last executing test programs: 9.288581535s ago: executing program 4 (id=3406): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000140)="3a3ab8") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000003b800000000000004020000850000002000000085000000d000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000480)={{r0}, 0x7fff, 0x8000, 0x3ff}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x8504, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0xf8, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x48, r3, 0x600, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x41) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x4e20, 0xfffd, 0x2, 0x0, 0x0, 0x2f}, {0xffffffffffffffff, 0x1001, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) 8.875317355s ago: executing program 4 (id=3411): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x4, @none, 0x1ba0, 0x2}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 8.670577946s ago: executing program 4 (id=3415): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r8, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xff6d) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0xfffffd9b, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_PROTO_DOWN={0x0, 0x27, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8841) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r9, 0x40585883, &(0x7f0000000300)={r6, 0x0, 0x80000000, 0x5, 0x9, 0xf, [0x7fff, 0x4, 0x1, 0x8, 0xc87, 0x5]}) openat$cgroup_ro(r11, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe) 8.009161784s ago: executing program 4 (id=3423): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650007000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x200, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4, 0x4a, 0x5}, [@NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0xc090) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001800400dd808c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000206010800000000000000000700000114000780080011400000008b05001500050000000500010006000000050005000200000005000400020000000900020073797a30000000001100030068e913c1a769702c6d61726b0000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x2, 0x1}) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffffffffffd94, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}}, 0x4) 8.005219649s ago: executing program 1 (id=3424): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd30000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000092b01fe8000000000000000000000000000bbfe8000000000000000000000000000aa320004000110000050"], 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/ipc\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a0000000300000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="e0b5c2f1b31165ec0eaa9a5b97498bfc884542aae9e67d2641d7f789488fd3f08e6262a24b903356b3ab1723b13aa3201f4dc48facfced9df7296a95cdd2bfc5630ad90c8cc62076f9aabe934e56df90eca77e6df9260b83044a328ad1a348e33eb619e7a17a82d2dab94c2bb5220859682d550d5e709dcf21", @ANYBLOB="000000000400"/28], 0x50) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="f97bfbd52c4387b7184e98ea981cbc512ce85a20ab40d688c5d7d17d4cae45b6477f690205f79660bd47948ad4ce4562ea8f36b5dc37172a4529b6d6fec907e86efce9481b20deecfd296aed11d4650cc05b96074e228e983935febb9d56dfdbbb024784fbdf70538baf7ad10d93f2", @ANYRES32], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1, 0x0, &(0x7f0000000080)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) 7.630430731s ago: executing program 4 (id=3428): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000000c0)="185a22", &(0x7f0000000180)=@udp6}, 0x20) unshare(0x66000080) 6.799378354s ago: executing program 3 (id=3435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000005c0)={&(0x7f0000000480)=""/132, 0x84}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xa, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) r5 = socket(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0xd1, &(0x7f0000000140)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) socket$kcm(0x29, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e21, 0xffffff4d, @mcast2, 0x100002}, 0x1c) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r12, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) 6.318919782s ago: executing program 0 (id=3438): socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x8000000, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000014c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000001300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f0000000280)={0x20, r4, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x46}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="fff6ffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async) syz_emit_ethernet(0x1172, &(0x7f0000001640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60000000113c2cfffe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r5}, 0xc) (async) r8 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000001380)={'veth1_virt_wifi\x00', 0x8716, 0x5}) (async) recvmmsg$unix(r8, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}]}, 0x40}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000001600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)=@ipv6_newaddrlabel={0xa8, 0x48, 0x200, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x8, 0x0, r11}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000000) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) (async) socket(0x2b, 0x1, 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 6.178383868s ago: executing program 0 (id=3439): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650007000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x200, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x4, 0x4a, 0x5}, [@NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000084}, 0xc090) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001800400dd808c0003"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000206010800000000000000000700000114000780080011400000008b05001500050000000500010006000000050005000200000005000400020000000900020073797a30000000001100030068e913c1a769702c6d61726b0000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x2, 0x1}) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffffffffffd94, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}}, 0x4) 6.093313992s ago: executing program 0 (id=3441): socket$key(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r2], 0x18}, 0x4000000) socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) 5.985548939s ago: executing program 3 (id=3442): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0a0000007fbf63a70a41862d07000000000000106baa3ac469b8bb72e283e366b9250151f9f164c02efb8fe5a2281e9a3a6a6b69a340ab5e38cbb68c66e7c1421aeeae280144f11c4f3eef696886445d2d53db9efbb676296dbb3584fa45ed641a85254da4401cbba604c5cf441fa68563a270", @ANYRES64=r0, @ANYBLOB="00000000636cbc6ba95e37fa81cf6d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x4, 0xf, 0x8, 0x1f4, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x10, 0x700, 0xff, 0x3}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRESDEC=r3], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffea4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x10000002}, 0x1c) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x4) (async) r9 = socket(0x2c, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000880)={r10, 0x7}, &(0x7f00000008c0)=0x8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x7, 0x0}, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001000000000000008efbc788333127ae175430c2a5e7b26300000000af470600ffffffff85100000080000001801000020756c2500000000002020207b1af8ff00bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000085100000070000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7ff, 0x65, &(0x7f0000000300)=""/101, 0x41100, 0x20, '\x00', r11, @netfilter=0x2d, r6, 0x8, &(0x7f00000003c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x6, 0xfffffffa, 0x10bf}, 0x10, r12, r2, 0x5, 0x0, &(0x7f00000004c0)=[{0xfffffffe, 0x100001, 0xf, 0x8}, {0x0, 0x3, 0x1, 0x1}, {0x3, 0x5, 0x6, 0x3}, {0x1, 0x2, 0x10, 0xb}, {0x1, 0x4, 0xf}], 0x10, 0xfffffffb}, 0x94) (async) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 5.581759994s ago: executing program 3 (id=3443): socket(0x28, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000015c0)=@deltfilter={0x16cc, 0x2d, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0xfff1}, {0xfff2, 0x7}, {0xfff2, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x11bc, 0x2, [@TCA_BASIC_EMATCHES={0x11b8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10b4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_VAR="0654d5b45db7", @TCF_META_TYPE_VAR="227f", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f7bf86"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x800}, {0x4, 0x5, 0x81, 0x40}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x7}, {0x4, 0x651, 0x80, 0x0, 0x3, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x40}, {0x335, 0x2, 0x2, 0x6}}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x2}, "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"}}, @TCF_EM_IPT={0x24, 0x3, 0x0, 0x0, {{0x8, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0xf0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff8, 0x1, 0x8}, {0x4, 0x21, 0xe7, 0x0, 0x4, 0x1}}}, @TCF_EM_CONTAINER={0xa4, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x4}, "23eede4e6754cda69b1d98842c308bcdabf299851512990a29cb19141d310a4796acc32e1082505f19b1b809c9eb86a32761d944761178ca328d57dd1363219879bbfaa0597bf1325e750a527d5f478d972368bce1b6b3729f3d6892b4f1e143fc53fd016e860bdb774de4886a10883654ee4450e7de048ab04354c40d58c97b087f75617884561f0ae98300a6d9bc65c503870843"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x800}, {0x9, 0x8001, 0x7, 0xc8}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x1b8, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x4d8, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_macvtap\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'ip6_vti0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_POLICE={0x484, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x50}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff855, 0x2, 0xc, 0x6, 0x7, {0x8f, 0x1, 0xc7, 0x4b5b, 0xfff7, 0x1}, {0x0, 0x2, 0x10, 0x800, 0x6f01, 0x6}, 0x1000, 0x876, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x0, 0x3, 0x1, 0x8, 0x4e12, 0xfffffbff, 0x8, 0x7, 0x4, 0x4e0b, 0x9, 0x5, 0x8001, 0x9, 0xc, 0x3889, 0x6, 0x6403, 0x6, 0x6e, 0x3, 0xf5, 0x0, 0x26077beb, 0x8, 0x81, 0x1, 0xa, 0x13, 0x9, 0x3, 0x3, 0x6, 0x4, 0x0, 0x0, 0x80000000, 0xe, 0x9, 0x9, 0xba48, 0x9, 0xb, 0x9, 0x4, 0x1ff, 0xc, 0x200, 0x7, 0x3, 0x1, 0x51, 0xffff8001, 0xd5d3, 0x10001, 0x2, 0x40, 0x7fffffff, 0x80000000, 0xd4e, 0x1000, 0x1a, 0xffffffff, 0x2, 0x5ff, 0xfc67, 0x200, 0x0, 0xac, 0x8880, 0x0, 0x7, 0x3ff, 0x8000, 0xfc, 0x10001, 0x10001, 0x7, 0x1, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x200, 0x6, 0x880, 0x0, 0x5, 0x0, 0x399fb6cc, 0x5, 0x1, 0x26, 0x3, 0x4, 0x6, 0x6, 0xb, 0x7, 0x6e6, 0x43, 0x0, 0x0, 0x101, 0x6, 0x1, 0x6, 0x6, 0xefd1, 0x2, 0x586f92ab, 0xf3fb, 0x2, 0x4, 0x908, 0x9, 0x7f, 0xfe, 0x10000, 0x2, 0x0, 0xf, 0x9, 0x1ff, 0x4, 0x9, 0xfffffe98, 0x8, 0x8, 0x3, 0x80000000, 0x7, 0x7, 0x0, 0x7000, 0xfffffff7, 0x5, 0xd, 0xf, 0x8, 0x80000001, 0x200, 0x0, 0xe, 0x6, 0xd, 0xfef1, 0x2, 0x7, 0x33, 0x8, 0x3, 0xe1, 0x1ba01885, 0x6, 0x0, 0x0, 0xb, 0x5, 0x8, 0x3, 0x401, 0x800, 0x8, 0xfffffffd, 0x80000001, 0xe, 0x4, 0x9000, 0x6, 0x9, 0x6, 0x7, 0x0, 0x1, 0x5, 0xfffff801, 0xffff, 0x4, 0x2, 0x80, 0x3, 0xd, 0x0, 0x0, 0x4, 0x1b2600, 0x1, 0xffff, 0xff, 0x9, 0x4, 0x7, 0xf70f, 0x5, 0x5, 0x7fff, 0x0, 0x6, 0x4, 0x7ff, 0x24b, 0x2, 0xcb03, 0x8, 0xad8, 0x4, 0x4, 0x0, 0xf22, 0x7, 0x96, 0x8, 0xb, 0x0, 0x2, 0x4, 0x0, 0x9, 0xffffffff, 0xb9, 0x40, 0x5, 0x5, 0x5, 0x1, 0x101, 0x2, 0x9, 0x2569, 0x1, 0x5, 0xff, 0xffffffff, 0x5, 0x8, 0x5, 0x3ff, 0x35, 0x7, 0x8, 0x2, 0x22ff7c5, 0x1ff, 0x1, 0xc, 0x8001, 0x8cc, 0x6, 0x2, 0x6, 0x3, 0xd, 0xff]}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_macvtap\x00'}]}}]}, 0x16cc}, 0x1, 0x0, 0x0, 0x4000841}, 0x810) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x1e00, 0x21}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002"], 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x26}}, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bcf0330b3b6e2cf3449d2f5aacf1a3060000000000000000ffffff80e500020000000000c500fcff0000de00850000001b3bdf0095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$MRT6(r5, 0x29, 0xd0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x6, @private2, 0x2}]}, &(0x7f0000000180)=0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000500620700eeffffff070000001e11000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r8}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.031460979s ago: executing program 0 (id=3444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x1, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x402) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x1, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) listen(r1, 0x402) (async) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) (async) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) (async) 4.642941801s ago: executing program 0 (id=3445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000fd470000000000000000000000000000000000000000e5464be3b6eca692706c47842c8e0f5ff68cbfa2c9e240a061c30b17"], 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x46}, {0x0, 0xa00}], 0x2, 0xa, 0x6c8) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f0000000580)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000880}, 0x4004089) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bind$tipc(r3, 0x0, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f00000003c0)="89e5ee0c7cdad9fcb47380c988cae912d248aa378d514c474d64fb", 0x1b}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360", 0xb}], 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) 3.918385218s ago: executing program 3 (id=3447): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a07030700000029bd7000fddbdf2505001a00ac1414bb0000f79f0000000000000000fe800000000000178ef3ac0dd8b126588439e9"], 0x38}}, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x28, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) shutdown(r1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x98) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x12, 0x0, 0x48, 0x0, 0x0, 0x1b, 0x64}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4b, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0)=[0x1], 0xfffffffffffffffc, 0x4, 0x20000000000000ff}}, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000100)=0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00001000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r6, r7}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r6, r5}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={r4, 0xffff}, &(0x7f00000002c0)=0x8) 3.821745387s ago: executing program 3 (id=3448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000206010800000000000000000700000014000780080011400000008b05001500060000000500050000000000050005000a00000005000400020000000900020073797a30000000000c000300686173683a697000b768b4febb7cc3b0af9d33ba2bd7d53ec443ac470c4c7ff3ea2e6a5e97828a128bfc168e04415beb1650bc5c9da9e0ca3828cd7d6268123c561e8b5d2fd756c9b46e3927410a4adf3a3ec9d716287ba55eb3985f62009f2cc8910217578e184fec3061b1ed68c5ce8dfa1e7b1439f8d1da73665b7f3cf895b52b104e2126a55afdba9be146e8c5587e16761b26f0a14ab185fc3be6e0"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x41071, 0xffffffffffffffff, 0x894f000) unshare(0xa020480) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x2, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x10000}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x4}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000300)=@get={0x1, &(0x7f0000000200)=""/255, 0x5}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x1f0, 0x2e0, 0x2e0, 0x1f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0xfd, 0x4}, {0xffffffffffffffff, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc49}]}]}, 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x5, 0x2, 0x2, 0x5}, 0x50) r6 = socket(0x15, 0x5, 0x0) connect$unix(r6, &(0x7f00000003c0)=@abs={0xa}, 0x6e) getsockname$llc(r6, 0x0, &(0x7f0000000040)) connect$bt_sco(r5, &(0x7f0000000540)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 3.658568075s ago: executing program 1 (id=3449): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000500)="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", 0x528}], 0x1}}], 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xab7, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @broadcast}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) (async) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x4e22, @empty}}}, 0x108) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x3, 0x1) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.656833452s ago: executing program 2 (id=3450): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x20, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb7c, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@alu={0x4, 0x0, 0x2, 0x0, 0xfee8774beaa68262, 0xffffffffffffffe0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xa, 0x3, 0x8, 0x10, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x1c, &(0x7f0000000140)=""/28, 0x41000, 0x10, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x7, 0x2, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x5, 0x4, 0x6}], 0x10, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r0, 0x0, 0x84, 0x86, &(0x7f0000000340)="deb7dccda18d8732e5f861ce093d7b80e870788a517a0d75d560c7e6af6e1c0833b8014897a4e1260c87c5ce3a1b8abe4a9563860ffb8ea88745f748aee137e3b5a0bcd456693f1b493379bdd1dd96a54e2117105d56223b20b9f67e8f41b8f95b8576466a076f2291b0dde675507ba5420b532d9970783456e773e7889fe0c1ee38b460", &(0x7f0000000400)=""/134, 0x9, 0x0, 0x1000, 0x31, &(0x7f00000004c0)="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", &(0x7f00000014c0)="05346fd223cd4208749eb2bae6d24f513f892c2b28b66b023a689392db7147c5f0e04b8d6ad4977dcd167f715b48a348b4", 0x0, 0x0, 0x80000000}, 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001580)=0xaae4, 0x4) getpid() (async) r3 = getpid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000015c0)=r3) poll(&(0x7f0000001600)=[{r1, 0x200}, {r2, 0x440}, {r1, 0x418}, {r1, 0x9002}], 0x4, 0xd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000001840)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001680)={0x16c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3}, [@CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_MASTER={0xd0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x39}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x16c}}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001900)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001940)={@multicast2, @local, 0x0}, &(0x7f0000001980)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a00)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a00)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001b00)={'syztnl0\x00', &(0x7f0000001a40)={'sit0\x00', 0x0, 0x10, 0x20, 0x4, 0xae, {{0x1d, 0x4, 0x2, 0x6, 0x74, 0x66, 0x0, 0x8, 0x4, 0x0, @loopback, @multicast1, {[@lsrr={0x83, 0x7, 0x9d, [@loopback]}, @cipso={0x86, 0x16, 0x2, [{0x0, 0x8, "81fe8054b658"}, {0x1, 0x8, "f7033c9b78df"}]}, @noop, @ssrr={0x89, 0x27, 0x4f, [@empty, @broadcast, @multicast2, @remote, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x35}, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast]}, @cipso={0x86, 0x14, 0x3, [{0x0, 0xe, "2cc0870acac814eb5fab7d3f"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001b40)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001b40)={'wg2\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000001b80)={@private2}, &(0x7f0000001bc0)=0x14) (async) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000001b80)={@private2, 0x0}, &(0x7f0000001bc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001c00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000002300)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000022c0)={&(0x7f0000001c40)={0x66c, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xee, 0x4, "84dbe0f2b84e8f52544d5604ccc8c80fc07574cc5383fbe95c7b94baf2b5dacb3f304b3f95556a6637dfd140c70d126ad00fbb241394bf80c94fc091a6a81e438fd411d02701de00d9e02212d7ff708fdcd939112ed18691ba9e7d7eddc54c9abae007655d2b97128ffbb8fac9edc936aeafccae9e370058049fe5a3eec9abc1d3ff8ebe11132a74b3fc00f26c239b135b345165addee7ebf6d2d1ce009609a574cac584ea69356d1c7a83cc4e157322a2d49c6cfdc8ec0cdb16f17425cb1a07ecc539786f0d4b5fe037f5624e41e68735fbf86d2a04078a87224b930341f0f8199c2cd2d94654ff028e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbb, 0x4, "cd7c3d921c45bde7740857db746ff493cb6499a746ba79e9981a556e6d8328dd6c5ce955ceb3b0b97012f4928aae59acd7bf263a91219c5362b5b738f28a00667112e129ddd36b1821fba9e06b32a63c07bac399aa441638ef67678c59b14b29186d947c14aea6b630608a5c53851523d8229e5f2d2439325918b86de73112a89111807186820891b13b67c026068b6e74a64f809ce1e5cb15ff0ca9c287927cae4f228a4a8d5826ffaeb3fdef00780f2a976c81e631a5"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x11a3ce8054c8e0f6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'H.245\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+)-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'H.245\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8eb4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'H.245\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'H.245\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x14e2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']-@!*#,]+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf570}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf5, 0x5, "66d161cbaf84a3330eb1f91e369544e709cc387f2860edf278ab3e6a4ca7c49050121c31c20bdca0a054488f5da2bc40b729a30f9cac77221289c135c141423eaca270df49c533f1e06e98a84b6f91119ce0a7b12df800d77f7688fd3363c8893fb112b390cbb12ed8e6d8a88e3fe0bf40d499cea68f68c05e9e2aada56dc4bbf6e371c58483924dfe86322e18998fda30785f65fac0d348365a49939b65dc32475070e984ddd8fe9b599b21ecd8a768af366a088cd93c7d9642a9acdd14c54895709fee7ec78d96c375de56e1251c92d885309ae04cad0aa1a151859b34d90be6594df68df627967fb7d39f58cf4ef840"}, @ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "9624ff0a432c3a675b70597825129d95080fdac1597717a3b2a7d5dd022e6dff9a00d4ae57305ad1c1d79a8daee9b77dda7179954af030afc4be99a0526d0d4dc000cdbc70d16d3b9a180f4d303802839770e54b86a81d35b2de81c621c7b7c9ac2698c407a83350035f0a2c36dabade5587788dce77c5cbd8cd89b0f1cfa8623bad53591bb851b69e420e3c80ce0bdfaf2ea7878012f580aa3b13c5beeeb453f9f642cba618f1c7319d7ba1058cd096551604889e73e1094264cdc91d205cd1b9161a5708f66983e381cb9c58da3623d071cfbe659959e2814504850b1a71003162e642f7afdee4b18edc80502c18e4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{}/U\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x46}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd12}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x66c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000000) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000002340), &(0x7f0000002380)=0x4) (async) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000002340), &(0x7f0000002380)=0x4) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r14, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x38, r15, 0xa18, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x240000c6) (async) sendmsg$NLBL_MGMT_C_ADD(r14, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x38, r15, 0xa18, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x240000c6) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000002500)={r2, 0x2a5, 0x9, 0x8}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000002500)={r2, 0x2a5, 0x9, 0x8}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r16, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r16, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000002680), r5) (async) r17 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002680), r5) sendmsg$IPVS_CMD_SET_INFO(r16, &(0x7f0000002840)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002800)={&(0x7f00000026c0)={0x104, r17, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x12}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x44004}, 0x800) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f00000028c0), r5) sendmsg$ETHTOOL_MSG_WOL_SET(r16, &(0x7f0000002dc0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002900)={0x44c, r18, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x88, 0x3, "5a42a17e9ebe5468c1f76082a1ff8d065cc527852f99f332cd56873a24942a04ed93756c192b9fd137646c7da02f5bb4da3f6aa0267254047905463f09b4eaa0885fb497b26a9520e89597d4c2ff73ea526647a8798b198faf8b8aa4d7ea9d2d69cb990147a72ee53adac1e7b784b22ac018c523ce3d214d7a83990b5a72c124a2c1b9d8"}, @ETHTOOL_A_WOL_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_SOPASS={0xfd, 0x3, "3e08984f98322ef881bed8d7d73df7cfafd4efc00f549982691d9be85084301d17c27198ceb11429e6900e8e9cd162eacfbc90819626dcbaf72346c25557b9fb488c7e7c33e69a687f62b7b5483502e9c3b620850b079ba3e2dfac129f681fdbe21ce0eed936745bc71427b46ed59bef8f0d97d45cf08cfc93a3b2e6447496f99933d13e3b88fd00e6030386bd186a76ee28f23fbeb46dd31b69620d424f7701ac21532a9559022015c0af674de24470e4b1ba27b62451bc4569d93b51deeee39bd534c77dba54e53ac552478b5f9baac6f0e6c911e4de39fbf7ac4b1dc2a5aeeeff34a13374ed20265de7c8a703b998f8d97cc62503f51ea6"}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_MODES={0x80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "f978110e5860e994fcf695c88a829131e58c570c38f4e6c7b89eca9c7245ece63528aadf063ec0e229d604648e41daf75908491c1b63d98c71d6c6fb99e003eac0cf28ce06d2f386852cdad3b25e30bcbe50e237204ad2af16721b45f5bd8a03348743019d555f5b566ed47c2fce3c8b3daa51426e63829d"}]}, @ETHTOOL_A_WOL_MODES={0x1a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff95}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x412c9d69}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x116}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x414beba6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xce}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe0c}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '7\x91^%-/!\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\xb9{[[}]@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@)-(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "59fe2b2f6191ee083221384d7d79faff19f76e142f95ddc601928be20c6c3b7ff619aaab58793721bd5b027c22452bcbc24074c1822fbae6eec652dbdf460cf9acd1a7f8dcdb52e31516c1b180318246a284c6a484fac9064538977ef42f76634c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40800) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r16, &(0x7f0000002dc0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002900)={0x44c, r18, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x88, 0x3, "5a42a17e9ebe5468c1f76082a1ff8d065cc527852f99f332cd56873a24942a04ed93756c192b9fd137646c7da02f5bb4da3f6aa0267254047905463f09b4eaa0885fb497b26a9520e89597d4c2ff73ea526647a8798b198faf8b8aa4d7ea9d2d69cb990147a72ee53adac1e7b784b22ac018c523ce3d214d7a83990b5a72c124a2c1b9d8"}, @ETHTOOL_A_WOL_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_SOPASS={0xfd, 0x3, "3e08984f98322ef881bed8d7d73df7cfafd4efc00f549982691d9be85084301d17c27198ceb11429e6900e8e9cd162eacfbc90819626dcbaf72346c25557b9fb488c7e7c33e69a687f62b7b5483502e9c3b620850b079ba3e2dfac129f681fdbe21ce0eed936745bc71427b46ed59bef8f0d97d45cf08cfc93a3b2e6447496f99933d13e3b88fd00e6030386bd186a76ee28f23fbeb46dd31b69620d424f7701ac21532a9559022015c0af674de24470e4b1ba27b62451bc4569d93b51deeee39bd534c77dba54e53ac552478b5f9baac6f0e6c911e4de39fbf7ac4b1dc2a5aeeeff34a13374ed20265de7c8a703b998f8d97cc62503f51ea6"}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_MODES={0x80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "f978110e5860e994fcf695c88a829131e58c570c38f4e6c7b89eca9c7245ece63528aadf063ec0e229d604648e41daf75908491c1b63d98c71d6c6fb99e003eac0cf28ce06d2f386852cdad3b25e30bcbe50e237204ad2af16721b45f5bd8a03348743019d555f5b566ed47c2fce3c8b3daa51426e63829d"}]}, @ETHTOOL_A_WOL_MODES={0x1a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff95}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x412c9d69}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x116}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x414beba6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xce}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe0c}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '7\x91^%-/!\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\xb9{[[}]@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@)-(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "59fe2b2f6191ee083221384d7d79faff19f76e142f95ddc601928be20c6c3b7ff619aaab58793721bd5b027c22452bcbc24074c1822fbae6eec652dbdf460cf9acd1a7f8dcdb52e31516c1b180318246a284c6a484fac9064538977ef42f76634c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40800) 3.51170309s ago: executing program 2 (id=3451): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xffffffff) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(xeta-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r5], 0x20) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x24c000, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(r8, &(0x7f00000002c0), 0x2c5) write$tun(r7, &(0x7f0000000100)=ANY=[], 0x38) sendmsg$nl_generic(r6, 0x0, 0x20000000) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) 2.368951101s ago: executing program 2 (id=3452): syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2.270564048s ago: executing program 2 (id=3453): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000ff"], 0x50) (rerun: 32) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) (async, rerun: 32) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96", 0x43}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827", 0x45}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c6", 0x41}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a", 0x1d}], 0x1}}], 0x2, 0x20000044) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) r0 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 703.24032ms ago: executing program 1 (id=3454): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002dc0), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r3 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x20080000, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x1}}}], 0x18}, 0x800) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="79a82dbd7000ffdbdf2501000000000000000c4100000007001473797a"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x24000084) 668.257373ms ago: executing program 3 (id=3455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x1, 0x4) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xb8\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x80080) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) recvmmsg(r7, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001400)=""/75, 0x4b}], 0x2}, 0x35}], 0x1, 0x2, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f00000000000100", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x23, &(0x7f0000000100)=0xaf1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010001980"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 551.279658ms ago: executing program 2 (id=3456): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100146c00000001000000001b000014000000000000001001000002"], 0x30}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100146c00000001000000001b000014000000000000001001000002"], 0x30}, 0x0) mmap(&(0x7f00003b1000/0x2000)=nil, 0x2000, 0xc, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="40005200060010"], 0x24}}, 0x0) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, &(0x7f0000001600)) (async) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, &(0x7f0000001600)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000250095fa749d7100006003a156fe4d3095965ce6135ed0e28400", @ANYRES32=0x0, @ANYBLOB="4503040001c106001c00128009000100626f6e64000000000c0002800500200004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 424.509241ms ago: executing program 1 (id=3457): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb72b4000000590806000108000604"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r3 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1}, 0x4003}}, 0x80, 0x0}}], 0x2, 0x4004040) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb72b4000000590806000108000604"], 0x0) (async) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) (async) socket(0x1e, 0x1, 0x0) (async) sendmmsg$sock(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1}, 0x4003}}, 0x80, 0x0}}], 0x2, 0x4004040) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) 389.364661ms ago: executing program 2 (id=3458): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0xffd, 0x6, 0x1d, 0x5, 0x4, 0x27}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x4000010) getpeername$qrtr(r0, 0x0, &(0x7f00000000c0)) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@gettaction={0x14, 0x32, 0xe72c5f922f23ccf3, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40008c4}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180600000000000000000900003ae8089856bceb81f907", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c0000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) 307.242883ms ago: executing program 0 (id=3459): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x40000) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000380)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882c"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) sendfile(r0, r3, 0x0, 0x20000000002) 166.637348ms ago: executing program 1 (id=3460): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0xd, 0x7, 0x9, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 95.275199ms ago: executing program 1 (id=3461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) 0s ago: executing program 4 (id=3462): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="4406c74ee427ab1a197238be3661000000020601024000000000000100000000000000020073797a31000000000500010007000000050005000a0000000c0007db1c001240fffffffa0500040002000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@remote}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@local, {0x0, 0x2, 0x0, 0x8, 0x0, 0x8}, {0x0, 0x2}, {0x1, 0x3}, 0x10, 0x4000, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000080008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040001) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a0004"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): o HW filter on device bond14 [ 392.194422][T15250] bond11: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 392.245259][T15250] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 392.345457][T15258] macvlan2: entered promiscuous mode [ 392.368329][T15258] macvlan2: entered allmulticast mode [ 392.555140][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2426'. [ 392.559462][T15251] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.579804][T15251] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.032314][T15251] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.137554][T15251] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.464106][T15251] team0: Port device netdevsim1 removed [ 393.479465][T15251] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.570166][T15251] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.830196][T15251] netdevsim netdevsim1 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.871870][T15251] netdevsim netdevsim1 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.996291][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2429'. [ 394.512706][T15305] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2432'. [ 394.583260][ T3259] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.615605][ T3259] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.696117][ T3259] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.718564][ T3259] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.895351][ T3259] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.943247][ T3259] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.155895][ T3259] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.206091][ T3259] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.775716][T15324] syzkaller1: entered promiscuous mode [ 395.809772][T15324] syzkaller1: entered allmulticast mode [ 396.546511][T15357] xt_TCPMSS: Only works on TCP SYN packets [ 396.998228][T15369] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2449'. [ 397.368384][T15381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2453'. [ 397.745554][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2456'. [ 397.804147][T15394] netlink: 'syz.1.2455': attribute type 30 has an invalid length. [ 397.861270][T15396] netlink: 'syz.1.2455': attribute type 30 has an invalid length. [ 397.903990][T15406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2459'. [ 398.159496][T15394] bond11: option arp_missed_max: invalid value (0) [ 398.171891][T15394] bond11: option arp_missed_max: allowed values 1 - 255 [ 398.194455][T15394] bond11 (unregistering): Released all slaves [ 398.289003][T15418] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 398.337130][T15396] bond11: option arp_missed_max: invalid value (0) [ 398.363159][T15421] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20003 [ 398.378322][T15396] bond11: option arp_missed_max: allowed values 1 - 255 [ 398.404694][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 398.424895][T15396] bond11 (unregistering): Released all slaves [ 398.542886][T15408] pimreg: entered allmulticast mode [ 398.552797][T15407] netlink: 'syz.4.2459': attribute type 1 has an invalid length. [ 398.610704][T15416] C: renamed from veth1_to_team [ 398.648999][T15416] netlink: 'syz.0.2461': attribute type 8 has an invalid length. [ 398.673966][T15416] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 398.774809][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2462'. [ 398.910886][T15432] v: Master is either lo or non-ether device [ 398.922134][T15436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2464'. [ 399.180257][T15442] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 399.237548][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 399.257423][T15440] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 399.293183][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'. [ 399.322545][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 399.384518][T15452] syzkaller0: entered allmulticast mode [ 399.403538][T15452] syzkaller0: entered promiscuous mode [ 399.515112][T15452] syzkaller0: left promiscuous mode [ 399.538639][T15452] syzkaller0: left allmulticast mode [ 400.102146][T15467] lo speed is unknown, defaulting to 1000 [ 400.206254][T15479] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 400.514905][T15479] bond11: entered promiscuous mode [ 400.543599][T15479] 8021q: adding VLAN 0 to HW filter on device bond11 [ 400.648276][T15483] 8021q: adding VLAN 0 to HW filter on device bond11 [ 400.664128][T15483] bond11: (slave xfrm1): The slave device specified does not support setting the MAC address [ 400.693681][T15483] bond11: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 400.746091][T15483] bond11: (slave xfrm1): making interface the new active one [ 400.780099][T15483] xfrm1: entered promiscuous mode [ 400.805626][T15483] xfrm1: left promiscuous mode [ 401.066644][T15489] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 401.140638][T15491] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 401.295450][T15495] syzkaller0: entered promiscuous mode [ 401.317751][T15495] syzkaller0: entered allmulticast mode [ 401.836076][T15507] netlink: 'syz.1.2483': attribute type 58 has an invalid length. [ 402.233540][T15515] __nla_validate_parse: 8 callbacks suppressed [ 402.233574][T15515] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2486'. [ 402.260734][T15515] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2486'. [ 402.285799][T15515] ipt_REJECT: TCP_RESET invalid for non-tcp [ 402.330594][T15515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2486'. [ 402.350090][T15516] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2487'. [ 402.705105][T15513] : option downdelay: invalid value (18446744073709547007) [ 402.726778][T15513] : option downdelay: allowed values 0 - 2147483647 [ 402.794991][T15513]  (unregistering): Released all slaves [ 403.232565][T15525] tipc: Started in network mode [ 403.254910][T15525] tipc: Node identity 2ab7c5949d51, cluster identity 8 [ 403.305370][T15525] tipc: Enabled bearer , priority 0 [ 403.822666][T15544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2492'. [ 403.968978][T15548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2496'. [ 404.024942][T15549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2496'. [ 404.122440][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2492'. [ 404.423292][ T7887] tipc: Node number set to 3085354388 [ 404.610782][T15560] dvmrp0: entered allmulticast mode [ 404.665351][T15559] lo speed is unknown, defaulting to 1000 [ 404.700580][T15571] netlink: 'syz.3.2502': attribute type 29 has an invalid length. [ 405.129229][T15574] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 (while UP) [ 405.195923][T15579] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2505'. [ 406.516124][T15610] xt_hashlimit: size too large, truncated to 1048576 [ 406.566352][T15612] netlink: 'syz.1.2513': attribute type 11 has an invalid length. [ 406.639153][T15612] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2513'. [ 407.754464][T15644] __nla_validate_parse: 3 callbacks suppressed [ 407.754515][T15644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2516'. [ 408.217716][T15650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2518'. [ 408.749619][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'. [ 409.044839][T15672] openvswitch: netlink: Message has 4 unknown bytes. [ 409.133334][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 409.303259][T15680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2524'. [ 409.347654][T15680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2524'. [ 409.426885][T15672] tipc: Resetting bearer [ 409.434582][T15672] tipc: Resetting bearer [ 409.709581][T15688] netlink: zone id is out of range [ 409.732853][T15688] netlink: zone id is out of range [ 409.757288][T15688] netlink: zone id is out of range [ 409.800220][T15688] netlink: zone id is out of range [ 409.841216][T15688] netlink: zone id is out of range [ 409.873223][T15688] netlink: zone id is out of range [ 409.906662][T15688] netlink: zone id is out of range [ 409.968231][T15688] netlink: zone id is out of range [ 409.974959][T15688] netlink: zone id is out of range [ 410.311612][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2532'. [ 410.342147][T15706] xt_TCPMSS: Only works on TCP SYN packets [ 410.780774][T15706] bridge_slave_1: left allmulticast mode [ 410.810097][T15706] bridge_slave_1: left promiscuous mode [ 410.833725][T15706] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.722285][T15730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.888454][T15730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.926562][T15733] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 411.950422][T15712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2534'. [ 412.550558][T15749] bond0: Caught tx_queue_len zero misconfig [ 413.328918][T15761] netlink: 'syz.3.2548': attribute type 1 has an invalid length. [ 413.475161][T15767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2550'. [ 413.499799][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 413.538608][T15761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.604470][T15768] bond0: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 413.653755][T15768] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 413.981245][T15778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2553'. [ 414.103553][T15787] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2552'. [ 414.484674][T15799] syzkaller0: entered promiscuous mode [ 414.517738][T15799] syzkaller0: entered allmulticast mode [ 415.130268][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 415.244237][T15816] net_ratelimit: 376 callbacks suppressed [ 415.244256][T15816] openvswitch: netlink: Missing key (keys=40, expected=100) [ 415.300915][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 415.377933][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 415.726751][T15833] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2566'. [ 415.754253][T15833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2566'. [ 415.786322][T15833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2566'. [ 416.300153][T15843] bond12: option resend_igmp: invalid value (2878) [ 416.308596][T15843] bond12: option resend_igmp: allowed values 0 - 255 [ 416.329446][T15843] bond12 (unregistering): Released all slaves [ 417.105540][T15835] netlink: 'syz.2.2566': attribute type 4 has an invalid length. [ 417.403511][T15851] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 417.435788][T15851] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 418.981632][T15900] netlink: 'syz.3.2587': attribute type 12 has an invalid length. [ 419.294557][T15911] __nla_validate_parse: 6 callbacks suppressed [ 419.294601][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2589'. [ 419.701401][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'. [ 419.744865][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2591'. [ 419.786408][T15914] netlink: 'syz.1.2591': attribute type 12 has an invalid length. [ 419.811905][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'. [ 419.843974][T15914] netlink: 'syz.1.2591': attribute type 14 has an invalid length. [ 420.144958][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2594'. [ 420.832788][T15934] netlink: 'syz.2.2597': attribute type 1 has an invalid length. [ 420.891904][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2597'. [ 421.151395][T15934] 8021q: adding VLAN 0 to HW filter on device bond15 [ 422.130116][T15963] netlink: 'syz.2.2604': attribute type 10 has an invalid length. [ 422.205759][T15942] vlan0: left promiscuous mode [ 422.371631][T15942] vlan4: left allmulticast mode [ 422.383147][T15942] bond5: left allmulticast mode [ 422.389083][T15942] geneve2: left allmulticast mode [ 422.504542][T15942] ip6gre1: left allmulticast mode [ 422.519564][T15942] bond0: left allmulticast mode [ 422.527296][T15942] geneve3: left allmulticast mode [ 422.599629][T15942] bridge4: left allmulticast mode [ 422.612906][T15942] bridge5: left allmulticast mode [ 422.621436][T15942] tipc: Resetting bearer [ 422.631919][T15942] syzkaller0: left promiscuous mode [ 422.639639][T15942] syzkaller0: left allmulticast mode [ 422.785914][ T7881] lo speed is unknown, defaulting to 1000 [ 422.796497][ T14] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.825343][ T7881] syz2: Port: 1 Link DOWN [ 422.845434][ T14] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.878588][ T14] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.903629][ T14] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.133529][T15966] bond0: entered promiscuous mode [ 423.145867][T15966] bond0: entered allmulticast mode [ 423.179746][T15966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.284986][T15936] tipc: Resetting bearer [ 423.360214][ T14] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.408847][ T14] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.447222][ T14] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.467351][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2607'. [ 423.493991][ T14] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.900674][T15991] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2612'. [ 424.019072][T15997] netlink: 'syz.3.2614': attribute type 9 has an invalid length. [ 424.071342][T15997] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2614'. [ 424.381279][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'. [ 424.417515][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'. [ 424.511888][T16016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2619'. [ 424.799772][T16021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2621'. [ 424.845908][T16022] netlink: 'syz.1.2620': attribute type 1 has an invalid length. [ 424.916425][T16028] netlink: 'syz.1.2620': attribute type 30 has an invalid length. [ 424.981956][T16030] netlink: 'syz.1.2620': attribute type 10 has an invalid length. [ 424.993025][T16030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2620'. [ 425.035686][T16030] dummy0: entered promiscuous mode [ 425.869024][T16052] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2628'. [ 426.753587][ T5733] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 426.918901][T16081] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2635'. [ 426.952170][T16081] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2635'. [ 427.575472][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2639'. [ 427.579784][T16102] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2640'. [ 427.777611][ T5733] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 427.949779][T16111] lo speed is unknown, defaulting to 1000 [ 428.287517][T16132] syzkaller1: entered promiscuous mode [ 428.300767][T16132] syzkaller1: entered allmulticast mode [ 428.325601][T16132] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) ! [ 428.652669][T16136] netlink: zone id is out of range [ 428.666513][T16136] netlink: zone id is out of range [ 428.681053][T16136] netlink: zone id is out of range [ 428.696455][T16136] netlink: zone id is out of range [ 428.717721][T16136] netlink: zone id is out of range [ 428.734198][T16136] netlink: zone id is out of range [ 428.748588][T16136] netlink: zone id is out of range [ 428.764124][T16136] netlink: zone id is out of range [ 428.786635][T16136] netlink: zone id is out of range [ 428.802759][T16136] netlink: zone id is out of range [ 429.550592][T16149] __nla_validate_parse: 6 callbacks suppressed [ 429.550637][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 429.571486][T16149] netlink: 'syz.3.2655': attribute type 5 has an invalid length. [ 429.580367][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2655'. [ 429.684138][T16149] geneve4: entered promiscuous mode [ 429.690017][T16149] geneve4: entered allmulticast mode [ 429.701510][T11137] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 37394 - 0 [ 429.729662][T11137] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 37394 - 0 [ 429.757755][T11137] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 37394 - 0 [ 429.785832][T11137] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 37394 - 0 [ 430.065453][T16161] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 430.101664][T16161] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 430.150681][T16165] xt_hashlimit: size too large, truncated to 1048576 [ 430.156389][T16167] xt_hashlimit: size too large, truncated to 1048576 [ 430.169489][T16163] team0: Device vlan2 is already an upper device of the team interface [ 430.781648][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2665'. [ 430.802640][T16179] ip6erspan1: entered allmulticast mode [ 431.139975][T16185] syzkaller0: entered promiscuous mode [ 431.148609][T16185] syzkaller0: entered allmulticast mode [ 431.803552][T16196] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 432.800335][T16202] bond11: (slave veth0_to_bond): Releasing active interface [ 432.803855][T16201] scsi_nl_rcv_msg: discarding partial skb [ 432.840288][T16213] netlink: 'syz.0.2675': attribute type 1 has an invalid length. [ 432.878428][T16201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.011437][T16207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2674'. [ 433.011595][T16214] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 433.080025][T16214] bond12 (unregistering): Released all slaves [ 433.528148][T16229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2680'. [ 433.714927][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2683'. [ 434.595431][T16252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2687'. [ 435.078090][T16266] xt_ecn: cannot match TCP bits for non-tcp packets [ 435.692573][T16282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2696'. [ 435.794408][T16282] netlink: 'syz.1.2696': attribute type 9 has an invalid length. [ 435.804886][T16287] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2697'. [ 435.836105][T16286] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2697'. [ 436.331397][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2700'. [ 436.740603][ T50] block nbd1: Receive control failed (result -32) [ 436.740683][ T5632] block nbd1: Receive control failed (result -32) [ 436.755627][ T4940] block nbd1: Receive control failed (result -32) [ 437.100357][T16310] xt_hl: Unknown TTL match mode: 237 [ 437.297461][T16318] net_ratelimit: 22 callbacks suppressed [ 437.297494][T16318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.480643][T16324] netlink: 'syz.4.2706': attribute type 13 has an invalid length. [ 437.565806][T16324] netlink: 'syz.4.2706': attribute type 17 has an invalid length. [ 438.413342][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 438.579451][T16318] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.589515][T16318] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.628188][T16318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.661545][T16324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.671655][T16324] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.691859][T16324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.729263][T16324] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.738900][T16324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.756135][T16324] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.765664][T16324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.787782][T16324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.816089][T16324] veth1_vlan: left promiscuous mode [ 440.824065][T16324] veth0_vlan: left promiscuous mode [ 440.832990][T16324] veth0_vlan: entered promiscuous mode [ 440.844502][T16324] veth1_vlan: entered promiscuous mode [ 440.858395][T16324] veth1_macvtap: left promiscuous mode [ 440.868395][T16324] veth1_macvtap: entered promiscuous mode [ 440.884610][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.896092][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.906748][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.917736][T16324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.932503][T16324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.947444][T16324] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.965261][T16324] 8021q: adding VLAN 0 to HW filter on device bond3 [ 440.981279][T16324] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 441.075803][T11137] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 441.117759][T11137] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 441.167364][T11137] bond3: active interface up! [ 441.951875][T16373] vlan5: entered promiscuous mode [ 442.008691][T16373] bridge0: entered promiscuous mode [ 442.564814][T16391] netlink: 'syz.2.2720': attribute type 1 has an invalid length. [ 442.780169][T16391] 8021q: adding VLAN 0 to HW filter on device bond16 [ 442.797448][T16395] bond16: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 442.824178][T16395] bond16: entered allmulticast mode [ 443.040291][T16391] bond16: (slave ip6gretap3): Enslaving as an active interface with an up link [ 444.160043][T16418] bond10: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 444.208944][T16418] bond10 (unregistering): Released all slaves [ 444.397095][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'. [ 444.513390][T16421] bond7: (slave veth0_to_bond): Releasing backup interface [ 444.631297][T16421] team0: Port device team_slave_0 removed [ 444.655211][T16421] team0: Port device 76žÿ removed [ 444.664784][T16421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.673809][T16421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.687361][T16421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.697775][T16421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.711285][T16421] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 444.743874][T16444] block nbd2: Unsupported socket: should be TCP or UNIX. [ 444.798948][T16444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2736'. [ 444.968999][T16450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2737'. [ 444.983903][T16450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2737'. [ 445.100183][T16458] netlink: 'syz.0.2740': attribute type 1 has an invalid length. [ 445.276910][T16465] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2740'. [ 445.313480][T16458] bond16: entered promiscuous mode [ 445.341895][T16458] 8021q: adding VLAN 0 to HW filter on device bond16 [ 445.427348][T16465] ipvlan0: entered allmulticast mode [ 445.433568][T16465] bond16: entered allmulticast mode [ 445.462838][T16458] ipvlan1: entered allmulticast mode [ 445.469655][T16461] lo speed is unknown, defaulting to 1000 [ 445.583167][T16465] bond16: (slave bridge6): making interface the new active one [ 445.600046][T16465] bridge6: entered promiscuous mode [ 445.620232][T16465] bridge6: entered allmulticast mode [ 445.646611][T16465] bond16: (slave bridge6): Enslaving as an active interface with an up link [ 446.198185][T16473] "syz.4.2744" (16473) uses obsolete ecb(arc4) skcipher [ 446.328036][T16487] 8021q: VLANs not supported on nicvf0 [ 446.362253][T16487] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 446.481499][T16487] vlan0: entered promiscuous mode [ 446.681618][T16504] xt_hashlimit: size too large, truncated to 1048576 [ 446.767135][T16506] @0Ù: renamed from bond_slave_1 [ 447.251701][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'. [ 447.466500][T16519] vlan3: entered promiscuous mode [ 447.539987][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 449.362742][T16500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.220237][T16542] netlink: 'syz.4.2759': attribute type 6 has an invalid length. [ 450.364085][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2760'. [ 450.882857][T16561] FAULT_INJECTION: forcing a failure. [ 450.882857][T16561] name failslab, interval 1, probability 0, space 0, times 0 [ 450.916531][T16561] CPU: 1 UID: 0 PID: 16561 Comm: syz.4.2766 Not tainted syzkaller #0 PREEMPT(full) [ 450.916556][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.916578][T16561] Call Trace: [ 450.916586][T16561] [ 450.916594][T16561] dump_stack_lvl+0xe8/0x150 [ 450.916733][T16561] should_fail_ex+0x40c/0x560 [ 450.916829][T16561] should_failslab+0xa8/0x100 [ 450.916885][T16561] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 450.916916][T16561] ? local_lock_release+0x9c/0x160 [ 450.917032][T16561] ? __alloc_skb+0x1d7/0x7a0 [ 450.917053][T16561] ? __alloc_skb+0x1d7/0x7a0 [ 450.917081][T16561] __alloc_skb+0x1d7/0x7a0 [ 450.917108][T16561] netlink_sendmsg+0x5d4/0xb40 [ 450.917217][T16561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.917249][T16561] ? aa_sock_msg_perm+0xf1/0x1b0 [ 450.917319][T16561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.917345][T16561] sock_sendmsg_nosec+0x13a/0x180 [ 450.917375][T16561] ____sys_sendmsg+0x54e/0x850 [ 450.917432][T16561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.917473][T16561] ? import_iovec+0x78/0xa0 [ 450.917533][T16561] ___sys_sendmsg+0x2a5/0x360 [ 450.917559][T16561] ? __lock_acquire+0x683/0x2cf0 [ 450.917607][T16561] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.917638][T16561] ? kstrtouint+0x6e/0xe0 [ 450.917706][T16561] ? __fget_files+0x2a/0x420 [ 450.917744][T16561] ? __fget_files+0x3a2/0x420 [ 450.917778][T16561] __sys_sendmmsg+0x273/0x4d0 [ 450.917809][T16561] ? __pfx___sys_sendmmsg+0x10/0x10 [ 450.917851][T16561] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 450.917947][T16561] ? ksys_write+0x242/0x270 [ 450.917977][T16561] ? __pfx_ksys_write+0x10/0x10 [ 450.918010][T16561] __x64_sys_sendmmsg+0xa0/0xc0 [ 450.918037][T16561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.918073][T16561] do_syscall_64+0x174/0x580 [ 450.918143][T16561] ? trace_irq_disable+0x3b/0x140 [ 450.918180][T16561] ? clear_bhb_loop+0x40/0x90 [ 450.918203][T16561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.918222][T16561] RIP: 0033:0x7f8cec59de59 [ 450.918241][T16561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.918257][T16561] RSP: 002b:00007f8ced513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 450.918305][T16561] RAX: ffffffffffffffda RBX: 00007f8cec825fa0 RCX: 00007f8cec59de59 [ 450.918318][T16561] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 450.918329][T16561] RBP: 00007f8ced513090 R08: 0000000000000000 R09: 0000000000000000 [ 450.918341][T16561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.918352][T16561] R13: 00007f8cec826038 R14: 00007f8cec825fa0 R15: 00007ffedd7246d8 [ 450.918382][T16561] [ 451.413063][T16546] syzkaller1: entered promiscuous mode [ 451.418569][T16546] syzkaller1: entered allmulticast mode [ 451.551249][T16570] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 451.552873][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2768'. [ 451.813665][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 451.864675][T16578] tipc: Enabled bearer , priority 10 [ 452.126028][T16578] tipc: Enabling of bearer rejected, failed to enable media [ 452.168431][T16587] xt_hashlimit: invalid rate [ 452.197004][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 452.251133][T16587] sctp: [Deprecated]: syz.2.2774 (pid 16587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.251133][T16587] Use struct sctp_sack_info instead [ 452.738120][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 452.747640][T16614] bond5: (slave batadv0): Releasing backup interface [ 452.786934][T16614] bridge_slave_0: left allmulticast mode [ 452.792621][T16614] bridge_slave_0: left promiscuous mode [ 452.798373][T16614] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.881182][T16614] bridge_slave_1: left allmulticast mode [ 452.886863][T16614] bridge_slave_1: left promiscuous mode [ 452.892616][T16614] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.913458][T16619] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2783'. [ 452.944969][T16619] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2783'. [ 453.013877][T16614] bond0: (slave bond_slave_0): Releasing backup interface [ 453.133988][T16614] bond0: (slave bond_slave_1): Releasing backup interface [ 453.153959][T16614] team0: Port device team_slave_1 removed [ 453.160411][T16614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.167801][T16614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.209435][T16614] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 453.349668][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2786'. [ 453.411447][T16632] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 453.684945][T16641] veth1_macvtap: left promiscuous mode [ 453.697855][T16641] macsec0: entered promiscuous mode [ 453.786848][T16647] sctp: [Deprecated]: syz.1.2788 (pid 16647) Use of int in max_burst socket option. [ 453.786848][T16647] Use struct sctp_assoc_value instead [ 453.903161][T16642] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 453.912752][T16642] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 453.957956][T16642] tipc: Enabling of bearer rejected, already enabled [ 454.101211][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2794'. [ 454.134392][T16659] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2795'. [ 454.411804][T16676] syzkaller0: entered promiscuous mode [ 454.420321][T16676] syzkaller0: entered allmulticast mode [ 454.437271][T16676] tipc: Resetting bearer [ 454.794665][T16691] tun0: tun_chr_ioctl cmd 1074025675 [ 454.801526][T16691] tun0: persist enabled [ 454.806040][T16691] tun0: tun_chr_ioctl cmd 1074025675 [ 454.812788][T16691] tun0: persist enabled [ 455.759944][T16719] netlink: 'syz.3.2814': attribute type 11 has an invalid length. [ 456.122070][T16728] __nla_validate_parse: 3 callbacks suppressed [ 456.122087][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 456.231135][T16732] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 456.335759][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'. [ 456.419938][T16741] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2821'. [ 456.563867][T16745] netlink: 'syz.3.2821': attribute type 3 has an invalid length. [ 456.943876][T16743] bridge9: entered promiscuous mode [ 456.977169][T16743] bridge9: entered allmulticast mode [ 457.052953][T16754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2823'. [ 457.063530][T16768] netlink: 'syz.4.2827': attribute type 32 has an invalid length. [ 457.116449][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 457.325681][T16768] bond12: option coupled_control: invalid value (255) [ 457.372564][T16768] bond12 (unregistering): Released all slaves [ 457.480183][T16783] netlink: 'syz.4.2827': attribute type 23 has an invalid length. [ 457.590025][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'. [ 457.700344][T16790] netlink: 'syz.3.2833': attribute type 1 has an invalid length. [ 457.847551][T16790] bond10: entered promiscuous mode [ 457.861933][T16799] netlink: 'syz.0.2836': attribute type 12 has an invalid length. [ 457.879937][T16790] 8021q: adding VLAN 0 to HW filter on device bond10 [ 457.959051][T16802] veth15: entered promiscuous mode [ 458.004478][T16802] bond10: (slave veth15): Enslaving as a backup interface with a down link [ 458.031075][T16806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2838'. [ 458.272326][T16811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2840'. [ 458.401402][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 458.438296][T16811] 8021q: adding VLAN 0 to HW filter on device bond17 [ 458.505151][T16827] bond17: (slave veth19): Enslaving as an active interface with an up link [ 458.508403][T16815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2843'. [ 458.549208][T16816] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 458.571259][T16816] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 458.813281][T16811] bond17: (slave bridge9): Enslaving as an active interface with an up link [ 459.002794][T16834] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 459.105948][T16840] lo speed is unknown, defaulting to 1000 [ 459.895242][T16864] netlink: 'syz.2.2855': attribute type 1 has an invalid length. [ 459.923036][T16864] netlink: 'syz.2.2855': attribute type 2 has an invalid length. [ 459.994011][T16867] 1·: renamed from c0· (while UP) [ 460.039529][T16867] 1·: entered allmulticast mode [ 460.049741][T16867] hsr_slave_0: entered allmulticast mode [ 460.072798][T16867] hsr_slave_1: entered allmulticast mode [ 460.083267][T16867] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 460.368335][ T4940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.387369][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.398168][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.467630][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.479551][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.802387][T16893] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 460.825128][T16893] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 461.152149][T16905] __nla_validate_parse: 144 callbacks suppressed [ 461.152201][T16905] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2866'. [ 461.258407][T16875] lo speed is unknown, defaulting to 1000 [ 461.309032][T16905] netlink: 'syz.4.2866': attribute type 21 has an invalid length. [ 461.324314][T16905] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2866'. [ 461.333413][T16905] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2866'. [ 461.777555][T16914] lo speed is unknown, defaulting to 1000 [ 462.012414][T16910] netlink: 'syz.3.2867': attribute type 4 has an invalid length. [ 462.098946][T16910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2867'. [ 462.107914][T16910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2867'. [ 462.133147][T16910] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2867'. [ 462.436974][T16926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2870'. [ 462.541400][T16926] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2870'. [ 462.639642][ T5632] Bluetooth: hci5: command tx timeout [ 463.146944][T16875] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.154100][T16875] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.161389][T16875] bridge_slave_0: entered allmulticast mode [ 463.173921][T16948] FAULT_INJECTION: forcing a failure. [ 463.173921][T16948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.242533][T16875] bridge_slave_0: entered promiscuous mode [ 463.252831][T16875] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.262684][T16948] CPU: 1 UID: 0 PID: 16948 Comm: syz.2.2873 Not tainted syzkaller #0 PREEMPT(full) [ 463.262707][T16948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.262717][T16948] Call Trace: [ 463.262725][T16948] [ 463.262732][T16948] dump_stack_lvl+0xe8/0x150 [ 463.262765][T16948] should_fail_ex+0x40c/0x560 [ 463.262790][T16948] _copy_from_user+0x2d/0xb0 [ 463.262817][T16948] ___sys_sendmsg+0x1c6/0x360 [ 463.262842][T16948] ? __lock_acquire+0x683/0x2cf0 [ 463.262869][T16948] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.262899][T16948] ? kstrtouint+0x6e/0xe0 [ 463.262943][T16948] ? __fget_files+0x2a/0x420 [ 463.262966][T16948] ? __fget_files+0x3a2/0x420 [ 463.263000][T16948] __sys_sendmmsg+0x273/0x4d0 [ 463.263031][T16948] ? __pfx___sys_sendmmsg+0x10/0x10 [ 463.263067][T16948] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 463.263107][T16948] ? ksys_write+0x242/0x270 [ 463.263138][T16948] ? __pfx_ksys_write+0x10/0x10 [ 463.263171][T16948] __x64_sys_sendmmsg+0xa0/0xc0 [ 463.263198][T16948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.263218][T16948] do_syscall_64+0x174/0x580 [ 463.263242][T16948] ? trace_irq_disable+0x3b/0x140 [ 463.263262][T16948] ? clear_bhb_loop+0x40/0x90 [ 463.263286][T16948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.263304][T16948] RIP: 0033:0x7fcb8ab9de59 [ 463.263321][T16948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.263345][T16948] RSP: 002b:00007fcb8ba5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 463.263365][T16948] RAX: ffffffffffffffda RBX: 00007fcb8ae25fa0 RCX: 00007fcb8ab9de59 [ 463.263378][T16948] RDX: 000000000400008a RSI: 0000200000003cc0 RDI: 0000000000000003 [ 463.263390][T16948] RBP: 00007fcb8ba5d090 R08: 0000000000000000 R09: 0000000000000000 [ 463.263402][T16948] R10: 0000000004001c12 R11: 0000000000000246 R12: 0000000000000001 [ 463.263414][T16948] R13: 00007fcb8ae26038 R14: 00007fcb8ae25fa0 R15: 00007ffe0ec4fb18 [ 463.263444][T16948] [ 463.264100][T16875] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.544664][T16875] bridge_slave_1: entered allmulticast mode [ 463.554134][T16875] bridge_slave_1: entered promiscuous mode [ 463.632112][T16961] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2877'. [ 463.656895][T16875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.674475][T16875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.742582][T16951] netlink: 'syz.3.2874': attribute type 21 has an invalid length. [ 463.829250][T16875] team0: Port device team_slave_0 added [ 463.874649][T16961] syzkaller1: entered promiscuous mode [ 463.880981][T16961] syzkaller1: entered allmulticast mode [ 463.889915][T16875] team0: Port device team_slave_1 added [ 463.923589][T16875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.930556][T16875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.956432][T16875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.007103][T16875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.015005][T16875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.040886][T16875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.111719][T16875] hsr_slave_0: entered promiscuous mode [ 464.118253][T16875] hsr_slave_1: entered promiscuous mode [ 464.460675][T16951] netlink: 'syz.3.2874': attribute type 21 has an invalid length. [ 464.597383][T16970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2881'. [ 464.768355][ T5632] Bluetooth: hci5: command tx timeout [ 464.807455][T16973] syzkaller0: entered promiscuous mode [ 464.812954][T16973] syzkaller0: entered allmulticast mode [ 465.037793][T16983] netlink: 'syz.3.2887': attribute type 2 has an invalid length. [ 465.045556][T16983] nbd: must specify at least one socket [ 465.068613][T16986] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 465.093122][T16986] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 465.107161][T16986] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 465.117329][T16981] lo speed is unknown, defaulting to 1000 [ 465.213049][T16983] bond11: (slave geneve5): Enslaving as an active interface with an up link [ 465.246835][ T1123] netdevsim netdevsim3 netdevsim0: set [1, 3] type 2 family 0 port 20004 - 0 [ 465.255669][ T1123] netdevsim netdevsim3 netdevsim1: set [1, 3] type 2 family 0 port 20004 - 0 [ 465.559724][ T1123] netdevsim netdevsim3 netdevsim2: set [1, 3] type 2 family 0 port 20004 - 0 [ 465.578620][ T1123] netdevsim netdevsim3 netdevsim3: set [1, 3] type 2 family 0 port 20004 - 0 [ 465.602505][T17004] netlink: 'syz.4.2890': attribute type 83 has an invalid length. [ 466.160030][T17018] netlink: 'syz.2.2895': attribute type 1 has an invalid length. [ 466.212879][T17017] __nla_validate_parse: 6 callbacks suppressed [ 466.212898][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2895'. [ 466.234505][T17017] netlink: 'syz.2.2895': attribute type 3 has an invalid length. [ 466.536431][T17020] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2897'. [ 466.882443][ T5632] Bluetooth: hci5: command tx timeout [ 467.116384][T16875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 467.142895][T16875] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.245515][T16875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 467.335248][T16875] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.355534][T16875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 467.378225][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'. [ 467.390350][T16875] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.456946][T16875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 467.484255][T16875] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.495507][T17034] lo speed is unknown, defaulting to 1000 [ 467.577171][T17042] lo speed is unknown, defaulting to 1000 [ 467.914439][T16875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.949111][T16875] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.966597][T17061] nbd2: detected capacity change from 0 to 63 [ 467.978321][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.988295][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.055155][T17065] openvswitch: netlink: Key type 31 is not supported [ 468.140503][ T5632] block nbd2: Receive control failed (result -104) [ 468.159618][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.168804][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.390461][T17070] tipc: Enabling of bearer rejected, failed to enable media [ 468.415388][T17072] veth1_macvtap: entered promiscuous mode [ 468.450770][T17072] macsec2: entered promiscuous mode [ 468.611861][T16875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 468.622228][T16875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.729668][T17083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2909'. [ 468.738642][T17083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2909'. [ 468.914426][T17087] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2911'. [ 468.933668][T17089] netlink: 'syz.2.2912': attribute type 1 has an invalid length. [ 468.979987][ T5632] Bluetooth: hci5: command tx timeout [ 469.114754][T17089] bond18: entered promiscuous mode [ 469.343181][T17089] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 469.458572][T17088] bond18: left promiscuous mode [ 469.646259][T16875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.726261][T16875] veth0_vlan: entered promiscuous mode [ 469.742794][T16875] veth1_vlan: entered promiscuous mode [ 469.798616][T16875] veth0_macvtap: entered promiscuous mode [ 469.816991][T16875] veth1_macvtap: entered promiscuous mode [ 469.837460][T16875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.848537][T17110] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2914'. [ 469.882681][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2914'. [ 469.890743][T16875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.906739][ T7000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.926272][ T7000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.937352][ T7000] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.949076][ T7000] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.900722][T17087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.087607][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.139779][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.144515][T17119] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2916'. [ 472.275808][T11352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.287880][T11352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.311932][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2919'. [ 472.358059][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2919'. [ 472.430449][T17127] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2920'. [ 472.450088][T17127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2920'. [ 472.555939][T17136] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2856'. [ 473.112346][T17143] netlink: 'syz.3.2926': attribute type 1 has an invalid length. [ 473.120599][T17143] netlink: 'syz.3.2926': attribute type 3 has an invalid length. [ 473.179691][T17149] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2925'. [ 473.214589][T17143] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2926'. [ 473.216335][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 473.238961][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 473.275495][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 473.309936][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.319656][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 473.967744][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2931'. [ 473.988040][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2931'. [ 474.010545][T17148] lo speed is unknown, defaulting to 1000 [ 475.127511][T17148] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.137268][T17148] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.150487][T17148] bridge_slave_0: entered allmulticast mode [ 475.167573][T17148] bridge_slave_0: entered promiscuous mode [ 475.212716][T17148] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.253376][T17148] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.274663][T17148] bridge_slave_1: entered allmulticast mode [ 475.283972][T17148] bridge_slave_1: entered promiscuous mode [ 475.347426][T17148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.374190][T17148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.405957][ T50] Bluetooth: hci2: command tx timeout [ 475.565860][T17148] team0: Port device team_slave_0 added [ 475.588931][T17148] team0: Port device team_slave_1 added [ 475.751191][T17148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.783966][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.865457][T17148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.896865][T17148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.906551][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.008523][T17148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.109856][T17148] hsr_slave_0: entered promiscuous mode [ 476.119602][T17148] hsr_slave_1: entered promiscuous mode [ 476.152686][T17148] debugfs: 'hsr0' already exists in 'hsr' [ 476.161599][T17148] Cannot create hsr debugfs directory [ 476.295182][T17235] netlink: 'syz.2.2942': attribute type 2 has an invalid length. [ 476.589359][T17242] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 476.628264][T17148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.650740][T17242] "syz.0.2945" (17242) uses obsolete ecb(arc4) skcipher [ 477.249027][T17148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.292007][T17261] netdevsim netdevsim1: Direct firmware load for á failed with error -2 [ 477.320257][T17261] netdevsim netdevsim1: Falling back to sysfs fallback for: á [ 477.345738][T17259] lo speed is unknown, defaulting to 1000 [ 477.469941][T17247] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 477.559197][ T50] Bluetooth: hci2: command tx timeout [ 477.702113][T17148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.173339][T17278] __nla_validate_parse: 6 callbacks suppressed [ 478.173356][T17278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2955'. [ 478.419959][T17281] "syz.0.2956" (17281) uses obsolete ecb(arc4) skcipher [ 478.471241][T17148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.489582][T17278] team0: entered allmulticast mode [ 478.494726][T17278] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 478.539997][T17283] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 478.676919][T17293] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2960'. [ 479.053004][T17306] team0: left allmulticast mode [ 479.065074][T17306] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 479.453483][T17306] macsec0: left promiscuous mode [ 479.657981][ T50] Bluetooth: hci2: command tx timeout [ 480.064068][T17306] bond2: left promiscuous mode [ 480.069398][T17306] gre1: left promiscuous mode [ 480.118585][T17306] geneve2: left promiscuous mode [ 480.125236][T17306] geneve3: left promiscuous mode [ 480.130202][T17306] geneve3: left allmulticast mode [ 480.142069][T17306] gretap0: left allmulticast mode [ 480.147281][T17306] macvlan3: left allmulticast mode [ 480.161393][T17306] bond5: left promiscuous mode [ 480.167915][T17306] veth5: left allmulticast mode [ 480.249708][T17306] ipvlan3: left promiscuous mode [ 480.268252][T17306] geneve4: left promiscuous mode [ 480.273292][T17306] geneve4: left allmulticast mode [ 480.282074][T17306] ip6erspan1: left allmulticast mode [ 480.290017][T17306] bond10: left promiscuous mode [ 480.295613][T17306] veth15: left promiscuous mode [ 480.322388][T17306] macsec2: left promiscuous mode [ 480.354454][T17303] syzkaller1: entered promiscuous mode [ 480.359955][T17303] syzkaller1: entered allmulticast mode [ 480.394495][ T7000] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.403389][ T7000] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.483843][ T7000] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 34265 - 0 [ 480.492838][ T7000] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 37394 - 0 [ 480.501794][ T7000] netdevsim netdevsim3 netdevsim0: unset [1, 3] type 2 family 0 port 20004 - 0 [ 480.629785][T17343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2966'. [ 480.688569][T17340] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2965'. [ 480.897581][ T7000] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.906482][ T7000] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.915347][ T7000] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 34265 - 0 [ 481.010133][ T7000] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 37394 - 0 [ 481.019120][ T7000] netdevsim netdevsim3 netdevsim1: unset [1, 3] type 2 family 0 port 20004 - 0 [ 481.076156][ T7000] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.152427][ T7000] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.161337][ T7000] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 34265 - 0 [ 481.170291][ T7000] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 37394 - 0 [ 481.179240][ T7000] netdevsim netdevsim3 netdevsim2: unset [1, 3] type 2 family 0 port 20004 - 0 [ 481.279062][ T7000] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.287962][ T7000] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.296837][ T7000] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 34265 - 0 [ 481.305789][ T7000] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 37394 - 0 [ 481.345733][ T7000] netdevsim netdevsim3 netdevsim3: unset [1, 3] type 2 family 0 port 20004 - 0 [ 481.354887][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2972'. [ 481.364583][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2971'. [ 481.480717][T17363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.508226][T17360] ipvlan2: entered allmulticast mode [ 481.514320][T17360] bond1: entered allmulticast mode [ 481.684316][T17366] bond1: (slave ipip0): refused to change device type [ 481.712295][T17148] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 481.722745][T17148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 481.730847][T17148] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 481.740701][T17148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 481.748783][T17148] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 481.769205][ T5632] Bluetooth: hci2: command tx timeout [ 481.780132][T17148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.788545][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2973'. [ 481.788936][T17148] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 481.810241][T17148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.970170][T17148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.009075][T17148] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.065547][ T7000] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.072775][ T7000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.113304][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.121257][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.333379][T17386] syzkaller0: entered promiscuous mode [ 482.338889][T17386] syzkaller0: entered allmulticast mode [ 483.008053][T17405] tipc: Failed to remove unknown binding: 66,1,1/1074666962:2796968785/2796968787 [ 483.354266][T17148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.361222][T17414] Cannot find add_set index 0 as target [ 483.411366][T17419] netlink: 'syz.0.2985': attribute type 12 has an invalid length. [ 483.483290][T17419] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2985'. [ 483.628019][T17423] lo speed is unknown, defaulting to 1000 [ 483.656767][T17426] netlink: 'syz.0.2987': attribute type 2 has an invalid length. [ 483.711706][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'. [ 484.465162][T17148] veth0_vlan: entered promiscuous mode [ 484.492304][T17148] veth1_vlan: entered promiscuous mode [ 484.635580][T17148] veth0_macvtap: entered promiscuous mode [ 484.677852][T17428] netlink: 'syz.2.2986': attribute type 4 has an invalid length. [ 484.695124][T17148] veth1_macvtap: entered promiscuous mode [ 484.717006][T17148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.732736][T17148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.747940][ T7007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.782026][T17453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2993'. [ 484.816600][ T7007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.842998][ T7007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.862364][ T7007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.910909][T17455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2994'. [ 485.134125][ T7000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.162164][ T7000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.282464][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.337125][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2995'. [ 485.339905][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.377717][T17461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2996'. [ 485.387059][T17460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2996'. [ 485.414541][T17461] netlink: 'syz.0.2996': attribute type 32 has an invalid length. [ 485.641297][T17468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2998'. [ 485.779109][T17468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2998'. [ 485.832920][T17463] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 485.847961][T17463] bond2 (unregistering): Released all slaves [ 485.856645][T17472] xt_CT: No such helper "netbios-ns" [ 486.899119][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 486.908467][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 486.918943][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 486.929995][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 486.943681][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.119190][T17497] bridge0: port 3(vlan2) entered blocking state [ 487.125656][T17497] bridge0: port 3(vlan2) entered disabled state [ 487.132048][T17497] vlan2: entered allmulticast mode [ 487.137169][T17497] geneve0: entered allmulticast mode [ 487.144366][T17497] vlan2: entered promiscuous mode [ 487.149406][T17497] geneve0: entered promiscuous mode [ 487.362353][ T7007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.813858][T17493] lo speed is unknown, defaulting to 1000 [ 488.037379][ T7007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.364808][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.611067][ T7007] team0: Port device netdevsim1 removed [ 488.653508][ T7007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.753328][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.772352][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.113236][ T50] Bluetooth: hci0: command tx timeout [ 489.216353][ T7007] netdevsim netdevsim0 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.324183][T17566] bridge0: port 1(ipvlan2) entered blocking state [ 489.330791][T17566] bridge0: port 1(ipvlan2) entered disabled state [ 489.337349][T17566] ipvlan2: entered allmulticast mode [ 489.342644][T17566] bridge0: entered allmulticast mode [ 489.350510][T17566] ipvlan2: left allmulticast mode [ 489.355590][T17566] bridge0: left allmulticast mode [ 489.413511][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.439629][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.601953][T17570] netlink: 'syz.4.3017': attribute type 33 has an invalid length. [ 489.931167][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'. [ 490.265301][ T7007] pim6reg: left allmulticast mode [ 490.330001][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3025'. [ 490.522418][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.711264][ T7007] bond10 (unregistering): (slave ip6gretap0): Releasing active interface [ 491.076195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.191222][ T50] Bluetooth: hci0: command tx timeout [ 491.588399][T17625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3028'. [ 491.647747][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.289537][ T7007] bond1 (unregistering): (slave erspan1): Releasing active interface [ 492.380433][ T7007] bond2 (unregistering): (slave geneve2): Releasing active interface [ 492.444083][ T7881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.488576][ T7007] bond13 (unregistering): (slave bridge0): Releasing backup interface [ 492.514364][ T7007] bond16 (unregistering): (slave bridge6): Releasing backup interface [ 492.561750][ T7007] bridge6 (unregistering): left promiscuous mode [ 492.568216][ T7007] bridge6 (unregistering): left allmulticast mode [ 492.586910][ T7007] bond0 (unregistering): Released all slaves [ 492.599775][ T7007] bond1 (unregistering): Released all slaves [ 492.618473][ T7007] bond2 (unregistering): Released all slaves [ 492.651304][ T7007] bond3 (unregistering): Released all slaves [ 492.670117][ T7007] bond4 (unregistering): Released all slaves [ 492.690385][ T7007] bond5 (unregistering): Released all slaves [ 492.708974][ T7007] bond6 (unregistering): Released all slaves [ 492.727294][ T7007] bond7 (unregistering): Released all slaves [ 492.760369][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.771272][ T7007] bond8 (unregistering): Released all slaves [ 492.790766][ T7007] bond9 (unregistering): Released all slaves [ 492.816624][ T7007] bond10 (unregistering): Released all slaves [ 492.835037][ T7007] bond11 (unregistering): Released all slaves [ 492.853432][ T7007] bond12 (unregistering): Released all slaves [ 492.926950][ T7007] bond13 (unregistering): Released all slaves [ 492.952231][ T7007] bond14 (unregistering): Released all slaves [ 492.970631][ T7007] bond15 (unregistering): Released all slaves [ 493.033263][ T7007] bond16 (unregistering): Released all slaves [ 493.121822][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 493.146200][T17626] vlan3: entered allmulticast mode [ 493.151341][T17626] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 493.299237][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 493.348003][ T50] Bluetooth: hci0: command tx timeout [ 493.529361][ T7007] : left promiscuous mode [ 493.887311][ T7889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.118824][T17654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3034'. [ 494.179074][ T7007] tipc: Disabling bearer [ 494.186781][ T7007] tipc: Left network mode [ 494.249551][T17493] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.254478][T17661] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3036'. [ 494.256702][T17493] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.256859][T17493] bridge_slave_0: entered allmulticast mode [ 494.324677][T17493] bridge_slave_0: entered promiscuous mode [ 494.334856][T17493] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.343299][T17493] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.351277][T17493] bridge_slave_1: entered allmulticast mode [ 494.360132][T17493] bridge_slave_1: entered promiscuous mode [ 494.391602][T17661] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3036'. [ 494.722803][T17493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.740878][T17493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.824847][ T7007] IPVS: stopping backup sync thread 16732 ... [ 495.008153][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.065867][T17685] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3038'. [ 495.143803][T17690] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3042'. [ 495.334891][T17674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.394645][T17690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.425601][T17690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.434943][ T5632] Bluetooth: hci0: command tx timeout [ 495.471517][T17690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.491779][ T7881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.552811][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.618644][T17674] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 495.796916][T17493] team0: Port device team_slave_0 added [ 495.869004][T17493] team0: Port device team_slave_1 added [ 496.061701][T17712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.098865][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.699704][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 496.828081][T17493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.835058][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.860939][T17493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.038795][T17729] nbd: nbd0 already in use [ 497.075661][T17493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.130780][T17493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.184253][T17732] netlink: 'syz.1.3051': attribute type 1 has an invalid length. [ 497.252656][T17493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.303903][T17732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.494440][ T5632] Bluetooth: hci0: command 0x0405 tx timeout [ 497.692459][T17732] vlan4: entered allmulticast mode [ 497.723205][T17732] bond2: entered allmulticast mode [ 497.798900][T17760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3058'. [ 497.917150][T17743] bond2: (slave geneve2): making interface the new active one [ 497.924647][T17743] geneve2: entered allmulticast mode [ 497.932026][T17743] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 498.138366][T13136] block nbd2: Possible stuck request ffff8880273a7000: control (read@0,1024B). Runtime 30 seconds [ 498.150106][T13136] block nbd2: Possible stuck request ffff8880273a71c0: control (read@1024,1024B). Runtime 30 seconds [ 498.161143][T13136] block nbd2: Possible stuck request ffff8880273a7380: control (read@2048,1024B). Runtime 30 seconds [ 498.172014][T13136] block nbd2: Possible stuck request ffff8880273a7540: control (read@3072,1024B). Runtime 30 seconds [ 498.176898][T17493] hsr_slave_0: entered promiscuous mode [ 498.236369][T17774] netlink: 'syz.3.3057': attribute type 32 has an invalid length. [ 498.286612][T17493] hsr_slave_1: entered promiscuous mode [ 498.352010][T17493] debugfs: 'hsr0' already exists in 'hsr' [ 498.399817][T17493] Cannot create hsr debugfs directory [ 499.137659][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 499.417058][ C1] net_ratelimit: 10 callbacks suppressed [ 499.417076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.435452][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.534271][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.690373][ T7007] hsr_slave_0: left promiscuous mode [ 501.135636][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.406454][ T1316] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.589461][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4 [ 501.636841][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.660683][T17832] netlink: 'syz.3.3070': attribute type 11 has an invalid length. [ 501.683240][T17825] lo speed is unknown, defaulting to 1000 [ 502.525145][T17869] netlink: 'syz.2.3073': attribute type 1 has an invalid length. [ 502.533199][T17869] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3073'. [ 502.627005][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'. [ 502.644424][T17873] netlink: 'syz.3.3075': attribute type 10 has an invalid length. [ 502.659494][T17873] netlink: 'syz.3.3075': attribute type 8 has an invalid length. [ 502.667240][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3075'. [ 502.710366][ T7889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.721800][T17875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3074'. [ 502.764948][T17873] geneve6: entered promiscuous mode [ 502.770176][T17873] geneve6: entered allmulticast mode [ 503.015770][T11355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.032624][T11355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.253607][T11355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.258453][T17893] netlink: 'syz.3.3079': attribute type 39 has an invalid length. [ 503.262364][T11355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.841755][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.967190][T17915] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3082'. [ 504.003919][T17918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3083'. [ 504.102393][ T7007] IPVS: stop unused estimator thread 0... [ 504.215273][ T7881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.503666][T17930] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 504.512434][ T7889] IPVS: starting estimator thread 0... [ 504.518755][T17930] IPVS: dh: FWM 3 0x00000003 - no destination available [ 504.676178][T17493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 504.721746][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.729698][T17493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 504.739866][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.747754][T17493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 504.838087][T17941] IPVS: using max 32 ests per chain, 76800 per kthread [ 504.867806][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.930275][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.945531][T17493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 504.965517][T17493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.055816][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 505.236591][T17956] lo speed is unknown, defaulting to 1000 [ 505.312389][T17493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.329394][T17493] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.351920][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.359143][ T7007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.461814][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.468961][ T7007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.620441][T17493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.630809][T17493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.715533][T17993] xt_hashlimit: size too large, truncated to 1048576 [ 505.814140][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.065143][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.441205][ T7881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.931656][T17493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.150685][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.281739][T17493] veth0_vlan: entered promiscuous mode [ 507.295049][T17493] veth1_vlan: entered promiscuous mode [ 507.320844][T17493] veth0_macvtap: entered promiscuous mode [ 507.330794][T17493] veth1_macvtap: entered promiscuous mode [ 507.349204][T17493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.378035][ T7881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.566823][T17493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.688459][T18057] Bluetooth: MGMT ver 1.23 [ 507.840588][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.855729][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.026789][T18059] 8021q: adding VLAN 0 to HW filter on device bond12 [ 508.053291][T18059] bridge0: port 1(bond12) entered blocking state [ 508.071038][T18059] bridge0: port 1(bond12) entered disabled state [ 508.079745][T18059] bond12: entered allmulticast mode [ 508.090641][T18059] bond12: entered promiscuous mode [ 508.103332][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.112327][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.262389][ T7889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.421627][ T7889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.462284][T18085] netlink: 'syz.3.3110': attribute type 11 has an invalid length. [ 508.619383][T18083] syzkaller1: entered promiscuous mode [ 508.639414][T18083] syzkaller1: entered allmulticast mode [ 508.814025][T18087] lo speed is unknown, defaulting to 1000 [ 508.831397][ T7005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.839234][ T7005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.985033][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.012849][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.022617][T18097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.806870][ T4940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 509.817596][ T4940] Bluetooth: hci0: command 0x0405 tx timeout [ 509.819369][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 509.827409][ T4940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 509.838751][ T4940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 509.854505][ T4940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 509.862107][ T4940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 510.480511][ T24] net_ratelimit: 2 callbacks suppressed [ 510.480529][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.940135][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.260197][T18173] netlink: 'syz.3.3125': attribute type 1 has an invalid length. [ 511.497912][T18173] 8021q: adding VLAN 0 to HW filter on device bond13 [ 511.506633][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.597704][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.605854][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.641709][T18165] veth19: entered allmulticast mode [ 511.729850][T18194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3129'. [ 511.741545][T18165] bond13: (slave veth19): Enslaving as an active interface with a down link [ 511.765788][T18182] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 512.016647][T18127] lo speed is unknown, defaulting to 1000 [ 512.033302][ T4940] Bluetooth: hci1: command tx timeout [ 512.351337][T18210] netlink: 'syz.1.3134': attribute type 1 has an invalid length. [ 512.391090][T18210] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3134'. [ 512.462953][T18213] lo speed is unknown, defaulting to 1000 [ 512.468935][T18210] syzkaller1: entered promiscuous mode [ 512.514564][T18210] syzkaller1: entered allmulticast mode [ 512.531081][T18216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.555628][T18172] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3123'. [ 512.584417][T18217] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3136'. [ 512.601214][T18217] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3136'. [ 512.612300][T18172] syzkaller0: entered promiscuous mode [ 512.618108][T18172] syzkaller0: entered allmulticast mode [ 512.712560][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.119469][T18127] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.126622][T18127] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.133766][T18127] bridge_slave_0: entered allmulticast mode [ 513.141421][T18127] bridge_slave_0: entered promiscuous mode [ 513.150774][T18127] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.175747][T18127] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.189819][T18127] bridge_slave_1: entered allmulticast mode [ 513.200111][T18127] bridge_slave_1: entered promiscuous mode [ 513.549016][T18127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.564571][T18127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.677289][T18251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3145'. [ 513.689509][T18237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3142'. [ 513.710115][T18237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3142'. [ 513.725201][T18242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3143'. [ 513.735866][T18237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3142'. [ 513.829496][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.885550][T18256] netlink: 'syz.1.3145': attribute type 10 has an invalid length. [ 514.101624][T18127] team0: Port device team_slave_0 added [ 514.108490][T18269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.118045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.120365][T18127] team0: Port device team_slave_1 added [ 514.140782][ T4940] Bluetooth: hci1: command tx timeout [ 514.200933][T18256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.215873][T18256] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 514.518817][T18277] netlink: 'syz.3.3152': attribute type 1 has an invalid length. [ 514.527722][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.658362][T18283] netlink: 'syz.1.3154': attribute type 3 has an invalid length. [ 514.666125][T18283] netlink: 'syz.1.3154': attribute type 1 has an invalid length. [ 514.755315][T18127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.764236][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.790425][T18127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.805130][T18282] 8021q: adding VLAN 0 to HW filter on device bond14 [ 514.813548][T18285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.828970][T18285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.917723][T18299] netlink: 'syz.4.3158': attribute type 1 has an invalid length. [ 514.957103][T18127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.964078][T18127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.989965][T18127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.003832][T18277] tipc: Resetting bearer [ 515.071851][T18299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.100605][T18302] vlan2: entered allmulticast mode [ 515.105752][T18302] bond1: entered allmulticast mode [ 515.117714][T18299] bond1: (slave geneve2): making interface the new active one [ 515.149704][T18299] geneve2: entered allmulticast mode [ 515.157170][T18299] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 515.276263][T18127] hsr_slave_0: entered promiscuous mode [ 515.282912][T18127] hsr_slave_1: entered promiscuous mode [ 515.289318][T18127] debugfs: 'hsr0' already exists in 'hsr' [ 515.295062][T18127] Cannot create hsr debugfs directory [ 515.531244][T18127] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.567659][T18127] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 515.595393][T18127] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 515.606595][ T7888] net_ratelimit: 8 callbacks suppressed [ 515.606619][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.677416][ T7005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.702186][ T6998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.969704][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.062681][T18127] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.085721][T18127] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 516.123084][T18127] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 516.186839][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.186986][ T4940] Bluetooth: hci1: command tx timeout [ 516.231749][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.317427][T18127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.334559][T18127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 516.344931][T18127] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 516.722114][T18127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.744445][T18367] sctp: [Deprecated]: syz.3.3174 (pid 18367) Use of int in max_burst socket option. [ 516.744445][T18367] Use struct sctp_assoc_value instead [ 516.757470][T18367] __nla_validate_parse: 7 callbacks suppressed [ 516.757486][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3174'. [ 516.807795][T18127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 516.818239][T18127] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 516.845016][T18365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.853923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.893342][ T7008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.902925][ T7008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.986653][T18367] 8021q: adding VLAN 0 to HW filter on device bond15 [ 517.006342][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 517.040176][T18367] bond15 (unregistering): Released all slaves [ 517.378763][T18127] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 517.393653][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.401895][T18127] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 517.437231][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.448808][T18127] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 517.460731][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.468925][T18127] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 517.481115][T18127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.591711][T18127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.598929][T18387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3176'. [ 517.644447][T18127] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.702921][T11355] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.710112][T11355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.760839][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.767991][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.290977][ T4940] Bluetooth: hci1: command tx timeout [ 518.511235][ T4940] Bluetooth: hci0: command 0x0405 tx timeout [ 518.714226][T18127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.758118][T18127] veth0_vlan: entered promiscuous mode [ 518.768415][T18127] veth1_vlan: entered promiscuous mode [ 518.801105][T18127] veth0_macvtap: entered promiscuous mode [ 518.809640][T18127] veth1_macvtap: entered promiscuous mode [ 518.824188][T18127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.875238][T18127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.888750][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.898095][ T7008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.908887][ T7008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.917892][ T7008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.594362][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3183'. [ 520.973279][ C0] net_ratelimit: 12 callbacks suppressed [ 520.973299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.990097][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.102665][T18413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 521.117123][ T6998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.136154][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.164857][ T6998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.287487][ T7008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.321387][ T7008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.373011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.382346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.390543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.400058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.408395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.486002][ T7000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.509974][ T7000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.278035][T18481] sctp: [Deprecated]: syz.2.3190 (pid 18481) Use of int in max_burst socket option. [ 522.278035][T18481] Use struct sctp_assoc_value instead [ 522.415114][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 522.443481][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 522.483329][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 522.491860][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 522.521877][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 522.559186][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 522.707885][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3193'. [ 522.926970][T18504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'. [ 522.966922][T18506] x_tables: unsorted entry at hook 2 [ 522.975162][T18506] xt_hashlimit: size too large, truncated to 1048576 [ 522.992876][T18504] bridge0: port 3(dummy0) entered blocking state [ 522.999393][T18504] bridge0: port 3(dummy0) entered disabled state [ 523.005942][T18504] dummy0: entered allmulticast mode [ 523.013050][T18504] dummy0: entered promiscuous mode [ 523.077198][T18504] netlink: 'syz.2.3194': attribute type 4 has an invalid length. [ 523.355036][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 523.364870][T18504] netlink: 'syz.2.3194': attribute type 10 has an invalid length. [ 523.373078][T18504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3194'. [ 523.385169][T18504] bridge0: port 3(dummy0) entered blocking state [ 523.404297][T18504] bridge0: port 3(dummy0) entered forwarding state [ 523.428699][T18504] dummy0: left allmulticast mode [ 523.433968][T18504] bridge0: port 3(dummy0) entered disabled state [ 523.533588][T18525] syzkaller1: entered promiscuous mode [ 523.539451][T18525] syzkaller1: entered allmulticast mode [ 523.555749][T18525] netlink: 'syz.0.3199': attribute type 1 has an invalid length. [ 523.563571][T18525] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3199'. [ 523.725596][T18483] lo speed is unknown, defaulting to 1000 [ 524.141084][ T7886] IPVS: starting estimator thread 0... [ 524.269884][T18550] lo speed is unknown, defaulting to 1000 [ 524.296822][T18553] xt_bpf: check failed: parse error [ 524.302964][T18546] IPVS: using max 33 ests per chain, 79200 per kthread [ 524.540564][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 524.687389][ T5632] Bluetooth: hci3: command tx timeout [ 524.819993][T18570] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3210'. [ 524.927014][T18566] syzkaller0: entered promiscuous mode [ 524.953015][T18566] syzkaller0: entered allmulticast mode [ 525.533972][T18483] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.541249][T18483] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.548396][T18483] bridge_slave_0: entered allmulticast mode [ 525.556121][T18483] bridge_slave_0: entered promiscuous mode [ 525.639454][T18587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3214'. [ 525.667532][T18483] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.675492][T18483] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.682693][T18483] bridge_slave_1: entered allmulticast mode [ 525.689956][T18483] bridge_slave_1: entered promiscuous mode [ 525.819232][T18587] syzkaller0: entered promiscuous mode [ 525.824747][T18587] syzkaller0: entered allmulticast mode [ 525.859460][T18483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.907052][T18483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.946818][T18483] team0: Port device team_slave_0 added [ 526.004097][T18592] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3214'. [ 526.021045][T18483] team0: Port device team_slave_1 added [ 526.064802][T18483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.111002][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.137320][T18483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.582397][T18610] net_ratelimit: 2412 callbacks suppressed [ 526.582414][T18610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.597134][T18610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.605908][T18610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.629880][T18610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.638359][T18610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.649887][T18609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.735989][ T5632] Bluetooth: hci3: command tx timeout [ 526.851091][T18618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.861818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.963435][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.078409][T11355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.175816][T13136] block nbd2: Possible stuck request ffff8880273a7000: control (read@0,1024B). Runtime 60 seconds [ 528.197177][T13136] block nbd2: Possible stuck request ffff8880273a71c0: control (read@1024,1024B). Runtime 60 seconds [ 528.210748][T13136] block nbd2: Possible stuck request ffff8880273a7380: control (read@2048,1024B). Runtime 60 seconds [ 528.223220][T13136] block nbd2: Possible stuck request ffff8880273a7540: control (read@3072,1024B). Runtime 60 seconds [ 528.822053][ T5632] Bluetooth: hci3: command tx timeout [ 528.931201][T18483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.938209][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.964883][T18483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.361479][T18483] hsr_slave_0: entered promiscuous mode [ 529.398254][T18483] hsr_slave_1: entered promiscuous mode [ 529.420379][T18483] debugfs: 'hsr0' already exists in 'hsr' [ 529.426471][T18483] Cannot create hsr debugfs directory [ 529.432157][T18618] lo speed is unknown, defaulting to 1000 [ 529.805618][T18637] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 530.196227][T18483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.328695][T18644] can: request_module (can-proto-0) failed. [ 530.453393][T18644] batman_adv: batadv0: Adding interface: dummy0 [ 530.462798][T18644] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.492739][T18644] batman_adv: batadv0: Interface activated: dummy0 [ 530.577352][T18483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.676963][T18651] __nla_validate_parse: 1 callbacks suppressed [ 530.676980][T18651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3232'. [ 530.692293][T18651] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3232'. [ 530.744189][T18651] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3232'. [ 530.768902][T18651] lo speed is unknown, defaulting to 1000 [ 530.780396][T18651] lo speed is unknown, defaulting to 1000 [ 530.787181][T18651] lo speed is unknown, defaulting to 1000 [ 530.873683][T18663] netlink: 'syz.1.3235': attribute type 1 has an invalid length. [ 530.904691][T18663] bond3: entered promiscuous mode [ 530.910149][T18663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.937266][ T5632] Bluetooth: hci3: command tx timeout [ 530.966050][T18663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.973034][T18663] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 530.983109][T18663] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 530.996942][T18663] bond3: (slave xfrm1): making interface the new active one [ 531.004244][T18663] xfrm1: entered promiscuous mode [ 531.011571][T18663] xfrm1: left promiscuous mode [ 531.139779][T18483] team0: Port device netdevsim1 removed [ 531.164910][T18483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.192689][T18651] infiniband syz1: set active [ 531.197442][ T5356] lo speed is unknown, defaulting to 1000 [ 531.203563][T18651] infiniband syz1: added lo [ 531.274762][T18651] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 531.290835][T18651] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 531.307969][T18651] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 531.634484][T18651] RDS/IB: syz1: added [ 531.650333][T18651] smc: adding ib device syz1 with port count 1 [ 531.656448][T18684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3239'. [ 531.671788][T18651] smc: ib device syz1 port 1 has no pnetid [ 531.804306][T18483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.822995][ T7000] net_ratelimit: 35 callbacks suppressed [ 531.823011][ T7000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.836975][ T7000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.854510][ T7884] lo speed is unknown, defaulting to 1000 [ 531.866338][T18651] lo speed is unknown, defaulting to 1000 [ 531.888986][T18687] ip6erspan0: entered allmulticast mode [ 532.197312][T18689] syzkaller0: entered promiscuous mode [ 532.202996][T18689] syzkaller0: entered allmulticast mode [ 532.386480][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.937305][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.946508][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.454276][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.069687][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.078877][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.181111][ T7881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.494196][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.076975][T18651] lo speed is unknown, defaulting to 1000 [ 535.445764][T18483] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 535.516587][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.524600][T18483] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 535.557026][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.617946][T18483] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 535.635034][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 535.649768][T18483] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 535.666683][T18483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.768461][T18651] lo speed is unknown, defaulting to 1000 [ 535.871299][T18483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.888752][T18483] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.932472][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.939678][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.018318][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.025489][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.450907][T18730] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3250'. [ 536.594353][T18736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3251'. [ 536.608108][T18730] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3250'. [ 536.988548][T18651] lo speed is unknown, defaulting to 1000 [ 537.257739][ T7886] net_ratelimit: 7 callbacks suppressed [ 537.257756][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.420388][T18756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.456433][T18756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.490203][T18756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.498587][T18651] lo speed is unknown, defaulting to 1000 [ 537.508033][T18756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.518500][T18756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.530047][T18756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.539130][T18756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.548145][T18756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.556981][T18756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.776359][T18762] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3256'. [ 537.892637][T18483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.056759][T18483] veth0_vlan: entered promiscuous mode [ 538.069451][T18483] veth1_vlan: entered promiscuous mode [ 538.103867][T18483] veth0_macvtap: entered promiscuous mode [ 538.112452][T18651] lo speed is unknown, defaulting to 1000 [ 538.115817][T18483] veth1_macvtap: entered promiscuous mode [ 538.145135][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'. [ 538.154012][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'. [ 538.219858][T18767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3257'. [ 538.229885][T18483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.290841][T18483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.306648][T18770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3257'. [ 538.360680][T18770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3257'. [ 538.452778][ T6998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.483442][ T1123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.494473][ T1123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.506447][ T1123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.560248][ T7008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.631693][ T7008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.671823][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.718998][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.756543][T18778] netlink: 'syz.0.3261': attribute type 3 has an invalid length. [ 538.764287][T18778] netlink: 'syz.0.3261': attribute type 1 has an invalid length. [ 538.772007][T18778] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3261'. [ 538.827751][T18651] lo speed is unknown, defaulting to 1000 [ 539.559690][T18651] lo speed is unknown, defaulting to 1000 [ 540.087613][T18823] netlink: 'syz.3.3272': attribute type 13 has an invalid length. [ 540.296670][T18835] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 540.307060][ T5747] IPVS: starting estimator thread 0... [ 540.480059][T18839] netlink: 'syz.0.3274': attribute type 28 has an invalid length. [ 540.506254][T18651] lo speed is unknown, defaulting to 1000 [ 540.591000][T18837] IPVS: using max 31 ests per chain, 74400 per kthread [ 541.101767][T18865] xt_limit: Overflow, try lower: 2/2147483648 [ 542.284623][T18898] __nla_validate_parse: 4 callbacks suppressed [ 542.284727][T18898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3288'. [ 542.428483][T18907] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 542.470993][ T7000] net_ratelimit: 387 callbacks suppressed [ 542.471010][ T7000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.512472][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3294'. [ 542.533624][ T7000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.794943][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3294'. [ 542.815042][T18920] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 542.881007][T18930] batman_adv: batadv0: Adding interface: vlan3 [ 542.919061][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.934146][T18930] batman_adv: batadv0: The MTU of interface vlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.963268][T18930] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 542.985977][T18932] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 542.997586][T18932] bond1 (unregistering): Released all slaves [ 543.076552][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.139060][T18926] syzkaller1: entered promiscuous mode [ 543.146204][T18926] syzkaller1: entered allmulticast mode [ 543.178721][T18930] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.188405][T18930] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.359124][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.405086][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.591929][T18953] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 543.716332][ T3310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.733769][ T3310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.933492][T18967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3307'. [ 544.110867][T18977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3309'. [ 544.138989][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'. [ 544.362701][T18985] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3314'. [ 544.460640][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.037672][T11352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.535276][T19018] lo speed is unknown, defaulting to 1000 [ 545.794491][T19028] syzkaller0: entered promiscuous mode [ 545.799996][T19028] syzkaller0: entered allmulticast mode [ 546.046584][T19018] lo speed is unknown, defaulting to 1000 [ 546.968796][T19050] bond2 (unregistering): Released all slaves [ 547.029785][T19053] macvlan0: entered promiscuous mode [ 547.058671][T19060] macvlan0: entered allmulticast mode [ 547.065213][T19060] veth1_vlan: entered allmulticast mode [ 547.075744][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3335'. [ 547.077198][ T7884] IPVS: starting estimator thread 0... [ 547.085123][T19053] veth1_vlan: left allmulticast mode [ 547.127171][T19053] macvlan0 (unregistering): left promiscuous mode [ 547.133639][T19053] macvlan0 (unregistering): left allmulticast mode [ 547.232867][T19068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3336'. [ 547.241847][T19068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3336'. [ 547.355999][T19062] IPVS: using max 27 ests per chain, 64800 per kthread [ 547.524756][T19077] ip6tnl1: entered allmulticast mode [ 547.568552][T19079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3338'. [ 547.745248][T19086] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 547.794804][ T5720] net_ratelimit: 12 callbacks suppressed [ 547.794822][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.808795][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3338'. [ 547.837383][T19076] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3337'. [ 547.948461][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3337'. [ 548.530900][T19076] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3337'. [ 548.540913][T19090] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 548.548902][T19090] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3340'. [ 548.564332][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.583790][T19090] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR [ 548.588106][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.876897][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.927572][T19096] syzkaller0: entered promiscuous mode [ 548.942914][T19096] syzkaller0: entered allmulticast mode [ 549.356848][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.894660][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.903005][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.184658][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.072553][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.080901][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.546855][T19122] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 552.655470][T19127] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 552.793508][T19140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3354'. [ 552.812491][T19140] sctp: [Deprecated]: syz.1.3354 (pid 19140) Use of int in max_burst socket option. [ 552.812491][T19140] Use struct sctp_assoc_value instead [ 552.923602][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3356'. [ 553.109715][T19154] xt_hl: Unknown Hop Limit match mode: 206 [ 553.198116][T19161] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3361'. [ 553.228845][T19159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3362'. [ 553.244317][T19162] xt_hashlimit: size too large, truncated to 1048576 [ 553.251218][T19159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3362'. [ 553.345600][ T5356] net_ratelimit: 6 callbacks suppressed [ 553.345618][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.446579][T19173] FAULT_INJECTION: forcing a failure. [ 553.446579][T19173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.459957][T19173] CPU: 0 UID: 0 PID: 19173 Comm: syz.2.3363 Not tainted syzkaller #0 PREEMPT(full) [ 553.459981][T19173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 553.459992][T19173] Call Trace: [ 553.460000][T19173] [ 553.460008][T19173] dump_stack_lvl+0xe8/0x150 [ 553.460042][T19173] should_fail_ex+0x40c/0x560 [ 553.460070][T19173] _copy_from_user+0x2d/0xb0 [ 553.460098][T19173] ___sys_sendmsg+0x1c6/0x360 [ 553.460128][T19173] ? __lock_acquire+0x683/0x2cf0 [ 553.460158][T19173] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.460218][T19173] ? __fget_files+0x2a/0x420 [ 553.460241][T19173] ? __fget_files+0x3a2/0x420 [ 553.460273][T19173] __x64_sys_sendmsg+0x1b1/0x290 [ 553.460303][T19173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.460346][T19173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.460367][T19173] do_syscall_64+0x174/0x580 [ 553.460394][T19173] ? trace_irq_disable+0x3b/0x140 [ 553.460417][T19173] ? clear_bhb_loop+0x40/0x90 [ 553.460440][T19173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.460458][T19173] RIP: 0033:0x7f305379de59 [ 553.460475][T19173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.460492][T19173] RSP: 002b:00007f30546fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.460511][T19173] RAX: ffffffffffffffda RBX: 00007f3053a25fa0 RCX: 00007f305379de59 [ 553.460526][T19173] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 553.460537][T19173] RBP: 00007f30546fa090 R08: 0000000000000000 R09: 0000000000000000 [ 553.460549][T19173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.460560][T19173] R13: 00007f3053a26038 R14: 00007f3053a25fa0 R15: 00007fffbfcc5528 [ 553.460590][T19173] [ 553.698399][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.706868][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.823263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.856747][T19183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3365'. [ 553.959457][T19191] gtp0: entered promiscuous mode [ 553.964433][T19191] gtp0: entered allmulticast mode [ 553.971483][T19191] team0: Device gtp0 is of different type [ 554.387513][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'. [ 554.407503][T19206] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3369'. [ 554.426627][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'. [ 554.433822][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.447988][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3371'. [ 554.742563][T19232] ipt_REJECT: ECHOREPLY no longer supported. [ 554.782506][T19232] ipt_REJECT: ECHOREPLY no longer supported. [ 554.882214][T11353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.904189][T11353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.385765][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.555022][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.776588][T19276] openvswitch: netlink: Flow actions attr not present in new flow. [ 555.790200][T19277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.737106][T19318] veth1_to_hsr: entered promiscuous mode [ 556.855598][T19324] netlink: 'syz.0.3401': attribute type 12 has an invalid length. [ 557.240278][T19348] macsec1: entered promiscuous mode [ 557.449286][T19359] netlink: 'syz.4.3415': attribute type 1 has an invalid length. [ 557.763652][T19359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.823281][T19361] macvlan2: entered promiscuous mode [ 557.828716][T19361] macvlan2: entered allmulticast mode [ 557.834544][T19361] bond2: entered allmulticast mode [ 557.839710][T19361] bond2: entered promiscuous mode [ 557.845879][T19361] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 557.896865][T19361] team0: Port device macvlan2 added [ 557.903616][T19369] __nla_validate_parse: 26 callbacks suppressed [ 557.903633][T19369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3419'. [ 558.231458][T19394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 558.276678][T19397] lo speed is unknown, defaulting to 1000 [ 558.335994][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3422'. [ 558.401487][T13136] block nbd2: Possible stuck request ffff8880273a7000: control (read@0,1024B). Runtime 90 seconds [ 558.429917][T13136] block nbd2: Possible stuck request ffff8880273a71c0: control (read@1024,1024B). Runtime 90 seconds [ 558.440833][T13136] block nbd2: Possible stuck request ffff8880273a7380: control (read@2048,1024B). Runtime 90 seconds [ 558.441012][ T7008] net_ratelimit: 9 callbacks suppressed [ 558.441025][ T7008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.451693][T13136] block nbd2: Possible stuck request ffff8880273a7540: control (read@3072,1024B). Runtime 90 seconds [ 558.485109][ T7008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.511985][T19401] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 558.707789][T19410] netlink: 'syz.3.3429': attribute type 1 has an invalid length. [ 558.749232][T19407] lo speed is unknown, defaulting to 1000 [ 558.818619][T19410] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 558.869100][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.943483][T19421] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 558.948795][T19397] lo speed is unknown, defaulting to 1000 [ 558.951238][T19421] nbd: error processing sock list [ 559.012535][T19421] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3432'. [ 559.044535][T19421] ip6tnl1: entered allmulticast mode [ 559.405117][T19429] syzkaller0: entered promiscuous mode [ 559.412716][T19429] syzkaller0: entered allmulticast mode [ 559.448868][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3436'. [ 559.472337][T19431] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 559.484353][T19429] netlink: 'syz.2.3436': attribute type 5 has an invalid length. [ 559.504764][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'. [ 559.553661][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.581177][T19429] geneve2: entered promiscuous mode [ 559.586515][T19429] geneve2: entered allmulticast mode [ 559.593386][ T7008] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 48081 - 0 [ 559.602351][ T7008] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 48081 - 0 [ 559.611179][ T7008] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 48081 - 0 [ 559.620824][ T7008] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 48081 - 0 [ 559.646807][ T7008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.659963][ T7008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.922151][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3439'. [ 559.981537][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.116280][T19407] lo speed is unknown, defaulting to 1000 [ 560.128868][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3441'. [ 560.133401][T19447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3440'. [ 560.137895][T19446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.270539][T19446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.756804][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.765535][ T7007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.078660][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.219273][T19461] bridge_slave_0: left allmulticast mode [ 561.224965][T19461] bridge_slave_0: left promiscuous mode [ 561.230744][T19461] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.264622][T19461] bridge_slave_1: left allmulticast mode [ 561.270300][T19461] bridge_slave_1: left promiscuous mode [ 561.276073][T19461] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.306984][T19461] bond0: (slave bond_slave_0): Releasing backup interface [ 561.324211][T19461] bond0: (slave bond_slave_1): Releasing backup interface [ 561.352631][T19461] team0: Port device team_slave_0 removed [ 561.370389][T19461] team0: Port device team_slave_1 removed [ 562.151296][T19467] tipc: Started in network mode [ 562.156573][T19467] tipc: Node identity dec5b3732f7e, cluster identity 4711 [ 562.164351][T19467] tipc: Enabled bearer , priority 0 [ 562.215822][T19467] syzkaller0: entered promiscuous mode [ 562.221431][T19467] syzkaller0: entered allmulticast mode [ 562.232310][T19467] tipc: Resetting bearer [ 562.249134][T19466] tipc: Resetting bearer [ 564.334060][ T5720] net_ratelimit: 10 callbacks suppressed [ 564.334092][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.350559][ T6998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.368730][ T6998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.285793][T19466] tipc: Disabling bearer [ 565.295896][ T7884] tipc: Node number set to 4055610227 [ 565.450330][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.532903][T19510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3456'. [ 565.557323][T11355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.583015][T11355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.720865][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.730065][T19513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3455'. [ 565.807867][T19524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 565.893443][T19514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.142832][ T5632] block nbd3: Receive control failed (result -1) [ 566.152771][ T5632] [ 566.155121][ T5632] ====================================================== [ 566.162221][ T5632] WARNING: possible circular locking dependency detected [ 566.169295][ T5632] syzkaller #0 Not tainted [ 566.173696][ T5632] ------------------------------------------------------ [ 566.180698][ T5632] kworker/u9:3/5632 is trying to acquire lock: [ 566.186832][ T5632] ffff88806550b860 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 566.196290][ T5632] [ 566.196290][ T5632] but task is already holding lock: [ 566.203642][ T5632] ffff88807773cc68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 566.212593][ T5632] [ 566.212593][ T5632] which lock already depends on the new lock. [ 566.212593][ T5632] [ 566.222979][ T5632] [ 566.222979][ T5632] the existing dependency chain (in reverse order) is: [ 566.231973][ T5632] [ 566.231973][ T5632] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 566.239656][ T5632] __mutex_lock+0x19d/0x1550 [ 566.244763][ T5632] nbd_queue_rq+0x373/0x1150 [ 566.249905][ T5632] blk_mq_dispatch_rq_list+0x499/0x1990 [ 566.256010][ T5632] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 566.262968][ T5632] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 566.269462][ T5632] blk_mq_run_work_fn+0x16c/0x300 [ 566.274991][ T5632] process_scheduled_works+0xa8e/0x14e0 [ 566.281058][ T5632] worker_thread+0xa47/0xfb0 [ 566.286160][ T5632] kthread+0x388/0x470 [ 566.290740][ T5632] ret_from_fork+0x514/0xb70 [ 566.295865][ T5632] ret_from_fork_asm+0x1a/0x30 [ 566.301140][ T5632] [ 566.301140][ T5632] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 566.308346][ T5632] __mutex_lock+0x19d/0x1550 [ 566.313454][ T5632] nbd_queue_rq+0xc1/0x1150 [ 566.318481][ T5632] blk_mq_dispatch_rq_list+0x499/0x1990 [ 566.324536][ T5632] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 566.331379][ T5632] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 566.337870][ T5632] blk_mq_run_work_fn+0x16c/0x300 [ 566.343402][ T5632] process_scheduled_works+0xa8e/0x14e0 [ 566.349461][ T5632] worker_thread+0xa47/0xfb0 [ 566.354559][ T5632] kthread+0x388/0x470 [ 566.359145][ T5632] ret_from_fork+0x514/0xb70 [ 566.364248][ T5632] ret_from_fork_asm+0x1a/0x30 [ 566.369520][ T5632] [ 566.369520][ T5632] -> #4 (set->srcu){.+.+}-{0:0}: [ 566.376632][ T5632] __synchronize_srcu+0xc9/0x2f0 [ 566.382105][ T5632] elevator_switch+0x1e8/0x7b0 [ 566.387429][ T5632] elevator_change+0x2fa/0x480 [ 566.392704][ T5632] elevator_set_default+0x375/0x440 [ 566.398410][ T5632] blk_register_queue+0x3f3/0x4e0 [ 566.404005][ T5632] __add_disk+0x6cb/0xe30 [ 566.408844][ T5632] add_disk_fwnode+0xfb/0x4b0 [ 566.414029][ T5632] nbd_dev_add+0x733/0xb60 [ 566.418960][ T5632] nbd_init+0x15f/0x1e0 [ 566.423741][ T5632] do_one_initcall+0x250/0x870 [ 566.429018][ T5632] do_initcall_level+0x10a/0x1a0 [ 566.434515][ T5632] do_initcalls+0x59/0xa0 [ 566.439351][ T5632] kernel_init_freeable+0x29d/0x3e0 [ 566.445058][ T5632] kernel_init+0x1d/0x1d0 [ 566.449898][ T5632] ret_from_fork+0x514/0xb70 [ 566.455001][ T5632] ret_from_fork_asm+0x1a/0x30 [ 566.460273][ T5632] [ 566.460273][ T5632] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 566.468081][ T5632] __mutex_lock+0x19d/0x1550 [ 566.473183][ T5632] elevator_change+0x1af/0x480 [ 566.478459][ T5632] elevator_set_none+0xb5/0x140 [ 566.483820][ T5632] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 566.490139][ T5632] nbd_start_device+0x189/0xb30 [ 566.495503][ T5632] nbd_genl_connect+0x1597/0x1c10 [ 566.501039][ T5632] genl_family_rcv_msg_doit+0x233/0x340 [ 566.507099][ T5632] genl_rcv_msg+0x614/0x7a0 [ 566.512111][ T5632] netlink_rcv_skb+0x226/0x4a0 [ 566.517390][ T5632] genl_rcv+0x28/0x40 [ 566.521879][ T5632] netlink_unicast+0x7bb/0x940 [ 566.527152][ T5632] netlink_sendmsg+0x813/0xb40 [ 566.532429][ T5632] sock_sendmsg_nosec+0x13a/0x180 [ 566.537962][ T5632] ____sys_sendmsg+0x54e/0x850 [ 566.543238][ T5632] ___sys_sendmsg+0x2a5/0x360 [ 566.548428][ T5632] __x64_sys_sendmsg+0x1b1/0x290 [ 566.553877][ T5632] do_syscall_64+0x174/0x580 [ 566.558980][ T5632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.565378][ T5632] [ 566.565378][ T5632] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 566.573994][ T5632] blk_alloc_queue+0x544/0x690 [ 566.579268][ T5632] __blk_mq_alloc_disk+0x194/0x390 [ 566.584891][ T5632] nbd_dev_add+0x494/0xb60 [ 566.589820][ T5632] nbd_init+0x15f/0x1e0 [ 566.594488][ T5632] do_one_initcall+0x250/0x870 [ 566.599764][ T5632] do_initcall_level+0x10a/0x1a0 [ 566.605212][ T5632] do_initcalls+0x59/0xa0 [ 566.610059][ T5632] kernel_init_freeable+0x29d/0x3e0 [ 566.615767][ T5632] kernel_init+0x1d/0x1d0 [ 566.620604][ T5632] ret_from_fork+0x514/0xb70 [ 566.625706][ T5632] ret_from_fork_asm+0x1a/0x30 [ 566.630975][ T5632] [ 566.630975][ T5632] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 566.638170][ T5632] fs_reclaim_acquire+0x71/0x100 [ 566.643621][ T5632] __kmalloc_noprof+0xbc/0x720 [ 566.648897][ T5632] tls_sw_sendmsg+0x599/0x2860 [ 566.654253][ T5632] sock_sendmsg_nosec+0x90/0x180 [ 566.659701][ T5632] sock_sendmsg+0x1ca/0x2d0 [ 566.664712][ T5632] splice_to_socket+0xb5e/0x12a0 [ 566.670160][ T5632] direct_splice_actor+0x101/0x160 [ 566.675802][ T5632] splice_direct_to_actor+0x57b/0xcb0 [ 566.681781][ T5632] do_splice_direct+0x195/0x290 [ 566.687157][ T5632] do_sendfile+0x52e/0x7c0 [ 566.692088][ T5632] __se_sys_sendfile64+0x144/0x1a0 [ 566.697717][ T5632] do_syscall_64+0x174/0x580 [ 566.702826][ T5632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.709240][ T5632] [ 566.709240][ T5632] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 566.717313][ T5632] __lock_acquire+0x1520/0x2cf0 [ 566.722681][ T5632] lock_acquire+0x106/0x350 [ 566.727693][ T5632] lock_sock_nested+0x41/0x100 [ 566.732967][ T5632] inet_shutdown+0x6a/0x390 [ 566.737990][ T5632] nbd_mark_nsock_dead+0x2cb/0x550 [ 566.743616][ T5632] recv_work+0x1cee/0x1e10 [ 566.748539][ T5632] process_scheduled_works+0xa8e/0x14e0 [ 566.754598][ T5632] worker_thread+0xa47/0xfb0 [ 566.759700][ T5632] kthread+0x388/0x470 [ 566.764281][ T5632] ret_from_fork+0x514/0xb70 [ 566.769384][ T5632] ret_from_fork_asm+0x1a/0x30 [ 566.774659][ T5632] [ 566.774659][ T5632] other info that might help us debug this: [ 566.774659][ T5632] [ 566.784869][ T5632] Chain exists of: [ 566.784869][ T5632] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 566.784869][ T5632] [ 566.797895][ T5632] Possible unsafe locking scenario: [ 566.797895][ T5632] [ 566.805328][ T5632] CPU0 CPU1 [ 566.810681][ T5632] ---- ---- [ 566.816031][ T5632] lock(&nsock->tx_lock); [ 566.820440][ T5632] lock(&cmd->lock); [ 566.826928][ T5632] lock(&nsock->tx_lock); [ 566.833848][ T5632] lock(sk_lock-AF_INET6-NBD); [ 566.838684][ T5632] [ 566.838684][ T5632] *** DEADLOCK *** [ 566.838684][ T5632] [ 566.846813][ T5632] 3 locks held by kworker/u9:3/5632: [ 566.852077][ T5632] #0: ffff888027373140 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 566.863304][ T5632] #1: ffffc9000426fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 566.875039][ T5632] #2: ffff88807773cc68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 566.884340][ T5632] [ 566.884340][ T5632] stack backtrace: [ 566.890216][ T5632] CPU: 1 UID: 0 PID: 5632 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 566.890241][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 566.890252][ T5632] Workqueue: nbd3-recv recv_work [ 566.890272][ T5632] Call Trace: [ 566.890280][ T5632] [ 566.890287][ T5632] dump_stack_lvl+0xe8/0x150 [ 566.890309][ T5632] print_circular_bug+0x2e1/0x300 [ 566.890325][ T5632] check_noncircular+0x12e/0x150 [ 566.890349][ T5632] __lock_acquire+0x1520/0x2cf0 [ 566.890370][ T5632] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 566.890390][ T5632] ? preempt_schedule_notrace+0x57/0x90 [ 566.890409][ T5632] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 566.890425][ T5632] ? __pfx_inet_shutdown+0x10/0x10 [ 566.890444][ T5632] ? inet_shutdown+0x6a/0x390 [ 566.890461][ T5632] lock_acquire+0x106/0x350 [ 566.890478][ T5632] ? inet_shutdown+0x6a/0x390 [ 566.890500][ T5632] lock_sock_nested+0x41/0x100 [ 566.890516][ T5632] ? inet_shutdown+0x6a/0x390 [ 566.890533][ T5632] inet_shutdown+0x6a/0x390 [ 566.890552][ T5632] nbd_mark_nsock_dead+0x2cb/0x550 [ 566.890575][ T5632] recv_work+0x1cee/0x1e10 [ 566.890594][ T5632] ? lockdep_unlock+0x5d/0xd0 [ 566.890610][ T5632] ? __lock_acquire+0x13e8/0x2cf0 [ 566.890631][ T5632] ? __pfx_recv_work+0x10/0x10 [ 566.890646][ T5632] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 566.890662][ T5632] ? process_scheduled_works+0xa20/0x14e0 [ 566.890680][ T5632] ? rcu_is_watching+0x15/0xb0 [ 566.890702][ T5632] ? process_scheduled_works+0xa20/0x14e0 [ 566.890717][ T5632] process_scheduled_works+0xa8e/0x14e0 [ 566.890741][ T5632] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.890758][ T5632] ? assign_work+0x3cf/0x5d0 [ 566.890774][ T5632] worker_thread+0xa47/0xfb0 [ 566.890798][ T5632] kthread+0x388/0x470 [ 566.890816][ T5632] ? __pfx_worker_thread+0x10/0x10 [ 566.890831][ T5632] ? __pfx_kthread+0x10/0x10 [ 566.890850][ T5632] ret_from_fork+0x514/0xb70 [ 566.890871][ T5632] ? __pfx_ret_from_fork+0x10/0x10 [ 566.890890][ T5632] ? __switch_to+0xc89/0x1420 [ 566.890907][ T5632] ? __pfx_kthread+0x10/0x10 [ 566.890925][ T5632] ret_from_fork_asm+0x1a/0x30 [ 566.890944][ T5632] [ 567.015559][T19538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3462'. [ 567.135031][ T5356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.191254][T19538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3462'. [ 567.513765][T11352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.724564][T11353] net_ratelimit: 7 callbacks suppressed [ 569.724584][T11353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.739068][T11353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.254679][ T5747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.394294][ T4990] udevd[4990]: worker [13916] /devices/virtual/block/nbd2 is taking a long time [ 570.843155][T11353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.851726][T11353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.293087][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.695006][ T7884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.773680][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.953570][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.961886][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.813033][ T7888] net_ratelimit: 7 callbacks suppressed [ 574.813052][ T7888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.263106][ T7000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.271665][ T7000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.453129][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog