf, {0x3, 0x44755a2}}, {0x5, 0x5c, {0x0, 0x1}}, {0xa6, 0x2, {0x2, 0x200}}, {0x0, 0x7, {0x3, 0x9}}, {0x4, 0x9f8f, {0x3, 0x7ff}}, {0x3, 0x2, {0x2, 0x40}}, {0x1ff, 0xfffa, {0x1, 0x9}}, {0x6, 0x10, {0xb9b91c8d04e6367c, 0x6}}, {0x0, 0x3, {0x0, 0x8c}}, {0xbef0, 0x3, {0x3, 0x3}}, {0x6, 0x2, {0x1, 0x20}}, {0x2, 0x1, {0x0, 0x9}}, {0x200, 0x0, {0x0, 0xff}}, {0x9, 0x20, {0x3}}, {0x7, 0x3, {0x2, 0x200}}, {0x3, 0x4, {0x1, 0xc0}}, {0x401, 0xe9, {0x3, 0x1}}, {0x55be, 0x7, {0x2, 0x2}}, {0xd, 0x8001, {0x3, 0x906f}}, {0x7, 0x43, {0x0, 0x2}}, {0x56, 0x2, {0x1, 0x4}}, {0x0, 0x2, {0x1, 0x7}}, {0x1, 0x8ce, {0x3, 0x1000}}, {0x40, 0x200, {0x0, 0x7fff}}, {0xff7f, 0x3, {0x1, 0x9}}, {0x0, 0xfff6, {0x3, 0x8}}, {0x2, 0x2, {0x0, 0x7ff}}, {0xd, 0xfffa, {0x1, 0x361}}, {0x6, 0x2, {0x3, 0x7}}, {0x73a, 0x9, {0x0, 0x6}}, {0x9, 0xc}, {0x101, 0x8001, {0x0, 0x6f33}}, {0x0, 0x3800, {0x2, 0x7}}, {0x5, 0xd, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0xf}, 0x40, 0x4c, 0x73b, 0xfff7, 0x15, 'syz1\x00', "937d2376b0d422510df8e30ee426fad6afa0cb353b97407bf5c634324b129a90", "861f0e3f1d8a43def011257aef4f22f70d9a4b499c643acae192e5ef67adbcad", [{0x9, 0x85, {0xa246e1b244e84310, 0xb}}, {0x6, 0x3, {0x0, 0x3}}, {0xf, 0x81, {0x2, 0x2}}, {0x0, 0x3, {0x1, 0x7}}, {0x7, 0x2, {0x0, 0x9}}, {0x5, 0x7, {0x2, 0x8}}, {0x7, 0x7, {0x3, 0x80}}, {0x1000, 0x6, {0x1, 0x9}}, {0x9, 0x6, {0x1, 0x5}}, {0x0, 0xfffc, {0x0, 0x8}}, {0x6, 0x6, {0x1, 0xdf}}, {0xa, 0xf32f, {0x3, 0x2}}, {0xf2, 0x5, {0x1, 0x8}}, {0x6, 0x7, {0x0, 0xffff}}, {0xc, 0x50d4, {0x3, 0xd3}}, {0x5, 0x2, {0x2, 0x40}}, {0x8, 0x0, {0x3, 0x7}}, {0xf, 0xf2a, {0x2, 0xfffffe00}}, {0x0, 0x0, {0x1, 0x574}}, {0x3, 0x7, {0x2, 0xbc7}}, {0x3, 0x6, {0x1, 0xfffffff2}}, {0x8cb3, 0x6, {0x0, 0x80000000}}, {0x7929, 0xf801, {0x2, 0x7}}, {0xfffe, 0x1, {0x1, 0x30}}, {0x5, 0x8, {0x0, 0x4}}, {0x78, 0x71, {0x2, 0x3}}, {0x7ff, 0x2, {0x2, 0x5}}, {0x0, 0x7, {0x1, 0x7}}, {0x8, 0x0, {0x1, 0x6}}, {0xd2, 0x3, {0x2, 0x7fffffff}}, {0x800, 0xf8, {0x1, 0x3}}, {0x2, 0x6, {0x1, 0x9}}, {0x40, 0x6, {0x1, 0x8001}}, {0x6, 0x7, {0x2}}, {0x5, 0x9, {0x0, 0x7d}}, {0x5, 0x5, {0x0, 0x9}}, {0x400, 0x9, {0x0, 0xa}}, {0x35e7, 0xa, {0x1, 0x8}}, {0x3ff, 0xfff1, {0x2, 0x2}}, {0x7, 0x0, {0x0, 0x8744}}]}}}, {{0x254, 0x1, {{0x2}, 0x6, 0x80, 0xfff3, 0x9, 0x1c, 'syz1\x00', "14b8faea0faf92f5dc9e1be620b7f0e6dcc66998ae3d5ae3fb5b467940a39f5a", "06b73239362896b2498fa76ced5b22a78bb3d2565702933d10ce6bd6bef4c693", [{0x3, 0x8000, {0x1, 0x9}}, {0xfff, 0x10, {0x3, 0x84}}, {0x100, 0x1, {0x2, 0x6}}, {0xfff3, 0xe4b3, {0x3}}, {0x8b, 0x1, {0x0, 0x1}}, {0x6, 0x3, {0x2}}, {0x8000, 0x6, {0x2, 0x2}}, {0x2, 0xfff9, {0x0, 0xa}}, {0x0, 0x7, {0x3, 0x3}}, {0xf, 0x6, {0x3, 0x6ca}}, {0x5d5, 0x7, {0x1, 0x7}}, {0x100, 0x800, {0x1, 0x2}}, {0x2, 0x6, {0x3, 0x2}}, {0x3, 0x1cc5, {0x0, 0xc}}, {0x9, 0x8, {0x2}}, {0x1, 0x2, {0x3, 0x6}}, {0x84, 0xb, {0x1, 0x8000}}, {0x965, 0x7, {0x0, 0x3}}, {0x3, 0x1, {0x1, 0x5}}, {0x42, 0x5, {0x0, 0x8}}, {0xf, 0x4, {0x0, 0xb}}, {0x5, 0x0, {0x1, 0x7}}, {0x4, 0x81, {0x3, 0xd6c}}, {0x3, 0xae8, {0x2, 0x3}}, {0x2, 0xfc00, {0x2, 0x8001}}, {0x2, 0x3c0b, {0x3, 0xc0}}, {0x0, 0x3b2, {0x1, 0x1}}, {0x5012, 0x7f, {0x0, 0x1800}}, {0x3, 0x5, {0x2, 0x3ff}}, {0x100, 0x7d, {0x3}}, {0xfff, 0x8, {0x3, 0x5c}}, {0x5, 0x0, {0x1}}, {0x2, 0x3, {0x2, 0x3e}}, {0x9, 0x2, {0x0, 0x81}}, {0x2, 0xa1f, {0x3, 0x8}}, {0xf5a8, 0x1, {0x0, 0xc6}}, {0xfff7, 0x5, {0x3, 0xe9e}}, {0x7fff, 0x9, {0x0, 0xe}}, {0x1, 0x3ff, {0x2, 0x1}}, {0xd, 0x0, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x8, 0x8, 0x401, 0x795a, 0x21, 'syz1\x00', "e7f567560c837cc6cd04336423e76ae7d4110ea25c0862d8c97e88faaad41687", "7faa21d1bc412c7c337108b3f8c1a64bc629fdc4406913c4a070bb4658a05a52", [{0xe, 0x8, {0x2, 0x29b7ed3}}, {0x7, 0x4, {0x2, 0x2b6}}, {0x6, 0x5, {0x1, 0x3}}, {0xfffb, 0x1, {0x3}}, {0x2, 0x3bc6, {0x3, 0x1}}, {0xb95c, 0x1ff, {0x3, 0xfffff9a1}}, {0x401, 0x2, {0x1}}, {0x4, 0x7, {0x3, 0x4}}, {0xffff, 0x7ff, {0x1, 0x2}}, {0x7, 0x2, {0x1, 0x1}}, {0x0, 0x6, {0x3}}, {0x1c4, 0x1ff, {0x3, 0x6}}, {0xfe, 0x8, {0x3, 0x3}}, {0x3, 0x9, {0x1, 0x9}}, {0x3ff, 0x7ff, {0x1, 0x5}}, {0x0, 0x92, {0x2, 0x9}}, {0xff70, 0x6, {0x0, 0x4}}, {0x5, 0xad, {0x2, 0x1}}, {0x8cea, 0xa7, {0x0, 0x8}}, {0x9, 0xe4a4, {0x0, 0x2}}, {0x3ff, 0x4, {0x0, 0x24a6}}, {0x6, 0x9ec, {0x0, 0x7b}}, {0x5, 0x40, {0x0, 0xb}}, {0x2, 0x6, {0x3, 0x5}}, {0xfa, 0x1, {0x0, 0x8}}, {0x7, 0x5, {0x2, 0x106}}, {0x5, 0x27c1, {0x0, 0x713}}, {0x2, 0xc204, {0x2, 0x3}}, {0x3, 0x4, {0x7, 0x614a}}, {0x400, 0x1, {0x3, 0x5}}, {0x0, 0x2d0, {0x2, 0x3ff}}, {0x8, 0x100, {0x0, 0x1}}, {0x0, 0x6, {0x2, 0x2}}, {0xd, 0x9, {0x3, 0x6}}, {0xf34, 0x0, {0x2, 0x3}}, {0x8, 0x200, {0x0, 0x2}}, {0x0, 0x4, {0x2, 0xf0}}, {0xa, 0x5, {0x1, 0xd77}}, {0x7, 0x4, {0x2, 0x4}}, {0xd34d, 0x3, {0x1, 0x739b}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0xf, 0x9, 0x40, 0xffff, 0x22, 'syz1\x00', "362c4baa69e2b0a8a4f14e170b2c13afeb8ef972b1f23d28cb3b26bbaaf2e198", "177a75f1837c4ae80ce829393147f58179ddbea3c73b49332bcf6c50b6a86b66", [{0x101, 0x1000, {0x3, 0x80000}}, {0x6, 0x0, {0x2}}, {0x8001, 0x8, {0x1, 0xa}}, {0x6, 0x80, {0x1, 0x6}}, {0x1, 0x1, {0x3, 0x3}}, {0x7, 0x8, {0x2, 0xaf8}}, {0x9, 0x8877, {0x0, 0x80}}, {0x9, 0x6, {0x1, 0x8c}}, {0x3, 0x4, {0x1, 0xa78c}}, {0x400, 0x6, {0x2, 0x6}}, {0x0, 0x5, {0x0, 0x2}}, {0x0, 0x99b9, {0x2}}, {0x9, 0x0, {0x2, 0xfffffffc}}, {0x6, 0x8, {0x3, 0x4}}, {0x200, 0xf800, {0x3, 0x1}}, {0x777f, 0x7f, {0x1, 0x7}}, {0x7, 0xb, {0x0, 0x1}}, {0x1, 0x4, {0x3, 0x4}}, {0x1, 0x3, {0x1, 0x6}}, {0x3, 0xac33, {0x1, 0x8}}, {0xffc0, 0x1, {0x3, 0x10000}}, {0x29d8, 0x7, {0x2, 0x1}}, {0x9, 0x8, {0x2, 0x80000000}}, {0x2, 0x1, {0x3, 0x229}}, {0x7, 0x4, {0x3, 0x3}}, {0x3, 0x7, {0x0, 0x8}}, {0xb, 0x7, {0x2, 0xff}}, {0x1, 0x5, {0x0, 0x3}}, {0x1, 0xb, {0x3, 0x87}}, {0x8, 0x7fff, {0x3}}, {0x9, 0x5d5, {0x0, 0x9}}, {0x101, 0x9, {0x0, 0x3ab}}, {0xfe, 0x7, {0x3, 0x7}}, {0x8, 0x2, {0x3, 0x2}}, {0xf2da}, {0x2, 0x40, {0x2, 0x1}}, {0x0, 0x2f, {0x0, 0xd2cf}}, {0x7, 0x9, {0x1, 0x3}}, {0x101, 0x2, {0x3, 0x4}}, {0xa86, 0x1ee, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x0, 0xe, 0x1ff, 0x4, 0x22, 'syz1\x00', "2a348bf08897d546a76936ec09a4e1329b598657413ef7603be5dd9eb3b7bb68", "b3b6486c2dcd273517a2de8ab3abbfd2d8368ebcc9120a3d339bf6cdc0afabf2", [{0x400, 0xffff, {0x1, 0x2}}, {0xde47, 0x7, {0x3, 0x8}}, {0xb, 0x9, {0x0, 0x69}}, {0xfff, 0x3, {0x0, 0xfcfbcd57}}, {0xd, 0x5, {0x0, 0x696}}, {0x12, 0x5, {0x0, 0x1}}, {0x0, 0x9, {0x0, 0xffffffff}}, {0x4, 0x3, {0x1, 0x2}}, {0x6, 0x1, {0x1, 0xeb}}, {0x9, 0x8000, {0x1, 0x6}}, {0x7, 0xf000, {0x0, 0x3ff}}, {0xf0b, 0x8, {0x2, 0x2}}, {0x1000, 0xa, {0x2, 0x7}}, {0x9, 0x8, {0x2, 0x4}}, {0x8, 0xffff, {0x2, 0x1}}, {0xe00, 0x66, {0x3, 0x2}}, {0x2, 0x1, {0x3, 0xec1}}, {0x56, 0x3}, {0x9, 0x92, {0x2, 0x6}}, {0x3, 0x2, {0x1, 0xa3a}}, {0xced, 0x8, {0x3, 0xb9}}, {0x2, 0x5, {0x2, 0x6}}, {0xa9, 0x3, {0x1, 0x6}}, {0x5, 0x6, {0x0, 0x110c}}, {0x100, 0x2, {0x1, 0xaf}}, {0x67dc, 0x5, {0x2, 0xc12}}, {0xc785, 0x5, {0x0, 0x4}}, {0x3, 0x39, {0x3, 0x4000000}}, {0x8, 0x2, {0x0, 0x1c}}, {0x2, 0x7, {0x2, 0xff}}, {0xf, 0x6, {0x2, 0x638}}, {0xfff9, 0xfa2f, {0x3, 0x4}}, {0x1, 0x5, {0x0, 0x6}}, {0xfff, 0x3ff, {0x3, 0x1}}, {0x8000, 0x3ff, {0x0, 0x4}}, {0x4, 0x9, {0x2, 0x101}}, {0x1, 0x4, {0x1, 0x7}}, {0x2, 0x7, {0x85a52b336627a888, 0x5}}, {0x1, 0x6, {0x2, 0x9}}, {0x5, 0x3, {0x0, 0xb}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x4000041}, 0x84) sendmsg$nl_route(r5, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)=@ipv4_getnexthop={0x4c, 0x6a, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_MASTER={0x8}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001f00)={{r3, &(0x7f0000001dc0)='\x00', 0x10080, &(0x7f0000001e00)={@_ha_fsid={[0x80, 0x6]}, {0x7, 0x1, 0x5, 0xfffffffffffff801}}, 0x0, &(0x7f0000001e40)={@_ha_fsid}, &(0x7f0000001e80)=0x5}, {[0x1ff, 0x4, 0x401, 0xc]}, 0xc3, 0x0, &(0x7f0000001ec0)}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x3c, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r7) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x5c, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x265b}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x48000) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000002240), 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000002280)) r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000023c0), r7) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r11, 0x300, 0x70bd28, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002500), r7) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000002740)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002540)={0x198, r12, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "961822c76c43de57938c3e0de3511d36765e130348d86f"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "ff0575f40725ebcf0f82433e183c1635eff58d2e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "c124ce98cb29e531c95c31eac8438c85a79f8e200c0a361b246e4988667f63"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2aef764e}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x2180}, 0x10) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000027c0), &(0x7f0000002840)=0x60, 0x80800) 2m2.464903645s ago: executing program 2 (id=2542): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) (async) r1 = socket(0x17, 0x2, 0x0) (async, rerun: 64) close(0x4) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000191004020140002"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (async) accept4$x25(r1, 0x0, &(0x7f0000000000), 0x800) 2m2.256705121s ago: executing program 0 (id=2543): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x53, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140071c10300", @ANYRES16, @ANYRES8=r0], 0x14}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f90786401010000000000248065"], 0x0) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={0x0, 0x53, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140071c10300", @ANYRES16, @ANYRES8=r0], 0x14}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f90786401010000000000248065"], 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000003c0)) (async) 2m1.790777781s ago: executing program 3 (id=2544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000020000000900010073797a300000000040000000120a01040000000000000000020000000900010073797a30000000000900020073797a300000000008000300000000040c0004800800040000000002"], 0x88}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x90c3ff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4d73, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005cc0), 0x1, 0x40012000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000480)='GPL\x00'}, 0x90) 2m1.368937295s ago: executing program 4 (id=2545): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 2m1.33033636s ago: executing program 0 (id=2546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700000000000010000000000000007410000001400180000000069623a6e6963766630def4fd"], 0x30}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x7f, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x9a, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, '\x00', r3, r6, 0x0, 0x0, 0x2}, 0x50) 2m1.210770259s ago: executing program 3 (id=2547): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x6a, 0xfffff034}, {0x6, 0x0, 0x0, 0xffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x6bf1c2d5adba8c32}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x6, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xff, 0x3, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x40, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x8106, @void}, "134a318536459f4c076600ffeffff600000000111740a673d82a5c006694d13f"}}}}}}}, 0x52) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x6a, 0xfffff034}, {0x6, 0x0, 0x0, 0xffff}]}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x6bf1c2d5adba8c32}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x6, 0x4) (async) socket$kcm(0x2, 0xa, 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xff, 0x3, 0xff, 0x6}}, 0x1c}}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x40, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x8106, @void}, "134a318536459f4c076600ffeffff600000000111740a673d82a5c006694d13f"}}}}}}}, 0x52) (async) 2m1.022222031s ago: executing program 1 (id=2548): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x17, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x4}}]}]}, 0x58}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffe9c, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd28, 0x2, {0x60, 0x0, 0x0, r7, {0x9, 0x8}, {0x0, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r8, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009640)={0x2c, r9, 0x3, 0x70bd6d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8040) write$nci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="400111005db945ab7de005721f00000000020000"], 0x14) write$nci(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="410001001564ffef8733ab28897052ac97fb4642d09e3b1cdc1d183d33f8877eabae277e13d4cf539d9215a93cbe7a03f8860258dfe44f720907e71851efce29d0aa04f7607ce1f329cbb6f3a7a0ed63c0de9111079f8b8effdf49b27cce3d996489ba6251475b4893220a"], 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002dbd0900fcdbdf25210000002c002d80050001000000000005000100070004000100000008000200020000000c00060003000000020000000000000000000000000000002b65ccd2f524c84394221890297c5b5af9bcd4e59e812a8a1c04bc6d06183e6a067a2c2df7e63c1bdb23d25a52d0e77f15f632e62d8f34b4cd649748c57611d65325562e409da56bc461f7b3668ac2c85ebd90d0587db07e5985c0473fec1a27556402b71bce5412cbff0e3628137b91300059271cf4b1e5faee34a8bb5e4d982e3989aac5513569953d1fac61c912c9cfd2c3d13519cdad4f3f62a8c2a275670e173cdc749d816669212415d4"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in6={{0xa, 0x4e20, 0x7ff, @private2, 0x6}}, 0x5, 0x0, 0xffffffff}, &(0x7f0000001cc0)=0x9c) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000340200200600000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="40931766021138d870c500a0bdef77df315bde672eb7b1bd2ab01593d8aa26b2c1966c6ea8ebe7171a4d698e02c6ba10dd490700916a728a242cb0b8d310f387a34a83421c1c5d79a9d9d2645b23ea1457fdd5948a40f1e36595ecd6e62bb0c3c7c0326dd55ca9598019cc4d5b31090d5182b5"], 0x24}}, 0x0) write$nci(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="205abe4cee8902b1dab581426b0aa09e87437b4900e0d7565f7f7a4ea5fb0fcf3e2bb7cc564ddc"], 0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000240001040000000000000000000800000600030081000000"], 0x1c}}, 0x0) 2m0.938975851s ago: executing program 0 (id=2549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="260b00000000000008000100af64e22e36ab6ac9a0c547d08fdb7fbd73842d25053416e2803c4dcfef5b188db0f3675e15318b03077706d3d07b629fbba437bbbcb352007ce5bdbbd28d4399dd9e766901b4e92313375fa88e0264a77dc5d57e0e663a3a15ae15f388", @ANYRES32=r2], 0x1c}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000009c0)) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r7, 0x0, 0x2b) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) bind$netlink(r9, &(0x7f00000002c0), 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0) 2m0.69073888s ago: executing program 4 (id=2550): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001300)={r6, 0x6e2}, &(0x7f0000001340)=0x8) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100)={r6, 0x8b, "085ac44d0d30e205b9536ef9c2b3672cdacc32d86ee6bb1754a206d17ac735d7446bf6e0f57cc148bd7c89742386761ce93b9214915409dea6896128097c6620686565c4f85879cbaa95bdfa0e0648c54a25a9cfa1039e4aaa29e2696a5ae19f4bd8d4e4b6aa49bbcfc83150819e1e6f5b2b6d2e917062777c0fe59bc128c3284bc79b03265d4838abd6ea"}, &(0x7f00000001c0)=0x93) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd31, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xfe, 0x0, 0x100}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xb}}]}, 0x38}}, 0x0) 2m0.395976812s ago: executing program 1 (id=2551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14}}, 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m0.352938667s ago: executing program 4 (id=2552): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x1, 0x136, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000540], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x1ae) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009640)={0x2c, r3, 0x3, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8040) connect$can_bcm(r1, &(0x7f0000000240), 0x10) r4 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r4, 0x2) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40081}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x38}, 0x300}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x9, 0x4) 1m58.589704874s ago: executing program 1 (id=2553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f0000000180)='\x00', 0x4000, &(0x7f00000001c0)={@align=0x8001, {0x1000, 0x5, 0x6, 0x8}}, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x3ab}) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000000)=0xfc, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], 0x0, 0x3c}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="010000000200000000000000"], 0x40) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000400), &(0x7f0000000400)=@tcp=r7}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f0000000180)='\x00', 0x4000, &(0x7f00000001c0)={@align=0x8001, {0x1000, 0x5, 0x6, 0x8}}, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x3ab}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000000)=0xfc, 0x4) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], 0x0, 0x3c}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="010000000200000000000000"], 0x40) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000400), &(0x7f0000000400)=@tcp=r7}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) 1m57.986207604s ago: executing program 4 (id=2554): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a34000000080a010200000000000000000a0000060900010073797a31000000000900020073797a30000000000800094000000003140000001100010000000000000000000100000a0fac72b455b22577054a3833ea144cb4"], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000600000020000180140002006e657464657673696d3000"], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="189d1506d2778600"/18, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001cb70100080000001800000004000000000000002e000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x7fffffff, 0xb, &(0x7f00000006c0)=""/11, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x9, 0x8, 0xf}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000880)=[{0x5, 0x2, 0xe, 0x1}, {0x5, 0x8, 0xf}, {0x3, 0x5, 0xf, 0xa}], 0x10, 0x3}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="189d1506d2778600"/18, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001cb70100080000001800000004000000000000002e000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x7fffffff, 0xb, &(0x7f00000006c0)=""/11, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x9, 0x8, 0xf}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000880)=[{0x5, 0x2, 0xe, 0x1}, {0x5, 0x8, 0xf}, {0x3, 0x5, 0xf, 0xa}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800200010000100000000000000110000000000", @ANYRES32=r7, @ANYBLOB="0c89518f2cf4070008000400"], 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x4004090) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0x26, 0x0, &(0x7f0000000240)="c186dd87fa51e7c989db8513c104a5bd5f1561eeda9bedb62866b573ffd75340bccb17233ea4", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f"], 0x3}}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085110000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="60010000100001000000020000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x0) (async) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="60010000100001000000020000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000200000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000fcffffffffffffff0000e6ffffff0000000000000000145cd100050000000000000000000000000000000000000000008000000000000000000000000000040000000000000000000000000000000000000a000100cd0000000000000005002100020000001c001700000000002abd7000020000000000000000000000000000004c001400686d61632873686132353629000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000fc023cf36a761f230e4e9e54433e6e89be8243210c5182bf23e6baf5dce909133026683d13d8eda05690ef074b82a369cb1392a55d70fcf319c770c8eb560817df8cdcd0688299cf3b98b2e6fc594d814faf1fa957ee9f41e6b706d60f3f9d990f0e28c409373b6e84e463f4947b528b14bb84f487168187e812672563fbdac86dcec2899324a02fd34d9491f3fbc7"], 0x160}}, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r11, 0x1, 0x34, &(0x7f00000000c0)=r9, 0x4) (async) setsockopt$sock_attach_bpf(r11, 0x1, 0x34, &(0x7f00000000c0)=r9, 0x4) r13 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x8a, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x8a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010a000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="29b000004a04000008001b000000000014001680100001800c00090009000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) 1m53.088564479s ago: executing program 3 (id=2555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 1m51.60627884s ago: executing program 0 (id=2556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x14c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 1m44.1551049s ago: executing program 32 (id=2542): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) (async) r1 = socket(0x17, 0x2, 0x0) (async, rerun: 64) close(0x4) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000191004020140002"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (async) accept4$x25(r1, 0x0, &(0x7f0000000000), 0x800) 1m42.621508757s ago: executing program 33 (id=2553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f0000000180)='\x00', 0x4000, &(0x7f00000001c0)={@align=0x8001, {0x1000, 0x5, 0x6, 0x8}}, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x3ab}) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000000)=0xfc, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], 0x0, 0x3c}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="010000000200000000000000"], 0x40) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000400), &(0x7f0000000400)=@tcp=r7}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000300)={r1, &(0x7f0000000180)='\x00', 0x4000, &(0x7f00000001c0)={@align=0x8001, {0x1000, 0x5, 0x6, 0x8}}, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x3ab}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r2) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000000)=0xfc, 0x4) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000000001000000000000010800000040000000005f0000"], 0x0, 0x3c}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="010000000200000000000000"], 0x40) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000400), &(0x7f0000000400)=@tcp=r7}, 0x20) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) 1m41.594151463s ago: executing program 4 (id=2559): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0xffffffff) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) (rerun: 64) 1m34.420874931s ago: executing program 34 (id=2555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 1m29.994936222s ago: executing program 35 (id=2556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x14c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 1m24.323572377s ago: executing program 36 (id=2559): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0xffffffff) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) (rerun: 64) 0s ago: executing program 8 (id=2561): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x0, 0x10}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}]}]}}}]}, 0x68}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="044da4b6c555df", 0x7}, 0x1, 0x0, 0x0, 0x8004}, 0x90) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x4c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48001}, 0x2) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x41, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40c84}, 0xd0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d6574610000000014000280080001400000001008000240000000051400"], 0xf8}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000340)={"f5431f039fdc6404ae694b442f04cd58", 0x0, 0x0, {0x1ff, 0x1}, {0x7, 0x9}, 0xc0ac, [0x3, 0x7fffffff, 0x7239, 0x1, 0x100000000, 0x4, 0x13b, 0x3, 0x9, 0xc, 0xd18c, 0x6, 0x2, 0x8, 0xfff, 0xa]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000000800)={{r7}, r9, 0x12, @unused=[0x8a, 0x2d2c, 0xfffffffffffffff4, 0xfffffffffffffffd], @name="678d4479e35051f62d2b17410fd30de0cccc9a87aeaa243e2d4b552b90d533dffa3fbe90fabe3f53b71572187dd3192db3ba864b84caeb53f1351b08db6482e0ddedab630844ff56510a29dd34d113965a48b2b15e3c449ee3c89281cf7999481c964f385849927dcfce67b15d20dd78ff8fddbecd596f0da0aec111390a8af3377dd162f6e6f17bf56456561dc976af3df71892b50bdef9d284c23c6211f33ffbf0a008cbe6e040c724bd4a970b11334d0fb6acbea420f7ebffb1851240b37558b7e8d1e9f8b7e02838d08000a38c1a5db6c26580bb65d5018c7c4bb7a23abcccd15e212975887c77c867263275089fe76fb1f9789a5aa6bf34c6d2951d40665cfc827aca53c1815a88e70f7d97fb44d23027b27f32b4d7662c9180708a3d0461e2595234c7c17291b8afdb920724bdac951325bdbe19fa62a778a24bb81c2a1a1c7dad343c1abc5788df6c847be106fbf96d271535f36c1ff9fea04c3e84e9b90aa9efeaf467eeac81d44e01b5efe1ba22cc2eda20a4318a3738faa5eac8df0cd23fc42e69c8fced10d16a5212da6cf7d332090b28acdb4b1de883d23b485744323a379655e743fe81ed0e809115c09744ae8113ea30ecbd4633c2b83f382c11b304e11ef4e92bbe0232b703217dc2b042b4081e54d1cdeb6cce7bbb0ec78e65ecf4cb45f41338a364f044ee006cc04179a8bb073bdbcaca685e7b585c61a760e3e10e0ef1bf33aafed31c109d7e4e01eff6be1e9619cb81262144b7be2ee1eb76144b154af3747c60fc657d1ae9e4373524d31e102503b804bc86d0afccd0a626c9b31f8562616deea95254b4daa467803d5227c131d94bbdd3422b0c3849933f725177672b2197363a0d73591f51b5549258990e33953a02ac64243594e92179b2c6ed1a745c46fd4fb5cdbf187c99921dc48f19bdb9310818adcfd4f2b859a2363b4d0b7ffde675fb1d55e6d1a2a0f7e49974daf3cb0c9003bc8819da3256e77c06cba568ffba25f891e395b838bbee72d13b8e028ada80136bc18d15b54082a4abef10cfc73141c2ec4431bd04867d7faad624eee6bd65a15256e13f68b0e28173a1e87ca3ee87b3f587698fafb7168fa0b32ee8aa325b83e55dc412d706eac0e0b6d576410352a622e843d98c97aedc94077b20f400f8acb407b7d7b5b595574d48a68d9dcb202beefcd84fb33f581f414e7a2b219634c13e6f941b37a1e9fb08a6e8428c6233cd50d927510b79bbf2f1842c3e924d29b6ab97b15e80330ea6c61f5b81c54deade3e6c48f3417e349e70850715d704bfa09a6deae93399173f5201a9d6144210759c28b1dbeeb1c7ca4c7041779ef6e415475cdacf8bad4ae6cf8edcc9a04ce0df057277fb9554221657276fd6f337f31f9d7cac74c40afbb3a03b048aef9aabeb657e9cf90d88738bb0d49beb1be41ac595278c890237c0b515ffbe68ec68aa7422e46ca2d7ad5e63955ed2d43ae9224a6c35bf96a062bbf8ad949d5aa7ad64138707db87c219bbf2df3487a262add2cd6231afd13e788c7a21881bb4c359f03d9bb47477182e5e505e89247157062a9b844a5d7faf9620672e320dadd51f6951d2dbeee31c2697a8199ebfb3c4b38477840f08093c818d06073c77a0bbf34a8f34c6819695b658e1c5d7455e39ca0970aeee38189a6747e7bef5e76982c5ad11f44f488e50b4d6696713338321d21653a0a961fa6e2e241842b39c630fd431f289a17b2b84df3fa280dec17103a3f945033a07611c0e07e903719bcc1df186a8ec5d95290e5628c042baf8bebcf7b358ba3a715553afbeaed9bb5399d290e0371a7bf92f2af91b5a2af0f38a747c6b67fc3cbe9ef9bf2a652e3ac6d28e5fe2b42d01edf7528fd48c333c96273427c1d0d4141c90c744be66e1ef044ed4a370bf1193efb457bcf836504677017129fb43937df4dd28fab0d1f24706c760dfba2022eed90c37c626c11a5d1bb8e031a34fae96eec5e907e6785eef1501b7165aa660c7e894a1ea5d220d835c6ca1b39ffe97ec9d364b2b0da52a6c64e22a59f6f86c863deb58f2878935392009ffb787ec81896a80303aafde104f56bfe6549f662cc8fa6c742920169c6ff22eb0388bdd8a3bfffc5f938606c2db5f87bfed8238b14c2d48e051ad786e0a8672d1dc912116d647c8c225967ac1ec900c00cd6c50816b165f061a7a0b1e1b33f290b6a52793f54a84dd74dfebe806b993d7555b70d9743753f31cd5818d9e11ba09827e8031da76b2024e4375c737c686c1e012274e710e29183bd06f3b7ddb1f33ee6905e69e1cf1eb18720d360fae63691b9d1d27ff1fcb8a875e4530c51b40b183292655e2847a6ff2bed355b7b7c26545442a56891db0dfa5fac5ade69277af89e3bcd70f98270d2d647fab28371fc691f03ab30b64b665a97c6c2f4fdebbe854f57a42c906ec81795ab5bb43e6f629690859c86f6c87a6c7e2c97dd0031a726acc237534d137ed012f2752140fad21fbc8c0a30bd195b2b7754cdd07399851c95e3026e965c7af28396c6d557409387eee86705f65987d988ffd8ef46fb2de16200dfae266848d2b33bcbfba7e43c7c2a82fc90f20cf641d165fc9a978bd37d09a5fabe0d65462fb05d9f2286b2fab8f2a6bddc60385092a0e852fc0f5837d7538cc62bfc661d9d7e9aa2b8f16adaf13258380e0ce46ea07729cfd299923e0d5839a59e59d198ab4ed8d7ff797aaa09337572743d9d70a447ff110ecdeebea2616193f7219e5f59d0bdcb5b134661b1f48f54fc6c3f0e30564b5c6222aa848c1d484b7a7e98cb1157b6fb336163f9aa27517681cd63db2a73a7412d7fbc728ccb8b7f0b635568e8d4041b892d1ba31cd102cea5ec973224b243dabae80b161c1fa5fac41421cc0c05d9fb841e963f247c1cab663d4bdba36b16fa58e5e73c0bf6a6f0fdbdf95d22c77a04de4b455077e7d4dd6f44edaaeae41d02bb1e92f7c529f326ac80c8062ea23d83b283137abb9084babd829b6a5107373e4789b3c0b3cb14142258fc5aba0a5cf71bfccf650eac5b938781fcd7c53e208c55e81a663553bb979cb65abbbcaf25aa2b7bd70783b455c0f9139913660367a2b91b1a02c1f1468319ef6db254db94729d772a0cbfc4d648b4d9c3220c60d475990d1685484252f946cb7af0855129ac5758593c3e5dffb83d77273140f5bab34ce77c8c2c4c8cbfaed96452f707b902cc99a600c6cf70e410e6714fb8953ed274b0a81431589e83c8386d6a087cbcf65e2cd474252fbad6b10f8a8c63c2c8dee97fdd2b8e7c20494bd4f563614ec6db28c8588dcc91932df7c62865db5f5f47050ff27c0d3a1f382a82c3cdcded693e43b5f0a2a4412433e3b5ebe37d73601e075c183000aea2f3410a0d8dfdf7ce1c95881d3bafac321a0a8bd0c5e3b9e33c4e172ab0d70f8c09b9efcadf9af10a1c243a248680c8404c99a9ac9c8d129bb041a75f441129bf03de5e59b8c3b3928a296c05c30568af12f3523ff0633d2e8071e5af01604c9af2452af76090a7038d66f3d817c7a08a51062b3a2b67bf210c35f986569478039e121f1fd28019ddaa2cb78175cfa1bf00ed3c4a18aaf628c7d0bb58487228636815bf45db20765089f5cb126a18c0ad8aeff7469db053c92f18f8a150817d6b354549da9be41abe0c305d697742eff2a206bfa02fe7189fe45ae53ad5495800ae914d3f1139df6ae87420a31f4d0008c514b1b4e87001b814165ecc0cb24a3bf8480581e7f9477ef42c9d9b3cbc2d4a19208ce5b0f904e217028cb42932569d2fd7f3e9039d6dbeb18783779298abdcfb4ea78ab5b3a7f3b53ab721e9a083fefcdd51afcb4ecaa65e4355221ae4a5d46c9679c8babffaf1da13ed3cc99e198cd16befbcf9fab0344a8d415aadbdcbe012744202cc9eb1236975716a1d6b7348170750d6e6ca9d695c881cf10a1afa490ca1ab2275e5e7bc86c536ba53670634d8f05afe9ee43f68b63efac8180d58711841e8d1523bf4ebf9970c406aac6bc9e4566af7dbfee9f020777234efbe8135a8bc7c7b1b919ede0af3ace985b3df9f918b6b12a737a01b6c8df0f601a4ba4c1195028ce7b678b1ef992c44e467db83d10d721bcd553cf81630eac2f13c7d20ed07c281f5bac2165863f9c919b8dc6695ee25f056ffbfe01aef5b0a80bad58484f60059c452fca4c3b189ff74dcb7d3f77e126548931cd6477b2b69d62ad4b7d2b2b9451d4eaed8adaa5b9532b987992576a407b6a28e1797523128ec65c033875d4cb590a3ddfc7261a7f221bd39c599f24f119dbd98cd57a399f7ead5bbcfd1b0b3fd6409665dab03d7611233c9fe175b0b63e6397871e5f2db09bfcc1629283b305b61dc12cfdaabde0c2854a84ac643394961f94f8252fd6f14181b36ccc00f90965f8b2fe63619fdd8d957c21f47b7cc5f0b256f48fab28522a93772e08cddc573bd9d5067ec17d649683a081251c0daddbd6e0702a7aabb865db5156673d8441fdc112e5c111ee24b446e97b27636d26e760078ce56b5dd710c09bb8e6d458e45d76f9fa43af01a2053e8cb8415d2252193a3cdd528e464993c84d58cf8b932fad55a5b20fc9637382c2066dd0fe844a13e64bd93054b3598415ff390b9b25c54f0cb94a51a14165a6b3302f00b8b364042fe529f83f5d93a9acd9a2514318cf4c535b15df80ec583a86ed4b8ad23607f3c3ebfb4910025e245b81836949123b623e12b5285c33f9497d948e79517e82a5622005d5d1bf68bb9f434bacf084605d8131ca8f7c4577c8f9b535dd420e68750fce47c6e431b07f3c390ceb0f2ea3234e2e1f60e316cd899bf6c5bd0d7dc6467ecf61696e6dfee46b0ab20643a922d19a259f099a3fb2632b97f09bceec0201eb6114ec39353c1f9d5a4406ee2a1ee0004de73c1f39f6334eb995d09d858358d778afc222bf62bc50e24dd19286f1cd81c55bd7e453949011818b68a7ac4f05012527151e7592864994153d4d27a3a6bf07b1606ff045f511db6997eefa2a354b0abaf84652ea71530c787e60bd4faa33fa316510df55e1752a191a326a6d597d21bf8c92378abbe8d26a76b66687dbdeb175d5eec9558abdd413dad4898da68a1f8c2a4b6fc1c0a680cc044d1cd88ce341e82bef51e2848f3b9debd0e19d3b370e0745c91cc42524b5b351e881e5a80b74a9f7045b42d4bbdc1b819cc56c07bbd54c7f8d94b2c94bfe8948701233e307abcd0c274f30842ff0b71639d7404166924acedf8c8033169864f195d752fbb4e9c5758c16c2d29bbe4fbf83b41bd136f4dd9264726489aa7cc163adf5c05c2ddef770408655e55dd2086ade4061c8adf1f0d5839db86fe167e8c8ede9a91118e6e63804422ad970c5bb78aa730e03ad4cec1cbd47010590c9c23df0d358a02f464e6afae95828fd0c4ed6a1b2d78ae7114dc0ab5a731d2ecdfaa4ad6217c2ff2f3088f005b94cc155a269fa007a6d26b8e1ca89474e6a8af7e0afff9ad89a5fd4712e6cb11575f0d58084b8b22107710c39288983fb8f5e328ce104a02ef1974dee883221574b126f408687f075a99307bdbafa62809d553f456494d827ab1970fea9b287de2f5dda77dac6f3b795040c809ecc900bcfc87a9ca79b9935c1733122c714575579e94b75a600fd4c61c9fbb0aaa63d95fe0ca8aa5eee27d76aff5555c1a931fcff7f703acfe0733b3f2c8f4866de3f6bc1f0"}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f0000000240)={0x4, 0x1}, 0x2) kernel console output (not intermixed with test programs): : attribute type 10 has an invalid length. [ 275.940133][T11025] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 276.011983][T11031] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1303'. [ 276.140913][T11031] vlan2: entered allmulticast mode [ 276.151270][T11031] bond0: entered allmulticast mode [ 276.645474][T11048] veth1: Caught tx_queue_len zero misconfig [ 277.327923][T11076] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 277.342607][T11069] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 277.446910][T11069] bond5 (unregistering): Released all slaves [ 277.630431][T11075] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 278.152822][T11097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1317'. [ 278.307463][T11106] xt_l2tp: v2 doesn't support IP mode [ 278.414402][T11109] netlink: 'syz.4.1320': attribute type 21 has an invalid length. [ 278.429165][T11109] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1320'. [ 278.444614][T11106] tap0: tun_chr_ioctl cmd 1074025676 [ 278.450782][T11106] tap0: owner set to 0 [ 278.683101][T11113] tipc: Enabled bearer , priority 0 [ 278.683592][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.709877][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.712243][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.714190][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.729854][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.732995][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.743408][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.745491][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.751168][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.767429][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.770833][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.776246][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.782320][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.802145][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.808925][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.836570][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.838424][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.844552][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.866374][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.879619][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.902971][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.910462][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.944768][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.947011][T11113] tipc: Enabling of bearer rejected, already enabled [ 278.976325][T11113] tipc: Enabling of bearer rejected, already enabled [ 279.000342][T11113] tipc: Enabling of bearer rejected, already enabled [ 279.009032][T11113] tipc: Enabling of bearer rejected, already enabled [ 279.021482][T11113] tipc: Enabling of bearer rejected, already enabled [ 279.051079][T11113] tipc: Enabling of bearer rejected, already enabled [ 279.073931][T11113] tipc: Enabling of bearer rejected, already enabled [ 279.101793][T11113] tipc: Enabling of bearer rejected, already enabled [ 279.103997][T11113] tipc: Enabling of bearer rejected, already enabled [ 279.345569][T11119] syzkaller0: entered promiscuous mode [ 279.352450][T11119] syzkaller0: entered allmulticast mode [ 279.353149][T11119] tipc: Resetting bearer [ 279.382122][T11107] tipc: Resetting bearer [ 279.866528][T11159] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1328'. [ 280.354756][T11166] netlink: 'syz.2.1332': attribute type 7 has an invalid length. [ 280.494552][T11168] netlink: 'syz.2.1332': attribute type 2 has an invalid length. [ 280.494796][T11168] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1332'. [ 282.513826][T11107] tipc: Disabling bearer [ 282.866602][T11170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.010166][T11180] openvswitch: netlink: Flow key attribute not present in set flow. [ 283.045779][ T31] audit: type=1800 audit(1788751899.757:4): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1334" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1405 res=0 errno=0 [ 283.136664][T11186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1339'. [ 283.196316][T11187] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1338'. [ 283.407972][T11187] ip6gre1: entered allmulticast mode [ 283.807956][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 283.820121][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 284.153970][T11219] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 284.274497][T11218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1344'. [ 284.325345][T11217] veth0_to_bond: left promiscuous mode [ 284.384755][T11231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1348'. [ 284.426936][T11217] bond0: (slave veth0_to_bond): Releasing backup interface [ 284.901511][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1350'. [ 285.355414][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 285.355463][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 285.392319][T11245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1351'. [ 285.607180][T11260] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 285.607224][T11260] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1353'. [ 285.626786][T11266] tap0: tun_chr_ioctl cmd 1074025672 [ 285.626808][T11266] tap0: ignored: set checksum disabled [ 285.996156][T11271] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 286.284441][T11278] netlink: 'syz.3.1357': attribute type 2 has an invalid length. [ 286.634430][T11293] netlink: 'syz.3.1361': attribute type 24 has an invalid length. [ 286.761562][T11297] netlink: 'syz.0.1362': attribute type 16 has an invalid length. [ 286.761794][T11297] netlink: 'syz.0.1362': attribute type 17 has an invalid length. [ 286.808680][T11297] 0ªX¹¦Dö»: left allmulticast mode [ 286.986365][T11297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.035220][T11310] ip_tables: iptables: counters copy to user failed while replacing table [ 287.061197][T11297] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.061372][T11297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.091089][T11297] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.091276][T11297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.132590][T11297] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 287.507020][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.526900][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.726354][T11291] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 288.045199][T11318] ip_tables: iptables: counters copy to user failed while replacing table [ 288.147105][T11318] macvlan0: left promiscuous mode [ 288.243242][T11322] __nla_validate_parse: 4 callbacks suppressed [ 288.251271][T11322] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1369'. [ 288.318679][T11324] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1372'. [ 288.459309][T11328] openvswitch: netlink: Duplicate or invalid key (type 0). [ 288.788246][T11344] netlink: 'syz.0.1374': attribute type 1 has an invalid length. [ 288.989166][T11344] bond5: entered promiscuous mode [ 288.989641][T11344] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.102191][T11363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1378'. [ 289.139607][T11347] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.157691][T11347] bond5: (slave ipip0): The slave device specified does not support setting the MAC address [ 289.164325][T11347] bond5: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 289.239220][T11347] bond5: (slave ipip0): making interface the new active one [ 289.251689][T11347] ipip0: entered promiscuous mode [ 289.276103][T11347] bond5: (slave ipip0): Enslaving as an active interface with an up link [ 289.368020][T11358] xt_CT: No such helper "snmp_trap" [ 289.425536][T11377] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 289.861797][T11393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1383'. [ 289.862971][T11393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1383'. [ 289.865707][T11393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1383'. [ 289.866640][T11393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1383'. [ 289.869728][T11393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1383'. [ 289.870616][T11393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1383'. [ 289.871554][T11393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1383'. [ 289.910471][T11391] openvswitch: netlink: EtherType 300 is less than min 600 [ 289.973626][T11391] openvswitch: netlink: Multiple metadata blocks provided [ 290.262296][T11404] sctp: [Deprecated]: syz.0.1385 (pid 11404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.262296][T11404] Use struct sctp_sack_info instead [ 290.365217][T11404] sctp: [Deprecated]: syz.0.1385 (pid 11404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.365217][T11404] Use struct sctp_sack_info instead [ 290.454017][T11412] netlink: 'syz.1.1387': attribute type 1 has an invalid length. [ 290.562049][T11412] bond8: entered promiscuous mode [ 290.569355][T11412] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.686060][T11412] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.696066][T11412] bond8: (slave ipip1): The slave device specified does not support setting the MAC address [ 290.712128][T11412] bond8: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 290.791669][T11412] bond8: (slave ipip1): making interface the new active one [ 290.791717][T11412] ipip1: entered promiscuous mode [ 290.815182][T11412] bond8: (slave ipip1): Enslaving as an active interface with an up link [ 291.333278][T11432] gretap0: entered promiscuous mode [ 291.374488][T11435] 0ªî{X¹¦: renamed from gretap0 [ 291.408348][T11435] 0ªî{X¹¦: left promiscuous mode [ 291.408780][T11435] 0ªî{X¹¦: entered allmulticast mode [ 291.428153][T11435] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 291.551555][T11444] ip_tables: iptables: counters copy to user failed while replacing table [ 291.668063][T11453] ip_tables: iptables: counters copy to user failed while replacing table [ 291.809840][T11464] netlink: 'syz.0.1397': attribute type 16 has an invalid length. [ 293.296579][T11504] sock: sock_set_timeout: `syz.4.1409' (pid 11504) tries to set negative timeout [ 293.424679][T11504] __nla_validate_parse: 66 callbacks suppressed [ 293.424750][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 293.452480][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 293.453266][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 293.453675][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 293.491012][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 293.908676][T11517] xt_check_target_common: 2 callbacks suppressed [ 293.908732][T11517] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 293.959218][T11517] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 294.005869][T11517] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 294.285989][T11529] netlink: 'syz.0.1416': attribute type 18 has an invalid length. [ 294.296443][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 294.330177][T11529] netlink: 'syz.0.1416': attribute type 18 has an invalid length. [ 294.340938][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 294.356769][ T6570] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.357044][ T6570] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.357079][ T6570] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.357110][ T6570] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.512271][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 294.545636][T11530] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.703664][T11547] lo: Caught tx_queue_len zero misconfig [ 294.703923][T11547] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 295.050129][T11554] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1422'. [ 295.059884][T11554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.267638][ T5624] block nbd2: Receive control failed (result -32) [ 295.469700][T11567] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 295.643587][T11574] netlink: 'syz.4.1427': attribute type 49 has an invalid length. [ 295.700916][T11576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.826954][T11574] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 295.827112][T11574] ip6gretap0: entered promiscuous mode [ 295.841672][T11574] ip6gretap0: entered allmulticast mode [ 296.313721][T11596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1432'. [ 296.832738][T11612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 297.189888][T11622] netlink: 'syz.1.1439': attribute type 1 has an invalid length. [ 298.396051][T11657] bond3: option downdelay: invalid value (18446744073709551615) [ 298.405028][T11657] bond3: option downdelay: allowed values 0 - 2147483647 [ 298.417695][T11657] bond3 (unregistering): Released all slaves [ 298.671047][T11657] __nla_validate_parse: 1 callbacks suppressed [ 298.671096][T11657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1449'. [ 298.734422][T11657] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1449'. [ 298.965797][T11671] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 298.990500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.999692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.000017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.006167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.006849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.060837][T11671] tipc: Trying to set illegal importance in message [ 299.353765][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'. [ 299.676961][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1456'. [ 299.888472][T11674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.127072][T11710] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1461'. [ 300.154865][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'. [ 300.749385][T11700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.760412][T11700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.852937][T11718] syzkaller1: entered promiscuous mode [ 300.853433][T11718] syzkaller1: entered allmulticast mode [ 301.239255][T11700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.254348][T11700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.355212][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.355503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.481679][T11738] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 301.493026][T11738] batman_adv: batadv0: Adding interface: gretap1 [ 301.493043][T11738] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 301.493070][T11738] batman_adv: batadv0: Interface activated: gretap1 [ 301.877929][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'. [ 301.878173][T11765] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 301.976155][T11700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.976219][T11700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.348672][T11700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.348731][T11700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.538270][T11773] bond3: entered promiscuous mode [ 302.544239][T11773] bond3: entered allmulticast mode [ 302.553083][T11773] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.676881][T11772] bond4: entered promiscuous mode [ 302.677311][T11772] bond4: entered allmulticast mode [ 302.679804][T11772] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.968325][ T59] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.983534][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.058023][ T59] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.058288][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.065245][ T4339] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.065276][ T4339] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.114622][ T59] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.114884][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.686130][T11814] IPv6: sit1: Disabled Multicast RS [ 303.833920][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 304.072627][T11821] netlink: 'syz.2.1486': attribute type 4 has an invalid length. [ 304.511713][T11834] netlink: 'syz.2.1490': attribute type 1 has an invalid length. [ 304.511977][T11834] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.1490'. [ 305.741010][T11882] tipc: Enabled bearer , priority 0 [ 305.779865][T11887] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1500'. [ 306.952085][T11915] netlink: 'syz.3.1505': attribute type 4 has an invalid length. [ 307.080165][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 307.095032][ T1013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.095346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.122140][T11921] openvswitch: netlink: Invalid VLAN frame [ 307.462696][T11924] netlink: 'syz.1.1508': attribute type 1 has an invalid length. [ 307.654639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.658895][T11969] netlink: ct_mark mask cannot be 0 [ 308.659154][T11969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.157518][T11982] syzkaller0: entered promiscuous mode [ 309.157573][T11982] syzkaller0: entered allmulticast mode [ 309.197106][T11986] netlink: 'syz.0.1524': attribute type 11 has an invalid length. [ 309.210971][T11986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1524'. [ 309.319423][T11987] netlink: 'syz.3.1526': attribute type 1 has an invalid length. [ 309.483940][T11998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1527'. [ 309.968160][T12013] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1529'. [ 310.022267][T12020] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1531'. [ 310.605375][T12037] netlink: 'syz.1.1535': attribute type 1 has an invalid length. [ 310.624516][T12045] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1539'. [ 310.639034][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'. [ 310.649327][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1539'. [ 310.660668][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'. [ 310.670769][T12045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1539'. [ 310.680159][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'. [ 310.863400][T12047] openvswitch: netlink: Missing key (keys=40, expected=100) [ 311.010052][T12047] dvmrp8: entered allmulticast mode [ 311.770715][T12083] netlink: 'syz.0.1544': attribute type 6 has an invalid length. [ 311.770970][T12083] netlink: 'syz.0.1544': attribute type 5 has an invalid length. [ 311.839071][T12083] ipt_ECN: cannot use operation on non-tcp rule [ 312.243522][T12095] pim6reg527: entered allmulticast mode [ 312.696742][T12117] netlink: 'syz.1.1552': attribute type 4 has an invalid length. [ 312.857316][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.857580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.982191][T12160] nbd: must specify a size in bytes for the device [ 314.264997][T12168] __nla_validate_parse: 10 callbacks suppressed [ 314.275357][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1560'. [ 314.356011][T12164] syzkaller0: entered promiscuous mode [ 314.362975][T12164] syzkaller0: entered allmulticast mode [ 314.401314][T12164] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 314.474032][T12170] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 314.986452][T12190] x_tables: unsorted underflow at hook 2 [ 314.996830][T12190] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 315.060468][T12185] SET target dimension over the limit! [ 315.083808][T12192] syzkaller0: entered promiscuous mode [ 315.090251][T12192] syzkaller0: entered allmulticast mode [ 315.197527][T12192] 0: reclassify loop, rule prio 0, protocol 800 [ 315.216852][T12200] Bluetooth: ISO socket layer initialized [ 315.289113][T12207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1573'. [ 315.487205][T12214] netlink: 'syz.0.1574': attribute type 1 has an invalid length. [ 315.487248][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 316.976771][T12258] netlink: 'syz.4.1585': attribute type 1 has an invalid length. [ 316.977017][T12258] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1585'. [ 317.200635][T12269] netlink: 'syz.2.1589': attribute type 11 has an invalid length. [ 317.225129][T12269] SET target dimension over the limit! [ 317.980968][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.981474][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.022327][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1593'. [ 318.216844][T12289] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 318.216886][T12289] netlink: 'syz.4.1594': attribute type 2 has an invalid length. [ 318.242714][T12291] netlink: 'syz.4.1594': attribute type 1 has an invalid length. [ 318.256493][T12291] netlink: 'syz.4.1594': attribute type 2 has an invalid length. [ 318.625174][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.625430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.663438][T12279] syzkaller1: entered promiscuous mode [ 318.663879][T12279] syzkaller1: entered allmulticast mode [ 318.760547][T12304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.771850][T12304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.780899][T12304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.937407][T12300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.937613][T12300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.223730][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 319.869834][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 319.968785][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 319.982221][T12339] netlink: 'syz.2.1604': attribute type 4 has an invalid length. [ 319.982271][T12339] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1604'. [ 320.141347][T12337] team0 (unregistering): Port device team_slave_0 removed [ 320.163213][T12337] team0 (unregistering): Port device team_slave_1 removed [ 320.211955][T12337] bond1: left allmulticast mode [ 320.212030][T12337] bond1: left promiscuous mode [ 320.236254][T12337] team0 (unregistering): Port device macvlan2 removed [ 320.952187][T12365] syzkaller0: entered promiscuous mode [ 320.952238][T12365] syzkaller0: entered allmulticast mode [ 321.901879][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1622'. [ 322.220896][T12433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.687793][T12445] netlink: 'syz.2.1631': attribute type 3 has an invalid length. [ 322.713743][T12450] netlink: 'syz.2.1631': attribute type 3 has an invalid length. [ 322.826128][T12455] veth0: entered promiscuous mode [ 322.903025][T12455] tunl0: Caught tx_queue_len zero misconfig [ 322.977106][T12463] tipc: MTU too low for tipc bearer [ 323.156118][T12446] veth0: left promiscuous mode [ 323.371335][T12478] sctp: [Deprecated]: syz.3.1640 (pid 12478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.371335][T12478] Use struct sctp_sack_info instead [ 323.371394][T12478] sctp: [Deprecated]: syz.3.1640 (pid 12478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.371394][T12478] Use struct sctp_sack_info instead [ 323.371445][T12478] sctp: [Deprecated]: syz.3.1640 (pid 12478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.371445][T12478] Use struct sctp_sack_info instead [ 323.371477][T12478] sctp: [Deprecated]: syz.3.1640 (pid 12478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.371477][T12478] Use struct sctp_sack_info instead [ 323.371510][T12478] sctp: [Deprecated]: syz.3.1640 (pid 12478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.371510][T12478] Use struct sctp_sack_info instead [ 323.371539][T12478] sctp: [Deprecated]: syz.3.1640 (pid 12478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.371539][T12478] Use struct sctp_sack_info instead [ 323.371570][T12478] sctp: [Deprecated]: syz.3.1640 (pid 12478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.371570][T12478] Use struct sctp_sack_info instead [ 323.371600][T12478] sctp: [Deprecated]: syz.3.1640 (pid 12478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.371600][T12478] Use struct sctp_sack_info instead [ 323.371631][T12478] sctp: [Deprecated]: syz.3.1640 (pid 12478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.371631][T12478] Use struct sctp_sack_info instead [ 323.371672][T12478] sctp: [Deprecated]: syz.3.1640 (pid 12478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.371672][T12478] Use struct sctp_sack_info instead [ 324.001243][T12497] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 324.016537][T12497] veth0_to_team: Caught tx_queue_len zero misconfig [ 324.144264][T12503] sctp: [Deprecated]: syz.4.1646 (pid 12503) Use of int in maxseg socket option. [ 324.144264][T12503] Use struct sctp_assoc_value instead [ 324.360945][T12509] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1648'. [ 324.390206][T12512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.390470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.428708][T12524] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1649'. [ 324.523459][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1650'. [ 325.182034][T12543] sctp: [Deprecated]: syz.3.1658 (pid 12543) Use of int in max_burst socket option. [ 325.182034][T12543] Use struct sctp_assoc_value instead [ 325.478508][T12549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1660'. [ 325.604758][T12560] netlink: 'syz.3.1661': attribute type 1 has an invalid length. [ 325.604812][T12560] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1661'. [ 325.604846][T12560] NCSI netlink: No device for ifindex 0 [ 325.643040][T12552] netlink: Failed to add helper -22 [ 325.649079][T12552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.088551][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1664'. [ 326.088600][T12570] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1664'. [ 326.256783][T12579] openvswitch: netlink: Invalid VLAN frame [ 326.352450][T12570] veth11: entered promiscuous mode [ 326.761203][T12605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1670'. [ 327.492785][T12634] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1675'. [ 328.029605][T12656] netlink: 'syz.4.1679': attribute type 8 has an invalid length. [ 328.471736][T12668] sit1: entered promiscuous mode [ 328.471780][T12668] sit1: entered allmulticast mode [ 328.509217][T12656] tipc: Enabling of bearer rejected, failed to enable media [ 328.793227][T12669] syzkaller1: entered promiscuous mode [ 328.793272][T12669] syzkaller1: entered allmulticast mode [ 329.317632][T12687] veth1_to_team: Caught tx_queue_len zero misconfig [ 329.919724][T12703] netlink: 'syz.4.1695': attribute type 10 has an invalid length. [ 329.919979][T12703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.075290][T12705] netlink: 'syz.1.1696': attribute type 1 has an invalid length. [ 330.134667][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.135029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.451052][T12705] veth13: entered allmulticast mode [ 330.471439][T12718] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.471937][T12718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1699'. [ 331.155943][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 331.312719][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1704'. [ 331.337445][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1706'. [ 331.688883][T12753] netlink: 'syz.2.1707': attribute type 1 has an invalid length. [ 331.746161][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 331.746294][T12754] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 331.769129][T12749] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 331.800927][T12758] openvswitch: netlink: IP tunnel dst address not specified [ 332.071298][T12769] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1713'. [ 332.503151][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 332.565549][T12784] netlink: 'syz.0.1718': attribute type 4 has an invalid length. [ 332.582476][T12784] No such timeout policy "syz0" [ 332.927151][T12787] netlink: 'syz.2.1719': attribute type 2 has an invalid length. [ 332.927202][T12787] netlink: 'syz.2.1719': attribute type 11 has an invalid length. [ 332.927238][T12787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1719'. [ 333.005234][T12779] tipc: Resetting bearer [ 333.426962][T12804] ip6t_hbh: unknown flags 38 [ 334.749673][ T6570] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.761268][ T6570] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.761357][ T6570] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.761388][ T6570] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.761431][ T6570] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.761458][ T6570] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.781113][ T6570] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.781149][ T6570] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.786193][T12832] netlink: 'syz.0.1727': attribute type 10 has an invalid length. [ 334.786215][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1727'. [ 335.258427][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.258668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.733618][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'. [ 336.134437][T12868] netlink: 'syz.4.1736': attribute type 5 has an invalid length. [ 336.134499][T12868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'. [ 336.383731][T12881] netlink: 'syz.1.1738': attribute type 1 has an invalid length. [ 336.669800][T12881] 8021q: adding VLAN 0 to HW filter on device bond11 [ 336.688065][T12884] IPv6: sit2: Disabled Multicast RS [ 337.077752][T12899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1745'. [ 337.118631][T12905] x_tables: duplicate underflow at hook 1 [ 337.159402][T12894] syzkaller0: entered promiscuous mode [ 337.159809][T12894] syzkaller0: entered allmulticast mode [ 337.215480][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 337.382615][T12894] tipc: Enabled bearer , priority 0 [ 337.410381][T12894] tipc: Resetting bearer [ 337.646185][T12893] tipc: Resetting bearer [ 337.698972][T12893] tipc: Disabling bearer [ 338.340075][T12950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1756'. [ 338.461406][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.461675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.725252][T12967] netdevsim netdevsim3: Direct firmware load for ÿ failed with error -2 [ 338.736484][T12967] netdevsim netdevsim3: Falling back to sysfs fallback for: ÿ [ 338.791620][T12972] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1762'. [ 338.810875][T12970] netlink: 'syz.3.1758': attribute type 3 has an invalid length. [ 338.825732][T12973] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1762'. [ 339.168943][T12987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1765'. [ 339.193063][T12987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1765'. [ 339.334564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.543277][T12999] Bluetooth: hci0: unsupported parameter 5134 [ 339.550182][T12999] Bluetooth: hci0: unsupported parameter 8192 [ 339.557855][T12999] Bluetooth: hci0: unsupported parameter 5134 [ 339.564643][T12999] Bluetooth: hci0: unsupported parameter 8192 [ 340.240008][T13030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1775'. [ 340.289824][T13030] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1775'. [ 340.501992][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1778'. [ 340.590186][T13042] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 341.016410][T12519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.016623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.340427][T13069] xt_l2tp: v2 sid > 0xffff: 1114112 [ 341.591891][T13076] netlink: 'syz.4.1788': attribute type 1 has an invalid length. [ 341.616094][T13077] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 342.173715][T13098] __nla_validate_parse: 6 callbacks suppressed [ 342.195204][T13098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 342.481274][T13087] syz.2.1790 (13087) used greatest stack depth: 18312 bytes left [ 342.593509][T13092] syz.2.1790 (13092) used greatest stack depth: 18088 bytes left [ 342.652612][T13109] netlink: 'syz.0.1797': attribute type 2 has an invalid length. [ 343.031895][T13122] netlink: 'syz.4.1803': attribute type 11 has an invalid length. [ 343.479716][T13135] block nbd0: reconnected socket [ 343.488087][ T5624] block nbd0: Receive control failed (result -32) [ 344.920905][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1822'. [ 345.016315][T13198] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 345.027190][T13184] syzkaller0: entered promiscuous mode [ 345.033307][T13184] syzkaller0: entered allmulticast mode [ 345.081240][T13197] netlink: 'syz.1.1826': attribute type 21 has an invalid length. [ 345.081485][T13197] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1826'. [ 345.132525][T13197] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1826'. [ 345.359408][T13205] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1827'. [ 345.423297][T13208] netlink: 'syz.1.1829': attribute type 1 has an invalid length. [ 345.432379][T13208] block nbd296: server does not support multiple connections per device. [ 345.443768][T13208] block nbd296: shutting down sockets [ 345.768341][T13218] netlink: 'syz.4.1831': attribute type 39 has an invalid length. [ 346.782420][T12519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.782700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.957099][T13210] kthread_run failed with err -4 [ 349.201238][T13223] netlink: 'syz.3.1837': attribute type 32 has an invalid length. [ 349.268569][T13223] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 349.292565][T13230] openvswitch: netlink: Duplicate key (type 6). [ 349.392536][T13236] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 349.404045][T13236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.904698][T13253] ip_tables: iptables: counters copy to user failed while replacing table [ 349.907319][T13256] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 349.950743][T13249] IPVS: Scheduler module ip_vs_sip not found [ 350.037526][T13263] Bluetooth: hci0: unsupported parameter 5135 [ 350.047996][T13263] Bluetooth: hci0: unsupported parameter 8192 [ 350.048052][T13263] Bluetooth: hci0: unsupported parameter 5135 [ 350.048082][T13263] Bluetooth: hci0: unsupported parameter 8192 [ 350.074987][T13262] Bluetooth: hci0: unsupported parameter 5135 [ 350.083068][T13262] Bluetooth: hci0: unsupported parameter 8192 [ 350.083149][T13262] Bluetooth: hci0: unsupported parameter 5135 [ 350.083167][T13262] Bluetooth: hci0: unsupported parameter 8192 [ 350.216484][T13268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1844'. [ 351.318710][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 351.404320][T13297] netlink: 'syz.0.1852': attribute type 21 has an invalid length. [ 351.412691][T13297] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1852'. [ 351.947780][T13314] netlink: 'syz.0.1858': attribute type 2 has an invalid length. [ 352.403198][T13330] netlink: 'syz.4.1861': attribute type 1 has an invalid length. [ 352.536441][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.536773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.865775][T13340] netlink: 'syz.3.1864': attribute type 2 has an invalid length. [ 353.204115][T13353] lo: left promiscuous mode [ 353.206764][T13353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.846485][T12519] IPVS: starting estimator thread 0... [ 353.934865][T13371] IPVS: using max 29 ests per chain, 69600 per kthread [ 354.354997][T13384] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1876'. [ 354.638226][T13396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 355.105896][T13411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1885'. [ 355.106173][T13411] netlink: 'syz.2.1885': attribute type 7 has an invalid length. [ 355.106420][T13411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1885'. [ 355.411784][T13417] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 355.411830][T13417] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1886'. [ 355.459818][T13429] netlink: 'syz.0.1890': attribute type 1 has an invalid length. [ 355.555841][T13429] 8021q: adding VLAN 0 to HW filter on device bond7 [ 356.109262][T13439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'. [ 356.230796][T13441] bond7: (slave geneve3): making interface the new active one [ 356.252461][T13441] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 356.682737][T13449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1896'. [ 356.821404][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1895'. [ 356.990362][T13460] netlink: 'syz.3.1899': attribute type 21 has an invalid length. [ 357.059448][T13457] syzkaller1: entered promiscuous mode [ 357.601106][T13476] netlink: 'syz.3.1905': attribute type 1 has an invalid length. [ 357.697287][T13480] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1905'. [ 357.802938][T13476] bond6: entered promiscuous mode [ 357.813062][T13476] bond6: entered allmulticast mode [ 357.820382][T13476] 8021q: adding VLAN 0 to HW filter on device bond6 [ 357.848959][T13485] netlink: 'syz.3.1905': attribute type 1 has an invalid length. [ 357.873638][T13494] syzkaller0: entered promiscuous mode [ 357.881615][T13494] syzkaller0: entered allmulticast mode [ 357.892391][T13495] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1905'. [ 357.978546][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1906'. [ 358.111990][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1906'. [ 358.295081][T12519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.296683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.797083][T13513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1911'. [ 360.589605][T13575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1924'. [ 361.823432][T13556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.094293][T13592] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1927'. [ 362.350053][T13585] : renamed from bond0 (while UP) [ 362.552590][T13593] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1927'. [ 362.552639][T13593] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1927'. [ 363.415779][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.416022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.485613][ T31] audit: type=1800 audit(1788751980.187:5): pid=13608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1930" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1984 res=0 errno=0 [ 363.581397][T13610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1931'. [ 364.156867][T13620] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 364.158874][T13621] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 364.158895][T13621] netlink: 'syz.0.1935': attribute type 2 has an invalid length. [ 364.372894][T13632] netlink: 'syz.4.1934': attribute type 1 has an invalid length. [ 364.490678][T13620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.875253][T13646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1938'. [ 364.993856][T13646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.573978][T13656] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1941'. [ 366.751197][T13685] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1946'. [ 367.083965][T13698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1949'. [ 367.115578][T13699] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1949'. [ 367.447988][T13701] tipc: New replicast peer: 172.20.20.187 [ 367.448555][T13701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.449092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.483965][T13701] tipc: Enabled bearer , priority 10 [ 367.584935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.585977][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.854900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.855389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.384453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.459743][ T4339] net_ratelimit: 1 callbacks suppressed [ 368.459860][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.460088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.553191][T13722] xt_hashlimit: size too large, truncated to 1048576 [ 369.424329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.425085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.958399][T13746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1957'. [ 369.975315][T13747] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 370.454278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.454838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.748701][T13761] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1962'. [ 370.748752][T13761] openvswitch: netlink: Flow key attr not present in new flow. [ 370.801886][T13761] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 370.940537][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'. [ 370.970625][T13761] 8021q: adding VLAN 0 to HW filter on device bond13 [ 371.247900][T13771] netlink: 'syz.3.1963': attribute type 17 has an invalid length. [ 371.247947][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 371.248019][T13771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1963'. [ 371.467551][T13777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1964'. [ 371.494344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.495429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.615640][T13780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1964'. [ 372.003190][T13783] netlink: 'syz.1.1965': attribute type 2 has an invalid length. [ 372.440859][T13783] : entered promiscuous mode [ 372.448038][ T8629] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.461009][ T8629] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.475159][ T5745] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.534472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.859248][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.962802][T13797] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 372.998300][ T5738] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.504576][T13816] net_ratelimit: 1 callbacks suppressed [ 373.504632][T13816] lwtunnel_output(): recursion limit reached on datapath [ 373.574854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.575309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.751935][T13797] bond5: entered promiscuous mode [ 373.752537][T13797] 8021q: adding VLAN 0 to HW filter on device bond5 [ 374.153356][T13804] 8021q: adding VLAN 0 to HW filter on device bond5 [ 374.153769][T13804] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 374.213353][T13804] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 374.276245][T13804] bond5: (slave ip6gre2): making interface the new active one [ 374.292435][T13804] ip6gre2: entered promiscuous mode [ 374.307053][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.308031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.368614][T13804] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 374.614247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.614833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.633816][T13823] veth1_to_bond: entered allmulticast mode [ 374.672790][T13827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1971'. [ 374.913071][T13821] veth1_to_bond: left allmulticast mode [ 375.225821][T13836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1973'. [ 375.664258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.665434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.374630][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 376.669260][T13875] tap0: tun_chr_ioctl cmd 2148553947 [ 376.694495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.777603][T13878] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1980'. [ 376.866985][T13882] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1981'. [ 376.879593][T13871] xt_hashlimit: size too large, truncated to 1048576 [ 378.593402][T13910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1987'. [ 378.775317][ C1] net_ratelimit: 3 callbacks suppressed [ 378.775375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.776390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.419718][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.419970][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.642062][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1992'. [ 379.642359][T13928] netlink: 'syz.4.1992': attribute type 1 has an invalid length. [ 379.642401][T13928] netlink: 'syz.4.1992': attribute type 2 has an invalid length. [ 379.814229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.814705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.885976][T13940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1994'. [ 380.062523][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.062770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.789866][T13952] wg0: Caught tx_queue_len zero misconfig [ 380.854239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.854735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.894215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.894857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.243746][T13985] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 382.528734][T13990] xt_TCPMSS: Only works on TCP SYN packets [ 382.887647][T13994] syzkaller1: entered promiscuous mode [ 382.888096][T13994] syzkaller1: entered allmulticast mode [ 383.822705][T14007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2011'. [ 383.984210][ C1] net_ratelimit: 2 callbacks suppressed [ 383.984264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.985619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.162795][T14014] xt_policy: too many policy elements [ 384.190093][T14013] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2013'. [ 384.190167][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 384.534719][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.534897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.014351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.015728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.187091][T12518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.187391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.322393][T14030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2018'. [ 385.322446][T14030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.322485][T14030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.365974][T14030] batman_adv: batadv0: Interface deactivated: gretap1 [ 385.366018][T14030] batman_adv: batadv0: Removing interface: gretap1 [ 385.473652][T14039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2018'. [ 385.768086][T14046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2021'. [ 385.768164][T14046] nbd: couldn't find a device at index 458752 [ 386.064260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.075212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.558066][T14059] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 386.645833][T14063] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2025'. [ 387.104280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.503860][T14078] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2030'. [ 387.520824][T14078] netlink: 'syz.3.2030': attribute type 3 has an invalid length. [ 387.670062][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'. [ 387.682930][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2032'. [ 388.710840][T14110] vlan3: entered allmulticast mode [ 388.710883][T14110] bond0: entered allmulticast mode [ 388.710914][T14110] bond_slave_0: entered allmulticast mode [ 388.710936][T14110] bond_slave_1: entered allmulticast mode [ 389.174899][ C1] net_ratelimit: 3 callbacks suppressed [ 389.174954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.175420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.312028][T14118] netlink: 'syz.3.2040': attribute type 2 has an invalid length. [ 389.530901][T14124] netlink: 'syz.1.2042': attribute type 1 has an invalid length. [ 389.998543][T14134] netlink: 'syz.2.2043': attribute type 2 has an invalid length. [ 390.214861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.216433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.271010][T14124] 8021q: adding VLAN 0 to HW filter on device bond14 [ 390.287296][T14130] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 390.340583][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.340830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.375046][T14129] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 390.910563][T14150] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2045'. [ 391.058175][T14094] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 391.264229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.275311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.304212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.305474][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.438738][T14164] geneve3: entered promiscuous mode [ 392.438783][T14164] geneve3: entered allmulticast mode [ 392.640081][T14174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2051'. [ 392.715393][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2051'. [ 392.796729][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2052'. [ 392.844013][T14174] macsec1: entered promiscuous mode [ 392.851689][T14174] bridge0: entered promiscuous mode [ 392.852023][T14174] macsec1: entered allmulticast mode [ 392.852044][T14174] bridge0: entered allmulticast mode [ 392.887329][T14174] bridge0: port 1(macsec1) entered blocking state [ 392.894484][T14174] bridge0: port 1(macsec1) entered disabled state [ 393.320176][T14174] bridge0: left allmulticast mode [ 393.347482][T14187] netlink: 'syz.2.2052': attribute type 64 has an invalid length. [ 393.718386][T14178] macsec1: entered promiscuous mode [ 393.730188][T14178] macsec1: entered allmulticast mode [ 393.730237][T14178] bridge0: entered allmulticast mode [ 393.730871][T14178] bridge0: port 1(macsec1) entered blocking state [ 393.731018][T14178] bridge0: port 1(macsec1) entered disabled state [ 393.808382][T14178] bridge0: left allmulticast mode [ 393.893761][ T25] bridge0: left promiscuous mode [ 394.370265][T14215] netlink: 'syz.2.2058': attribute type 1 has an invalid length. [ 394.378449][ C1] net_ratelimit: 2 callbacks suppressed [ 394.378471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.378975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.588048][T14231] Unsupported ieee802154 address type: 0 [ 394.660389][T14223] bond6: (slave bridge3): making interface the new active one [ 394.670541][T14223] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 395.424236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.434904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.019032][T14248] geneve4: entered allmulticast mode [ 396.059866][T12519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.060175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.207589][T14253] bridge4: entered allmulticast mode [ 396.454293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.455071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.023935][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2071'. [ 397.294616][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2071'. [ 397.504261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.505976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.365310][T14307] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2079'. [ 399.584243][ C1] net_ratelimit: 5 callbacks suppressed [ 399.584299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.585746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.752600][T14343] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2087'. [ 400.614256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.614736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.174339][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.244939][T14367] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2093'. [ 401.461988][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2095'. [ 401.554530][T14378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2095'. [ 401.603352][T14376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.654245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.655209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.818352][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.818640][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.370202][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 402.370247][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 402.370289][T14391] netlink: 'syz.1.2101': attribute type 15 has an invalid length. [ 402.485205][T12519] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 402.485427][T12519] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 402.507091][ T8629] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 402.651409][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 402.671658][T14396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2102'. [ 402.703790][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2102'. [ 404.643300][T14427] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 404.700210][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2111'. [ 405.833750][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'. [ 405.952331][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'. [ 406.912640][T14479] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 406.945802][T12518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.946050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.052402][T14484] netlink: 'syz.4.2126': attribute type 12 has an invalid length. [ 407.067237][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 407.067504][T14484] netlink: 'syz.4.2126': attribute type 12 has an invalid length. [ 407.067526][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2126'. [ 407.734605][T14487] can: request_module (can-proto-0) failed. [ 408.100995][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.101265][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.101500][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.153390][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.193062][T14498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.365448][T14495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.196575][T14522] syzkaller0: entered promiscuous mode [ 409.196622][T14522] syzkaller0: entered allmulticast mode [ 409.573610][T14526] sit0: Caught tx_queue_len zero misconfig [ 409.620267][T14526] netlink: 'syz.4.2136': attribute type 64 has an invalid length. [ 409.620312][T14526] __nla_validate_parse: 1 callbacks suppressed [ 409.620341][T14526] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2136'. [ 410.087694][T14534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2139'. [ 410.795288][T14551] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2144'. [ 410.813086][T14555] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2146'. [ 412.219917][T14581] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 412.231273][T14581] batman_adv: batadv0: Interface deactivated: veth0 [ 412.247590][T14581] batman_adv: batadv0: Removing interface: veth0 [ 412.362810][T14581] bond0: (slave bond_slave_0): Releasing backup interface [ 412.391858][T14581] bond_slave_0: left allmulticast mode [ 412.523187][T14581] bond0: (slave bond_slave_1): Releasing backup interface [ 412.590048][T14581] bond_slave_1: left allmulticast mode [ 412.608620][T14581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.662366][T14581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.689815][T14581] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 412.712523][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.712783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.447631][T14604] xt_l2tp: wrong L2TP version: 0 [ 413.661988][T14604] lo: entered promiscuous mode [ 413.662640][T14604] gre0: entered promiscuous mode [ 413.663024][T14604] gretap0: entered promiscuous mode [ 413.702660][T14604] ip_vti0: entered promiscuous mode [ 414.516464][T14628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2165'. [ 414.713501][T14638] netlink: 'syz.0.2166': attribute type 3 has an invalid length. [ 414.763693][T14639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.563677][T14657] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.2170'. [ 415.584813][T14662] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 415.778788][T14663] netlink: 'syz.0.2170': attribute type 4 has an invalid length. [ 415.778834][T14663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2170'. [ 416.676592][T14674] openvswitch: netlink: Duplicate or invalid key (type 0). [ 416.691479][T14675] openvswitch: netlink: Duplicate or invalid key (type 0). [ 417.040841][T14681] veth1_to_bond: entered allmulticast mode [ 417.157582][T14683] netlink: 'syz.3.2180': attribute type 1 has an invalid length. [ 417.332712][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'. [ 417.521925][T14692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2181'. [ 417.521974][T14692] nbd: socks must be embedded in a SOCK_ITEM attr [ 417.680249][T14694] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2182'. [ 417.767781][T14679] veth1_to_bond: left allmulticast mode [ 418.031445][T14697] netlink: zone id is out of range [ 418.031555][T14697] netlink: zone id is out of range [ 418.031787][T14697] netlink: zone id is out of range [ 418.032249][T14697] netlink: zone id is out of range [ 418.350158][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2184'. [ 418.383034][T14710] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2184'. [ 418.461968][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.462398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.522616][T14710] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2184'. [ 418.522883][T14710] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2184'. [ 418.523150][T14710] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2184'. [ 419.242719][T14725] netlink: 'syz.1.2189': attribute type 7 has an invalid length. [ 419.242959][T14725] netlink: 'syz.1.2189': attribute type 8 has an invalid length. [ 419.310789][T14724] xt_hashlimit: size too large, truncated to 1048576 [ 419.311133][T14725] erspan0: entered promiscuous mode [ 419.379929][T14725] erspan0: left promiscuous mode [ 421.819298][T14777] __nla_validate_parse: 31 callbacks suppressed [ 421.819351][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2202'. [ 421.819385][T14777] netlink: 'syz.4.2202': attribute type 10 has an invalid length. [ 421.819407][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2202'. [ 421.875395][T14768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.890964][T14768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.209824][T14793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2203'. [ 422.398817][T14768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 422.398888][T14768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.479072][T14768] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 422.893308][T14777] geneve3: entered promiscuous mode [ 422.893740][T14777] geneve3: entered allmulticast mode [ 422.977508][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.474870][T14817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.474916][T14817] IPv6: NLM_F_CREATE should be set when creating new route [ 423.475410][T14817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2207'. [ 424.103362][T14825] Cannot find set identified by id 65534 to match [ 424.220179][ T8629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.220428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.678355][T14865] sctp: [Deprecated]: syz.1.2217 (pid 14865) Use of int in maxseg socket option. [ 425.678355][T14865] Use struct sctp_assoc_value instead [ 426.126238][T14863] bond0: entered promiscuous mode [ 426.142081][T14863] bond0: entered allmulticast mode [ 426.159513][T14863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.508219][T14863] bond7: entered promiscuous mode [ 426.519267][T14863] bond7: entered allmulticast mode [ 426.519749][T14863] 8021q: adding VLAN 0 to HW filter on device bond7 [ 426.539715][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 426.559607][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 426.592871][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2220'. [ 426.847676][T14887] netlink: 'syz.3.2225': attribute type 21 has an invalid length. [ 426.860002][T14887] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2225'. [ 426.891919][T14888] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2224'. [ 426.999295][T14890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2226'. [ 427.010676][T14890] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2226'. [ 427.010706][T14890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2226'. [ 427.761481][T14892] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 427.773075][T14892] bond7: option packets_per_slave: allowed values 0 - 65535 [ 427.785836][T14892] bond7 (unregistering): Released all slaves [ 427.952407][T14904] Unsupported ieee802154 address type: 0 [ 427.980218][T14904] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.2230'. [ 427.980369][T14904] 0ªX¹¦Dö»: renamed from 30ªî{X¹¦ (while UP) [ 428.416502][T14912] xt_REDIRECT: bad MAP_IPS. [ 428.579449][T14913] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2232'. [ 429.206990][T14921] netlink: 'syz.3.2235': attribute type 21 has an invalid length. [ 429.842261][T14945] SET target dimension over the limit! [ 429.979007][T12518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.979286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.344238][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 430.869753][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2245'. [ 430.953572][T14969] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 431.577481][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'. [ 431.900054][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2251'. [ 432.321156][T14992] netlink: 'syz.4.2252': attribute type 1 has an invalid length. [ 432.579186][T14992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 432.747515][T14994] bond2: (slave batadv_slave_0): Enslaving as a backup interface with a down link [ 432.831730][T14998] IPVS: Scheduler module ip_vs_sip not found [ 433.174534][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.626351][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2264'. [ 435.363007][T15052] syzkaller0: entered promiscuous mode [ 435.363052][T15052] syzkaller0: entered allmulticast mode [ 435.741588][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.743269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.128293][T15071] netlink: 'syz.4.2270': attribute type 4 has an invalid length. [ 436.128567][T15071] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2270'. [ 436.174827][T15033] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2260'. [ 436.202916][T15057] syzkaller0 selects TX queue 0, but real number of TX queues is 0 [ 436.229988][T15070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.230301][T15070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.230571][T15070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.268347][T15070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.269055][T15070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.384569][T15077] xt_bpf: check failed: parse error [ 436.464741][T15031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.778813][T15081] syz_tun: entered allmulticast mode [ 436.823876][T15078] syz_tun: left allmulticast mode [ 437.429271][T15089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2273'. [ 437.518634][T15097] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 437.986185][T15101] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 438.215278][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2279'. [ 439.977822][T15150] xt_hashlimit: size too large, truncated to 1048576 [ 440.541760][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2296'. [ 440.858430][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.858753][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.887152][ T59] net_ratelimit: 2 callbacks suppressed [ 440.887208][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.887448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.247922][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2298'. [ 441.259409][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2298'. [ 441.365202][T15172] netlink: 'syz.2.2298': attribute type 3 has an invalid length. [ 441.956435][T15187] xt_bpf: check failed: parse error [ 441.983329][T15183] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2302'. [ 442.432279][T15193] bond_slave_1: entered promiscuous mode [ 442.432322][T15193] bond_slave_1: entered allmulticast mode [ 442.629338][T15198] netlink: 'syz.4.2307': attribute type 21 has an invalid length. [ 442.629386][T15198] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2307'. [ 442.701476][T15198] netlink: 'syz.4.2307': attribute type 5 has an invalid length. [ 442.701746][T15198] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2307'. [ 442.718702][T15202] bond0: option ad_select: unable to set because the bond device is up [ 442.816947][T15198] IPv6: NLM_F_CREATE should be specified when creating new route [ 443.828300][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'. [ 443.866298][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'. [ 444.944870][T15245] netlink: 'syz.2.2321': attribute type 1 has an invalid length. [ 444.944918][T15245] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.2321'. [ 445.297611][T15247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.307054][T15249] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.636936][T15250] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 445.886319][T15252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2324'. [ 445.941495][T15256] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 445.994446][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.994685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.904748][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2331'. [ 447.162232][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'. [ 448.657042][T15326] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2347'. [ 448.871322][T15321] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 449.035559][T15321] bond7: (slave lo): Enslaving as an active interface with an up link [ 449.090392][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'. [ 449.164878][T15321] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 449.537157][T15341] xt_bpf: check failed: parse error [ 450.522824][T15358] netlink: 'syz.0.2358': attribute type 1 has an invalid length. [ 450.862731][T15369] openvswitch: netlink: Unknown key attributes 1 [ 450.872752][T15371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2359'. [ 450.929665][T15358] bond8: entered promiscuous mode [ 450.930184][T15358] 8021q: adding VLAN 0 to HW filter on device bond8 [ 451.096370][T12519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.096671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.738650][T15377] netlink: 'syz.2.2360': attribute type 11 has an invalid length. [ 452.438011][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 452.453330][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2366'. [ 452.535365][T15391] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2366'. [ 452.730450][T15394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2365'. [ 452.788692][T15394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2365'. [ 453.409696][T15402] openvswitch: netlink: Multiple metadata blocks provided [ 453.967830][T15413] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2372'. [ 453.977730][T15412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2372'. [ 454.094634][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2372'. [ 455.143704][T15440] Bluetooth: hci1: too big key_count value 32778 [ 455.413339][T15450] netlink: 'syz.1.2380': attribute type 11 has an invalid length. [ 456.131438][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2376'. [ 456.791833][T15466] netlink: 'syz.4.2385': attribute type 8 has an invalid length. [ 456.849498][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2385'. [ 456.874215][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.874547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.949545][T15466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2385'. [ 457.432727][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'. [ 457.879346][T15494] openvswitch: netlink: Message has 8 unknown bytes. [ 458.323723][T15509] macsec1: entered promiscuous mode [ 458.647895][T15508] macsec1: entered promiscuous mode [ 460.273029][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 460.349047][T15552] --map-set only usable from mangle table [ 461.983315][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2409'. [ 462.362077][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2410'. [ 462.664696][T15590] netlink: 'syz.3.2411': attribute type 1 has an invalid length. [ 462.827285][T15606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2411'. [ 464.413940][T15632] netlink: 'syz.0.2421': attribute type 16 has an invalid length. [ 464.413985][T15632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2421'. [ 464.809853][T15638] netlink: 'syz.2.2422': attribute type 1 has an invalid length. [ 464.930531][T15642] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2424'. [ 464.930579][T15642] nbd: illegal input index -8454144 [ 464.973766][T15641] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2422'. [ 466.080352][T15663] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 467.918819][T15667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.985132][T15667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.965433][ T59] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.965493][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.966054][ T59] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.966085][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.966125][ T59] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.966155][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.966197][ T59] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.966226][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.528207][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 470.036897][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2443'. [ 470.732661][T15732] netlink: 'syz.2.2446': attribute type 16 has an invalid length. [ 470.732710][T15732] netlink: 'syz.2.2446': attribute type 17 has an invalid length. [ 471.163807][T15727] tipc: Resetting bearer [ 471.196355][T15745] netlink: 'syz.4.2448': attribute type 1 has an invalid length. [ 471.213655][T15727] tipc: Resetting bearer [ 471.310798][T15732] tunl0: left promiscuous mode [ 471.324798][T15732] gre0: left promiscuous mode [ 471.354688][T15732] gretap0: left promiscuous mode [ 471.377760][T15732] ip_vti0: left promiscuous mode [ 471.391217][T15732] ip6_vti0: left promiscuous mode [ 471.468479][T15732] sit0: left promiscuous mode [ 471.487676][T15732] ip6tnl0: left promiscuous mode [ 471.502322][T15732] ip6gre0: left promiscuous mode [ 471.517019][T15732] syz_tun: left promiscuous mode [ 471.533938][T15732] ip6gretap0: left promiscuous mode [ 471.552693][T15732] vcan0: left promiscuous mode [ 471.613675][T15732] dummy0: left promiscuous mode [ 471.635044][T15732] nlmon0: left promiscuous mode [ 471.662087][T15732] batadv0: left promiscuous mode [ 471.663483][T15732] veth0: left promiscuous mode [ 471.682628][T15732] veth1: left promiscuous mode [ 471.692179][T15732] wg0: left promiscuous mode [ 471.702043][T15732] wg1: left promiscuous mode [ 471.702901][T15732] wg2: left promiscuous mode [ 471.718221][T15732] veth0_to_bridge: left promiscuous mode [ 471.726406][T15732] bridge_slave_0: left promiscuous mode [ 471.733227][T15732] veth1_to_bridge: left promiscuous mode [ 471.744414][T15732] bridge_slave_1: left promiscuous mode [ 471.756474][T15732] bond_slave_0: left promiscuous mode [ 471.768617][T15732] veth1_to_bond: left promiscuous mode [ 471.777398][T15732] bond_slave_1: left promiscuous mode [ 471.788233][T15732] veth0_to_team: left promiscuous mode [ 471.828253][T15732] team_slave_0: left promiscuous mode [ 471.856488][T15732] veth1_to_team: left promiscuous mode [ 471.857390][T15732] team_slave_1: left promiscuous mode [ 471.887014][T15732] veth0_to_batadv: left promiscuous mode [ 471.887901][T15732] batadv_slave_0: left promiscuous mode [ 471.910488][T15732] veth1_to_batadv: left promiscuous mode [ 471.935076][T15732] batadv_slave_1: left promiscuous mode [ 471.936045][T15732] veth0_to_hsr: left promiscuous mode [ 471.969718][T15732] veth1_to_hsr: left promiscuous mode [ 471.993905][T15732] hsr0: left promiscuous mode [ 472.001731][T15732] veth1_virt_wifi: left promiscuous mode [ 472.011344][T15732] veth0_virt_wifi: left promiscuous mode [ 472.023078][T15732] virt_wifi0: left promiscuous mode [ 472.037618][T15732] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 472.069161][T15738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2444'. [ 472.096076][T15745] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 472.949552][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'. [ 474.215932][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2459'. [ 474.531527][T15798] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2461'. [ 475.007422][T15806] netlink: 'syz.1.2464': attribute type 24 has an invalid length. [ 475.589322][T15821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2468'. [ 475.589579][T15821] openvswitch: netlink: Key type 775 is out of range max 32 [ 476.066878][ T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.067151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.486703][T15834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2473'. [ 476.576148][T15831] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 477.291388][T15845] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2474'. [ 477.311444][T15854] netlink: 'syz.1.2476': attribute type 1 has an invalid length. [ 477.311494][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'. [ 477.732923][T15854] syzkaller0: entered promiscuous mode [ 477.732967][T15854] syzkaller0: entered allmulticast mode [ 477.832748][T15817] syzkaller0: entered promiscuous mode [ 477.832792][T15817] syzkaller0: entered allmulticast mode [ 478.586828][T15854] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 481.195570][T12519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.195852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.761341][T15941] netlink: 'syz.4.2492': attribute type 1 has an invalid length. [ 481.773079][T15941] netlink: 'syz.4.2492': attribute type 1 has an invalid length. [ 486.150843][T15931] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 486.308133][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.308425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.841356][T15957] xt_TCPMSS: Only works on TCP SYN packets [ 486.956624][T15959] netlink: 'syz.3.2498': attribute type 2 has an invalid length. [ 487.591374][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'. [ 487.657847][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2501'. [ 488.256108][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 488.256159][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2505'. [ 488.828770][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2509'. [ 488.935414][T16004] wireguard0: entered promiscuous mode [ 490.169904][T16032] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2513'. [ 490.541139][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'. [ 490.828821][T16043] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2518'. [ 491.541852][T16055] ip6_vti0: entered promiscuous mode [ 491.789809][T16075] netlink: 'syz.4.2521': attribute type 29 has an invalid length. [ 492.064287][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.064527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.640567][T16081] netlink: 'syz.1.2523': attribute type 1 has an invalid length. [ 493.013967][T16088] netlink: 'syz.4.2526': attribute type 21 has an invalid length. [ 493.053787][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2526'. [ 493.054250][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 493.054293][T16088] netlink: 'syz.4.2526': attribute type 21 has an invalid length. [ 493.054312][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2526'. [ 493.354366][T16102] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2529'. [ 493.371482][T16095] bridge6: entered promiscuous mode [ 493.380966][T16095] bridge6: entered allmulticast mode [ 493.414938][ T4339] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.415634][ T4339] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.415742][ T4339] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.415786][ T4339] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.082086][T16107] netlink: NAT attribute has 4 unknown bytes [ 494.082146][T16107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.806105][T16135] netlink: 'syz.1.2539': attribute type 8 has an invalid length. [ 495.971590][T16144] netlink: 'syz.0.2543': attribute type 3 has an invalid length. [ 495.983071][T16144] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2543'. [ 496.052566][T16135] syzkaller0: entered promiscuous mode [ 496.052611][T16135] syzkaller0: entered allmulticast mode [ 496.077022][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2540'. [ 496.132953][T16149] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 496.268790][T16144] netlink: 'syz.0.2543': attribute type 3 has an invalid length. [ 496.268835][T16144] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2543'. [ 497.035888][T16163] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2546'. [ 497.079387][T16166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.079459][T16166] IPv6: NLM_F_CREATE should be set when creating new route [ 497.079509][T16166] IPv6: NLM_F_CREATE should be set when creating new route [ 497.080856][T16166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.159846][T16167] bond0: Caught tx_queue_len zero misconfig [ 497.188510][ T170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.188831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.331361][T16170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.331738][T16170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.752931][T16186] netlink: 'syz.4.2550': attribute type 1 has an invalid length. [ 498.066197][T16182] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 498.066961][T16182] batman_adv: batadv0: Adding interface: gretap2 [ 498.067000][T16182] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.067038][T16182] batman_adv: batadv0: Interface activated: gretap2 [ 501.846321][ C1] sched: DL replenish lagged too much [ 502.304274][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.376648][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.376959][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.458450][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.458812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.157459][T12510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.157733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.270718][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.270974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.514820][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.515084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.738709][ T170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.738962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.475420][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.475689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.475551][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.475813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.026249][T16234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 537.049974][T16234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 537.188389][T16234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 537.224773][T16234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 537.239315][T16234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 537.745731][T16234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 537.761797][T16234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 537.770324][T16234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 537.783811][T16234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 537.792815][T16234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 539.777017][T16240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 540.234258][T16240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 540.697903][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 540.898462][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 540.914633][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 540.931214][T16235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 541.132091][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 541.642027][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 541.643350][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 541.651075][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 541.895006][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 541.905782][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 541.916034][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 541.991656][ T4339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.991918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.003602][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 542.015856][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 543.024243][T16235] Bluetooth: hci7: command tx timeout [ 544.374208][T16235] Bluetooth: hci6: command tx timeout [ 544.375516][T16235] Bluetooth: hci5: command tx timeout [ 545.094215][ T5624] Bluetooth: hci7: command tx timeout [ 546.830414][ T5624] Bluetooth: hci5: command tx timeout [ 546.830899][ T5624] Bluetooth: hci6: command tx timeout [ 546.963041][ T4934] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 546.978529][ T4934] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 546.988941][ T4934] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 547.174134][ T4934] Bluetooth: hci7: command tx timeout [ 547.183791][ T4934] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 547.285698][ T4934] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 548.089942][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.090254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.084049][ T4934] Bluetooth: hci6: command tx timeout [ 549.084514][ T4934] Bluetooth: hci5: command tx timeout [ 549.285102][ T5624] Bluetooth: hci7: command tx timeout [ 549.655310][ T5624] Bluetooth: hci8: command tx timeout [ 551.104127][ T4934] Bluetooth: hci5: command tx timeout [ 551.104552][ T5624] Bluetooth: hci6: command tx timeout [ 551.734138][ T5624] Bluetooth: hci8: command tx timeout [ 552.804832][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 553.073784][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 553.106153][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 553.166163][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 553.344108][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 553.818095][T16235] Bluetooth: hci8: command tx timeout [ 553.859064][T12508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.859306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.654580][T16235] Bluetooth: hci9: command tx timeout [ 555.904688][T16235] Bluetooth: hci8: command tx timeout [ 557.740132][ T5624] Bluetooth: hci9: command tx timeout [ 559.395436][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.395738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.871800][ T5624] Bluetooth: hci9: command tx timeout [ 562.174047][ T5624] Bluetooth: hci9: command tx timeout [ 564.027490][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.027802][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.059177][T12515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.059435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.941728][T12508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.942010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.694173][T12515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.694536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.380997][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.381257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.266166][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.266434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.675219][T16235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.695242][T16235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.697225][T16235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 593.043273][T16235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 593.053431][T16235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 593.864868][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.865128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.214288][ T5624] Bluetooth: hci0: command tx timeout [ 596.324789][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 596.695654][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 596.786900][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.184597][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.206693][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 598.516043][T16235] Bluetooth: hci0: command tx timeout [ 599.076799][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.077075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.535242][ T5624] Bluetooth: hci0: command tx timeout [ 600.541151][ T5624] Bluetooth: hci1: command tx timeout [ 602.942257][T16235] Bluetooth: hci1: command tx timeout [ 602.942520][T16235] Bluetooth: hci0: command tx timeout [ 605.014114][ T5624] Bluetooth: hci1: command tx timeout [ 605.241593][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.241871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.094121][ T5624] Bluetooth: hci1: command tx timeout [ 610.633617][T16235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 610.734220][T16235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 611.486763][T16235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 611.507965][T16235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 611.521821][T16235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 612.247940][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 612.262044][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 612.273436][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 613.094172][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 613.420471][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 613.763461][T12518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.763709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.895750][ T5624] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 614.214604][ T5624] Bluetooth: hci2: command tx timeout [ 615.844085][ T5624] Bluetooth: hci4: command tx timeout [ 616.344034][ T5624] Bluetooth: hci2: command tx timeout [ 618.097365][ T5624] Bluetooth: hci4: command tx timeout [ 618.374081][ T5624] Bluetooth: hci2: command tx timeout [ 619.534010][T12515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.534349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.284153][ T5624] Bluetooth: hci4: command tx timeout [ 620.494013][ T5624] Bluetooth: hci2: command tx timeout [ 622.294433][ T5624] Bluetooth: hci4: command tx timeout [ 625.181032][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.181326][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.446470][T12515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.446790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.295668][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 631.288579][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.288922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.943281][T12516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.943523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.505233][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.505547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.389339][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.389612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.104286][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.104541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.519598][T12519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.894428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.268058][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.268329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.195218][T16235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 664.198495][T16235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 664.200664][T16235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 664.834196][T16235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 664.844483][T16235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 665.117404][ T1026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.117677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.454685][ T4934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 669.404537][ T4934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 669.568488][ T4934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 669.835226][ T4934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 669.846613][ T4934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 669.872800][ T4934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 670.344661][ T4934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 670.356093][ T4934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 670.608267][T16344] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 670.618425][T16344] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 671.647426][T12516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.647705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.423662][T16240] Bluetooth: hci6: command tx timeout [ 673.655953][T16240] Bluetooth: hci5: command tx timeout [ 675.954244][ T5624] Bluetooth: hci6: command tx timeout [ 675.954270][ T4934] Bluetooth: hci5: command tx timeout [ 675.967815][T16240] Bluetooth: hci3: command tx timeout [ 677.253896][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.254245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.043998][T16240] Bluetooth: hci5: command tx timeout [ 678.044288][T16240] Bluetooth: hci3: command tx timeout [ 678.044542][T16240] Bluetooth: hci6: command tx timeout [ 680.054250][ T5624] Bluetooth: hci6: command tx timeout [ 680.054570][ T5624] Bluetooth: hci3: command tx timeout [ 680.054879][ T5624] Bluetooth: hci5: command tx timeout [ 680.244838][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 680.366138][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 681.014444][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 681.120855][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 681.131517][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 682.144238][ T5624] Bluetooth: hci3: command tx timeout [ 682.564914][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 682.613215][T12519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 682.613520][T12519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.865727][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 682.874842][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 682.977506][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 682.989605][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.989941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.134075][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 683.454694][ T5624] Bluetooth: hci7: command tx timeout [ 685.190841][ T5624] Bluetooth: hci8: command tx timeout [ 685.754659][ T5624] Bluetooth: hci7: command tx timeout [ 686.768538][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.768820][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.275135][T16240] Bluetooth: hci8: command tx timeout [ 687.827777][T16240] Bluetooth: hci7: command tx timeout [ 689.394184][T16240] Bluetooth: hci8: command tx timeout [ 689.992546][T16240] Bluetooth: hci7: command tx timeout [ 690.295290][T12516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.295539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.844061][T16240] Bluetooth: hci8: command tx timeout [ 709.766970][T12515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.767365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.838456][T12519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 710.838970][T12519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.150744][T12511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.151010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.684052][ T8629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.684335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.973318][T12519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 722.973611][T12519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.266179][T12510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.266531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.584388][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 728.599777][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 728.615087][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 728.617488][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 728.626378][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 730.994175][ T5624] Bluetooth: hci0: command tx timeout [ 733.015552][ T5624] Bluetooth: hci0: command tx timeout [ 734.000279][T12511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.000549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.114094][ T5624] Bluetooth: hci0: command tx timeout [ 737.297140][ T5624] Bluetooth: hci0: command tx timeout [ 740.264537][T12511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.264802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.076527][T16240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 741.184780][T16240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 741.195646][T16240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 741.212120][T16240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 741.277594][T16240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 742.516784][T16240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 742.611796][T16240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 742.613823][T16240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 742.647980][T16240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 742.659326][T16235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 742.661976][T16240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 743.208421][T16235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 743.218376][T16235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 743.655478][T16235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 743.666861][T16235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 744.324568][ T5624] Bluetooth: hci1: command tx timeout [ 744.837091][ T4934] Bluetooth: hci4: command tx timeout [ 745.670875][T12516] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.194656][ T5624] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 746.241975][ T170] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.454313][ T5624] Bluetooth: hci1: command tx timeout [ 746.574904][T12515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.575166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.636521][ T5624] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 746.914466][ T5624] Bluetooth: hci2: command tx timeout [ 746.915436][ T5624] Bluetooth: hci4: command tx timeout [ 746.915767][ T5624] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 747.134109][ T5624] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 747.226495][ T5624] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 748.078074][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.078395][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.508725][T12516] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.545182][ T4934] Bluetooth: hci1: command tx timeout [ 748.954031][ T4934] Bluetooth: hci4: command tx timeout [ 748.954302][ T4934] Bluetooth: hci2: command tx timeout [ 749.464091][ T5624] Bluetooth: hci9: command tx timeout [ 749.484014][T12511] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.615103][ T5624] Bluetooth: hci1: command tx timeout [ 751.025206][ T4934] Bluetooth: hci4: command tx timeout [ 751.030941][ T5624] Bluetooth: hci2: command tx timeout [ 751.534033][ T5624] Bluetooth: hci9: command tx timeout [ 751.910864][T16432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.911141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.173975][ T5624] Bluetooth: hci2: command tx timeout [ 753.583944][ T5624] Bluetooth: hci9: command tx timeout [ 755.834119][ T5624] Bluetooth: hci9: command tx timeout [ 757.747571][ T1026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.747838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.493218][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.493515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.194264][T12511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.194533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.588037][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.588336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.515815][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.516071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.158041][T12516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.158305][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.655491][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.655747][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.866313][ T4934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 793.899492][ T4934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 793.912404][ T4934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 793.927326][ T4934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 793.936964][ T4934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 796.203969][ T4934] Bluetooth: hci3: command tx timeout [ 797.364453][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.364734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.215096][ T4934] Bluetooth: hci3: command tx timeout [ 800.435395][ T4934] Bluetooth: hci3: command tx timeout [ 802.464099][ T4934] Bluetooth: hci3: command tx timeout [ 802.764510][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 802.776563][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 802.810592][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.966842][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 802.968604][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 803.634212][ T8630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.634589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.095196][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 804.167394][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 804.228755][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 804.585469][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 804.587600][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 805.260237][ T5624] Bluetooth: hci5: command tx timeout [ 806.873993][ T5624] Bluetooth: hci6: command tx timeout [ 807.334107][ T5624] Bluetooth: hci5: command tx timeout [ 808.869499][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.870108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.964625][ T5624] Bluetooth: hci6: command tx timeout [ 809.414215][ T5624] Bluetooth: hci5: command tx timeout [ 809.567397][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.567696][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.224065][ T5624] Bluetooth: hci6: command tx timeout [ 811.510681][ T5624] Bluetooth: hci5: command tx timeout [ 813.150252][ T4934] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 813.159532][ T4934] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 813.316235][T16235] Bluetooth: hci6: command tx timeout [ 813.394395][ T4934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 813.524568][ T4934] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 813.526353][ T4934] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 815.522109][T12516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.522372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.784126][ T4934] Bluetooth: hci7: command tx timeout [ 817.641789][ T5624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 817.829049][ T5624] Bluetooth: hci7: command tx timeout [ 818.209382][ T5624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 818.220573][ T5624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 818.425487][ T5624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 818.475339][ T5624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 819.894409][ T5624] Bluetooth: hci7: command tx timeout [ 820.664663][ T5624] Bluetooth: hci8: command tx timeout [ 821.035854][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.036118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.981188][ T5624] Bluetooth: hci7: command tx timeout [ 822.768350][ T5624] Bluetooth: hci8: command tx timeout [ 824.783936][ T5624] Bluetooth: hci8: command tx timeout [ 826.882350][ T5624] Bluetooth: hci8: command tx timeout [ 840.235784][T12511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.236050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.231676][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.231956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.129304][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.129572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.594142][ T5624] Bluetooth: hci0: command 0x0406 tx timeout [ 857.518373][T16432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.518653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.635605][ T5624] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 858.924653][ T5624] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 858.931178][ T5624] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 859.795924][ T5624] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 859.869361][ T5624] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 862.254042][ T4934] Bluetooth: hci10: command tx timeout [ 863.346538][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.346824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.305448][ T4934] Bluetooth: hci10: command tx timeout [ 866.563489][T16240] Bluetooth: hci10: command tx timeout [ 867.396145][T16344] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 867.496885][T16344] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 867.534643][T16344] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 867.555794][T16344] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 867.575316][T16344] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 868.117334][T16344] Bluetooth: hci1: command 0x0406 tx timeout [ 868.117800][T16344] Bluetooth: hci4: command 0x0406 tx timeout [ 868.118038][T16344] Bluetooth: hci2: command 0x0406 tx timeout [ 868.624120][T16240] Bluetooth: hci10: command tx timeout [ 869.086894][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.087163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.051900][T16240] Bluetooth: hci11: command tx timeout [ 870.938308][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.938593][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.082937][ T4934] Bluetooth: hci11: command tx timeout [ 872.232602][ T4934] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 872.820965][T16344] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 872.925728][T16344] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 873.024197][T16344] Bluetooth: hci9: command 0x0406 tx timeout [ 873.052161][T16344] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 873.354719][T16344] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 874.285402][ T5624] Bluetooth: hci11: command tx timeout [ 874.851622][ T6569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.851898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.174543][T16235] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 875.591228][T16235] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 875.894199][T16235] Bluetooth: hci12: command tx timeout [ 875.941701][T16235] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 876.054113][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 876.294216][T16235] Bluetooth: hci11: command tx timeout [ 876.636342][T16235] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 876.638911][T16235] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 877.993980][T16344] Bluetooth: hci12: command tx timeout [ 878.949841][T16344] Bluetooth: hci13: command tx timeout [ 880.194741][T16235] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 880.214475][T16235] Bluetooth: hci12: command tx timeout [ 880.409607][T16235] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 880.424443][T16235] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 880.515665][T16235] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 880.526301][T16235] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 880.550487][ T8197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.550780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.014077][T16235] Bluetooth: hci13: command tx timeout [ 882.295289][T16344] Bluetooth: hci12: command tx timeout [ 883.099655][T16344] Bluetooth: hci13: command tx timeout [ 883.196213][T16344] Bluetooth: hci14: command tx timeout [ 885.181742][T16344] Bluetooth: hci13: command tx timeout [ 885.284266][T16344] Bluetooth: hci14: command tx timeout [ 886.314619][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.314900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.334052][T16344] Bluetooth: hci14: command tx timeout [ 889.474068][T16344] Bluetooth: hci14: command tx timeout [ 892.233938][ T1026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.234207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.199483][T12518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.199755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.184061][ T32] INFO: task dhcpcd:5278 blocked for more than 143 seconds. [ 899.184323][ T32] Not tainted syzkaller #0 [ 899.184556][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 899.184770][ T32] task:dhcpcd state:D stack:23976 pid:5278 tgid:5278 ppid:1 task_flags:0x400140 flags:0x00080000 [ 899.185252][ T32] Call Trace: [ 899.185538][ T32] [ 899.185805][ T32] __schedule+0x17db/0x58f0 [ 899.186203][ T32] ? security_file_ioctl+0xc3/0x2a0 [ 899.186544][ T32] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 899.186789][ T32] ? schedule+0x90/0x2b0 [ 899.187024][ T32] schedule+0x164/0x2b0 [ 899.187267][ T32] schedule_preempt_disabled+0x13/0x30 [ 899.187501][ T32] __mutex_lock+0x7c1/0x1550 [ 899.187774][ T32] ? __mutex_lock+0x5d4/0x1550 [ 899.188015][ T32] ? vlan_ioctl_handler+0xf0/0x630 [ 899.188313][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 899.188569][ T32] vlan_ioctl_handler+0xf0/0x630 [ 899.188803][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 899.189038][ T32] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 899.189276][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 899.189555][ T32] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 899.189795][ T32] sock_ioctl+0x612/0x7e0 [ 899.190136][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 899.190388][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 899.190668][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 899.190908][ T32] __se_sys_ioctl+0xfc/0x170 [ 899.191184][ T32] do_syscall_64+0x166/0x520 [ 899.191469][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.191746][ T32] ? clear_bhb_loop+0x70/0xc0 [ 899.191984][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.192281][ T32] RIP: 0033:0x7f8695052378 [ 899.192526][ T32] RSP: 002b:00007ffc7e118f08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 899.192993][ T32] RAX: ffffffffffffffda RBX: 000055a06026c770 RCX: 00007f8695052378 [ 899.193250][ T32] RDX: 00007ffc7e118f10 RSI: 0000000000008982 RDI: 000000000000000f [ 899.193478][ T32] RBP: 00007ffc7e118f10 R08: 0000000000000000 R09: 0000000000000000 [ 899.193696][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 899.845026][ T32] R13: 000055a0602d0bb8 R14: 00007ffc7e129320 R15: 000055a06026c770 [ 899.845079][ T32] [ 899.845126][ T32] INFO: task kworker/u8:15:8629 blocked for more than 144 seconds. [ 899.845143][ T32] Not tainted syzkaller #0 [ 899.845154][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 899.845164][ T32] task:kworker/u8:15 state:D stack:23712 pid:8629 tgid:8629 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 899.845227][ T32] Workqueue: events_unbound linkwatch_event [ 899.845338][ T32] Call Trace: [ 899.845345][ T32] [ 899.845359][ T32] __schedule+0x17db/0x58f0 [ 899.845411][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 899.845475][ T32] ? __pfx___schedule+0x10/0x10 [ 899.845514][ T32] ? schedule+0x90/0x2b0 [ 899.845545][ T32] schedule+0x164/0x2b0 [ 899.845576][ T32] schedule_preempt_disabled+0x13/0x30 [ 899.845603][ T32] __mutex_lock+0x7c1/0x1550 [ 899.845946][ T32] ? __mutex_lock+0x5d4/0x1550 [ 899.845987][ T32] ? linkwatch_event+0xe/0x60 [ 899.846016][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 899.846047][ T32] ? lock_acquire+0x115/0x350 [ 899.846078][ T32] ? rcu_is_watching+0x16/0xb0 [ 899.846127][ T32] ? process_scheduled_works+0x97a/0x1630 [ 899.846179][ T32] linkwatch_event+0xe/0x60 [ 899.846206][ T32] process_scheduled_works+0xc3d/0x1630 [ 899.846278][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 899.846313][ T32] ? assign_work+0x3cf/0x5d0 [ 899.846345][ T32] worker_thread+0xa47/0xfb0 [ 899.846413][ T32] kthread+0x38b/0x480 [ 899.846434][ T32] ? __pfx_worker_thread+0x10/0x10 [ 899.846460][ T32] ? __pfx_kthread+0x10/0x10 [ 899.846483][ T32] ret_from_fork+0x514/0xb70 [ 899.846529][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 899.846560][ T32] ? __switch_to+0xc89/0x1420 [ 899.846597][ T32] ? __pfx_kthread+0x10/0x10 [ 899.846620][ T32] ret_from_fork_asm+0x1a/0x30 [ 899.846683][ T32] [ 899.846719][ T32] INFO: task syz-executor:16408 blocked for more than 144 seconds. [ 899.846737][ T32] Not tainted syzkaller #0 [ 899.846749][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 899.846760][ T32] task:syz-executor state:D stack:26616 pid:16408 tgid:16408 ppid:1 task_flags:0x400140 flags:0x00080002 [ 899.846825][ T32] Call Trace: [ 899.846833][ T32] [ 899.846847][ T32] __schedule+0x17db/0x58f0 [ 899.846904][ T32] ? __pfx___schedule+0x10/0x10 [ 899.846937][ T32] ? schedule+0x90/0x2b0 [ 899.846968][ T32] schedule+0x164/0x2b0 [ 899.846997][ T32] schedule_preempt_disabled+0x13/0x30 [ 899.847025][ T32] __mutex_lock+0x7c1/0x1550 [ 899.847060][ T32] ? __mutex_lock+0x5d4/0x1550 [ 899.847092][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 899.847197][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 899.847241][ T32] ? __nla_parse+0x40/0x60 [ 899.847326][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 899.847352][ T32] ? __kernel_text_address+0xd/0x30 [ 899.847387][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 899.847434][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 899.847481][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 899.847505][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 899.847557][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 899.847625][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 899.847655][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 899.847687][ T32] ? __lock_acquire+0x6df/0x2e50 [ 899.847722][ T32] netlink_rcv_skb+0x226/0x4a0 [ 899.847749][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 899.847780][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 899.847820][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 899.847844][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 899.847875][ T32] netlink_unicast+0x7bd/0x940 [ 899.847911][ T32] netlink_sendmsg+0x813/0xb40 [ 899.847946][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.847981][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 899.848058][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.848082][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 899.848113][ T32] __sys_sendto+0x408/0x5a0 [ 899.848140][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 899.848224][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 899.848259][ T32] __x64_sys_sendto+0xde/0x100 [ 899.848283][ T32] do_syscall_64+0x166/0x520 [ 899.848312][ T32] ? trace_irq_disable+0x3b/0x140 [ 899.848355][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.848383][ T32] ? clear_bhb_loop+0x70/0xc0 [ 899.848410][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.848431][ T32] RIP: 0033:0x7f3e7375e98e [ 899.848451][ T32] RSP: 002b:00007ffced8f8b58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 899.848473][ T32] RAX: ffffffffffffffda RBX: 00005555555cd500 RCX: 00007f3e7375e98e [ 899.848489][ T32] RDX: 0000000000000028 RSI: 00007f3e74554670 RDI: 0000000000000003 [ 899.848503][ T32] RBP: 0000000000000001 R08: 00007ffced8f8bd4 R09: 000000000000000c [ 899.848516][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 899.848528][ T32] R13: 0000000000000000 R14: 00007f3e74554670 R15: 0000000000000000 [ 899.848561][ T32] [ 899.848570][ T32] INFO: task syz-executor:16409 blocked for more than 144 seconds. [ 899.848586][ T32] Not tainted syzkaller #0 [ 899.848596][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 899.848606][ T32] task:syz-executor state:D stack:26616 pid:16409 tgid:16409 ppid:1 task_flags:0x400140 flags:0x00080002 [ 899.848665][ T32] Call Trace: [ 899.848672][ T32] [ 899.848686][ T32] __schedule+0x17db/0x58f0 [ 899.848744][ T32] ? __pfx___schedule+0x10/0x10 [ 899.848782][ T32] ? schedule+0x90/0x2b0 [ 899.848812][ T32] schedule+0x164/0x2b0 [ 899.848841][ T32] schedule_preempt_disabled+0x13/0x30 [ 899.848867][ T32] __mutex_lock+0x7c1/0x1550 [ 899.848902][ T32] ? __mutex_lock+0x5d4/0x1550 [ 899.848934][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 899.848961][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 899.849003][ T32] ? __nla_parse+0x40/0x60 [ 899.849030][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 899.849054][ T32] ? __kernel_text_address+0xd/0x30 [ 899.849077][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 899.849115][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 899.849163][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 899.849185][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 899.849213][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 899.849242][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 899.849270][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 899.849302][ T32] ? __lock_acquire+0x6df/0x2e50 [ 899.849337][ T32] netlink_rcv_skb+0x226/0x4a0 [ 899.849362][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 899.849403][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 899.849443][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 899.849466][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 899.849497][ T32] netlink_unicast+0x7bd/0x940 [ 899.849532][ T32] netlink_sendmsg+0x813/0xb40 [ 899.849567][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.849601][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 899.849633][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.849657][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 899.849686][ T32] __sys_sendto+0x408/0x5a0 [ 899.849712][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 899.849774][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 899.849800][ T32] __x64_sys_sendto+0xde/0x100 [ 899.849824][ T32] do_syscall_64+0x166/0x520 [ 899.849851][ T32] ? trace_irq_disable+0x3b/0x140 [ 899.849870][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.849890][ T32] ? clear_bhb_loop+0x70/0xc0 [ 899.849915][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.849935][ T32] RIP: 0033:0x7ff90475e98e [ 899.849952][ T32] RSP: 002b:00007ffcf18b8e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 899.849973][ T32] RAX: ffffffffffffffda RBX: 00005555783cb500 RCX: 00007ff90475e98e [ 899.849987][ T32] RDX: 0000000000000028 RSI: 00007ff905554670 RDI: 0000000000000003 [ 899.850000][ T32] RBP: 0000000000000001 R08: 00007ffcf18b8ed4 R09: 000000000000000c [ 899.850013][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 899.850026][ T32] R13: 0000000000000000 R14: 00007ff905554670 R15: 0000000000000000 [ 899.850059][ T32] [ 899.850076][ T32] [ 899.850076][ T32] Showing all locks held in the system: [ 899.850087][ T32] locks held by kworker/0:1/10: 3, on CPU#0: [ 899.850139][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.850218][ T32] #1: ffffc900000f7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.850273][ T32] #2: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 899.850369][ T32] locks held by kworker/u8:0/12: 2, last CPU#1: [ 899.850396][ T32] #0: ffff888032ac1940 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.850483][ T32] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.850540][ T32] locks held by kworker/u8:1/13: 3, last CPU#1: [ 899.850555][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.850611][ T32] #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.850668][ T32] #2: ffff888030e75258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 899.850789][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 899.850804][ T32] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 899.850860][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 899.850874][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 899.850939][ T32] locks held by kworker/u8:4/59: 4, last CPU#1: [ 899.850954][ T32] #0: ffff888055b3f140 ((wq_completion)krds_cp_wq#2/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.851011][ T32] #1: ffffc9000200fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.851068][ T32] #2: ffff888056d05280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 899.851164][ T32] #3: ffff88804fa16e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 899.851322][ T32] locks held by kworker/u8:7/170: 3, on CPU#1: [ 899.851337][ T32] #0: ffff8880304a7140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.851400][ T32] #1: ffffc90002e97c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.851456][ T32] #2: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 899.851539][ T32] locks held by kworker/u8:9/1026: 4, last CPU#1: [ 899.851554][ T32] #0: ffff888055b3d940 ((wq_completion)krds_cp_wq#2/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.851607][ T32] #1: ffffc9000505fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.851661][ T32] #2: ffff888056d04c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 899.851711][ T32] #3: ffff888078458260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 899.851777][ T32] locks held by kworker/u8:11/4339: 4, last CPU#1: [ 899.851791][ T32] #0: ffff888034420140 ((wq_completion)krds_cp_wq#5/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.851851][ T32] #1: ffffc9000f207c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.851904][ T32] #2: ffff888057610f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 899.851955][ T32] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 899.852033][ T32] locks held by dhcpcd/5278: 2, on CPU#1: [ 899.852047][ T32] #0: ffffffff90231de0 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0 [ 899.852099][ T32] #1: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 899.852157][ T32] locks held by getty/5374: 2, on CPU#0: [ 899.852171][ T32] #0: ffff8880358650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 899.852288][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 899.852339][ T32] locks held by syz-executor/5605: 2, last CPU#1: [ 899.852354][ T32] #0: ffff88803440b6b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 899.852460][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x24/0x550 [ 899.852530][ T32] locks held by kworker/1:4/5622: 3, last CPU#1: [ 899.852545][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.852600][ T32] #1: ffffc90004687c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.852655][ T32] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 899.852735][ T32] locks held by kworker/u8:12/6569: 4, last CPU#1: [ 899.852750][ T32] #0: ffff888055b3e140 ((wq_completion)krds_cp_wq#2/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.852803][ T32] #1: ffffc9000d9e7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.852857][ T32] #2: ffff888056d04f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 899.852904][ T32] #3: ffff888056fdee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 899.852956][ T32] locks held by kworker/u8:13/6570: 2, last CPU#1: [ 899.852970][ T32] #0: ffff88803200d940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.853023][ T32] #1: ffffc9000db0fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.853080][ T32] locks held by kworker/u8:15/8629: 3, on CPU#1: [ 899.853094][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.853148][ T32] #1: ffffc9000db67c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.853201][ T32] #2: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 899.853254][ T32] locks held by kworker/u8:16/8630: 3, last CPU#1: [ 899.853268][ T32] #0: ffff888055b3c140 ((wq_completion)krds_cp_wq#2/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.853321][ T32] #1: ffffc9000db97c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.853384][ T32] #2: ffff888056d04680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 899.853435][ T32] locks held by kworker/u8:20/12510: 4, last CPU#1: [ 899.853449][ T32] #0: ffff888055b3a140 ((wq_completion)krds_cp_wq#2/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.853517][ T32] #1: ffffc900031e7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.853572][ T32] #2: ffff888056d33c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 899.853621][ T32] #3: ffff888056fdaae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 899.853673][ T32] locks held by kworker/u8:21/12511: 4, last CPU#1: [ 899.853688][ T32] #0: ffff888055b3b140 ((wq_completion)krds_cp_wq#2/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.853741][ T32] #1: ffffc90003077c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 899.853795][ T32] #2: ffff888056d04380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 901.718058][ T32] #3: ffff8880b873bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 901.718122][ T32] locks held by kworker/u8:24/12515: 4, last CPU#0: [ 901.718138][ T32] #0: ffff888055b3a940 ((wq_completion)krds_cp_wq#2/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.718192][ T32] #1: ffffc90003027c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.718247][ T32] #2: ffff888056d04080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 901.718297][ T32] #3: ffff888056fde0e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 901.718349][ T32] locks held by kworker/u8:26/12518: 3, last CPU#0: [ 901.718363][ T32] #0: ffff888055b3d140 ((wq_completion)krds_cp_wq#2/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.718417][ T32] #1: ffffc90002fe7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.718470][ T32] #2: ffff888056d04980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 901.718530][ T32] locks held by kworker/u8:27/12519: 4, last CPU#0: [ 901.718544][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.718596][ T32] #1: ffffc90002fd7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 901.718657][ T32] #2: ffffffff902424e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 901.719018][ T32] #3: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 901.719081][ T32] locks held by syz-executor/16397: 1, on CPU#1: [ 901.719095][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 901.719143][ T32] locks held by syz-executor/16408: 1, on CPU#1: [ 901.719157][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719208][ T32] locks held by syz-executor/16409: 1, on CPU#0: [ 901.719222][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719273][ T32] locks held by syz-executor/16412: 1, on CPU#1: [ 901.719287][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719338][ T32] locks held by syz-executor/16420: 1, on CPU#1: [ 901.719351][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719401][ T32] locks held by syz-executor/16440: 1, on CPU#1: [ 901.719415][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719466][ T32] locks held by syz-executor/16448: 1, on CPU#0: [ 901.719480][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719539][ T32] locks held by syz-executor/16449: 1, on CPU#1: [ 901.719553][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719604][ T32] locks held by syz-executor/16456: 1, on CPU#0: [ 901.719618][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719668][ T32] locks held by syz-executor/16462: 1, on CPU#1: [ 901.719682][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719734][ T32] locks held by syz-executor/16471: 1, on CPU#0: [ 901.719747][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719799][ T32] locks held by syz-executor/16479: 1, on CPU#0: [ 901.719812][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719863][ T32] locks held by syz-executor/16483: 1, on CPU#1: [ 901.719876][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719926][ T32] locks held by syz-executor/16485: 1, on CPU#1: [ 901.719940][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.719990][ T32] locks held by syz-executor/16490: 1, on CPU#0: [ 901.720004][ T32] #0: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 901.720057][ T32] [ 901.720063][ T32] ============================================= [ 901.720063][ T32] [ 901.720072][ T32] NMI backtrace for cpu 1 [ 901.720087][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 901.720108][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 901.720120][ T32] Call Trace: [ 901.720131][ T32] [ 901.720141][ T32] dump_stack_lvl+0xe8/0x150 [ 901.720171][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 901.720223][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 901.720263][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 901.720289][ T32] sys_info+0x135/0x170 [ 901.720310][ T32] watchdog+0xfd7/0x1030 [ 901.720351][ T32] ? watchdog+0x1c7/0x1030 [ 901.720377][ T32] kthread+0x38b/0x480 [ 901.720398][ T32] ? __pfx_watchdog+0x10/0x10 [ 901.720415][ T32] ? __pfx_kthread+0x10/0x10 [ 901.720436][ T32] ret_from_fork+0x514/0xb70 [ 901.720459][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 901.720496][ T32] ? __switch_to+0xc89/0x1420 [ 901.720526][ T32] ? __pfx_kthread+0x10/0x10 [ 901.720546][ T32] ret_from_fork_asm+0x1a/0x30 [ 901.720591][ T32] [ 901.720620][ T32] Sending NMI from CPU 1 to CPUs 0: [ 901.720645][ C0] NMI backtrace for cpu 0 [ 901.720660][ C0] CPU: 0 UID: 0 PID: 12510 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(full) [ 901.720691][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 901.720703][ C0] Workqueue: krds_cp_wq#2/7 rds_connect_worker [ 901.720789][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 901.720814][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 26 d4 a5 03 66 0f 1f 44 00 [ 901.720830][ C0] RSP: 0018:ffffc90000007e50 EFLAGS: 00000046 [ 901.720845][ C0] RAX: 000000000000000f RBX: ffff8880b8623c80 RCX: 0000000000000838 [ 901.720859][ C0] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000838 [ 901.720870][ C0] RBP: ffffc90000007f08 R08: 0000000000000100 R09: 0000000000080000 [ 901.720883][ C0] R10: 0000000000000000 R11: ffffffff81754510 R12: ffffffff81754510 [ 901.720895][ C0] R13: 1ffff110170c4799 R14: 0000000000000000 R15: ffff8880b8623ccc [ 901.720908][ C0] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 901.720923][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 901.720936][ C0] CR2: 00007f31a9755000 CR3: 000000007e9d8000 CR4: 00000000003526f0 [ 901.720954][ C0] Call Trace: [ 901.720961][ C0] [ 901.720967][ C0] lapic_next_event+0x11/0x20 [ 901.720995][ C0] clockevents_program_event+0x44e/0x630 [ 901.721021][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 901.721045][ C0] ? tick_program_event+0x8f/0x120 [ 901.721065][ C0] hrtimer_run_softirq+0x255/0x2e0 [ 901.721092][ C0] handle_softirqs+0x226/0x860 [ 901.721116][ C0] ? do_softirq+0x77/0xd0 [ 901.721140][ C0] ? __inet6_bind+0x386/0xf30 [ 901.721161][ C0] do_softirq+0x77/0xd0 [ 901.721182][ C0] [ 901.721188][ C0] [ 901.721194][ C0] __local_bh_enable_ip+0x100/0x140 [ 901.721217][ C0] __inet6_bind+0x386/0xf30 [ 901.721243][ C0] kernel_bind+0x13e/0x1c0 [ 901.721275][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 901.721302][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 901.721324][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 901.721350][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 901.721373][ C0] ? lock_acquire+0x115/0x350 [ 901.721395][ C0] rds_connect_worker+0x1d8/0x290 [ 901.721420][ C0] ? process_scheduled_works+0x97a/0x1630 [ 901.721443][ C0] process_scheduled_works+0xc3d/0x1630 [ 901.721480][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 901.721506][ C0] ? assign_work+0x3cf/0x5d0 [ 901.721530][ C0] worker_thread+0xa47/0xfb0 [ 901.721566][ C0] kthread+0x38b/0x480 [ 901.721584][ C0] ? __pfx_worker_thread+0x10/0x10 [ 901.721605][ C0] ? __pfx_kthread+0x10/0x10 [ 901.721623][ C0] ret_from_fork+0x514/0xb70 [ 901.721640][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 901.721667][ C0] ? __switch_to+0xc89/0x1420 [ 901.721691][ C0] ? __pfx_kthread+0x10/0x10 [ 901.721708][ C0] ret_from_fork_asm+0x1a/0x30 [ 901.721742][ C0] [ 902.514048][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 904.440756][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 904.449896][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 904.460312][ T32] Call Trace: [ 904.463690][ T32] [ 904.467081][ T32] vpanic+0x56d/0xa60 [ 904.471382][ T32] ? __pfx___schedule+0x10/0x10 [ 904.476449][ T32] ? __pfx_vpanic+0x10/0x10 [ 904.481261][ T32] panic+0xc5/0xd0 [ 904.485475][ T32] ? __pfx_panic+0x10/0x10 [ 904.490377][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 904.495885][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 904.501291][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 904.507652][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 904.513836][ T32] watchdog+0x1030/0x1030 [ 904.518637][ T32] ? watchdog+0x1c7/0x1030 [ 904.523104][ T32] kthread+0x38b/0x480 [ 904.527460][ T32] ? __pfx_watchdog+0x10/0x10 [ 904.532602][ T32] ? __pfx_kthread+0x10/0x10 [ 904.537412][ T32] ret_from_fork+0x514/0xb70 [ 904.542051][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 904.548012][ T32] ? __switch_to+0xc89/0x1420 [ 904.553910][ T32] ? __pfx_kthread+0x10/0x10 [ 904.558910][ T32] ret_from_fork_asm+0x1a/0x30 [ 904.564180][ T32] [ 904.568081][ T32] Kernel Offset: disabled [ 904.572687][ T32] Rebooting in 86400 seconds..