last executing test programs: 2m50.854721636s ago: executing program 3 (id=4693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x10000, @value=r1}, 0x28) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000140)=@null) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000000), 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x24040800) listen(r6, 0x10) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/67, 0x43}], 0x2}, 0x0) 2m50.50262356s ago: executing program 3 (id=4696): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x10) clock_gettime(0xa, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_pressure(r1, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000040)={'full', 0x20, 0xfd6, 0x20, 0xfffffffffffffff7}, 0x2f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x8, 0x4}) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f00000003c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x6}}, {{0xa, 0x4e22, 0x4a3, @private2, 0x4f0}}}, 0x108) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000cafa00100001799aab340000000000000000000000000000000000000000ddd079afc51ccc1360a7eb3ab8d1240eda9fbd74fbae17ba502f608f464caee48bde43dd1128c92c782dac4557d45b835814a67d0883c4c74ce9fb975411ea5ddc014c66c902da9c7707a328dbf2d6969a53050833768e798a18fe92e81d0f530dfc2cef69ccaeead330b35bdd10df3ee1eadcb747dd0df913dec7ba", @ANYRES32=0x0, @ANYBLOB="0000000028120700080004008100000008001b0000000000"], 0x30}}, 0x4004090) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2m49.163754288s ago: executing program 3 (id=4700): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r1 = accept$alg(r0, 0x0, 0x0) (rerun: 32) sendmsg$alg(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="02", 0xffc8}], 0x1, 0x0, 0x0, 0x4000080}, 0x4050000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) 2m48.856475154s ago: executing program 3 (id=4701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}}, 0x40) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x254, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x254}, 0x1, 0x0, 0x0, 0x40800}, 0x4000001) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0xff}}, @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4}}]}, 0x30}}, 0x20000040) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40000b0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x10c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x7e}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x9369}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x2004c041}, 0x11) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="7edae019ed99"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x18, 0x34, @random="f61d07e0ffe3ce0cc807b32e8ae6fcf26d6aa171"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000a80)={0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000b00)) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x12c, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}, @NL80211_ATTR_FRAME={0xe0, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @from_mac=@device_b, @device_a, {0x9, 0x2}, "", @value={0x3, 0x1, 0x2, 0x0, 0xae}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @random="a4fb397eefd08556b220d6111563825e27a9c10aada6a3dfacdde78bf6985a1554ed038cbb255a0acded5500a1317779ab02ffb53935304b1902ab68b2d4758c674777d957de50ce97128454f250ff171f42783d86b956b716defd35793b14b16490da64ad04bf4d217293fd10faa678c219fd95d685d05e7c63e284222d7dae4a7b0a9ed42c6c5d9431ab65972b0c7c26ca2d3dff2e3325b8a52d1279606709b45ff53bf9f4f09988e2a2f626af4fc945b8f0e463ecba1d567c1cfd0cc3"}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x8001, @random="0e3ba568ee30"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24000091}, 0x44800) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000d40)={'macvlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r5) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x70, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44008828}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000004880)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004840)={&(0x7f0000000f40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x138, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_USERDATA={0xd1, 0x7, 0x1, 0x0, "1b03cebeb33a968481670927f7d76e9f07190664d713e56a136ae0f666aa57828cdb0c3648396ca087e02198a541b54b60f66796cd73d5dc0b5ace65fe4c4d565697a721207f881445df151723c18f7a0263e1da2bd774eef25d37ef604b68c3eb6190757fb3193ae3f1418aafbbc103410361062fbed0c873d0edc8ab9ee986c9307fd01edc6c6653b4f370588cbfa641816379cdb1a102b8c0a2cd47c56bcfad7bf616c0658ba87515ce3aaa39f5e4ea56519ac3e18ad44cf323d0ed75ef3278256fff0aec68b1b7d4647ef9"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0xec, 0x16, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14}]}]}]}, @NFT_MSG_DELSETELEM={0x32b4, 0xe, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x19d0, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc0, 0x6, 0x1, 0x0, "d294b0807c8cf9c788c53d566689ac1dc07bdcc2410c8cfac8d30dd026a40bd9a9a4965c13eeaf26794f544e84e6d869c6aca97eda89a7295e5dea32aebd89271165722f4f268bc0c6266f67c9a24494ae6d86a0be39952215bc826da174a98b0a4839ac91755eefbb89787a5da2444b76e920bab337a7b328a0a24981bac88ad884794f2c06124e74178f0a5931b356c48bf89202755494c3a8a754d631955ebec5575bbe97e8b146adb4b75bc3feff6ccf60ca08d2eed065a400ae"}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}]}, {0x4f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x448, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd8, 0x1, "9280747f522f6fd2085f0a0a10f086c9961a558e325b51ab5aef462fd30a35d36a9391218c1f97080d5b36a48dfb8d1b66b8bb2f80634b415ba8f66091a41d8818403fb94764d7f4346ace1f78fbec453197f931b6198b8dc2de794d55795ee23b529651e6ed072796751c4ec75152c747e3b3622e8da7037eccc5e34396e44c85ccb1e92c1c12454f703f606107dce8818b30e9988a6af195f1afc160b00829b06d62d1ae3c082d01be6dadd607952918d21b6ff1bad2764035312490840c285d7d6eba716f6a3da752cd943395cdd1fdcade95"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "eccbca755aabfa0e232cef6751ca52535feda238c216c2dfe6b9f4ae634118478ec9fef67d8c0a520787cbebd49bc8409739840ee4bd1d3b2906da4c1190eadde72ea61366771f1b7a258653e133b3de976bb52bdfbdf58def603cb4fe4852dd0a1faa8adc323a9549dc8d2111b14bec5bd0b0f551b2d4f571340e87f1059e708629577dfef248a91802b5d67f98f6540066f3134a81d8f818cc38e8708557af504a3397c44710ff061dd7c44710062a56ab89536b6b523f670a4cf3159e5d5fb3182ed6268e9c03ca7cb40bcb1033a63649"}, @NFTA_DATA_VALUE={0xe8, 0x1, "cb12313ad055e0e3d1505f7674fe12bfa9a273fb27a37d40876c2440b744b4060e93d022142b2fb5ea4444cffb589c85d299912fb31e597da2526fcb23f7b688eab7fb440d647471c65655fa702143884385a6229dd2e36126635c7f6bfcdf3ac2da902af5deacb8c760d09f6373ef788cd461c9924164f512bb9939a587033fb28232e28a85c1ae6bb2d16de60f3d58d930bce4ab5edaf6fa9337eac9967a9e6c3e11f8f0312a47d9a10147ee8369ed80fff6ed003f5a17cf6964aa1450d836b040992af3ce6048a7c7aed7c7adaf66a01c4b05ae53c9ee949dd00049ad742d114c6c47"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "4152676bf5e664f0faaedde42f708229e749c5c8bbd7130d5869ef1e4d20b50ac8fbdd0916ef8c5a49f176c9bad7a250bcabee2bb2a07a8b016c00ec3f38f136aa38251edee650baadc0fadb7c742171471a472a89c58cddbfc7ca02dbacb4458d93fdc1c317aa4fe3a4cc78ea461c3a5abd7750211351c0dd30f3e5a095276ba2ea84adddd9209c0eeb9484a9ef2312cedf1f26c4a669bff989b577d3e882263829e593b972c1815db0e6040cbe92f45a4c087eeb1c42"}, @NFTA_DATA_VALUE={0x37, 0x1, "6b525b37937a5ea6acf7b35cf38d94bc3a9fc7dcd1494e0030d40d3e27ac338343bd0a9f6e7ef95095cedeb7347dc858497511"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xf4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "d21514cf83c17da828f72b674528f142ae22affc1b975fb023976e70e0fe23013145ca7508a6e0d19d5917ee9b6a6e1866b8529575ecc2cb6bb675ae4f063958b35c6b39adf5d916b6b139d57f24da21982340c30c49b03a49ddec6ceaad302a5f4f36e060945ee77974de806e25580f413eca9a9b783ff0e69a953524bc1fa2175edb4556d050fe6163b1b24ff60965697065040eab0cfcc2bbd7a562"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x20d0}]}, {0x1314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xcb, 0x6, 0x1, 0x0, "c3ff1b06b695038c94e67cd05f0b5338f0b424e2daeac21dc51d74fea10fbfa524cc75005c33a00c2dd295c2e74cdec1bf12c7fcda40f12695194f838cf627e2afa3e7414f92b625f1faa0c42b3049e825002b1822e518cc20c7032fc0c33a25c11124cceddf9f8d6b668ca284b9148929f04a6877626ad1a2dd9bf6935223480bf743d9478abf77fd2b575e64562ddf318b4200d018bba3a168758874d460efc0f2d8a02ffeaa9edb35b3dab0971a8c699883aebdcd3bc5a8cfc0156d35c1cb7019bd13a39812"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY={0x164, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7e, 0x1, "6f51374d9159b72d423f546e2035bb225c6af80fe2199ed5c59dd7b9157d0ce764b9df435db72690c70f21080497881323726ee5d31447ae89bd05eac3d0048d058d13f533b21a5269e898dc155bddda56d06542896ebac58c2f95611f9e12d7d0b681be31eb672b46a8b7fbe84b7ab7e230f1cf16b6bfa0e0d3"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "7c7a6d0ca822a70a88a06cd073f204a0ee6e058114524976913b66973f889ba1c46aa6ce3e4a6995a1c375f947ec45094a4e1a92022c90782b63ef64337c8bcbe2287372d96e6fc1493073c5dd6d92f91fe4b322d4a31cb061dacbb9ce5c641c8262ace090988dd79e3ce794133c9182c3075120e439703dddc79faf12420b21d9815abc926ce69860206967493a631a7bd34e447a4bbc34c902ad7f"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x10c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x97, 0x1, "2f28bb614cc03f402e902547e5b99743c8cae7004b14e1be4b9243d3ad8eca5a55c8f0cf15c9f8005a3963e0ee324b856aa9f3b91bb60c02260e7cb46f279f564c7acc873d32c30675b14f5cbfa0b73a4e290a52d351a0fdf4644fb56b44cbaaaeb7a20aeb000664348ad14af1caeffe8799e3ff40b39936cafc774aa1a95e4bb00ba862a5f42a6908640b7ab96db15599d558"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18b8, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xb4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x33, 0x1, "da972049289ce79e1c06d1d9576d7b2d9c92e85eb9c18e93056b2036449300ca75d608d3aaf08bbc71cf8937ca9daf"}, @NFTA_DATA_VALUE={0x7b, 0x1, "f706a9031179b5c5cf99eb773746b0d7ab880ba0e8f3a87c03c2734fd937137c104e5e5e7ffbb66baac9eeed1d7e837b6998ff96f1834fb238872e12bf49d99eee365a7ee8a5b05eb09fee752b6a5618002df18eda811159f547558cc1bab308130e22e0eca0fee9d68cc5899ba91af501e307c7b38910"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}]}, {0x1030, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x480, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x7c, 0x6, 0x1, 0x0, "fce7dbf6398c2b482027ff3b606cc5fec2f6e5991ea00ef4b13897048aeffafc67f5c39743a81c683bd35e4968aa7c3a57708250f014ff45196eb5232a733fee76a568cabd0fa2f9bd0653942fb59026c81ffe52874990038691ebad69006182cb1a56751f4b20483dbbbad1c7d55702103baa26a71bc4b8"}, @NFTA_SET_ELEM_DATA={0x1d0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "00c9f749cea9eb4458d7fce961440a0d4a85d3f81a7b2296be7d3e5d725f6ec4cf5fb136b20b37fc550a14841418a3f55920cb1462946a0f4e02d9139537b718aa188b0466deb4b146120aa5598f7401cf811aa648636b638867d0d94f71896fa69cbaee9e27dea9d38ab8dad09c4803ae81324b138171ff2270c41612fdd2633fb3359decd914cf2fd10f2c9109efabf476efef1b87"}, @NFTA_DATA_VALUE={0xe8, 0x1, "93801ec8c8b7009a5ce8ed6197590cad808ed32187fe9faaf2b0a210e9ddcffa7da11aabcaecf209499b32b0de99f3960bbff8430c37b449c51cde5aa3caa8b2b5555679a5a5be547dec5e3b2357ffdacf1b8de68f4379c3b4ced89d863f05d37449057e166192861410e59a571622e876723b13469f2108e783903fbe33f80967ef8dcba0e732ac124b77b34fb5dfa56f883fd69fdbc0d9d655e88acc8cc92f9d460be56b12a7201ed004886a0f0a694fd82016cc597a44d4434b4eb26cec21d68570100857e72ed1f448884b4ca5396e21fb68756d07cb52fbdace477e0dd0c705e8b5"}]}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x71, 0x1, "9c58910c146c00293820bf0f171bc301b54261fedb791a3d68d6acb1d2f3ec7751925573a2442616caa466db7d51fa0abb6518266b00f10bc0ca320c78ffbf5d241d886a3b748ab553ae31724f19b10e0f33f071d2b4a7dec236a945e6699ac83c84dacaf42691ad31b08bb67f"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_USERDATA={0x8e, 0x6, 0x1, 0x0, "a249edbf88a326af564e66e192bb95db4f02a9f48b060589aa1799dde6cac827a4b9d78af72fd95b0321e96bfb41d520b5897e0d65330308ae1bff3c66c806fc80f4ff81c5e380a7feea9b886ed0ab53c60772837e4b69851cb17064e8c1d923c54ad8b09dc002096c2610eb48d497fcef7a5cef501d7a7f7c2a243d6330bef5671ee58cceee2e334a19"}, @NFTA_SET_ELEM_USERDATA={0xcc, 0x6, 0x1, 0x0, "4cf9f0622e714b1884f2f07d7096c3d1052ed3cb322148325a58c84819abd15a7d672180897e42d8beb629cb3a998ce463db0bd918a705f48e6590edc8862442075d11facce6386c20d2314dda0414809bc23b6e86f934f9d57c117b81ed49732611f82bb07106968719076c69a9be11024c1b0633b20f386db620dbb6c101cc89cc7eff46d61eb8bd3ef4ac32a2c888624d20a7dabbe52f19a0d8b385a589017b0fc014c4bca28aa168f55067537d41d3598396cf430e72fdf31f533321814054384ad0784f6cc8"}]}, {0x4}, {0x338, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "8bd36bcd5d2fe1ee1846b37fe43e0fda342bf8a09c74bee793cf41f080b700470179412cd4ac4d16343281fa6b47c0405e867355589fec52b567bdf21771d24af3fd0c2de5474274a3f91b4b1cc476bcd49e7edf13bd12acd8ce612b3cef966843bfa8348b04cb985c629b68fd352f6f3002ef464076b79692200f200a00d6a93ed47a0f1010ad5966055c04aa0bd3feeefc0ebfad317900f396b1989e8eb31ba4a789b30644c3feea2a8628199135b5d01772704baf02420029f59a8e0041"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0xc4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x2e, 0x1, "4766a13574f389651b473ddf0933d02c4216b6f8657a1245abdbe7f44400ab66f3c538e6095b9d8d83bb"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0x19c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "10f297c4c52b1370cda93edd1834eb631b1d558a94fb24e63a03430791476ad29257a80877a1180234c34c96ac1307c415df63fa23623569f6dadae24b34617df7835bc7311b3edb1e864eaa86b7029ffbcae298b9ef8e8cf4fdfea1e93704b702fb630f6790122bb411807a618670b4e7db1a1be7806b6c932cfeef8044b0a16a5d1956262542fde8f725d300d47a195c0065c8c46183c835f6405b49b7a036a6036c3acfadf7854097a01cffe39dd25771dfcf57b17a0e5fd5ca"}, @NFTA_DATA_VALUE={0x67, 0x1, "a00b58a85d3731e84885ada385ec539caf12ccd69658e67c2b64c5c940522aad49a9317b01fdc7182a8489755f01d4ff8eb5c60ba745b2ae05842ab0322ec15670ab36e8d4f05e05704561bca4ae428e0fe094d284d845e9cd9dd48fb1d37a1637c1fc"}, @NFTA_DATA_VALUE={0x3d, 0x1, "ed6e8eba60fb074827c07be7ecc80477c3768c46a10705b172f46d7665942a933f70930d115a3f3e360b59b59e74f2eaa657e578cd896e6c57"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x218, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xe3, 0x6, "e391b6810f5cbbc7d183bec712e32dbb5b8dc404effed840f27c5ce290beab299cc14ba91ad8e0c8b282ad5615645db018024dc6c39bb22674539a035356d0373de65b633d7664403e7595da437ed21284397cd3b3290d689309342be548e60e956fd72a5454f47e3302a86dbbfff63154487211e87a1ac9c7b39607adeec385dab10bda88d37ac340b9f87f314bcaa17fbc6796d9faef57d1e035b1eacac8b4e0880a8f6ed7959491d013e4722c8a7f80cb6487c5b6de5bba0e18d59b4dc66974671f37d3bbce7c7386f3e074cac9224cd702fc366c256c1e31c8bf8cd0db"}, @NFTA_TABLE_USERDATA={0xe3, 0x6, "dca68311b6068541db4d7b9b5ccac98aaaf8cd3b15eca742139377bd9c2e335417a498be0ba1c0d9c04d873f58e89c4e38d94d202e457f148228863d267df47e8bcd3df11d45199575ad25ffd0b23a2d0394d933fc0fdd8519448c321e34462e07455273431b4803f83b94563d828980744d37634895afbe972e12ea02403436f1435ed4647ee3867f8d1202a9a6d74bda3415d41fa85059d14da33317c9c26389799e9220e47c479e2625e50ab338bf05620cc6669b041e9f665191883d2d32e06b8336a6fff23cf475fe8ab985906c9faebf165a88437301890e36926f2f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x120, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x48, 0x8, "39a556d280477be949d43041f846e6b6ca4feacfe5fb26db87875b8de53919fb4fc58b1499c445d06f6784f06f6df02238142b7a2bf72fe3ca047257f355f1714b65bdaf"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x38cc}, 0x1, 0x0, 0x0, 0x10}, 0x20004045) write$cgroup_subtree(r5, &(0x7f00000048c0)={[{0x2b, 'memory'}, {0x2d, 'devices'}, {0x2b, 'net'}, {0x2b, 'perf_event'}]}, 0x22) syz_genetlink_get_family_id$ethtool(&(0x7f0000004900), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000004a00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x20, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xe46}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x845) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000004b00)={&(0x7f0000004a40), 0xc, &(0x7f0000004ac0)={&(0x7f0000004a80)={0x30, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc4885}, 0x4004045) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000004c40)={r0, &(0x7f0000004b40)='\x00', 0x101000, &(0x7f0000004b80)={@align=0xfffffffffffffffa, {0x3ff, 0x0, 0x5, 0x9}}, 0xf8, &(0x7f0000004bc0), &(0x7f0000004c00)=0x7f}) sendmsg$NFT_BATCH(r8, &(0x7f0000004d40)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004d00)={&(0x7f0000004cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000004ec0)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004e80)={&(0x7f0000004e00)={0x7c, r4, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x2a}}}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_a, @random="a093e76a418c", {0xc, 0x6}, @value=@ver_80211n={0x0, 0x3, 0x3, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @sp_mp_confirm={0xf, 0x2, {0x1d8, @default, {0x1, 0x8, [{0x6, 0x1}, {0x18}, {0xc, 0x1}, {0x60}, {0x6, 0x1}, {0x30, 0x1}, {0x2, 0x1}, {0x6c}]}, @void, @void}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xfbfb}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000005000)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f40)={0x78, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7209}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5f7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x31}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004004}, 0x4002001) 2m48.215327761s ago: executing program 3 (id=4705): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@gettaction={0x78, 0x32, 0x110, 0x70bd2b, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x61}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x78}}, 0x4040004) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r15 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r11, 0x40046721, &(0x7f00000003c0)={r12}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r10, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 2m46.646007078s ago: executing program 3 (id=4711): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x2, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r7, @ANYBLOB="18005e800800060000000000040009"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r8, @ANYBLOB="00082cbd7000fcdbdf253a00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900070000007e000000060065008e910000b1005b00be2ce656b6808f629992de08ad2c993779cb5aa0390a8e9a647384cc767aebedda8b41e77e235f940bb5c7ad6e29c54481661c2f8400cf6d51483810be5b938045051b3be9b0df37db359234e4bfdb6d5230de97b3b3e983e7cad58caa6e02c68c389f18b1cd50847ab727aa66d323dcf0be5a734a4b586a26b6daee3d43d9e1b8d32346b68b0dae504a65d8bba3224ce551753821063fe261ed0a43480162828bcd30b979f16008def8755713e0864ed862d79da897eb000000060065000900000006006500ff7f00100600650002000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r13 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000600), 0x4) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r15, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c110c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb080b) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd700006dcdf250100000008000100", @ANYRES32=r16, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRESHEX=r1], 0x60}, 0x1, 0x400000000000000}, 0x0) 2m31.515428675s ago: executing program 32 (id=4711): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x2, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r7, @ANYBLOB="18005e800800060000000000040009"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r8, @ANYBLOB="00082cbd7000fcdbdf253a00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900070000007e000000060065008e910000b1005b00be2ce656b6808f629992de08ad2c993779cb5aa0390a8e9a647384cc767aebedda8b41e77e235f940bb5c7ad6e29c54481661c2f8400cf6d51483810be5b938045051b3be9b0df37db359234e4bfdb6d5230de97b3b3e983e7cad58caa6e02c68c389f18b1cd50847ab727aa66d323dcf0be5a734a4b586a26b6daee3d43d9e1b8d32346b68b0dae504a65d8bba3224ce551753821063fe261ed0a43480162828bcd30b979f16008def8755713e0864ed862d79da897eb000000060065000900000006006500ff7f00100600650002000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r13 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000600), 0x4) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r13, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r15, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c110c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb080b) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd700006dcdf250100000008000100", @ANYRES32=r16, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRESHEX=r1], 0x60}, 0x1, 0x400000000000000}, 0x0) 2.288912538s ago: executing program 1 (id=5793): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x2000) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff1}, {0xe, 0x6}, {0xc, 0xffff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc041) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000506010800000000000000000a000002050001000700000005000100070000000900020073797a30000000000900030073797a32000000f8f45dd96e000900030073797a360000000005000100070000000900030073797a"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c005) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0xfab16000) 2.20149321s ago: executing program 2 (id=5795): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r2, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x34040840}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r4}, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x8000, @mcast1, 0x120000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 2.124757222s ago: executing program 1 (id=5797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x3, 0x4}, @hci={0x1f, 0x4, 0x3}, @can, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xa, 0x5}) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x7) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2.018952235s ago: executing program 2 (id=5799): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x2, 0x8, 0x40}) openat$cgroup_ro(r3, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000584de53d42261c7d9500000000000000c6ae2e209df5a40882a8ed93252b7854867dffabbbef04fbc00d0b71f28667aadf8e00fee782c79be267bc879f2b8960e7a5b60b320a417204b5192b29dd565ad58f659f9a5509e9718787d06150bfae42a4f84a50d8ce7825c26713d4ae5248bdceb941f7bab131dad0daaf7510263dadec6b9b2963c93604e456d43c9d479b2c272bf09ba8a07944600d07e7b6675bb1caf4b7c8dee5d9cc32c1aaa91419"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) 1.940739809s ago: executing program 1 (id=5800): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40010022, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, &(0x7f0000000040)=0xffffffffffffffdf) 1.877630224s ago: executing program 4 (id=5802): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'dvmrp1\x00', {0x2, 0x4e21, @multicast2}}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.804657585s ago: executing program 2 (id=5804): syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockname$packet(r0, 0x0, &(0x7f0000000080)) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000100)=0x9, 0x4) 1.665688673s ago: executing program 2 (id=5806): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x66}]}, &(0x7f0000000240)='GPL\x00', 0x4}, 0x90) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ed00010a0000000003000000000000005707e6a9479138c7c12a06a69ae402410821f65bc8d01749539944969cad50b46a4865d4af7dc0cbf0becc41ad7203975d27543b6e704523669f916a8819588985496d"], 0x14}}, 0x0) 1.517923986s ago: executing program 2 (id=5808): r0 = socket$inet6(0xa, 0x3, 0x88) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f00000000c0)={0x9, 0x0, 0x5e76, 0x8}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000020, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000100001040000", @ANYRES32=r3, @ANYBLOB="262d0300b5cd0100400012800e00010069703665727370616e0000002c00028008001500831601000400120014000700fc020000000000000000000000000000060010004e240000"], 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x4000000) 1.413449395s ago: executing program 4 (id=5810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040), 0x4) (async) sendmsg$tipc(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async) close(r2) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) (async) 1.269028344s ago: executing program 0 (id=5813): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r1, 0x3) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000079c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2201}, 0xc, &(0x7f0000007980)={&(0x7f0000006700)={0x1274, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x66}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0x52, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @preq={0x82, 0x41, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x2, 0xf4, 0xff, @device_a, 0x8, @value, 0x1, 0x1, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x1}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @broadcast}]}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x1200, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "287941ccafc16cbd4d28bbac0cdf3767ecfa073d76acb06fd26e454f04f8d78fbd5d863350bf7ee5b7a2534a82fd3b48b48c3a4aa8ab514a6172b448b0e31a7fd072d658e7f55b0c902988fe28ffa04c4b75e7740f8f38d876ce118e3d67650de9d676dc72fa93417ad188e71014e391384e2e3c9558d37d73b40af2a1135036043013cbbf9668b79bbaf80e5f47742d943a0a0d71e89790efba1a46bae0bbcef7a229ae1b1d1e475c9f38647ed1154a00f8dd40d429610c4a59eab2c9a958ab9c2cf565e39145e1d3f92ce24c9fbe620f58bd7bc0f3410f0ae6bf5d6b98f6ae1f2f05790dfeb7c2ee28894c91a8b7ea7926b6683a761ce08565d0359b8fdbc53f847d689fb0a8308519ff27d9f5ab1b121a4c7d5ff9db024f65549bd8f8c3e607b704a2612323b6e1d6ae41542a8c296bd4a00686c6056c5330563cca6fef7d2f23e5e6477d01842bc97a4dbfd7019555a6932355f3c0da922aedb7403bb04fe9470c5a1f896426a293982510b8c9ea478e2973160b96696895cd4d9ad7d8399b9774e90a027f82f2452b8aad0f68c9b05c6ac58a15eccaf5505a6fa9792311bde3478967cc10fc234fd91fd1f8154ea511cdab3f0da6694bbb104c6e2c79c48a2ac836f5ebb1b6d98f2954ccc3fc6084a1971c3ad50458a9cfb8d7c0d64e8590159d1e87373c59529178c2a3e1d292433c659f3967eac48916e8bb933cfa4c4c57dfa2d533c23071e0c107016317439aaea61c8696df8455ae33be4097e5d23f55ef60a8347f21e7bfd2a6f30c31c01033f6b97012a01e70e456ede1537bf30d9eaca8591ade95bb8c4170a785f5d3f7b3284223802bc35e08cff7bb8dde290f967343e4c2b10e034dd6fa9677a39c49f0858207cff93694e7e29c1de8488648cdc1793294f04d0cbce0504bd61f8cc5d5e11c955c4ce1f4a68ddc6dc88f393b87b452bae5227cf37e4f826f4ac56f86a5585618a0a586cb35dd16863605ff241bee3fa5d34e203ad4a2216151bdb212b8665d8fc869256ae382cb681dfa0091986d56b2a38d9f12a1dd171f3504e3bf9b230f061ec72c136cd833a35eb0c9356deb80bd58af4764c27a678ca886fb442997b3cc373f0c8a5c938bb15a0fb37090138aadcc77b37d8291805dfff9f52afcd0af53e9438a07a61c3d3eeabb50f016ac03b728d48e47f930e895993df41ac407e71f76fa64fb8cc2dc00824b3557751bc7f2cbb0b0dc5e30a9ed66a9f0445b14d33dc0c4007457e8aff25a5eab534e93e7a52b86da0c422837c7a911b45ae9d347403700437e62f8aac03a534fb0abbc299996e078ab6ff44db36f5de5dfcfaa09467bc0b4a7e1358fbe1f99aeb7920077e07dc6471a635aeecf4f214c8d4e8e044a3c3cb6b607223cf83a8b584986a271600e4a5b6a956e2fdbd1e6aa5cfc5df76c9f6e82ef6d1187914346c2c707248bdc161beb7bec8ba92bb8ad55db02182a8e63c1fb02740ee993066c11250d608d9e7ded189cb4b1604eaebb935507ac4e5fb124218336595157ac858a0bc81a57e68f43951b8069c01f107cfe8d55b5e66aa1ec5ea530b4c32490e6894cf966dd1ae1a66c45bd94c44018c6e6e3fe91a15ed250065f0f1c7140d339e84533bbbc07bde1acbf46fddcbc231b6ede490703f9454af6bf63300a8a429d1f5207912c621ecdbcd0bfd39f2fb50e4b02d8eedfa9c5593e807a67afda91996d7c53128fcbf789c3027ddbcc0762bce39e3c140847dab35b2efc0077d618d66a194ec7c1983b8a487396586d1317c6512e2ba337cdacef3f02f772dbf86a0a2132114e18dd8e1c61013ff081d156b3cc681f5e3d2b819de620590312df30b8d271c941befedc84fbcfa495703b51b97eca8c6bef5507a257fc1e7f197d49ae4c2bc25e5ff2ed5037c3614e79865b8f44252ed72076aebb5701f3b30c1ecfdab16b78d6723e1ae850202097416bab8b2ab3e3ac32145aee30c8d848461f4fcb3776f7883e6dd685ce88f0907a7039c864e416e20ea64a47e953dc843cc677740b848a4dbe2ccdd491f0ef4bc6a4c836b7e359efb0a35d83c849939cd4227bea66c01da0e0aa5a75359db12355168382ddc890264f5090f8fd1bea2cce27660d10313224ba33cdb4bf9e5734c720e8cc3153ed9607f8997f08ab6b4118a8666777fcea553ccead249aaff745254b5650e9f0dd1b95939d42c34337ceaea06b056a5f68963fbaf2c8b74a7a47d362017d452000cd8cfb3b933a03f2e18daac6aa03046cfdcbfe9f630ded6a4e5aea63f40b4989bacaff607040a4d5e8dfbccc1e564c4ab9b336919937438d9cdec5cb25b5b484a364d6ff15ebc52f092b47d7bcb13813704ab001728ae5793997f4dbe3213f2345e8ef92f70904e241e726f5c4d32cff6dc99eeadf6269bc9ca34c437601603a71b860182c7ac2a5b370568a5182b04a370a9149c9c986de58dcece961ce6452bffeb3fa61d445b9226429506cc810844d2d0c323db84418c7e9f142d5eb5a39361dff7ec47323ce62bf0abd081f39e41af826c5564fc87f0b71ceb6b16950ebc9ff0227eca51517a61fb7e4c3cc3d026de78d1d6144411f03d6115d4ea4a77471de196d4ef6b44af21eeb386b9694e7c166c8858406d15b5ff4a57118d92ea7a4ca78eddf66055f4646c5f484261c97a298591cc2717f9456b93670998675aa87e535d477b990479f7c0f7d9d967ff643a1405afbe58f5aa0447d0056863ea303c65253596fa96493b6e0a3280fe49d8337d540c9bb6a535bc842b53ae901041fe4775a41e1551cc9bb7326f5e17936adafd248694d9a5ae61f1be2b505665c7d4b647f7a91a2ce24782bb820d7c5ed912dd439c9eac4d534929ef1b451def393f378531b9095c8548d60664d5a76a7f762ebd410b4636e9406874075ec792895bd55aa8e9fe364532eecb81c7287f0cb745a775d8956396dbda33ac18c5c6452bd78851b7c2f6eed2b3c1e6d80d6cb2fa4abce2dec4ee8121207b76abe832befb9ff478e2f721274075b0ce815c384e472789c888e5d4a85919d15de7503382c35359ce005a84e43f7243bdbf9ef0cea42d8fd8bc234d81a017d8cc3be964c823edcd395fed771e84a0b28045af23b6e0166b56046d9f7be7d19d4ae71989e68829746816e9052321895610c8734bbb856751191856ff2fb8e8798dca9661c9b83afe8342e7ca3852ef7d794ed19d7a72d4dd70a5f0bdb6518530ed95ffb0ad681c0cc42cdcd06bc5b8862c4e0504cbc32dd58b6854d316ca1d0d667ae94e75f577a174ed25917deeb90d9c32536b03227071f73157d3c403f174d8681c547ee7f6fbb4ca243789d960d0f02d211a9925ff0b53e5f95f657df6d110ac7b90ce92e23704250bbb0a71cd00fd7a3a29d23157f559756ae7d8442be0c7538008d83e69a64429ea604693d7560e11b77701fb95397e12124ac25545472df826e60ea03b027f43f0c26f7063ae82357a557b34ac360da675a37658dbb230133029706e6ef451c65a51f3e84729efacb093b36c19e5ab70102e60b69892fe78132bca1ed2aedca22cc0f6f0a0c252f5b9fa9bedbdeaacec3891de8032f4d5dd2901c9df981a646b3c49e9145bc7c1dbdfd7e42acc28a87ac2029ceff10c34cc6e57030348c1f3a0ca217ecdfc7c6b8e1e5419631a0e464e82c4036f9ce46de2a82b3fb97a782b115e3a1b46cf738254c6e5675c3b938a61177770b3c87c160e0c5a49d0ab30c46d328ea84b845bb6b806fb16ed4033324a5bf50b72e5d45fb50cb385b79c00ef57aba01ac70fbda7ffd28cc02de5ef7ed99d713c10c7737ec3e7fca2e973f6e13108f12d76173c2f3b54e9d0596d1dd1442271f39ffbda4a6a7829511b29251904c7ace3fc09aa339c5b7e7097e8378d479af2bb0db995013fe0336716c5d7e5f5f5046dd2fa46429d68e1cfe7aeab6affffae711ec97cfe3c5a722e79baf73a8a6347167f42b33a8500eff1e04afe1ec1faa831cab1a6aedb65c6500daf243f817fe534164601d4b80829ec7a5451ea4aafe9da57378a46f1efe80c5451ad413e18cb26e2dd16233f80129e1486eb1e1bcf149ba087bd197205644d73590fb06731734d2949e4ca2b12c82d67a6269919305948b558ead6a0067ce09e9ec51057ebd9e3b4808216b3200fe5f6298342372b7fb41c3bd825c4544174b7199aa9a301275aace1c790afde711291e4d7ecea907e7f145737d8aacc138cc2806132ecff3cf3b0a0e94484945a6ab910829a73fcafe11fdcd10dc39533bcda4e3c6167b7e1968263b7b6c8b6f23efc4043ea0840b759b32a284e79737781faea1dff5bc25f2ed4cd5ba26891d5a6daafc8adb03dd9afe22182c66abe715e60e4acc47923ee9078f4a1436f7f293279f34a945fbfe0abccb93489e7d3c238bf292104071b96ea8b298a7ff0fc7bc5ca3efe8989cfe75b59e7b2e34c4159f2362efb564a65b828e7684998e959e99f19abf17a8279ce634e358ea1288215cb6639a9d7533aaf174531b478e4f42fe00a9cd503a32bff398098ee64beee6fc9506e4494907146b6739fbe3ceca9bb9db05aa3fbc12a81eb132907d59cfa2841cdd2a9352f7948b9f3601dffdf95e300dd05b2bb9ee1fabfd994f0ae51381a01f6ba0fda46240766e0dd84d0d040555192c9cd05fee8f3f26df5e28b9ec569eba2f33184f3097e3d70ef4953a36353c0ef08cb6211ddb5ff1abf17b61a91e2e0dfffc8cd655d11d5a98c551f21e92f19369861e45f6bdefc4a0e05d13392d63ff851e94099541dc39612fbc1f2d993b9e76a8420f3b58cb5a3f817c6da632ae580c17988fcd0d6569e0d1237f43c433a3d344dbd50f29782ea9e17250eafa9f73e3ddb82fa77ade4b9400a36b9526e802fb823e4774d05065edf78b658ccf07431b7ee032c7e42d21696bc2de4d17c84403b7c6063b50cf74e30a9303250f73ef6b01b0b2d4477ab2507e332e865179ff7f46bc27578c1fe02ee46bdf64c86719f92261aa768d5bf305babb3de511e002b89fc4705b5d823a2c8f3492511c51c6b3d736017164390e42586826a0fe7fbc07ae02c1571788294a8b7e42fb6e02641504bb8515ec1769ff4039c5a650c9c01628a4cba153e31a27a8a28b4559609576309c9ac4102515001c4ce9835d1d2703c4be18150bdd0edce6165456a5b8ea40569efe342d461730f9a8058a019f595496f29b6c670b87820d37cf6658aa41ed9f8b6e13f9300778bd1769427d213ea88d23b32eb137a9dedd9f20a7b9b2db940bc2af00e27802fe95f79a2d492bab3304177c303d99cb9d98a087f4ec3b2b33b91c6c62bddf46f87c9928a2bf000dae83a9d74fba7b5e0b3a91bb4fe308dc991cbcefd1490173fc7572ba2163c911e64a5c94696a256582ec05a924e1a6e7e702e9cb85c6c5bb350f5eff2e0bf85671f29349a98f156b9fbfb237c9251b5ce79a00f955e2b7bf2a2a8978a02b7bd2c040bdaaa5c0eab0b80a254c474670346014cc060c17c2f0f375b6a6909a728c32478f8b290336057429d5393f21174c5b1b13eeaff8e2eb0372204c8992b4a976f677bbda931ef108ac5a5223b90f9f55e06d476d8ac1a44dd3ff556158ec13c80ce5822c03bdd1e7d6d15196a57da75c3c96b9f50aeb99d89bfcccbae3572983d71bfe08cc3db8847a029ecddba138c2cc93e48a96a77a9dc117e34b27900e700f8e2c96daec88276bcc83234132e4eb66b251522d06105eafa526e138e5035ed86430bf22afee6b87dbff8a29a6e48fc77c2478978c8fd145cb52c1"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd, 0x3, "241b543aa8c6c91384"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x69, 0x3, "e9d2ed398942259aa3a3c1588575c3e5a3950aee40084574f422ea333701b4f06a74480a5e284928d4248427648f51ef80280708c3e2612663684901ef6212785edc4f7638bfde1ffb5ddd6b0538212d7781b51cbb8bf7c9ad327c8da8f1fd1e31417101a2"}, @NL80211_FTM_RESP_ATTR_LCI={0xb0, 0x2, "0e9b51a4e94def5f44afc1ee634465a6a9925119beed34c054aeb3cd816b1a55abc4d219c87fefef527272cd977f22d54f2c4ee36db12c7f8d9f6c35f5ceb568004b951e2987d5907e3cf5697eaefc7ea225c6e264463fd40e01457fdb710f1ae0028ad6e4edfecf4ddf93147a0f218864133825ad8362220848b6d4dae9a744ac611263292872ccbf3ffd175a64bb1a6be2fb9a33245ff2b54310b0a9e701f9f4220b834ea07b8d3d1c911e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xba, 0x2, "549d5d6637dc701e6cec050f312bbdf009ee294a87ffdf273613bc39d219f7b2f39105cdb1381014199b531cc5bafc57334ebdf74b5800fa5648365eb70a6adc214e92a2b529568eb9481221da3a9400b8255e42985f0396efde224e20aad3f0d0adc9578de7c26eff75c600289d7f0904a4a7be1c3a9f3c79e5261c448ef7deb0e34b40eb190c7ea346af0b8ad63bfcd68a0d3a6cfd862bf1d72809318a937eaaa5e398c93b17916bb47fecdc1708c80febee24af7f"}]}]}, 0x1274}, 0x1, 0x0, 0x0, 0x4000}, 0x24088005) getsockopt$inet_buf(r2, 0x118, 0x3, 0x0, &(0x7f00000003c0)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000005700)=""/4068, 0xfe4}, {&(0x7f0000002d80)=""/4112, 0x1010}, {&(0x7f0000004700)=""/4066, 0xfe2}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000440)=""/179, 0xb3}, {&(0x7f0000000500)=""/28, 0x1c}], 0x7}, 0x0) 1.237611191s ago: executing program 4 (id=5814): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%+9llu \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x40, 0x0, 0xffffffff, 0x7, {{0x9, 0x4, 0x3, 0x5, 0x24, 0x65, 0x0, 0x4, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0xf, "4577c7c9a9c07d403ceabd282f"}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000480)={0xffffffffffffffff, 0x7fffffffffffffff, 0x6e9, 0x5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x24, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x14, 0x1, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x39, &(0x7f0000000300)=""/57, 0x41000, 0x74, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000440)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2213d, r4, 0x1, &(0x7f0000000580)=[0xffffffffffffffff, r5, 0x1], &(0x7f00000005c0)=[{0x1, 0x2, 0x0, 0xc}], 0x10, 0xffff}, 0x94) ioctl$BTRFS_IOC_ENCODED_READ(r4, 0x80809440, &(0x7f0000000840)={&(0x7f0000000800)=[{&(0x7f00000006c0)="633690cd560e4e3a69bd121e90f5077e39039ae60c08f173bbf376ba7d30741919291949ae7bc2a8f0f61bbfdc5e522cc4742d8effec651d6063a132e9c762ef19a5a559d619bb9e45c794ac1327a8bbb494d5d5e434b11885ac3fa96177d27bed5a4c80d8aeec2cdaa038a6c159dac9d1d5e7a51195f648186cd215607c5791709fecff6ea3d99dc1689a82c11f3932ccd8ed3eb61b18df0a5aafdf60fcd67d77556fa4b5ecb5c81fbb3acee0d739eb8872aee20e77106cbc8d0d665b6554fffd77c49393a755ad90e8f17364da5a039816a942f258809458c82f4e012dcd0d275cacaa", 0xe4}, {&(0x7f00000007c0)="c28709aba8129c", 0x7}], 0x2, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x7, 0x100a}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f00000008c0)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000900)) r7 = openat$cgroup(r4, &(0x7f0000000940)='syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r7, 0xc0285840, &(0x7f0000000a00)={0x0, 0x9, 0x37d, 0x0, 0x401, 0x6, 0x0, &(0x7f0000000980)=[{0x15, 0xfe, 0x8}, {0x6, 0x1ff, 0x7fff}, {0xfffffff8, 0x101, 0x54}, {0x1a, 0x101, 0x5}, {0x4, 0x101, 0xc0000}, {0x0, 0x1ff, 0x10000}]}) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r4, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000c40)=[0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0], 0x0, 0xf4, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x79, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xf, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xa}]}, &(0x7f0000000ac0)='GPL\x00', 0x80000001, 0x8a, &(0x7f0000000b00)=""/138, 0x41000, 0x0, '\x00', r2, @fallback=0x4, r3, 0x8, &(0x7f0000000bc0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, r6, 0x5, &(0x7f0000000f00)=[r1, r5], &(0x7f0000000f40)=[{0x2, 0x3, 0x8}, {0x2, 0x2, 0x1, 0x6}, {0x3, 0x3, 0x8, 0x2}, {0x3, 0x4, 0x2, 0xc}, {0x3, 0x5, 0x0, 0x2}], 0x10, 0xb}, 0x94) sendmsg$inet(r4, &(0x7f0000002380)={&(0x7f0000001080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000002140)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="98090b300a36b33004de2c19c09496aeb68929f3fbafef1802662df4670b4ca90a34fc1bec9c0a8f34ef90cd53139877c6cc4bc25f5715d5d9a978b020d22f56a8852599c43375d29251ae53ea57e96599804d9b3a15b7a6ba9987bb7b18d180ad134a0cf985bbd38dcaffc8f35f717c460b67d0c0d130999b58", 0x7a}], 0x2, &(0x7f0000002180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0x9c, 0x1, 0x8, [{@empty, 0x9}, {@remote, 0x1}, {@multicast1, 0x400000}, {@private=0xa010102, 0x3}, {@local, 0x200}, {@multicast1, 0x6435f196}, {@multicast2, 0x6}, {@private=0xa010100, 0x9}, {@remote}]}, @end, @cipso={0x86, 0x12, 0x3, [{0x7, 0xc, "830852ce0fc83fe095af"}]}, @rr={0x7, 0xb, 0x77, [@private=0xa010101, @private=0xa010102]}, @ssrr={0x89, 0x17, 0xe7, [@remote, @remote, @rand_addr=0x64010100, @loopback, @local]}, @timestamp_addr={0x44, 0x24, 0x44, 0x1, 0x3, [{@private=0xa010102, 0x2f8a}, {@multicast1, 0xfffffc01}, {@private=0xa010101, 0x597}, {@local}]}, @timestamp_prespec={0x44, 0x34, 0x57, 0x3, 0x2, [{@local, 0x6}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x2972}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0x7fff}, {@empty, 0x7fff}]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x6b, [@broadcast, @remote, @multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x1e0}, 0x20000) syz_emit_ethernet(0x5e, &(0x7f00000023c0)={@random="13e11adcdee5", @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x3, 0x1}}, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x29, 0x0, 0x0, 0x0, "cc726e5b2524eb2f30dae048457d9a76dc945072e4fe21c9c3d1cd77a06d3ee7dd921210a5cfae23365211477ac4dd9c5297a2ad5be95829691c65eebc2eddc7"}}}}, &(0x7f0000002440)={0x1, 0x3, [0x103, 0x23f, 0xc78, 0x402]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002480)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000025c0)={'syztnl1\x00', &(0x7f00000024c0)={'syztnl1\x00', r10, 0x20, 0x700, 0x5, 0x9848, {{0x31, 0x4, 0x1, 0x3a, 0xc4, 0x64, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010102, @empty, {[@end, @ssrr={0x89, 0x1f, 0xd1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @local, @private=0xa010101, @local, @private=0xa010102]}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x10, "4f10b9bd7f8146388afbf0293718"}]}, @cipso={0x86, 0x6b, 0x2, [{0x1, 0x12, "9b90b0db76a0bc3026a60ec632f744a8"}, {0x2, 0x6, "d8fa003e"}, {0x2, 0xd, "942c9dd1f822e2170893f0"}, {0x5, 0x12, "1e2d39d4f7698bb8e976ba103a184346"}, {0x2, 0x12, "a401b3a53f7b6ec45ae73cb8da01882b"}, {0x1, 0x2}, {0x6, 0x7, "bcbbc42ecd"}, {0x7, 0x10, "08103bd85e9de6361ea75ffaa5b1"}, {0x1, 0x3, "b7"}]}, @generic={0x94, 0xf, "9858101212ec8cc272661eb704"}]}}}}}) sendmsg$nl_route_sched(r4, 0xffffffffffffffff, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000002600)={0x2, 'netpci0\x00', {0x4}, 0x1ff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@bloom_filter={0x1e, 0x34a2, 0x3, 0x10000, 0x6604, r0, 0x40, '\x00', r8, r4, 0x3, 0x5, 0x5, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002880)=@bpf_lsm={0x1d, 0xd, &(0x7f0000002640)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], &(0x7f00000026c0)='GPL\x00', 0x1, 0x30, &(0x7f0000002700)=""/48, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002740)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, 0x0, 0x2, &(0x7f0000002800)=[r11, r0, r5, r5, 0x1, r4, r0], &(0x7f0000002840)=[{0x1, 0x4, 0x5, 0x7}, {0x5, 0x4, 0xd}], 0x10, 0x9}, 0x94) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000002940)=[@in6={0xa, 0x4e23, 0xb, @rand_addr=' \x01\x00', 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e21, 0xc3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffffffff}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, @in={0x2, 0x4e20, @multicast2}], 0xa0) r13 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000002a00)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000002a40)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r13, 0x84, 0xa, &(0x7f0000002a80)={0x600, 0x4, 0x20e, 0x0, 0x200, 0xffff, 0xa, 0x0, r14}, &(0x7f0000002ac0)=0x20) r15 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r15, &(0x7f0000002b00)={0x1a, 0x2, 0xfc, 0x6, 0x4, 0x7, @broadcast}, 0x10) 1.126334108s ago: executing program 5 (id=5816): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @broadcast, @remote}, 0xc) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) syz_emit_ethernet(0x36, &(0x7f0000001800)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0xfffffffe}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x1, 0x0, 0x5, 0x84ba, 0x8}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = socket(0x1d, 0x2, 0x6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4040004}, 0x8012) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r6, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r8, 0x8000000000000003}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x206c}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r9 = accept4$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x800) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NBD_CMD_STATUS(r1, 0x0, 0x804) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x2061, 0x0, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) 1.047467311s ago: executing program 0 (id=5817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x80, r1, 0x1, 0x70bd2c, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x80}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 960.7ms ago: executing program 1 (id=5818): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0xc00) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="4308f6dafb5ae4f161e62d3ec7e4cda3d6168eb310ca025933fd9f0c9666f00db9d5e831b5617ed116de93347ebe6891e440fd72d6e164d4f2bcfaf437361623b7794ad5a9eb134ff1c03bc29998490de942ac14d3d6a1265a115d5c4d381966778306284f622d134f1f047ff7b04a20b6b8c42e53ad22e7525d26a360e1f03bf71092404f311c0b8f611708e34c1472257c48db7a82b523b89332624bd9ae7a63748587d87923f4af09629122ecfa10c6b85d071fab9ac870ab1223", 0xbc}, {&(0x7f00000001c0)="15a38ebbbad094058abea9dbae4b112fd44cc261572200fdf2bf077d9fa4ac0506650bb041c0e235d20d621a98404c67853ec5392fd40c09b83c64abb18f7b39643a075b55f5b3d3d43a6bc0bc7f591f751cc8f9dbd91c0220d66ad1f6aa9644fb6726d0934157d8e4da22c91557e4ca71273aab3eb273092e4232fc3ee4276598256c7dd74d17774603b235bd6936c3e70d7f43e17cc7204c78cb3b84a29fcc85c6187a41efd0220db172430a90c892cf87979552d25f34810a5c9667c18d2fcbcc0d0f4eb773ce9789e2c7df02b6d96d3df4cf551aefc2540a409b47ded0ea2dda04ab5c292de245", 0xe9}, {&(0x7f00000002c0)="0d19f04ecfe42dddffffcebd9d338f3bd1721e54dcc2ee90cee263d0bec89ed90b8b5d8c03c6557360e2115731ee7317da344ba2e877502b11f9346c336bb37c79adaadafbfa2ab6d86c75d42d7ccddf60e8d240bab21e76fe541a6c1812eb65a78c7a3a5765636c", 0x68}, {&(0x7f0000000340)="72fd129fc720461862cd5b3c40dc2b877f2edcea75175c53926d5883a68e080b506914", 0x23}, {&(0x7f0000000380)="ff8774113df3b6e1d76d64e2fc0a27d65108a1c5ea3f1b92eef641bf9ffd0cb12956f207f0035a3e3c61b88233a50902686f42a2", 0x34}, {&(0x7f00000003c0)="8a0bf22a550a507fda7081d64ba56fc84ab351314a609e9115252a1f130bca80e6301b47c05483d6fe1519d991e788c978412e3fb314450334e027ded37087187e33cb533c5778a3b6463356c553ea562c622de10dbd380f3281bc3f0a95861ce47c044b231bef4139ec7b9984145996c291fe1de692057bfa2648bdc865bf2ba593af5725c69d16c7525c243e7080b28e528f698436df5f024de2e20772102595a9eee3ddc4250ee0d07690dee6201e3d6dc1ad30a7ed4d133176ecaf8fbc9462dd28793f355a8919c4615a", 0xcc}], 0x6, &(0x7f0000000540)=[{0x20, 0x115, 0x4, "b2d777238aeee126a046a7bc"}], 0x20}}], 0x1, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000800)={&(0x7f0000000600)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="d465d7be3af3fd8550ae7bbebd7f737c5cdc753c8bc2458088a1cefea7624b738a414034d900e7112a6a463f627bb77e4fc9a6d4acada4ebeac8084f56d804af9b83337ed802de5ce93c288c96afec69539fd1c0b1880c18a5d5d3574a9cd406e2cf44f0c6e8d679e3aeb1b2535227272e4d5acb117697cd", 0x78}], 0x1, &(0x7f0000000700)="75f4726c2fab30b7a02c096b4d7fb25c102d9d1472b1d120a1bfa5f503df07f97aacab7b9d30993e5c7a56335980004fc5f29ca4bfc7815ed45e6400bbce8d96495be4f3b2d337c49f5d54232fe130db456a5a2bac907262c221bfd04d7577a55af9398bac4f49318ce2d23f391e5034b8bfdd1af27f01a46d16264c10c60abbdb6d5e79621cf9072b19c32d6ffbf018324debf6c709655e334b31f13c3286e9229f7b7ea4332d7ede50ad849c1b8fc43f6702497f3c6a9627e1f1eb6b69a6a7f8e4ae5d87523216164f49fab775d3fa79ace3", 0xd3, 0x8080}, 0x44001) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000840)) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f00000008c0)={0x2, [0x4bf9, 0x3], 0x10}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000940)) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000980)={0x0, 0x1, 0x6, @broadcast}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0xd4, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_HE_OBSS_PD={0x4c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "6236b1dbcaa0c5e5"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "de81bf18b5e3c457"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xc}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "f8315d6c6670a550"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "ac52ea7e7c991d16"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x3}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xca}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x331e4651}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x4040084) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000bc0)=0x1, 0x4) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000c40)={0x40, 0x4}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000c80)={0x0, 0x3}, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000d00)={r9, 0x628, 0x20, 0xfa, 0x1}, &(0x7f0000000d40)=0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@map=r7, 0x32, 0x1, 0x2, &(0x7f0000000d80)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0]}, 0x40) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000ec0)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0xb0e08000) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1f}, [@alu={0x4, 0x0, 0x3, 0x2, 0x6, 0xfffffffffffffff4}, @ldst={0x0, 0x1, 0x0, 0x6, 0x6, 0x4, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}]}, &(0x7f0000001080)='syzkaller\x00', 0xc, 0xb6, &(0x7f00000010c0)=""/182, 0x41100, 0x9, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1203d, r7, 0xa, &(0x7f00000011c0)=[r10], &(0x7f0000001200)=[{0x5, 0x1, 0x2, 0x1}, {0x0, 0x5, 0xb, 0x6}, {0x1, 0x2, 0xc, 0x8}, {0x3, 0x2, 0x10, 0x5}, {0x2, 0x3, 0xa, 0xc}, {0x0, 0x1, 0xf, 0x7}, {0x5, 0x3, 0x9, 0x7}, {0x5, 0x3, 0x10, 0xc}, {0x1, 0x5}, {0x1, 0x5, 0x1, 0x9}], 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r10}, &(0x7f0000000f00), &(0x7f0000001380)=r11}, 0x20) epoll_wait(0xffffffffffffffff, &(0x7f0000001400)=[{}, {}], 0x2, 0x400040) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f0000001480)={0x188, 0x0, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x80000000}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9975}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x188}, 0x1, 0x0, 0x0, 0x1000c811}, 0x80) recvmsg(r7, &(0x7f0000001940)={&(0x7f00000016c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001740)=""/7, 0x7}, {&(0x7f0000001780)=""/202, 0xca}], 0x2, &(0x7f00000018c0)=""/71, 0x47}, 0x12101) socket$kcm(0x29, 0xa, 0x0) 923.677474ms ago: executing program 5 (id=5819): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf2501000000050007000400000006000a00ffff0000050007000b0000000c0009000203aaaaaaaaaaaa050007000700000005001d00040000003bc38f94080e9d9279ade7da31f989ab2942b11e"], 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4040854) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000000eee01006e657464657673696d0000000f0002006e657464657673408af92256696d300000080073000200007464657673696d0000000f0002006e657464657673696d300000080003"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000400000000000000000c00078008000640000000070500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) 879.89367ms ago: executing program 0 (id=5820): syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @generic={0xfe, 0x4, "7701"}]}}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000084) r3 = socket(0x10, 0x80000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYRES8=r1], 0x24}}, 0x4001) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000520099b100000000000000000a000000976ffff009e58c217b3feea4e0bb022214cd6cd12f76bad271f3ce9be1210da4a5b5"], 0x14}}, 0x0) 816.858064ms ago: executing program 4 (id=5821): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x900, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x20}}, 0x4000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x90, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x8}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000400)={0x3, 0x4, 0xae, &(0x7f0000000340)=""/174}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000440)={0x0, 0x200}) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x34, 0xa9, @random="2f5573f0f085cf771d45efa2e1bf69b10d2b354affacd7d4b49bb623e586584974ad0a4c449efd7255fc248a736e94c8"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r3) recvmsg$can_bcm(r0, &(0x7f0000000940)={&(0x7f0000000600)=@caif=@rfm, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f0000000740)=""/135, 0x87}], 0x2, &(0x7f0000000840)=""/201, 0xc9}, 0x2000) preadv(r0, &(0x7f0000001cc0)=[{&(0x7f0000000980)=""/137, 0x89}, {&(0x7f0000000a40)=""/11, 0xb}, {&(0x7f0000000a80)=""/241, 0xf1}, {&(0x7f0000000b80)=""/172, 0xac}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/103, 0x67}], 0x6, 0x5, 0x1) r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000001f00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x11c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c044) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001f80), r3) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x70, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x6, 0x386, 0x1e54, 0x5]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfa}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x20040050) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x28, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0x100, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r7, 0x40086e81, &(0x7f0000002240)=0xe000000000000000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000002280)=0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f00000022c0)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000002300)={'pim6reg\x00'}) r8 = openat$cgroup_procs(r0, &(0x7f0000002340)='tasks\x00', 0x2, 0x0) write$ppp(r0, &(0x7f0000002380)="c21e2dd55eee1a6266bf6aca6cb6319ea97a2eaf43c4c6865104616f402745c9aff6f21f416367245092bc5d92de0d2f85ce9201b01c8f3706acb767adfe9e2a05b066f79d6b03c704a342d8fdf6f87c9f9d47aa426e8f098c4e7441a8a642d573d388cb30ae5e420c6139581b92c95a64b96f6ed52b91e8974d1dd4ee16aa916f4eef3a9bf9431a8868a8cf6e31d08e76e0d36efa7b0fbfe603128194111cfd7d7e5b3de3e0df5fa9f9af61f3cb38b555e7db142f35df13ac8a4b614263314762960869c156cdff5330053ce7c51f6e67c7baadb6c7ce1bcc", 0xd9) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000002480)=0x8) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000026c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x41041001}, 0xc, &(0x7f0000002680)={&(0x7f0000002500)={0x170, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0xc822) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002740), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x30, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x11) 713.749347ms ago: executing program 0 (id=5822): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x1, 0x8000}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 712.558103ms ago: executing program 1 (id=5823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x8, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 677.773099ms ago: executing program 5 (id=5824): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0x27, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044084}, 0x10) 488.708905ms ago: executing program 4 (id=5825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x51}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011d0000000000000000010000000000000001410000001c001700000000000000ed6474683a7379"], 0x38}}, 0x0) 476.187323ms ago: executing program 2 (id=5826): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x144, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0x6, 0x4}, {0xa, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0xffffffffffffff55, 0x2, [@TCA_RED_STAB={0x104, 0x2, "48d4e2d8ea0187b0babf82520e40b0656e42cea0ee927efc8307759957adb574fa7ee6ef92d5d9dd4b8f5f961fe8d561206d96e18822cfb19e8b2f0011e2b40b97ab67bb0d5daa2809fbf3c84502863ad8b841d3866163b3c14070c0e213c1315291095221b81569876b7b193d07248204cb96c159aebbeb692d419c150bf12d0c02411f99640bd42105735c076633670c5973b2eccbbaa93e4628af8447a5866e774ce9cdfe0860526bdbf985c407d017fa52eef7b6d43d97c2bcd8845cfd6367ab81aceaf82b5b7978da1bf5f3d5e80453b2f2719c297527f0c7dfe7979e89a55aef84867e42fdab9cbb5087fb0c1771f5c1798daf796a43dc2007686ab864"}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xc9f}, @TCA_RED_MARK_BLOCK={0x8}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20040000}, 0xc0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2000}) r3 = socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002b80)={@val={0x0, 0x86dd}, @val={0x0, 0x3, 0x1}, @x25={0x7, 0x10, 0x9, "882d9bcbe32f8d266fa82c8a7dcaf1537d7f53bfe88b9d3a88db82562fc9c27d1ea360e3fc4eef06352fe029f585266a5e09694a91ef7b5ce479ee31f8f57844ed30f1bfc8536ee2ca6a21de528a222278b3581b33aed0dba658bed4f0525ca0577ebb265638e1b19c0c2917d129e211e5a0601169b5cb34caaf61f3e0383b34f9a382df6aa7083bfb5870f9a66922239fec87a83f62497d3ba4f97e4fd50fc1a5a68c03a8462313c86339bad244a48aff36d07c9eef202cdafae98cec5b9ec0d01baee3b7dedd0e8345f5dc6fea"}}, 0xdf) 440.487949ms ago: executing program 1 (id=5827): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088480000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000130001c3000000000300000000000867859e95aedbc7fd0f6ed2358441df23cdf113c62f44", @ANYRES32, @ANYRESDEC=r0], 0x2c}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000c80)={'veth0_to_batadv\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44005e00000080dcb3b900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016801800018014000a00ff03000000000000dc7a08f7ffffffff08001b0000000000"], 0x44}}, 0x0) 385.223142ms ago: executing program 5 (id=5828): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000002c5a613ce93a91a3540604ba23622612bf132d432cf34bc9cdc14ef6a36b181e08d394fe98c2f2ffc0e439e2659319fbeeb3a4afa8b3247adc6a87c65c95006e", @ANYRES16=r1, @ANYBLOB="0100000000e91f0000000100000008000100ffffffff08e30100020000002cc3688f3a24a7ee65"], 0x50}}, 0x0) 345.230567ms ago: executing program 0 (id=5829): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x14}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x3, 0x3, 0x478, 0xc, 0x27}, @llc={@llc={0x4, 0xdc, "de", "170d6d46554c95a8bde9ca98a97498052af9778c207566314c8f9a6d3f4e5cee7b8d731ff1ef137731494997a18b69d6ae96ea7136ef841c56a4c1b2148c64a567f5e921b357c0141070"}}}, 0x5b) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000304fdfffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="1453507183c9f9bae9d03708", @ANYRES32=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 223.412322ms ago: executing program 4 (id=5830): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x3000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf254b0000000a00a8008a3c5eddf856000008000300030000000c00a60009000000000000000c00a6000400000000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc050}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fd55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@getchain={0x44, 0x66, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0x7, 0x7}, {0x6, 0x1}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x8800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 153.415185ms ago: executing program 5 (id=5831): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x6, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x3}}], 0x18}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000080)='l3', 0x2}], 0x3, 0x0, 0x0, 0x40080c0}], 0x1, 0x4000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/75, 0x100000, 0x800, 0x5, 0x3}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000680)={{0x0, 0x168e, 0x8, 0x8, 0x80, 0x10, 0xfffffffffffff800, 0x7ff, 0x6, 0x8, 0x80000000, 0x1, 0x8, 0x1000, 0xbe}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 21.143884ms ago: executing program 5 (id=5832): ioctl$NILFS_IOCTL_GET_VINFO(0xffffffffffffffff, 0xc0186e86, &(0x7f0000000200)={&(0x7f0000000180)=[{0x0, 0x0, 0x5, 0x422}, {0x6, 0x0, 0x8, 0x7fff}, {0x8, 0x87, 0x6, 0x1}], 0x3, 0x20, 0x4, 0xfffffffffffffff7}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4f, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x34, 0xffffffffffffffff}, 0x94) 0s ago: executing program 0 (id=5833): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x3c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080), 0x8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) close(0x3) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, 0x0, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000140)={r5, 0xa3, 0x7fffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x22, 0x0, &(0x7f0000000100)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x404c080) kernel console output (not intermixed with test programs): ueue, screwing up backlog [ 498.822186][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3957'. [ 498.826191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.885650][T20801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3958'. [ 499.243301][T20826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3964'. [ 499.243301][T20825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3964'. [ 499.278693][T20808] syzkaller0: entered promiscuous mode [ 499.301605][T20808] syzkaller0: entered allmulticast mode [ 499.511626][T20840] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.860104][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.868924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.966096][T20852] xt_hashlimit: size too large, truncated to 1048576 [ 500.019174][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.913891][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.922687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.629407][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 501.939442][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.947930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.073973][T20813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.279404][T20858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.628708][T20885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 503.971616][T20854] : renamed from vxcan1 (while UP) [ 504.025627][ T796] net_ratelimit: 4 callbacks suppressed [ 504.025647][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.040115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.188398][T20907] batadv_slave_0: entered promiscuous mode [ 504.324422][T20920] netlink: 'syz.4.3988': attribute type 1 has an invalid length. [ 504.337901][T20906] batadv_slave_0: left promiscuous mode [ 504.503589][T20911] netlink: 'syz.4.3988': attribute type 1 has an invalid length. [ 504.539186][T20911] bond3: entered promiscuous mode [ 504.544456][T20911] bond3: entered allmulticast mode [ 504.551074][T20911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.595771][T20918] macvlan0: entered promiscuous mode [ 504.607591][T20918] macvlan0: entered allmulticast mode [ 504.622924][T20918] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 505.016341][T20952] x_tables: duplicate underflow at hook 1 [ 505.060837][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.069399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.288028][T20971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4003'. [ 505.536184][T20985] bond_slave_1: entered promiscuous mode [ 505.550155][T20987] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4008'. [ 505.569212][T20985] bond_slave_1: entered allmulticast mode [ 505.705510][T20998] syzkaller0: entered promiscuous mode [ 505.716188][T20998] syzkaller0: entered allmulticast mode [ 505.819058][T21006] IPVS: set_ctl: invalid protocol: 1 172.30.1.4:20004 [ 505.870717][T21011] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 505.918058][T21011] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 505.929999][T21013] delete_channel: no stack [ 506.091733][T21020] batadv0: entered promiscuous mode [ 506.099582][T17876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.112724][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.121782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.133292][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'. [ 506.159323][T21020] macsec1: entered promiscuous mode [ 506.169969][T21020] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 506.185838][T21020] batadv0: left promiscuous mode [ 506.381164][T21036] syzkaller0: entered promiscuous mode [ 506.391930][T21036] syzkaller0: entered allmulticast mode [ 506.462249][T21041] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4022'. [ 506.486217][T21041] netlink: 'syz.0.4022': attribute type 21 has an invalid length. [ 506.494734][T21041] netlink: 'syz.0.4022': attribute type 6 has an invalid length. [ 506.503978][T21041] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4022'. [ 506.621922][T21046] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4025'. [ 506.651823][T21046] netlink: ct family unspecified [ 507.141040][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.592070][T21116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4036'. [ 507.612811][T21116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4036'. [ 507.639356][T21116] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4036'. [ 507.697977][T21124] netlink: 'syz.4.4039': attribute type 10 has an invalid length. [ 507.729379][T21124] veth0_macvtap: left promiscuous mode [ 507.821153][T21130] netlink: 822 bytes leftover after parsing attributes in process `syz.3.4040'. [ 507.851996][T21130] bridge: RTM_NEWNEIGH with unconfigured vlan 1033 on bridge0 [ 507.855073][T21128] sctp: [Deprecated]: syz.3.4040 (pid 21128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.855073][T21128] Use struct sctp_sack_info instead [ 508.020114][ T5193] block nbd3: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 120 seconds [ 508.031009][ T5193] block nbd3: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 120 seconds [ 508.042655][ T5193] block nbd3: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 120 seconds [ 508.055772][ T5193] block nbd3: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 120 seconds [ 509.073901][T21180] netlink: 'syz.4.4057': attribute type 3 has an invalid length. [ 509.073901][T21181] netlink: 'syz.4.4057': attribute type 3 has an invalid length. [ 509.139618][ T24] net_ratelimit: 3 callbacks suppressed [ 509.139636][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.144742][T21183] netlink: 'syz.2.4058': attribute type 2 has an invalid length. [ 509.212496][T21188] openvswitch: netlink: Tunnel attr 9475 out of range max 16 [ 509.220934][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.230047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.381109][T21197] tipc: Started in network mode [ 509.398611][T21197] tipc: Node identity bbbbbb01, cluster identity 4711 [ 509.421369][T21197] tipc: Enabled bearer , priority 10 [ 509.496435][T21202] netlink: 'syz.2.4066': attribute type 29 has an invalid length. [ 509.517870][T21202] netlink: 'syz.2.4066': attribute type 29 has an invalid length. [ 509.822468][T21225] lo: entered allmulticast mode [ 509.880238][T21224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.910850][T21224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.939742][T21224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.970404][T21224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.998253][T21224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.034050][T21224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.273421][T21254] vcan1: entered promiscuous mode [ 510.302548][T21254] vcan1: entered allmulticast mode [ 510.468477][T21272] __nla_validate_parse: 11 callbacks suppressed [ 510.468493][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4087'. [ 510.539708][ T24] tipc: Node number set to 3149642497 [ 510.587714][T21283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4090'. [ 510.622031][T21283] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4090'. [ 510.821727][T21297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4094'. [ 510.849347][T21296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4094'. [ 511.099089][T21317] 8021q: VLANs not supported on ip6gre0 [ 511.144130][T21329] x_tables: unsorted underflow at hook 2 [ 511.222404][T21333] nbd: must specify a size in bytes for the device [ 511.260845][T21332] nbd: must specify a size in bytes for the device [ 511.661253][T21357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4111'. [ 511.875288][T21364] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4114'. [ 511.893502][T21367] syzkaller0: entered promiscuous mode [ 511.939808][T21367] syzkaller0: entered allmulticast mode [ 511.983101][T21372] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4114'. [ 512.171957][T21379] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4117'. [ 512.317992][T21386] netlink: 'syz.2.4120': attribute type 10 has an invalid length. [ 512.361542][T21379] bond4 (unregistering): Released all slaves [ 512.372735][T21390] netlink: 'syz.1.4121': attribute type 1 has an invalid length. [ 512.403186][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4123'. [ 512.481430][T21386] smc: removing net device team0 with user defined pnetid SYZ2 [ 512.520011][T21386] team0 (unregistering): Port device team_slave_0 removed [ 512.535174][T21386] team0 (unregistering): Port device team_slave_1 removed [ 512.562049][T21390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.579934][T21397] bridge_slave_0: invalid flags given to default FDB implementation [ 512.594990][T21399] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 512.630215][T21399] bond2: entered allmulticast mode [ 512.684518][ T1164] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.706102][ T1164] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.760624][ T1164] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.866442][T21415] macvtap1: entered promiscuous mode [ 512.881252][T21415] macvtap1: entered allmulticast mode [ 512.918045][T21415] veth1_vlan: entered allmulticast mode [ 513.071568][T21424] : entered promiscuous mode [ 513.082708][T21431] tipc: Enabling of bearer rejected, failed to enable media [ 513.519652][T21464] ip6t_srh: unknown srh match flags 5F28 [ 513.549721][T21469] netlink: 'syz.1.4143': attribute type 23 has an invalid length. [ 513.578281][T21467] ipvlan1: entered allmulticast mode [ 513.586991][T21467] veth0_vlan: entered allmulticast mode [ 513.886329][ T796] IPVS: starting estimator thread 0... [ 513.897188][T21486] tipc: Enabling of bearer rejected, already enabled [ 513.929907][T21486] 8021q: VLANs not supported on ip_vti0 [ 513.953531][T21375] Bluetooth: hci5: command 0x0406 tx timeout [ 513.978244][T21487] IPVS: using max 31 ests per chain, 74400 per kthread [ 514.231501][T21504] netlink: 'syz.2.4154': attribute type 11 has an invalid length. [ 514.354658][T21512] veth1_macvtap: left promiscuous mode [ 514.381548][T21512] macsec0: entered promiscuous mode [ 514.393457][T21512] macsec0: entered allmulticast mode [ 514.421550][ T796] net_ratelimit: 29 callbacks suppressed [ 514.421570][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.436954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.492097][T21520] veth1_macvtap: entered promiscuous mode [ 514.505280][T21520] veth1_macvtap: entered allmulticast mode [ 514.522518][T21520] macsec0: left promiscuous mode [ 514.538901][T21520] macsec0: left allmulticast mode [ 514.548916][T21520] veth1_macvtap: left allmulticast mode [ 514.607851][T21528] syzkaller0: entered promiscuous mode [ 514.630603][T21528] syzkaller0: entered allmulticast mode [ 515.270970][T21558] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 515.285715][T21558] bond4 (unregistering): Released all slaves [ 515.458540][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.467353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.562787][T21578] __nla_validate_parse: 16 callbacks suppressed [ 515.562797][T21580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4178'. [ 515.562807][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4176'. [ 515.562825][T21578] openvswitch: netlink: Port 262147 exceeds max allowable 65535 [ 515.813805][T21595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4179'. [ 516.084375][T21612] netlink: 'syz.2.4187': attribute type 1 has an invalid length. [ 516.354263][T21610] bridge0: port 3(team0) entered disabled state [ 516.361789][T21610] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.369902][T21610] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.385584][T21628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4192'. [ 516.500706][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.509426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.523274][T21610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.536668][T21635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4194'. [ 516.540797][T21610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.651467][T21614] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 516.664713][T21614] team0 (unregistering): Port device team_slave_0 removed [ 516.674904][T21614] team0 (unregistering): Failed to send options change via netlink (err -105) [ 516.685297][T21614] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 516.698259][T21614] team0 (unregistering): Port device team_slave_1 removed [ 516.715565][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4194'. [ 516.737237][T21628] bond0: entered promiscuous mode [ 516.743579][T21628] bond_slave_0: entered promiscuous mode [ 516.752722][T21628] bond0: left promiscuous mode [ 516.757675][T21628] bond_slave_0: left promiscuous mode [ 516.812546][ T1152] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.831536][T17876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.842785][ T1152] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.857966][ T1152] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.994228][T21637] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.018031][T21637] bond4: (slave bond5): Enslaving as an active interface with an up link [ 517.029448][T21641] tipc: Enabling of bearer rejected, failed to enable media [ 517.042958][ T1152] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.127532][T21662] SET target dimension over the limit! [ 517.382469][T21676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4203'. [ 517.445098][T21679] xt_limit: Overflow, try lower: 604147548/4200216962 [ 517.540984][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.550049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.559946][T21683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4203'. [ 517.825298][T21694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4210'. [ 517.880041][T21691] netlink: 'syz.0.4209': attribute type 1 has an invalid length. [ 517.935991][T21697] netlink: 'syz.4.4211': attribute type 1 has an invalid length. [ 517.962189][T21697] netlink: 'syz.4.4211': attribute type 3 has an invalid length. [ 517.984590][T21697] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4211'. [ 517.986744][T21699] netlink: 'syz.3.4212': attribute type 19 has an invalid length. [ 518.269443][T21705] tipc: New replicast peer: 172.20.20.50 [ 518.907373][T21742] syzkaller0: entered promiscuous mode [ 518.917161][T21746] netlink: 'syz.3.4226': attribute type 21 has an invalid length. [ 518.926573][T21742] syzkaller0: entered allmulticast mode [ 518.935427][T21746] netlink: 'syz.3.4226': attribute type 22 has an invalid length. [ 518.961139][T21746] netlink: 'syz.3.4226': attribute type 23 has an invalid length. [ 518.980293][T21746] netlink: 'syz.3.4226': attribute type 25 has an invalid length. [ 519.159509][T21759] bridge0: port 3(vlan0) entered blocking state [ 519.167256][T21759] bridge0: port 3(vlan0) entered disabled state [ 519.174829][T21759] vlan0: entered allmulticast mode [ 519.182994][T21759] geneve0: entered allmulticast mode [ 519.199870][T21759] vlan0: entered promiscuous mode [ 519.210867][T21759] geneve0: entered promiscuous mode [ 519.380852][T21781] Cannot find add_set index 2 as target [ 519.390680][T21781] Cannot find add_set index 2 as target [ 519.501719][T21791] mac80211_hwsim hwsim36 : renamed from wlan1 [ 519.544084][T21791] netlink: 'syz.0.4238': attribute type 1 has an invalid length. [ 519.620665][ T5900] net_ratelimit: 4 callbacks suppressed [ 519.620684][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.635787][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.304045][T21849] bond0: entered promiscuous mode [ 520.310139][T21849] bond0: entered allmulticast mode [ 521.017891][T21838] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 521.227704][T21899] __nla_validate_parse: 7 callbacks suppressed [ 521.227723][T21899] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4261'. [ 521.282705][T21899] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4261'. [ 521.329554][T21907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4263'. [ 521.400027][T21910] validate_nla: 4 callbacks suppressed [ 521.400043][T21910] netlink: 'syz.0.4264': attribute type 1 has an invalid length. [ 521.434126][T21910] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4264'. [ 521.511211][T21913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4264'. [ 521.576103][T21917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4267'. [ 521.709747][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.718743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.084319][T21946] netlink: 'syz.2.4274': attribute type 1 has an invalid length. [ 522.104189][T21947] netlink: 'syz.2.4274': attribute type 1 has an invalid length. [ 522.267534][T21950] netlink: 'syz.2.4276': attribute type 1 has an invalid length. [ 522.280298][T21950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.306697][T21950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4276'. [ 522.352623][T21956] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 522.393608][T21962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4279'. [ 522.582441][T21973] netlink: 'syz.0.4282': attribute type 21 has an invalid length. [ 522.616142][T21973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4282'. [ 522.638871][T21978] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4284'. [ 522.655310][T21974] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 522.681033][T21982] ip6tnl0: Caught tx_queue_len zero misconfig [ 522.742374][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.750951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.826652][T21986] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 522.900046][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.122097][T22005] xt_hashlimit: size too large, truncated to 1048576 [ 523.778870][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.787337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.252499][T22067] lo: Caught tx_queue_len zero misconfig [ 524.354780][T22083] bond3: option xmit_hash_policy: invalid value (64) [ 524.400914][T22083] bond3 (unregistering): Released all slaves [ 524.518061][T22097] netlink: 'syz.3.4320': attribute type 1 has an invalid length. [ 524.533650][T22097] netlink: 'syz.3.4320': attribute type 1 has an invalid length. [ 524.543454][T22097] netlink: 'syz.3.4320': attribute type 2 has an invalid length. [ 524.729210][T22112] ip6erspan1: entered allmulticast mode [ 524.818582][ T796] net_ratelimit: 1 callbacks suppressed [ 524.818598][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.833649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.092310][T22139] IPVS: Unknown mcast interface: team0 [ 525.310457][T22149] syzkaller1: entered promiscuous mode [ 525.337017][T22149] syzkaller1: entered allmulticast mode [ 525.610928][T22164] team0: Port device team_slave_0 removed [ 525.859620][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.871126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.949490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.013688][T22252] ipt_rpfilter: unknown options [ 527.495536][T22280] __nla_validate_parse: 21 callbacks suppressed [ 527.495556][T22280] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4373'. [ 527.652079][T22296] netlink: 'syz.1.4376': attribute type 1 has an invalid length. [ 527.677507][T22296] netlink: 'syz.1.4376': attribute type 1 has an invalid length. [ 527.817100][T22300] netlink: 'syz.0.4380': attribute type 1 has an invalid length. [ 527.826912][T22300] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4380'. [ 527.833272][T22309] geneve2: entered promiscuous mode [ 527.860280][ T1158] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 45961 - 0 [ 527.878879][ T1158] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 45961 - 0 [ 527.897393][T22302] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 527.935455][ T1158] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 45961 - 0 [ 527.948529][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.954006][ T1158] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 45961 - 0 [ 527.957430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.990514][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4383'. [ 528.055449][T22321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4384'. [ 528.579084][T22351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.589990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.637537][T22351] netlink: 'syz.3.4393': attribute type 2 has an invalid length. [ 528.677493][T22351] netlink: 'syz.3.4393': attribute type 2 has an invalid length. [ 528.801241][T22360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4396'. [ 528.978921][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.254575][T22388] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4405'. [ 529.432924][T22396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4402'. [ 529.472667][T22389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4405'. [ 529.647844][T22405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4408'. [ 529.667590][T22407] netlink: 'syz.4.4409': attribute type 63 has an invalid length. [ 529.929180][T22417] netlink: 'syz.1.4412': attribute type 5 has an invalid length. [ 529.985651][T22417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4412'. [ 529.986944][T22421] netlink: 'syz.4.4413': attribute type 10 has an invalid length. [ 530.019693][ T796] net_ratelimit: 1 callbacks suppressed [ 530.019710][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.027805][T22420] netlink: 'syz.4.4413': attribute type 10 has an invalid length. [ 530.034572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.099330][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.109004][T22417] netlink: 'syz.1.4412': attribute type 1 has an invalid length. [ 530.112245][T22427] pim6reg527: entered allmulticast mode [ 530.648475][T22467] team0: left allmulticast mode [ 530.655082][T22467] team_slave_0: left allmulticast mode [ 530.662918][T22467] team_slave_1: left allmulticast mode [ 530.672048][T22467] bridge0: port 3(team0) entered disabled state [ 530.710442][T22467] bridge_slave_0: left allmulticast mode [ 530.716906][T22467] bridge_slave_0: left promiscuous mode [ 530.724409][T22467] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.735141][T22467] bridge_slave_1: left allmulticast mode [ 530.741505][T22467] bridge_slave_1: left promiscuous mode [ 530.747533][T22467] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.759192][T22467] bond0: (slave bond_slave_0): Releasing backup interface [ 530.771135][T22467] bond0: (slave bond_slave_1): Releasing backup interface [ 530.781185][T22467] team_slave_0: left promiscuous mode [ 530.790450][T22467] team0: Port device team_slave_0 removed [ 530.797435][T22467] team_slave_1: left promiscuous mode [ 530.805959][T22467] team0: Port device team_slave_1 removed [ 530.813662][T22467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.824887][T22467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.835240][T22467] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 531.079360][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.088056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.098854][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.108228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.017485][T22425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.149665][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.158885][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.731872][T22536] netlink: 'syz.1.4441': attribute type 1 has an invalid length. [ 533.922695][T22544] bond3: (slave vxcan2): The slave device specified does not support setting the MAC address [ 533.983669][T22544] bond3: (slave vxcan2): Error -95 calling set_mac_address [ 534.085617][T22547] tipc: Enabling of bearer rejected, media not registered [ 534.122251][T22564] __nla_validate_parse: 7 callbacks suppressed [ 534.122267][T22564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4448'. [ 534.185641][T22550] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 534.200811][T22567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4448'. [ 534.213424][T22545] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4444'. [ 534.274142][T22560] bond3: (slave gretap2): making interface the new active one [ 534.324850][T22560] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 534.423372][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 534.512454][T22558] syzkaller0: entered promiscuous mode [ 534.548583][T22558] syzkaller0: entered allmulticast mode [ 534.568760][T22578] netlink: 'syz.2.4453': attribute type 22 has an invalid length. [ 534.598931][T22578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 535.240277][ T796] net_ratelimit: 4 callbacks suppressed [ 535.240296][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.255021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.187279][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.277670][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.287496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.309307][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.317972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.107508][ T5193] block nbd3: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 150 seconds [ 538.118819][ T5193] block nbd3: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 150 seconds [ 538.130578][ T5193] block nbd3: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 150 seconds [ 538.142588][ T5193] block nbd3: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 150 seconds [ 538.221737][T22578] netlink: 'syz.2.4453': attribute type 22 has an invalid length. [ 538.230162][T22578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 538.332449][T22612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.343588][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.352236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.470137][T22621] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4467'. [ 538.507707][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4467'. [ 538.574468][T22617] veth7: entered promiscuous mode [ 538.599256][T22617] veth7: entered allmulticast mode [ 538.709063][T22642] netlink: 'syz.2.4469': attribute type 9 has an invalid length. [ 538.757581][T22645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4471'. [ 538.791072][T22637] syzkaller0: entered promiscuous mode [ 538.797102][T22637] syzkaller0: entered allmulticast mode [ 538.922998][T22651] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4472'. [ 538.941490][T22651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4472'. [ 538.994419][T22656] netlink: 'syz.2.4474': attribute type 7 has an invalid length. [ 539.230007][T22663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4475'. [ 540.441392][T17398] net_ratelimit: 585 callbacks suppressed [ 540.441412][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.456748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.470034][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.478839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.200140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.261912][T17876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.496629][T22662] netlink: 'syz.2.4474': attribute type 29 has an invalid length. [ 542.505795][T22662] netlink: 1504 bytes leftover after parsing attributes in process `syz.2.4474'. [ 542.516703][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.525461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.563567][T22669] bridge2: entered promiscuous mode [ 542.577566][T22669] bridge2: entered allmulticast mode [ 542.910713][T22699] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4483'. [ 542.926682][T22699] netlink: 'syz.0.4483': attribute type 9 has an invalid length. [ 543.016419][T22705] syzkaller1: entered promiscuous mode [ 543.025115][T22707] vxcan1 speed is unknown, defaulting to 1000 [ 543.036748][T22705] syzkaller1: entered allmulticast mode [ 543.060133][T22707] vxcan1 speed is unknown, defaulting to 1000 [ 543.094897][T22707] vxcan1 speed is unknown, defaulting to 1000 [ 543.129624][T22715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4488'. [ 543.240450][T22722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4488'. [ 543.542559][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.551133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.662351][T22707] infiniband syz2: set active [ 543.671513][T22707] infiniband syz2: added vxcan1 [ 543.693913][T17876] vxcan1 speed is unknown, defaulting to 1000 [ 543.706238][T22747] netlink: 'syz.0.4497': attribute type 17 has an invalid length. [ 543.725987][T22747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4497'. [ 543.744839][T22748] syzkaller0: entered promiscuous mode [ 543.756794][T22747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4497'. [ 543.771945][T22748] syzkaller0: entered allmulticast mode [ 543.816141][T22753] netlink: 5016 bytes leftover after parsing attributes in process `syz.1.4499'. [ 543.834809][T22707] RDS/IB: syz2: added [ 543.841798][T22707] smc: adding ib device syz2 with port count 1 [ 543.854240][T22707] smc: ib device syz2 port 1 has no pnetid [ 543.886356][ T5900] vxcan1 speed is unknown, defaulting to 1000 [ 543.966614][T22707] vxcan1 speed is unknown, defaulting to 1000 [ 543.972082][T22753] netlink: 'syz.1.4499': attribute type 1 has an invalid length. [ 544.092237][T22760] macvtap1: entered allmulticast mode [ 544.118459][T22760] veth0_macvtap: entered allmulticast mode [ 544.199045][T22768] macvtap2: entered allmulticast mode [ 544.454659][T22787] ipt_REJECT: TCP_RESET invalid for non-tcp [ 544.456268][T22789] ipt_REJECT: TCP_RESET invalid for non-tcp [ 544.504617][T22707] vxcan1 speed is unknown, defaulting to 1000 [ 544.677230][T22799] syzkaller1: entered promiscuous mode [ 544.689338][T22799] syzkaller1: entered allmulticast mode [ 544.730943][T22801] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4512'. [ 544.744713][T22801] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4512'. [ 544.762337][T22801] mac80211_hwsim hwsim31 : renamed from wlan1 [ 544.850980][T22707] vxcan1 speed is unknown, defaulting to 1000 [ 544.885923][T22806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4513'. [ 545.125661][T22707] vxcan1 speed is unknown, defaulting to 1000 [ 545.286493][T22818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4517'. [ 545.394031][T22827] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4520'. [ 545.622433][ T796] net_ratelimit: 4 callbacks suppressed [ 545.622453][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.637236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.664187][T22707] vxcan1 speed is unknown, defaulting to 1000 [ 545.757267][T22844] netlink: 'syz.1.4522': attribute type 83 has an invalid length. [ 545.955741][T22853] syzkaller0: entered promiscuous mode [ 545.971874][T22853] syzkaller0: entered allmulticast mode [ 545.989656][T22855] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4525'. [ 546.145611][T22707] vxcan1 speed is unknown, defaulting to 1000 [ 546.801127][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.810229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.023245][T22889] netlink: 'syz.0.4535': attribute type 1 has an invalid length. [ 547.059511][T22889] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4535'. [ 547.285318][T22707] vxcan1 speed is unknown, defaulting to 1000 [ 547.351397][T22896] syzkaller0: entered promiscuous mode [ 547.383737][T22896] syzkaller0: entered allmulticast mode [ 547.932462][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.941773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.355427][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.679378][T22914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4542'. [ 548.997292][T22937] netlink: 'syz.3.4548': attribute type 1 has an invalid length. [ 549.056201][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.065451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.127111][T22940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4549'. [ 549.695884][T22950] syzkaller0: entered promiscuous mode [ 549.716193][T22950] syzkaller0: entered allmulticast mode [ 549.947931][T22957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4555'. [ 550.168852][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.856683][T22988] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4560'. [ 551.291464][ T796] net_ratelimit: 1 callbacks suppressed [ 551.291483][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.306211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.533923][T23011] netlink: 'syz.4.4565': attribute type 1 has an invalid length. [ 551.557500][T23010] netlink: 'syz.1.4566': attribute type 11 has an invalid length. [ 551.614182][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.652024][T23009] netlink: 'syz.1.4566': attribute type 11 has an invalid length. [ 552.157622][T23028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4569'. [ 552.221096][T23029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4571'. [ 552.312322][T23032] netlink: 'syz.2.4572': attribute type 75 has an invalid length. [ 552.368321][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.377054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.562043][T23035] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.569816][T23035] bridge0: port 2(bridge_slave_1) entered listening state [ 552.577896][T23035] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.585796][T23035] bridge0: port 1(bridge_slave_0) entered listening state [ 552.672265][T23035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 553.001840][T23031] 8021q: adding VLAN 0 to HW filter on device bond7 [ 553.054892][T23031] bond6: (slave bond7): Enslaving as an active interface with an up link [ 553.255038][T23040] vxcan1 speed is unknown, defaulting to 1000 [ 553.449392][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.458238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.250165][T23059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4579'. [ 554.369689][T23067] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 554.445603][T23067] bond8: (slave lo): Enslaving as an active interface with an up link [ 554.507755][T23067] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 554.555765][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.901294][T21375] Bluetooth: hci0: command 0x0c1a tx timeout [ 555.533844][T23091] bridge_slave_0: left allmulticast mode [ 555.612933][T23091] bridge_slave_0: left promiscuous mode [ 555.641689][T23091] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.717030][T23091] bridge_slave_1: left allmulticast mode [ 555.727046][T23091] bridge_slave_1: left promiscuous mode [ 555.758971][T23091] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.769538][T23111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4591'. [ 555.842632][T23091] bond0: (slave bond_slave_0): Releasing backup interface [ 555.912631][T23091] bond0: (slave bond_slave_1): Releasing backup interface [ 556.327420][T23111] macsec2: entered promiscuous mode [ 556.358930][T23111] bridge0: entered promiscuous mode [ 556.383170][T23111] macsec2: entered allmulticast mode [ 556.413997][T23111] bridge0: entered allmulticast mode [ 556.435069][T23111] bridge0: port 2(macsec2) entered blocking state [ 556.491123][T23111] bridge0: port 2(macsec2) entered disabled state [ 556.659189][T23111] bridge0: left allmulticast mode [ 556.667752][T23111] bridge0: left promiscuous mode [ 556.751844][ T9] net_ratelimit: 5 callbacks suppressed [ 556.751862][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.766912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.886535][T23114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4589'. [ 557.227812][T23138] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 557.255346][T23141] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 557.332660][T23138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4597'. [ 557.374130][T23143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4599'. [ 557.549324][T23147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4600'. [ 557.619000][ T5826] Bluetooth: hci3: command 0x0405 tx timeout [ 557.699936][T17876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.746848][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4602'. [ 557.815098][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.824306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.110697][T23167] xt_nat: multiple ranges no longer supported [ 558.336926][T23098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.845197][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.853828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.205743][T23186] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 559.746842][T23207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.879148][T23211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4613'. [ 560.214185][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.091357][T23231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4618'. [ 561.105287][T23229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4617'. [ 561.506616][T23241] netlink: 'syz.4.4619': attribute type 18 has an invalid length. [ 561.827809][ T8955] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.897825][ T8955] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.982014][ T8955] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.034399][ T8955] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.117721][T23256] xt_TCPMSS: Only works on TCP SYN packets [ 562.377802][ T796] net_ratelimit: 4 callbacks suppressed [ 562.377820][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.392866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.353482][T23301] netlink: 'syz.3.4637': attribute type 1 has an invalid length. [ 563.420854][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 563.462602][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.471674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.779452][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.342769][T23328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4640'. [ 564.549934][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.558722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.692958][T23344] tipc: Enabling of bearer rejected, failed to enable media [ 564.919932][T23353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4645'. [ 565.265006][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4647'. [ 565.474253][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4647'. [ 565.544575][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4647'. [ 565.610602][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4647'. [ 565.645116][T23375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4649'. [ 565.649686][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.663273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.685466][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4647'. [ 565.711023][T23375] netlink: 'syz.2.4649': attribute type 5 has an invalid length. [ 565.735248][T23378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 565.743238][T23378] IPv6: NLM_F_CREATE should be set when creating new route [ 565.902807][T23380] ip6erspan0: entered allmulticast mode [ 566.507210][T23390] __nla_validate_parse: 30 callbacks suppressed [ 566.515565][T23390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4653'. [ 566.653301][T23405] netlink: 'syz.4.4656': attribute type 4 has an invalid length. [ 566.698835][T23409] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4657'. [ 566.705962][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.762612][T23410] netlink: 'syz.4.4656': attribute type 4 has an invalid length. [ 566.790946][T23410] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4656'. [ 566.887290][T23405] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4656'. [ 567.004566][T23410] .`: renamed from bond0 (while UP) [ 567.196796][T23420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4660'. [ 567.659727][T23426] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4662'. [ 567.956531][T23434] tap1: tun_chr_ioctl cmd 1074025672 [ 567.986756][T23438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4667'. [ 568.007619][T23434] tap1: ignored: set checksum disabled [ 568.035974][T23437] ip6tnl1: entered promiscuous mode [ 568.101069][T23413] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4659'. [ 568.181314][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 568.191926][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 568.316920][T17398] net_ratelimit: 2 callbacks suppressed [ 568.316938][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.331712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.393532][ T5193] block nbd3: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 180 seconds [ 568.416312][ T5193] block nbd3: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 180 seconds [ 568.557669][T23443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4669'. [ 568.597569][ T5193] block nbd3: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 180 seconds [ 568.685901][ T5193] block nbd3: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 180 seconds [ 569.163184][T23461] netlink: 'syz.4.4675': attribute type 1 has an invalid length. [ 569.196885][T23461] netlink: 'syz.4.4675': attribute type 2 has an invalid length. [ 569.249892][T23461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4675'. [ 569.416450][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.426165][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.745568][T23479] sock: sock_timestamping_bind_phc: sock not bind to device [ 569.886483][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.007910][T23486] netlink: 'syz.4.4684': attribute type 1 has an invalid length. [ 570.170240][T23493] netlink: 'syz.4.4687': attribute type 29 has an invalid length. [ 570.202217][T23493] netlink: 'syz.4.4687': attribute type 29 has an invalid length. [ 570.586032][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.595001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.691193][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.699897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.810815][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.624324][T23568] __nla_validate_parse: 6 callbacks suppressed [ 573.624342][T23568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4704'. [ 573.771034][T23573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4705'. [ 574.171560][ T5900] net_ratelimit: 3 callbacks suppressed [ 574.171580][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.187227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.529953][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4708'. [ 574.716536][T23591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4708'. [ 574.767372][T23570] syz.3.4705 (23570) used greatest stack depth: 17336 bytes left [ 574.780686][T23591] netlink: 516 bytes leftover after parsing attributes in process `syz.2.4708'. [ 575.378938][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 575.482021][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.491376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.589375][T23590] syzkaller0: entered promiscuous mode [ 575.611293][T23590] syzkaller0: entered allmulticast mode [ 575.684536][T23602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4711'. [ 575.741936][T23602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4711'. [ 575.931723][T23618] netlink: 'syz.2.4714': attribute type 21 has an invalid length. [ 575.986625][T23618] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4714'. [ 576.464371][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.473349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.518789][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.582134][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.591259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.446732][ T5194] udevd[5194]: worker [16443] /devices/virtual/block/nbd3 timeout; kill it [ 578.475087][ T5194] udevd[5194]: seq 20215 '/devices/virtual/block/nbd3' killed [ 578.623046][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.559050][ T24] net_ratelimit: 1 callbacks suppressed [ 579.559069][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.667922][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.676909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.769302][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.778229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.821803][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.830499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.595315][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.869137][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.877798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.945735][T23605] netlink: 'syz.3.4711': attribute type 9 has an invalid length. [ 583.022339][T23609] syzkaller0: entered promiscuous mode [ 583.045089][T23618] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4714'. [ 583.530732][T23637] SET target dimension over the limit! [ 583.543609][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.551066][ C1] bridge0: topology change detected, propagating [ 583.560705][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.568382][ C1] bridge0: topology change detected, propagating [ 585.131584][ T796] net_ratelimit: 4 callbacks suppressed [ 585.131603][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.146479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.760431][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.259867][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.269198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.234927][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.365506][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.374531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.459612][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.468143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.862731][T23632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4717'. [ 589.882200][T23635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4720'. [ 590.243162][T23654] netlink: 'syz.1.4724': attribute type 11 has an invalid length. [ 590.268899][ T5930] net_ratelimit: 2 callbacks suppressed [ 590.268917][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.311542][T23654] netlink: 'syz.1.4724': attribute type 4 has an invalid length. [ 590.373032][T23654] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.4724'. [ 590.404937][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4727'. [ 590.472560][T23663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4727'. [ 590.563087][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.572080][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.598451][T23654] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4724'. [ 591.152468][T23679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4731'. [ 591.262951][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 591.275843][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 591.290559][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 591.325431][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 591.334428][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 591.545594][T23681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4731'. [ 591.662924][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.671892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.862983][T23691] xt_connbytes: Forcing CT accounting to be enabled [ 592.043101][T23674] vxcan1 speed is unknown, defaulting to 1000 [ 592.081771][T23691] xt_CT: No such helper "netbios-ns" [ 592.605956][T15160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.639187][T15160] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.682504][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.691789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.285175][T23717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4739'. [ 593.319715][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.331097][T15160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.355762][T23717] netlink: 'syz.2.4739': attribute type 20 has an invalid length. [ 593.375192][T15160] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.398042][T23717] IPv6: NLM_F_CREATE should be specified when creating new route [ 593.413973][T23721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4740'. [ 593.546252][ T5826] Bluetooth: hci2: command tx timeout [ 593.743904][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.752840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.836289][T15160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.902066][T15160] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.561936][T23759] xt_socket: unknown flags 0x8 [ 595.254984][T23783] Bluetooth: MGMT ver 1.23 [ 595.555181][T23674] chnl_net:caif_netlink_parms(): no params data found [ 595.637513][ T5826] Bluetooth: hci2: command tx timeout [ 595.789125][T23795] netlink: 'syz.0.4755': attribute type 4 has an invalid length. [ 595.911803][T17398] net_ratelimit: 2 callbacks suppressed [ 595.911822][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.927086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.203626][T23802] netlink: 'syz.4.4756': attribute type 8 has an invalid length. [ 596.381714][T23674] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.389718][T17876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.459314][T23674] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.485936][T23674] bridge_slave_0: entered allmulticast mode [ 596.497197][T23674] bridge_slave_0: entered promiscuous mode [ 596.679352][T23819] __nla_validate_parse: 2 callbacks suppressed [ 596.679370][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4760'. [ 596.707448][T23820] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4759'. [ 596.750054][T23674] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.762727][T23822] netlink: 'syz.4.4759': attribute type 3 has an invalid length. [ 596.772600][T23674] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.781557][T23822] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4759'. [ 596.793838][T23674] bridge_slave_1: entered allmulticast mode [ 596.805594][T23674] bridge_slave_1: entered promiscuous mode [ 596.846696][T15160] bridge_slave_1: left allmulticast mode [ 596.862653][T15160] bridge_slave_1: left promiscuous mode [ 596.880966][T15160] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.901494][T15160] bridge_slave_0: left allmulticast mode [ 596.907810][T15160] bridge_slave_0: left promiscuous mode [ 596.921954][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.694678][T15160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.715188][T15160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.722462][ T5826] Bluetooth: hci2: command tx timeout [ 597.747170][T15160] bond0 (unregistering): Released all slaves [ 597.859266][T23812] tipc: Enabled bearer , priority 0 [ 597.873803][T23819] netlink: 'syz.1.4760': attribute type 1 has an invalid length. [ 597.883708][T23813] syzkaller0: entered promiscuous mode [ 597.891985][T23813] syzkaller0: entered allmulticast mode [ 597.934939][T23814] tipc: Resetting bearer [ 597.960528][T23811] tipc: Resetting bearer [ 598.095670][T23811] tipc: Disabling bearer [ 598.317466][T23674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.413957][T23674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.494400][T15160] tipc: Left network mode [ 598.530176][T23674] team0: Port device team_slave_0 added [ 598.541375][T23674] team0: Port device team_slave_1 added [ 598.598050][T23674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.632614][T23674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.689037][T23674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.706305][T23674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.727090][T23840] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4763'. [ 598.823535][T23674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.869220][T23840] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4763'. [ 598.957559][T23840] netlink: 'syz.0.4763': attribute type 5 has an invalid length. [ 599.053260][T23840] netlink: 'syz.0.4763': attribute type 6 has an invalid length. [ 599.073275][ T5193] block nbd3: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 210 seconds [ 599.100141][T23674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.132358][ T5193] block nbd3: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 210 seconds [ 599.143180][T23840] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4763'. [ 599.190268][ T5193] block nbd3: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 210 seconds [ 599.215238][ T5193] block nbd3: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 210 seconds [ 599.802271][ T5826] Bluetooth: hci2: command tx timeout [ 600.002251][T23868] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4769'. [ 600.307455][T23674] hsr_slave_0: entered promiscuous mode [ 600.363184][T23674] hsr_slave_1: entered promiscuous mode [ 600.390436][T23674] debugfs: 'hsr0' already exists in 'hsr' [ 600.462937][T23674] Cannot create hsr debugfs directory [ 600.473621][T23881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4772'. [ 600.734942][T23886] netlink: 'syz.1.4773': attribute type 1 has an invalid length. [ 600.847760][T23889] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4774'. [ 601.043386][T23901] delete_channel: no stack [ 601.065860][T23897] netlink: 'syz.0.4775': attribute type 1 has an invalid length. [ 601.081833][T23886] bond4: entered promiscuous mode [ 601.101797][T23886] 8021q: adding VLAN 0 to HW filter on device bond4 [ 601.249936][T23907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4776'. [ 601.357099][T23891] bond4: (slave bridge2): making interface the new active one [ 601.392885][T23891] bridge2: entered promiscuous mode [ 601.620666][T23891] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 601.635110][T23889] 0: renamed from hsr_slave_1 (while UP) [ 601.705283][T23889] 0: entered allmulticast mode [ 601.714016][T23889] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 601.777306][T23896] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 601.795662][T23896] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 602.075653][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 602.544986][T23928] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4781'. [ 602.567840][T23928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4781'. [ 602.638015][T23928] Unknown options in mask b7f2 [ 603.749100][T23956] Bluetooth: MGMT ver 1.23 [ 603.994728][T23962] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4789'. [ 604.079368][T23968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4789'. [ 604.167468][T23972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4789'. [ 606.455244][T15160] hsr_slave_0: left promiscuous mode [ 606.509795][T15160] hsr_slave_1: left promiscuous mode [ 606.540851][T15160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.584657][T15160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.627374][T15160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.663622][T15160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.727653][T24026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4801'. [ 606.862642][T15160] veth1_vlan: left allmulticast mode [ 606.876140][T15160] veth1_macvtap: left promiscuous mode [ 606.898048][T15160] veth0_macvtap: left promiscuous mode [ 606.914961][T15160] veth1_vlan: left promiscuous mode [ 606.931873][T15160] veth0_vlan: left promiscuous mode [ 608.440938][T15160] team0 (unregistering): Port device team_slave_1 removed [ 608.569392][ T1164] smc: removing ib device syz2 [ 609.013587][T24026] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 609.017111][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 609.505521][ T5930] vxcan1 speed is unknown, defaulting to 1000 [ 609.554274][ T5930] syz2: Port: 1 Link DOWN [ 609.651865][T24037] macsec2: entered promiscuous mode [ 609.694635][T24037] bridge0: entered promiscuous mode [ 609.732040][T24037] macsec2: entered allmulticast mode [ 609.754143][T24037] bridge0: entered allmulticast mode [ 609.887030][T24038] veth9: entered promiscuous mode [ 610.737731][T24061] netlink: 'syz.2.4808': attribute type 1 has an invalid length. [ 611.103400][T24061] bond3: entered promiscuous mode [ 611.230212][T24061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 611.421073][T24062] bond3: (slave bridge3): making interface the new active one [ 611.441992][T24062] bridge3: entered promiscuous mode [ 611.461607][T24062] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 611.769819][T23674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 611.899382][T24086] netlink: 'syz.2.4816': attribute type 1 has an invalid length. [ 611.910612][T23674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.041698][T24090] netlink: 'syz.4.4814': attribute type 30 has an invalid length. [ 612.066032][T23674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 612.152901][T23674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.613048][T24086] 8021q: adding VLAN 0 to HW filter on device bond4 [ 613.122056][T23674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 613.293873][T23674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.535943][T23674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 613.787510][T23674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 615.020410][T23674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.246850][T23674] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.547304][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 615.611662][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.619811][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.939616][T24168] ip6tnl4: entered allmulticast mode [ 615.965875][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.973873][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.227093][T15160] IPVS: stop unused estimator thread 0... [ 616.727729][T24197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.792985][T24196] block nbd1: NBD_DISCONNECT [ 616.837382][T24196] block nbd1: Send disconnect failed -32 [ 616.967466][T24196] block nbd1: shutting down sockets [ 617.097245][T24209] netlink: 'syz.2.4840': attribute type 1 has an invalid length. [ 617.750792][T24224] netlink: 'syz.2.4843': attribute type 1 has an invalid length. [ 617.831976][T24227] netlink: 'syz.4.4844': attribute type 1 has an invalid length. [ 617.898927][T23674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.933040][T24227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.600916][T24254] ip6gre1: entered allmulticast mode [ 618.819662][T24264] netlink: 187468 bytes leftover after parsing attributes in process `syz.0.4851'. [ 619.366553][T24285] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 620.442461][ T5489] 8021q: adding VLAN 0 to HW filter on device eth4 [ 620.574030][T23674] veth0_vlan: entered promiscuous mode [ 620.763744][T23674] veth1_vlan: entered promiscuous mode [ 621.283779][T23674] veth0_macvtap: entered promiscuous mode [ 621.358986][T23674] veth1_macvtap: entered promiscuous mode [ 621.477861][T23674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.526316][T23674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.132159][ T47] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.143023][ T47] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.207385][ T47] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.283259][ T47] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.364309][T24343] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4866'. [ 622.470573][T24343] IPVS: ip_vs_edit_dest(): server weight less than zero [ 622.552708][T24343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4866'. [ 622.606107][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.647006][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.802135][T24349] tipc: Started in network mode [ 622.828818][T24349] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 622.938835][T24349] tipc: Enabling of bearer rejected, failed to enable media [ 622.994293][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.024811][T24357] netlink: 'syz.0.4871': attribute type 11 has an invalid length. [ 623.041996][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.103994][T24357] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4871'. [ 623.251757][T24365] x_tables: unsorted underflow at hook 4 [ 623.341493][T24368] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4874'. [ 623.629426][T24376] tipc: Enabling of bearer rejected, failed to enable media [ 624.155325][T24394] xt_CONNSECMARK: invalid mode: 0 [ 624.467310][T24408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4885'. [ 624.516890][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.654042][T24409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4884'. [ 624.669285][T24411] sctp: [Deprecated]: syz.0.4886 (pid 24411) Use of int in maxseg socket option. [ 624.669285][T24411] Use struct sctp_assoc_value instead [ 624.793380][T24413] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4884'. [ 625.134142][T24427] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4889'. [ 625.370342][T24431] ipt_REJECT: TCP_RESET invalid for non-tcp [ 625.723366][T24441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4892'. [ 625.728102][ C0] sched: DL replenish lagged too much [ 625.855560][T24441] netlink: 'syz.4.4892': attribute type 39 has an invalid length. [ 625.873558][T24442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4893'. [ 625.969093][T24447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4896'. [ 626.024094][T24449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4896'. [ 626.070695][T24453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4897'. [ 626.090524][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4897'. [ 626.817069][T24470] openvswitch: netlink: Flow key attr not present in new flow. [ 627.065618][T24469] tunl0: Caught tx_queue_len zero misconfig [ 627.127345][T24487] netlink: 'syz.0.4900': attribute type 1 has an invalid length. [ 628.439321][T24532] netlink: 'syz.0.4913': attribute type 1 has an invalid length. [ 629.313209][T24569] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 629.441242][T24568] veth0_to_team: Caught tx_queue_len zero misconfig [ 629.494621][T24573] __nla_validate_parse: 4 callbacks suppressed [ 629.494639][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4924'. [ 629.543343][T24576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4926'. [ 629.834630][T24581] netlink: 190968 bytes leftover after parsing attributes in process `syz.4.4928'. [ 629.952289][ T5193] block nbd3: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 240 seconds [ 629.975480][ T5193] block nbd3: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 240 seconds [ 629.999086][ T5193] block nbd3: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 240 seconds [ 630.073940][ T5193] block nbd3: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 240 seconds [ 630.645466][T24606] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4937'. [ 630.753244][T24607] tipc: Enabling of bearer rejected, failed to enable media [ 630.927346][T24612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4940'. [ 632.584716][T24674] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 632.627664][T24674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4956'. [ 633.087751][T24694] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4960'. [ 633.101313][T24674] bond5: entered promiscuous mode [ 633.111694][T24695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4959'. [ 633.124052][T24674] 8021q: adding VLAN 0 to HW filter on device bond5 [ 633.145901][T24695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4959'. [ 633.540707][T24693] 8021q: adding VLAN 0 to HW filter on device bond5 [ 633.549783][T24693] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 633.567337][T24693] bond5: (slave sit1): Error -95 calling set_mac_address [ 633.850179][T24697] veth3: entered allmulticast mode [ 634.631085][T24730] netlink: 'syz.0.4968': attribute type 1 has an invalid length. [ 634.837040][T24735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4965'. [ 634.857189][T24735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4965'. [ 635.043906][T24730] bond4: entered promiscuous mode [ 635.072783][T24730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 635.081846][T24747] netlink: 'syz.4.4969': attribute type 8 has an invalid length. [ 635.137962][T24742] netlink: 'syz.4.4969': attribute type 8 has an invalid length. [ 635.181861][T24732] bond4: (slave bridge2): making interface the new active one [ 635.195141][T24732] bridge2: entered promiscuous mode [ 635.203690][T24732] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 635.214434][T24734] bridge0: Device is already in use. [ 635.573740][T24751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4971'. [ 635.675071][T24755] tipc: Enabling of bearer rejected, failed to enable media [ 636.872366][T24775] xt_CT: No such helper "snmp_trap" [ 637.620132][T24809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4985'. [ 637.642276][T24810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.707383][T24810] netlink: 'syz.5.4986': attribute type 16 has an invalid length. [ 637.753614][T24810] netlink: 'syz.5.4986': attribute type 17 has an invalid length. [ 638.041664][T24810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.143226][T24825] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4990'. [ 638.452947][T24834] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 638.963424][T24846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.396132][T24866] netlink: 'syz.0.4997': attribute type 1 has an invalid length. [ 639.975887][T24873] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4998'. [ 640.055666][T24873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4998'. [ 640.425077][T24888] bridge0: port 2(vlan2) entered blocking state [ 640.441436][T24888] bridge0: port 2(vlan2) entered disabled state [ 640.453102][T24888] vlan2: entered allmulticast mode [ 640.462662][T24888] geneve0: entered allmulticast mode [ 640.471424][T24888] vlan2: entered promiscuous mode [ 640.476858][T24888] geneve0: entered promiscuous mode [ 640.755914][T24900] netlink: 'syz.1.5002': attribute type 9 has an invalid length. [ 642.085268][T24928] syzkaller0: entered promiscuous mode [ 642.116047][T24928] syzkaller0: entered allmulticast mode [ 643.188925][T24950] IPv6: NLM_F_CREATE should be specified when creating new route [ 643.595483][T24958] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 643.736063][T24966] netlink: 'syz.2.5020': attribute type 3 has an invalid length. [ 643.779248][T24966] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5020'. [ 643.827120][T24968] sctp: [Deprecated]: syz.0.5021 (pid 24968) Use of int in maxseg socket option. [ 643.827120][T24968] Use struct sctp_assoc_value instead [ 643.992299][T24968] IPVS: length: 8 != 1152 [ 644.922050][T24996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5024'. [ 645.522063][T25027] netlink: 'syz.4.5030': attribute type 1 has an invalid length. [ 646.093221][T25039] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5035'. [ 647.281349][T25066] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5042'. [ 649.099161][T25100] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5046'. [ 649.206493][T25097] netlink: 'syz.2.5050': attribute type 1 has an invalid length. [ 649.333568][T25097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5050'. [ 650.375380][T25133] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5058'. [ 650.454693][T25133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5058'. [ 650.504503][T25133] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5058'. [ 650.964987][T25150] netlink: 'syz.5.5060': attribute type 9 has an invalid length. [ 651.021466][T25155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5061'. [ 651.047898][T25150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5060'. [ 651.097990][T25155] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5061'. [ 651.210718][ T1152] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.223365][T25150] netlink: 'syz.5.5060': attribute type 9 has an invalid length. [ 651.286382][T25150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5060'. [ 651.369504][ T1152] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.398820][T25169] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5066'. [ 651.460016][ T1152] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.505903][T25169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 651.571941][ T1152] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.605935][T25173] IPv6: NLM_F_CREATE should be specified when creating new route [ 651.913538][T25181] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5068'. [ 651.970366][T25183] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5069'. [ 652.042952][T25183] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.050928][T25183] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.302936][T25192] macsec0: entered promiscuous mode [ 652.345292][T25192] macsec0: entered allmulticast mode [ 652.364269][T25195] netlink: 'syz.4.5072': attribute type 58 has an invalid length. [ 652.400591][T25192] veth1_macvtap: entered allmulticast mode [ 652.425088][T25195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5072'. [ 652.443656][T25192] macsec0: left promiscuous mode [ 652.463657][T25192] macsec0: left allmulticast mode [ 652.485734][T25192] veth1_macvtap: left allmulticast mode [ 652.844384][T25207] rdma_op ffff888035f561f0 conn xmit_rdma 0000000000000000 [ 652.892589][T25209] geneve3: entered promiscuous mode [ 652.926880][T25209] geneve3: entered allmulticast mode [ 653.343962][T25229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5077'. [ 654.109156][T25249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5083'. [ 654.169108][T25249] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5083'. [ 654.299569][T25249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5083'. [ 654.517610][T25263] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 654.575148][T25263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.939255][T25291] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 656.200050][T25291] bond5 (unregistering): Released all slaves [ 656.692749][T25327] netlink: zone id is out of range [ 656.704739][T25327] netlink: zone id is out of range [ 656.719888][T25327] netlink: zone id is out of range [ 656.767246][T25327] netlink: zone id is out of range [ 656.806662][T25327] netlink: zone id is out of range [ 656.929030][T25327] netlink: zone id is out of range [ 656.990170][T25327] netlink: zone id is out of range [ 657.012775][T25327] netlink: zone id is out of range [ 657.070091][T25338] __nla_validate_parse: 2 callbacks suppressed [ 657.070109][T25338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5099'. [ 657.360526][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5100'. [ 657.370924][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5100'. [ 657.904885][T25359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5104'. [ 658.458470][T25377] netlink: 'syz.5.5109': attribute type 29 has an invalid length. [ 658.539449][ T1158] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 658.576892][T17876] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 658.597473][ T1158] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 658.640302][ T5826] Bluetooth: hci2: link tx timeout [ 658.655279][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 658.688776][T17876] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 658.762462][T17876] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 658.807894][T25388] vlan1: entered allmulticast mode [ 658.898389][T25388] bond0: entered allmulticast mode [ 658.908774][T25398] netlink: 'syz.1.5113': attribute type 21 has an invalid length. [ 659.144467][T25411] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.5115'. [ 659.320185][T25398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5113'. [ 659.707453][T25421] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5117'. [ 659.927037][T25430] xt_NFQUEUE: number of total queues is 0 [ 660.760109][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 661.017992][ T5193] block nbd3: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 270 seconds [ 661.040783][ T5193] block nbd3: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 270 seconds [ 661.064259][ T5193] block nbd3: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 270 seconds [ 661.123282][ T5193] block nbd3: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 270 seconds [ 661.873189][T25420] bond3: left promiscuous mode [ 661.883133][T25420] bridge3: left promiscuous mode [ 662.059913][ T1158] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.107535][ T1158] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.232368][T25480] netlink: 'syz.0.5125': attribute type 1 has an invalid length. [ 662.262441][T25480] netlink: 'syz.0.5125': attribute type 2 has an invalid length. [ 662.301002][T25480] netlink: 'syz.0.5125': attribute type 11 has an invalid length. [ 662.363258][ T1158] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.396386][ T1158] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.458237][ T1158] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.530566][ T1158] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.578241][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 662.601227][T25492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5128'. [ 662.611308][ T1158] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.663878][ T1158] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.949343][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5131'. [ 663.404293][T25522] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 663.694611][T25531] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5135'. [ 663.915443][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5139'. [ 664.114576][T25549] netlink: 'syz.4.5142': attribute type 16 has an invalid length. [ 664.134199][T25549] netlink: 'syz.4.5142': attribute type 17 has an invalid length. [ 664.155360][T25549] netlink: 'syz.4.5142': attribute type 5 has an invalid length. [ 664.257092][T25540] bond5: Invalid ad_actor_system MAC address. [ 664.281962][T25540] bond5: option ad_actor_system: invalid value (1) [ 664.318495][T25540] bond5 (unregistering): Released all slaves [ 664.534002][T25558] veth0: Caught tx_queue_len zero misconfig [ 664.732874][T25560] tc_dump_action: action bad kind [ 664.746876][T25561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5143'. [ 664.805302][T25564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5144'. [ 665.175662][T25577] tipc: Enabling of bearer rejected, media not registered [ 665.347452][T25584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5149'. [ 665.357144][T25582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5148'. [ 665.576318][T25588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5152'. [ 665.639016][T25588] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5152'. [ 665.746626][T25594] "syz.4.5153" (25594) uses obsolete ecb(arc4) skcipher [ 667.124261][T25633] netlink: 'syz.0.5161': attribute type 1 has an invalid length. [ 667.483261][T25639] bond5: (slave geneve3): making interface the new active one [ 667.536082][T25639] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 667.587118][T25651] xt_hashlimit: size too large, truncated to 1048576 [ 667.627343][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 667.798803][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 667.861378][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 667.925333][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 668.459125][T25670] __nla_validate_parse: 2 callbacks suppressed [ 668.459143][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5170'. [ 668.527689][T25674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5171'. [ 668.612117][T25679] syzkaller0: entered promiscuous mode [ 668.647613][T25679] syzkaller0: entered allmulticast mode [ 668.667825][T25678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5170'. [ 669.025960][T25689] netlink: 'syz.0.5176': attribute type 1 has an invalid length. [ 669.243516][T25696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5179'. [ 669.290227][T25702] netlink: 640 bytes leftover after parsing attributes in process `syz.1.5178'. [ 669.315429][T25691] netlink: 'syz.5.5177': attribute type 9 has an invalid length. [ 669.348014][T25702] net_ratelimit: 46 callbacks suppressed [ 669.406177][T25702] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 669.449596][T25689] 8021q: adding VLAN 0 to HW filter on device bond6 [ 670.531321][T25693] bond6: (slave veth5): Enslaving as an active interface with a down link [ 670.665310][T25696] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 670.689086][T25705] bridge0: Caught tx_queue_len zero misconfig [ 671.011651][T25737] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5186'. [ 671.056852][T25737] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5186'. [ 671.218347][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 671.365168][ T5879] IPVS: starting estimator thread 0... [ 671.489783][T25750] IPVS: using max 33 ests per chain, 79200 per kthread [ 671.573355][T25758] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5192'. [ 671.608893][T25758] bridge_slave_1: default FDB implementation only supports local addresses [ 671.843192][T25766] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5195'. [ 671.999619][T25770] IPVS: set_ctl: invalid protocol: 252 127.0.0.1:4 [ 673.187348][T25804] IPv6: sit3: Disabled Multicast RS [ 673.239169][T25804] sit3: entered allmulticast mode [ 673.466294][T25807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5209'. [ 673.501028][T25810] netlink: 'syz.2.5211': attribute type 21 has an invalid length. [ 673.606267][T25812] bridge3: entered promiscuous mode [ 673.617245][T25812] bridge3: entered allmulticast mode [ 673.634795][T25813] tipc: Enabling of bearer rejected, already enabled [ 673.646513][T25810] netlink: 'syz.2.5211': attribute type 6 has an invalid length. [ 673.678927][T25810] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5211'. [ 673.711389][T25817] netlink: 'syz.4.5213': attribute type 29 has an invalid length. [ 673.738664][T25817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5213'. [ 674.196175][T25835] IPv6: NLM_F_CREATE should be specified when creating new route [ 675.151501][T25869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5224'. [ 677.345800][T25842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 677.587608][T25872] veth0_macvtap: left promiscuous mode [ 677.669217][T25872] veth0_macvtap: entered promiscuous mode [ 677.696843][T25872] veth0_macvtap: entered allmulticast mode [ 677.782076][T25880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5227'. [ 678.030639][T25889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 678.155819][T25889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5230'. [ 678.247741][T25889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5230'. [ 678.752538][T25916] netlink: 'syz.2.5236': attribute type 8 has an invalid length. [ 679.192561][T25934] netlink: 'syz.5.5243': attribute type 1 has an invalid length. [ 679.272023][T25937] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5244'. [ 679.571342][T25957] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5243'. [ 679.769006][T25934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.045269][T25945] bond1: (slave veth3): Enslaving as an active interface with a down link [ 681.076463][T25984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 681.094387][T25990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5256'. [ 681.153903][T25990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5256'. [ 681.186523][T25990] netlink: 'syz.5.5256': attribute type 12 has an invalid length. [ 681.245621][T25990] netlink: 'syz.5.5256': attribute type 11 has an invalid length. [ 681.550272][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.626843][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.713862][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.768311][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.798230][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.824541][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.943293][T26010] tipc: Enabling of bearer rejected, failed to enable media [ 681.985262][T26012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5265'. [ 682.101476][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.113158][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.128575][T15160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.485483][T26023] syzkaller1: entered promiscuous mode [ 682.522555][T26023] syzkaller1: entered allmulticast mode [ 682.617379][T26023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5268'. [ 682.662055][T26027] sctp: [Deprecated]: syz.1.5269 (pid 26027) Use of int in maxseg socket option. [ 682.662055][T26027] Use struct sctp_assoc_value instead [ 682.904062][T21375] Bluetooth: hci3: command 0x0405 tx timeout [ 682.926429][T26034] netlink: 'syz.0.5271': attribute type 2 has an invalid length. [ 682.993327][T26034] netlink: 'syz.0.5271': attribute type 11 has an invalid length. [ 683.032556][T26034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5271'. [ 683.086731][T26042] macsec1: entered promiscuous mode [ 683.190763][T26044] macsec1: entered promiscuous mode [ 683.343186][T26050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5275'. [ 683.806126][ T5900] net_ratelimit: 5 callbacks suppressed [ 683.806145][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.872383][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.944568][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.196759][T26082] netlink: 'syz.5.5284': attribute type 1 has an invalid length. [ 684.463729][T26085] netlink: 'syz.0.5285': attribute type 4 has an invalid length. [ 684.743743][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.067099][T26098] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5286'. [ 685.102865][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.962425][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 686.152269][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.163348][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.218252][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 687.302355][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.872062][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.884312][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.280220][T17398] net_ratelimit: 11 callbacks suppressed [ 689.280240][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.765969][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.899069][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.357244][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.994873][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.103997][ T5193] block nbd3: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 300 seconds [ 691.124343][ T5193] block nbd3: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 300 seconds [ 691.211917][ T5193] block nbd3: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 300 seconds [ 691.294937][ T5193] block nbd3: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 300 seconds [ 691.410024][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.556140][T26097] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 691.599714][T26098] vlan2: entered allmulticast mode [ 691.606228][T26098] bridge0: entered allmulticast mode [ 691.619410][T26111] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5289'. [ 691.979080][T26129] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 692.361929][T26143] syzkaller0: entered promiscuous mode [ 692.365513][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.382295][T26143] syzkaller0: entered allmulticast mode [ 692.421562][T26134] tc action pedit offset 128 out of bounds [ 692.478886][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.536426][T26150] Bluetooth: hci1: too big key_count value 32778 [ 692.717556][T26158] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 693.615679][T26183] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 693.658290][T26186] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5307'. [ 693.722923][T26187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5310'. [ 693.752140][T26189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5311'. [ 693.941762][T26192] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5312'. [ 693.996536][T26192] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5312'. [ 694.088986][T26204] SET target dimension over the limit! [ 694.623390][T17398] net_ratelimit: 1 callbacks suppressed [ 694.623408][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.025808][T26225] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5319'. [ 695.035729][T26234] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5322'. [ 695.103622][T26234] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5322'. [ 695.420922][T26246] netlink: 'syz.4.5325': attribute type 4 has an invalid length. [ 695.465325][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.702531][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.192501][T26265] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5329'. [ 696.277962][T26262] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 696.724073][T26276] tipc: Disabling bearer [ 696.784962][T26276] syzkaller0: entered promiscuous mode [ 696.830327][T26276] syzkaller0: entered allmulticast mode [ 696.975181][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.993287][T26290] __nla_validate_parse: 1 callbacks suppressed [ 696.993304][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5339'. [ 697.077957][T26290] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5339'. [ 697.180714][T26293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5340'. [ 697.647399][T26313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5345'. [ 697.851318][T26313] gre0: entered promiscuous mode [ 698.089768][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5346'. [ 698.116871][T26323] openvswitch: netlink: EtherType 50a is less than min 600 [ 698.157033][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.157669][T26298] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 698.396764][T26335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5352'. [ 698.453826][T26332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5351'. [ 698.510115][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.562743][T26344] xt_hashlimit: size too large, truncated to 1048576 [ 698.875176][T26372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.895789][T26370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5361'. [ 698.923890][T26378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5363'. [ 698.938768][T26378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5363'. [ 698.951380][T26379] netlink: 'syz.5.5360': attribute type 10 has an invalid length. [ 699.002710][T26379] bridge_slave_1: left allmulticast mode [ 699.009657][T26379] bridge_slave_1: left promiscuous mode [ 699.016569][T26379] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.065265][T26379] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 699.219101][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.233335][ T1152] nci: nci_ntf_packet: unsupported ntf opcode 0xf3c [ 699.242368][T26401] netlink: 'syz.0.5365': attribute type 5 has an invalid length. [ 699.259281][T26400] netlink: 'syz.5.5368': attribute type 1 has an invalid length. [ 699.312529][T26406] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 699.324993][T26402] veth5: entered promiscuous mode [ 699.330725][T26402] veth5: entered allmulticast mode [ 699.338959][T26402] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 699.362041][T26400] veth7: entered promiscuous mode [ 699.367370][T26400] veth7: entered allmulticast mode [ 699.375794][T26400] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 699.388799][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.516932][T26412] netlink: 'syz.5.5371': attribute type 4 has an invalid length. [ 699.619788][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 699.860094][T26425] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 699.952574][T26390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.024928][T17876] net_ratelimit: 2 callbacks suppressed [ 700.024945][T17876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.194595][T26433] bridge: RTM_NEWNEIGH with invalid ether address [ 700.221460][T26433] bridge: RTM_NEWNEIGH with invalid ether address [ 700.260419][T17398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.432136][T26444] netem: change failed [ 700.544521][T26452] block nbd1: Unsupported socket: should be TCP or UNIX. [ 700.967057][T26480] xt_cgroup: xt_cgroup: no path or classid specified [ 700.998117][T26481] netlink: 'syz.0.5391': attribute type 4 has an invalid length. [ 701.171162][T26493] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 701.298293][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.348967][T26499] netlink: 'syz.0.5399': attribute type 4 has an invalid length. [ 701.363242][T26502] tunl0: entered promiscuous mode [ 701.381077][T26502] netlink: 'syz.2.5400': attribute type 3 has an invalid length. [ 701.425733][T26502] netlink: 'syz.2.5400': attribute type 1 has an invalid length. [ 701.540509][T17876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.567642][T26511] netlink: 'syz.2.5400': attribute type 3 has an invalid length. [ 701.727367][T26518] netlink: 'syz.4.5408': attribute type 1 has an invalid length. [ 701.790967][T26518] 8021q: adding VLAN 0 to HW filter on device bond10 [ 701.802944][T26528] netlink: 'syz.5.5409': attribute type 4 has an invalid length. [ 701.821187][T26527] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 701.855879][T26534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.866839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.888551][T26527] ip6t_srh: unknown srh invflags 4000 [ 701.917517][T26530] bond10: (slave geneve4): making interface the new active one [ 701.967623][T26530] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 702.180392][T26552] syzkaller0: entered promiscuous mode [ 702.196596][T26552] syzkaller0: entered allmulticast mode [ 702.526576][T26576] tunl0: Caught tx_queue_len zero misconfig [ 702.655780][T26577] __nla_validate_parse: 19 callbacks suppressed [ 702.655798][T26577] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5428'. [ 702.747771][T26585] IPv6: sit2: Disabled Multicast RS [ 703.150482][T26604] macsec1: entered promiscuous mode [ 703.216895][T26607] syzkaller0: entered promiscuous mode [ 703.236834][T26607] syzkaller0: entered allmulticast mode [ 703.309602][T26572] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 703.660637][T26621] x_tables: duplicate underflow at hook 3 [ 703.752446][T26628] netlink: 'syz.4.5445': attribute type 28 has an invalid length. [ 703.775623][T26628] netlink: 'syz.4.5445': attribute type 3 has an invalid length. [ 703.786779][T26630] pimreg3: entered allmulticast mode [ 703.805665][T26628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5445'. [ 703.812421][T26637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5448'. [ 704.100149][T26658] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20001 [ 704.403920][T26670] netlink: 'syz.0.5458': attribute type 10 has an invalid length. [ 704.446629][T26670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5458'. [ 704.499398][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 704.583318][T26684] xt_socket: unknown flags 0xe4 [ 704.694207][T26689] xt_hashlimit: invalid rate [ 704.715953][ T30] audit: type=1107 audit(1776889628.523:6): pid=26688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠06򊨊' [ 704.901319][T26703] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5470'. [ 704.934283][T26698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5466'. [ 704.955285][T26698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5466'. [ 704.977673][T26698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5466'. [ 705.005720][T26705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.075759][T26708] syz.4.5473 (26708) used obsolete PPPIOCDETACH ioctl [ 705.159195][T26713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5475'. [ 705.435868][T26731] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.5482'. [ 706.540345][T26798] ip6t_srh: unknown srh invflags 4000 [ 706.572955][T26792] bond5: Unable to set down delay as MII monitoring is disabled [ 706.628792][T26792] bond5 (unregistering): Released all slaves [ 706.754691][T26812] validate_nla: 2 callbacks suppressed [ 706.754710][T26812] netlink: 'syz.4.5508': attribute type 1 has an invalid length. [ 706.911680][T26812] bond11: entered promiscuous mode [ 706.928125][T26812] bond11: entered allmulticast mode [ 706.935260][T26812] 8021q: adding VLAN 0 to HW filter on device bond11 [ 707.020754][T26826] x_tables: duplicate underflow at hook 2 [ 707.992187][T26887] netlink: 'syz.4.5531': attribute type 1 has an invalid length. [ 708.003588][T26887] __nla_validate_parse: 39 callbacks suppressed [ 708.003607][T26887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5531'. [ 708.026019][T26887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5531'. [ 708.053142][T26887] syzkaller0: entered promiscuous mode [ 708.059534][T26887] syzkaller0: entered allmulticast mode [ 708.284563][T26898] netlink: 'syz.2.5535': attribute type 21 has an invalid length. [ 708.297328][T26898] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5535'. [ 708.331289][T26898] netlink: 'syz.2.5535': attribute type 4 has an invalid length. [ 708.386471][T26898] netlink: 'syz.2.5535': attribute type 5 has an invalid length. [ 708.428159][T26905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5536'. [ 708.431948][T26898] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5535'. [ 708.474515][T26905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5536'. [ 708.501514][T26905] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5536'. [ 708.517137][T26907] netlink: 'syz.4.5538': attribute type 1 has an invalid length. [ 708.526754][T26905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5536'. [ 708.545160][T26911] xt_hashlimit: size too large, truncated to 1048576 [ 708.671309][ T1152] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 708.769188][T26923] syzkaller0: entered promiscuous mode [ 708.806435][T26923] syzkaller0: entered allmulticast mode [ 709.180000][T26952] netlink: 'syz.4.5551': attribute type 4 has an invalid length. [ 709.521414][T26963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5554'. [ 709.532097][T26963] netlink: 'syz.4.5554': attribute type 10 has an invalid length. [ 711.552397][T26915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 711.578831][T26962] nbd: couldn't find a device at index 1048580 [ 711.981261][T26994] : renamed from hsr0 [ 712.006242][T26996] syzkaller0: entered promiscuous mode [ 712.029601][T26996] syzkaller0: entered allmulticast mode [ 712.083286][T27002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.090986][T27002] IPv6: NLM_F_CREATE should be set when creating new route [ 712.094881][T27003] ip6gre1: entered allmulticast mode [ 712.098623][T27002] IPv6: NLM_F_CREATE should be set when creating new route [ 712.098651][T27002] IPv6: NLM_F_CREATE should be set when creating new route [ 712.131164][T27008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.139191][T27002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.331437][T27019] nftables ruleset with unbound chain [ 712.394206][T27017] syzkaller0: entered promiscuous mode [ 712.410946][T27017] syzkaller0: entered allmulticast mode [ 716.436636][T27038] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5570'. [ 716.454017][T27045] lo: Caught tx_queue_len zero misconfig [ 716.670168][T27055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5579'. [ 716.743772][T27068] netlink: 'syz.5.5579': attribute type 1 has an invalid length. [ 716.764074][T27069] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 716.823159][T27060] can: request_module (can-proto-5) failed. [ 716.867317][T27055] netlink: 'syz.5.5579': attribute type 1 has an invalid length. [ 716.977331][T27080] geneve5: entered promiscuous mode [ 717.011333][ T8955] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 58057 - 0 [ 717.060707][ T8955] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 58057 - 0 [ 717.078387][ T8955] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 58057 - 0 [ 717.091420][T27090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5586'. [ 717.178679][ T8955] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 58057 - 0 [ 717.188640][T27088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5587'. [ 717.228860][T27097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5590'. [ 717.391335][T27095] syzkaller0: entered promiscuous mode [ 719.858298][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 721.151074][ T5193] block nbd3: Possible stuck request ffff888027850000: control (read@0,1024B). Runtime 330 seconds [ 721.162379][ T5193] block nbd3: Possible stuck request ffff8880278501c0: control (read@1024,1024B). Runtime 330 seconds [ 721.248329][ T5193] block nbd3: Possible stuck request ffff888027850380: control (read@2048,1024B). Runtime 330 seconds [ 721.271632][T27129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5594'. [ 721.288672][T27129] veth1: Caught tx_queue_len zero misconfig [ 721.328367][ T5193] block nbd3: Possible stuck request ffff888027850540: control (read@3072,1024B). Runtime 330 seconds [ 721.601011][T27162] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5603'. [ 721.602645][T27160] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5603'. [ 721.640171][T27149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.875082][T27175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5608'. [ 722.074617][T27180] bond6 (unregistering): Released all slaves [ 722.186169][T27205] xt_ipcomp: unknown flags 1D [ 722.195949][T27205] netlink: 'syz.4.5614': attribute type 14 has an invalid length. [ 722.533614][T27227] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5619'. [ 722.574402][T27230] netlink: 'syz.4.5618': attribute type 1 has an invalid length. [ 722.727943][T27230] bond12: entered promiscuous mode [ 722.734594][T27230] 8021q: adding VLAN 0 to HW filter on device bond12 [ 722.755456][T27241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5622'. [ 722.779200][T27234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5621'. [ 722.815319][T27236] bond12: (slave bridge10): making interface the new active one [ 722.828554][T27236] bridge10: entered promiscuous mode [ 722.837637][T27236] bridge10: left promiscuous mode [ 722.927302][T27245] bond0: Caught tx_queue_len zero misconfig [ 723.202593][T27260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5627'. [ 727.313948][T27293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5630'. [ 727.370654][T27298] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5629'. [ 727.493875][T27303] syzkaller0: entered promiscuous mode [ 727.502176][T27303] syzkaller0: entered allmulticast mode [ 727.707928][T27308] syzkaller0: entered promiscuous mode [ 727.715358][T27308] syzkaller0: entered allmulticast mode [ 727.723671][T27303] tipc: Started in network mode [ 727.732707][T27303] tipc: Node identity 5e399b2a7ee6, cluster identity 4711 [ 727.743178][T27303] tipc: Enabled bearer , priority 0 [ 727.827324][T27302] tipc: Resetting bearer [ 727.869312][T27302] tipc: Disabling bearer [ 727.888423][T27332] netlink: 'syz.2.5640': attribute type 16 has an invalid length. [ 727.897920][T27332] netlink: 'syz.2.5640': attribute type 17 has an invalid length. [ 727.923275][T27339] netlink: 'syz.0.5642': attribute type 10 has an invalid length. [ 727.925103][T27332] tunl0: left promiscuous mode [ 727.992700][T27332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.006569][T27332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 728.033283][T27341] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5643'. [ 728.805447][T27380] veth0_macvtap: left allmulticast mode [ 728.839378][T27380] bridge0: left allmulticast mode [ 728.866803][T27380] bridge0: left promiscuous mode [ 728.933813][ T1158] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.959268][ T1158] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 728.976584][ T1158] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.005160][ T1158] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 729.043420][ T1158] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.090647][ T1158] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 729.144738][ T1158] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.189778][ T1158] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 729.210831][T27410] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5662'. [ 729.296671][T27418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5663'. [ 729.373660][T27426] openvswitch: netlink: IP tunnel dst address not specified [ 729.402160][T27423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5663'. [ 729.650688][T27436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5667'. [ 729.691717][T27439] netlink: 'syz.2.5668': attribute type 4 has an invalid length. [ 729.729520][T27439] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5668'. [ 730.117749][T27465] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5677'. [ 730.148776][T27470] netlink: 452 bytes leftover after parsing attributes in process `syz.1.5678'. [ 730.190308][T27470] openvswitch: netlink: Flow key attribute not present in set flow. [ 730.308870][T27479] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 730.366311][T27482] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 730.483247][T27490] netlink: 'syz.5.5683': attribute type 1 has an invalid length. [ 730.523327][T27490] netlink: 'syz.5.5683': attribute type 2 has an invalid length. [ 731.627048][T27546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.798808][T27556] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 731.921526][T27561] openvswitch: netlink: Missing key (keys=40, expected=100) [ 732.352094][T27587] netlink: 'syz.5.5710': attribute type 10 has an invalid length. [ 732.493486][T17398] hid (null): global environment stack underflow [ 732.574584][T27604] netlink: 'syz.2.5718': attribute type 3 has an invalid length. [ 732.707640][T17398] hid-generic 0005:15C2:0004.0001: global environment stack underflow [ 732.717369][T17398] hid-generic 0005:15C2:0004.0001: item 0 0 1 11 parsing failed [ 732.745929][T17398] hid-generic 0005:15C2:0004.0001: probe with driver hid-generic failed with error -22 [ 732.801577][T27611] netlink: 'syz.2.5720': attribute type 63 has an invalid length. [ 732.816905][T27611] netlink: 'syz.2.5720': attribute type 63 has an invalid length. [ 732.892402][T27619] veth0: entered promiscuous mode [ 732.907118][T27619] __nla_validate_parse: 6 callbacks suppressed [ 732.907138][T27619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5724'. [ 733.128621][T27639] ip6_vti0: entered promiscuous mode [ 733.144337][T27639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5726'. [ 733.256764][T27649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5731'. [ 733.435384][T27666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.692870][T27688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5741'. [ 733.806318][T27695] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5743'. [ 733.962057][T27709] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.5747'. [ 736.582952][T27688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.777403][T27731] openvswitch: netlink: IP tunnel dst address not specified [ 736.788114][T27726] netlink: 'syz.0.5754': attribute type 11 has an invalid length. [ 736.796228][T27726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5754'. [ 736.813522][T27729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5752'. [ 736.825754][T27727] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5753'. [ 737.051416][T27746] bond6: option fail_over_mac: invalid value (16) [ 737.064470][T27746] bond6 (unregistering): Released all slaves [ 737.302596][T27761] netlink: 'syz.2.5764': attribute type 1 has an invalid length. [ 737.311296][T27761] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5764'. [ 737.362347][T27761] syzkaller1: entered promiscuous mode [ 737.379879][T27761] syzkaller1: entered allmulticast mode [ 737.445193][T27767] netlink: 'syz.2.5764': attribute type 1 has an invalid length. [ 737.689105][T27766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.703915][T27766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.717702][T27766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58057 - 0 [ 737.815022][T27781] netlink: 'syz.0.5768': attribute type 1 has an invalid length. [ 737.964070][T27766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.998559][T27766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.019040][T27766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58057 - 0 [ 738.271083][T27766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.311419][T27766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.338262][T27766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58057 - 0 [ 738.525448][T27819] __nla_validate_parse: 2 callbacks suppressed [ 738.525466][T27819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5779'. [ 738.526275][T27822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5781'. [ 738.567312][T27822] netlink: 'syz.2.5781': attribute type 30 has an invalid length. [ 738.582111][T27766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.593719][T27766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.594097][T27823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5781'. [ 738.604532][T27766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58057 - 0 [ 738.627489][T27823] netlink: 'syz.2.5781': attribute type 30 has an invalid length. [ 738.683046][T27197] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.692856][T27827] netlink: 'syz.0.5782': attribute type 1 has an invalid length. [ 738.701754][T27197] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.712076][T27827] netlink: 'syz.0.5782': attribute type 1 has an invalid length. [ 738.730204][T27197] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.757475][T27197] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.097701][ T1164] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.109459][T27851] netlink: 'syz.2.5789': attribute type 1 has an invalid length. [ 739.122357][ T1164] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 58057 - 0 [ 739.144145][ T1164] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 739.209365][ T47] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.213446][T27851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5789'. [ 739.222602][ T47] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 58057 - 0 [ 739.236793][ T47] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 739.312916][ T47] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.330543][ T47] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 58057 - 0 [ 739.341566][ T47] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 739.389796][T27857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5792'. [ 739.449041][ T47] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.466789][ T47] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 58057 - 0 [ 739.476634][ T47] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 739.575839][T27869] SET target dimension over the limit! [ 739.599275][T27869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5796'. [ 739.620686][T27869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5796'. [ 739.859344][T27887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5802'. [ 739.892707][T27891] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5803'. [ 739.905269][T27887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5802'. [ 739.939712][T27887] netlink: 'syz.4.5802': attribute type 20 has an invalid length. [ 740.060789][T27887] netlink: 'syz.4.5802': attribute type 20 has an invalid length. [ 740.346920][T27920] openvswitch: netlink: EtherType 0 is less than min 600 [ 741.303685][T27975] tipc: Enabling of bearer rejected, media not registered [ 741.326026][T27978] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 741.451578][T27986] bridge0: entered promiscuous mode [ 741.618316][ T31] INFO: task udevd:16443 blocked for more than 143 seconds. [ 741.637627][ T31] Not tainted syzkaller #0 [ 741.643807][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 741.665256][ T31] task:udevd state:D stack:22392 pid:16443 tgid:16443 ppid:5194 task_flags:0x400140 flags:0x00080002 [ 741.694660][ T31] Call Trace: [ 741.701781][ T31] [ 741.709227][ T31] __schedule+0x17b4/0x5680 [ 741.720062][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 741.735884][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 741.745772][T28002] netlink: ct family unspecified [ 741.748731][ T31] ? __pfx___schedule+0x10/0x10 [ 741.765431][ T31] ? schedule+0x90/0x360 [ 741.770873][ T31] schedule+0x164/0x360 [ 741.775626][ T31] io_schedule+0x7f/0xd0 [ 741.781590][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 741.789547][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 741.796163][ T31] ? filemap_read_folio+0x23e/0x3b0 [ 741.802307][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 741.808936][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 741.815189][ T31] do_read_cache_folio+0x1ad/0x590 [ 741.821788][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 741.827978][ T31] read_part_sector+0xb6/0x2b0 [ 741.833397][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 741.839581][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 741.847268][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 741.853253][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 741.859612][ T31] bdev_disk_changed+0x817/0x1770 [ 741.864977][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 741.871109][ T31] blkdev_get_whole+0x380/0x510 [ 741.876431][ T31] bdev_open+0x31e/0xd30 [ 741.882749][ T31] blkdev_open+0x470/0x610 [ 741.887463][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 741.893353][ T31] do_dentry_open+0x785/0x14e0 [ 741.899838][ T31] vfs_open+0x3b/0x340 [ 741.904072][ T31] ? path_openat+0x2df0/0x3860 [ 741.909228][ T31] path_openat+0x2e08/0x3860 [ 741.914099][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 741.920062][ T31] ? stack_depot_save_flags+0x33/0x810 [ 741.926186][ T31] ? __pfx_path_openat+0x10/0x10 [ 741.943683][ T31] ? __x64_sys_openat+0x138/0x170 [ 741.950176][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 741.955558][ T31] do_file_open+0x23e/0x4a0 [ 741.961813][ T31] ? __pfx_do_file_open+0x10/0x10 [ 741.967155][ T31] ? _raw_spin_unlock+0x28/0x50 [ 741.974144][ T31] ? alloc_fd+0x64b/0x6c0 [ 741.980048][ T31] do_sys_openat2+0x113/0x200 [ 741.985093][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 741.992820][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 741.999778][ T31] ? rcu_is_watching+0x15/0xb0 [ 742.005017][ T31] __x64_sys_openat+0x138/0x170 [ 742.010889][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.017837][ T31] do_syscall_64+0x15f/0xf80 [ 742.023418][ T31] ? clear_bhb_loop+0x40/0x90 [ 742.028552][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.034661][ T31] RIP: 0033:0x7fb32dca7407 [ 742.039862][ T31] RSP: 002b:00007ffd1e499bf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 742.050489][ T31] RAX: ffffffffffffffda RBX: 00007fb32e42d880 RCX: 00007fb32dca7407 [ 742.059338][ T31] RDX: 00000000000a0800 RSI: 000055aa63ac12d0 RDI: ffffffffffffff9c [ 742.068120][ T31] RBP: 000055aa63ac0910 R08: 0000000000000000 R09: 0000000000000000 [ 742.077119][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055aa63ad4ba0 [ 742.086571][ T31] R13: 000055aa63ace190 R14: 0000000000000000 R15: 000055aa63ad4ba0 [ 742.095587][ T31] [ 742.104790][ T31] [ 742.104790][ T31] Showing all locks held in the system: [ 742.132676][ T31] 1 lock held by khungtaskd/31: [ 742.138728][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 742.149525][ T31] 2 locks held by kworker/u8:9/1158: [ 742.154940][ T31] #0: ffff88801ae94940 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 742.168916][ T31] #1: ffffc900059bfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 742.169837][T28012] syzkaller1: entered promiscuous mode [ 742.190878][T28012] syzkaller1: entered allmulticast mode [ 742.201458][ T31] 2 locks held by getty/5582: [ 742.217081][ T31] #0: ffff8880373120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 742.230009][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 742.241254][ T31] 3 locks held by kworker/1:5/5879: [ 742.247427][ T31] #0: ffff88813fe53140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 742.263034][ T31] #1: ffffc90004737c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 742.279546][ T31] #2: ffff888078f0b230 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 742.290917][ T31] 1 lock held by udevd/16443: [ 742.295882][ T31] #0: ffff8880273a8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 742.307344][ T31] 1 lock held by syz.4.5830/27991: [ 742.312814][ T31] #0: ffffffff8e9631f8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 742.323558][ T31] 2 locks held by syz.0.5833/27995: [ 742.329376][ T31] #0: ffffffff8fdcee80 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0xa6/0x140 [ 742.339660][ T31] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 742.351624][ T31] 1 lock held by syz.1.5835/28003: [ 742.357208][ T31] #0: ffff8880579bc440 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 742.368895][ T31] [ 742.371340][ T31] ============================================= [ 742.371340][ T31] [ 742.384449][ T31] NMI backtrace for cpu 0 [ 742.384477][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 742.384492][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 742.384498][ T31] Call Trace: [ 742.384502][ T31] [ 742.384507][ T31] dump_stack_lvl+0xe8/0x150 [ 742.384526][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 742.384543][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 742.384558][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 742.384574][ T31] sys_info+0x135/0x170 [ 742.384587][ T31] watchdog+0xfaa/0x1000 [ 742.384600][ T31] ? watchdog+0x209/0x1000 [ 742.384614][ T31] kthread+0x388/0x470 [ 742.384624][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.384640][ T31] ? __pfx_kthread+0x10/0x10 [ 742.384650][ T31] ret_from_fork+0x514/0xb70 [ 742.384666][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 742.384679][ T31] ? __switch_to+0xc79/0x1410 [ 742.384694][ T31] ? __pfx_kthread+0x10/0x10 [ 742.384711][ T31] ret_from_fork_asm+0x1a/0x30 [ 742.384749][ T31] [ 742.384769][ T31] Sending NMI from CPU 0 to CPUs 1: [ 742.502070][ C1] NMI backtrace for cpu 1 [ 742.502089][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 742.502106][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 742.502127][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 742.502160][ C1] Code: 2b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 0d 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 742.502174][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 742.502188][ C1] RAX: 000000000020a32b RBX: ffffffff819a67ea RCX: 0000000080000001 [ 742.502199][ C1] RDX: 0000000000000001 RSI: ffffffff8dfb6c81 RDI: ffffffff8c27f000 [ 742.502209][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 742.502221][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 742.502231][ C1] R13: 1ffff11003bd0000 R14: 0000000000000001 R15: 1ffff11003bd0000 [ 742.502242][ C1] FS: 0000000000000000(0000) GS:ffff888125343000(0000) knlGS:0000000000000000 [ 742.502254][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.502263][ C1] CR2: 00007f7372816e9c CR3: 0000000035c12000 CR4: 00000000003526f0 [ 742.502283][ C1] Call Trace: [ 742.502289][ C1] [ 742.502295][ C1] default_idle+0x9/0x20 [ 742.502314][ C1] default_idle_call+0x72/0xb0 [ 742.502340][ C1] do_idle+0x36a/0x5f0 [ 742.502363][ C1] ? __pfx_do_idle+0x10/0x10 [ 742.502388][ C1] cpu_startup_entry+0x43/0x60 [ 742.502423][ C1] start_secondary+0x101/0x110 [ 742.502441][ C1] common_startup_64+0x13e/0x147 [ 742.502466][ C1] [ 742.673812][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 742.681073][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 742.691075][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 742.701780][ T31] Call Trace: [ 742.705130][ T31] [ 742.708536][ T31] vpanic+0x56c/0xa60 [ 742.712724][ T31] ? __pfx___schedule+0x10/0x10 [ 742.718154][ T31] ? __pfx_vpanic+0x10/0x10 [ 742.723123][ T31] ? __pfx_console_unlock+0x10/0x10 [ 742.728691][ T31] panic+0xc5/0xd0 [ 742.732505][ T31] ? __pfx_panic+0x10/0x10 [ 742.737120][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 742.742962][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 742.749229][ T31] watchdog+0xff4/0x1000 [ 742.753749][ T31] ? watchdog+0x209/0x1000 [ 742.759229][ T31] kthread+0x388/0x470 [ 742.763395][ T31] ? __pfx_watchdog+0x10/0x10 [ 742.768268][ T31] ? __pfx_kthread+0x10/0x10 [ 742.773414][ T31] ret_from_fork+0x514/0xb70 [ 742.778551][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 742.784074][ T31] ? __switch_to+0xc79/0x1410 [ 742.788856][ T31] ? __pfx_kthread+0x10/0x10 [ 742.793991][ T31] ret_from_fork_asm+0x1a/0x30 [ 742.799070][ T31] [ 742.803025][ T31] Kernel Offset: disabled [ 742.807486][ T31] Rebooting in 86400 seconds..