last executing test programs: 10m8.267743413s ago: executing program 4 (id=1377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000400)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000819def688009000100626f6e64000000001400028008b3ce5d146329741b00070008000000", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r3, &(0x7f0000000380)}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000426bd7000fbdbdf25420000000e0001006e657464657673e96d3000000d0087006c325f64726f7073000000000500830001000000"], 0x4c}}, 0x40) 10m7.955853596s ago: executing program 4 (id=1382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000340)=@file={0x1}, 0xc) listen(r1, 0x0) ppoll(&(0x7f00000003c0)=[{r1, 0x601}], 0x1, &(0x7f0000000400)={0x0, 0x989680}, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xfe16, 0xa}}}]}]}, 0x84}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200"], 0x44}}, 0x48000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000340), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 10m7.661075267s ago: executing program 4 (id=1386): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000011c0), 0x0, 0x10, &(0x7f0000001200), 0xffa3}, 0x48) r1 = socket(0x1f, 0x5, 0x6) bind$inet6(r1, &(0x7f0000001240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="1860de4a4b0200000200000000000000000000008500000041000000850000002ac239c0"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r2, 0x0, 0x2100, 0x0, &(0x7f0000001440), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket(0x2, 0x80805, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000380)=0x8) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004002}, 0x2000400c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r5, @in6={{0xa, 0xe21, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}, 0x80000000}}}, &(0x7f0000000480)=0xfffffffffffffeeb) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r8, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYRES8=r4, @ANYRESOCT=0x0, @ANYRES32=r3, @ANYRESOCT=r0, @ANYRES32=r5], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000008f000000000000000b00020018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000019500000000000000bd0a060000000000a500f4fffcfffcff180000000600000000000000090007004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 10m7.391232067s ago: executing program 4 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe5}, [@ldst={0x2, 0x0, 0x1, 0x1, 0x6, 0xfffffffffffffff0, 0x1}, @exit]}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}]}}]}, 0x38}}, 0x0) r3 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}], 0x2c) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x44}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', r8, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000500)={'nicvf0\x00'}) 10m6.968786455s ago: executing program 4 (id=1396): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/21, 0x15}], 0x1, 0x13, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) 10m6.876898987s ago: executing program 4 (id=1399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0xfffffff8, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0x1}, 0xc) socket$rxrpc(0x21, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 9m51.796051054s ago: executing program 32 (id=1399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0xfffffff8, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0x1}, 0xc) socket$rxrpc(0x21, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 5.92612571s ago: executing program 0 (id=6395): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x6, 0xc, &(0x7f0000001d40)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4, 0x0, 0x0, 0x81}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000001dc0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r0, 0x0, 0xe, 0x0, &(0x7f0000001e80)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x12) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000140)={0x1100, 0x0, 0x0, 0x10000}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000001740)="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", 0x107}, {&(0x7f00000006c0)="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", 0xef3}], 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000000280)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x3, 0x4, &(0x7f0000002040)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000002080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={r4, 0x0, 0x16, 0x0, &(0x7f0000002140)="c1dfb880cd21d308098e130081007e2288a8849098a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x31) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a00)={0x6, 0x3, 0x0, &(0x7f0000001ac0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd7}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b40)={0x18, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001b00)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000001b40)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000001b80)={0x0, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001bc0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000001c00)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000001c40)={0x0, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)=@getae={0x100, 0x1f, 0x100, 0x70bd25, 0x25dfdbfb, {{@in6=@private2, 0x4d5, 0x2, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x34ff}, [@sa_dir={0x5}, @proto={0x5, 0x19, 0x6c}, @iptfs_pkt_size={0x8, 0x29, 0x8}, @sec_ctx={0x7e, 0x8, {0x7a, 0x8, 0x1, 0x4, 0x72, "d51cc4c797c59339a039d8e79ff8edeb412b24abc015eeba21bcfcf40894710937bae5ed733bfd0bb1dca23cb9271f080a01495416919c9b7337c4ae8f37691e972d672ac12a6a22d729d676a3ca89adf3971b8170cedcbe621aad13795427f385a4bc854aacfe462c4730d616502e6130a3"}}, @address_filter={0x28, 0x1a, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x2, 0x5, 0x9}}]}, 0x100}}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001880)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000015c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 5.521376711s ago: executing program 5 (id=6400): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x2}, 0x2}}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x10, r0}, 0x18) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004001}, 0x64000) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3}, 0x10) close(r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000500)={0x2}, 0x62) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000400)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000480)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f00000004c0)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c010000190001000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff16ffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414bb000000000000000000000000000000006c00000000000000ac1414aa000000000000000000000000ff34000000020000000000000500000000000000fc020000000000000000000000000000000000002b00000000000000fe880000000000000000000000000101ffffffff0500"/245], 0x13c}}, 0x20000000) 5.384351002s ago: executing program 0 (id=6402): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000003c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x7, 0x4, &(0x7f00000007c0)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x3, 0x8000000000000010, 0x8}]}, &(0x7f0000000800)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000580)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r9}, @generic={0xb7, 0x3, 0x0, 0x0, 0x18}, @generic={0x67, 0x3, 0x0, 0x0, 0x20}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0xe, 0x0, &(0x7f00000006c0)="11223344556677889900aabbccdd", 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000440)=@ethtool_cmd={0x45, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x45}}) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) 5.270313659s ago: executing program 5 (id=6403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@initdev, 0x0}, &(0x7f0000000080)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.740565936s ago: executing program 5 (id=6409): r0 = socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) 4.589317017s ago: executing program 1 (id=6410): ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)="4c46f78013919eac50ee8d6f79d61af5e749e8ad1650") r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r2, 0x521, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xd6}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (rerun: 32) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000580)={r9, 0x3}, &(0x7f00000005c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f00000006c0)={r9, 0x1, 0x10, 0x101, 0x6}, &(0x7f0000000700)=0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC=r0, @ANYRES16=r5, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r10, 0x58, &(0x7f0000000600)}, 0x10) 4.308662227s ago: executing program 5 (id=6412): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x4}) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208004500003000000020fc0190781c101401e00003000306907800fa000945f4fff600650005010400030a0101027f0000010ff60e88189de89d313079aff0"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="248000001e00010000000000000020000200000001000007000000000500150000000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) (async) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e23, @broadcast}}) 3.746107859s ago: executing program 2 (id=6415): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x4, @mcast2, 0x1}, @in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x58) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={r0, 0x78, "29851cf3b91a3581cc23c66a8f5aca65bcdc805c47dfd71d77e1a94d95e195ba5fdfe24adf785c0af7b212d0195c18fc87aa45e7d5fd28a528fedb96a4dfa761410b77102bba967f8ed4cb13c8c4af933a9380637284ac0d27b9082196b11848cee5745650a0200fb7dd16f0181d0053cb953016aea61649"}, &(0x7f0000000180)=0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x5, 0x9, 0x5, 0x0, 0xd2, 0x7f, 0x1}, &(0x7f0000000280)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f00000002c0)={r2, 0xffffffffffffffff, 0x800}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x401}}, 0x3, 0x2, 0x8}, &(0x7f0000000400)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000440)={r5, 0xe5}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000480)={r5, 0x10, 0x2f7b48145597b907, 0x4e02, 0x9}, &(0x7f00000004c0)=0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000500)={r6, 0x3}, 0x8) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f0000000540)=""/229, &(0x7f0000000640)=0xe5) r8 = accept(r7, &(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000700)=0x80) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r4) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000007c0)={@loopback, 0x0}, &(0x7f0000000800)=0x14) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r9, 0x300, 0x70bd2c, 0x7fffffff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9221}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000940)={r6, 0x1}, &(0x7f0000000980)=0x8) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f00000009c0)={r0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000a00)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r13, 0x84, 0x18, &(0x7f0000000a40)={r3, 0x8}, 0x8) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x2000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r11, 0xc0709411, &(0x7f0000000ac0)={{0x0, 0x1000, 0x0, 0x81, 0x5, 0x2, 0x400, 0x8, 0x1000, 0xfffffff8, 0x1000, 0x3f75, 0x7, 0x3, 0x8}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r14, 0xc0709411, &(0x7f0000000b80)={{r15, 0x2, 0x7, 0xaff, 0xeb, 0xf78b, 0x2, 0x1, 0x2, 0x51, 0x773, 0x7fff, 0xfffffffffffff000, 0x1, 0xa}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000c40)={0x0, 0x8, 0xc}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000c80)={0x0, r16, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r14, 0xd0009412, &(0x7f0000001c80)={r17, 0x81}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000002c80)={'nat\x00', 0x0, [0xfffffff8, 0x1, 0x3, 0x8, 0x7]}, &(0x7f0000002d00)=0x54) ioctl$F2FS_IOC_MOVE_RANGE(r14, 0xc020f509, &(0x7f0000002d40)={0xffffffffffffffff, 0x0, 0x5, 0x7fff}) setsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r18, 0x84, 0x85, &(0x7f0000002d80)={r12, @in={{0x2, 0x4e23, @remote}}, 0xfc0}, 0x90) r19 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r19, 0x84, 0x20, &(0x7f0000002e40)=0x6, 0x4) 3.436497329s ago: executing program 1 (id=6416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000440)=0x100000001, 0x56) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x1, @loopback, 0x3}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000007c0), 0x3c) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000800)=@gcm_256={{0x304}, "57d08e19a8dd7ab9", "7023281fdec6c209baa0d1f6e55d37cd9b4029076373d35b11c31261fc69b66f", "bc40dd55", "141f862748859918"}, 0x38) (async, rerun: 32) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) close(r1) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001000a00"/104], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000100"/28], 0x48) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2083000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fddbdf254b00200008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff0700004e000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x840) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000003c0), 0x0) close(r8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r8, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x4}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) 2.182001528s ago: executing program 5 (id=6417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0xc) (rerun: 32) bind$netlink(r1, &(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x5005}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00005200060005000100000008000800", @ANYRES64=r8], 0x2c}}, 0x4000000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newqdisc={0x250, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x5}}, @TCA_GRED_STAB={0x104}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0xf7, 0x1, 0x6, 0x0, 0x5, 0x6, 0x7}}, {0x12, 0x2, [0x5, 0x7, 0x0, 0x8, 0xfffe, 0x0, 0x2]}}]}, @TCA_RATE={0x6, 0x5, {0x5, 0x77}}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x98, 0x5, 0x75a4, 0x9, 0x0, 0x2, 0x7, 0x2}}, {0x8, 0x2, [0x4, 0x0]}}, {{0x1c, 0x1, {0x5, 0xa, 0x5, 0xe, 0x2, 0x0, 0x3ff, 0x2}}, {0x8, 0x2, [0xe, 0x3]}}, {{0x1c, 0x1, {0x1, 0xf, 0x9, 0x4, 0x2, 0xf687, 0x6, 0x5}}, {0xe, 0x2, [0x1, 0x48, 0x530, 0x5, 0xe]}}, {{0x1c, 0x1, {0x7, 0x3, 0xca, 0xff, 0x2, 0x6977, 0x200, 0x1}}, {0x6, 0x2, [0x68]}}]}]}, 0x250}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0d}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) (async) r11 = socket$kcm(0x11, 0x0, 0x0) (async) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f0000000640)={&(0x7f0000000680)=@xdp={0x2c, 0x8, r13, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000740)="2703", 0x2}], 0x1}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000100)=0x80000000, 0x4) 2.098689335s ago: executing program 1 (id=6418): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000000)={0x2, 0x1, 0x7, 0xa1cf, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000090a010400000000000000000100000908000a40000000000900020073797a32000000000900010073797a3000000000080005400000001e240011800b000100657874686472000014000280080006400000005021"], 0xa8}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c01000010eec9b14c0189db4300030400000000", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000000)={0x2, 0x1, 0x7, 0xa1cf, 0x5}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000090a010400000000000000000100000908000a40000000000900020073797a32000000000900010073797a3000000000080005400000001e240011800b000100657874686472000014000280080006400000005021"], 0xa8}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c01000010eec9b14c0189db4300030400000000", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 2.047919739s ago: executing program 2 (id=6420): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x2, &(0x7f0000000740)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000001940)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000001c0)={'dvmrp0\x00'}) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.045187519s ago: executing program 0 (id=6421): r0 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, r0, 0x1, 0x70bd27, 0x25dfd3fb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000400)={0x5, 0x1, 0x5, 0x3, 0xd925}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, 0x5, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000980)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f00000009c0)=0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000310009002abd7000000000000400000004001d"], 0x18}}, 0x84) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000500)={0x0, 0xffffffff, 0x0, [0x7f, 0xfffffffffffffff8, 0xf0], [0x869, 0x9, 0x7, 0x3, 0x6, 0x80000000, 0xffffffff, 0x8000, 0x101, 0x1, 0x8000000000000001, 0x10, 0x2, 0x9, 0x6, 0xb, 0x4, 0x81, 0x7, 0x7, 0x80, 0x80000000, 0xa855, 0x81, 0x3, 0x7, 0xffffffffffff35a1, 0x4, 0x0, 0x26, 0x63, 0x39b5, 0x0, 0x0, 0x2, 0x205, 0x5, 0x2, 0x60, 0x80, 0x4, 0x100000000, 0xd7d, 0x7, 0x2, 0x101, 0x5, 0x2, 0x6, 0x4, 0x40, 0xa6, 0x80000001, 0x4, 0x8, 0x5, 0x2, 0xffff, 0x4, 0x8, 0x6, 0x3ff, 0x3, 0x2, 0x81, 0x80, 0x10001, 0x81aa, 0x4, 0x10, 0x7, 0x7fffffff, 0x3, 0x9, 0x1, 0xa5, 0x6, 0x4, 0x101, 0xfffffffffffffffa, 0x99e500000000, 0x8, 0x14, 0x7, 0x401, 0x100000001, 0x9, 0xd0d, 0x656a, 0xa44, 0x0, 0x1, 0x1, 0x2, 0x2685dd81, 0x2, 0x9, 0xfffffffffffffffe, 0x4, 0x4, 0xdac, 0x4, 0x4, 0x6, 0x5, 0x2, 0x1, 0x7, 0x3, 0xb5, 0xf, 0x3, 0x6, 0x20f, 0x5, 0x3, 0x0, 0x1ff, 0x4, 0x7]}) 1.816710053s ago: executing program 2 (id=6422): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/226, 0xe2}], 0x3}, 0x8}], 0x1, 0x2, 0x0) 1.806118218s ago: executing program 3 (id=6423): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYBLOB="086e86bb8771213b2e69b5f907199866fc923f546f1fadb767937b881407d3af4db6f8a8087d4df257785a407daaf876be98d731c4952ef6bb7a68ae0654cb46cee82ef171051f2f9baf0d93c4f52cf451c69242119a139f7c424630678c1d244fb292cb3f1f2bb86f0a44ed4e756d769f0ee92e3d328b02f9be1e521a5051a6eaa2f60c34e54fc25891ea6709fa418cae489c80328c1cb2d2408e21f3abcf4a715c793e3adb98c8ab6b01e9c8ac78141842a0ca0b598915c8743c2cd973fec48ead87863c2ccdeb326856a3d0c1d3601300ee12bbf7", @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYBLOB="086e86bb8771213b2e69b5f907199866fc923f546f1fadb767937b881407d3af4db6f8a8087d4df257785a407daaf876be98d731c4952ef6bb7a68ae0654cb46cee82ef171051f2f9baf0d93c4f52cf451c69242119a139f7c424630678c1d244fb292cb3f1f2bb86f0a44ed4e756d769f0ee92e3d328b02f9be1e521a5051a6eaa2f60c34e54fc25891ea6709fa418cae489c80328c1cb2d2408e21f3abcf4a715c793e3adb98c8ab6b01e9c8ac78141842a0ca0b598915c8743c2cd973fec48ead87863c2ccdeb326856a3d0c1d3601300ee12bbf7", @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) 1.771834247s ago: executing program 1 (id=6424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, r3, 0x25, 0x0, @void}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000ffdbdf252e00000008000300", @ANYRES32=r0, @ANYBLOB="0a0034000202020202020000080026006c"], 0x30}}, 0x0) 1.656707437s ago: executing program 3 (id=6425): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071121f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=0x1, 0x4) 1.56054047s ago: executing program 3 (id=6426): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00010428bd700002dcdf2507000000", @ANYRES32=r1, @ANYBLOB="020000030aa0000000000000000c0000c051a2a1aaf3d61c91cdd33177e040ffae4ae9664f8a20204136af00"/59], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x840) sendmmsg(r0, &(0x7f0000002c80)=[{{&(0x7f0000000180)=@isdn={0x22, 0xfb, 0x9, 0x2b}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000200)="7a12872de267de13e35819de08ed6ded7b25949e507aa3972711b42993f7018be77dea0dcb6bcbb7e0a97fa75777bb7ea3c2d88ab8ad2ce2fee2346c840214a228d9cc2c8f90397fc64c85ff5e762150d4abfa9cd2c9d9181ea867121631672f1819e28bdeb24d1e91d1b60a8bebf42c90b11eeb1589ccc40a5cad251f021f6858427c14f3684bf1ba0bbef39df7d73fa6cfd8db516bc3c719c839a7be3c06322632d5df8d9791550095ae2d4aec2a57031564a32cf4ff5d095358de52d33232eb81cc0d803ac0fd15dd319b0428a476", 0xd0}, {&(0x7f0000000300)="146cc6adca68bcbdc2", 0x9}, {&(0x7f0000000340)="1757229dd85a99d0c2517272ff97cd422dd40250f1954a191e6c4b08e0ca16ffcf2cc6d9bdf31acb03f1e894fc054639a599aef0a9c86f52ad4f3b31182e847064edfb2bd8e3649e06233dd52c37e5b1bf27504e5942e79508ad71f3e260c988cb3d71598db93467ceab0a06ae6db289cfea02244cad23", 0x77}, {&(0x7f00000003c0)="38960006ae2a14248da88e60f2fe6d4b1ebe051d6f9e9186323485d136e8ed7fc601a0ce27a445ee727ed976be6011f14e33df1a2ddef5e49b409f76e945fc8f0a972aa9905f0ce3b832d59f258695eada255b31f87e29129a9bb6602e249089ed55f16f5f12223ec1c62c479c1336ab0b07a1cc0a7946f2a5624f486db2caf2c23cc4c8ffd26cff4cfb5e4ab3cde33d93efa7280a6c935d62207d257e859f01639971f295b4583b00c364e312fe7fdfbeeeaa8abeec1b60f99a0b34235f21fcf5693a63ae92fc457c072dcda8b0515b9a249868b8a591a524aa8b57f3d01991ce20e6192c66e0073623f4b3841fdc18c04cb022c6683b7e8b6a77f7fe86d16f13b6e0426d8303e1713006b38b371e2447179eed739ba539b82bf9080389267fff4752fd1ffa860f7040fff19dedc897fe6e581889a64807c7fc3686a3a15ef326bab7e12ed006cfb0c8cf2faf680c481509f5a1cbe033b8de55059f793ea53e52ed3b8c99279643f4267a69ad4cb6623ff7e1dd648ca3d35caddbb613611d92593126a4ec73d1886fba55b8945e6dd5b1b5dabb9f3f793cd7274cc90d7be6ac773aade42e3d92c63242ad14b6d38534af91e45d1cedb76da0a4ef59e26f07d3389d407dbdf1d79d2d071b46f42074fe2d906d6208244e4e4e9173f37b73190e185dcb4bdfd0fcb443fc052427b5218b03cdb7b45c593be35728b83ecca38c2821a017c62195940257485d91c20277b9040fbb267c131cb2d21bf87606388759556046235ed889a065910f5ea70aad63542c7f37afde22d75dca82e687a59b3a8be1cf22a055e3b96054b66bee714c68fad4286a6bfebb09f4fd75f26b7a9645df1610a4cbdf05c0616cb5f79ee78ac4fd580aab2b2badc9777af8b0519bcb7d63e0c60981a97b155136249a1624536cc5384c5483e1586dc90f303efd90ee776ddb5f6a1bac22326fadc77250a265c1d1d36ca562584f2c62e9a2dc38465c738aa10043703f2b7834cceb8c6c181b13dbd9694bf603e47dff7c5088f8bf12373bf2586d3575249b49addb27c05fb1adfdc085d6b7732d5ed4c02183aac6b6852575c04d68b4953ba6bc0bcb3c4c834a16cb2ad6b23df58e9d637d80f0e4fe6c233e736ab9795899b9ffe9a1275794217eeec8fec8ef7dad4bf0e8022ec09b7b843b46ab9e8fe558fa527d060564be5b863b03958adbd36e24d84cb5f1c0e0601eda1795ed6edf2d39fab1012a899ede5d7d04843f7019bdec5a74b980c466890b4f5529a5b13a1e09766c959e1933caebbcf84fafc9b0421188bdc73c751879267c1a7a258ab10835993edfa70ad90481627c2b4b4e640188744c40b1f6e1b8ae0d5f05cdf99c4453dc524f29efa89c6a6c7e64d0141288261083feee8aaa7445017d55bec88c54375534e4e76694c3ec15aef8acaeb1fcc39677e8a2a70b29e7aaa4b413493960a082d4d8562ffb661609d2dd3a1f2235e09615ed3b441fbbe85649e7c78ada2396b8a971a065e22cfd91a17b8f08c7a62a2df265154165ac7f4a39a8cfc4a4c1aa50150fb7504c9f493cefa305d9723d80b39049aa928cdffb9d01252a1fde2bb781690fb7697ae56fda0193a80a21b2483271b73ab1e3f43fa3a0625cc9117e4ffbb81cc32e27bbb68b870508c78998e88b5df43a3953beacbadf98a493831197c8f4ac3889dd124e4ee78579e093a506ab8ca95a3e50b81a9206480a510fc66d3d6bea273bbbde10b9b88b317bc213bf4b8da3ebf56c0c7c3075000d4c2964be4aaa9a2341f670ad915600371635556368933275d6dd019e4c80c9a4cfe020a98a09c78b0869dcfc5450070d63769b4a425e0d1fb3a38507164d431c66985602cb2382065757fa9451a240eaac08da9fe641a231b39c1d1e56fed6f0b3a411540654b3c5c7ee636c0420f11bfc227882ccd4bfd66dd67214098957579a1519f98c7fcd962ddca3ab2573b46220ad7b8f35015af3b5d69d23e344ba0c01a3dab132d4980eced362e207a26852da775d6f37fde7dd5faaacf7fd362594ee2084ea66926358f995d9f9af4f69747801a7e9e37de56c19e9fced65e4d4f4590dcda0b7adb633f91dad351e1646b9240ffc20e2f7ecae8ec5c62d66e35d3c6b99cc8a2ce02cbd1ebf57c9748025cabe8e3bed7c11e6103bbb1decc70c7c8ae81f6beea1483b3d4eda5f641b77cc1809d06895f6cababe6cc018e95c5a1d00a9a7ca789c9288fcc84f0df1857b1e572eeebe6685ca110cb1cb9cfc12a760087600402fd4cb2908c5768933cc4eaa84a2b067a7cbeef75ad0f0d60d11b9343b545dc3fb56a42befd2d3ec7ce7e6c4777acff5af0f7aba11b5e8c4f9f40c3b3e3c43443338a7a2bfd6e1d32ec45ed3c3d4a8ce08a497ead9747a52ac1caf712df69b21ae8546b43729fff3e8e6a03bff072ba1377ab03df5e5d99077fbd47a8952a4b92953f3344ee6fe59d7eef88ddf150b56ff116ee76717ed5c51d6817210cba35ef7d8febb1ad6497c52b56beb25c6048258e7201b6511dc6b12a90d25b84dd02603e1284970ee4e096cd44d855d1e8e26177a4ba27a8d06f4f16b64821d28cf3ea601e0f1f5794ad1d1a2e78b98c3bc661505407d7d69d5cb3e6786896a8193ad091120ee530321792d5312de773ecc63a8c30740ffe6c715d6b396f37a65c35af1b0937affc4aded2a5d18c697b1f0a7065a64c4de9257db03c92b022a10d1d1c1d292801168b07d169c34f7e84716e22a75dbd8555cf300292c9b4f8767e5fcd45d575db1c7d7e756cc0dcb6e506f1ded82441d220d9b14fd723ef8d51420252db648466ad28884b5ebaf369a37ce33ef2aade6ea2483223c1ca9058e82f0bc89d4aa7db63a79d064f33fd44d87281395f5c0db1ac483407988da00da464aeee9ea4a7914faebd61b6213829dbaf5b90a80c7946359ea3c6e51a842de6aeb2eddc4317f9c973b3c1307b21da72c24f0209eee8f7fbb407837b4ff24f7328f4693f631fe9b3dc09f40bf8c5047f8bd81291af830290e200e4039cf9dc697a9bb05f0fe448ed9452c314d80aefd4ace5850bc6b51e7c0dc9749847a196f3f7b684498e2618c2ea049617ee7833119cf38578ce39f31dd05ad8fbdfd3c6ee88745b7f59ee39ecbe627cd78d720f138ce8cc7c354b22da29ee5f80f014820cb136a7492ae34eff6fa17fbe336b573a50acf35a77159fc53978178c226ee73dd7b026b96cd6dbcccf8b2e79af06dd93751f86121be84f2318d25ec13656dcae9a8d698dca9f7051ab86b271ac4d90805e781699927405eee8b62d2f0dc9cd541741e0dfdb5167b61b2c22b67de8858e9c1eb404cac989789f38d13947ac2e94a8a1cc81f590966c937922ea3a025eafcb5e82eb312970f78a9d3484ee4459e171ec0635264681e78178de28ebe2cbb55bdc136519378d295ce369895d09dd7cc89755a30ae61cb3291ae39301013dc2ba6916e85165fca62fadfb1e7075204c5c6d84a777a36a253563201a29b747b3b4c2f09be369dc966e1bcdb636c5185b592c03d5a3e5477db8fc84211d698fa107319c4d9578dc747d1fde127e661c64476cca2c72882c2acd0ad1eadb90e3589c0a677466e22cab0cc22de82ea78d4be332656b97e704cca18e3f2f9dfd3bd3a069659ddf9cb05a12eb5de65139aee292b1438b2e09212e672414e822676d3a3746349bae39f3bfe83eeded46c6d0b48a64bbfebca62d3105957805269c749115e1f1188fa73cee90ab11b09a47a6b34ea9ed2792c2792fa4fc4355bd082ff93d128412be6c7c209b485de8bd09d97a6839a8567d02f0f0ed1e23e4ab377c9fbbda91348c02d1c0babc963395408456c7239879f83b29c8b013a9e3e374f4bc147f0f242a8a444c362976cd140620b25f651200703c4770e9212095b12699c540de27ca8ab25145372d84dbd2a45d87679b7b2a73ae4bb6791327cc9aa187a957dcd5886665a5fc75a606a1bea28f7bccf789b152a0deeb0d7999bb6a2dcb0a34bfae9aa6cab12eaaf11f3f342ff9fd0a57b290711e9c100b92a99141b863ff8f960bca90bdce5a968eb0375709a544fa5e0f91628a06b33b16b89cf4145a45c41086c7e6fbd936036466be6c034b0f2e8f6fcbb80008d865531cbdfe3ad8052b65438fab98a151d5d21b411f7a5c373b2de26f741622874ccdfedbc1328865991c4e7320067b8039be477b80c9cc2541785c86c5126f7539ed96c035e3e04fb54a1ed9a37932a455e49898383d5676a82aa4257abc61c5c5044252bfdfbb7c8e62da3b380d55946452aa8daf8e93625ca67132a097757a602ac085ed007717e07e73cc8060446b5474219831bafde416ec744d3bc08adb5fa5b03068f656343ecd836d2b3f373cf6cb2fd070728914263885527ffe387a1b3f223ca8c3d1012ea69548094d83093fd9a518076e2cbb5c49b27e42bce89b6568699bd84a62314f51d276839f25038558fed74471604d88297c1eaeebb87ac44293f4bb97d6eb78941d3f58786a1bc3c3397df7ad1d6ab67ee06198dcb70875eaba3db88cb4938d6fc9909977c60ac63aab3592a1e712da451afb294d478125b1c37e08056ae2074290ec3e01f100105b9e2117eca72ef9a271a19c1c98e7a0a93a5590583693993c4d5291e6dd0d0e22ed0f6c895a23b636b9573e290e32b2883755b51c2e4f3cfddb0d4582682026f65e55d661673e4b88f86c07aa39047f0e68151d3667125316109ec7701cc0f4c662c43699b8a59950ce039962a0206e2760e0f71a47d9f25e031004d1337f97a00b04d0f64b389ca9c108f645040c2c57a64fc98f07848821d218e3e8b96e417c1a183e57b63f38d9133527528a328d1f0459050f7b94fd26c422d9601a637be381d824a594e1333b249e5df49865ae6d648b366b9cacf0c249712f57375d97362201475dc1bef19d013c1aa02b01117ed7af59fcf7bb23510d01e6f2834af58c702f7143149961770e48fc36ea56533d199c5beff1c2843d222d4a4d6e7eb9bbea59dffc9f61b17b9bb178b47e29cafcfebe31e4eef34ff4b9e95db9b937f109f3c82f81316fc79974a01fb507a21dcdb68449c6a12c885a529bd53a5e8ee91796904263bd1f4cf74b8b5b3935e1c5472912a3f2064708739c0610ff07047318b5006f9a8c94707390a3b78a4b939a6835e815580e2bb7007651794ab068804dffe80ac7632e610c7f0de97ec41903f1bc831e849bf50ccc363e646e9f80fdbcff84db9e13a1cd8279441111da2592ae102a9bf5b6c387d8833debe10dc84f53756be95326e8f6a3308c3e07f2acb5f0c20a4bb99f1100c41384cb4fa3b05a10561c10ca3a7fe4af6fbbedaf7d578d99812bc7582e9d2d8eb656b16652ae299cbb0139794aa84174aebaf9f155e46973f9a2e684801cd18b1c35294ecf34547632815028f7c9486affd326954aeef9b4880bcd8a6338b25885b2b200b527fdabeede70e0e5aacefa0beeb87e21ff28237d36f878f7464b8a59dd7228364404b246859c0e15cc8dc1caca2f1f31c99cba6e6a1c9dd9c9824b70d6361faa7289e8be0c597c9649a4bf7c8dfba24f3f76e8530d1e71d9c63471ab468e063fb8ef76c5f31cc73a3555cadfdfa1148efda86e9de69f136805ffd0928e15548171d59da2f110d73e436d58e17972fffd2a1ff5934efaf0d7af1ac8cc2474f7663418d018f06201f8c7ea23f93ae7457230cf6e796b1b8c5f2796a8c2492bf812f93b1f61b5d15c3961c8422d045b49dbf10b8e17e16cc6163b6a8af5ce12215eed2a8b8", 0x1000}], 0x4, &(0x7f0000001400)=[{0x58, 0x7d8fea376e329078, 0x6, "fe0b33c159c7e57e42b1a456ce6c5b9e0407b69d4094ee213d4afb0a181f99c57185507384abe62a379d7f117463c16ecdbab128d4d2387eab8b1d74bd291e041f130f36"}, {0x98, 0x114, 0x2, "722c390728dfb5e0da16306fb808b3dc1c830407cf7c30a991ea4075b51c84a3128570d88a560cb8116cd700cf67fb3e804f0089969e5231e32a8e1c0e0deb82902065d6f0d712bb7d88980744a0860e81bda0b85b8492f02e553d3aa5ab433587d780fddae066e1f38bb99d6a59339007a25d5532784fdf6f59420526d9976c67ffdcee35"}, {0xf0, 0x119, 0x401, "5974b39fdbb881fc13a5b7008f559022b4480fa014493bf1ceeab1733d604ce14ddec95d0fa8fc94445cd6772767904aa0119482656b8c7c8da8a014a8643017dda0c859b517d8f3163561752e84c4a80a5101871b4091af4fe86ac0147820b465fa4b563d1b3a4bc33de0c65116124a6677384c0b1724439c0b10ad1cddec740d75b9c40186e96b009e8c9ad814055bf642f1eedd8b8a55808bff603dfea49695bc444712e6801cca1275d7f2eb5f7fcb7469e35780aef9c0473bbfff00071b5bc74c78bab5ae54a23fa56ba69b2e372049817df34df78b794d"}], 0x1e0}}, {{&(0x7f0000001600)=@can={0x1d, r1}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001680)="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", 0xfe}, {&(0x7f0000001780)="e2cbee03219f03e2bb9dcee707db79106f1c3b74d501893d7f1f88a55ad930cf1cc3e9154debbab2a7adc4d9926be2049cebe7186b6632ff851fed8e27589d7df2f50c4768926515feb31ee85d6530154fe63bc5062d52bb66ebc481e71f5d9e8fbe3caac91c59e78a792fbdf8da2e0d29a8e5e802e23604ec387c7396ddf175c29a2f3995fbbaeef81e6f8ce461906e72320a7182ad2f0ab5d1267a5e035d5596b2bf67d8b5acdfb53012aa366bbe05e77e890782e239d1bf94f3056b658a16d969c780e630f74690dcadf2e3dd66b812103f5314db426031599313cd32", 0xde}, {&(0x7f0000001880)="491a0420b6074171eac84f8707b14b32161de815a1eaf980aa0e27f0b21706916311acd0c224ddaef52e16f68938f25f6dca4f402043997777e215faee5c96da81921366c0610909f3886cfdda88298f63ffa9154ef2", 0x56}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="8c802bb86338ffc90d187e056e73ef8398ae7563272f14bb30068f538f063ce5e686e07d08ea4ecbf7b1fc4c303a19516e3d6c64ad87abaa366349696b13f4c2c9033506053b241628415f7a01360764bb7aaa6a56114030d292a3fbd7f4c9f7f7830d96fe3c60047c9a31aaf3e7a1a5a35fb714e307f5a154b0a03a2ce406ff77ca376f0810611b9bf13da988eb7d3722dc3e3ae71468079a9a0de4ddd624e82d53ff9787b51136ffd9437afc4264756290fb6f0012859a4520a3af86334d2a4a5aabe2574b33d2684c3e73a4a97e9042965011e885203635be6e2c9da105bf089c945529c77cb0ae79", 0xea}], 0x5, &(0x7f0000002a80)=[{0x40, 0x115, 0x10001, "0b920dd2ac944a5a47b9c20b3260370191f965e239a8c67c9afe602b7667ecc63e6e040ac265659eead10f523d"}, {0xc8, 0x102, 0x8, "02008c5105a6d9399f5b93b7880945e22958c1c29830f8e36f2485c908ed5bbff72c342fef09d01fc2fe97efb69266b446ff9ea8321e5358741dd2e7238020d55f84fe67ef5c3ec21fa167b6ef6057328588d2a305d8bb5000b1f33ec1c45f3027b8e380a3149b06d3e9bd2e18aecf7212c4392143059d0caecb7f817bb25c79f8c01619f31ca246c443dc426f02b0df8ead3a5e63017c1473f15815f861da2342ddf5378ea726e74efc42f527a90b24bd7bc6900738a3b0"}, {0xc8, 0x0, 0x80, "adf182a08f1bfd6f5384ae6ddd429ef6dec95f81fbd7062de1d14ba694dad52ad58c08468842060958aaa10d4c27712ef5a80e8034180c3776f1ec4565e77f4152183859770b05a29be744cc8c881adc231439661c7b050a62be3525e25e73449571467ea7b0d30275a74096d7e83f23e49768efd2dd3840030563a516fe63bc62c5d746d9845f037062ee5f65075c400106513d2835731bed98f109b2c56ff1ed802ab182f1b3491a5e51b58729335cbfe8bcc82bc447"}], 0x1d0}}], 0x2, 0x8000) 1.497757788s ago: executing program 2 (id=6427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200001e001f00200008b24c000000000000900030000c00000001008c0c00000a0000080026006c0900001e0094000800100500000000000000000000001d0000000004020000000e0000"], 0x70}, 0x1, 0x0, 0x0, 0xf040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a34001280110001006272696467655f736c617665000000001c0005800500010000000000050020000100000005002100a1000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.388150386s ago: executing program 1 (id=6428): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@deltclass={0xfffffffffffffcfe, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0xc, 0xffff}, {0xffe0, 0xffe0}}}, 0x5}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010102}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x54}}, 0x0) sendmmsg(r1, &(0x7f0000000240), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0xe5195671fabb2250}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 1.284451431s ago: executing program 3 (id=6429): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100000000000000000000a38000000080a"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="c80000004200010002000000000000000201000042420000500001"], 0xc8}}, 0x0) 1.284012481s ago: executing program 0 (id=6430): r0 = accept$inet_tcp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="d6e8cf83017988e7ad095b669c4091ea9be3f2e454bd92768e891a221771340a14d90c9e6ae3d0f2f4f66c5c03a7d008049fb236319b70f2cc2ce490e9372ff2b8b76a0f1d257591dfb85bc991fbbbb0f578654603821082199ff0eadf0a94ffcbfe989dadb1b508ba2b9e545732d3b57b9e114ac652416a0b80f68e1a8cbcf3188b1ca4", 0x84}, {&(0x7f0000000200)="8f9cbeb1aeebbcb194697eb75bb137298ac1b460e0f4dc6269b0ca8e1260d6bd", 0x20}, {&(0x7f0000000240)="64409497956e4a4acab84d3af5e6f39bf4442d96b5e56770e86db6b5b730c514168a12460e7f0bb777cd918713c607b71b7733c81acef7ac140a71f66bd67923da", 0x41}], 0x3, 0x1) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0x4) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@acquire={0x128, 0x17, 0x200, 0x70bd24, 0x0, {{@in6=@mcast1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x56befe125658cb64}, {{@in=@rand_addr=0x64010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x2e, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000100000}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38, 0x400, 0xfffffffc}}, 0x128}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0xe8) syz_emit_ethernet(0x39, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, 'Q', "8f4b53", 0xf7, "51358a8f6cde29918aa8fa42086701d04da1bd67510a57a2e51cd81ec7e0af37076611"}}}}}, &(0x7f0000000440)={0x1, 0x4, [0x444, 0x93a, 0xe7e, 0xcd3]}) ioctl$SIOCSIFHWADDR(r4, 0xff05, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1.206392066s ago: executing program 5 (id=6431): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000104000000000000000000"], 0x48) socketpair(0x9, 0x80000, 0x0, &(0x7f0000000240)) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000000000)={'dummy0\x00', @ifru_hwaddr=@broadcast}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x1000, 0x101, 0x88da, 0x9, 0x94, 0xa, 0x8}, 0x9c) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x401}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5f, 0xa8, @random="065451b19e154c2ab75f9847d70f01431d4edcb451f9b6eb82a957157be2070c4a8bf990e662f96703741dcc215f2da566eb38b098e566f1efee204af6e065e94fdf70ab6af4bc58953ad5c8ab8a84ff3cbc140e3a80e9afc78559"}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x13, r0, 0x0) 1.066911662s ago: executing program 3 (id=6432): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000009e000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000200000085000000c5000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xc}, 0x94) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2100000000000000000000000700000000040400", @ANYRES32, @ANYBLOB="00000000000000927415f989621e010000000000d186a51a626b8a5ae4ca", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000400"/28], 0x50) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000005c0)="6f1033f0be359e565983b0bbe09ac61af2471d959eddf26b93cbca53aa2fe12a9e319b8ed6cf726a6237a29c9391d9a6e6e3fe3ff596558c0077bc2ef73cc77c537e041eaa4e3e18083a419da79ba27b069af1fc9b33273528660317afbae528e02858e5c61a08332b40f2756623d50947d5f52bad34f2031410bdf3d94372c18507f2ef7428df95b31340", 0x6}, 0x38) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000380)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xffffffffffffffb0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="06cacdffa3059d00"/20, @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c0002800400180000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000d80)={0x0, @multicast2}, &(0x7f0000000dc0)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000e00)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r7, @ANYBLOB="8000ba060a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001000)={'ip6_vti0\x00', &(0x7f0000000f80)={'syztnl0\x00', 0x0, 0x29, 0xf, 0x7, 0xfffffff9, 0x46, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x80, 0x5, 0x1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r1, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001080)=[0x0], &(0x7f00000010c0)=[0x0], 0x0, 0xb4, &(0x7f0000001100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0x27, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000740)=@newqdisc={0x1b8, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xb, 0x1}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x188, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100000}}, @TCA_GRED_STAB={0x104}, @TCA_GRED_DPS={0x10, 0x3, {0x2, 0xb}}, @TCA_GRED_PARMS={0x38, 0x1, {0x80000000, 0xfffffffc, 0x5, 0xb, 0x5, 0x6, 0xaae0, 0x5, 0xa0a, 0x9, 0xa, 0x1f, 0x14, 0x80, 0x1, 0x10a}}]}}]}, 0x1b8}}, 0x84000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000015c0)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d80)={&(0x7f0000002600)=ANY=[@ANYBLOB='\\\a\x00\x00', @ANYBLOB="2fc564be4573cce4c04023193eb217b9d6ba75a70ba82e20d02b9f7c1e02d8f7fdec77221bda02ed2ff12a77ff53ee37bffa356898f3c1d2f3de83467373844df5f6feb785d4983e6df84c92a3e325734565ea7fa2e3d472e0a6d5c2aaebdddc32c4023912b8bbaf00cbeba49895644f4b92bd407919db4cc7823fe0ac4ccdd97e33b62ce91aa3f7c032d35739fd6e2c9c6cc73065a9ce46cc02a4c4b6b5590b40941506fc307378fdfd1965e8eb341a0c66c463d051", @ANYBLOB="020025bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="2801028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400bb8d000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400070080027f390000fefffe060004000005000103050000000300050800080000020000040900000000028c0406000000ff0f0602ffff000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400d3ee567008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="3001028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000180000008000100", @ANYRES32=r9, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100010008000100", @ANYRES32=0x0, @ANYBLOB="b801028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040081000000080007000000000038000100240001006e6f746966795f70656572735f636f756e749000000000000000000000050003000300000008000400084200003800010024000100616374697665706f727400000000000000000000000000020000000000000b00050003000300000008000400007a4d90aa140000", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400090008af080000000000050609000000020009020500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="0800070000000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400fbffffff08000600", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r7, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="080007000000000044000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000002efe04006163746976656261636b7570000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000008000100", @ANYRES32=r10, @ANYBLOB="80010280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400b8b0000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004007f00000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400faff0c03080000000100050804000000810004060f00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400e511000008000600", @ANYRES32=r13, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000006008000600", @ANYRES32=r14, @ANYBLOB], 0x75c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r15 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r15, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000540)=0x4) (async) write$tun(r1, &(0x7f0000000200)={@void, @void, @x25={0x2, 0xfb, 0xf7, "803ec8f5808ec84d3e9ef666f6ac8cc370ef213cff9e86e14d34db7b41ec6bc6d0feb46a5e0d6d028c5a96a5bf2569a7d24c0183b89fe1e92d7bbc12193e0db4b43ba1fe0177ec3050b0c27acfbfc765c640368213e864efa367c1d0dd7a8ce94b57ee24cf"}}, 0x68) 908.160822ms ago: executing program 2 (id=6433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f6, 0x200, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x20000010) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000380)=0x10) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x9, @loopback, 0x40}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x15, 0x5, &(0x7f00000004c0)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x16}, [@map_fd={0x18, 0x6, 0x1, 0x0, r5}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000340), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x11a, 0x4, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000327bd7000ffdbdf254d0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 853.174283ms ago: executing program 0 (id=6434): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)={0x14, 0x29, 0x1, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002340)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="0100080000ffffffff8ddd00"/24], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r0, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x86dd, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @private=0xa010100}}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468105f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r5, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd608a37f2001c2c00fe8000000000000073cc9918000000bbfe80000000000b0000000000000000aa06000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800005e4cd36bb96bd2b9"], 0x0) r6 = socket$inet6(0xa, 0x4, 0x9282) sendto$inet6(r6, &(0x7f0000000040)="2585e1b9c5961d7bd4429bf002c795b7207843a28c0cbce042caa52f77b8b3aca879fa17b075c762a2523739510dfddc68411d96f95fcd1a4654ccf5333e5f333694fd8577977f2fb9f3dd3658363674a555cf31221d227fb854f45c21fc084edc11ff0f382402f3ec9bcb8be33fcb8caec3536c5583c1d4a6d7ea0a610114b487cf5b9b6e4eee140ad3cc0a2af74b954643b6f52066a5cbe4801c6624722ea32b93b74001e7d2efb5ee02e6248b1e97dc4262ee48cb344dcae79750890fb9964e37f008a5e93042f267b7bf50484f871ef7874d2649b6209af8f8b03516cb99c9d927c74d7b62494c1196a701a9c7bfaadc4c", 0xf3, 0x801, &(0x7f0000000140)={0xa, 0x4e23, 0xda9, @mcast1, 0x9}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000000300)={{0x0, 0x6, 0xfffffffffffffff7, 0x200, 0xe, 0x7, 0x1, 0x7, 0x2, 0xfffffffc, 0xe4e, 0x0, 0x7, 0x6, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000001300)={{r7, 0x4, 0x1, 0xffff, 0x8, 0xfffffffffffffff9, 0x4, 0xd59a, 0x48, 0x81, 0x101, 0x424992c, 0xffffffffffffffff, 0x200, 0x4}}) 532.334983ms ago: executing program 3 (id=6435): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, r3, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x48}, 0x1, 0x0, 0x0, 0x8805}, 0x400400c) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000015c0)=""/259, 0x103}, {&(0x7f0000001700)=""/4123, 0x101b}, {&(0x7f0000002740)=""/128, 0x80}, {&(0x7f00000027c0)=""/4094, 0xffe}, {&(0x7f0000004980)=""/188, 0xbc}, {&(0x7f0000003880)=""/131, 0x83}, {&(0x7f0000003940)=""/4100, 0x1004}, {&(0x7f0000004d00)=""/266, 0x10a}, {&(0x7f0000004a80)=""/142, 0x8e}, {&(0x7f0000004b40)=""/249, 0xf9}, {&(0x7f0000004c40)=""/158, 0x9e}], 0xb}, 0x0) 389.12611ms ago: executing program 0 (id=6436): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="66e22291", @ANYRES8=0x0, @ANYBLOB="010600000000000000003000000008000200", @ANYRES32=r1, @ANYBLOB="05003300707b592ea0dfae6dbd91c412736000ba63e7ee223b8f577ea7196528bceee04a118a2125ccd1634025c484fba21b00c7328b19ffbb50707cf03c368f1e0475b7bfbaef2f8ed112cda924e6d26c59ea12b0a4ab8d7e0edd23005f3d9f76f70f6c72a9732b61ed09844fb372983bb6f050435d1aa2685cfe4c1cda84628f3bfa98ac343dce7d497f4e807fdae001452792049f8a4ce870b985ad7f1863af5bfc6b4f77cfa7db7ca33717d7215febeb2bfc47b4d0b9f0b67692ed498ef6e7100008f8469c972f4b72e2b1d5de"], 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_OBJREF_SET_ID={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x91) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) 315.674213ms ago: executing program 2 (id=6437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8115}, 0x200000c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaeaaffffffffff74ab00450001280000000000019078ac1e0001ffffffff0e0090787fff01fbfffffff30054271e"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='.', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x8006, 0x1, [0x0]}, 0xa) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r9, &(0x7f00000001c0)={0x24, @long}, 0x8) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r9], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 0s ago: executing program 1 (id=6438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0xd860}, [@IFLA_LINKINFO={0x3f, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0xfffffffc}]}}}]}, 0x3c}}, 0x20004801) kernel console output (not intermixed with test programs): 77][T23808] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 630.584108][T23808] lo speed is unknown, defaulting to 1000 [ 630.584134][T23808] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 630.625360][T26356] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.625396][T26356] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.625422][T26356] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 37593 - 0 [ 630.625446][T26356] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 630.703050][T26384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5205'. [ 630.817458][T26356] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.817495][T26356] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.817521][T26356] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 37593 - 0 [ 630.817547][T26356] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 630.865607][T26394] xt_hashlimit: size too large, truncated to 1048576 [ 630.896718][T26383] netlink: 'syz.5.5205': attribute type 3 has an invalid length. [ 630.926158][T26396] bond0: Error: CAN devices cannot be enslaved [ 630.990454][T24587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.994779][T26393] xt_hashlimit: size too large, truncated to 1048576 [ 631.072697][T26393] netlink: 'syz.2.5207': attribute type 1 has an invalid length. [ 631.072719][T26393] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5207'. [ 631.335094][T26406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5209'. [ 631.457034][T24876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.457067][T24876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 631.457090][T24876] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 37593 - 0 [ 631.457113][T24876] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 631.473971][T24904] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.474003][T24904] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 631.474025][T24904] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 37593 - 0 [ 631.479267][T24904] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 631.549200][T24904] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.549234][T24904] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 631.549258][T24904] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 37593 - 0 [ 631.549281][T24904] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 631.637042][T24900] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.637078][T24900] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 631.637109][T24900] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 37593 - 0 [ 631.637131][T24900] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 631.813551][T26429] xt_addrtype: ipv6 does not support BROADCAST matching [ 631.862341][T26435] netlink: 'syz.2.5217': attribute type 2 has an invalid length. [ 632.018766][T26448] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5221'. [ 632.027594][T24587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.156421][T26453] bridge5: entered allmulticast mode [ 632.170239][T26456] netlink: 'syz.0.5225': attribute type 21 has an invalid length. [ 632.170337][T26456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5225'. [ 632.198953][T24899] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.287862][T26462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5228'. [ 632.298344][T26462] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5228'. [ 632.335729][T26465] netlink: 'syz.1.5230': attribute type 1 has an invalid length. [ 632.476360][T26465] 8021q: adding VLAN 0 to HW filter on device bond11 [ 632.521922][T26468] bond11: (slave veth7): Enslaving as a backup interface with a down link [ 632.556463][T26479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5231'. [ 632.663775][T26473] ip_tables: iptables: counters copy to user failed while replacing table [ 632.730957][T26478] Cannot find add_set index 65532 as target [ 633.067860][T17174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.282514][T26505] xt_cgroup: no path or classid specified [ 633.467096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.031756][T24899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.109404][T24587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.272027][T26559] netlink: 'syz.5.5250': attribute type 1 has an invalid length. [ 635.153202][T24593] net_ratelimit: 1 callbacks suppressed [ 635.153223][T24593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.312217][T24627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.187219][T24593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.188457][ T5297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 636.400038][T26576] netlink: 'syz.5.5254': attribute type 1 has an invalid length. [ 636.421111][T26577] __nla_validate_parse: 2 callbacks suppressed [ 636.421130][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5256'. [ 636.468501][T26577] hsr_slave_0: left promiscuous mode [ 636.469787][T26577] hsr_slave_1: left promiscuous mode [ 636.531927][T26573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.532224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.571187][T26579] bond0: (slave bridge1): making interface the new active one [ 636.571847][T26579] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 636.613953][T26585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.614164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.632327][T26586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.724923][T26589] sctp: [Deprecated]: syz.2.5259 (pid 26589) Use of int in maxseg socket option. [ 636.724923][T26589] Use struct sctp_assoc_value instead [ 636.871710][T26597] syzkaller0: entered promiscuous mode [ 636.871733][T26597] syzkaller0: entered allmulticast mode [ 636.872862][T26595] xt_NFQUEUE: number of total queues is 0 [ 636.882265][T26594] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5260'. [ 636.946984][T26609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5263'. [ 637.006385][T26609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.006501][T26609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.022918][T26609] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5263'. [ 637.194384][T26618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5265'. [ 637.240295][T26619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5265'. [ 637.763701][T26649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5272'. [ 637.805099][T26654] netlink: 'syz.0.5274': attribute type 1 has an invalid length. [ 638.315050][T26679] netlink: 'syz.1.5282': attribute type 1 has an invalid length. [ 638.361096][T26679] bond12: entered promiscuous mode [ 638.361606][T26679] 8021q: adding VLAN 0 to HW filter on device bond12 [ 638.751141][T26693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5286'. [ 638.826189][T26693] bond2: entered allmulticast mode [ 638.848261][T26695] batadv0: entered promiscuous mode [ 638.848445][T26695] macsec2: entered promiscuous mode [ 638.849829][T26695] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 638.853192][T26695] batadv0: left promiscuous mode [ 639.218520][T26734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5290'. [ 639.247014][T26734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5290'. [ 639.452252][T26770] netlink: 'syz.3.5293': attribute type 1 has an invalid length. [ 639.453118][T26774] netlink: 'syz.3.5293': attribute type 1 has an invalid length. [ 639.660847][T26803] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 639.754608][T26787] bond6: (slave geneve3): making interface the new active one [ 639.771716][T26787] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 639.844153][T26794] bridge0: port 1(batadv0) entered blocking state [ 639.844267][T26794] bridge0: port 1(batadv0) entered disabled state [ 639.844416][T26794] batadv0: entered allmulticast mode [ 639.871429][T26794] batadv0: entered promiscuous mode [ 639.911902][T26796] 8021q: adding VLAN 0 to HW filter on device bond6 [ 639.912672][T24902] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 639.913651][T24902] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 639.913691][T24902] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 640.071663][T24876] bridge_slave_1: left allmulticast mode [ 640.071692][T24876] bridge_slave_1: left promiscuous mode [ 640.071899][T24876] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.128523][T24876] bridge_slave_0: left allmulticast mode [ 640.132019][T24876] bridge_slave_0: left promiscuous mode [ 640.132235][T24876] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.309684][ T5922] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 640.309702][ T5922] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 640.350580][T24587] net_ratelimit: 62 callbacks suppressed [ 640.350601][T24587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.353860][T24876] dvmrp0: left allmulticast mode [ 640.522050][T23807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.714531][T24876] ipvtap0: left allmulticast mode [ 640.715275][T24876] dvmrp8: left allmulticast mode [ 640.733608][T24876] batman_adv: batadv0: Interface deactivated: gretap2 [ 640.900922][T24904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.987095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.389191][T24587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.549390][T24876] bond3 (unregistering): (slave ip6gre2): Releasing backup interface [ 641.549418][T24876] ip6gre2 (unregistering): left promiscuous mode [ 641.780190][T24876] batman_adv: batadv0: Removing interface: gretap2 [ 642.018713][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.026748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.105537][T24876] bond6 (unregistering): (slave bridge4): Releasing active interface [ 642.139415][T24876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.142593][T24876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.144373][T24876] bond0 (unregistering): (slave team0): Releasing backup interface [ 642.145360][T24876] bond0 (unregistering): Released all slaves [ 642.153756][T24876] bond1 (unregistering): Released all slaves [ 642.167242][T24876] bond2 (unregistering): Released all slaves [ 642.182915][T24876] bond3 (unregistering): Released all slaves [ 642.206408][T24876] bond4 (unregistering): Released all slaves [ 642.220887][T24876] bond5 (unregistering): Released all slaves [ 642.229616][T24876] bond6 (unregistering): Released all slaves [ 642.246000][T24876] bond7 (unregistering): (slave bond8): Releasing backup interface [ 642.254643][T24876] bond7 (unregistering): Released all slaves [ 642.269665][T24876] bond8 (unregistering): Released all slaves [ 642.289084][T24876] bond9 (unregistering): (slave veth5): Releasing backup interface [ 642.291349][T24876] bond9 (unregistering): Released all slaves [ 642.304387][T24876] bond10 (unregistering): Released all slaves [ 642.437946][T24587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.476476][T24876] bond7 (unregistering): (slave gretap3): Releasing backup interface [ 642.499970][T24876] bond6 (unregistering): (slave gretap2): Releasing active interface [ 642.683690][T24876] bond0 (unregistering): Released all slaves [ 642.690541][T24876] bond1 (unregistering): Released all slaves [ 642.706122][T24876] bond2 (unregistering): Released all slaves [ 642.721588][T24876] bond3 (unregistering): Released all slaves [ 642.732039][T24876] bond4 (unregistering): Released all slaves [ 642.745479][T24876] bond5 (unregistering): Released all slaves [ 642.763093][T24876] bond6 (unregistering): Released all slaves [ 642.774012][T24876] bond7 (unregistering): Released all slaves [ 642.790832][T24876] bond8 (unregistering): Released all slaves [ 642.806916][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.815960][T26844] syz_tun: entered allmulticast mode [ 642.826510][T26826] syz_tun: left allmulticast mode [ 642.838499][T24627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.838772][T24900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 643.138723][T26872] netlink: 'syz.2.5305': attribute type 15 has an invalid length. [ 643.138745][T26872] __nla_validate_parse: 63 callbacks suppressed [ 643.138756][T26872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5305'. [ 643.202004][T26872] netlink: 'syz.2.5305': attribute type 15 has an invalid length. [ 643.202024][T26872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5305'. [ 643.207934][T24902] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 643.208070][T24902] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 643.208102][T24902] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 643.396089][T24876] !: left promiscuous mode [ 643.465421][T24876] : left promiscuous mode [ 643.549410][T24876] tipc: Disabling bearer [ 643.549541][T24876] tipc: Left network mode [ 643.581542][T24876] tipc: Disabling bearer [ 643.584394][T24876] tipc: Left network mode [ 643.598139][T26892] syzkaller0: MTU not usable for tipc bearer [ 643.598234][T26892] tipc: Enabling of bearer rejected, failed to enable media [ 643.726275][T26910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5316'. [ 644.090174][T26924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5319'. [ 644.180665][T26924] vlan1: entered promiscuous mode [ 644.180688][T26924] bond0: entered promiscuous mode [ 644.180702][T26924] bond6: entered promiscuous mode [ 644.273812][T26925] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5320'. [ 644.409990][T26938] sctp: [Deprecated]: syz.2.5324 (pid 26938) Use of int in max_burst socket option. [ 644.409990][T26938] Use struct sctp_assoc_value instead [ 644.748453][T26973] SET target dimension over the limit! [ 645.132248][T26990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5329'. [ 645.240070][T26998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5333'. [ 645.240103][T26998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5333'. [ 645.345309][T27002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5336'. [ 645.345344][T27002] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5336'. [ 645.550610][T24593] net_ratelimit: 23 callbacks suppressed [ 645.550638][T24593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.551313][ T2431] block nbd2: Possible stuck request ffff8880278b5080: control (read@0,4096B). Runtime 120 seconds [ 645.556336][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.782831][T27009] netlink: 'syz.2.5337': attribute type 9 has an invalid length. [ 646.026828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.107316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.418791][T15818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.588774][T24593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.995824][T27068] IPv6: NLM_F_CREATE should be specified when creating new route [ 647.066854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.476967][T24876] hsr_slave_0: left promiscuous mode [ 647.479992][T24876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.480016][T24876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.481427][T24876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.481444][T24876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.502565][T24876] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 647.502586][T24876] batman_adv: batadv0: Removing interface: syzkaller0 [ 647.542736][T15818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.557955][T24876] veth1_vlan: left promiscuous mode [ 647.558040][T24876] veth0_vlan: left promiscuous mode [ 647.560928][T24876] veth1_macvtap: left promiscuous mode [ 647.627197][T17174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.267041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.355472][T24876] team0 (unregistering): Port device team_slave_1 removed [ 648.382625][T24876] team0 (unregistering): Port device team_slave_0 removed [ 649.060019][T27034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 649.355880][T27095] __nla_validate_parse: 6 callbacks suppressed [ 649.355899][T27095] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5352'. [ 649.766456][T27116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5356'. [ 649.773759][T27116] netlink: 'syz.5.5356': attribute type 1 has an invalid length. [ 649.773779][T27116] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5356'. [ 650.360048][T27138] vlan0: entered allmulticast mode [ 650.360070][T27138] bond0: entered allmulticast mode [ 650.408521][T24876] IPVS: stop unused estimator thread 0... [ 650.414962][T24876] IPVS: stop unused estimator thread 0... [ 650.596363][T15817] net_ratelimit: 7 callbacks suppressed [ 650.596383][T15817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.667731][T24876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.747560][T17174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.890716][T15817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.066736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.418566][T27178] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5371'. [ 651.462155][T27183] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5373'. [ 651.489528][T27186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.489675][T27186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.505348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.505443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.507967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.962144][T27205] syzkaller0: entered promiscuous mode [ 651.962167][T27205] syzkaller0: entered allmulticast mode [ 652.303110][T27215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5380'. [ 652.303165][T27215] block nbd3: Unsupported socket: should be TCP or UNIX. [ 653.954665][T27306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5400'. [ 654.320713][T27319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5403'. [ 654.592807][T27325] Bluetooth: hci0: unsupported parameter 5134 [ 654.592832][T27325] Bluetooth: hci0: unsupported parameter 8192 [ 654.592845][T27325] Bluetooth: hci0: unsupported parameter 5134 [ 654.592857][T27325] Bluetooth: hci0: unsupported parameter 8192 [ 654.972792][T27338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5407'. [ 654.972816][T27338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5407'. [ 655.003142][T27338] bond3: (slave bond0): Enslaving as an active interface with a down link [ 655.013089][T27338] netlink: 'syz.1.5407': attribute type 4 has an invalid length. [ 655.013110][T27338] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5407'. [ 655.158452][T27342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5409'. [ 655.635604][T24900] net_ratelimit: 18 callbacks suppressed [ 655.635624][T24900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.694452][T27361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5413'. [ 655.694954][T27363] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5413'. [ 655.761144][T27365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.944586][T27361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5413'. [ 655.956602][T24587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.106823][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.266252][T27377] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 656.430428][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.431009][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.616203][T27394] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 656.664323][T27391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5418'. [ 656.701338][T27397] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5419'. [ 656.701368][T27397] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 656.854966][T27404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5420'. [ 656.990073][T24593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.360299][T27417] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 657.558022][ T30] audit: type=1107 audit(1794306724.857:9): pid=27423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='DX®4—”L'źÓNÉmŸÓÀÉïÙ0ØŒD n\OÉ=„óð±ÂÜ êwe%ŸƒŸÁÙ`_—¨‹Èâ’ÕÍ~ê¿ [ 657.558022][ T30] )ïKí4OGÌc³}`QÓ©¸u¤pØD··ìÞµ×5WF~›5¡Fò…P’‹dêªêOÌ7ô' [ 657.852283][T27439] netlink: 'syz.2.5428': attribute type 3 has an invalid length. [ 659.067243][T27484] tipc: MTU too low for tipc bearer [ 659.118433][T27491] xt_hashlimit: size too large, truncated to 1048576 [ 659.118705][T27491] xt_hashlimit: max too large, truncated to 1048576 [ 659.118832][T27491] xt_hashlimit: invalid rate [ 660.121539][T27520] __nla_validate_parse: 8 callbacks suppressed [ 660.121560][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5447'. [ 660.839072][T24903] net_ratelimit: 16 callbacks suppressed [ 660.839092][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.908457][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.146741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.150650][T24583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.276701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.276782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.276957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.277103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.664378][T27563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5454'. [ 661.787299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.942677][T24904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.978731][T27594] x_tables: duplicate underflow at hook 3 [ 662.023598][T27591] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5455'. [ 662.082969][T27597] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5458'. [ 662.145875][T27597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5458'. [ 662.145901][T27597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5458'. [ 662.371286][T27606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5461'. [ 662.371312][T27606] netlink: 'syz.3.5461': attribute type 3 has an invalid length. [ 662.541686][T27614] netlink: 'syz.2.5463': attribute type 1 has an invalid length. [ 662.542636][T27615] netlink: 'syz.2.5463': attribute type 1 has an invalid length. [ 663.162554][T27630] netlink: 'syz.0.5467': attribute type 83 has an invalid length. [ 663.309127][T27638] netlink: 'syz.1.5468': attribute type 1 has an invalid length. [ 663.334181][T27636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5468'. [ 663.362848][T27643] xt_hashlimit: overflow, try lower: 3/0 [ 663.383315][T27643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5469'. [ 663.394396][T27638] 8021q: adding VLAN 0 to HW filter on device bond13 [ 663.560925][T27647] netlink: 'syz.0.5471': attribute type 7 has an invalid length. [ 663.861663][T27660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5475'. [ 663.950200][T27659] vlan1: entered allmulticast mode [ 664.203665][T27666] block nbd3: server does not support multiple connections per device. [ 664.204012][T27666] block nbd3: shutting down sockets [ 664.219880][T27670] gretap0: entered promiscuous mode [ 664.566411][T27679] geneve2: entered promiscuous mode [ 664.574210][T27679] geneve2: entered allmulticast mode [ 664.597219][T15817] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 664.597279][T15817] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 664.597312][T15817] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 665.141052][T27690] __nla_validate_parse: 27 callbacks suppressed [ 665.141072][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'. [ 665.182727][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'. [ 665.203423][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'. [ 665.206998][T27711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5487'. [ 665.217413][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'. [ 665.230114][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'. [ 665.263293][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'. [ 665.276265][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'. [ 665.291348][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'. [ 665.305990][T27690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'. [ 665.429275][T27713] bond12: invalid ARP target 0.0.0.0 specified for addition [ 665.429397][T27713] bond12: option arp_ip_target: invalid value (0) [ 665.454896][T27713] bond12 (unregistering): Released all slaves [ 666.266768][ C1] net_ratelimit: 18 callbacks suppressed [ 666.266808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.341674][T15817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.360380][T27749] netlink: 'syz.2.5495': attribute type 1 has an invalid length. [ 666.500647][T27749] bond10: entered promiscuous mode [ 666.504125][T27749] 8021q: adding VLAN 0 to HW filter on device bond10 [ 666.615740][T24584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.621200][T27760] netlink: 'syz.1.5498': attribute type 39 has an invalid length. [ 666.634746][T27751] bond10: (slave bridge8): making interface the new active one [ 666.634772][T27751] bridge8: entered promiscuous mode [ 666.644267][T27751] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 666.668696][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.080974][T27771] ip_tables: iptables: counters copy to user failed while replacing table [ 667.484363][T27767] syzkaller1: entered promiscuous mode [ 667.484386][T27767] syzkaller1: entered allmulticast mode [ 667.657706][T24583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.748850][T27795] tunl0: entered promiscuous mode [ 667.755977][T27795] netlink: 'syz.5.5506': attribute type 3 has an invalid length. [ 667.984442][T24900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.278660][T27812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 668.570190][T24904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.609713][T27827] netlink: 'syz.0.5515': attribute type 11 has an invalid length. [ 668.669169][T17174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.375807][T27863] netlink: 'syz.2.5524': attribute type 11 has an invalid length. [ 669.922929][T27892] netlink: 'syz.5.5536': attribute type 12 has an invalid length. [ 669.938083][T27892] netlink: 'syz.5.5536': attribute type 4 has an invalid length. [ 669.997783][T27902] netlink: 'syz.5.5536': attribute type 12 has an invalid length. [ 670.015240][T27901] netlink: 'syz.5.5536': attribute type 4 has an invalid length. [ 670.301165][T27919] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 2, id = 0 [ 670.314288][T27915] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 670.354130][T27915] netlink: 'syz.1.5542': attribute type 21 has an invalid length. [ 670.354157][T27915] IPv6: NLM_F_CREATE should be specified when creating new route [ 670.354243][T27915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 670.354252][T27915] IPv6: NLM_F_CREATE should be set when creating new route [ 670.354317][T27915] IPv6: NLM_F_CREATE should be set when creating new route [ 670.354340][T27915] IPv6: NLM_F_CREATE should be set when creating new route [ 670.445025][T27925] __nla_validate_parse: 33 callbacks suppressed [ 670.445045][T27925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5543'. [ 670.482275][T27925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5543'. [ 671.419540][T27955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5550'. [ 671.419566][T27955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5550'. [ 671.641664][T27969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 671.728573][T27969] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.734742][T27969] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.790528][T24904] net_ratelimit: 10 callbacks suppressed [ 671.790548][T24904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.820914][T24583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.821461][T27971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5553'. [ 671.821488][T27971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5553'. [ 671.821520][T27971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5553'. [ 671.862890][T27940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5546'. [ 671.885745][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.101705][T27979] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5554'. [ 672.266976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.856184][T24592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.009272][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.085445][T24904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.093707][T28016] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5562'. [ 673.386972][ T53] Bluetooth: hci0: command tx timeout [ 673.881559][T17174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.989023][T28038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.990232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.274909][T28083] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 675.305356][T28083] bond3 (unregistering): Released all slaves [ 675.632579][ T2431] block nbd2: Possible stuck request ffff8880278b5080: control (read@0,4096B). Runtime 150 seconds [ 675.700318][T28095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5578'. [ 675.700560][T28096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5578'. [ 675.885626][T28105] netlink: 'syz.2.5583': attribute type 2 has an invalid length. [ 675.917284][T28100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5580'. [ 676.216908][T28119] sctp: [Deprecated]: syz.5.5586 (pid 28119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 676.216908][T28119] Use struct sctp_sack_info instead [ 676.245159][T28119] Bluetooth: hci0: unsupported parameter 5135 [ 676.245178][T28119] Bluetooth: hci0: unsupported parameter 8192 [ 676.245190][T28119] Bluetooth: hci0: unsupported parameter 5135 [ 676.245201][T28119] Bluetooth: hci0: unsupported parameter 8192 [ 676.289188][T28119] sctp: [Deprecated]: syz.5.5586 (pid 28119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 676.289188][T28119] Use struct sctp_sack_info instead [ 676.290116][T28130] Bluetooth: hci0: unsupported parameter 5135 [ 676.290134][T28130] Bluetooth: hci0: unsupported parameter 8192 [ 676.290147][T28130] Bluetooth: hci0: unsupported parameter 5135 [ 676.290159][T28130] Bluetooth: hci0: unsupported parameter 8192 [ 676.350816][T28133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5589'. [ 676.384570][T28133] 8021q: adding VLAN 0 to HW filter on device team1 [ 676.449136][T28123] bond12: option fail_over_mac: invalid value (16) [ 676.477140][T28123] bond12 (unregistering): Released all slaves [ 676.639477][T28141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5591'. [ 676.825957][T28144] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5590'. [ 676.907450][T15817] net_ratelimit: 15 callbacks suppressed [ 676.907473][T15817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.907688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.039042][T17174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.401915][T28165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5596'. [ 677.466805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.497492][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.526906][T28156] erspan0: entered promiscuous mode [ 677.545023][T28156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5593'. [ 677.564465][T15817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.110716][T28198] bond3: (slave bond0): Releasing active interface [ 678.130884][T24584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.327998][T28211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5610'. [ 678.598277][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.637862][T28226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5618'. [ 678.662358][T28232] netlink: 'syz.1.5616': attribute type 5 has an invalid length. [ 678.734738][T28237] netlink: 'syz.5.5620': attribute type 8 has an invalid length. [ 678.856058][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.150918][T17174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.305887][T28256] x_tables: duplicate underflow at hook 3 [ 679.923571][T28296] netlink: 'syz.2.5637': attribute type 2 has an invalid length. [ 679.923592][T28296] netlink: 'syz.2.5637': attribute type 8 has an invalid length. [ 680.144102][T28304] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 680.184164][T28290] macvtap0: entered promiscuous mode [ 680.189542][T28290] macvtap0: entered allmulticast mode [ 680.189561][T28290] vlan0: entered allmulticast mode [ 680.189574][T28290] veth0_vlan: entered allmulticast mode [ 680.901501][T28334] netlink: 'syz.2.5653': attribute type 61 has an invalid length. [ 681.081263][T28337] netlink: 'syz.3.5654': attribute type 10 has an invalid length. [ 681.917602][T15817] net_ratelimit: 16 callbacks suppressed [ 681.917622][T15817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.982695][T28371] syzkaller0: entered promiscuous mode [ 681.982720][T28371] syzkaller0: entered allmulticast mode [ 682.029864][T24904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.030088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.268071][T17174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.270032][T28379] netlink: 'syz.2.5662': attribute type 4 has an invalid length. [ 682.270051][T28379] __nla_validate_parse: 8 callbacks suppressed [ 682.270062][T28379] netlink: 5620 bytes leftover after parsing attributes in process `syz.2.5662'. [ 682.439585][T28390] netlink: 'syz.0.5665': attribute type 1 has an invalid length. [ 682.516933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.691944][T28390] 8021q: adding VLAN 0 to HW filter on device bond12 [ 682.734504][T28400] netlink: 'syz.0.5665': attribute type 10 has an invalid length. [ 682.734528][T28400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5665'. [ 682.767872][T28400] ªªªªª»: entered promiscuous mode [ 682.824156][T28392] bond12: (slave veth5): Enslaving as a backup interface with a down link [ 683.054761][T24904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.078111][T28413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5669'. [ 683.078141][T28413] openvswitch: netlink: EtherType 520 is less than min 600 [ 683.304604][T28425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5673'. [ 683.304631][T28425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5673'. [ 683.316668][T24592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.329986][T24899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.593755][T28435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.893748][T28445] vlan2: entered promiscuous mode [ 683.893771][T28445] bridge0: entered promiscuous mode [ 683.893941][T28445] vlan2: entered allmulticast mode [ 683.893955][T28445] bridge0: entered allmulticast mode [ 683.914698][T28447] geneve0: entered allmulticast mode [ 684.050664][T28451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 684.513763][T28481] netlink: 'syz.2.5687': attribute type 2 has an invalid length. [ 684.513799][T28481] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5687'. [ 684.998242][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5691'. [ 685.032204][T28489] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.032242][T28489] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.111638][T28496] veth3: entered allmulticast mode [ 685.387354][ T4953] Bluetooth: hci0: command 0x0405 tx timeout [ 685.415557][T28489] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.415596][T28489] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.462263][T28521] netlink: 'syz.0.5696': attribute type 21 has an invalid length. [ 685.462319][T28521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5696'. [ 685.477714][T28511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5693'. [ 685.623567][T28489] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.623604][T28489] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.714425][T28525] xt_l2tp: missing protocol rule (udp|l2tpip) [ 685.733430][T28525] x_tables: duplicate underflow at hook 1 [ 685.852186][T28489] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.852223][T28489] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.286037][T28543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5703'. [ 686.473776][ T4953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 686.489939][ T4953] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 686.493766][ T4953] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 686.517434][ T4953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 686.520036][ T4953] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 687.026123][T28564] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 687.147766][ T3798] net_ratelimit: 7 callbacks suppressed [ 687.147789][ T3798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.148012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.507123][T28545] rxe_eth0 speed is unknown, defaulting to 1000 [ 687.514305][T28586] af_packet: packet size is too long (35070 > 1300) [ 687.546859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.548609][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.779627][T28599] batman_adv: batadv0: Adding interface: syz_tun [ 687.779646][T28599] batman_adv: batadv0: The MTU of interface syz_tun is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1314 would solve the problem. [ 687.779675][T28599] batman_adv: batadv0: Interface activated: syz_tun [ 687.921096][T28545] lo speed is unknown, defaulting to 1000 [ 688.213237][T28605] __nla_validate_parse: 2 callbacks suppressed [ 688.213258][T28605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5717'. [ 688.596844][ T4953] Bluetooth: hci5: command tx timeout [ 688.731318][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.921384][T28632] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5722'. [ 688.969938][T28631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.023952][T28545] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.024137][T28545] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.025787][T28545] bridge_slave_0: entered allmulticast mode [ 689.050592][T28545] bridge_slave_0: entered promiscuous mode [ 689.065265][T28545] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.065372][T28545] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.076223][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.092864][T28545] bridge_slave_1: entered allmulticast mode [ 689.107354][T28545] bridge_slave_1: entered promiscuous mode [ 689.281977][T28545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.318100][T28545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.513613][T28545] team0: Port device team_slave_0 added [ 689.527564][T28545] team0: Port device team_slave_1 added [ 689.663770][T28545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.663787][T28545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.663813][T28545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.723143][T28545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.723160][T28545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.723202][T28545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.733501][T15810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.871977][T15810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.914652][T28545] hsr_slave_0: entered promiscuous mode [ 689.915694][T28545] hsr_slave_1: entered promiscuous mode [ 689.916428][T28545] debugfs: 'hsr0' already exists in 'hsr' [ 689.916443][T28545] Cannot create hsr debugfs directory [ 690.264520][T28679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5730'. [ 690.389846][T28679] sit0: entered promiscuous mode [ 690.417104][T28679] netlink: 'syz.5.5730': attribute type 1 has an invalid length. [ 690.417123][T28679] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5730'. [ 690.527127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.667056][ T4953] Bluetooth: hci5: command tx timeout [ 690.781052][T28545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.781087][T28545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 690.858133][T28702] netlink: 364 bytes leftover after parsing attributes in process `syz.3.5735'. [ 690.858172][T28702] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.5735'. [ 690.903474][T28699] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5735'. [ 690.903499][T28699] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5735'. [ 691.178598][T28545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.178635][T28545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 691.182120][T28710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5739'. [ 691.182140][T28710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5739'. [ 691.436066][T28720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 691.436101][T28720] IPv6: NLM_F_CREATE should be set when creating new route [ 691.436126][T28720] IPv6: NLM_F_CREATE should be set when creating new route [ 691.597673][T28545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.597707][T28545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 691.909224][T28545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.909265][T28545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 691.942442][T28726] tipc: Started in network mode [ 691.942464][T28726] tipc: Node identity ac1414aa, cluster identity 4711 [ 691.943015][T28726] tipc: New replicast peer: 172.20.20.187 [ 691.943981][T28726] tipc: Enabled bearer , priority 10 [ 692.188945][T24904] net_ratelimit: 2 callbacks suppressed [ 692.188966][T24904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.189217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.217623][ T3798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.332263][T28744] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 692.388681][T28545] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 692.392978][T28545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.395810][T28748] netlink: 'syz.2.5749': attribute type 12 has an invalid length. [ 692.396510][T28748] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 692.417046][T28545] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 692.461636][T28545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.482607][T28545] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 692.525204][T28545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.539103][T28545] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 692.587068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.620872][T28545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.756679][ T4953] Bluetooth: hci5: command tx timeout [ 692.971351][T23808] tipc: Node number set to 2886997162 [ 693.250765][T28545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.339698][T24901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.345973][T28545] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.438505][T22487] udevd[22487]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 693.471924][T23694] udevd[23694]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 693.489668][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.489784][ T5919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.520663][ T3798] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.520776][ T3798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.701003][T28797] netlink: 'syz.5.5762': attribute type 1 has an invalid length. [ 693.701027][T28797] netlink: 'syz.5.5762': attribute type 2 has an invalid length. [ 693.701039][T28797] __nla_validate_parse: 11 callbacks suppressed [ 693.701050][T28797] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5762'. [ 693.774166][T28545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.809344][T28793] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 694.477617][ T3798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.591784][T28817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5767'. [ 694.749554][T24901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.775110][T28824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5768'. [ 694.775402][T28823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5768'. [ 694.827454][ T4953] Bluetooth: hci5: command tx timeout [ 694.827848][ T3798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.889927][T28824] netlink: 'syz.0.5768': attribute type 1 has an invalid length. [ 695.423547][T28545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.519769][T28545] veth0_vlan: entered promiscuous mode [ 695.537554][T28545] veth1_vlan: entered promiscuous mode [ 695.566819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.615919][T28545] veth0_macvtap: entered promiscuous mode [ 695.636142][T28545] veth1_macvtap: entered promiscuous mode [ 695.683417][T28545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.724393][T28545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.780014][T24901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.784115][ T3798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.784157][ T3798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.784189][ T3798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.229386][ T5919] net_ratelimit: 3 callbacks suppressed [ 697.229406][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.229629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.626770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.729376][T28832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.807725][T24901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.991271][T24901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.991293][T24901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.073593][T28876] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 698.268598][T28889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5781'. [ 698.290726][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.290750][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.590246][T28900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5784'. [ 698.599686][T28903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.600434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.007806][ T3798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.181642][T28900] vlan0 (unregistering): left allmulticast mode [ 699.181667][T28900] veth0_vlan: left allmulticast mode [ 699.464663][T28915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5788'. [ 699.789929][T28923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5789'. [ 699.789954][T28923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5789'. [ 699.938642][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.960487][ T3798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.240234][T28907] rxe_eth0 speed is unknown, defaulting to 1000 [ 700.324280][T28930] netlink: 35 bytes leftover after parsing attributes in process `syz.5.5791'. [ 700.581610][T28941] x_tables: duplicate entry at hook 3 [ 700.914272][ T4953] Bluetooth: hci0: unexpected event for opcode 0x0005 [ 701.105311][T28907] lo speed is unknown, defaulting to 1000 [ 701.130465][T28956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5798'. [ 702.367786][T24901] net_ratelimit: 4 callbacks suppressed [ 702.367808][T24901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.381910][T28979] IPVS: persistence engine module ip_vs_pe_À not found [ 702.676859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.148559][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.148776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.468005][T24901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.797389][T29017] netlink: 'syz.1.5812': attribute type 2 has an invalid length. [ 703.797413][T29017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5812'. [ 703.967916][T29020] ip_tables: iptables: counters copy to user failed while replacing table [ 704.588914][ T3798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.997133][ T3798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.308846][T29057] netlink: get zone limit has 8 unknown bytes [ 705.422554][T29057] macsec2: entered allmulticast mode [ 705.452319][T29057] batman_adv: batadv0: Adding interface: macsec2 [ 705.452337][T29057] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active [ 705.646766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.707853][ T2431] block nbd2: Possible stuck request ffff8880278b5080: control (read@0,4096B). Runtime 180 seconds [ 705.887562][T29065] 8021q: VLANs not supported on gre0 [ 705.888190][T29065] 8021q: VLANs not supported on gre0 [ 705.904963][T29065] 8021q: VLANs not supported on gre0 [ 705.905693][T29065] 8021q: VLANs not supported on gre0 [ 705.921818][T29065] 8021q: VLANs not supported on gre0 [ 705.922528][T29065] 8021q: VLANs not supported on gre0 [ 705.923097][T29065] 8021q: VLANs not supported on gre0 [ 705.944118][T29065] 8021q: VLANs not supported on gre0 [ 705.955558][T29065] 8021q: VLANs not supported on gre0 [ 705.963763][T29065] 8021q: VLANs not supported on gre0 [ 705.972313][T29065] 8021q: VLANs not supported on gre0 [ 705.980781][T29065] 8021q: VLANs not supported on gre0 [ 705.989022][T29065] 8021q: VLANs not supported on gre0 [ 705.997116][T29065] 8021q: VLANs not supported on gre0 [ 706.003350][T29065] 8021q: VLANs not supported on gre0 [ 706.011523][T29065] 8021q: VLANs not supported on gre0 [ 706.018175][T29065] 8021q: VLANs not supported on gre0 [ 706.024413][T29065] 8021q: VLANs not supported on gre0 [ 706.031517][T29065] 8021q: VLANs not supported on gre0 [ 706.041824][T29065] 8021q: VLANs not supported on gre0 [ 706.059882][T29065] 8021q: VLANs not supported on gre0 [ 706.080225][T29065] 8021q: VLANs not supported on gre0 [ 706.106913][T29065] 8021q: VLANs not supported on gre0 [ 706.120412][T29065] 8021q: VLANs not supported on gre0 [ 706.146449][T29065] 8021q: VLANs not supported on gre0 [ 706.212552][T29065] 8021q: VLANs not supported on gre0 [ 706.221139][T29065] 8021q: VLANs not supported on gre0 [ 706.225081][T29065] 8021q: VLANs not supported on gre0 [ 706.232976][T29065] 8021q: VLANs not supported on gre0 [ 706.244867][T29065] 8021q: VLANs not supported on gre0 [ 706.259941][T29065] 8021q: VLANs not supported on gre0 [ 706.261358][T29065] 8021q: VLANs not supported on gre0 [ 706.272707][T29065] 8021q: VLANs not supported on gre0 [ 706.273915][T29065] 8021q: VLANs not supported on gre0 [ 706.317195][T29065] 8021q: VLANs not supported on gre0 [ 706.318510][T29065] 8021q: VLANs not supported on gre0 [ 706.319778][T29065] 8021q: VLANs not supported on gre0 [ 706.593545][T29065] 8021q: VLANs not supported on gre0 [ 706.604560][T29065] 8021q: VLANs not supported on gre0 [ 706.800646][T29065] 8021q: VLANs not supported on gre0 [ 706.813309][T29065] 8021q: VLANs not supported on gre0 [ 706.820896][T29065] 8021q: VLANs not supported on gre0 [ 706.832074][T29065] 8021q: VLANs not supported on gre0 [ 706.832695][T29065] 8021q: VLANs not supported on gre0 [ 706.852389][T29065] 8021q: VLANs not supported on gre0 [ 707.071852][T29078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5827'. [ 707.716835][ C1] net_ratelimit: 4 callbacks suppressed [ 707.716856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.872173][ T5002] udevd[5002]: worker [22080] /devices/virtual/block/nbd2 timeout; kill it [ 707.872263][ T5002] udevd[5002]: seq 23282 '/devices/virtual/block/nbd2' killed [ 707.908272][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.897956][T29139] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5840'. [ 708.898152][T29139] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5840'. [ 708.898325][T29139] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5840'. [ 708.898518][T29139] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5840'. [ 708.898689][T29139] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5840'. [ 708.898864][T29139] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5840'. [ 708.899033][T29139] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5840'. [ 708.899201][T29139] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5840'. [ 708.916372][T15810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.916632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.975224][T29139] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5840'. [ 709.018519][T28468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.186470][T29146] syzkaller1: entered promiscuous mode [ 709.186492][T29146] syzkaller1: entered allmulticast mode [ 709.214545][T29146] 0: reclassify loop, rule prio 0, protocol 03 [ 710.139644][T15815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.367635][T29193] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 710.487535][T29197] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 710.688774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.998705][T29207] netlink: 'syz.1.5855': attribute type 1 has an invalid length. [ 711.190775][T29207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.580594][T29232] block nbd3: Unsupported socket: should be TCP or UNIX. [ 712.098046][T29244] hsr0: entered allmulticast mode [ 712.098068][T29244] hsr_slave_0: entered allmulticast mode [ 712.101182][T29244] hsr_slave_1: entered allmulticast mode [ 712.272177][T29243] __nla_validate_parse: 29 callbacks suppressed [ 712.272200][T29243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5863'. [ 712.746854][ C1] net_ratelimit: 5 callbacks suppressed [ 712.746876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.067854][T29264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5867'. [ 713.131230][T29251] hsr0: left allmulticast mode [ 713.131254][T29251] hsr_slave_0: left allmulticast mode [ 713.131597][T29251] hsr_slave_1: left allmulticast mode [ 713.380909][T29272] netlink: 'syz.3.5870': attribute type 3 has an invalid length. [ 713.380931][T29272] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5870'. [ 713.511291][T29280] netlink: 'syz.3.5870': attribute type 3 has an invalid length. [ 713.511313][T29280] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5870'. [ 713.527076][T15810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.810282][T29288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5872'. [ 713.947482][T24904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.947710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.124073][T29298] netlink: 'syz.1.5875': attribute type 3 has an invalid length. [ 714.124098][T29298] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5875'. [ 714.697437][T15815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.769261][T29322] Cannot find add_set index 34 as target [ 714.774964][T29323] Cannot find add_set index 34 as target [ 714.871698][T15810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.871985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.726849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.797545][T24904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.947215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.037436][T29351] sctp: [Deprecated]: syz.2.5892 (pid 29351) Use of int in maxseg socket option. [ 716.037436][T29351] Use struct sctp_assoc_value instead [ 716.238021][T29355] syzkaller1: entered promiscuous mode [ 716.238043][T29355] syzkaller1: entered allmulticast mode [ 716.770083][T29326] NFSD: Failed to start, no listeners configured. [ 716.802900][T29371] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 717.786760][ C1] net_ratelimit: 8 callbacks suppressed [ 717.786782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.908001][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5901'. [ 718.009416][T24901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.026722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.026939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.557519][T29375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5901'. [ 718.652012][T29379] netlink: 8820 bytes leftover after parsing attributes in process `syz.0.5902'. [ 718.992633][T15810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.992852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.066713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.067257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.131378][T24901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.152698][T28468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.347566][T29397] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5906'. [ 719.965483][T29419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5914'. [ 719.978481][T29420] sit0: entered promiscuous mode [ 720.076031][T29420] netlink: 'syz.0.5913': attribute type 1 has an invalid length. [ 720.076058][T29420] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5913'. [ 721.127221][T29449] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5923'. [ 721.184159][T29449] batman_adv: batadv0: Interface deactivated: gretap1 [ 721.184361][T29449] batman_adv: batadv0: Removing interface: gretap1 [ 722.374342][T29487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5934'. [ 722.405456][T29487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5934'. [ 722.405705][T29487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5934'. [ 722.826844][ C1] net_ratelimit: 8 callbacks suppressed [ 722.826867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.912475][T29502] gretap0: entered promiscuous mode [ 723.077385][T29506] nbd: must specify an index to disconnect [ 723.152021][T29512] __nla_validate_parse: 2 callbacks suppressed [ 723.152042][T29512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5941'. [ 723.303481][T29517] tunl0: entered promiscuous mode [ 723.313352][T29517] netlink: 'syz.1.5943': attribute type 4 has an invalid length. [ 723.313373][T29517] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5943'. [ 723.633426][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.728174][T29528] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5947'. [ 723.863029][T29530] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5946'. [ 724.117513][T29500] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5938'. [ 724.117544][T29500] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5938'. [ 724.162781][T29540] x_tables: unsorted underflow at hook 3 [ 724.272797][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.273031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.558996][T29547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5953'. [ 724.559019][T29547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5953'. [ 724.559044][T29547] netlink: 'syz.1.5953': attribute type 15 has an invalid length. [ 724.723016][T29547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5953'. [ 724.723041][T29547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5953'. [ 724.723065][T29547] netlink: 'syz.1.5953': attribute type 15 has an invalid length. [ 724.757908][T24900] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 724.758267][T24900] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 724.758415][T24900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.758660][T24900] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 724.758692][T24900] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 724.959885][T24900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.816745][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.913530][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.112831][T29600] x_tables: duplicate underflow at hook 2 [ 726.207500][T29605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.207750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.367604][ T4953] Bluetooth: hci5: unexpected cc 0x2060 length: 8 > 7 [ 726.367637][ T4953] Bluetooth: hci5: unexpected event for opcode 0x2060 [ 726.940881][T29628] bridge_slave_0: left allmulticast mode [ 726.940910][T29628] bridge_slave_0: left promiscuous mode [ 726.941122][T29628] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.004243][T29628] bridge_slave_1: left allmulticast mode [ 727.004599][T29628] bridge_slave_1: left promiscuous mode [ 727.016925][T29628] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.181879][T29628] bond0: (slave bond_slave_0): Releasing backup interface [ 727.315452][T29628] bond0: (slave bond_slave_1): Releasing backup interface [ 727.424114][T29628] team0: Port device team_slave_0 removed [ 727.478400][T29628] team0: Port device team_slave_1 removed [ 727.482696][T29628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.482719][T29628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.876790][ C1] net_ratelimit: 3 callbacks suppressed [ 727.876811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.179876][T24900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.212887][T29628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.212915][T29628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.243563][T29628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 728.351251][T29642] netlink: 'syz.0.5978': attribute type 1 has an invalid length. [ 728.351275][T29642] netlink: 'syz.0.5978': attribute type 2 has an invalid length. [ 728.361085][T29643] __nla_validate_parse: 6 callbacks suppressed [ 728.361123][T29643] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5979'. [ 728.673940][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5980'. [ 728.674609][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5980'. [ 728.675213][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5980'. [ 728.725211][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5980'. [ 728.725944][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5980'. [ 728.760244][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5980'. [ 728.762674][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5980'. [ 728.763244][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5980'. [ 728.763725][T29655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5980'. [ 729.339057][T15815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.039324][T24900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.039576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.062932][T29689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.063572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.168337][T29693] netlink: 'syz.2.5990': attribute type 3 has an invalid length. [ 730.532663][T15815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.668722][T24901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.145859][T29194] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 732.160267][T29194] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 732.161175][T29194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 732.162210][T29194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 732.162860][T29194] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 732.679319][T29719] rxe_eth0 speed is unknown, defaulting to 1000 [ 732.906789][ C1] net_ratelimit: 5 callbacks suppressed [ 732.906811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.037615][T17227] batman_adv: batadv0: Interface deactivated: syz_tun [ 733.298393][T17227] batman_adv: batadv0: Removing interface: syz_tun [ 733.325633][T29719] lo speed is unknown, defaulting to 1000 [ 733.336701][T29739] hsr0: entered allmulticast mode [ 733.336723][T29739] hsr_slave_0: entered allmulticast mode [ 733.337071][T29739] hsr_slave_1: entered allmulticast mode [ 733.353117][T29739] hsr0: entered promiscuous mode [ 733.389027][T29739] hsr_slave_0: left promiscuous mode [ 733.432722][T29739] hsr_slave_1: left promiscuous mode [ 733.583945][T29739] hsr0 (unregistering): left allmulticast mode [ 733.583987][T29739] hsr0 (unregistering): left promiscuous mode [ 733.717589][ T3819] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 733.902689][T24901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.921425][ T3819] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 734.008121][T29755] __nla_validate_parse: 31 callbacks suppressed [ 734.008140][T29755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6004'. [ 734.008156][T29755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6004'. [ 734.008185][T29755] netlink: 'syz.2.6004': attribute type 4 has an invalid length. [ 734.134672][T29762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6005'. [ 734.144960][ T3819] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 734.186920][T29194] Bluetooth: hci1: command tx timeout [ 734.389124][ T3819] batman_adv: batadv0: Removing interface: macsec2 [ 734.441935][ T3819] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 734.461024][T29773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6009'. [ 734.498228][T29778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6009'. [ 734.741960][T29783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6011'. [ 735.049328][T24901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.140300][T29797] rdma_op ffff88802f97d238 conn xmit_rdma 0000000000000000 [ 735.144447][T29798] rdma_op ffff888055e0d238 conn xmit_rdma 0000000000000000 [ 735.342177][ T3819] dvmrp1: left allmulticast mode [ 735.343684][ T3819] pimreg3: left allmulticast mode [ 735.626238][ T3819] bond5 (unregistering): (slave gretap2): Releasing active interface [ 735.656186][ T3819] batman_adv: batadv0: Removing interface: gretap1 [ 735.758985][ T3819] bond6 (unregistering): (slave geneve3): Releasing active interface [ 735.804222][ T2431] block nbd2: Possible stuck request ffff8880278b5080: control (read@0,4096B). Runtime 210 seconds [ 735.927444][ T3819] bond2 (unregistering): (slave bridge10): Releasing active interface [ 735.988890][ T3819] bond1 (unregistering): Released all slaves [ 736.026420][ T3819] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 736.038482][ T3819] bond0 (unregistering): Released all slaves [ 736.070391][ T3819] bond2 (unregistering): Released all slaves [ 736.094552][ T3819] bond3 (unregistering): Released all slaves [ 736.115918][ T3819] bond4 (unregistering): Released all slaves [ 736.143862][ T3819] bond5 (unregistering): Released all slaves [ 736.212506][ T3819] bond6 (unregistering): Released all slaves [ 736.262586][ T3819] bond7 (unregistering): Released all slaves [ 736.266754][T29194] Bluetooth: hci1: command tx timeout [ 736.641240][ T3819] tipc: Disabling bearer [ 736.641699][ T3819] tipc: Left network mode [ 736.675875][T29719] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.675977][T29719] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.676145][T29719] bridge_slave_0: entered allmulticast mode [ 736.708467][T29719] bridge_slave_0: entered promiscuous mode [ 736.731470][T29719] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.731863][T29719] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.736647][T29719] bridge_slave_1: entered allmulticast mode [ 736.747251][T29719] bridge_slave_1: entered promiscuous mode [ 736.830281][T29819] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 737.051664][T29719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.092773][T29825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6019'. [ 737.142155][T29719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.221613][T29841] ip_tables: iptables: counters copy to user failed while replacing table [ 737.705653][T29719] team0: Port device team_slave_0 added [ 737.765159][T29719] team0: Port device team_slave_1 added [ 737.985859][T29719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.985878][T29719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.985904][T29719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.037546][T29719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.046898][T29719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.046966][T29719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.321957][T29719] hsr_slave_0: entered promiscuous mode [ 738.336009][T29719] hsr_slave_1: entered promiscuous mode [ 738.344204][T29719] debugfs: 'hsr0' already exists in 'hsr' [ 738.344224][T29719] Cannot create hsr debugfs directory [ 738.347171][T29194] Bluetooth: hci1: command tx timeout [ 738.528770][T29890] netlink: 81 bytes leftover after parsing attributes in process `syz.0.6030'. [ 738.551539][T29890] netlink: 81 bytes leftover after parsing attributes in process `syz.0.6030'. [ 738.688674][T29890] netlink: 81 bytes leftover after parsing attributes in process `syz.0.6030'. [ 738.894919][ T5297] 8021q: adding VLAN 0 to HW filter on device eth6 [ 739.044045][T29890] __nla_validate_parse: 4 callbacks suppressed [ 739.044067][T29890] netlink: 81 bytes leftover after parsing attributes in process `syz.0.6030'. [ 739.064825][T29890] netlink: 81 bytes leftover after parsing attributes in process `syz.0.6030'. [ 739.099110][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6032'. [ 739.358067][T29883] geneve0: entered promiscuous mode [ 739.358255][T29883] geneve0: entered allmulticast mode [ 739.399643][T29890] netlink: 81 bytes leftover after parsing attributes in process `syz.0.6030'. [ 739.417406][T29890] netlink: 81 bytes leftover after parsing attributes in process `syz.0.6030'. [ 739.439347][T28468] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 19999 - 0 [ 739.443485][ T3798] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 19999 - 0 [ 739.445320][ T3798] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 19999 - 0 [ 739.448330][T24903] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 19999 - 0 [ 739.448373][T24903] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 19999 - 0 [ 739.448407][T24903] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 739.448440][T24903] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 739.448473][T24903] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 739.932785][T29890] netlink: 81 bytes leftover after parsing attributes in process `syz.0.6030'. [ 740.309812][T29926] netlink: 'syz.5.6036': attribute type 4 has an invalid length. [ 740.386363][T29930] netlink: 'syz.5.6036': attribute type 4 has an invalid length. [ 740.429156][T29194] Bluetooth: hci1: command tx timeout [ 742.361812][T29954] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 742.361897][T29954] gretap4: entered promiscuous mode [ 742.361913][T29954] gretap4: entered allmulticast mode [ 742.365151][ T5297] 8021q: adding VLAN 0 to HW filter on device eth7 [ 742.411183][T29963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6041'. [ 742.485490][ T3798] IPVS: starting estimator thread 0... [ 742.519037][T29719] netdevsim netdevsim3 eth9 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 742.587354][T29965] IPVS: using max 52 ests per chain, 124800 per kthread [ 742.676197][T29719] netdevsim netdevsim3 eth8 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 742.877507][ T3819] IPVS: stop unused estimator thread 0... [ 743.116043][T29719] netdevsim netdevsim3 eth7 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 743.404640][T29997] netlink: 'syz.0.6048': attribute type 16 has an invalid length. [ 743.404662][T29997] netlink: 'syz.0.6048': attribute type 17 has an invalid length. [ 743.452414][T30000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6049'. [ 743.552119][T29997] erspan0: left promiscuous mode [ 743.564980][T29997] sit0: left promiscuous mode [ 743.614254][T29997] bridge0: left promiscuous mode [ 743.614328][T29997] bridge0: left allmulticast mode [ 743.640353][T29997] ªªªªª»: left promiscuous mode [ 743.700467][T29997] veth1_macvtap: entered promiscuous mode [ 743.705426][T29997] mac80211_hwsim hwsim35 wlan1: left promiscuous mode [ 743.727587][T29997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 743.732201][T29997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 743.758810][T29997] 8021q: adding VLAN 0 to HW filter on device bond3 [ 743.819651][T29997] 8021q: adding VLAN 0 to HW filter on device bond5 [ 743.821817][T29997] 8021q: adding VLAN 0 to HW filter on device bond6 [ 743.843173][T29997] gretap0: entered promiscuous mode [ 743.843801][T29997] bond7: left promiscuous mode [ 743.878358][T29997] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 744.015657][T30012] x_tables: unsorted entry at hook 3 [ 744.016167][T30014] x_tables: unsorted entry at hook 3 [ 744.035979][T30014] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6051'. [ 744.053760][T30012] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6051'. [ 744.080284][T30019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6052'. [ 744.104035][T30012] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6051'. [ 744.124810][T29719] netdevsim netdevsim3 eth6 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 744.166174][T30019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6052'. [ 744.264595][T17174] syz2: Port: 1 Link ACTIVE [ 744.978432][T30040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6056'. [ 745.039708][T30047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6056'. [ 745.105936][T30040] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 745.309771][T30047] bond11: entered promiscuous mode [ 745.309797][T30047] bond11: entered allmulticast mode [ 745.316959][T30047] 8021q: adding VLAN 0 to HW filter on device bond11 [ 745.342511][T30043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6058'. [ 745.900072][T29719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 745.939518][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 745.956460][T29719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 745.964128][ T5919] wlan1: Trigger new scan to find an IBSS to join [ 746.040489][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.060761][T29719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 746.095571][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.105519][T29719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 746.144726][T29719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.722404][T29719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.875001][T29719] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.995251][ T3819] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.995359][ T3819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.075436][T15815] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.075545][T15815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.120711][T30094] tipc: Started in network mode [ 747.120743][T30094] tipc: Node identity ead9c1c6038c, cluster identity 4711 [ 747.121077][T30094] tipc: Enabled bearer , priority 0 [ 747.508238][T30092] tipc: Resetting bearer [ 747.562331][T30118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6073'. [ 747.752979][T30092] tipc: Disabling bearer [ 747.838735][T30123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6074'. [ 747.838765][T30123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6074'. [ 747.929350][T30113] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 748.386258][T30146] netlink: 'syz.2.6078': attribute type 1 has an invalid length. [ 748.389016][T30148] xt_socket: unknown flags 0x4 [ 748.504965][T30148] ip_tables: iptables: counters copy to user failed while replacing table [ 748.989795][ T50] wlan1: Trigger new scan to find an IBSS to join [ 749.046225][T29719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.303220][T30177] __nla_validate_parse: 1 callbacks suppressed [ 749.303240][T30177] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6086'. [ 749.303270][T30177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.410737][T29719] veth0_vlan: entered promiscuous mode [ 749.424114][T30183] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6087'. [ 749.573686][T30178] netlink: 'syz.1.6085': attribute type 64 has an invalid length. [ 749.573710][T30178] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6085'. [ 749.641166][T29719] veth1_vlan: entered promiscuous mode [ 749.879614][T29719] veth0_macvtap: entered promiscuous mode [ 749.960512][T29719] veth1_macvtap: entered promiscuous mode [ 750.004148][T30203] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6091'. [ 750.084968][T30204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6091'. [ 750.217752][T29719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.297720][T29719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.377523][T15815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.395454][T15815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.395758][T15815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.395795][T15815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.928425][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.928449][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.982094][T30245] openvswitch: netlink: EtherType 50a is less than min 600 [ 751.316898][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.316921][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.947398][ T3819] wlan1: Trigger new scan to find an IBSS to join [ 752.013745][T30274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6101'. [ 752.211689][T30291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5995'. [ 752.216440][T30291] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 752.216461][T30291] syzkaller1: Linktype set failed because interface is up [ 752.226484][T24592] syzkaller1: tun_net_xmit 90 [ 752.485030][T30306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6107'. [ 752.576860][T30305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6106'. [ 752.599561][T30305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6106'. [ 752.599587][T30305] openvswitch: netlink: Invalid VLAN frame [ 752.942100][ T50] wlan1: Creating new IBSS network, BSSID 5e:da:ac:04:26:dc [ 753.182706][T30318] xt_limit: Overflow, try lower: 536871034/0 [ 753.284888][T30322] bridge_slave_0: left allmulticast mode [ 753.284915][T30322] bridge_slave_0: left promiscuous mode [ 753.285125][T30322] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.421722][ T4953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 753.436327][ T4953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 753.445150][ T4953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 753.455530][ T4953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 753.456152][ T4953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 753.529072][T30322] bridge_slave_1: left allmulticast mode [ 753.529098][T30322] bridge_slave_1: left promiscuous mode [ 753.529312][T30322] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.699582][T30322] bond0: (slave bond_slave_0): Releasing backup interface [ 753.742969][T30322] bond0: (slave bond_slave_1): Releasing backup interface [ 753.778382][T30322] team0: Port device team_slave_0 removed [ 753.793360][T30322] team0: Port device team_slave_1 removed [ 753.795310][T30322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.795332][T30322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.821347][T30322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.821370][T30322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.846502][T30322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 754.233469][T30332] team0: Port device xfrm0 added [ 754.451741][T30333] tipc: Started in network mode [ 754.451773][T30333] tipc: Node identity 0222683dada7, cluster identity 4711 [ 754.452015][T30333] tipc: Enabled bearer , priority 0 [ 754.481344][T30357] netlink: 'syz.5.6115': attribute type 11 has an invalid length. [ 754.692731][T30367] __nla_validate_parse: 3 callbacks suppressed [ 754.692753][T30367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6119'. [ 755.373866][T30335] rxe_eth0 speed is unknown, defaulting to 1000 [ 755.548826][T29194] Bluetooth: hci3: command tx timeout [ 755.567034][T17174] tipc: Node number set to 2944755773 [ 755.718879][T30399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6125'. [ 755.766952][T30405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6127'. [ 755.767091][T30406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6127'. [ 755.820247][T30412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6127'. [ 755.931337][T30335] lo speed is unknown, defaulting to 1000 [ 756.495794][T30433] netlink: 'syz.3.6130': attribute type 32 has an invalid length. [ 756.696618][T30396] netlink: 'syz.1.6124': attribute type 21 has an invalid length. [ 756.769230][T30396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6124'. [ 756.835668][T30450] sctp: [Deprecated]: syz.3.6132 (pid 30450) Use of int in maxseg socket option. [ 756.835668][T30450] Use struct sctp_assoc_value instead [ 756.835704][T30450] sctp: [Deprecated]: syz.3.6132 (pid 30450) Use of int in maxseg socket option. [ 756.835704][T30450] Use struct sctp_assoc_value instead [ 756.835727][T30450] sctp: [Deprecated]: syz.3.6132 (pid 30450) Use of int in maxseg socket option. [ 756.835727][T30450] Use struct sctp_assoc_value instead [ 756.835750][T30450] sctp: [Deprecated]: syz.3.6132 (pid 30450) Use of int in maxseg socket option. [ 756.835750][T30450] Use struct sctp_assoc_value instead [ 756.835773][T30450] sctp: [Deprecated]: syz.3.6132 (pid 30450) Use of int in maxseg socket option. [ 756.835773][T30450] Use struct sctp_assoc_value instead [ 756.835796][T30450] sctp: [Deprecated]: syz.3.6132 (pid 30450) Use of int in maxseg socket option. [ 756.835796][T30450] Use struct sctp_assoc_value instead [ 756.835818][T30450] sctp: [Deprecated]: syz.3.6132 (pid 30450) Use of int in maxseg socket option. [ 756.835818][T30450] Use struct sctp_assoc_value instead [ 756.835840][T30450] sctp: [Deprecated]: syz.3.6132 (pid 30450) Use of int in maxseg socket option. [ 756.835840][T30450] Use struct sctp_assoc_value instead [ 756.835863][T30450] sctp: [Deprecated]: syz.3.6132 (pid 30450) Use of int in maxseg socket option. [ 756.835863][T30450] Use struct sctp_assoc_value instead [ 756.835885][T30450] sctp: [Deprecated]: syz.3.6132 (pid 30450) Use of int in maxseg socket option. [ 756.835885][T30450] Use struct sctp_assoc_value instead [ 757.627224][T29194] Bluetooth: hci3: command tx timeout [ 758.013656][T30467] bond13: entered promiscuous mode [ 758.013727][T30467] bond13: entered allmulticast mode [ 758.014154][T30467] 8021q: adding VLAN 0 to HW filter on device bond13 [ 758.135654][T30477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6139'. [ 758.431829][T30335] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.431940][T30335] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.432097][T30335] bridge_slave_0: entered allmulticast mode [ 758.463225][T30335] bridge_slave_0: entered promiscuous mode [ 758.483905][T30335] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.484013][T30335] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.484157][T30335] bridge_slave_1: entered allmulticast mode [ 758.503440][T30335] bridge_slave_1: entered promiscuous mode [ 759.245491][T30335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.378931][T30335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.492609][T30335] team0: Port device team_slave_0 added [ 759.515173][T30335] team0: Port device team_slave_1 added [ 759.707717][T29194] Bluetooth: hci3: command tx timeout [ 759.732290][T30335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.732310][T30335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.732336][T30335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.792927][T30335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.803679][T30335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.803711][T30335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.922701][T30335] hsr_slave_0: entered promiscuous mode [ 759.923653][T30335] hsr_slave_1: entered promiscuous mode [ 759.924308][T30335] debugfs: 'hsr0' already exists in 'hsr' [ 759.924324][T30335] Cannot create hsr debugfs directory [ 760.156835][T30536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6151'. [ 760.215838][T30540] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 760.448634][T30335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 760.448670][T30335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.448696][T30335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 760.623417][T30335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 760.623453][T30335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.623478][T30335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 761.000089][T30564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6160'. [ 761.003316][T30335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 761.003349][T30335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.003374][T30335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 761.516291][T30582] pimreg: entered allmulticast mode [ 761.613642][T30585] netlink: 'syz.3.6167': attribute type 4 has an invalid length. [ 761.613665][T30585] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6167'. [ 761.614308][T30585] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 761.702536][T30585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6167'. [ 761.737451][T28473] IPVS: starting estimator thread 0... [ 761.789194][T29194] Bluetooth: hci3: command tx timeout [ 761.833038][T30587] IPVS: using max 26 ests per chain, 62400 per kthread [ 762.040865][T30335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 762.070834][T30335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 762.071793][T30335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 762.094030][T30335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.095956][T30335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 762.135431][T30335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.136401][T30335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 762.155431][T30335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 762.686693][T30335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.823454][T30335] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.861129][T15815] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.861240][T15815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.899034][T15821] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.899149][T15821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.038676][T30630] veth1_to_bond: entered allmulticast mode [ 763.458508][T30631] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.539920][T30639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6178'. [ 763.561654][T30628] veth1_to_bond: left allmulticast mode [ 764.242621][T30669] vlan2: entered allmulticast mode [ 764.242644][T30669] bond0: entered allmulticast mode [ 764.601016][T30684] netlink: 'syz.3.6187': attribute type 8 has an invalid length. [ 764.601280][T30684] sch_fq: defrate 0 ignored. [ 764.845218][T30693] netlink: 'syz.1.6188': attribute type 11 has an invalid length. [ 764.845241][T30693] netlink: 'syz.1.6188': attribute type 5 has an invalid length. [ 764.845254][T30693] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6188'. [ 765.205553][T30335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.340498][T30699] sctp: [Deprecated]: syz.1.6189 (pid 30699) Use of int in max_burst socket option. [ 765.340498][T30699] Use struct sctp_assoc_value instead [ 765.442229][T30703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.495830][T30703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6192'. [ 765.586753][T30335] veth0_vlan: entered promiscuous mode [ 765.606041][T30705] ip_tables: iptables: counters copy to user failed while replacing table [ 765.623370][T30710] sctp: [Deprecated]: syz.0.6190 (pid 30710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 765.623370][T30710] Use struct sctp_sack_info instead [ 765.757097][T30706] syzkaller1: entered promiscuous mode [ 765.757283][T30706] syzkaller1: entered allmulticast mode [ 765.868147][ T2431] block nbd2: Possible stuck request ffff8880278b5080: control (read@0,4096B). Runtime 240 seconds [ 766.125356][T30335] veth1_vlan: entered promiscuous mode [ 766.266251][T30335] veth0_macvtap: entered promiscuous mode [ 766.296657][T30335] veth1_macvtap: entered promiscuous mode [ 766.344916][T30741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6196'. [ 766.401487][T30335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.462691][T30335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.570717][T15815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.570812][T15815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.570893][T15815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.641604][T30746] netlink: 'syz.1.6197': attribute type 1 has an invalid length. [ 766.752747][T30749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6197'. [ 766.808678][T30746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 766.870009][T30757] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6201'. [ 766.890001][ T3788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.113241][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.113264][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.208960][T30764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6203'. [ 767.208995][T30764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6203'. [ 767.268228][ T3788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.268251][ T3788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.674829][T30788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6208'. [ 768.156636][T30798] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 768.197349][T30798] syzkaller1: entered promiscuous mode [ 768.197383][T30798] syzkaller1: entered allmulticast mode [ 768.583711][ T4953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 768.598493][ T4953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 768.724644][ T4953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 768.726044][ T4953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 768.743829][ T4953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 769.000986][T30809] netlink: 'syz.3.6212': attribute type 1 has an invalid length. [ 769.124798][T30816] netlink: 'syz.3.6212': attribute type 10 has an invalid length. [ 769.124821][T30816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6212'. [ 769.175294][T30809] bond1: option mode: invalid value (7) [ 769.210960][T30809] bond1 (unregistering): Released all slaves [ 769.517819][T30816] dummy0: entered promiscuous mode [ 769.568403][ T3788] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.568438][ T3788] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 769.568463][ T3788] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 37593 - 0 [ 769.568487][ T3788] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 769.697301][T30836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.753146][ T3788] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.753182][ T3788] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 769.753206][ T3788] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 37593 - 0 [ 769.753232][ T3788] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 769.943260][ T3788] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.949071][ T3788] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 769.949108][ T3788] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 37593 - 0 [ 769.949129][ T3788] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 770.249303][T30858] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6221'. [ 770.295518][ T3788] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.295573][ T3788] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 770.295600][ T3788] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 37593 - 0 [ 770.295625][ T3788] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 770.350860][T30855] openvswitch: netlink: Flow actions attr not present in new flow. [ 770.792556][T30867] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 770.792663][T30803] rxe_eth0 speed is unknown, defaulting to 1000 [ 770.826738][T29194] Bluetooth: hci2: command tx timeout [ 770.987553][T24903] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 19999 - 0 [ 770.997318][ T1124] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 19999 - 0 [ 771.090266][ T50] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 19999 - 0 [ 771.104422][T24903] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 19999 - 0 [ 771.305428][ T3788] pim6reg: left allmulticast mode [ 771.311728][ T3788] pim6reg527: left allmulticast mode [ 771.312493][ T3788] pimreg: left allmulticast mode [ 771.313085][ T3788] dvmrp1: left allmulticast mode [ 771.314255][ T3788] dvmrp3: left allmulticast mode [ 772.083634][T30914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6235'. [ 772.813808][ T3788] bond9 (unregistering): (slave geneve4): Releasing active interface [ 772.908075][T29194] Bluetooth: hci2: command tx timeout [ 772.934596][ T3788]  (unregistering): (slave vlan0): Releasing backup interface [ 773.058551][ T3788]  (unregistering): Released all slaves [ 773.066280][ T3788] bond1 (unregistering): Released all slaves [ 773.094477][ T3788] bond2 (unregistering): Released all slaves [ 773.116894][ T3788] bond3 (unregistering): Released all slaves [ 773.153641][ T3788] bond4 (unregistering): Released all slaves [ 773.192486][ T3788] bond5 (unregistering): Released all slaves [ 773.215069][ T3788] bond6 (unregistering): Released all slaves [ 773.261651][ T3788] bond7 (unregistering): Released all slaves [ 773.287190][ T3788] bond8 (unregistering): Released all slaves [ 773.319641][ T3788] bond9 (unregistering): Released all slaves [ 773.340739][ T3788] bond10 (unregistering): Released all slaves [ 773.365137][ T3788] bond0 (unregistering): Released all slaves [ 773.394991][ T3788] bond11 (unregistering): Released all slaves [ 773.418540][ T3788] bond12 (unregistering): (slave veth5): Releasing backup interface [ 773.446343][ T3788] bond12 (unregistering): Released all slaves [ 773.468509][ T3788] bond13 (unregistering): Released all slaves [ 773.599643][T30803] lo speed is unknown, defaulting to 1000 [ 773.811407][ T3788] IPVS: stopping master sync thread 27919 ... [ 773.843485][ T5297] 8021q: adding VLAN 0 to HW filter on device eth6 [ 774.359547][T30941] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 774.598977][T30943] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6241'. [ 774.995951][T29194] Bluetooth: hci2: command tx timeout [ 775.214386][T30971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6246'. [ 777.068413][T29194] Bluetooth: hci2: command tx timeout [ 778.036720][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 778.586083][T30992] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6250'. [ 778.882007][T31000] Bluetooth: MGMT ver 1.23 [ 779.603018][ T3788] hsr_slave_0: left promiscuous mode [ 779.622622][ T3788] hsr_slave_1: left promiscuous mode [ 779.744085][T31038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6256'. [ 779.761660][ T3788] veth1_macvtap: left promiscuous mode [ 779.761699][ T3788] veth0_macvtap: left promiscuous mode [ 780.585986][ T5919] smc: removing ib device syz2 [ 780.828723][ T5919] smbdirect: ib_dev[syz2] removed [ 780.842446][T31041] team0: Cannot enslave team device to itself [ 780.904296][ T5297] 8021q: adding VLAN 0 to HW filter on device eth7 [ 780.904863][T17174] infiniband syz2: ib_query_port failed (-19) [ 781.168395][T31070] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6260'. [ 781.455017][T30803] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.455709][T30803] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.455849][T30803] bridge_slave_0: entered allmulticast mode [ 781.492098][T30803] bridge_slave_0: entered promiscuous mode [ 781.505020][T30803] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.505211][T30803] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.505372][T30803] bridge_slave_1: entered allmulticast mode [ 781.533310][T30803] bridge_slave_1: entered promiscuous mode [ 781.673835][T30803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.702043][T30803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.913823][T30803] team0: Port device team_slave_0 added [ 781.930178][T30803] team0: Port device team_slave_1 added [ 782.118726][T30803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.118744][T30803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.118777][T30803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.124588][T30803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.124604][T30803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.124629][T30803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.505575][T31018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 782.790282][T30803] hsr_slave_0: entered promiscuous mode [ 782.809734][T30803] hsr_slave_1: entered promiscuous mode [ 782.810423][T30803] debugfs: 'hsr0' already exists in 'hsr' [ 782.828868][T30803] Cannot create hsr debugfs directory [ 783.265096][T31082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6262'. [ 783.353291][T31100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 783.496212][T31108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6262'. [ 784.472920][T31148] IPv6: NLM_F_CREATE should be specified when creating new route [ 784.782100][T31142] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 785.076265][T31163] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6276'. [ 785.154254][ T5297] 8021q: adding VLAN 0 to HW filter on device eth8 [ 785.268195][T31169] x_tables: duplicate underflow at hook 1 [ 785.657875][T31179] wireguard0: entered promiscuous mode [ 785.903229][T30803] netdevsim netdevsim0 eth9 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 785.951097][T31174] syzkaller1: entered promiscuous mode [ 785.951123][T31174] syzkaller1: entered allmulticast mode [ 786.402006][T30803] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 786.695970][T30803] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 786.738934][T31193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6281'. [ 786.751710][T31193] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.923738][T31208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6284'. [ 786.923773][T31208] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6284'. [ 786.955602][T30803] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 787.065479][T31208] geneve2: entered promiscuous mode [ 787.065501][T31208] geneve2: entered allmulticast mode [ 787.084800][T31226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6287'. [ 787.819176][T30803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 787.857442][T30803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.866117][T30803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 787.906371][T30803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.917046][T30803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 787.947622][T30803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 787.953145][T30803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 787.961290][T31248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6291'. [ 787.992388][T30803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.483085][T30803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.581894][T30803] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.606235][T15821] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.606367][T15821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.661941][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.662059][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.452423][T31291] team0: Device gtp1 is up. Set it down before adding it as a team port [ 789.728460][T31309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6304'. [ 790.113199][T31326] x_tables: duplicate underflow at hook 1 [ 790.178849][T31335] Cannot find add_set index 4 as target [ 791.070998][T30803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.100327][T31364] netlink: 3604 bytes leftover after parsing attributes in process `syz.5.6310'. [ 791.314406][T30803] veth0_vlan: entered promiscuous mode [ 791.354559][T30803] veth1_vlan: entered promiscuous mode [ 791.453514][T31374] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 791.625095][T30803] veth0_macvtap: entered promiscuous mode [ 791.678169][T30803] veth1_macvtap: entered promiscuous mode [ 791.772348][T30803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.834070][T30803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.878149][T15821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.878409][T15821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.878444][T15821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.878477][T15821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.910685][T31384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6314'. [ 792.241613][ T3788] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.241682][ T3788] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.241716][ T3788] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.248300][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.386350][T31398] netlink: 'syz.5.6317': attribute type 1 has an invalid length. [ 792.530523][T31398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 792.573130][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.573153][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.601934][T31401] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 792.621041][T31401] bond3: entered allmulticast mode [ 792.740623][T31398] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 792.974649][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.974677][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.092228][T31417] batman_adv: batadv0: Adding interface: syz_tun [ 793.092248][T31417] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.092452][T31417] batman_adv: batadv0: Interface activated: syz_tun [ 793.923077][T31447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6324'. [ 794.762286][T31485] macvtap0: mtu less than device minimum [ 794.906965][T31487] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6330'. [ 795.146209][T31487] netlink: 'syz.0.6330': attribute type 1 has an invalid length. [ 795.218664][T31491] x_tables: unsorted underflow at hook 3 [ 795.333015][T31501] netlink: 'syz.0.6330': attribute type 10 has an invalid length. [ 795.333038][T31501] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6330'. [ 795.468619][T31501] dummy0: entered promiscuous mode [ 795.644439][T31518] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 795.663487][T31517] Cannot find map_set index 2 as target [ 795.948660][ T2431] block nbd2: Possible stuck request ffff8880278b5080: control (read@0,4096B). Runtime 270 seconds [ 796.453972][T31517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6339'. [ 798.646087][T31510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6338'. [ 799.103868][T31563] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 799.297506][T31566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6344'. [ 799.426372][T31574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6347'. [ 799.470676][T31576] ipt_REJECT: ECHOREPLY no longer supported. [ 800.055652][T31593] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6353'. [ 800.522695][T31614] netlink: 'syz.2.6359': attribute type 24 has an invalid length. [ 801.062349][T31628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6362'. [ 801.245059][T31647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6367'. [ 801.446510][T31652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6369'. [ 801.458021][T31653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6368'. [ 801.595069][T31658] netlink: 'syz.5.6372': attribute type 1 has an invalid length. [ 801.595403][T31658] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6372'. [ 801.674201][T31662] netlink: 'syz.2.6373': attribute type 1 has an invalid length. [ 801.896516][T31672] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 802.132296][T31677] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6376'. [ 802.178398][T31680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6377'. [ 802.322694][T31688] veth0_to_bridge: entered promiscuous mode [ 802.322717][T31688] veth0_to_bridge: entered allmulticast mode [ 802.549821][T31693] nbd3: detected capacity change from 0 to 63 [ 802.554270][T31693] nbd: must specify an index to disconnect [ 802.554949][ T2431] block nbd3: Send control failed (result -32) [ 802.555103][ T2431] block nbd3: Request send failed, requeueing [ 802.555487][T29194] block nbd3: Receive control failed (result -32) [ 802.559953][ T2431] block nbd3: Dead connection, failed to find a fallback [ 802.559972][ T2431] block nbd3: shutting down sockets [ 802.559985][ T2431] blk_print_req_error: 107 callbacks suppressed [ 802.559998][ T2431] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.560024][ T2431] buffer_io_error: 138 callbacks suppressed [ 802.560034][ T2431] Buffer I/O error on dev nbd3, logical block 0, async page read [ 802.560488][ T2431] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.560512][ T2431] Buffer I/O error on dev nbd3, logical block 1, async page read [ 802.560604][ T2431] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.560626][ T2431] Buffer I/O error on dev nbd3, logical block 2, async page read [ 802.560715][ T2431] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.560736][ T2431] Buffer I/O error on dev nbd3, logical block 3, async page read [ 802.560840][ T2431] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.560863][ T2431] Buffer I/O error on dev nbd3, logical block 0, async page read [ 802.560995][ T2431] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.561018][ T2431] Buffer I/O error on dev nbd3, logical block 1, async page read [ 802.561104][ T2431] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.561127][ T2431] Buffer I/O error on dev nbd3, logical block 2, async page read [ 802.561414][ T2431] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.561436][ T2431] Buffer I/O error on dev nbd3, logical block 3, async page read [ 802.561610][ T2431] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.561632][ T2431] Buffer I/O error on dev nbd3, logical block 0, async page read [ 802.561720][ T2431] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 802.561742][ T2431] Buffer I/O error on dev nbd3, logical block 1, async page read [ 802.570984][T23694] ldm_validate_partition_table(): Disk read failed. [ 802.572088][T23694] Dev nbd3: unable to read RDB block 0 [ 802.574600][T23694] nbd3: unable to read partition table [ 802.610314][T23694] ldm_validate_partition_table(): Disk read failed. [ 802.628107][T23694] Dev nbd3: unable to read RDB block 0 [ 802.648533][T23694] nbd3: unable to read partition table [ 803.428486][T31721] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6386'. [ 803.553078][T31726] 8021q: VLANs not supported on wg0 [ 803.717832][T31730] netlink: 'syz.2.6390': attribute type 8 has an invalid length. [ 803.767360][T31730] wireguard: wg2: Could not create IPv4 socket [ 804.372449][T31760] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6400'. [ 804.390188][T31761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6399'. [ 804.390211][T31761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6399'. [ 804.390237][T31761] netlink: 'syz.1.6399': attribute type 15 has an invalid length. [ 804.433220][T31761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6399'. [ 804.433245][T31761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6399'. [ 804.433271][T31761] netlink: 'syz.1.6399': attribute type 15 has an invalid length. [ 807.761983][T31839] __nla_validate_parse: 1 callbacks suppressed [ 807.762004][T31839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6418'. [ 807.823258][T31850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6418'. [ 807.955536][T31857] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6423'. [ 807.997978][T31860] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6423'. [ 808.008200][T31840] sch_fq: defrate 0 ignored. [ 808.293953][T31870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6426'. [ 808.592621][T31881] netlink: 'syz.3.6429': attribute type 1 has an invalid length. [ 808.592713][T31881] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6429'. [ 808.625687][T31873] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.626289][T31873] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.626435][T31873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.921569][T31889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6432'. [ 808.921592][T31889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6432'. [ 808.921617][T31889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6432'. [ 809.049359][T15812] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.055229][T28470] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.055274][T28470] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.055307][T28470] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.322907][T31882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6428'. [ 809.394446][T31882] geneve1: entered allmulticast mode [ 809.715372][T31916] netlink: 'syz.0.6436': attribute type 21 has an invalid length. [ 809.841336][T31905] [ 809.843723][T31905] ====================================================== [ 809.850734][T31905] WARNING: possible circular locking dependency detected [ 809.857768][T31905] syzkaller #0 Not tainted [ 809.862176][T31905] ------------------------------------------------------ [ 809.869185][T31905] syz.3.6435/31905 is trying to acquire lock: [ 809.875242][T31905] ffff8880278fbd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 809.884682][T31905] [ 809.884682][T31905] but task is already holding lock: [ 809.892042][T31905] ffff8880278fb840 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 809.902245][T31905] [ 809.902245][T31905] which lock already depends on the new lock. [ 809.902245][T31905] [ 809.912644][T31905] [ 809.912644][T31905] the existing dependency chain (in reverse order) is: [ 809.921652][T31905] [ 809.921652][T31905] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 809.930262][T31905] blk_alloc_queue+0x544/0x690 [ 809.935628][T31905] __blk_mq_alloc_disk+0x194/0x390 [ 809.941316][T31905] nbd_dev_add+0x494/0xb60 [ 809.946331][T31905] nbd_init+0x168/0x1f0 [ 809.951085][T31905] do_one_initcall+0x250/0x870 [ 809.956374][T31905] do_initcall_level+0x10a/0x1a0 [ 809.961921][T31905] do_initcalls+0x59/0xa0 [ 809.966773][T31905] kernel_init_freeable+0x29d/0x3e0 [ 809.972675][T31905] kernel_init+0x22/0x1d0 [ 809.977606][T31905] ret_from_fork+0x514/0xb70 [ 809.982715][T31905] ret_from_fork_asm+0x1a/0x30 [ 809.988000][T31905] [ 809.988000][T31905] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 809.995208][T31905] fs_reclaim_acquire+0x71/0x100 [ 810.000676][T31905] __kmalloc_cache_node_noprof+0x66/0x620 [ 810.006933][T31905] create_worker+0x112/0x7c0 [ 810.012062][T31905] workqueue_prepare_cpu+0xe4/0x170 [ 810.017780][T31905] cpuhp_invoke_callback+0x434/0x810 [ 810.023594][T31905] _cpu_up+0x2ce/0x5b0 [ 810.028193][T31905] cpu_up+0x1d2/0x220 [ 810.032723][T31905] cpuhp_bringup_mask+0xb2/0x1a0 [ 810.038254][T31905] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 810.044581][T31905] bringup_nonboot_cpus+0x17/0x30 [ 810.050135][T31905] smp_init+0x32/0x110 [ 810.054843][T31905] kernel_init_freeable+0x27f/0x3e0 [ 810.063129][T31905] kernel_init+0x22/0x1d0 [ 810.068249][T31905] ret_from_fork+0x514/0xb70 [ 810.073760][T31905] ret_from_fork_asm+0x1a/0x30 [ 810.079948][T31905] [ 810.079948][T31905] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 810.088533][T31905] cpus_read_lock+0x3d/0x160 [ 810.093918][T31905] static_key_slow_inc+0x12/0x30 [ 810.099474][T31905] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 810.106179][T31905] nbd_genl_foreach_sock+0x265/0x450 [ 810.111995][T31905] nbd_genl_reconfigure+0xbbb/0x1040 [ 810.118088][T31905] genl_family_rcv_msg_doit+0x233/0x340 [ 810.124767][T31905] genl_rcv_msg+0x614/0x7a0 [ 810.130248][T31905] netlink_rcv_skb+0x226/0x4a0 [ 810.135636][T31905] genl_rcv+0x28/0x40 [ 810.140146][T31905] netlink_unicast+0x8ef/0xa80 [ 810.145473][T31905] netlink_sendmsg+0x7f0/0xb20 [ 810.150861][T31905] sock_sendmsg_nosec+0x14e/0x190 [ 810.156961][T31905] ____sys_sendmsg+0x54e/0x850 [ 810.162282][T31905] ___sys_sendmsg+0x2a5/0x360 [ 810.167571][T31905] __x64_sys_sendmsg+0x1b1/0x290 [ 810.173055][T31905] do_syscall_64+0x166/0x520 [ 810.178171][T31905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.184587][T31905] [ 810.184587][T31905] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 810.192371][T31905] __mutex_lock+0x197/0x15a0 [ 810.197493][T31905] nbd_queue_rq+0x373/0xff0 [ 810.202520][T31905] blk_mq_dispatch_rq_list+0x499/0x1990 [ 810.208669][T31905] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 810.215738][T31905] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 810.222256][T31905] blk_mq_run_work_fn+0x167/0x2f0 [ 810.227817][T31905] process_scheduled_works+0xc3d/0x1630 [ 810.233901][T31905] worker_thread+0xa47/0xfb0 [ 810.239027][T31905] kthread+0x38b/0x480 [ 810.243621][T31905] ret_from_fork+0x514/0xb70 [ 810.248735][T31905] ret_from_fork_asm+0x1a/0x30 [ 810.254018][T31905] [ 810.254018][T31905] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 810.261233][T31905] __mutex_lock+0x197/0x15a0 [ 810.266361][T31905] nbd_queue_rq+0xc1/0xff0 [ 810.271312][T31905] blk_mq_dispatch_rq_list+0x499/0x1990 [ 810.277388][T31905] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 810.284249][T31905] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 810.290749][T31905] blk_mq_run_work_fn+0x167/0x2f0 [ 810.296312][T31905] process_scheduled_works+0xc3d/0x1630 [ 810.302396][T31905] worker_thread+0xa47/0xfb0 [ 810.307521][T31905] kthread+0x38b/0x480 [ 810.312121][T31905] ret_from_fork+0x514/0xb70 [ 810.317272][T31905] ret_from_fork_asm+0x1a/0x30 [ 810.322568][T31905] [ 810.322568][T31905] -> #1 (set->srcu){.+.+}-{0:0}: [ 810.329703][T31905] __synchronize_srcu+0xca/0x2f0 [ 810.335176][T31905] elevator_switch+0x1e8/0x7b0 [ 810.340490][T31905] elevator_change+0x2fa/0x480 [ 810.345782][T31905] elevator_set_default+0x375/0x440 [ 810.351510][T31905] blk_register_queue+0x404/0x4f0 [ 810.357071][T31905] __add_disk+0x6b8/0xdb0 [ 810.361930][T31905] add_disk_fwnode+0x100/0x3a0 [ 810.367219][T31905] nbd_dev_add+0x733/0xb60 [ 810.372158][T31905] nbd_init+0x168/0x1f0 [ 810.376864][T31905] do_one_initcall+0x250/0x870 [ 810.382146][T31905] do_initcall_level+0x10a/0x1a0 [ 810.387704][T31905] do_initcalls+0x59/0xa0 [ 810.392570][T31905] kernel_init_freeable+0x29d/0x3e0 [ 810.398306][T31905] kernel_init+0x22/0x1d0 [ 810.403166][T31905] ret_from_fork+0x514/0xb70 [ 810.409307][T31905] ret_from_fork_asm+0x1a/0x30 [ 810.414602][T31905] [ 810.414602][T31905] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 810.422427][T31905] __lock_acquire+0x164c/0x2de0 [ 810.427814][T31905] lock_acquire+0x115/0x350 [ 810.432845][T31905] __mutex_lock+0x197/0x15a0 [ 810.437978][T31905] elevator_change+0x1af/0x480 [ 810.443282][T31905] elevator_set_none+0xb5/0x140 [ 810.448666][T31905] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 810.454998][T31905] nbd_start_device+0x189/0xb30 [ 810.460381][T31905] nbd_genl_connect+0x167d/0x1cd0 [ 810.465944][T31905] genl_family_rcv_msg_doit+0x233/0x340 [ 810.472032][T31905] genl_rcv_msg+0x614/0x7a0 [ 810.477066][T31905] netlink_rcv_skb+0x226/0x4a0 [ 810.482362][T31905] genl_rcv+0x28/0x40 [ 810.486866][T31905] netlink_unicast+0x8ef/0xa80 [ 810.492238][T31905] netlink_sendmsg+0x7f0/0xb20 [ 810.497537][T31905] sock_sendmsg_nosec+0x14e/0x190 [ 810.503095][T31905] ____sys_sendmsg+0x54e/0x850 [ 810.508380][T31905] ___sys_sendmsg+0x2a5/0x360 [ 810.513582][T31905] __x64_sys_sendmsg+0x1b1/0x290 [ 810.519037][T31905] do_syscall_64+0x166/0x520 [ 810.524155][T31905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.530572][T31905] [ 810.530572][T31905] other info that might help us debug this: [ 810.530572][T31905] [ 810.540794][T31905] Chain exists of: [ 810.540794][T31905] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 810.540794][T31905] [ 810.554539][T31905] Possible unsafe locking scenario: [ 810.554539][T31905] [ 810.561989][T31905] CPU0 CPU1 [ 810.567358][T31905] ---- ---- [ 810.572721][T31905] lock(&q->q_usage_counter(io)#53); [ 810.578097][T31905] lock(fs_reclaim); [ 810.584609][T31905] lock(&q->q_usage_counter(io)#53); [ 810.592516][T31905] lock(&q->elevator_lock); [ 810.597112][T31905] [ 810.597112][T31905] *** DEADLOCK *** [ 810.597112][T31905] [ 810.605257][T31905] locks held by syz.3.6435/31905: 6, last CPU#0: [ 810.612668][T31905] #0: ffffffff916f7b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 810.621483][T31905] #1: ffffffff916f7960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 810.632207][T31905] #2: ffff8880213461c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x1b70 [ 810.643617][T31905] #3: ffff8880213460d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x1b70 [ 810.654593][T31905] #4: ffff8880278fb840 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 810.665251][T31905] #5: ffff8880278fb878 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 810.676258][T31905] [ 810.676258][T31905] stack backtrace: [ 810.682150][T31905] CPU: 0 UID: 0 PID: 31905 Comm: syz.3.6435 Not tainted syzkaller #0 PREEMPT(full) [ 810.691521][T31905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 810.701580][T31905] Call Trace: [ 810.704863][T31905] [ 810.707791][T31905] dump_stack_lvl+0xe8/0x150 [ 810.712391][T31905] print_circular_bug+0x2e2/0x300 [ 810.717429][T31905] check_noncircular+0x12f/0x150 [ 810.722386][T31905] __lock_acquire+0x164c/0x2de0 [ 810.727256][T31905] lock_acquire+0x115/0x350 [ 810.731779][T31905] ? elevator_change+0x1af/0x480 [ 810.736736][T31905] __mutex_lock+0x197/0x15a0 [ 810.741331][T31905] ? elevator_change+0x1af/0x480 [ 810.746284][T31905] ? rcu_is_watching+0x16/0xb0 [ 810.751052][T31905] ? work_grab_pending+0x3d1/0x930 [ 810.756167][T31905] ? elevator_change+0x1af/0x480 [ 810.761107][T31905] ? __pfx___mutex_lock+0x10/0x10 [ 810.766139][T31905] ? lockdep_hardirqs_on+0x7b/0x110 [ 810.771422][T31905] ? cancel_delayed_work_sync+0xd9/0xf0 [ 810.776960][T31905] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 810.782418][T31905] elevator_change+0x1af/0x480 [ 810.787195][T31905] elevator_set_none+0xb5/0x140 [ 810.792052][T31905] ? __pfx_elevator_set_none+0x10/0x10 [ 810.797522][T31905] ? xa_load+0x1db/0x210 [ 810.801852][T31905] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 810.807659][T31905] ? kernfs_add_one+0xfc/0x510 [ 810.812427][T31905] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 810.818676][T31905] ? sysfs_add_file_mode_ns+0x258/0x300 [ 810.824237][T31905] nbd_start_device+0x189/0xb30 [ 810.829091][T31905] ? device_create_file+0xf4/0x1b0 [ 810.834373][T31905] nbd_genl_connect+0x167d/0x1cd0 [ 810.839405][T31905] ? __pfx_nbd_genl_connect+0x10/0x10 [ 810.844946][T31905] ? rcu_is_watching+0x16/0xb0 [ 810.849743][T31905] ? __nla_parse+0x40/0x60 [ 810.854287][T31905] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 810.860642][T31905] genl_family_rcv_msg_doit+0x233/0x340 [ 810.866221][T31905] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 810.872296][T31905] ? __lock_acquire+0x747/0x2de0 [ 810.877239][T31905] genl_rcv_msg+0x614/0x7a0 [ 810.881744][T31905] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.886771][T31905] ? __pfx_nbd_genl_connect+0x10/0x10 [ 810.892156][T31905] netlink_rcv_skb+0x226/0x4a0 [ 810.896923][T31905] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.901954][T31905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 810.907250][T31905] ? down_read+0x2b9/0x320 [ 810.911677][T31905] genl_rcv+0x28/0x40 [ 810.915668][T31905] netlink_unicast+0x8ef/0xa80 [ 810.920472][T31905] netlink_sendmsg+0x7f0/0xb20 [ 810.925257][T31905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.930543][T31905] ? aa_sock_msg_perm+0x144/0x210 [ 810.935672][T31905] ? apparmor_socket_sendmsg+0x98/0x360 [ 810.941229][T31905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.946620][T31905] sock_sendmsg_nosec+0x14e/0x190 [ 810.951666][T31905] ____sys_sendmsg+0x54e/0x850 [ 810.956452][T31905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.961743][T31905] ? import_iovec+0x73/0xa0 [ 810.966251][T31905] ___sys_sendmsg+0x2a5/0x360 [ 810.970931][T31905] ? __lock_acquire+0x747/0x2de0 [ 810.975894][T31905] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.981093][T31905] ? futex_wait+0x2a2/0x390 [ 810.985609][T31905] ? __fget_files+0x3a2/0x420 [ 810.990281][T31905] ? __fget_files+0x2a/0x420 [ 810.994876][T31905] __x64_sys_sendmsg+0x1b1/0x290 [ 810.999818][T31905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 811.005298][T31905] do_syscall_64+0x166/0x520 [ 811.009898][T31905] ? trace_irq_disable+0x3b/0x140 [ 811.014925][T31905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.020995][T31905] ? clear_bhb_loop+0x70/0xc0 [ 811.025672][T31905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.031556][T31905] RIP: 0033:0x7f81473a8f19 [ 811.035970][T31905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.055580][T31905] RSP: 002b:00007f81482d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.063996][T31905] RAX: ffffffffffffffda RBX: 00007f8147625fa0 RCX: 00007f81473a8f19 [ 811.071966][T31905] RDX: 000000000400400c RSI: 0000200000000080 RDI: 0000000000000007 [ 811.079934][T31905] RBP: 00007f8147437f6d R08: 0000000000000000 R09: 0000000000000000 [ 811.087900][T31905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.095868][T31905] R13: 00007f8147626038 R14: 00007f8147625fa0 R15: 00007ffeef1cebd8 [ 811.103850][T31905] [ 811.223224][ T4953] block nbd4: Receive control failed (result -32) [ 811.223299][T29194] block nbd4: Receive control failed (result -32) [ 811.660781][ T50] netdevsim netdevsim4 eth4: set [1, 1] type 2 family 0 port 6081 - 0 [ 811.660994][ T50] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 811.661025][ T50] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 811.661065][ T50] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0