last executing test programs: 3m18.282858152s ago: executing program 3 (id=2385): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000240)={r0, 0x0, 0xf8, 0x0, &(0x7f0000000080)="eb90ff14d4f09c84c1ef1eec8ee18a2eb97ca5f02c0a69a8989b47480a1a3a5ba377220c0d77d6e3181a78f73f9ac71db47482230d2c7f78141735fe6c82da9240a4d209a3f8ff28e765c2c1ed8fe68deb0f449e024dfe2e0879139e1c7fd18b1662574f97d0c027be5c484ee672780e86af4a1bb1f78655ceb5506b251740056014e2c234a2b5ed132152fdaa293ca1b227adf5213bb3fa970e4ced7f0687038b40b3a5f2110c02443d6f079ee6ee408495e6721bad70fed6b96b3d0bd9f5e7cbf718ac51a667319ce46d48a4d5925a004839de956872cfc32b8f5b1300c4a7a330d274cb8aab9650351d1624510d1af4703f74ec38cf6d", 0x0, 0x3, 0x0, 0x9a, 0x0, &(0x7f0000000180)="3e9bdb1926ac4e41472499f6e88de5c5636af014553d4e11053d9b6e164e315f47be313772d39f7cc812c2d632562a359094003956a273c832fb7c10c7b17de3b85fef25314670c946a13e997be942b4b7781abdab9fc028054b9909ad93153d74d105f1d5ca2efd0d5ee9e443c6efc675aa66082376395a6d0128d26410498198eca847ddf43ef6f7e558fb14a3ffaf3c45fa28d32ec5cbcd10", 0x0, 0x2, 0x0, 0x3}, 0x50) 3m18.159675395s ago: executing program 3 (id=2387): r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000240), 0x318, 0x3ec0) close(r5) (async) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e000000208000740000000000800034000000000748f6601b2281eff8e0831df0e89d8a8aca3bd15b6814be0e2ce4a52f1ceb3c29f83752251674285d538eff46000e7d452cdf690160d6873c84cca32547318e2cf8d65cc2934d5d337259341c166d6f973cff8282d1f1f6432fac95b5ca7f7fbc1b5bbec9b4ddb674fff826776dff64b9bb8f3"], 0x6c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000009c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="30002d8004"], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x44110) 3m17.984528864s ago: executing program 3 (id=2392): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000000b14432e28bd7000fedbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@remote, 0x0}, &(0x7f0000000140)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', r1, 0x52, 0x9, 0x4, 0x3dd, 0x23, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7, 0x8000, 0x40400000, 0x2694}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48010000", @ANYRES16=r3, @ANYBLOB="000229bd7000fedbdf25110000007800018008000100", @ANYRES32=r1, @ANYBLOB="1400020076657468305f746f5f7465616d0000001400020076657468305f746f5f68737200000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="0800030002000000080003000000000008000100", @ANYRES32=r1, @ANYBLOB="1400020076657468315f746f5f6873720000000008000100", @ANYRES32=r1, @ANYBLOB="3800018008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="1400020076657468305f6d616376746170000000080003000100000050000180080003000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="17000000", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="080003000200000014000200697036746e6c3000000000000000000034000180140002007866726d30000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="1400020076657468305f746f5f62617461647600"], 0x148}, 0x1, 0x0, 0x0, 0x882}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%-5lx \x00'}, 0x20) sendmsg$nl_generic(r8, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xec, 0x2a, 0x2, 0x70bd2d, 0x25dfdbfd, {0x20}, [@typed={0x8, 0x55, 0x0, 0x0, @fd=r9}, @generic="1d999268029f702b0986a52afbac6c4546452d293b85dc1f8259a90b8ca037cd86f5e03e03b356d93272da7d2fdabd43e308db0b6edc49baf367c2604e5efd891a7302ba76c7b1886511710808d38f2e021c1aec90396232f23e4ea51676be24a6e918930f527357051ebcd6116f924af497d26df3268b9ea8487240bc2f34668149f2c01c4190fa4238db0d2de87faaa09986f81c3f2e5ffe839d1d26beeee1aa03d79409a0acdadcc6eff19f39b1c207bc95b65cdd3647c2d9db4858d3257ae6a824a5e503a16d13a75c98f65c"]}, 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x40009) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x14, 0x7, 0xa, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x10002000}, 0x800) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r15, 0x8916, &(0x7f0000000b80)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r15, 0x891c, &(0x7f0000000bc0)={'batadv_slave_1\x00', {0x2, 0xfffe, @empty}}) sendmsg$nl_route(r10, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r14, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3m17.559284826s ago: executing program 3 (id=2396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="dc712e8e", @ANYRES16=r4, @ANYRES16=r1, @ANYRES32=r5, @ANYRES8=r1], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000deb03e170000004400000600000000000000f64905b900", @ANYRES32=r2, @ANYBLOB="1c00238005000700050000000800140034ffffff05000800030000000c0070000500020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000700), 0x253, 0x10, &(0x7f0000000740), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="db84feca8d5a50353cb7c7275c787114", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000004100010028bd7000fedbdf2501000000040048800c0001800800fc16c06ad20500cb0200bd19505c43eeb4656ed14aa04856528ed1ea8bf21130f67e73ef4dfe6e4f7308b907d1fb4dd25a4acfd61ae562f138ca4d5c41e452496a9b2b3cb199c5e7875d67c3e26fae9e6d8f3a49f93626584825edb7e170792f3c262f43045db113eb3cc1f1207e471212fe695ff486d120b5ebb4bc3060b03794c82e179fc5c89d5adb7c6077d7a8e29695318b8196bf1b71fd8f1e07f5c291008a6db607441d1bd28f4f56"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d80)=0x9) (async) getsockname$packet(r10, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d80)=0x9) sendmsg$nl_route(r10, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r11, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r11, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000f00)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r13, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="010700000000000000006700000008000300", @ANYRES32=r14, @ANYBLOB="0800c300000000000800c40000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r13, &(0x7f0000001100)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r4, @ANYBLOB="00042bbd7000fbdbdf250f00000008000300", @ANYRES32=r14, @ANYBLOB="0500a20006000000090034005c439d7f630000004000a6800a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000800a500c4f000006400a6800a00060008021100000000000a00060008021100000000000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000400e200"], 0xe0}, 0x1, 0x0, 0x0, 0x4080}, 0x20000040) sendmsg$nl_generic(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x8, 0x10, 0xb, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x20, 0x8, 0xfffffc00, 0x1000}}) r15 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[], 0x3c}, 0x1, 0xff7f}, 0x0) (async) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[], 0x3c}, 0x1, 0xff7f}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000ac0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)) 3m17.089342053s ago: executing program 3 (id=2402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2daa000000000000711012000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x0, 0x0, 0x25, @loopback, @local, 0x7, 0x80, 0x2, 0x7f}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2daa000000000000711012000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x0, 0x0, 0x25, @loopback, @local, 0x7, 0x80, 0x2, 0x7f}}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) (async) 3m16.957079396s ago: executing program 3 (id=2404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b15, &(0x7f0000000480)={'wlan1\x00'}) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0x0, 0xfffffffffffffffd}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e31db80000d3382f"}, 0xb}}]}, 0x34}}, 0x50) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 3m1.870412252s ago: executing program 32 (id=2404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b15, &(0x7f0000000480)={'wlan1\x00'}) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@can_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0x0, 0xfffffffffffffffd}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "e31db80000d3382f"}, 0xb}}]}, 0x34}}, 0x50) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m36.148046339s ago: executing program 0 (id=2757): r0 = socket(0x15, 0x8080a, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2m36.110830576s ago: executing program 0 (id=2758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@bridge_getlink={0x28, 0x12, 0x301, 0x70b92c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x10000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x85}]}, 0x28}}, 0x24000000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x14) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'dummy0\x00', @remote}) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x4, 0x440, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000580], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x10, 0x22f0, 'bridge_slave_0\x00', 'pim6reg1\x00', 'macvlan1\x00', 'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0x0, 0xff], @random="5af0e09b10c2", [0x17e, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0xd8, 0x150, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}], @common=@nflog={'nflog\x00', 0x50, {{0x6, 0xb3f, 0x264, 0x0, 0x0, "ac74ae6605cca14f1ee3c0dff674d8d98e2f8c9884ad7f0b085be25071edb80543a2e6f95d26cfcc97afb6bd90da93465a6d155e656bb8f57afda6e5e4caa565"}}}}, {0x5, 0x40, 0x60, 'bridge_slave_0\x00', 'veth0_macvtap\x00', 'veth0_to_bridge\x00', 'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xffff, 'syz1\x00', {0x8}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x5, 0xfbfb, 'team0\x00', 'geneve1\x00', 'sit0\x00', 'xfrm0\x00', @empty, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x5, 0x2, 0x0, 0x0, "4113ddd2122ea0a620cb57fa6f9cf4ec9e155ac926be8e962dad86d20465c69c1eac1cdc948fc2cac4905ac8b98addb56dc09f0fb3c24ff6d3907c021f2a9dfa"}}}}, {0x3, 0x22, 0x6, 'syzkaller0\x00', 'syzkaller0\x00', 'bond_slave_1\x00', 'tunl0\x00', @remote, [0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xb8, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x4b, 0x82, {0xe}}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x4b8) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2, 0x2}) 2m35.403363644s ago: executing program 0 (id=2760): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x4c010) 2m35.382462289s ago: executing program 0 (id=2763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x220, r1, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}, @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x1c6, 0x2a, [@random_vendor={0xdd, 0xaf, "3fd1fa18fdfce1fce528f0fcfaab89d2cbf779c57a3bf075517f744ad8de006e6101c7fb740ef96284923683e2fc88f8fced10c2d961470377b917942d52072ab8f829d95104bff49c59805fb2343bd5d42fe926ddbd62d413a965978336af4d3171815e24249d3040d7b55f200aabcb2b5918b4b323151a7006da9d44601de4a026f7b129e20dd59671b94ebab30e8e3956bf0bb158347e116514860f783e610e5bc0657b9ccc68982b721a8ae44e"}, @peer_mgmt={0x75, 0x4, {0x1, 0x40, @void, @void, @void}}, @supported_rates={0x1, 0x2, [{0x48}, {0x24}]}, @mesh_id={0x72, 0x6}, @tim={0x5, 0xeb, {0x6, 0xbd, 0x1, "ca5e749afa41206c1f0087ec9e6cb0e3e5e9a65dec7a5f5ad3fd2715de1db05fa0aaf6656dcacd59e5f5326251b662b71f60a8bfdab88e43ceaf3982bc8efc7e19e98fd8e3268799c6b9617a413de09e5227ec69dcafdf3ec639ef55d3d1b60c21f157eaa82c1af7f1fddaf3c3f6a20d7fbafdec46037d436fcb2293bd66c7578784e5e1f8f20a56c4bbc6a723654248d685e5008dc6ab7f71bef24c01c7c1986a9a2b981a4dc382cb11329c4186b9c9d43847f57923f4e7ff676c8cbe7ac85a320c2b3fe6d88dbcafb8d1c8dfa05474e1629475026a85fb84d857cac683954083cf5b4bb0e7a061"}}, @mic={0x8c, 0x10, {0xf36, "786f9fda54de", @short="c7b08c67df05bc79"}}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x0, 0x30, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000390423bd7000fbdbdf250000000032dca265d2", @ANYRES32=0x0, @ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x24048047}, 0x4008804) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000540), 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000580)={r5}, 0x8) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r6, &(0x7f00000005c0), 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000640)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600655800000a0002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m35.370518268s ago: executing program 0 (id=2767): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x76, 0xffffffffffffffff, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000080)={r2, r2, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x5508, 0xa35, 0x1, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{@none}]}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x76, 0xffffffffffffffff, &(0x7f0000000040)) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000080)={r2, r2, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x5508, 0xa35, 0x1, 0x1, 'syz0\x00'}) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{@none}]}) (async) close(r0) (async) 2m35.368954847s ago: executing program 0 (id=2769): syz_emit_ethernet(0x34e, &(0x7f0000002600)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@map=0xffffffffffffffff, 0x24, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r0, 0x7, 0x0, 0x8, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x3fffffffffffce3, 0x0, 0x0) sendmsg(r1, &(0x7f0000000840)={&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x100, @remote, 0x1, 0x4}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)}, {&(0x7f0000002980)="9c73efacb5a0259873a3ccea0b9de419833ceee2e7ac984fe2067a55e979b69ffeb5f521ed6dde3f7f801fc509b301b61cff08fb6976aaa89a0c08249d61c8a485e16f921ff9f311d90438a9fda362b5d45e17ddb757afc0b667318eeb9c8e5d44529ead6be0d230f4629b3699432ff90cb1c2db3e3cabfc7c99f453d427843febf19ae27f0df9c33abb5eb3", 0x8c}], 0x2, &(0x7f0000002a40)=[{0x10, 0x0, 0x4}], 0x10}, 0x20004000) recvmsg(r1, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x12041) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000019c0)={&(0x7f0000000380)="fabf1d39bf89303bf09a6ea8b03ea15d0a4307de432b80b9257042442ae39eb01834a56846093cf0a638201ad88310f885658e9ccd0d8a6046306e2028da96591a78e572b8236b4b265d84bd9510da84f0c4a41127aee7610414680c97629cb89a4ab72039985ec6d50a94f35e1ac2846c9ddd15a684f4149e904a0f3cd7caa59fa5e2e5c46b3803996314b24b61fc275f86e9464830b1d4ee360713a5e1f0a9176122a62856c5afc8e078726b5c0ee73fafecba7398797807120e2059a21a304d77217db4eb121c0175a46e41e2cb9b27285a2c717f310a82fcd6924d9f4bab7593851abbb30a090860c84e69", &(0x7f0000000480)=""/146, &(0x7f0000000540)="2a614c5b4248c695843700830ed0ba87c63385584adcb6f1d2ece96998451f1784e8754a468a7fa0c5172d6d7af399af740a149677524329442e488a1145d329e8271beeef5821a9fccdbc019ecb0a13aa5ed2cd9e48e25401ef6ce282a0a657ab6f5601d673292fd0f3a3f6ad7b5e1a86b5db5ee75eb4589998f1c52e6d937052a066c85ecd4d", &(0x7f00000009c0)="ade1faec93ec9f938b1c54da915a53b66120f0ab6886818a2723fc3a7457a3f1deb8835a71e15c7b375950b7709265fe70459e9ba296326f23cc58d89e627450d416fac9b26d85a0cdcfc663bb7e85da29fe1eac977ad63d233ae27ac1af8ca3c076e32f13f8e955c1f34504e0654bf834d876563535bf5f39709b1e1a76b88257b37418e007512ee0e0bdcf18bb234abd9fe266d8004639ded731dc0bb0b30dd3af75cc27ee435fdd372a45cfac3fd760de878906b846d6420dff9ff2619b503392d5ea53173cb6455d4936625ab450a818424dec455f8a5e3ccc7bb88905471b5add41bde016359f91f270e1d1df0f950101f0823c5db236958457a1f8837c37a1dd6313fbb65cdc576f96ed6813be6aa6675f7b2fb9ac1deb638449b1832e4dba3a6990db3ea5f6724959be31ecb4cc62a947ff82080b62985d65207d29c89a29e0e852c3cfcacdeaa1636c92c08f13598397a6c7140a95e16d57adcabb5da4cf9dc38f7c3f427627d3468e73fbed9fe7d66a195a411a0695e17b0cf40a2ce8ddefd778dc5e1524e8387b968ce214903ff323059a7beaa858e7d0dd3914c664eded5a8855b4314bfbd8a68079f296d86fd79d26545fc391e8ba261b62f9df230c531a0e2074fae14b16606741cb8d54c556ec717d79881288a510cbe692b4d4b6e9fdd5b278e5e2a819836c8a75eeb0b39ffd5942c88c80e61c7111a7e80d7c10f49b9ff6477248ade7c780e526cc0749e6b18dfc23d24bccaf9040e935cfbf09727172258e8c79bc3445d84aa0f010d05ae1c03c4b95a7cce572888f2590ab79dd08618538e4694af711beba161b8ec9977359a56436932cb7ef9da7ec6e700d451783465b9f27e9bcffb101811c7d957a0649100766667261479d3265d9a62242474b75d57973574d520d72f27a728679926dab4c82e27dc1d7dd0bddb72b8a08a5918b3a48b96ebca34f63133ec4839a85d55f93d76b2d7599560d1cb30cbc9feb960faa20b7d6ed9b8b675b2db799638950ce7fae6a7c6930d71fc32240c8de36f4c3ac5969d057becbef304f54b71dc1fd1bec57bc148425342098499e257fc7eb9ca2a5c3aa2bec1d517e49eb0399fb54e5cd8980484dda291c36595edd333ac9c9b26930940211eaf53adee802565eb7d2afecc94638eccede91bc4aed1118c1d771ea27993dc744689eba92ac696045bf386e79eda1990a42364dbc6c2daa6f1001418d03c3a557b1665615d86cc0463df3798b8a6e05b1352fcfd6b8fe0be288b6fdd9b0cc1f798ae7313b506a41ca54803812d0bc6ed0373a8da4536fcb563d75196c84e02e699e9af010ae21af6da595cf2a26c5696e0bc0b70d6246290114a209fe3f73040d52fbbc9ae326b845d729b0b69952f98f9594430ba770dc66afe4a496a3f800bdba34536133ece3d06fad54b251a134f7e0b5953d4211a617b14d375295ba049e27b670b875c2a61c4a60338d7ed0474f1730a1563f1ea81bc8e0aed596a8b41bf5a98a1fb5caa5b84252c5f1d5a5cef87da90e95d1002c112fb89194e2caa47744cd4270eaea6b5b8963f1d0440b4e6f2d751acb864709568c31801c61b5227e300e3e97a21dbaa693e24c0d3c93048e8d81265f874adfe6d5c96d35bfcf475052253f9f3199bf482d1d5dcabf2355ae9f1a92aa1958ccc70238ea8309e27b28e652c8573bc6c871bb73094624737ed6560c0bfe56c5a5f5c844bcb9e626776af0273e4d8868903a097b097c60871136722ba2dfdc2a722e1b509c0804ec606b811007ca853ade87b231c621587ad50b9a715fdd6ad97d6e0bb866c36ef4f0970a1e7918d7c7e706aa89b865c72f1112badac32d586158b5c66b170a7a195bafaa45e83bb9c86f779a764a2a3fc680d4de17e952feebbe68649bbb95499470bd28ccfec5b393fd47fd8775a51807fec50f8e6b67f0b1d507fd2f279bfc3028a0ed76611d65819bef2416b1c96a3bde3eb48a6c1bcadde68459fc12e1104d7ef9c96c6928b6e501b295c192b36dab9e25e20e702db1495a96b91844f6078667bd4c5aac3e14799d8bff71b2d725a3edbd5f340f3584e636d872fc000c09c9cb303cac21e46b160ce2e941cf4728ecd7ac9abffef74b944b18f00655b9497f019b1ea467f2491ef4c6af54636dc572bc97a50fb55a3a51911bfccc9e4a0187e474a58b820eff19472304dbe28d88d862fb58c22bdc5f01c9fca9b488f8d9cc3d640d7774a65310a630df7722b05c74a8f143ee518fab952f1e5b3f0ded233f843a0831791d3fe1bc2e15b94e0c367d8b5073be0940d759aaaf9535d90a601da6257b8047e12a96cd206831bca66c447f40d08fcca03b0d9d64cfd2eb47721e57d4e83faa21e5709529d71fede886de45fba3d8013b28e3f7316a2756757d1222e2f3247f5a181ca4e4faabe9880156f69433672533861ed02abc808e148d47211dcb9dcbb1523f8dc9bbbf0a3ca00d5859b1620ca82e4bfce1ab56778e166f3c2ad2d95e2f900adc78364dd114dc9e2ea0b6b04f804a15e6f7ff99d76d50409aa3ea6e66f02102c24c8f0512c2be805d3a80b18ad8d4a40f0f67c195c9b300425223970fb444ef3bd278b231e97fea02b08faf5651d1c53ec1817b7f269cbcdf2a024ab8d6c9891de15021606668f94b1eac680fe3f7bd50c8e67c7cbc002715966fedd7e107bf6055394d9ba13a722f61ff3fad9f42834b938c803b37bfc7f32985b8ca8669aa8538db1afd2b0ef2f235ecd291a80da4d8fac492b5367cf79c6ec8a19eb4ce262bf5b8dfcd6f7d7cd732705e8c6f0bed24a2132247e6b92af6e40b95848ab5220df4406d49f8506c86d6a838b8958f39c4e7c5cda11a8a1e0721c51b8bc38e30fd92a33d09e43ab5951f3942071079eba196907b44d89b445c7bfb63ef63f9e8a1e668b271fc103dfdf9d7faa3ead657da34498f121c8c8ab099e7a295f5eee086f8513708bdb58baddd11218e5b488f072bd9cd6b7a6881862154f7a19f70c58cee15e4e9449959548539b7a5f2275aa51aadee6c62ed4d6df1aa2e770ffd3ee054a4c809059463236e599bc936e2d0bb090ac246746d78d63dd874e601afe9b32b0baf3197ab68b93617d748761c98c9e077e807216a922dfb6765f0d18acad2eeb3139febb408480f2dd2e1760e79d6c02a92ea2e8c23a153b2b740b605d90e8cd4d0c9b32a396bc773d835c0985386ddc72cb5bb16a7406e15535a9e0625629b06b3b628f9d01aaafac657b4a6866167baf9b287f75d978843b89c1f2c1ed09c427904452f91d890e221967681c9125d66f7c6fe43315bc897a2acf62a642195f454ccb22ae4e361fbf44bc340ebc2324ec8c61f2df2b67fb670511f6624083e79aae2481897223cd2a378ecb557bd8b87ec513a8433fc3ff49fa7c6f5e9a73520c0b12be24a88eea234064bb40c4e48153991bd05d7b54705694f0d251ea233bc3babc65f702866ec2ec6b7c7eeaa35a68ad6ce538a93bc81d0ad110039791902d74e701ab6b1d9647749e78eda92b86a2fcfa013ca9fb7fc04b3e8356ecf100ec53425a1bc84a19360568239516d9b0d0f07887b1d62f0803e5e9e6b1d8b61f7c557c3ae09dc2c40a7fb6742de1f272ebbea3220963fe24c987a26dad27b1a4788692f04cf8f08e7d027a80d51c1e3bf895fbd702675e42567ab4c988fbe53cbb0ef166aca0804004f383b30ef4be663966f57d03106a97d87b8daf33d7e656f58ad01d4c211efc2be81ca0a07bb99b9bd837d8d74131d9fc10772d5563d253df9e96178812dd339988a7e1ed01ef0c432dd3db693e46f90372af52c3a049f801ef74749b2b4c76893c4979d2d497c0028b61447e5917c5e8ece377d53dcc01990cf6f27a710cd7326c3d56ca65427076f3a3cbd87a75b07db8647266f2f3681743464033738f853c63a96b9f078d9d2543aa29d77fa5d167961066bed7c784a3ea6b2f135547ac8c8b57b3734fe024afee6c255db0544913079863214ccd33acda79f3b68a66cb42d0e889fb192a6ad32b6f653a62242c027862d811bde95b3883d8af6dbede9bc5a27449f1f6c857f816c06bdaa381e575bee3e60938a519a19be6827ebdc006fd43b5f6055a5385f22dfa45e6c4b55a75fddade9dba4fd12bd02b20f6504f53e3637893be8b4a31c04f82d93d34ac476e58eb5e23f66134591e4072199f5df64dbfb6ae0ee6c5267463d243aff326b38bab22bbca66bc226e270ceac69216420d67b838e3adf64ad6bcb53a323e7046d1bedb9bf14db74e8b89a1d86457549900d273b5374b8457013323a3cb97e3d62a2d35fb45c2334157e1a9913c5dde68bdd3029f416222302200cfa3d85f1d64b75dab5b5b14d00da996f007807b56abcdb180760c4cd37030a6ebb69da20a370681643f76ec1a06ce15757b2d847b6a217aac07eeeb7eba4bb11b9a859cc6e281bf992622b80634ad6441a109ad679c553c2301d80bab90d854cdfff66ce2899eafa1531dc6fedc0c852e373ee743225cf07eaffaabf6386727b73d9854a295cea83d018fa3b80540c1a62f79cd84b14af20bfa42e26c9a9b4e8b539274272661cb5efa85f54dcaa154712e64beff529b984bd32773f2580a960fd43bf86c125274850dacb5f1d5d96cd43d5d0f7209cf79a0b89dd05a0a6c5f551b06ab50681bb03537558133863675b7bedf180e7d12739718dfed8245ccb92627ea5423c755914ae7dd1d63cb4d28f33a24e5265fd0f4b475b09d8546f15d52c881f63bc4543223e778ffb4fab386f72f2a2d37369abfecf336f4793f5a784f4cfac355e2f041d15adfb6601294b6e02eefdd49437dd9630c6602dca6231989af615df68aa3ed9f545ea54f587b5248747a5d28355a7739ac7c4821c1f77bfa58996303559acfc8906dd3f73ebc4fd724fc76f0684842f23ef847fbb01c012d80d2fba2fa602ed81522f80c0e3681d10a01528b247a17b16444e97b3ff8abaa67e31a1965506676e98d77452e3835c6f6348b5c5f85db184398f6f7c2255c3611720956d052bad7d4aeff04a318acd17eaa64a1ae27d26e341e2ab7b7fa18b957b205db8a18352f617f9c1ff06cd993ecba0096312f0dda2e85d3584a87f2533578952bf81eac80a5b377dc10d0a325c72fd69f4ca6d7e76b230d46c63de72ab2b71df35163d0ab22c57a45c11104097baad93c13b602e122cd01e69223645ac88e0d3200a11934ce213610864d13110a2ab7f9b44c2463aba12215700f5708d62684843eb6ceb6a088864effe76cf717dd14cd34c036d7a77bdc8e32efc7da5cb1b3597217e16914e70e8ca9246db2273e4a97f8369320b020ce88d4530471c766f3dc19c42b7adf2b43b587c516e2e94f264c7655cf16618573afbc55ef636f4ad7211af7c2ec97e750fc3883db8bafdef6ba91c26ea52ab70b99afe1a40063f2d18b136986ccf4396bf5590c7b372e16a1587712641856d571e41a967cbddfd51622f8b5b41b86e487b921a75c2fb034ea9efb71bf552e760d72487035ce3c62703eaafcdc0f4cec66938d3be59609dac59b15c50ae98b0047b0028a472bf3cfde9081b4f0eabe3030dd33bb269e8fada45d02f5559ef55ba68d11d39fdb9300567c5de6701bec9b562cd8f6f67632f36dcb2eeea3c1fda501c5a96826b9e1eb32f7cd869191b76debff22f9cff6ca2a0b06c75b8afddf27c3b4afb2be1d138524d53be5d5e77f556026f426ab88fc249f2936910dc7f7175d15acf3bf7f8c4c527bd7462e6f74357cb26bfc2d145fd63b4f796de9f", 0x9, r2}, 0x38) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044811}, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001a00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001e00)={0x9, 0x3, {0xe2, @struct={0xffffc000, 0xe}, 0x0, 0x7, 0x4, 0x9, 0x4, 0x2, 0x0, @usage=0xde74, 0x40, 0xfffffffe, [0xfffffffffffffff0, 0x663, 0x0, 0x0, 0x10001, 0xfffffffffffffff6]}, {0xb, @usage=0x7, 0x0, 0x9, 0x1, 0x4, 0x8, 0x1, 0x20, @struct={0x22b, 0xfffffffb}, 0x7, 0x5, [0x9, 0x7fffffff, 0x1ff, 0x6, 0x3ff, 0x215]}, {0x52a, @usage=0x7f, 0x0, 0x7, 0x731, 0x4, 0x5, 0x2, 0x412, @struct={0x0, 0x4}, 0x6, 0x8000, [0x7, 0x0, 0x6, 0x8, 0x3, 0x9]}, {0x69d6, 0xfff, 0x7fff}}) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000600)={0x4c3e, 0x40, 0x5, 0x9}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000002200)={0x0, 0x3, {0xf6fb, @struct={0xfffffffe, 0x5}, 0x0, 0x100000001, 0xffffffffffffffff, 0x7, 0x7fffffff, 0x2, 0x9a, @usage=0x2, 0x5, 0x9, [0x5897, 0xfbd, 0x5, 0x1, 0xdd86, 0x40]}, {0x2e6, @struct={0x81, 0x2}, r5, 0x8, 0x1ff, 0x8000000000000000, 0x7fff, 0x4, 0x80, @struct={0x2c4}, 0x8, 0x0, [0x226, 0x9, 0xfffffffffffff581, 0x0, 0xa, 0x7]}, {0x2, @usage=0x6, r6, 0xfbbd, 0x40, 0x4, 0x8, 0x7, 0x406, @usage=0x4, 0x5, 0x2, [0xfffffffffffffffc, 0x400, 0x3, 0x400, 0x1, 0x7]}, {0x401, 0x7, 0xfffffffffffffffc}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r2, @ANYBLOB="0000000002000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m20.241989145s ago: executing program 33 (id=2769): syz_emit_ethernet(0x34e, &(0x7f0000002600)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@map=0xffffffffffffffff, 0x24, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r0, 0x7, 0x0, 0x8, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x3fffffffffffce3, 0x0, 0x0) sendmsg(r1, &(0x7f0000000840)={&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x100, @remote, 0x1, 0x4}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)}, {&(0x7f0000002980)="9c73efacb5a0259873a3ccea0b9de419833ceee2e7ac984fe2067a55e979b69ffeb5f521ed6dde3f7f801fc509b301b61cff08fb6976aaa89a0c08249d61c8a485e16f921ff9f311d90438a9fda362b5d45e17ddb757afc0b667318eeb9c8e5d44529ead6be0d230f4629b3699432ff90cb1c2db3e3cabfc7c99f453d427843febf19ae27f0df9c33abb5eb3", 0x8c}], 0x2, &(0x7f0000002a40)=[{0x10, 0x0, 0x4}], 0x10}, 0x20004000) recvmsg(r1, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x12041) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000019c0)={&(0x7f0000000380)="fabf1d39bf89303bf09a6ea8b03ea15d0a4307de432b80b9257042442ae39eb01834a56846093cf0a638201ad88310f885658e9ccd0d8a6046306e2028da96591a78e572b8236b4b265d84bd9510da84f0c4a41127aee7610414680c97629cb89a4ab72039985ec6d50a94f35e1ac2846c9ddd15a684f4149e904a0f3cd7caa59fa5e2e5c46b3803996314b24b61fc275f86e9464830b1d4ee360713a5e1f0a9176122a62856c5afc8e078726b5c0ee73fafecba7398797807120e2059a21a304d77217db4eb121c0175a46e41e2cb9b27285a2c717f310a82fcd6924d9f4bab7593851abbb30a090860c84e69", &(0x7f0000000480)=""/146, &(0x7f0000000540)="2a614c5b4248c695843700830ed0ba87c63385584adcb6f1d2ece96998451f1784e8754a468a7fa0c5172d6d7af399af740a149677524329442e488a1145d329e8271beeef5821a9fccdbc019ecb0a13aa5ed2cd9e48e25401ef6ce282a0a657ab6f5601d673292fd0f3a3f6ad7b5e1a86b5db5ee75eb4589998f1c52e6d937052a066c85ecd4d", &(0x7f00000009c0)="ade1faec93ec9f938b1c54da915a53b66120f0ab6886818a2723fc3a7457a3f1deb8835a71e15c7b375950b7709265fe70459e9ba296326f23cc58d89e627450d416fac9b26d85a0cdcfc663bb7e85da29fe1eac977ad63d233ae27ac1af8ca3c076e32f13f8e955c1f34504e0654bf834d876563535bf5f39709b1e1a76b88257b37418e007512ee0e0bdcf18bb234abd9fe266d8004639ded731dc0bb0b30dd3af75cc27ee435fdd372a45cfac3fd760de878906b846d6420dff9ff2619b503392d5ea53173cb6455d4936625ab450a818424dec455f8a5e3ccc7bb88905471b5add41bde016359f91f270e1d1df0f950101f0823c5db236958457a1f8837c37a1dd6313fbb65cdc576f96ed6813be6aa6675f7b2fb9ac1deb638449b1832e4dba3a6990db3ea5f6724959be31ecb4cc62a947ff82080b62985d65207d29c89a29e0e852c3cfcacdeaa1636c92c08f13598397a6c7140a95e16d57adcabb5da4cf9dc38f7c3f427627d3468e73fbed9fe7d66a195a411a0695e17b0cf40a2ce8ddefd778dc5e1524e8387b968ce214903ff323059a7beaa858e7d0dd3914c664eded5a8855b4314bfbd8a68079f296d86fd79d26545fc391e8ba261b62f9df230c531a0e2074fae14b16606741cb8d54c556ec717d79881288a510cbe692b4d4b6e9fdd5b278e5e2a819836c8a75eeb0b39ffd5942c88c80e61c7111a7e80d7c10f49b9ff6477248ade7c780e526cc0749e6b18dfc23d24bccaf9040e935cfbf09727172258e8c79bc3445d84aa0f010d05ae1c03c4b95a7cce572888f2590ab79dd08618538e4694af711beba161b8ec9977359a56436932cb7ef9da7ec6e700d451783465b9f27e9bcffb101811c7d957a0649100766667261479d3265d9a62242474b75d57973574d520d72f27a728679926dab4c82e27dc1d7dd0bddb72b8a08a5918b3a48b96ebca34f63133ec4839a85d55f93d76b2d7599560d1cb30cbc9feb960faa20b7d6ed9b8b675b2db799638950ce7fae6a7c6930d71fc32240c8de36f4c3ac5969d057becbef304f54b71dc1fd1bec57bc148425342098499e257fc7eb9ca2a5c3aa2bec1d517e49eb0399fb54e5cd8980484dda291c36595edd333ac9c9b26930940211eaf53adee802565eb7d2afecc94638eccede91bc4aed1118c1d771ea27993dc744689eba92ac696045bf386e79eda1990a42364dbc6c2daa6f1001418d03c3a557b1665615d86cc0463df3798b8a6e05b1352fcfd6b8fe0be288b6fdd9b0cc1f798ae7313b506a41ca54803812d0bc6ed0373a8da4536fcb563d75196c84e02e699e9af010ae21af6da595cf2a26c5696e0bc0b70d6246290114a209fe3f73040d52fbbc9ae326b845d729b0b69952f98f9594430ba770dc66afe4a496a3f800bdba34536133ece3d06fad54b251a134f7e0b5953d4211a617b14d375295ba049e27b670b875c2a61c4a60338d7ed0474f1730a1563f1ea81bc8e0aed596a8b41bf5a98a1fb5caa5b84252c5f1d5a5cef87da90e95d1002c112fb89194e2caa47744cd4270eaea6b5b8963f1d0440b4e6f2d751acb864709568c31801c61b5227e300e3e97a21dbaa693e24c0d3c93048e8d81265f874adfe6d5c96d35bfcf475052253f9f3199bf482d1d5dcabf2355ae9f1a92aa1958ccc70238ea8309e27b28e652c8573bc6c871bb73094624737ed6560c0bfe56c5a5f5c844bcb9e626776af0273e4d8868903a097b097c60871136722ba2dfdc2a722e1b509c0804ec606b811007ca853ade87b231c621587ad50b9a715fdd6ad97d6e0bb866c36ef4f0970a1e7918d7c7e706aa89b865c72f1112badac32d586158b5c66b170a7a195bafaa45e83bb9c86f779a764a2a3fc680d4de17e952feebbe68649bbb95499470bd28ccfec5b393fd47fd8775a51807fec50f8e6b67f0b1d507fd2f279bfc3028a0ed76611d65819bef2416b1c96a3bde3eb48a6c1bcadde68459fc12e1104d7ef9c96c6928b6e501b295c192b36dab9e25e20e702db1495a96b91844f6078667bd4c5aac3e14799d8bff71b2d725a3edbd5f340f3584e636d872fc000c09c9cb303cac21e46b160ce2e941cf4728ecd7ac9abffef74b944b18f00655b9497f019b1ea467f2491ef4c6af54636dc572bc97a50fb55a3a51911bfccc9e4a0187e474a58b820eff19472304dbe28d88d862fb58c22bdc5f01c9fca9b488f8d9cc3d640d7774a65310a630df7722b05c74a8f143ee518fab952f1e5b3f0ded233f843a0831791d3fe1bc2e15b94e0c367d8b5073be0940d759aaaf9535d90a601da6257b8047e12a96cd206831bca66c447f40d08fcca03b0d9d64cfd2eb47721e57d4e83faa21e5709529d71fede886de45fba3d8013b28e3f7316a2756757d1222e2f3247f5a181ca4e4faabe9880156f69433672533861ed02abc808e148d47211dcb9dcbb1523f8dc9bbbf0a3ca00d5859b1620ca82e4bfce1ab56778e166f3c2ad2d95e2f900adc78364dd114dc9e2ea0b6b04f804a15e6f7ff99d76d50409aa3ea6e66f02102c24c8f0512c2be805d3a80b18ad8d4a40f0f67c195c9b300425223970fb444ef3bd278b231e97fea02b08faf5651d1c53ec1817b7f269cbcdf2a024ab8d6c9891de15021606668f94b1eac680fe3f7bd50c8e67c7cbc002715966fedd7e107bf6055394d9ba13a722f61ff3fad9f42834b938c803b37bfc7f32985b8ca8669aa8538db1afd2b0ef2f235ecd291a80da4d8fac492b5367cf79c6ec8a19eb4ce262bf5b8dfcd6f7d7cd732705e8c6f0bed24a2132247e6b92af6e40b95848ab5220df4406d49f8506c86d6a838b8958f39c4e7c5cda11a8a1e0721c51b8bc38e30fd92a33d09e43ab5951f3942071079eba196907b44d89b445c7bfb63ef63f9e8a1e668b271fc103dfdf9d7faa3ead657da34498f121c8c8ab099e7a295f5eee086f8513708bdb58baddd11218e5b488f072bd9cd6b7a6881862154f7a19f70c58cee15e4e9449959548539b7a5f2275aa51aadee6c62ed4d6df1aa2e770ffd3ee054a4c809059463236e599bc936e2d0bb090ac246746d78d63dd874e601afe9b32b0baf3197ab68b93617d748761c98c9e077e807216a922dfb6765f0d18acad2eeb3139febb408480f2dd2e1760e79d6c02a92ea2e8c23a153b2b740b605d90e8cd4d0c9b32a396bc773d835c0985386ddc72cb5bb16a7406e15535a9e0625629b06b3b628f9d01aaafac657b4a6866167baf9b287f75d978843b89c1f2c1ed09c427904452f91d890e221967681c9125d66f7c6fe43315bc897a2acf62a642195f454ccb22ae4e361fbf44bc340ebc2324ec8c61f2df2b67fb670511f6624083e79aae2481897223cd2a378ecb557bd8b87ec513a8433fc3ff49fa7c6f5e9a73520c0b12be24a88eea234064bb40c4e48153991bd05d7b54705694f0d251ea233bc3babc65f702866ec2ec6b7c7eeaa35a68ad6ce538a93bc81d0ad110039791902d74e701ab6b1d9647749e78eda92b86a2fcfa013ca9fb7fc04b3e8356ecf100ec53425a1bc84a19360568239516d9b0d0f07887b1d62f0803e5e9e6b1d8b61f7c557c3ae09dc2c40a7fb6742de1f272ebbea3220963fe24c987a26dad27b1a4788692f04cf8f08e7d027a80d51c1e3bf895fbd702675e42567ab4c988fbe53cbb0ef166aca0804004f383b30ef4be663966f57d03106a97d87b8daf33d7e656f58ad01d4c211efc2be81ca0a07bb99b9bd837d8d74131d9fc10772d5563d253df9e96178812dd339988a7e1ed01ef0c432dd3db693e46f90372af52c3a049f801ef74749b2b4c76893c4979d2d497c0028b61447e5917c5e8ece377d53dcc01990cf6f27a710cd7326c3d56ca65427076f3a3cbd87a75b07db8647266f2f3681743464033738f853c63a96b9f078d9d2543aa29d77fa5d167961066bed7c784a3ea6b2f135547ac8c8b57b3734fe024afee6c255db0544913079863214ccd33acda79f3b68a66cb42d0e889fb192a6ad32b6f653a62242c027862d811bde95b3883d8af6dbede9bc5a27449f1f6c857f816c06bdaa381e575bee3e60938a519a19be6827ebdc006fd43b5f6055a5385f22dfa45e6c4b55a75fddade9dba4fd12bd02b20f6504f53e3637893be8b4a31c04f82d93d34ac476e58eb5e23f66134591e4072199f5df64dbfb6ae0ee6c5267463d243aff326b38bab22bbca66bc226e270ceac69216420d67b838e3adf64ad6bcb53a323e7046d1bedb9bf14db74e8b89a1d86457549900d273b5374b8457013323a3cb97e3d62a2d35fb45c2334157e1a9913c5dde68bdd3029f416222302200cfa3d85f1d64b75dab5b5b14d00da996f007807b56abcdb180760c4cd37030a6ebb69da20a370681643f76ec1a06ce15757b2d847b6a217aac07eeeb7eba4bb11b9a859cc6e281bf992622b80634ad6441a109ad679c553c2301d80bab90d854cdfff66ce2899eafa1531dc6fedc0c852e373ee743225cf07eaffaabf6386727b73d9854a295cea83d018fa3b80540c1a62f79cd84b14af20bfa42e26c9a9b4e8b539274272661cb5efa85f54dcaa154712e64beff529b984bd32773f2580a960fd43bf86c125274850dacb5f1d5d96cd43d5d0f7209cf79a0b89dd05a0a6c5f551b06ab50681bb03537558133863675b7bedf180e7d12739718dfed8245ccb92627ea5423c755914ae7dd1d63cb4d28f33a24e5265fd0f4b475b09d8546f15d52c881f63bc4543223e778ffb4fab386f72f2a2d37369abfecf336f4793f5a784f4cfac355e2f041d15adfb6601294b6e02eefdd49437dd9630c6602dca6231989af615df68aa3ed9f545ea54f587b5248747a5d28355a7739ac7c4821c1f77bfa58996303559acfc8906dd3f73ebc4fd724fc76f0684842f23ef847fbb01c012d80d2fba2fa602ed81522f80c0e3681d10a01528b247a17b16444e97b3ff8abaa67e31a1965506676e98d77452e3835c6f6348b5c5f85db184398f6f7c2255c3611720956d052bad7d4aeff04a318acd17eaa64a1ae27d26e341e2ab7b7fa18b957b205db8a18352f617f9c1ff06cd993ecba0096312f0dda2e85d3584a87f2533578952bf81eac80a5b377dc10d0a325c72fd69f4ca6d7e76b230d46c63de72ab2b71df35163d0ab22c57a45c11104097baad93c13b602e122cd01e69223645ac88e0d3200a11934ce213610864d13110a2ab7f9b44c2463aba12215700f5708d62684843eb6ceb6a088864effe76cf717dd14cd34c036d7a77bdc8e32efc7da5cb1b3597217e16914e70e8ca9246db2273e4a97f8369320b020ce88d4530471c766f3dc19c42b7adf2b43b587c516e2e94f264c7655cf16618573afbc55ef636f4ad7211af7c2ec97e750fc3883db8bafdef6ba91c26ea52ab70b99afe1a40063f2d18b136986ccf4396bf5590c7b372e16a1587712641856d571e41a967cbddfd51622f8b5b41b86e487b921a75c2fb034ea9efb71bf552e760d72487035ce3c62703eaafcdc0f4cec66938d3be59609dac59b15c50ae98b0047b0028a472bf3cfde9081b4f0eabe3030dd33bb269e8fada45d02f5559ef55ba68d11d39fdb9300567c5de6701bec9b562cd8f6f67632f36dcb2eeea3c1fda501c5a96826b9e1eb32f7cd869191b76debff22f9cff6ca2a0b06c75b8afddf27c3b4afb2be1d138524d53be5d5e77f556026f426ab88fc249f2936910dc7f7175d15acf3bf7f8c4c527bd7462e6f74357cb26bfc2d145fd63b4f796de9f", 0x9, r2}, 0x38) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044811}, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001a00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001e00)={0x9, 0x3, {0xe2, @struct={0xffffc000, 0xe}, 0x0, 0x7, 0x4, 0x9, 0x4, 0x2, 0x0, @usage=0xde74, 0x40, 0xfffffffe, [0xfffffffffffffff0, 0x663, 0x0, 0x0, 0x10001, 0xfffffffffffffff6]}, {0xb, @usage=0x7, 0x0, 0x9, 0x1, 0x4, 0x8, 0x1, 0x20, @struct={0x22b, 0xfffffffb}, 0x7, 0x5, [0x9, 0x7fffffff, 0x1ff, 0x6, 0x3ff, 0x215]}, {0x52a, @usage=0x7f, 0x0, 0x7, 0x731, 0x4, 0x5, 0x2, 0x412, @struct={0x0, 0x4}, 0x6, 0x8000, [0x7, 0x0, 0x6, 0x8, 0x3, 0x9]}, {0x69d6, 0xfff, 0x7fff}}) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000600)={0x4c3e, 0x40, 0x5, 0x9}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000002200)={0x0, 0x3, {0xf6fb, @struct={0xfffffffe, 0x5}, 0x0, 0x100000001, 0xffffffffffffffff, 0x7, 0x7fffffff, 0x2, 0x9a, @usage=0x2, 0x5, 0x9, [0x5897, 0xfbd, 0x5, 0x1, 0xdd86, 0x40]}, {0x2e6, @struct={0x81, 0x2}, r5, 0x8, 0x1ff, 0x8000000000000000, 0x7fff, 0x4, 0x80, @struct={0x2c4}, 0x8, 0x0, [0x226, 0x9, 0xfffffffffffff581, 0x0, 0xa, 0x7]}, {0x2, @usage=0x6, r6, 0xfbbd, 0x40, 0x4, 0x8, 0x7, 0x406, @usage=0x4, 0x5, 0x2, [0xfffffffffffffffc, 0x400, 0x3, 0x400, 0x1, 0x7]}, {0x401, 0x7, 0xfffffffffffffffc}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r2, @ANYBLOB="0000000002000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m20.143076871s ago: executing program 5 (id=3232): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x61, 0x80000000, 0xb, 0x5, 0x5a4}) connect$x25(r0, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000000)) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fe3000", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ni={0x4e8ef1decde2b390, 0x0, 0x0, 0x1, 0x2, 0xa6f}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01027290000000000000010000000900010073797a310000000014000480080002400000000808000140000000050900030073797a32000000003c000000030a01080000000000000000010020000c00024000000000000000010900010073797a3100000000040004"], 0xc4}}, 0xc000) 1m19.168069127s ago: executing program 5 (id=3235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0x80}}, 0x4008004) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) 1m19.163021815s ago: executing program 5 (id=3238): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044805) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x84) r6 = socket(0x1e, 0x5, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x8907, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x80000000}, 0xfeda) r8 = socket(0x1e, 0x805, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r4, 0xc0205865, &(0x7f0000000940)={&(0x7f0000000740)=0x13, 0xeef, &(0x7f0000000780)=[{}, {}], &(0x7f0000000900)}) sendmsg$tipc(r8, &(0x7f0000000340)={&(0x7f0000000380)=@name, 0x10, 0x0}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r6) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x30, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xffffffc4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}]}, 0x30}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14020000dd319001d0b1d397c30d69693a11893b687e70e947e6c4da48fb426d7a67b655080c7866650f5420f734a86bb145e39e64074949f978c8dde254198ca30f2ee747869bcdf4438dd6955c14e3cf159c06032ddf4299bde19ef804c60f0da86267bb889004b05aebf270c2b45dbf51883a0e3286345c19550015bcf4950a54b2a585e20f0af6f6ccd95b2a94b4854848f9b52579357de28fbc7de34fc457779dcaeebf461663da97", @ANYRES16=r10, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000005f0001"], 0x14}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c824}, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x0, [0x6, 0x100, 0x5]}, &(0x7f0000000c00)=0x44) 1m17.296459591s ago: executing program 5 (id=3246): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/49, 0x31}], 0x2}, 0x8000}], 0x1, 0x40000101, 0x0) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100017800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "9cb0bb1204bfceff", "8bcbdfdb959328f2993a5b054d2422af17c32b2ba078df9ef1c46acc543b33f5", 'Z,+O', "45e41da2d3f7ae73"}, 0x38) 1m17.287703319s ago: executing program 5 (id=3251): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x18}}, 0x4000014) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000027000100000000000000000006000000100001800b"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m16.928776828s ago: executing program 5 (id=3256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r2, 0x4a3e4f761dcd662d, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0x9, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x28010804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000e02000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 1m1.15914247s ago: executing program 34 (id=3256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2c, r2, 0x4a3e4f761dcd662d, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0x9, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x28010804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000027000100fdff0700001000000e02000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 13.615740272s ago: executing program 6 (id=3593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000280), 0x0) close(r5) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, 0x6, 0x6, 0xb03, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x20, &(0x7f0000000940)={&(0x7f0000000800)=""/55, 0x37, 0x0, &(0x7f0000000840)=""/223, 0xdf}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x26, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000004000000000000000d00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018280000", @ANYRES32, @ANYBLOB="000000000100000085100000faffffff18250000", @ANYRES32=0x1, @ANYBLOB="0000000040ec00001800000006000000000000000000010018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f6000000850000008600000085200000020000001800000003000000000000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0x401, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x6, 0x5, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000bc0)=[{0x2, 0x1, 0x1, 0x3}, {0x0, 0x2, 0x7, 0x4}, {0x5, 0x4, 0x7, 0xa}, {0x3, 0x1, 0xa, 0x1}, {0x2, 0x3, 0x5, 0x8}, {0x3, 0x2, 0x1, 0x1}, {0x0, 0x1, 0xd, 0x8}], 0x10, 0x40000000}, 0x94) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000d00)={0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001140)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={r8, 0x20, &(0x7f0000001400)={&(0x7f0000001340), 0x0, 0x0, &(0x7f0000001380)=""/103, 0x67}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x12, 0x15, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000001240)='syzkaller\x00', 0x9, 0x1d, &(0x7f0000001280)=""/29, 0x41100, 0x21, '\x00', r7, @fallback=0x29, r5, 0x8, &(0x7f00000012c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001300)={0x2, 0x7, 0x8000, 0x2}, 0x10, r13, 0xffffffffffffffff, 0x0, &(0x7f0000001480)=[r11], 0x0, 0x10, 0x6}, 0x94) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@arena={0x21, 0x0, 0x0, 0xd, 0x20400, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f00), &(0x7f0000000f40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x12, 0x23, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x3, 0xfe, &(0x7f00000005c0)=""/254, 0x41000, 0x23, '\x00', r7, @fallback=0x2a, r8, 0x8, &(0x7f00000007c0)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, r10, 0x5, &(0x7f0000000fc0)=[0xffffffffffffffff, r11, r14, r15, r16, r17], &(0x7f0000001000)=[{0x0, 0x4, 0xb, 0xa}, {0x0, 0x1, 0xc, 0x1}, {0x4, 0x2, 0x7, 0x8}, {0x2, 0x5, 0x4, 0xe}, {0x1, 0x2, 0x1, 0x3}], 0x10, 0x8}, 0x94) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000015c0)={0x0, 0x7f, 0x7, [0x5, 0x5, 0x7, 0x1, 0x8001, 0xf, 0x9]}, 0x16) write(r2, &(0x7f0000000140)="4c00000011000f14001100020000080002000000200000", 0x17) bind(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101f3ffffffffffffff010000030900010073797a310000000040000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000050900010073797a310000000014000000110001"], 0x88}}, 0x0) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x160}}, 0x44) 11.032679999s ago: executing program 6 (id=3601): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000040000001800000001000000cd000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x200000, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001640)={@val={0x0, 0xf6}, @void, @ipv6=@tipc_packet={0xc, 0x6, "40ff2a", 0x210, 0x6, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, {[@fragment={0x2e, 0x0, 0x1, 0x1, 0x0, 0x4, 0x64}, @dstopts={0x32, 0x2c, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0xdfe, [0x0, 0x8, 0x3, 0x3, 0x7f, 0x9]}}, @generic={0xd, 0xd0, "43fab9e4c363e05e481c1ac777001ee3db52393c86b4b2d624e7ef160da2ca82aad8cd9248993766d4dae451b9b66dd9f9c45f56bd3dcd5b8a504c8015041f047e63cb45105527d690603027b281f2edf740665db6e7fd1b0bd3747a701b5ba4a27b6a847af70f9ad8110432c06b5467f10127c1bbeed253046d9dcee6ea53f5351d680a2b97918497a79cee9937bade6fa0525a28b2f4024ea9df66991ccf1e44cf2fcb41940d066b7d4bfdc71e4af2649818d05978d95ba0ded8c568dc62a4aa11b7df6964ce1f1888581d4620d514"}, @jumbo={0xc2, 0x4, 0x80}, @calipso={0x7, 0x48, {0x0, 0x10, 0xc5, 0x7, [0xa1d8, 0x101, 0x7, 0x3, 0x1, 0x468, 0x8000000000000001, 0x168000000000000]}}, @pad1]}, @srh={0x1d, 0x4, 0x4, 0x2, 0xa0, 0x10, 0x2, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0]}, @dstopts={0x8, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x81}]}], @name_distributor={{0x60, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x8, 0x0, 0x0, 0x5, 0x7, 0x3, 0x4e24, 0x4e24, 0x3, 0x2, 0x0, 0x0, 0x1}, [{0xc5a8, 0x3, 0xffff9a41, 0x2, 0x9b, 0x8, 0x9, 0x3}, {0x941c, 0x1, 0x6, 0x2, 0x0, 0x3, 0x2, 0x9}]}}}}, 0x23c) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)={0x118, 0x2a, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@nested={0x8, 0xa6, 0x0, 0x1, [@nested={0x4, 0xfb}]}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f934e2f6a9c8ab9467d996576b3", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x4, @remote}, 0x10) socket$netlink(0x10, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="8fbf19556544eab8b4dc29c509488a3a07b74c2c69ccaefef75ae6067a3c51fc9c4d61d2ff1056b9f322642c9e71bd296ead657d2e8a378f5dcaba2b573eb6818631199f686ad284ab30e4833bf2b208f66ff7f66b06d8dcdd334cb85b923c0e2742b2e6406bdbb1acab46adbcf27e512739016b6ba53b03ef9f78c728e269c99868c2e6de18b1b68d10dfc03c99e0bd2aac3a05c3ae015a90d145f50a7449355c2f3c4314763994324e12e0d3db17688419920af15d1fcc3c340790533f", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000ff06020000f8ffffffb703000008000000b70400000200000085000000030000009500ac0000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1026, &(0x7f0000000600)=""/4134, 0x40f00}, 0x94) 10.159409864s ago: executing program 2 (id=3602): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x80, 0x0, 0x5fa3b7d3, 0x0, {{0x24, 0x4, 0x0, 0x7, 0x90, 0x64, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1b, 0xdc, [@loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @multicast2]}, @timestamp={0x44, 0x14, 0xbf, 0x0, 0x1, [0x81, 0x401, 0x5b0, 0x8b16]}, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x7f, 0x1, 0x4, [{@rand_addr=0x64010101, 0x1}, {@loopback, 0x12}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}]}, @lsrr={0x83, 0xb, 0x54, [@empty, @dev={0xac, 0x14, 0x14, 0x26}]}, @rr={0x7, 0x1f, 0x24, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @empty, @broadcast, @rand_addr=0x64010101, @multicast2]}, @noop, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000800}, 0x4804) 10.020009573s ago: executing program 1 (id=3603): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000300)="869c4d2d45d5deeb9d6289c16329e21365c69a0d0c400719052d19245db46b54a36f4d09308d8ad9e7e48fcb331af3f5a650b7a52421dffde9ea9753844ca239c34158773d3a6ab31876eaaf32147c874e006231b6ae724f4488473048a8bb9d293e6bfa909fcd951fa68c937e529f5ff1e9c5d1c811540d80daa879f80e854bde4b729b554043159125923219360ef41f970a4f9a41f64055991bc4af281e99be36a3763f5ee77372a05a8363ad0c", 0xaf) listen(r4, 0x7d4165c9) listen(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000040)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000000c0), 0x2, 0x0) pread64(r7, &(0x7f0000000200)=""/224, 0xe0, 0x200000000000002) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 8.74790424s ago: executing program 2 (id=3606): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001840)={'syzkaller0\x00', 0x1002}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001880)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000018c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=@newtfilter={0x80, 0x2c, 0x401, 0x3ffe, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x20, 0x7}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x80}}, 0x0) write(r1, &(0x7f0000001ac0)="ffffffffffffc011223344554305", 0xe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'bridge0\x00', &(0x7f00000005c0)=@ethtool_ringparam={0x4, 0x0, 0x47, 0xfffffffe, 0x5, 0x1, 0x0, 0x0, 0xf}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x13, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="660a0000000000006111b8000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0800000000000000280012800b0001006272696467650000180002800a001400aaaaaaaaaabb00000800090000190000964e9aa30928e492331012da822da6d1768a7ea06e6fd5590a0fb66572694682a21d93e100c073ee91599f2a3a29cbae9f1735abc4aad45092600e4d11e4a4271c092e893f05213acc8ca0481288049674928697372ee3e5c18db364d94502"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) r6 = socket$inet(0xa, 0x801, 0x84) socket(0x10, 0x802, 0x0) connect$inet(r6, &(0x7f0000000740)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) accept4(r6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000780)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r5}, &(0x7f0000000980), &(0x7f00000009c0)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000a00)={'syz_tun\x00'}) 8.645403302s ago: executing program 6 (id=3607): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 8.046870579s ago: executing program 7 (id=3608): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x1a, &(0x7f0000000180)="e9", 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000000c0)={0x2, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x400}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r3) 7.534576799s ago: executing program 1 (id=3610): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f00000002c0)={0x1100, 0x204, 0x52, 0x10000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085550c00000000000000d70000000000180000000900000000000000060000000da7feff0000000095000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a}, 0x94) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000180)=""/155, 0x9b, 0x2042, &(0x7f0000000280), 0x20) 7.314415223s ago: executing program 6 (id=3611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x82c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x9, 0x2, 0xf, 0x5, 0x1, 0x10, 0xc, 0x0, 0x9, 0xc, 0xa, 0x0, 0xc, 0xa, 0xe, 0x6], 0x0, [0x200, 0x8, 0x200, 0xf000, 0x2, 0x9, 0x3, 0x4, 0x7ff, 0x6, 0xfffc, 0x49, 0xfff1, 0x9c8, 0x5, 0x4], [0x4, 0xb1f4, 0x0, 0x1000, 0x7, 0x3, 0x1, 0x6, 0x0, 0x40, 0x5, 0x2, 0x9, 0x3, 0xa, 0x81]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'syz_tun\x00', 0x0}) (async) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000034dc0000000000000040034000dc"}}}]}, 0x48}}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r7, r8, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x10000, 0x1}}, 0x20) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xc0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x11}, 0x40000) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, 0x2d, 0x107, 0xfffffffe, 0x1, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c855}, 0x0) 6.636285644s ago: executing program 7 (id=3612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09b47588c60001550901000000000095000000000020646c2500000000ff0f00007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000851000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000180000000d00000000000000020000007231561e04000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0xfffffff1, 0x2d, &(0x7f0000000400)=""/45, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x8, 0xc856, 0x40}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, r1, 0x1, 0x1, 0x1], &(0x7f00000004c0)=[{0x0, 0x5, 0x7}, {0x1, 0x1, 0x8, 0xc}, {0x3, 0x5, 0xe, 0xb}, {0x1, 0x4, 0xf, 0x5}, {0x1, 0x1, 0x7, 0x8}, {0x5, 0x3, 0x0, 0x6}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x3, 0x2, 0xa}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000006a"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 6.502271099s ago: executing program 1 (id=3613): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIOCLEX(r0, 0x5451) (async) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000180)={'HL\x00'}, &(0x7f00000001c0)=0x1e) (async) setsockopt$inet_sctp_SCTP_REUSE_PORT(r1, 0x84, 0x24, &(0x7f0000000080)=0x8, 0x4) (async) listen(r1, 0x3) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000002d0007012abd7000ffdbdf250a7c000008000180040006000c00028008000200", @ANYRES32=r2, @ANYBLOB='\f\x00\t'], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) listen(r1, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f00000000c0)=0xfffffffc, 0x4) (async) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000000)={r0, 0x0, 0x0, 0x401, 0x7, 0x4, [0x3, 0xffffffff, 0xffffffffffffffff, 0xb, 0x1, 0x3ff]}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)=ANY=[@ANYBLOB="180000002f00090028bd70000000170004000000040018"], 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10) 6.484330466s ago: executing program 4 (id=3614): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f00000001c0)=0x7, 0x4) listen(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f00000003c0)='syzkaller\x00'}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES64=r0, @ANYBLOB="48000000100005ff00000000000000000000004a", @ANYBLOB="71bb565a5e063fc1ad76d74083f3921602b185526c71a77ce59a1ca9503a37df8262ef0d7323df456628a79ea307192891d4b192d5bbb80259139d39932a76fa8284c2a39658df29cf53938015c0be546853776330388266034c248afa72dd5746d28321dff01c7ae16c1ac11102fcd0510cb2b78fd0b8fce2e98039742f0d4841385d0f98845ca5f140cb24ca1bab792b6a261b089455ae0d2c0da46e1e568fb81d0e65e2b4dabb7194870e8bf347e4aa8fb2cf8bcc8ca451d27b16c30d11b8e657fc93bd07813890a6ddbc77af81c0da46de972d7408cc44cc7cfc60f9c88fd9707d00bd88d904aa96c45f818ba675"], 0x48}}, 0x0) 5.663699314s ago: executing program 2 (id=3615): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x57bdf95b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0xc4000) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r4], 0x34}}, 0x4008000) 5.659707973s ago: executing program 7 (id=3616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23}, [@IFA_LOCAL={0x6, 0x2, @remote}]}, 0x2c}}, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000000), 0x24) (async, rerun: 64) close(r4) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000340)=""/76, &(0x7f00000003c0)=0x4c) (async) r6 = socket(0x2, 0xa, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x10, 0x2}, 0x10) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001300)={0xfffffffffffffffd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "8ebeba709853cc"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000002300)={{r7, 0x3, 0x5, 0x7ff, 0x1, 0xa, 0x6, 0xa, 0x9, 0x4, 0x8, 0x10001, 0x7, 0xfffffffffffffffc, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@gettfilter={0x44, 0x2e, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x5, 0xc}, {0xe, 0xfff1}, {0xfff8, 0x2}}, [{0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xffffff01}, {0x8, 0xb, 0x31a7}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) 5.51154907s ago: executing program 4 (id=3617): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x20) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="04", 0x1}], 0x1}}], 0x1, 0x4000040) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYRESDEC, @ANYBLOB="600f46951ca1cc21cce192e58449faad02f6d0827ad0ffd924d88f01c34d08ed100921d1b87073b8898425225330d6fd96b2c856b16922ebce67166ad822e388e58832d695ce2cabe5ca3c84b3407a9657f47c4ba6ed222997baf3e43b1584a7056ecbae30e9cd3f6391a885eb896dec1b8a93c50777"], 0x28}, 0x4004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x6, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000)="f461830000000000", 0x8, 0x4084, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) 5.444614138s ago: executing program 6 (id=3618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x61800, 0x30, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000d00)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000e80)={0x1, @in={{0x2, 0x4e24, @empty}}, 0x8, 0x2, 0x2, 0xa420, 0x84, 0x1, 0xe6}, 0x0) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="28dd4f75140001004a0800030004ac0f00"/40], 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4c001) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x0, 0x700001b, 0x148, 0xe0, 0x148, 0x218, 0x206, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc0, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x16}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0xa, 0x3, 0x3, 0x2, 0x5, 0x1], 0x3, 0x4}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0x2, 0x8, [0x29, 0x11, 0x15, 0x22, 0x2a, 0x24, 0x3c, 0x18, 0x1b, 0x2d, 0x21, 0x25, 0x22, 0x25, 0x6, 0x2f], 0x2, 0x0, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r2) (async) r8 = socket(0x1e, 0x4, 0xfffffffc) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000340)=@req={0x3fc, 0xfffffffc}, 0x10) socket$unix(0x1, 0x5, 0x0) r9 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0x24024804}, 0x0) (async, rerun: 64) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000380)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) 5.082311628s ago: executing program 1 (id=3619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000600)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000640), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x160, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x130, 0x12, 0x0, 0x1, [{0x12c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x11c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x110, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x109, 0x1, "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"}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f00000004c0), &(0x7f0000000500)=r6}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) write(r7, &(0x7f0000000900)="44000000410001000300000000010000030100002a0000002c0001001000040000030000000000000000000006000c000800000010000700010101010202020206eb4000", 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)=r6}, 0x20) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r9) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_SE_IO(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_SE_APDU={0x6, 0x19, "30a3"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20408200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r8, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040012}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000010f6dbdf2544000060854b23dd679c0008000300", @ANYRES32=r14, @ANYBLOB="0a001800030303030303000004000801"], 0x2c}}, 0x0) 3.453633996s ago: executing program 2 (id=3620): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.904105763s ago: executing program 4 (id=3621): pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r1, 0x112, 0x4, 0x0, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 2.728689889s ago: executing program 7 (id=3622): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, r1, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2.694332652s ago: executing program 1 (id=3623): unshare(0x20000400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1000) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000540)=""/222, &(0x7f0000000640)=0x61637876) r2 = socket$can_j1939(0x1d, 0x2, 0x7) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @remote, {[@dstopts={0x0, 0x1, '\x00', [@calipso={0x7, 0x0, {0x1, 0x0, 0x7, 0x5e4, [0x9, 0x6, 0xad1000]}}, @padn={0x1, 0x2}, @padn={0x1, 0x5a}]}]}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newneigh={0x50, 0x1c, 0x200, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x36, 0x10, 0x5}, [@NDA_DST_IPV6={0x14, 0x1, @private0}, @NDA_DST_MAC={0xa, 0x1, @multicast}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100)={0x0, 0xffffffffffffffff}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x63, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e23, 0x7ff, @mcast2, 0x6}, @in6={0xa, 0x4e24, 0x1002, @loopback, 0x3}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x5d7}, @in6={0xa, 0x4e20, 0x38b3, @private0={0xfc, 0x0, '\x00', 0x1}}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x3e, @local, 0xffffffff}], 0xf0) connect$can_j1939(r2, 0x0, 0x0) connect$netlink(r3, &(0x7f00000004c0)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 2.396504907s ago: executing program 2 (id=3624): r0 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x11d, 0x76, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@initdev}, &(0x7f0000000040)=0x14) 2.386550943s ago: executing program 4 (id=3625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100000085768185d8ed7f914600", @ANYRES32=r3, @ANYBLOB="84110000040000001c0012800b0001006d616373656300000c00028005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 1.894618778s ago: executing program 7 (id=3626): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000002d0000009500000000000000e0f929c63d86ec486ae53c49c19d4327d6787a2ee253881c597aeb3aab9859e8d885610a6fb6f36adbb90a7d5d2da84aab4b92803a7f2bc5d24d6656f1052dd7a5341eb1fd24bc2f26368a624f0661949de6025269770901b12a0255fba38b5261a396acaa5262e00d4535e5f32aeb726e6bf728cbaff13f6ed23f8fade192b170fd42c30ae8d3dc2759573701e7af24238b35c0587eb19d14"], 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'team_slave_0\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r5, 0x25, 0x0, @void}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="94000000d49cae62d59c6105940f5ae3eba4db51a7b3318cade22bd8876874b95fcc9430a862146e9b1bbfd089b5b2be38fc38c51d5c597a737b7ae86b10aa382ce61119a9d7ce5f045c0a149517bf47a170", @ANYRES16=r2, @ANYBLOB="0500feffffffbcdbde252100000008000300", @ANYRES32, @ANYBLOB="44007d803c00020098efe5fd5d7c5c582f71c2b4406d31cf2e28686bfe4592fb2098daf4c7e77ec7b0c4695d6e4291ca6a96e7e4559fad06ec251746974db2360400010034002d800a0000000202020202020000040000000a00000001010101010100000a0000000202020202020000070000000aea8f00"], 0x94}, 0x1, 0x0, 0x0, 0x2c008051}, 0x0) 1.480646403s ago: executing program 2 (id=3627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2400000001, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000000140)=""/144, &(0x7f0000000240)=0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, r8, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delneigh={0x48, 0x1d, 0x800, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x0, r4, 0x8, 0x41, 0x3}, [@NDA_IFINDEX={0x8, 0x8, r9}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}}, @NDA_VNI={0x8, 0x7, 0xffffffff}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xae}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff001401010010"], 0x0) 852.111247ms ago: executing program 1 (id=3628): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000000300)=""/171, &(0x7f00000003c0)=0xab) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000002040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES64=r4], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000020c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="30005080110001004abee33908f8eef16f160271f40000000500020009"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000002240)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000002400)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000023c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x44}, 0x4000001) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x9, 0x9, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000b00)={0x0, "3effdbbaed42931a79ce565b97129015"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001b00)={0x12, 0x2, {0x8, @usage=0x7, r9, 0x3, 0x9, 0x4, 0xa2380000000000, 0x3, 0x0, @usage=0x5, 0x40000000, 0x7fffffff, [0x6, 0x3, 0x0, 0x2, 0x7, 0x8]}, {0x9, @usage=0x9, r10, 0x1, 0x40, 0x2, 0xd1b2, 0x48, 0x248, @usage=0x7, 0x4, 0x6, [0x0, 0xb, 0x5, 0x0, 0xfffffffffffffffe, 0x5]}, {0x2, @usage=0x7, 0x0, 0x7, 0x4, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x490, @struct={0xc, 0x7}, 0x3, 0x0, [0x7fff, 0x7, 0x3, 0xfffffffffffffff8, 0x9, 0x9]}, {0x9e, 0x8077, 0x5}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@empty, @multicast2}, &(0x7f00000001c0)=0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xd, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000811) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000001f00)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r11, 0x2, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r12 = socket(0x40000000015, 0x5, 0x0) bind$inet(r12, &(0x7f0000002440)={0x2, 0x0, @loopback}, 0x10) sendmsg(r12, &(0x7f0000002480)={&(0x7f00000024c0)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000002540)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0) 851.740041ms ago: executing program 4 (id=3629): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r3, 0xff}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x10, 0x37, "17380cce341337d5f5659fddb0dc46942bd3ce0fc0974721ff063179ac09a3151912ee342655501e69aebcdb3db06db8a7ffef420ff7b8"}, 0x3f) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 496.34706ms ago: executing program 7 (id=3630): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c4d03e92d2c00000008d2414661930029a61693a68227c7bac961baa03e85cbe903948a71dec29b422bfe64a2bee3d930678941c3ad0145a7d4af3ee5bfc0b704d9d814b3379fa0a571ca36d58e102c611be915200b761d1c209bde91a27f31afa15585b2b7186463d0a8650b05f5", @ANYRES16=r2, @ANYRESDEC=r0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 449.325161ms ago: executing program 6 (id=3631): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0xa, "daca2b1b9295b544c71d"}, &(0x7f0000000380)=0x12) setsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f00000003c0)={r2, 0xc}, 0x8) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1a}, 0x94) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) sendmsg$netlink(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3f01"], 0xdd12}], 0x1}, 0x200400d1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 0s ago: executing program 4 (id=3632): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a40)=@delqdisc={0x5c, 0x25, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff2, 0x1}, {0xe, 0x6}, {0xa, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xc, 0xde}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @qdisc_kind_options=@q_fq={{}, {0x0, 0x2, [@TCA_FQ_QUANTUM, @TCA_FQ_RATE_ENABLE, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x7}, @TCA_FQ_INITIAL_QUANTUM={0x0, 0x4, 0x7}, @TCA_FQ_BUCKETS_LOG={0x0, 0x8, 0xe}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000880)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$tun(r8, &(0x7f0000000c00)={@val={0x0, 0x890d}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x1, 0x2a, 0x40, 0x65, 0x0, 0x7, 0x6, 0x0, @private=0xa010100, @loopback}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x1, 0xb, 0x1, 0x2, 0x9000, 0x0, 0x0, 0x4, 0x4, 0x1, 0x6, 0xf5, 0x2, 0x4e23, 0x4e21}, 0x1}}, 0x2}}}}}}}}, 0x56) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) kernel console output (not intermixed with test programs): failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 333.373757][T15623] xt_CONNSECMARK: invalid mode: 0 [ 333.447867][T15544] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.494072][T15629] __nla_validate_parse: 24 callbacks suppressed [ 333.494095][T15629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2590'. [ 333.542638][T15620] nbd: must specify a size in bytes for the device [ 333.547559][T15544] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.688178][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.919082][T12731] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.930541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.408387][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.408608][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.557618][ T167] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.559057][ T167] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.559122][ T167] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.599984][T15529] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.600096][T15529] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.600225][T15529] bridge_slave_0: entered allmulticast mode [ 334.606887][T15529] bridge_slave_0: entered promiscuous mode [ 334.645973][T15529] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.646095][T15529] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.646273][T15529] bridge_slave_1: entered allmulticast mode [ 334.654715][T15529] bridge_slave_1: entered promiscuous mode [ 334.687494][T15668] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 334.713666][T15678] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2599'. [ 334.727337][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.800123][T15529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.804338][T15529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.834851][T15682] validate_nla: 26 callbacks suppressed [ 334.834873][T15682] netlink: 'syz.4.2601': attribute type 2 has an invalid length. [ 334.908737][T15529] team0: Port device team_slave_0 added [ 334.919492][T15529] team0: Port device team_slave_1 added [ 334.935103][T15681] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 334.966596][T15685] netlink: 'syz.1.2604': attribute type 1 has an invalid length. [ 334.967268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.088620][T15529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.088641][T15529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.088669][T15529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.150877][T15686] veth9: entered allmulticast mode [ 335.155035][T15686] bond13: (slave veth9): Enslaving as an active interface with a down link [ 335.155765][T15529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.155779][T15529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.155807][T15529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.207885][ T5618] Bluetooth: hci5: command tx timeout [ 335.267390][T15685] bond13: (slave veth0_to_bond): making interface the new active one [ 335.268415][T15685] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 335.443646][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2608'. [ 335.477877][T15529] hsr_slave_0: entered promiscuous mode [ 335.482521][T15529] hsr_slave_1: entered promiscuous mode [ 335.856331][T15732] netlink: 'syz.1.2613': attribute type 2 has an invalid length. [ 336.581425][T15529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 336.608405][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.609498][T15529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 336.614694][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.618598][T15529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 336.660747][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.662186][T15529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 336.692950][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.808739][ T9733] net_ratelimit: 2 callbacks suppressed [ 336.808760][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.845565][T15529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.884804][T15529] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.901868][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.901979][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.931662][ T9350] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.931771][ T9350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.973736][T15787] netlink: 'syz.0.2627': attribute type 1 has an invalid length. [ 337.057104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.178129][T15805] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 337.287554][ T5618] Bluetooth: hci5: command tx timeout [ 337.661836][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2636'. [ 337.662167][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2636'. [ 337.751872][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2637'. [ 337.756931][T15836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.813265][T15834] v: renamed from veth0_vlan [ 337.857532][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.087376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.226138][T15848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2640'. [ 338.301903][T15854] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2642'. [ 338.395404][T15529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.889391][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.102966][T15899] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2647'. [ 339.346106][T15908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2649'. [ 339.454185][ T5278] v: left promiscuous mode [ 339.505275][ T9733] v: entered promiscuous mode [ 339.528838][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.734373][T15529] veth0_vlan: entered promiscuous mode [ 339.780609][T15529] veth1_vlan: entered promiscuous mode [ 339.928643][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.976915][T15529] veth0_macvtap: entered promiscuous mode [ 340.203661][T15529] veth1_macvtap: entered promiscuous mode [ 340.242855][T15529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.276469][T15529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.335091][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.353276][T15941] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2659'. [ 340.364734][T15941] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2659'. [ 340.411217][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.411276][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.452561][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.567260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.753804][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2664'. [ 340.967474][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.017479][ T9741] net_ratelimit: 3 callbacks suppressed [ 342.017504][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.088821][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.088968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.647363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.974418][T15939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.049143][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.091397][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.091423][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.299299][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.299324][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.322364][T15988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2665'. [ 343.545335][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2573'. [ 343.682255][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2573'. [ 343.687266][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.087664][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.259547][T16050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2675'. [ 344.259614][T16050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2675'. [ 344.360504][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 344.727231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.130856][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.767789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.448295][T16106] Bluetooth: hci0: unsupported parameter 5135 [ 346.448320][T16106] Bluetooth: hci0: unsupported parameter 8192 [ 346.448356][T16106] Bluetooth: hci0: unsupported parameter 5135 [ 346.448371][T16106] Bluetooth: hci0: unsupported parameter 8192 [ 347.210273][ T9741] net_ratelimit: 2 callbacks suppressed [ 347.210296][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.596917][T16137] sctp: [Deprecated]: syz.2.2693 (pid 16137) Use of int in max_burst socket option. [ 347.596917][T16137] Use struct sctp_assoc_value instead [ 347.725539][ T31] audit: type=1107 audit(1792462669.766:7): pid=16142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 347.850035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.853424][T11430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.920618][T16153] syzkaller1: entered promiscuous mode [ 347.920646][T16153] syzkaller1: entered allmulticast mode [ 348.062579][T16163] nbd: must specify at least one socket [ 348.095194][T16164] nbd: must specify at least one socket [ 348.164055][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2703'. [ 348.164283][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2703'. [ 348.273360][T16181] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2706'. [ 348.314863][T16181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2706'. [ 348.488710][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.488909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.692756][T16208] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 348.693338][T16208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.693697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.694512][T16208] netlink: 'syz.1.2711': attribute type 29 has an invalid length. [ 348.694534][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2711'. [ 348.694887][T16208] netlink: 'syz.1.2711': attribute type 29 has an invalid length. [ 348.694905][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2711'. [ 348.695837][T16208] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 348.887538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.948445][T16224] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2714'. [ 349.049136][ T5618] Bluetooth: hci3: connection err: -111 [ 349.052821][ T5618] Bluetooth: hci3: connection err: -111 [ 349.269661][T16240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2720'. [ 349.275263][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 349.435712][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2723'. [ 349.436460][T16249] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2723'. [ 349.467084][T16251] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 349.524258][T16251] bond14: (slave geneve5): making interface the new active one [ 349.525496][T16251] bond14: (slave geneve5): Enslaving as an active interface with an up link [ 349.550193][T16251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2724'. [ 349.553462][T16251] 8021q: adding VLAN 0 to HW filter on device bond14 [ 349.567624][ T9356] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 349.572920][ T9359] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 349.573033][ T9359] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 349.573128][ T9359] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 351.802706][T16217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.034957][T16293] IPVS: set_ctl: invalid protocol: 7 255.255.255.255:20004 [ 352.132865][T16298] can: request_module (can-proto-0) failed. [ 352.173316][T16301] xt_TPROXY: Can be used only with -p tcp or -p udp [ 352.386349][T16309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2733'. [ 352.404693][T16309] netlink: 'syz.5.2733': attribute type 6 has an invalid length. [ 352.405063][T16309] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2733'. [ 352.480633][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2736'. [ 352.564063][T16319] netlink: 'syz.0.2737': attribute type 29 has an invalid length. [ 352.564088][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 352.566808][T16319] netlink: 'syz.0.2737': attribute type 29 has an invalid length. [ 352.566831][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 352.853804][T16334] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 352.967294][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 353.047162][ C0] net_ratelimit: 7 callbacks suppressed [ 353.047185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.048928][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.156630][T16350] netlink: 'syz.0.2747': attribute type 58 has an invalid length. [ 353.212870][T16346] batman_adv: batadv0: Adding interface: syz_tun [ 353.212892][T16346] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.212954][T16346] batman_adv: batadv0: Interface activated: syz_tun [ 353.494762][T16362] lo: entered promiscuous mode [ 353.503972][T16362] lo: left promiscuous mode [ 353.697718][T16375] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 353.731839][T16375] tipc: Started in network mode [ 353.731875][T16375] tipc: Node identity ac141441, cluster identity 4711 [ 353.736624][T16375] tipc: Enabled bearer , priority 10 [ 354.087172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.087289][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.122423][T16382] netlink: 'syz.5.2755': attribute type 2 has an invalid length. [ 354.142954][T16382] netlink: 'syz.5.2755': attribute type 2 has an invalid length. [ 354.279858][T16345] __nla_validate_parse: 6 callbacks suppressed [ 354.279884][T16345] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2744'. [ 354.387817][T16392] ªªªªª»: renamed from dummy0 [ 354.589131][T16403] ipvlan0: entered allmulticast mode [ 354.847211][T11430] tipc: Node number set to 2886997057 [ 354.973557][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2768'. [ 355.128787][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.452720][T16453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.528583][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.528793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.584278][T16455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2775'. [ 356.093229][T16476] netlink: 'syz.4.2780': attribute type 3 has an invalid length. [ 356.169887][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.170332][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.170551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.541830][T16482] bond14: entered allmulticast mode [ 356.542255][T16482] 8021q: adding VLAN 0 to HW filter on device bond14 [ 357.142444][ T4934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.145822][ T4934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.163363][ T4934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.165159][ T4934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.184133][ T4934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.649475][T16537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2793'. [ 357.745072][T16537] syzkaller0: entered promiscuous mode [ 357.745098][T16537] syzkaller0: entered allmulticast mode [ 357.791536][ T5629] batman_adv: batadv0: Interface deactivated: syz_tun [ 357.848439][ T5629] batman_adv: batadv0: Removing interface: syz_tun [ 357.871976][T16541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2794'. [ 358.005242][T16536] smbdirect: ib_dev[syz0] removed [ 358.171850][ T9356] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.171890][ T9356] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.238199][T16513] rxe_eth0 speed is unknown, defaulting to 1000 [ 358.247269][ C1] net_ratelimit: 5 callbacks suppressed [ 358.247290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.249387][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.425913][ T9356] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.430051][ T9356] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.486841][T16558] sctp: [Deprecated]: syz.5.2800 (pid 16558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.486841][T16558] Use struct sctp_sack_info instead [ 358.526551][T16557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2799'. [ 358.641925][T16562] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2802'. [ 358.715767][ T9356] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.715811][ T9356] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.769822][T16564] batman_adv: batadv0: Adding interface: syzkaller0 [ 358.769841][T16564] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.769875][T16564] batman_adv: batadv0: Interface activated: syzkaller0 [ 358.890639][ T9356] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.890676][ T9356] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.998962][T16560] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 359.046638][T16560] batman_adv: batadv0: Removing interface: syzkaller0 [ 359.188764][T16578] netlink: 'syz.1.2807': attribute type 15 has an invalid length. [ 359.188795][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 359.241037][T16578] netlink: 'syz.1.2807': attribute type 15 has an invalid length. [ 359.241061][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 359.272807][T12731] netdevsim netdevsim1 netdevsim3: set [0, 2] type 1 family 0 port 2816 - 0 [ 359.288104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.289646][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.289959][ T5618] Bluetooth: hci6: command tx timeout [ 359.332822][T16580] can: request_module (can-proto-5) failed. [ 359.519378][ T12] netdevsim netdevsim1 netdevsim2: set [0, 2] type 1 family 0 port 2816 - 0 [ 359.519526][ T12] netdevsim netdevsim1 netdevsim0: set [0, 2] type 1 family 0 port 2816 - 0 [ 359.519567][ T12] netdevsim netdevsim1 netdevsim1: set [0, 2] type 1 family 0 port 2816 - 0 [ 359.902968][ T9356] ipvlan0: left allmulticast mode [ 360.007277][ C1] bridge0: port 1(macvlan1) entered forwarding state [ 360.007303][ C1] bridge0: topology change detected, propagating [ 360.327168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.337770][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.441255][ T9356] bond1 (unregistering): (slave gretap0): Releasing active interface [ 360.471802][ T9356] bond8 (unregistering): (slave gretap1): Releasing backup interface [ 360.612972][ T9356] bond3 (unregistering): (slave bridge7): Releasing backup interface [ 360.613002][ T9356] bridge7 (unregistering): left promiscuous mode [ 360.633341][ T9356] bond12 (unregistering): (slave bridge8): Releasing backup interface [ 360.633371][ T9356] bridge8 (unregistering): left promiscuous mode [ 360.679637][ T9356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.680749][ T9356] bond_slave_0: left allmulticast mode [ 360.684035][ T9356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.684561][ T9356] bond_slave_1: left allmulticast mode [ 360.685940][ T9356] bond0 (unregistering): Released all slaves [ 360.731222][ T9356] bond1 (unregistering): Released all slaves [ 360.746161][ T9356] bond2 (unregistering): Released all slaves [ 360.762463][ T9356] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 360.764204][ T9356] bond4 (unregistering): Released all slaves [ 360.799419][ T9356] bond5 (unregistering): Released all slaves [ 360.820543][ T9356] bond6 (unregistering): Released all slaves [ 360.836922][ T9356] bond7 (unregistering): Released all slaves [ 360.863407][ T9356] bond8 (unregistering): (slave bond9): Releasing backup interface [ 360.864096][ T9356] bond8 (unregistering): Released all slaves [ 360.884984][ T9356] bond9 (unregistering): Released all slaves [ 360.900657][ T9356] bond10 (unregistering): Released all slaves [ 360.916637][ T9356] bond11 (unregistering): Released all slaves [ 360.931848][ T9356] bond3 (unregistering): Released all slaves [ 360.965371][ T9356] bond12 (unregistering): Released all slaves [ 360.983106][ T9356] bond13 (unregistering): (slave veth3): Releasing active interface [ 360.984840][ T9356] bond13 (unregistering): Released all slaves [ 361.009126][ T9356] bond14 (unregistering): Released all slaves [ 361.032960][T16608] pim6reg: entered allmulticast mode [ 361.066658][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 361.373337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.374936][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.375177][ T5618] Bluetooth: hci6: command tx timeout [ 361.385437][T16635] bond0: entered promiscuous mode [ 361.385458][T16635] bond_slave_0: entered promiscuous mode [ 361.385997][T16635] bond_slave_1: entered promiscuous mode [ 361.428823][T16635] batadv0: entered promiscuous mode [ 361.432123][T16635] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 361.456058][T16635] bond0: left promiscuous mode [ 361.456083][T16635] bond_slave_0: left promiscuous mode [ 361.456324][T16635] bond_slave_1: left promiscuous mode [ 361.465766][T16635] batadv0: left promiscuous mode [ 361.524063][T16513] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.524262][T16513] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.524514][T16513] bridge_slave_0: entered allmulticast mode [ 361.526778][T16513] bridge_slave_0: entered promiscuous mode [ 361.580746][ T9356] tipc: Disabling bearer [ 361.581154][ T9356] tipc: Left network mode [ 361.582999][T16513] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.583085][T16513] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.583264][T16513] bridge_slave_1: entered allmulticast mode [ 361.585858][T16513] bridge_slave_1: entered promiscuous mode [ 361.701023][T16513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.705888][T16513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.793257][T16513] team0: Port device team_slave_0 added [ 361.796518][T16513] team0: Port device team_slave_1 added [ 361.905805][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.905991][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.906215][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.906408][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.906572][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.906733][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.964768][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.964873][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.964972][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.965062][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.965149][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.965238][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.965323][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.965410][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.965498][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.965585][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.965673][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.965760][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.965896][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.965972][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966048][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966118][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966187][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966267][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966349][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966437][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966523][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966610][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966694][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966780][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966864][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.966954][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.989021][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.989115][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.989199][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.989282][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.989362][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.989463][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.989619][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.989752][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.989846][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.989941][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.990024][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.990109][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.990192][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 361.990283][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.005927][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.006147][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.006384][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.006602][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.006832][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.019173][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.019447][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.019667][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.019888][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.020099][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.020342][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.020449][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.020670][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.020891][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.021106][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.021316][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.021531][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.103182][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.103480][ T5618] Bluetooth: hci5: Unexpected cc 0x2753 with no status [ 362.410045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.418051][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.494954][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2820'. [ 362.496568][T16513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.496584][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.496613][T16513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.592804][T16513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.592825][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.592852][T16513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.825646][T16661] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 363.125801][T16513] hsr_slave_0: entered promiscuous mode [ 363.128284][T16513] hsr_slave_1: entered promiscuous mode [ 363.130750][T16513] debugfs: 'hsr0' already exists in 'hsr' [ 363.130830][T16513] Cannot create hsr debugfs directory [ 363.447133][ C1] net_ratelimit: 2 callbacks suppressed [ 363.447155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.447758][ T5618] Bluetooth: hci6: command tx timeout [ 363.448018][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.565165][T16702] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2828'. [ 363.570816][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 363.682219][T16702] bond0 (unregistering): Released all slaves [ 363.891602][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2833'. [ 364.033360][ T9356] team0: Port device wlan0 removed [ 364.467956][T16743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2838'. [ 364.498301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.499315][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.562582][T16732] syzkaller0: entered promiscuous mode [ 364.562609][T16732] syzkaller0: entered allmulticast mode [ 364.630917][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2839'. [ 365.261328][T16774] sctp: [Deprecated]: syz.4.2843 (pid 16774) Use of int in maxseg socket option. [ 365.261328][T16774] Use struct sctp_assoc_value instead [ 365.527780][ T5618] Bluetooth: hci6: command tx timeout [ 365.531777][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.772698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.583273][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.810935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.290770][ T9356] hsr_slave_0: left promiscuous mode [ 367.291844][ T9356] hsr_slave_1: left promiscuous mode [ 367.292828][ T9356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.292866][ T9356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.335697][ T9356] veth1_vlan: left promiscuous mode [ 367.335759][ T9356] v: left promiscuous mode [ 367.618789][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.705807][ T9356] team0 (unregistering): Port device team_slave_1 removed [ 367.725287][ T9356] team0 (unregistering): Port device team_slave_0 removed [ 367.847143][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.897529][T16753] syzkaller0: entered promiscuous mode [ 367.897557][T16753] syzkaller0: entered allmulticast mode [ 368.647298][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.759981][ T9356] IPVS: stop unused estimator thread 0... [ 368.887607][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.078581][T16513] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 369.110224][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.116257][T16513] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 369.152368][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.165359][T16513] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 369.191989][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.195094][T16513] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 369.225575][T16513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.509387][T16513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.562944][T16513] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.588343][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.588486][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.613327][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.613540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.656847][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.656962][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.687979][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.927139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.249366][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.249592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.356465][T16867] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2856'. [ 370.356946][T16872] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2856'. [ 370.728709][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.763161][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.777888][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.779922][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.781157][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.781789][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.856913][T16883] bridge_slave_0: left allmulticast mode [ 370.856943][T16883] bridge_slave_0: left promiscuous mode [ 370.879134][T16883] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.919390][T16883] bridge_slave_1: left allmulticast mode [ 370.919420][T16883] bridge_slave_1: left promiscuous mode [ 370.919640][T16883] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.962385][T16883] bond0: (slave bond_slave_0): Releasing backup interface [ 370.967191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.048317][T16883] bond0: (slave bond_slave_1): Releasing backup interface [ 371.110415][T16883] team0: Port device team_slave_0 removed [ 371.138410][T16883] team0: Port device team_slave_1 removed [ 371.139413][T16883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.139445][T16883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.161046][T16883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.161073][T16883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.256849][T16895] syzkaller0: entered promiscuous mode [ 371.256874][T16895] syzkaller0: entered allmulticast mode [ 371.303140][T16895] x_tables: duplicate underflow at hook 1 [ 371.459235][T16513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.554966][T16513] veth0_vlan: entered promiscuous mode [ 371.633210][T16513] veth1_vlan: entered promiscuous mode [ 371.700065][T16513] veth0_macvtap: entered promiscuous mode [ 371.717975][T16513] veth1_macvtap: entered promiscuous mode [ 371.766863][T16513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.824243][T16513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.899954][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2865'. [ 371.938306][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.938865][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.939267][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.939443][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.186945][T16937] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2868'. [ 372.271428][T16938] netlink: 'syz.4.2866': attribute type 21 has an invalid length. [ 372.421978][T16938] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2866'. [ 372.563324][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.563349][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.600536][T16890] rxe_eth0 speed is unknown, defaulting to 1000 [ 372.789150][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.789183][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.855290][T16963] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 372.887925][ T5618] Bluetooth: hci4: command tx timeout [ 373.287822][ T1071] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 373.287868][ T1071] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 373.435168][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2875'. [ 373.435191][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2875'. [ 373.500290][ T1071] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 373.523807][T16986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.847320][ C0] net_ratelimit: 4 callbacks suppressed [ 373.847343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.849609][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.039693][T17014] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2879'. [ 374.074657][T17017] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 374.139419][T17021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'. [ 374.223480][T17021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'. [ 374.563184][T16890] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.563351][T16890] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.563511][T16890] bridge_slave_0: entered allmulticast mode [ 374.595628][T16890] bridge_slave_0: entered promiscuous mode [ 374.610985][T16890] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.613951][T16890] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.614121][T16890] bridge_slave_1: entered allmulticast mode [ 374.625723][T16890] bridge_slave_1: entered promiscuous mode [ 374.714401][T16890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.762915][T16890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.887168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.887603][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.967572][ T5618] Bluetooth: hci4: command tx timeout [ 374.974348][T16890] team0: Port device team_slave_0 added [ 375.004494][T16890] team0: Port device team_slave_1 added [ 375.136796][T16890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.136816][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.136844][T16890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.143861][T16890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.143881][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.143910][T16890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.432282][T16890] hsr_slave_0: entered promiscuous mode [ 375.443577][T16890] hsr_slave_1: entered promiscuous mode [ 375.449787][T16890] debugfs: 'hsr0' already exists in 'hsr' [ 375.449810][T16890] Cannot create hsr debugfs directory [ 375.834987][T17089] netlink: 'syz.4.2896': attribute type 2 has an invalid length. [ 375.927404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.932356][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.011073][T17095] netlink: 'syz.1.2897': attribute type 10 has an invalid length. [ 376.040674][T17098] __nla_validate_parse: 2 callbacks suppressed [ 376.040699][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2898'. [ 376.097266][T17095] team0: Port device dummy0 added [ 376.649574][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.649783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.722498][T17128] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2905'. [ 376.841141][T16890] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 376.859482][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.860366][T16890] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.892697][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.894853][T16890] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 376.929104][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.950639][T16890] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 376.967169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.974061][T16890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.047764][ T5618] Bluetooth: hci4: command tx timeout [ 377.284343][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2909'. [ 377.284373][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2909'. [ 377.284441][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2909'. [ 377.366452][T17157] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 377.422220][T16890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.470934][T16890] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.511130][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.511251][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.551985][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.552141][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.956577][T17185] netlink: 'syz.5.2915': attribute type 1 has an invalid length. [ 377.981030][T17185] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2915'. [ 378.432652][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2921'. [ 378.574372][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.047498][ C0] net_ratelimit: 3 callbacks suppressed [ 379.047523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.049134][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.053457][T17245] dvmrp1: entered allmulticast mode [ 379.099887][T17245] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2924'. [ 379.129941][ T5618] Bluetooth: hci4: command tx timeout [ 379.235816][T17251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 379.362382][T17255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 379.364806][T16890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.383699][T17255] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 379.383772][T17255] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 379.385034][T17255] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2926'. [ 379.630824][T17273] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 379.909278][T17281] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 380.087179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.088682][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.390584][T16890] veth0_vlan: entered promiscuous mode [ 380.430937][T16890] veth1_vlan: entered promiscuous mode [ 380.567938][T16890] veth0_macvtap: entered promiscuous mode [ 380.594116][T16890] veth1_macvtap: entered promiscuous mode [ 380.726198][T16890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.769390][T16890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.791829][T17325] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 380.839654][T17325] SET target dimension over the limit! [ 380.842412][T17325] netlink: Setting conntrack mark requires 'commit' flag. [ 380.842519][T17325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.868270][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.874890][ T167] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.878244][ T9350] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.884638][ T32] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.073840][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.073863][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.127756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.129179][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.191031][T17333] __nla_validate_parse: 2 callbacks suppressed [ 381.191053][T17333] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2939'. [ 381.223074][T17336] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2939'. [ 381.260923][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.260947][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.042410][T17375] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2949'. [ 382.222488][ T4934] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 382.240525][ T4934] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 382.246264][ T4934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 382.287272][ T4934] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 382.289293][ T4934] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 383.161409][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2957'. [ 383.205991][T17424] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 383.217493][T17424] bond5 (unregistering): Released all slaves [ 383.480218][T17439] ip6t_REJECT: ECHOREPLY is not supported [ 383.574952][T17444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2960'. [ 383.869480][T17454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2962'. [ 383.942616][T17446] 8021q: adding VLAN 0 to HW filter on device bond5 [ 383.991052][T17383] rxe_eth0 speed is unknown, defaulting to 1000 [ 384.247269][ C0] net_ratelimit: 8 callbacks suppressed [ 384.247295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.250304][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2966'. [ 384.271974][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.292871][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2966'. [ 384.349718][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.349941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.410097][ T5618] Bluetooth: hci7: command tx timeout [ 384.496727][T17479] netlink: 'syz.2.2969': attribute type 3 has an invalid length. [ 384.496750][T17479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2969'. [ 384.503687][T17482] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 384.558666][T17479] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2969'. [ 384.930519][T17498] netlink: 'syz.5.2974': attribute type 12 has an invalid length. [ 385.162013][T17504] netlink: 'syz.6.2975': attribute type 2 has an invalid length. [ 385.189850][T17504] netlink: 'syz.6.2975': attribute type 2 has an invalid length. [ 385.245372][T17508] x_tables: duplicate underflow at hook 2 [ 385.287465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.288432][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.016316][T17522] Bluetooth: hci0: unsupported parameter 5135 [ 386.016344][T17522] Bluetooth: hci0: unsupported parameter 8192 [ 386.016360][T17522] Bluetooth: hci0: unsupported parameter 5135 [ 386.016375][T17522] Bluetooth: hci0: unsupported parameter 8192 [ 386.211533][T17383] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.211647][T17383] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.234860][T17383] bridge_slave_0: entered allmulticast mode [ 386.273242][T17383] bridge_slave_0: entered promiscuous mode [ 386.294841][T17383] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.302008][T17383] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.302195][T17383] bridge_slave_1: entered allmulticast mode [ 386.331189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.342598][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.344089][T17383] bridge_slave_1: entered promiscuous mode [ 386.430468][T17383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.449162][T17383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.507123][ T5618] Bluetooth: hci7: command tx timeout [ 386.681590][T17383] team0: Port device team_slave_0 added [ 386.720557][T17383] team0: Port device team_slave_1 added [ 386.960266][T17383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.960286][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.960322][T17383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.973103][T17383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.973121][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.973149][T17383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.367187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.593258][T17571] __nla_validate_parse: 7 callbacks suppressed [ 387.593284][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2988'. [ 387.645123][T17383] hsr_slave_0: entered promiscuous mode [ 387.654354][T17383] hsr_slave_1: entered promiscuous mode [ 387.656623][T17383] debugfs: 'hsr0' already exists in 'hsr' [ 387.656646][T17383] Cannot create hsr debugfs directory [ 387.849633][T17575] Cannot find add_set index 0 as target [ 387.874510][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2990'. [ 388.223160][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2992'. [ 388.567501][ T4934] Bluetooth: hci7: command tx timeout [ 388.612562][T17597] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.2994'. [ 388.654299][T17597] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 388.679705][T17597] 0ªX¹¦Dö»: entered allmulticast mode [ 388.681655][T17600] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2994'. [ 389.020756][T17607] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2997'. [ 389.256244][T17383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 389.256285][T17383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 389.256314][T17383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 389.256342][T17383] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.447209][ C0] net_ratelimit: 3 callbacks suppressed [ 389.447233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.608989][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.610856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.622074][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.492623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.548242][T17383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 390.548284][T17383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 390.548314][T17383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 390.548344][T17383] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.647790][ T4934] Bluetooth: hci7: command 0x0419 tx timeout [ 390.652771][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.970041][T17707] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3006'. [ 391.279949][T17383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 391.279994][T17383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 391.280029][T17383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 391.280062][T17383] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.527535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.624129][T17707] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3006'. [ 391.664600][T17707] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3006'. [ 391.688918][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.708188][T17708] syzkaller1: entered promiscuous mode [ 391.708213][T17708] syzkaller1: entered allmulticast mode [ 391.733231][T17730] mac80211_hwsim hwsim11 syzkaller1: entered promiscuous mode [ 391.733457][T17730] mac80211_hwsim hwsim11 syzkaller1: entered allmulticast mode [ 392.188211][T17383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 392.188253][T17383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 392.188282][T17383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 2816 - 0 [ 392.188311][T17383] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.567104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.727211][ T4934] Bluetooth: hci7: command 0x0419 tx timeout [ 392.751752][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.760302][T17742] bond2 (unregistering): Released all slaves [ 393.649194][T17754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.728182][ T60] net_ratelimit: 3 callbacks suppressed [ 394.728206][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.728406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.828612][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.915063][T17383] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 395.053090][T17383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.224597][ T167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.256402][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3018'. [ 395.306756][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3018'. [ 395.385906][T17798] sctp: [Deprecated]: syz.6.3018 (pid 17798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.385906][T17798] Use struct sctp_sack_info instead [ 395.386216][T17383] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 395.432748][T17801] sctp: [Deprecated]: syz.6.3018 (pid 17801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.432748][T17801] Use struct sctp_sack_info instead [ 395.436552][T17383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.464571][T17383] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 395.496554][T17383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.509075][T17793] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 395.625427][T17804] netlink: 'syz.4.3020': attribute type 25 has an invalid length. [ 395.794939][T17383] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 395.874656][T17383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.879185][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.247253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.282563][T17819] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3022'. [ 396.499464][T17383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.660663][T17383] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.722014][T12731] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.722131][T12731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.784015][T12731] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.784165][T12731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.886805][T17845] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 397.071714][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.287283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.905187][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3036'. [ 398.052281][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3037'. [ 398.075811][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3037'. [ 398.098718][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.918176][T17912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3046'. [ 398.918223][T17912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3046'. [ 398.981263][T17912] erspan0: entered promiscuous mode [ 398.991274][T17912] gretap0: entered promiscuous mode [ 399.082446][T17383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.155381][T17917] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 399.206426][T17917] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3047'. [ 399.206501][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3047'. [ 399.481272][T17383] veth0_vlan: entered promiscuous mode [ 399.521320][T17383] veth1_vlan: entered promiscuous mode [ 399.721537][T17383] veth0_macvtap: entered promiscuous mode [ 399.780151][T17383] veth1_macvtap: entered promiscuous mode [ 399.865510][T17383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.953045][T17383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.153668][T17932] bond6 (unregistering): Released all slaves [ 400.176298][ T9734] net_ratelimit: 7 callbacks suppressed [ 400.176351][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.206792][T17936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.368317][ T9359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.368568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.394912][T12731] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.407545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.410665][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.412104][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.421185][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.014945][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.014987][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.108919][T17944] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3054'. [ 401.222949][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.222976][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.233804][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.447498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.679347][T17957] netlink: 195264 bytes leftover after parsing attributes in process `syz.2.3058'. [ 401.679379][T17957] openvswitch: netlink: Message has 512 unknown bytes. [ 401.680658][T17957] netlink: 'syz.2.3058': attribute type 11 has an invalid length. [ 401.912065][T17966] netlink: 'syz.2.3061': attribute type 13 has an invalid length. [ 401.914062][T17966] netlink: 'syz.2.3061': attribute type 13 has an invalid length. [ 402.173329][T17966] netlink: 'syz.2.3061': attribute type 13 has an invalid length. [ 402.174176][T17966] netlink: 'syz.2.3061': attribute type 13 has an invalid length. [ 402.174833][T17966] netlink: 'syz.2.3061': attribute type 13 has an invalid length. [ 402.219230][T17966] netlink: 'syz.2.3061': attribute type 13 has an invalid length. [ 402.224392][T17966] netlink: 'syz.2.3061': attribute type 13 has an invalid length. [ 402.225074][T17966] netlink: 'syz.2.3061': attribute type 13 has an invalid length. [ 402.252871][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.271263][T17966] netlink: 'syz.2.3061': attribute type 13 has an invalid length. [ 402.271987][T17966] netlink: 'syz.2.3061': attribute type 13 has an invalid length. [ 402.487209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.190528][T17986] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 403.192977][T17986] batman_adv: batadv0: Adding interface: gretap0 [ 403.192995][T17986] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.193030][T17986] batman_adv: batadv0: Interface activated: gretap0 [ 403.202420][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3066'. [ 403.288508][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.359481][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 403.365132][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 403.386844][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 403.395448][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 403.396118][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.372535][T18013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3073'. [ 404.372580][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3073'. [ 404.661783][T18016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.666693][T18016] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 405.119506][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3076'. [ 405.368892][ T9734] net_ratelimit: 3 callbacks suppressed [ 405.368914][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.422519][T17989] rxe_eth0 speed is unknown, defaulting to 1000 [ 405.448356][ T4934] Bluetooth: hci2: command tx timeout [ 405.607142][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.782408][T18040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3079'. [ 405.982648][T18042] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3080'. [ 406.097676][ T9350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.097877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.408944][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.647163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.744682][T18055] netlink: Unknown conntrack attr (type=205, max=9) [ 406.756135][T18056] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3083'. [ 406.778142][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3082'. [ 407.092224][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3085'. [ 407.113423][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3084'. [ 407.451596][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.535507][ T4934] Bluetooth: hci2: command tx timeout [ 407.687297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.124126][T18082] syzkaller0: entered promiscuous mode [ 408.124152][T18082] syzkaller0: entered allmulticast mode [ 408.200813][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3087'. [ 408.488349][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.033280][T18108] validate_nla: 41 callbacks suppressed [ 409.033303][T18108] netlink: 'syz.2.3093': attribute type 1 has an invalid length. [ 409.072822][T17989] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.073370][T17989] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.073722][T17989] bridge_slave_0: entered allmulticast mode [ 409.078394][T17989] bridge_slave_0: entered promiscuous mode [ 409.099121][T18098] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3092'. [ 409.133604][T18101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3093'. [ 409.320524][T18108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.323893][T17989] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.324397][T17989] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.324706][T17989] bridge_slave_1: entered allmulticast mode [ 409.333976][T17989] bridge_slave_1: entered promiscuous mode [ 409.572220][T17989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.602369][T17989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.607788][ T4934] Bluetooth: hci2: command tx timeout [ 409.828054][T18117] IPVS: length: 1152 != 8 [ 410.078227][T18122] bond1: (slave bond_slave_0): Device is not our slave [ 410.078256][T18122] bond1: option active_slave: invalid value (bond_slave_0) [ 410.181468][T18122] bond1 (unregistering): Released all slaves [ 410.414517][T18136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3101'. [ 410.572549][ T9733] net_ratelimit: 33 callbacks suppressed [ 410.572572][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.948473][T17989] team0: Port device team_slave_0 added [ 411.125395][T17989] team0: Port device team_slave_1 added [ 411.168313][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.168533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.223126][ T167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.454118][T17989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.454139][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.454168][T17989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.557982][T17989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.558003][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.558034][T17989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.639342][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.687934][ T4934] Bluetooth: hci2: command tx timeout [ 412.007620][T17989] hsr_slave_0: entered promiscuous mode [ 412.011868][T17989] hsr_slave_1: entered promiscuous mode [ 412.036814][T17989] debugfs: 'hsr0' already exists in 'hsr' [ 412.036841][T17989] Cannot create hsr debugfs directory [ 412.092317][T18161] netlink: 'syz.2.3105': attribute type 2 has an invalid length. [ 412.092346][T18161] netlink: 'syz.2.3105': attribute type 2 has an invalid length. [ 412.257083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.500835][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.501094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.748706][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.164335][T18173] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3110'. [ 413.187955][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3111'. [ 413.187981][T18179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3111'. [ 413.193543][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3111'. [ 413.193568][T18177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3111'. [ 413.297068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.697976][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3114'. [ 413.742585][T17989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.742627][T17989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.936228][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3114'. [ 414.040509][T18197] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3116'. [ 414.289866][T17989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.289914][T17989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.478542][ T167] IPVS: starting estimator thread 0... [ 414.567880][T18205] IPVS: using max 24 ests per chain, 57600 per kthread [ 414.782339][T17989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.782381][T17989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.987777][T18212] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3120'. [ 415.320171][T18212] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 415.320889][T18212] team0: Device ipvlan2 is already an upper device of the team interface [ 415.800302][T18223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3125'. [ 415.876583][ T1071] net_ratelimit: 6 callbacks suppressed [ 415.876607][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.078311][T18228] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.192012][T18231] netlink: 'syz.2.3127': attribute type 4 has an invalid length. [ 416.243026][T17989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.304550][T17989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.324236][T17989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.342075][ T9356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.342327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.417068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.578079][T17989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.584887][T17989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.651236][T17989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.654992][T17989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.793345][T17989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.068721][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.617131][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.808108][T17989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.015967][T17989] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.048625][T18269] syzkaller0: entered promiscuous mode [ 418.048835][T18269] syzkaller0: entered allmulticast mode [ 418.098157][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.647104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.006845][ T9359] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.007034][ T9359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.105085][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.105202][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.128830][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.515947][T18309] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 419.687216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.306328][T18322] ksmbd: Unknown IPC event: 1, ignore. [ 420.976595][T18343] netlink: 'syz.6.3152': attribute type 11 has an invalid length. [ 420.976631][T18343] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3152'. [ 421.207879][ T9733] net_ratelimit: 2 callbacks suppressed [ 421.207901][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.409847][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 421.767220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.903553][T17989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.105640][ T9359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.105858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.251955][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.274064][T18378] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 422.275822][T18378] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 422.398651][T18383] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3161'. [ 422.402382][T18383] xt_hashlimit: size too large, truncated to 1048576 [ 422.451455][T18381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3163'. [ 422.530204][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3160'. [ 422.530232][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3160'. [ 422.592101][ T49] IPVS: starting estimator thread 0... [ 422.678316][T18394] IPVS: using max 24 ests per chain, 57600 per kthread [ 422.807374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.287927][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.684513][T17989] veth0_vlan: entered promiscuous mode [ 423.753684][T17989] veth1_vlan: entered promiscuous mode [ 423.847695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.900458][T17989] veth0_macvtap: entered promiscuous mode [ 423.915252][T17989] veth1_macvtap: entered promiscuous mode [ 423.957539][T17989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.027819][T17989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.158270][ T9356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.162296][ T167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.162401][ T167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.162957][ T167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.679438][ T9359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.679463][ T9359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.995787][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.995811][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.411034][T18453] x_tables: duplicate underflow at hook 3 [ 426.290540][T18496] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:21 [ 426.411881][ T1071] net_ratelimit: 6 callbacks suppressed [ 426.411902][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.569668][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.569878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.807819][T18515] netlink: 'syz.2.3197': attribute type 1 has an invalid length. [ 426.881234][T18518] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3197'. [ 426.904908][T18515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.981214][T18525] Bluetooth: MGMT ver 1.23 [ 427.078593][T18524] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 427.218539][T12731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.218762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.401835][T18539] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 427.457832][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.566849][T18545] veth1_macvtap: left promiscuous mode [ 427.856880][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.162270][T18559] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3207'. [ 428.410647][T18567] tipc: Started in network mode [ 428.410700][T18567] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 428.411165][T18567] tipc: Enabled bearer , priority 10 [ 428.501732][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.897066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.062960][T18602] vcan0: tx address claim with dlc 0 [ 429.175930][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3215'. [ 429.418895][T18609] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3220'. [ 429.418921][T18609] netlink: 'syz.1.3220': attribute type 9 has an invalid length. [ 429.419775][T18609] netlink: 'syz.1.3220': attribute type 19 has an invalid length. [ 429.419794][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'. [ 429.494517][T18609] netlink: 'syz.1.3220': attribute type 19 has an invalid length. [ 429.494541][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'. [ 429.528440][ T5717] tipc: Node number set to 10070698 [ 429.537480][ T9359] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.550367][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.563252][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.563308][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.563347][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.719629][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3222'. [ 429.894768][T18626] netlink: 'syz.2.3224': attribute type 9 has an invalid length. [ 430.219865][T18636] netlink: 4284 bytes leftover after parsing attributes in process `syz.6.3227'. [ 430.365552][T18636] netlink: 'syz.6.3227': attribute type 83 has an invalid length. [ 430.418303][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3232'. [ 431.027856][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'. [ 431.053786][T18637] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 431.427013][T18682] vlan0: entered promiscuous mode [ 431.570463][T18685] syzkaller0: entered promiscuous mode [ 431.570491][T18685] syzkaller0: entered allmulticast mode [ 431.613572][ T9734] net_ratelimit: 4 callbacks suppressed [ 431.613596][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.649426][T18693] openvswitch: netlink: Duplicate or invalid key (type 0). [ 431.649467][T18693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.017063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.657728][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.973620][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.973825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.057059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.145362][T18705] __nla_validate_parse: 1 callbacks suppressed [ 433.145385][T18705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3252'. [ 433.145428][T18705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3252'. [ 433.175581][T18705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3252'. [ 433.215723][T18702] ovs-dp0: entered promiscuous mode [ 433.558821][T18699] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3248'. [ 433.696028][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.060111][T18735] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3258'. [ 434.060141][T18735] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3258'. [ 434.097391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.389547][T18747] tipc: Started in network mode [ 434.389582][T18747] tipc: Node identity b2e9120ebd84, cluster identity 4711 [ 434.389827][T18747] tipc: Enabled bearer , priority 10 [ 434.395291][T18746] tipc: Disabling bearer [ 434.515988][T18749] netlink: 'syz.4.3261': attribute type 21 has an invalid length. [ 434.516012][T18749] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.589117][T18757] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3264'. [ 436.833527][ T1071] net_ratelimit: 7 callbacks suppressed [ 436.833549][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.217366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.867647][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.101341][ T9359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.101542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.247068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.377809][T18769] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 438.888670][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.982244][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3276'. [ 439.039720][T18796] netlink: 'syz.2.3276': attribute type 21 has an invalid length. [ 439.048312][T18796] netlink: 'syz.2.3276': attribute type 6 has an invalid length. [ 439.048335][T18796] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3276'. [ 439.233346][ T5717] hid-generic 0005:0008:63AA.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 439.289456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.365383][T18813] fido_id[18813]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 439.509460][T18818] openvswitch: netlink: Actions may not be safe on all matching packets [ 439.515728][T18818] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3281'. [ 439.929821][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.015262][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.149223][T18838] netlink: 'syz.6.3284': attribute type 1 has an invalid length. [ 441.475522][T18880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3298'. [ 441.576894][T18883] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3298'. [ 441.970660][T18894] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20003 [ 442.007518][ T9739] net_ratelimit: 9 callbacks suppressed [ 442.007542][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.157607][T18906] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20003 [ 442.407120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.051770][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.447491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.815141][T18965] netlink: 'syz.1.3317': attribute type 1 has an invalid length. [ 443.866828][ T9350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.867129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.011292][T18965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.094618][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.191577][T18976] netlink: 'syz.4.3320': attribute type 21 has an invalid length. [ 444.191684][T18976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3320'. [ 444.442341][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'. [ 444.497331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.880571][T18989] netlink: 'syz.2.3323': attribute type 5 has an invalid length. [ 445.005904][T18996] sctp: [Deprecated]: syz.1.3325 (pid 18996) Use of int in maxseg socket option. [ 445.005904][T18996] Use struct sctp_assoc_value instead [ 445.134680][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.268976][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3326'. [ 445.269003][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3326'. [ 445.335096][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3326'. [ 445.336871][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3326'. [ 445.421790][T19011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3329'. [ 445.527057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.759665][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3330'. [ 446.064596][T19034] syzkaller0: entered promiscuous mode [ 446.064623][T19034] syzkaller0: entered allmulticast mode [ 446.164790][T19041] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3337'. [ 446.474574][ T5618] Bluetooth: hci4: unexpected event 0x05 length: 3 < 4 [ 446.503823][T19051] bond0: entered promiscuous mode [ 446.503848][T19051] bond_slave_0: entered promiscuous mode [ 446.504073][T19051] bond_slave_1: entered promiscuous mode [ 446.506769][T19051] batadv0: entered promiscuous mode [ 446.537970][T19051] debugfs: 'hsr1' already exists in 'hsr' [ 446.537997][T19051] Cannot create hsr debugfs directory [ 446.541523][T19051] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 446.543512][T19051] bond0: left promiscuous mode [ 446.543535][T19051] bond_slave_0: left promiscuous mode [ 446.543743][T19051] bond_slave_1: left promiscuous mode [ 446.545661][T19051] batadv0: left promiscuous mode [ 446.976473][T19067] netlink: 'syz.4.3343': attribute type 10 has an invalid length. [ 447.008418][T19067] veth1_macvtap: left promiscuous mode [ 447.016301][T19067] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 447.219545][ T9739] net_ratelimit: 4 callbacks suppressed [ 447.219567][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.406673][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'. [ 447.426524][T19081] netlink: 'syz.2.3348': attribute type 29 has an invalid length. [ 447.607078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.249485][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.403659][T19117] ip_tables: iptables: counters copy to user failed while replacing table [ 448.657066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.900846][T19127] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.904014][T19127] bridge_slave_1: left allmulticast mode [ 448.904304][T19127] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.288595][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.311414][T19126] syzkaller0: entered promiscuous mode [ 449.311441][T19126] syzkaller0: entered allmulticast mode [ 449.609035][T12731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.609236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.697381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.745744][T19165] __nla_validate_parse: 1 callbacks suppressed [ 449.745769][T19165] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3366'. [ 449.849535][ T4934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 449.853677][ T4934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 449.855199][ T4934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 449.865291][ T4934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 449.884983][ T4934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 449.939551][T19172] xt_CONNSECMARK: invalid mode: 0 [ 450.338633][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.017735][ T4934] Bluetooth: hci3: command tx timeout [ 452.417264][ T9739] net_ratelimit: 5 callbacks suppressed [ 452.417286][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.817621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.591817][ T9739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.857055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.097799][ T4934] Bluetooth: hci3: command tx timeout [ 454.453099][T19164] veth1_to_bond: entered allmulticast mode [ 454.453549][T19164] veth1_to_bond: left allmulticast mode [ 454.650557][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.737477][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.737663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.897083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.307957][T12731] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.308008][T12731] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.308046][T12731] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.308083][T12731] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.360422][T19249] openvswitch: netlink: Key type 29 is not supported [ 455.681581][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3373'. [ 455.702587][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.168817][ T4934] Bluetooth: hci3: command tx timeout [ 456.223264][T19169] rxe_eth0 speed is unknown, defaulting to 1000 [ 456.344536][T19272] netlink: 'syz.1.3376': attribute type 1 has an invalid length. [ 456.711589][T19272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3376'. [ 456.781525][T19291] IPVS: set_ctl: invalid protocol: 4 172.20.20.14:20001 [ 456.822370][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3379'. [ 456.918132][T19273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.953856][T19273] bond2: (slave bond3): making interface the new active one [ 456.964740][T19273] bond2: (slave bond3): Enslaving as an active interface with an up link [ 457.112395][T19278] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 457.557623][T19314] netlink: 'syz.1.3384': attribute type 10 has an invalid length. [ 457.674580][T19314] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 457.733766][T19314] team0: Port device wlan0 added [ 457.782557][ T9734] net_ratelimit: 5 callbacks suppressed [ 457.782578][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.007047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.243912][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3387'. [ 458.243970][T19334] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3387'. [ 458.243990][T19334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3387'. [ 458.248341][ T4934] Bluetooth: hci3: command tx timeout [ 458.896214][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.944556][T19348] ip6gre1: entered allmulticast mode [ 458.956694][ T9356] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.057227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.568272][T19370] netlink: 'syz.4.3393': attribute type 1 has an invalid length. [ 459.603740][T19373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3395'. [ 459.603776][T19373] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3395'. [ 459.680873][T19373] geneve2: entered promiscuous mode [ 459.680899][T19373] geneve2: entered allmulticast mode [ 459.744545][T19381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'. [ 459.854310][T19385] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3398'. [ 459.928336][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.041588][T19373] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.087037][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.282530][T19373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.294039][T19373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.399607][T19373] tipc: Resetting bearer [ 460.503197][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.503406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.632841][T19169] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.633252][T19169] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.633410][T19169] bridge_slave_0: entered allmulticast mode [ 460.668194][T19169] bridge_slave_0: entered promiscuous mode [ 460.685375][T19169] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.685518][T19169] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.693782][T19169] bridge_slave_1: entered allmulticast mode [ 460.710971][T19169] bridge_slave_1: entered promiscuous mode [ 460.938161][ T60] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.938202][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.938443][ T60] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.938472][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.938660][ T60] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.938689][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.938726][ T60] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.938755][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.026864][T19169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.047593][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.075413][T19169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.122633][T19408] netlink: 'syz.4.3403': attribute type 1 has an invalid length. [ 461.122658][T19408] netlink: 'syz.4.3403': attribute type 3 has an invalid length. [ 461.122674][T19408] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3403'. [ 461.128859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.279056][T19169] team0: Port device team_slave_0 added [ 461.290128][T19169] team0: Port device team_slave_1 added [ 461.298837][T19415] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3402'. [ 461.631377][T19169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.631398][T19169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.631426][T19169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.636907][T19169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.651256][T19169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.651344][T19169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.888252][T19432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3407'. [ 462.123189][T19169] hsr_slave_0: entered promiscuous mode [ 462.125909][T19169] hsr_slave_1: entered promiscuous mode [ 462.132976][T19169] debugfs: 'hsr0' already exists in 'hsr' [ 462.133001][T19169] Cannot create hsr debugfs directory [ 462.567842][ T5618] Bluetooth: hci5: command 0x0406 tx timeout [ 462.647271][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.020386][T19464] net_ratelimit: 5 callbacks suppressed [ 463.020409][T19464] netlink: Unknown conntrack attr (type=205, max=9) [ 463.130272][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.217056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.388971][T19477] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3414'. [ 463.408258][T19477] bond0: (slave bond_slave_1): Releasing backup interface [ 463.457624][T19169] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 463.470302][T19169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.485884][T19169] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 463.501137][T19169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.504471][T19169] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 463.531195][T19169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.533047][T19169] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 463.582018][T19169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.694842][T19489] ip_tables: iptables: counters copy to user failed while replacing table [ 463.965700][T19496] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 464.133275][T19169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.168994][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.257037][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.294735][T19500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3421'. [ 464.480052][T19169] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.483155][T19514] syzkaller1: entered promiscuous mode [ 464.483182][T19514] syzkaller1: entered allmulticast mode [ 464.681780][ T9356] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.681915][ T9356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.741233][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.741385][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.788506][T19522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3425'. [ 464.788545][T19522] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 465.210446][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.287303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.916195][T19552] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 466.022474][T19556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3433'. [ 466.022515][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3433'. [ 466.048658][T19552] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3432'. [ 466.048681][T19552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3432'. [ 466.155095][T19554] netlink: 'syz.2.3431': attribute type 1 has an invalid length. [ 466.234795][T19567] __nla_validate_parse: 1 callbacks suppressed [ 466.234818][T19567] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3432'. [ 466.234836][T19567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3432'. [ 466.234851][T19567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3432'. [ 466.264918][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.871112][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3435'. [ 467.019766][T19589] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3437'. [ 467.019796][T19589] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3437'. [ 467.052986][T19590] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3437'. [ 467.053014][T19590] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3437'. [ 467.261029][T19169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.384393][T19596] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3438'. [ 467.937559][T19620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3444'. [ 467.937586][T19620] bridge: RTM_NEWNEIGH with invalid ether address [ 468.328090][ T9733] net_ratelimit: 8 callbacks suppressed [ 468.328114][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.359347][T19625] hsr_slave_1 (unregistering): left promiscuous mode [ 468.386783][T19169] veth0_vlan: entered promiscuous mode [ 468.407403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.465432][T19169] veth1_vlan: entered promiscuous mode [ 468.544217][T19169] veth0_macvtap: entered promiscuous mode [ 468.597984][T19169] veth1_macvtap: entered promiscuous mode [ 468.625571][T19169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.677659][T19169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.759614][ T9354] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.760611][ T9354] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.760656][ T9354] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.760695][ T9354] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.283079][T19643] ip6t_srh: unknown srh match flags 4000 [ 469.447181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.464462][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.632445][ T9350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.632469][ T9350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.791850][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.791874][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.870237][T19655] Bluetooth: hci0: unsupported parameter 5135 [ 469.870265][T19655] Bluetooth: hci0: unsupported parameter 8192 [ 469.870280][T19655] Bluetooth: hci0: unsupported parameter 5135 [ 469.870295][T19655] Bluetooth: hci0: unsupported parameter 8192 [ 470.087268][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.487213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.579783][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.728194][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 471.394957][T19711] __nla_validate_parse: 66 callbacks suppressed [ 471.394980][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3466'. [ 471.537330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.611347][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.695246][T19723] ip6t_frag: unknown flags 6 [ 471.912770][T19734] netlink: 'syz.1.3471': attribute type 1 has an invalid length. [ 471.912844][T19734] netlink: 'syz.1.3471': attribute type 2 has an invalid length. [ 472.012636][T12731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.012857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.299242][T19741] syzkaller0: entered promiscuous mode [ 472.299268][T19741] syzkaller0: entered allmulticast mode [ 472.357963][T19741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'. [ 472.740091][T19754] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3476'. [ 472.742830][T19756] xt_TPROXY: Can be used only with -p tcp or -p udp [ 473.072338][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3480'. [ 473.075673][T19772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3480'. [ 473.424344][T19778] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3483'. [ 473.568631][T19782] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3484'. [ 473.608222][ C1] net_ratelimit: 5 callbacks suppressed [ 473.608248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.688225][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.922241][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3488'. [ 473.922273][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3488'. [ 474.212738][T19812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3492'. [ 474.729754][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.951532][T19843] xt_socket: unknown flags 0xc [ 475.129625][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.214212][T19835] syzkaller0: entered promiscuous mode [ 475.214241][T19835] syzkaller0: entered allmulticast mode [ 476.167043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.238045][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.614262][T19865] __nla_validate_parse: 2 callbacks suppressed [ 476.614285][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'. [ 477.210382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.298701][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.433190][T19867] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 477.873824][ T9349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.874037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.287143][ C0] net_ratelimit: 4 callbacks suppressed [ 479.287168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.369840][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.425754][ T9350] batadv1: left allmulticast mode [ 479.474376][ T9350] batadv1: left promiscuous mode [ 479.481929][ T9350] bridge0: port 1(batadv1) entered disabled state [ 479.505979][T19870] xt_hashlimit: size too large, truncated to 1048576 [ 479.559147][ T9350] pim6reg: left allmulticast mode [ 479.559289][ T9350] bridge0: left allmulticast mode [ 479.727772][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3506'. [ 480.329637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.372948][ T9350] bond0 (unregistering): (slave geneve3): Releasing active interface [ 480.507305][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.576215][ T9350] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.601239][ T9350] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.603374][ T9350] .` (unregistering): Released all slaves [ 480.633396][ T9350] bond1 (unregistering): Released all slaves [ 480.659158][ T9350] bond2 (unregistering): Released all slaves [ 480.682592][ T9350] bond3 (unregistering): (slave C): Releasing active interface [ 480.683126][ T9350] bond3 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 480.685441][ T9350] bond3 (unregistering): Released all slaves [ 480.791168][ T9350] bond0 (unregistering): Released all slaves [ 480.829654][ T9350] bond4 (unregistering): Released all slaves [ 480.855564][ T9350] bond5 (unregistering): Released all slaves [ 480.893822][T19866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.034841][T19880] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 481.282071][ T9350] : left promiscuous mode [ 481.367459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.425279][T19905] openvswitch: netlink: ct_state flags ffffffff unsupported [ 481.528385][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.711562][ T9350] tipc: Left network mode [ 482.002190][T19910] netlink: Failed to add lo helper -22 [ 482.002248][T19910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.396390][ T9350] IPVS: stopping master sync thread 15317 ... [ 482.538707][T19935] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 482.591400][T19935] bond1 (unregistering): Released all slaves [ 483.040377][T19958] netlink: 'syz.6.3525': attribute type 1 has an invalid length. [ 483.048315][ T5618] Bluetooth: hci6: command 0x0406 tx timeout [ 483.235661][T19956] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3525'. [ 483.291414][T19958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.328222][T19970] netlink: 'syz.2.3528': attribute type 4 has an invalid length. [ 483.502276][T19978] netlink: 'syz.2.3528': attribute type 4 has an invalid length. [ 483.734758][T19982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3530'. [ 483.735438][T19983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3530'. [ 483.892438][T19991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3530'. [ 484.167252][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 484.513128][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3534'. [ 484.513360][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3534'. [ 484.513580][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3534'. [ 484.559024][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3534'. [ 484.559278][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3534'. [ 484.559501][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3534'. [ 484.739539][ T1071] net_ratelimit: 8 callbacks suppressed [ 484.739561][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.368016][ T9354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.445599][ T9350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.445629][ T9350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.446580][ T9350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.446601][ T9350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.510681][ T9350] veth1_macvtap: left promiscuous mode [ 485.510725][ T9350] veth0_macvtap: left promiscuous mode [ 485.511070][ T9350] veth1_vlan: left promiscuous mode [ 485.511124][ T9350] veth0_vlan: left promiscuous mode [ 485.768722][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.268336][ T9350] team0 (unregistering): Port device team_slave_1 removed [ 486.297769][ T9350] team0 (unregistering): Port device team_slave_0 removed [ 486.407111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.808449][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.846458][T19988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.014188][ T9350] IPVS: stop unused estimator thread 0... [ 487.315785][T20050] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.412776][T20050] bridge_slave_0 (unregistering): left allmulticast mode [ 487.412809][T20050] bridge_slave_0 (unregistering): left promiscuous mode [ 487.412889][T20050] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.447118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.816485][T20071] netlink: 'syz.6.3548': attribute type 9 has an invalid length. [ 487.848043][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.935022][T20076] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 488.223331][T20084] netlink: 'syz.2.3554': attribute type 1 has an invalid length. [ 488.265625][T20084] bond3: entered promiscuous mode [ 488.266169][T20084] 8021q: adding VLAN 0 to HW filter on device bond3 [ 488.487269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.530461][T20089] erspan0: entered promiscuous mode [ 488.592454][T20101] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 489.010163][T20116] __nla_validate_parse: 28 callbacks suppressed [ 489.010188][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3558'. [ 489.047756][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.793067][T20132] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3565'. [ 489.888022][T20132] IPVS: set_ctl: invalid protocol: 0 172.20.20.4:0 [ 489.888804][T20132] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3565'. [ 489.893879][T20135] net_ratelimit: 5 callbacks suppressed [ 489.893971][T20135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 490.087927][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.481234][T20157] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 490.567649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.128792][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.299843][T20184] nft_compat: unsupported protocol 1 [ 491.607377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.166681][T20196] ip_tables: iptables: counters copy to user failed while replacing table [ 492.172567][T20196] ip_tables: iptables: counters copy to user failed while replacing table [ 492.183314][T20196] ip_tables: iptables: counters copy to user failed while replacing table [ 492.184542][T20196] ip_tables: iptables: counters copy to user failed while replacing table [ 494.744792][T20214] netlink: 'syz.1.3583': attribute type 1 has an invalid length. [ 494.744817][T20214] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3583'. [ 494.926398][T20212] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3584'. [ 495.084340][T12731] net_ratelimit: 66 callbacks suppressed [ 495.084366][T12731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.084579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.242910][T20221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3587'. [ 495.427695][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.366257][ T167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.383745][ T9359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.384028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.491032][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.591993][T20235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3586'. [ 496.622074][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3590'. [ 497.367079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.531370][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.407041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.410342][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3596'. [ 498.410379][T20253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3596'. [ 499.296429][T20262] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3597'. [ 499.474582][T20266] veth0: entered promiscuous mode [ 500.367741][T20266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.419226][T20273] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3601'. [ 500.459548][T20264] veth0: left promiscuous mode [ 500.487131][ C1] net_ratelimit: 3 callbacks suppressed [ 500.487154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.769483][ T9741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.866438][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.866663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.088144][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3602'. [ 501.108434][T20282] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3602'. [ 501.455153][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.527283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.849561][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.110069][ T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.110307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.567259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.830037][T20293] netlink: 'syz.2.3606': attribute type 9 has an invalid length. [ 502.899966][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.645044][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'. [ 505.075953][T20336] netlink: 'syz.7.3616': attribute type 2 has an invalid length. [ 505.075978][T20336] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3616'. [ 505.159517][T20333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.440333][T20339] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3617'. [ 505.920545][T20333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.089097][ T9734] net_ratelimit: 4 callbacks suppressed [ 506.089160][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.508343][T20353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3619'. [ 506.590064][ T9350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.590274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.629489][T20342] ip_vti0: entered promiscuous mode [ 506.789782][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3615'. [ 507.138378][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.218186][ T9354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.218415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.856626][ T9350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.178372][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.667139][ T5627] Bluetooth: hci4: command 0x0406 tx timeout [ 508.667250][ T5621] Bluetooth: hci7: command 0x0419 tx timeout [ 508.887197][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.003927][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3625'. [ 509.268097][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.198436][T20392] xt_bpf: check failed: parse error [ 510.459852][T20391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3628'. [ 511.047178][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.047629][ T33] INFO: task syz.0.2769:16439 blocked for more than 143 seconds. [ 511.047652][ T33] Not tainted syzkaller #0 [ 511.047664][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.047675][ T33] task:syz.0.2769 state:D stack:27032 pid:16439 tgid:16433 ppid:5615 task_flags:0x400140 flags:0x00080002 [ 511.047758][ T33] Call Trace: [ 511.047772][ T33] [ 511.047788][ T33] __schedule+0x17db/0x58f0 [ 511.047958][ T33] ? __pfx___schedule+0x10/0x10 [ 511.047995][ T33] ? schedule+0x90/0x2b0 [ 511.048025][ T33] schedule+0x164/0x2b0 [ 511.048052][ T33] schedule_preempt_disabled+0x13/0x30 [ 511.048078][ T33] __mutex_lock+0x7c1/0x1550 [ 511.048113][ T33] ? __mutex_lock+0x5d4/0x1550 [ 511.048146][ T33] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 511.048450][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 511.048478][ T33] ? net_generic+0x1e/0x240 [ 511.048518][ T33] ? net_generic+0x1e/0x240 [ 511.048550][ T33] ? net_generic+0x1e/0x240 [ 511.048579][ T33] ? net_generic+0x1e/0x240 [ 511.048618][ T33] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 511.048656][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 511.049035][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 511.049089][ T33] ? bpf_lsm_capable+0x9/0x20 [ 511.049114][ T33] ? security_capable+0x7e/0x2c0 [ 511.049214][ T33] genl_rcv_msg+0x614/0x7a0 [ 511.049257][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.049293][ T33] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 511.049346][ T33] netlink_rcv_skb+0x226/0x4a0 [ 511.049378][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.049416][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.049463][ T33] ? down_read+0x2be/0x330 [ 511.049500][ T33] genl_rcv+0x28/0x40 [ 511.049533][ T33] netlink_unicast+0x8ef/0xa80 [ 511.049580][ T33] netlink_sendmsg+0x813/0xb40 [ 511.049622][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.049662][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 511.049725][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.049755][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 511.049843][ T33] ____sys_sendmsg+0x54e/0x850 [ 511.049877][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.049914][ T33] ? import_iovec+0x73/0xa0 [ 511.050009][ T33] ___sys_sendmsg+0x2a5/0x360 [ 511.050035][ T33] ? __lock_acquire+0x747/0x2de0 [ 511.050068][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.050098][ T33] ? futex_wait+0x2a2/0x390 [ 511.050157][ T33] ? __fget_files+0x2a/0x420 [ 511.050186][ T33] ? __fget_files+0x3a2/0x420 [ 511.050220][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 511.050250][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.050302][ T33] do_syscall_64+0x166/0x520 [ 511.050357][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.050383][ T33] ? clear_bhb_loop+0x70/0xc0 [ 511.050413][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.050437][ T33] RIP: 0033:0x7fe86019e559 [ 511.050459][ T33] RSP: 002b:00007fe861068028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.050484][ T33] RAX: ffffffffffffffda RBX: 00007fe860426090 RCX: 00007fe86019e559 [ 511.050502][ T33] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000006 [ 511.050518][ T33] RBP: 00007fe860235ad8 R08: 0000000000000000 R09: 0000000000000000 [ 511.050533][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.050548][ T33] R13: 00007fe860426128 R14: 00007fe860426090 R15: 00007ffcb9e7c3c8 [ 511.050586][ T33] [ 511.050641][ T33] [ 511.050641][ T33] Showing all locks held in the system: [ 511.050654][ T33] locks held by khungtaskd/33: 1, last CPU#1: ** replaying previous printk message ** [ 511.050654][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 511.050672][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 511.050737][ T33] locks held by kworker/u8:6/167: 3, last CPU#1: [ 511.050754][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 511.050821][ T33] #1: ffffc90002e2fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 511.050887][ T33] #2: ffff88802d5b0258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 511.051005][ T33] locks held by getty/5371: 2, on CPU#0: [ 511.051022][ T33] #0: ffff888036c120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 511.051136][ T33] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 511.051222][ T33] locks held by kworker/u8:12/9350: 2, on CPU#0: [ 511.051238][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 511.051304][ T33] #1: ffffc90005257c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 511.051369][ T33] locks held by kworker/u8:16/9356: 3, last CPU#1: [ 511.051386][ T33] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 511.051451][ T33] #1: ffffc90005057c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 511.051518][ T33] #2: ffff88801cbe5258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 511.051584][ T33] locks held by kworker/u8:18/9359: 3, last CPU#0: [ 511.051601][ T33] #0: ffff8880339fd140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 511.051665][ T33] #1: ffffc90004f67c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 511.051731][ T33] #2: ffff8880b8428298 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x466/0xa10 [ 511.051805][ T33] locks held by syz.3.2404/14872: 2, on CPU#0: [ 511.051821][ T33] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.051887][ T33] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 511.051956][ T33] locks held by syz.0.2769/16439: 2, on CPU#1: [ 511.051973][ T33] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.052038][ T33] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 511.052109][ T33] locks held by syz.5.3256/18729: 2, on CPU#0: [ 511.052125][ T33] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 511.052197][ T33] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 511.052294][ T33] locks held by syz.2.3627/20385: 1, last CPU#1: [ 511.052311][ T33] #0: ffff888053e6b440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 511.052367][ T33] locks held by syz.1.3628/20387: 3, last CPU#1: [ 511.052383][ T33] #0: ffff88803a839380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 511.052477][ T33] #1: ffffffff912c48a8 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 511.052534][ T33] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: nl80211_netlink_notify+0x75/0x860 [ 511.052629][ T33] locks held by modprobe/20394: 2, last CPU#1: [ 511.052646][ T33] #0: ffff888052f26540 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 511.052700][ T33] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 511.052762][ T33] locks held by syz.4.3632/20399: 3, last CPU#1: [ 511.052779][ T33] #0: ffff888075f91380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 511.052847][ T33] #1: ffffffff912c48a8 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 511.052904][ T33] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: nl80211_netlink_notify+0x75/0x860 [ 511.052969][ T33] [ 511.052976][ T33] ============================================= [ 511.052976][ T33] [ 511.052992][ T33] NMI backtrace for cpu 1 [ 511.053017][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 511.053042][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.053056][ T33] Call Trace: [ 511.053065][ T33] [ 511.053074][ T33] dump_stack_lvl+0xe8/0x150 [ 511.053110][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 511.053180][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 511.053220][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 511.053260][ T33] sys_info+0x135/0x170 [ 511.053292][ T33] watchdog+0xfd7/0x1030 [ 511.053327][ T33] ? watchdog+0x1c7/0x1030 [ 511.053360][ T33] kthread+0x38b/0x480 [ 511.053384][ T33] ? __pfx_watchdog+0x10/0x10 [ 511.053408][ T33] ? __pfx_kthread+0x10/0x10 [ 511.053432][ T33] ret_from_fork+0x514/0xb70 [ 511.053459][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 511.053482][ T33] ? __switch_to+0xc89/0x1420 [ 511.053518][ T33] ? __pfx_kthread+0x10/0x10 [ 511.053542][ T33] ret_from_fork_asm+0x1a/0x30 [ 511.053582][ T33] [ 511.053591][ T33] Sending NMI from CPU 1 to CPUs 0: [ 511.053622][ C0] NMI backtrace for cpu 0 [ 511.053635][ C0] CPU: 0 UID: 0 PID: 9359 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 511.053656][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.053675][ C0] Workqueue: bat_events batadv_dat_purge [ 511.053762][ C0] RIP: 0010:sched_clock_cpu+0x84/0x440 [ 511.053784][ C0] Code: 40 49 c1 ef 03 48 b8 f1 f1 f1 f1 f8 f3 f3 f3 4b 89 04 2f 66 90 e8 0c 11 cd ff 48 03 05 c5 f4 da 0f 48 c7 44 24 40 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 65 48 8b 0d e4 8f f6 12 48 3b 8c 24 80 00 [ 511.053801][ C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00000017 [ 511.053816][ C0] RAX: 00000076fd2b4527 RBX: ffff8880b8424260 RCX: ffff8880270d1f40 [ 511.053831][ C0] RDX: 8000000001000101 RSI: 0000000001000101 RDI: 0000000000000002 [ 511.053844][ C0] RBP: ffffc90000007e10 R08: 0000000001000101 R09: 1ffffffff22f4e8f [ 511.053858][ C0] R10: dffffc0000000000 R11: fffffbfff22f4e90 R12: dffffc0000000000 [ 511.053872][ C0] R13: dffffc0000000000 R14: ffffc90000007da0 R15: 1ffff92000000fb0 [ 511.053886][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 511.053902][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.053915][ C0] CR2: 00007f9317e6066c CR3: 000000007ec8e000 CR4: 00000000003526f0 [ 511.053932][ C0] Call Trace: [ 511.053939][ C0] [ 511.053951][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 511.053977][ C0] irqtime_account_irq+0x66/0x260 [ 511.054005][ C0] __irq_exit_rcu+0x26/0x220 [ 511.054031][ C0] irq_exit_rcu+0x9/0x30 [ 511.054057][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 511.054084][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.054108][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 511.054130][ C0] Code: f7 e8 4d 80 b8 f5 f7 c3 00 02 00 00 74 05 e8 40 cf e4 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 7d a9 f5 65 48 8b 05 cc 7f aa 08 48 85 c0 74 18 5b 41 5e e9 [ 511.054148][ C0] RSP: 0018:ffffc90000007f40 EFLAGS: 00000206 [ 511.054167][ C0] RAX: 0000000000000002 RBX: 0000000000000283 RCX: 8000000000000102 [ 511.054182][ C0] RDX: 0000000000000002 RSI: ffffffff8e469cbf RDI: 0000000000000001 [ 511.054194][ C0] RBP: 0000000000000006 R08: ffffffff917a747f R09: 1ffffffff22f4e8f [ 511.054207][ C0] R10: dffffc0000000000 R11: fffffbfff22f4e90 R12: 0000000000000009 [ 511.054220][ C0] R13: 0000000000000008 R14: ffff8880b8428280 R15: 0000000000000100 [ 511.054243][ C0] handle_softirqs+0x226/0x860 [ 511.054271][ C0] ? do_softirq+0x77/0xd0 [ 511.054297][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 511.054323][ C0] do_softirq+0x77/0xd0 [ 511.054346][ C0] [ 511.054352][ C0] [ 511.054359][ C0] __local_bh_enable_ip+0x100/0x140 [ 511.054384][ C0] batadv_dat_purge+0x2d7/0x3c0 [ 511.054413][ C0] ? process_scheduled_works+0x97a/0x1630 [ 511.054438][ C0] process_scheduled_works+0xc3d/0x1630 [ 511.054481][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 511.054510][ C0] ? assign_work+0x3cf/0x5d0 [ 511.054536][ C0] worker_thread+0xa47/0xfb0 [ 511.054577][ C0] kthread+0x38b/0x480 [ 511.054595][ C0] ? __pfx_worker_thread+0x10/0x10 [ 511.054620][ C0] ? __pfx_kthread+0x10/0x10 [ 511.054639][ C0] ret_from_fork+0x514/0xb70 [ 511.054658][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 511.054683][ C0] ? __switch_to+0xc89/0x1420 [ 511.054710][ C0] ? __pfx_kthread+0x10/0x10 [ 511.054729][ C0] ret_from_fork_asm+0x1a/0x30 [ 511.054755][ C0] [ 511.469983][ T1071] net_ratelimit: 3 callbacks suppressed [ 511.470005][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.496197][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 512.364881][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 512.374099][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.384177][ T33] Call Trace: [ 512.387486][ T33] [ 512.390456][ T33] vpanic+0x56d/0xa60 [ 512.394501][ T33] ? __pfx___schedule+0x10/0x10 [ 512.399398][ T33] ? __pfx_vpanic+0x10/0x10 [ 512.403950][ T33] panic+0xc5/0xd0 [ 512.407717][ T33] ? __pfx_panic+0x10/0x10 [ 512.412177][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 512.417669][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 512.423068][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 512.429251][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 512.435436][ T33] watchdog+0x1030/0x1030 [ 512.439801][ T33] ? watchdog+0x1c7/0x1030 [ 512.444245][ T33] kthread+0x38b/0x480 [ 512.448335][ T33] ? __pfx_watchdog+0x10/0x10 [ 512.453032][ T33] ? __pfx_kthread+0x10/0x10 [ 512.457640][ T33] ret_from_fork+0x514/0xb70 [ 512.462255][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 512.467566][ T33] ? __switch_to+0xc89/0x1420 [ 512.472287][ T33] ? __pfx_kthread+0x10/0x10 [ 512.476896][ T33] ret_from_fork_asm+0x1a/0x30 [ 512.481714][ T33] [ 512.484917][ T33] Kernel Offset: disabled [ 512.489269][ T33] Rebooting in 86400 seconds..