last executing test programs: 7.282500057s ago: executing program 1 (id=5015): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) r3 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@loopback, 0x4e22, 0x0, 0x4e23, 0xed1, 0xa, 0x20, 0x20, 0x3b}, {0x4, 0x10, 0x9, 0x0, 0x6, 0xe6, 0xffffffffffffffff, 0x400}, {0x4, 0x7, 0xffffffffffffffff, 0x10000}, 0xfffffff9, 0x0, 0x2, 0x1, 0x1, 0x1}, {{@in=@multicast2, 0x4d5, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x2, 0x4, 0x7, 0x5, 0x81}}, 0xe8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xe, 0xffff}, {0xe}}}, 0x24}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000003740)=@delchain={0x1fac, 0x65, 0x302, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xee452dbf66e5abb, 0xd}, {0x4, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x34, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0x10}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xbe}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_POLICE={0x18, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x400}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x18ec, 0x2, [@TCA_FLOW_ACT={0x1490, 0x9, 0x0, 0x1, [@m_ct={0x114, 0xd, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x5, 0xb, 0xd, 0x77e}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_ACTION={0x6, 0x3, 0x22}, @TCA_CT_ZONE={0x6, 0x4, 0x8001}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_ZONE={0x6, 0x4, 0x9}]}, {0x90, 0x6, "787a90f324bfee8e0ed99cc7c47ac6d93e25dcaff3ee974bc578ddf04a351af6dd0ccee30136986891ef733dd35e599ff39dc35123f083be5e960d08683da3bf033200f4a1b11151cf2881e13b47d685587a8151ddcd04eb833630b9cc52100d5fe8924dee77341b055852a27844fcbe6c6fb3c4626a90f2d66b89237fc9b90acf0c64a414042b56bee202c9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0xdf4, 0xf, 0x0, 0x0, {{0xb}, {0xc98, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xcc2}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x2, 0x2, 0x6, 0x1, 0x5, 0x0, 0x8000, 0x8, 0xfffffffe, 0x8, 0x7, 0x91c, 0x3, 0x8001, 0x91, 0x9, 0x8, 0xfffffff9, 0x6, 0x7, 0x8000000, 0xff, 0x10, 0x8, 0xaf, 0x6, 0x2b, 0x1, 0x7a, 0x1, 0x80000001, 0x1000, 0x52, 0x67d, 0x81, 0x7, 0x2d3, 0x4, 0xffff, 0xffff4963, 0x2, 0x713, 0x5, 0x6, 0x1c00, 0x1, 0x1, 0xfffffffc, 0x3, 0x5d82, 0x6, 0x3, 0xfffffffa, 0x9, 0xf, 0x8000, 0x80000001, 0x3, 0x100, 0x3, 0x8001, 0x5, 0x4, 0x28c4e461, 0x0, 0x4, 0x6, 0x6, 0x3ff, 0x3, 0x9, 0x2, 0x2, 0xfffffff7, 0x0, 0x4, 0xc49, 0x2, 0x80000001, 0x0, 0x2, 0x4, 0x1ff, 0x9, 0x6, 0x7, 0x7, 0x1, 0x2, 0x1, 0xaa, 0x7fff, 0x1, 0x6, 0x5, 0x3, 0xfffffffd, 0xb, 0x4, 0xc, 0x6, 0x9, 0x2, 0x0, 0x9, 0xff, 0xffffff8b, 0x7ff, 0x2, 0x7, 0x0, 0x6, 0x1, 0x4, 0x81, 0x9, 0x10000, 0x100, 0xfffffffb, 0x3763, 0x6, 0x8, 0x8001, 0x10001, 0xc, 0x800, 0x4, 0x5, 0x3, 0x9, 0x38, 0x81, 0x80, 0x1000, 0x21, 0x10001, 0x9427, 0x4, 0xc0000000, 0x5, 0x10, 0x6, 0x0, 0x2, 0x7ff, 0x2, 0x8, 0x2, 0x3, 0x7, 0x101, 0x3, 0x3, 0x1bf0, 0xfa6, 0x2, 0x3, 0xfffffffc, 0x43, 0x80000001, 0x800, 0x80000001, 0x768, 0xc, 0x7, 0x9, 0x5, 0x13, 0x7, 0x1ff, 0x1, 0x10000, 0x4, 0x0, 0x1000, 0x40, 0x2, 0xe, 0x6, 0x7, 0x8, 0x5, 0xfffeffff, 0x2a1, 0xf1e, 0xd282, 0x8, 0x2, 0x4, 0x3, 0x9, 0x5, 0x5, 0x37c0, 0xffff0001, 0x9, 0x2, 0x7, 0x3, 0x2, 0x80, 0xfb, 0x8, 0x0, 0x7, 0xffffc3b3, 0x80, 0x5, 0x5, 0x9, 0x0, 0x5, 0x9, 0x1, 0x0, 0xf, 0x5, 0x100, 0xd7, 0x7, 0x6, 0xb, 0x0, 0x3, 0x5, 0x3, 0x3, 0x1000, 0x7ff, 0x6, 0x10000, 0x1ff, 0xe1, 0x6, 0x2, 0x6, 0x153, 0x7, 0x9, 0x5, 0x7, 0x0, 0x5, 0x40, 0x5, 0x4, 0x9, 0xff, 0x1, 0x9, 0x6, 0x7, 0x29, 0xf0b]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7705, 0x1, 0x9, 0x1, 0x7, 0x0, 0xf1c5, 0x9, 0x5000, 0x6, 0x0, 0x5, 0x0, 0x7, 0xc, 0x5, 0x7, 0x3, 0x8, 0x7, 0x80000001, 0x1, 0x8, 0xc9a, 0x1, 0x8, 0x1, 0x2c, 0x10001, 0x862, 0x7, 0xfffffffd, 0x2e, 0x4, 0x2, 0x2, 0x1, 0xfffffffe, 0x9, 0x7, 0x10000, 0x180000, 0x7, 0xa9, 0x8, 0x7, 0x6, 0x3, 0x9, 0x9, 0x9, 0x6, 0x1ca65823, 0x4, 0x3, 0x6, 0x1, 0x698, 0x6, 0x5, 0x6, 0x81, 0x0, 0x8, 0x7, 0x3, 0x80000000, 0x10, 0x6, 0xa7, 0x2, 0x8, 0x2, 0x0, 0x80, 0x2, 0x4, 0x7fffffff, 0x2c84, 0x7, 0x8, 0x0, 0x400, 0x7, 0x5, 0x7f, 0x1e7, 0x3, 0x1, 0x5, 0x7f, 0xffdd, 0x5a, 0x8, 0x7, 0x3, 0x80, 0x1, 0x80000000, 0x9, 0xfff, 0x100, 0x0, 0x0, 0x400, 0x4, 0x380, 0x4, 0x1, 0x2, 0x2, 0xfffffffa, 0x8, 0x9, 0x9, 0xfb, 0x5, 0x40, 0x9, 0x36, 0x5, 0x2, 0xfffff800, 0x6, 0x4, 0xfffffffc, 0xffff, 0xffff, 0x0, 0x0, 0x6, 0x8, 0x2, 0xafd, 0x8, 0xff8, 0xa, 0xffffffff, 0x4, 0xe, 0x6, 0x7791df3b, 0x6, 0x3, 0x7, 0x55f, 0x9, 0x7fff, 0x100, 0x8, 0x5, 0x4, 0x4, 0x5, 0x4, 0x2da, 0x1ff, 0x2, 0x0, 0x8, 0x825, 0x3, 0x7fff, 0x81, 0x1, 0x8, 0xffffffff, 0x146d, 0x5, 0x3f73, 0xfbffffff, 0x3, 0x7, 0x1ff, 0xfffffffd, 0x7fff, 0x8, 0x5, 0x8, 0x5, 0x4, 0x40, 0x7, 0x8, 0x9, 0x5, 0x6, 0xdef, 0x1, 0x6, 0xa2a1, 0x3, 0x2, 0x1ff5, 0xd99e, 0x101, 0x1, 0x101, 0x1, 0x80000000, 0x5, 0x8, 0x5, 0x7, 0x4, 0x7, 0xd, 0xf, 0x3, 0x7, 0x80000001, 0x3, 0xfffffa2f, 0xfffffff7, 0x7, 0x80000000, 0x1000, 0x1, 0x4, 0x6, 0x100, 0x4, 0x3, 0x48, 0xfffffff6, 0xfafd37b5, 0x8, 0x7, 0x80000001, 0x5, 0x9, 0x1, 0x101, 0x1, 0x6, 0x93a, 0x1, 0x9, 0x1, 0x0, 0x0, 0x3, 0x716, 0x5, 0x2, 0xd, 0x2, 0x1, 0x0, 0x6, 0x1, 0x1, 0x2, 0x4, 0x6]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x2, 0x7, 0x7, 0x6, 0x49b, 0x8, 0x2, 0x5, 0x8f30, 0x324, 0xffff, 0x698, 0xb43, 0x3, 0x7ff, 0x2, 0x8, 0xffffffc0, 0x3, 0x3, 0x3, 0x9, 0x9, 0x6, 0x5ced, 0x8, 0x2f21c0b6, 0x2, 0x400, 0x6, 0x2, 0xf00000, 0x1, 0x5, 0x9a, 0x4, 0xfffffffe, 0x40, 0x48bca95b, 0x8000, 0xfff, 0x69d, 0xf, 0xfffff000, 0xfffffff6, 0x0, 0x6b2, 0x2, 0x5, 0x8, 0x5, 0x6, 0x0, 0x4, 0x8000, 0x7, 0x6, 0x2, 0x100, 0x9, 0x6, 0xa8, 0x0, 0x6, 0x6, 0x6, 0x4dd0, 0xf8, 0x3, 0x8, 0xff, 0xaae, 0x4, 0x7f, 0x2, 0x3ff, 0x8001, 0x3, 0x6, 0x101, 0x0, 0x3, 0xfffc, 0x0, 0x7, 0x2, 0x5, 0x4, 0xff, 0x80, 0x7, 0x10, 0x6, 0x1, 0x7f, 0x2, 0x52cb, 0x6, 0x2, 0x6, 0x0, 0x9, 0xc, 0x5, 0x9, 0x8, 0x4, 0x7, 0x0, 0x3, 0x1ff, 0x8000001, 0x318, 0x5, 0x88, 0x8, 0xd, 0x1ff, 0x10000, 0x3, 0x8, 0xcf1, 0x401, 0x0, 0x6, 0x9, 0x4, 0x7f, 0xfffffffd, 0x101, 0xffffff81, 0x9, 0x7, 0x830f, 0x0, 0x7, 0x6, 0x8001, 0x6, 0x1, 0xfffff000, 0x8, 0x3, 0x7, 0x5, 0x1000, 0xe80, 0x9, 0x3ff, 0x2, 0xc78, 0xe8c, 0x8, 0x0, 0x1, 0x8000, 0x3, 0x101, 0x52f87a3c, 0x8, 0x8e, 0xffff500f, 0xd, 0xfffffffe, 0x3, 0x8, 0x80000001, 0x5, 0x9, 0x1, 0x9, 0xd1a, 0x6, 0x5, 0x5, 0x7c, 0x6, 0x6, 0x1, 0x8000, 0x5, 0x6, 0x2, 0x8, 0x0, 0x1, 0x7, 0x10001, 0x0, 0x800, 0xf6, 0x8, 0x6, 0x80000001, 0x0, 0xe6, 0x7, 0x8, 0x6, 0x401, 0x100, 0x4, 0x0, 0x80000000, 0xf, 0x10, 0x7, 0x7, 0x380000, 0x6, 0x81, 0x8, 0x4, 0xfffffffd, 0x4, 0x1ff, 0x7f, 0xffff2fb4, 0x3, 0x3ff, 0x6, 0x10, 0x10001, 0xfff, 0x7, 0x100, 0x7, 0x8, 0x6, 0x8da4, 0x80, 0x9, 0x800, 0x4, 0x9, 0x7fff, 0x8, 0x40, 0x100, 0x6, 0x3, 0x5, 0x6, 0x2, 0x9, 0x3, 0x1e3, 0x80, 0x7, 0x93, 0x3, 0x39c9, 0x935, 0x56d2, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x4, 0x3, 0x4, 0x400, {0x7, 0x0, 0x5, 0x3, 0x800, 0x5}, {0x9, 0x1, 0x6, 0x6, 0x6, 0x3443}, 0x4b, 0x84a1, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]]}, {0x131, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_simple={0x154, 0xf, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9af2, 0x4, 0x2, 0xf18, 0xfffffff1}}, @TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x10000, 0x3, 0x1, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x9, 0xfffffffffffffff8, 0x4, 0x10001}}]}, {0xdf, 0x6, "03b3817bead2b64352ca3079569771ecbcb791502c86dfcd7b62231996251a1b0427346ace3310e60b905f810efdcebcbd1784e3a4ca492c4512e55f0bc84e985af21c302ee249b175e90274ce6abf2c06cfba08c3cfc9e0afaf5162b4c31ca7f2335f8a2855c2591de2de8bd08ab2792f8901c0e11316620fadeab3c78e95c41dcfa5a0d4735a9888092aa884c18f92720db113894d1876fe989d7dbf6669df1c5b4165bf93c54b730c60b861c1fd3ad44ece259785c3f5ee8fa471594cafa05c4074ef082ad2d87a148e450e8c2d6032aeec584e413d2f3cd512"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x104, 0x16, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xd5fa, 0x29b8, 0xffffffffffffffff, 0x2, 0xe2d}, @dev={0xac, 0x14, 0x14, 0x16}, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x8, 0x4, 0x3, 0xffffff99}, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2, 0x2, 0xfffffffb, 0x7}, @loopback, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffa, 0x26, 0x10000000, 0xfff, 0x5}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xd53, 0x20000000, 0x0, 0x4}, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}}}]}, {0x13, 0x6, "4a38f1b93c24b816116ebff3c213ce"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x8c, 0xb, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x22d4, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x80, 0x0, 0x896, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x12ab, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b08, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x7, 0x5, 0x9}}]}, {0xb, 0x6, "f1914ba7fd5d83"}, {0xc, 0x7, {0xbdf5d6310bbbd7a, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x98, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x5a, 0x6, "0929f39b9810d60ba5349da2e6ea090d41f92549077d62e753e680d2f68a8ee926e2d265da3351ca7967a5c981e937bf38af61f7a61b4d9d67b9a7f6cd8a2893514ad949e316deff6a2acf5ccf3854c6aa9baf95c92b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x130, 0x9, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x11, 0x3, '/dev/net/tun\x00'}, @TCA_DEF_DATA={0x9, 0x3, '[^-+\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x4, 0x1, 0x8001}}, @TCA_DEF_DATA={0x6, 0x3, ')\x00'}]}, {0xb9, 0x6, "a197b959ee3a3c1941c810ea02699df31de769d245651486f4ac37dbc73dc739526dc1dccc2cf10e90d44ca830c3f3142d60fb6af9ab0c1ee1cca2c78e4fa7cdb85bce99b6a8e7c5ac733a1963722263d37d142bac14a76b517fc109e222c4fffd216cdce04a954ad7e636ec637c998394008a157283361112fddabe4d1642fe0ec7012d387c479ffe9b55ebb982421ec595a6e0e7901c0a12d3565e09c036f2df43ad11c65cbe9397980767125d7228fc52d059e7"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xd8, 0x1c, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x4, 0x2, 0x8, 0x2}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x67, 0x6, "aa8decdfff850afc4aa860639336e111ef6298b0e96c1b9220e8187da4cae4a57808f9c77cf27be0122fef0edc9ec8ce8eb9ee575bfd578ffdba045c9654c4fe5d24013df012e1a2fb3e5fd525b6c9ba9182d2d4f44e15acbcb854fe94480549300bb4"}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x27}, @TCA_FLOW_ACT={0x148, 0x9, 0x0, 0x1, [@m_sample={0x10c, 0xa, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0xd0, 0x6, "9037f8d9b412f2526f139c88866ebac733d5576504db8ac97a43f86dbe62a0ead46ae183fdac4bfcfd683508c5b85a3e272c3daba7f2af184bf392a060200a68fd12825a51617b0c2107cea84b216e75b064f75a73bdfe00b1657653e9c8d076f5194f94766d757b6a4d2ae8f5fe4325e0b0d8df62ca9e24b504c704fcdeeea52d2a7591405f88e8a72993743e1f9fe7bd6dfa8971ab673069665177068ddad7069c9c5f09367b6e4efec603dfe9f865e917f1a87566459a045fddbcbc0cddce27c276f2da4301451f90ff07"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x38, 0x11, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x40}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x7}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_EMATCHES={0x2ac, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x90, 0x3, 0x0, 0x0, {{0x9}, [@TCA_EM_IPT_MATCH_DATA={0x81, 0x5, "c76a063ffcf470030cfab6b7c482e764767e1005729836e2c92fe7ab55d12749ba3b4655a2ec1b39540f69ec5c7350363a3a99d37e70f898141f376be195ffd111e28ee2d54ded6e3e628152599dce3bccdc03603ec068fcf09c7a8d569633b7d79ade234f7e9b371aae04c4f284c6020dc3410b20151a539935e1c8a5"}]}}]}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xf4, 0x1, 0x0, 0x0, {{0x3406, 0x0, 0x9}, "50b29c9fa1a27c0f1ce5b1573cb07a73947e93f6ab2b7ebba4c954b9968df3f9cffee5178a5d2db6eb23991a88f35e97961b23447a6ed7c84338d16ca4f4a382d18c64794d4d5aa5f520237f7e166c7f1a9cf0dd4fc69fbf2f63f9719e3cdaad0207ae8d3a8b254556a55aebdb295e62c0398ca5f4a7b2e6efa3894e008c5717e58c4f6288006a57d4144203d1fe8ff6763f9df91e32a0c960ea1bebb986bcd52444c62b538a2e49ece5740361491f61dfd925b2c1bb6e44a0ec12234329854e378c7469f75295a19e4851a41930efcc76361b7445946795fbe6cba081007bca805e9d08aa60a114"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x1}, {0x8, 0x0, 0x80, 0x3, 0x9, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x80, 0x1, 0x1}, {0x9, 0x3, 0x3, 0x6, 0x9, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x90, 0x1, 0x0, 0x0, {{0x12, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x66, 0x5, "b5a4f90ddafaee08359b02f27afcc52ed78012818bc485c0f4c0f056bb9b3754b1353adb0a6e5def1bb699d8a27dde110defa5a8d903dd7aa660fef80dc9ab7dd5f5b1bc6bd2c0b485a3063f00c5397833852af44e9e4ada939dfa8ac3927ca05559"}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x44f7, 0x3, 0x80}, {0x4, 0x7c00, 0x8, 0x40}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x5}, {0x4, 0xe14, 0x81, 0x10}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6f98}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6481}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x7f}, {0x280000, 0x966, 0x81, 0x9a}}}]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x610, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x2, 0x0, 0x64, 0x80}, {0x0, 0x2, 0xf5, 0x9}, {0xaa5, 0x10, 0x3, 0x7fffffff}, {0x9, 0x80, 0x0, 0xff}, {0x2ed, 0xc6, 0x0, 0x100}, {0x3, 0x2, 0xe3, 0x200}, {0x1, 0x6, 0x3, 0x5}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FD={0x8, 0x6, r7}, @TCA_BPF_ACT={0x58c, 0x1, [@m_nat={0x98, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x6f, 0x6, "f3d171009607703a6d40d5fa3ccb764bea7dd7e93a43300cfac23ab81acdf293c1e3daf0c9c8829e3a7bc8e72fb03b1b9972aa597c162dd1b0253061c6cb8fb1cf5c7e85aa82c783372fe5bdeab326bc2b53a6dc295f4dab03d268a3285e8d4d8b996a4ff80d00faaa37f0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0xe4, 0x10, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10}]}, {0x9d, 0x6, "a3f656694fb01d053dce1ca57190974998af2612178aea7eeec0d9f713083e57e9687b6c1406377cd00ecf624b8c8f33cffda1249f2d71539d614141b7f643135ff604d303cb79be7618282c634af643caee8c42116abc2bfff649c8b6a44b4bc9d3811a6a686946fb0e11d5be0f23444f16284d91da5b338d8be9b900306ab6f243770c8e63408b9879c108c26ca1cd6b561c2132458b61c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x138, 0xd, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x10, 0xa, 0x7, 0xa885, 0x6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x2, 0x10000000, 0x6, 0x80}, 0x4}}]}, {0xc9, 0x6, "4d88ad315acb2f2f120ee508a9ba25fb35c75997f0191597053c1b5fe7b5dd7b0348dc27ec461c2d3deda128654c0d5e717928214d1af0f9a53f630b59dbf6e3066ebe6a54965633cb4007cb89aa359f3a5c3e7967f0bfc01e44e0fbaa201baea072bf508ed160d4708ac20ff2a446226833b289de2fdee250cf65231752a839a43651d4f79ef2a02f325dadf3163cee5813f857d3c6aa902b092d73a28437d53d2beab1b1a6dd245cc6aa88202b06830a7db7e118884bb1d8cae4b455ce3c55587aec08ba"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x16c, 0xa, 0x0, 0x0, {{0xf}, {0x90, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf19a, 0x20, 0x10000000, 0x6, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x101, 0x5, 0x7, 0x10}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}]}, {0xaf, 0x6, "031fb62318e4c624df91c7c89e229b84142bc2fdccd379afcf4618b2fc692d297aa7b6d2eacf8b8199a348b60c10e41ae241b65880ef884f49c97a41cdf8883d7d9cd4a216bbd7e310d04eff34ac1d5273487b78e7dcceac8dcafc261b10c5bd0ea4ca10645f72542f429a31ae504240d56f9073eb0165174327bfffc843b2682f7fcc898d1574a09c6afa4f341d66ef76620e246f183064899f29b6887ad4007a07ac6e9902a2994b608d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1e, 0x6, "4f8a199514b33fca3fada60a56a64ea0072cd52513dc3516750e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x114, 0x13, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "b9ba35e948fd9be1b59dc0dcf292b042"}]}, {0xd7, 0x6, "3d88d98014cef5fdafb0f940a4a05f7430337bb21a8dd479eb06a5ee34e005a1ed21df17a2059b3bb8579c0a5cf95a88f9fd309aab76d995e400e6c34314d328b8ad904337e8941de097a00220b152d29122efd1dfeea3da7af65627db6ef41eeaf1f63ca5dd5311ddcb6bd25e5eca01f02184cb3e68647191cb26311f1d3924a0c4e41302bfc0cf34df9b11560b5ff9dae72db975c25999b13b5acd0c415d5e7e944a48d656ef38a56f5aeda1db559f945e882813c5b4fc21f1ca6ac03fcf65013d920455bee802c7f2a60ef96c8eb6191cd8"}, {0xc, 0x7, {0x1, 0xcb9bfbfd6323e6f5}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xb}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0x99}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x1fac}, 0x1, 0x0, 0x0, 0xc040}, 0x4000080) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket(0x2c, 0x3, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r12, &(0x7f0000000140), &(0x7f0000000080)=@udp=r11}, 0x20) r13 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r12, &(0x7f0000000180), &(0x7f0000000280)=@tcp6=r13, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 7.164968391s ago: executing program 2 (id=5018): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) (async) write(r0, &(0x7f0000000000)="2e000000010002", 0x7) 7.079887185s ago: executing program 3 (id=5020): socket$unix(0x1, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0x3}}}, 0x24}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.048466052s ago: executing program 2 (id=5021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x5c, 0x433547ab64d46445, 0xb, 0x16, 0x48, 0x4, 0x18, 0x6c]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042dbd7000d867a2abf5b8f0bade495fcd0008003700"/42], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="8000260b0a0002000180c200"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 6.961501058s ago: executing program 0 (id=5022): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000380)={r0, &(0x7f0000000180)='\x00', 0x100000, &(0x7f0000000200)={@align=0x2, {0x6a63, 0x800, 0x4, 0x9}}, 0xffffffe1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000340)=0x4}) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000003c0), 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x2, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x1}, 0x28) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0080006800e97800000000000000000a0000000000000004000400"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4090) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f000000c0c0)={0x0, 0x0, &(0x7f000000c080)={&(0x7f0000006080)=@newtaction={0x18, 0x30, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000041}, 0x8c4) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockname$packet(r9, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r6) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x60, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) 6.959282292s ago: executing program 1 (id=5023): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000108fe32000000e000000200000000000000000000003206000000000000000000000000000000000000000000000000090000000000000001000000ffffffff", @ANYRES16], 0x15c}, 0x1, 0x0, 0x0, 0x4048891}, 0x2000) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000002c0), 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000006c0)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000840)={0x1d, r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$netlink(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) (async) accept$nfc_llcp(r4, 0x0, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffffffffffeb3, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r6, r7, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x4, r6}, 0x6) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) 6.783975178s ago: executing program 4 (id=5025): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x5c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x12, 0x10000000, 0x1, 0x7}}]}}]}, 0x44}}, 0x0) 6.714309411s ago: executing program 2 (id=5026): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x14, 0x2e, 0x9, 0x70bd2d, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20042810}, 0x4090) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4b4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12ba}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3fd}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x88c}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) 6.71031949s ago: executing program 1 (id=5027): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'team_slave_1\x00', {0x3}, 0x3fd}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x101, 0x6, {{0x10, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x80, 0x29, 0x0, @remote, @loopback, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xfb, [@multicast1, @dev={0xac, 0x14, 0x14, 0x9}]}, @timestamp_addr={0x44, 0x1c, 0xc4, 0x1, 0x9, [{@rand_addr=0x64010101, 0xd10}, {@remote, 0x2}, {@private=0xa010100, 0x8}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x9, 0x3, {{0x6, 0x4, 0x0, 0x33, 0x18, 0x68, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) r10 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000007c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x14c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x54}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f9152a31c26221fd08a77e3cceae75793c99060a172540c0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1ebef4c28c586616014ea42c79a8acc3dd21948f00d50350"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f1a8f4c38c2f9a58645ee91e7d59f67a3212df27704e017"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4e470437d9b994e3643efff57ac964c6fcfb01b7e3135654"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9d2319fd12dc96c9b9f4bb4fcd126f23465975faa4d32f2b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000081}, 0x40) (async) connect$can_bcm(r10, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r11}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xd0f, 0x1ffffd, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x2, 0x4, 0x799b, 0x0, 0x28e, 0x68}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r4, @ANYBLOB="08002dbd7000fcdbdf25110000006400018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000700000008000300020000001400020076657468305f746f5f687372000000000800030002000000080003000000000008000300010000001400020070696d72656700000000000000000000040001801400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000008c000180140002006d6163766c616e3100000000000000001400020070696d726567310000000000000000000800030000000000140002007866726d3000000000000000000000001400020076657468315f746f5f626f6e64000000080003000300000014000200697036677265746170300000000000001400020070696d72656731000000000000000000600001801400020076657468305f746f5f68737200000000080003000200000008000300010000001400020067656e6576653000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="1400020070696d367265670000000000000000000800030002000000340001800800030002000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000100000008000100", @ANYRES32=r11, @ANYBLOB="2800018008000100", @ANYRES32=r14, @ANYBLOB="1400026163736563000100"/24, @ANYRES32=r15, @ANYBLOB], 0x1d8}, 0x1, 0x0, 0x0, 0x40050}, 0x4000001) 3.949202854s ago: executing program 0 (id=5028): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)=0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async, rerun: 32) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff004}, {0x16, 0x0, 0x6, 0xfffffffe}]}) (rerun: 32) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async, rerun: 32) socket$kcm(0x29, 0x5, 0x0) (rerun: 32) 3.912321613s ago: executing program 4 (id=5029): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110af000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 3.838453066s ago: executing program 3 (id=5030): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 3.812929517s ago: executing program 3 (id=5031): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000040000000000000022d4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0xffffff3f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x658, 0x4}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r7 = epoll_create(0x1) r8 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$nci(r2, &(0x7f0000000540)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x7, @b={0x2, 0x0, 0x4, 0x1, 0x4, 0x0, 0x8, {}, 0x8, 0x7, 0x9, 0x35}}, 0x10) 3.777038041s ago: executing program 1 (id=5032): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') epoll_create(0x7) (async) r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_create(0x7) (async) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r4, 0x34da2000) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000040)={0x14}) epoll_create1(0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)) poll(&(0x7f0000000040), 0x55, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') 3.710347488s ago: executing program 2 (id=5033): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r3, 0x0, 0x0, 0x80800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRES16=r4, @ANYRES8=r5, @ANYRESHEX=r4, @ANYBLOB="57ab7c7ea4a21c9ae56d847fb4619bbc7eaa5d928204c6d6dce2f1fa49f7c37c8b172f0f4bd419cb1560d81cd4afffd99b1db3f2c7946f6d625346b160defdc82cd8af7a33b9b2aeb1c6c5d5c1a67a2149a8485307cffc61516c425f", @ANYRES32=r4, @ANYRESOCT=r1], 0xc4}, 0x1, 0x0, 0x0, 0x143c797ad3d71e42}, 0x0) 3.709451791s ago: executing program 4 (id=5034): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018"], 0x44}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x60) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000100)=0x1) ppoll(&(0x7f0000000180)=[{r1, 0x80}, {r2, 0x2}, {r1, 0x8130}], 0x3, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000540)=0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r8, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x40}}, 0x20000001) socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000001980)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2", 0x21}], 0x2}, 0x24000008) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) 3.664679862s ago: executing program 0 (id=5035): r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xd) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x4, {0x0, 0x0, 0x4, r5, 0x4300, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1d, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@deltclass={0x3c, 0x29, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xe, 0x5}, {0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @TCA_RATE={0x6, 0x5, {0x6d, 0x2}}, @tclass_kind_options=@c_sfb={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @private, @private}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0xffffffffffffffcb, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48040}, 0x4040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000003000000002000000000000000000000300000000010000000300000002000000000000000000000203000000090000000000000c"], 0x0, 0x4a}, 0x28) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r14, 0x6, 0x21, &(0x7f00000008c0)="f06e00dcbcfd57c354333182854115b7", 0x10) close(r14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r15, @ANYRESOCT=r8], 0x58}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) 3.644594236s ago: executing program 2 (id=5036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="417e4cc04df83b20f575168c240d30000025a978d30200000000000000000000000006000240000000929370dc83be0d3e56bf600005000300880000000ceec902fa0591ce22acdf4f049ee6f0bda6be9e26f32da985ae17f95363295417efaae77443f4e4f6da1aeceb1a0053a1ce123a7c4753dd1d43a7cfc66582245596cfd6076150c7d899e3bde0ada23af975d315d5e5834ec8d926807eb0602e92b3f32da36721e06455212f10ad3ad4cbef55bbd8cc552b45691a2f46d730666f4df97151711a3a9495393e9326b1392b5b70ae2884e21f7e8757f7ee"], 0x30}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x4c, r2, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x4004880) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000000)=0x5) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000240)={r4}, 0x8) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r4, 0x27f}, &(0x7f0000000080)=0x8) 3.518074211s ago: executing program 1 (id=5037): socket(0x2b, 0x80801, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000004000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x22c, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x5b, 0x5b, "7283c85b500ad26be6d817a634b2de6387042f5e51f449e88b83c1511ea6feb9d6486bfb1bd415a0375284361daa6a67fdf6d5d62759612d419a2df95dec3645e85d24677595740dc8e898a8ecf834a96344260dc937ea"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7d}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfff}, @NL80211_ATTR_FRAME_MATCH={0xb4, 0x5b, "a4be5cb526eb195f0f41721e06d749e69fca23bb5810dd67c44966f84f4fbceb29515ee70063ba3aba488025323f70d5a03d2075994047b28bdce88cc1d684f54287e4dc9982463a5344df10bc7255189da51f2e1c73d2109363cbbb4608e17c959a0d84524fb7de084a3f0da8def6c029b99dfa66fbd220737dc901d18f52ad47a6d4603ff14ca920ab9b04c0295c120651869733f244539de34396fbc87b50e0d6fbfd50cc5f43e47543c5ceaf9b2e"}, @NL80211_ATTR_FRAME_MATCH={0xc8, 0x5b, "379e2b30b281e6d52d6d5deea5e1a5117b08073b28b2265a5faf7685df14695cca4bffd28ee694d74e28d141167bef15a387b312f15cf6d9299531ecd09906f3f8a6921239dae3d05d0870bc36e8ef99ef4f694f43e505c4bbf9aebd85f4bf557633c3ed4741e8bae4b21e7859a5ca6c34b0016be0d0433a1c75165b56325e582953272ee5c62f7b63a173a2e93476ef1702a24450b42313442eae0703b83493ebee6d84415928a61f204b562e84b7e833cd30cbfaae6b52103bd76c91e5bc9432fbc142"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x22c}}, 0x40) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf7fb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x800, 0x2, 0x2}, {0x6, 0x8}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44890}, 0x2000000) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f00000004c0)={{0xa, 0x4e24, 0x6d6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0xa, 0x4e22, 0x0, @private0, 0x3}, 0xffffffffffffffff, {[0xffff, 0x9, 0xd106, 0x401, 0xfffffffb, 0xe, 0x401, 0x14000000]}}, 0x5c) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0xd02, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004}, 0x20004800) 572.206364ms ago: executing program 1 (id=5038): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 571.080896ms ago: executing program 2 (id=5039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r10, &(0x7f00000025c0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x0, &(0x7f0000002480)=[{&(0x7f0000001380)=""/4096}, {&(0x7f0000002380)=""/216}], 0x0, &(0x7f00000024c0)=""/232, 0x25}, 0x399c}], 0x51, 0x10022, 0x0) r11 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r13) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r11, 0x84, 0x1a, &(0x7f0000000040)={r14}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x7fffffff}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r15, 0xf}, &(0x7f0000000200)=0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r2}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000711197000000000085100000020000fe0000000000000000186308000b00000000000000040000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 536.487521ms ago: executing program 4 (id=5040): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141200, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000180)={r2, 0x0, 0xff, 0x8, 0x6, 0x7}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x3, 'erspan0\x00', {}, 0x9b}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000340)={0x0, 0xfff, 0x7e}) (async) poll(&(0x7f0000000380)=[{r3, 0x8504}, {r2, 0xa}], 0x2, 0xfffffffc) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r4, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044001}, 0x8010) r6 = accept4(r3, &(0x7f0000000540)=@ax25={{0x3, @rose}, [@remote, @null, @netrom, @rose, @default, @rose, @remote, @rose]}, &(0x7f00000005c0)=0x80, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x158, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x30, 0x2a, [@ssid={0x0, 0xa, @random="99f27a27434ea3431c31"}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4c, 0x1}}, @supported_rates={0x1, 0x5, [{0x5, 0x1}, {0xc}, {0x9, 0x1}, {0x60}, {0x4, 0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x6, 0x8}}, @supported_rates={0x1, 0x5, [{0x5}, {0x12}, {0x3, 0x1}, {0x3}, {0x5}]}, @challenge={0x10, 0x1, 0x73}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x8000, 0x3, 0x4, 0x0, {0x8, 0xc, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x10000, 0x9}}]}, @NL80211_ATTR_IE={0xac, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @perr={0x84, 0x9b, {0x3, 0x9, [{{0x0, 0x1}, @broadcast, 0x3, @value, 0x2e}, {{}, @broadcast, 0x3, @void, 0x20}, {{0x0, 0x1}, @device_b, 0x200, @value=@broadcast, 0x26}, {{0x0, 0x1}, @broadcast, 0xffff, @value=@device_b, 0x25}, {{}, @device_b, 0x6, @void, 0x3f}, {{}, @device_b, 0x8, @void, 0x11}, {{0x0, 0x1}, @device_b, 0x1, @value=@device_b, 0x29}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0xe}, {{0x0, 0x1}, @device_a, 0x8, @value=@device_b, 0x15}]}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000840)={0x7, 0x7, 0x3}, &(0x7f0000000880)=0x28) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x12c, r8, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2daab6bd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x221960d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d84bdcc}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe8, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x306bf638}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13eb2e1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24bd1875}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7415c286}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e59d2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17874a45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cd4e8ef}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10a86582}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23baa1d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2460ecd1}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b59493f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2714f2ea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c886edd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3807cb73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c10176e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4054084}, 0x1) (async) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000c40)={&(0x7f0000000b00), 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x453, 0x2, 0x70bd25, 0x25dfdbff, "7ec9e10ead690e537df03a27c6d3930a988f20291bfac18567a35dd8c0c24542cb1ec9b5d2a19edf464259141d1fda33aec3b9a177604da547e3c21342d143a9ab6c1c9fd6e4b687e875a6177bc9ce6a9b8ad8b4a18293742b8f3229c9e37883d872d26322824af3357928dd1906c1dd536e0749f0e46f0d537ccaee0725f4eb88ae5a8e3aa3c2bf7bc9aee05b70fcecff5e", ["", "", "", ""]}, 0xa4}, 0x1, 0x0, 0x0, 0x11}, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x6c, r9, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400d0}, 0x8080) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000e00)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3b, @bcast, @bpq0, 0x3, [@null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000e80)={0x0, 0xffeb, 0x0, 0x4ff9, 0x918}, &(0x7f0000000ec0)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000f00)={r10, 0x400, 0x30, 0x4, 0x6}, &(0x7f0000000f40)=0x18) socketpair(0x28, 0x800, 0xf017, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r11, 0x118, 0x1, &(0x7f0000000fc0)=0x3fe, 0x4) (async) getsockopt$IP_VS_SO_GET_DAEMON(r12, 0x0, 0x487, &(0x7f0000001000), &(0x7f0000001040)=0x30) 458.412441ms ago: executing program 0 (id=5041): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000100)={0x80}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0xbe, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0xb0, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x23, 0x0, @wg=@initiation={0x1, 0xffffffff, "c63585e7526aab9d42a8b6769138c30a26cd9a7a0950c019b7a55e8a8bfb3e7f", "b87b7a3b656030ba78a7fe3fc60f0232ad2ea02820b11bc983859cfd0f5885df6fe0994fe153a52dcd2c9a84cf7c7741", "874427be29c95b93303cd1be9716d01efc0c9ca574199dd700", {"45227a29c5acbb706c8d97cd14ba0aa2", "2984e0aeafde90bd933b89b3a4beac08"}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) sendto$inet6(r1, &(0x7f0000000040)="3e973f9928001bd570364f7adee314bb705a0e4943e0b5f667769bb28515177fcfc8e7ae2e3806668f1878300d57e36f55dc8af9bc5af3d02caa958247ec21eb087eab38c3026ae7bb8a02bc12fed3d55c364571a470cd0b340a2baa6f19fa7d423906b21cc0f693bc72dafdd07bf87c75a92d5dd38379a30eddcab74002c600476bcb162403bdbaa04893b1ec000370f0b80abf904946dbc2b879205b3a35a725dfe357", 0xa4, 0x4004008, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 422.238831ms ago: executing program 4 (id=5042): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611083000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9feb0100180000000000000090000000900000000b0000000300000000000008010000000c00000001000004070000000b000000020000000400000005000000000000c2050000000a00000000000002050000000c000000000000000200000001000093000000000400000035099f16040000001000000003000084020000000e00000005000000060000000500000000000000080000000e0000000500000003000000003000615f1e00612e2e00"], &(0x7f0000000f40)=""/70, 0xb3, 0x46, 0x0, 0x800, 0x10000}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0xe4e0, 0x1, 0x2, 0x2e404, 0x1, 0x36d, '\x00', 0x0, r0, 0x2, 0x3, 0x3, 0x0, @value=r1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000f010000000000000062ebbc2398648852dc1e12bb7b106bbf14e0169556e0994eb268e38db320351ae82aeaf59ae442171b2750c6bbf2ab3e95c9930d2a469b11c2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000e10acefe6c587bb4220d038f062856e1d0c09f42e3598a085243fef59a81e7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r5, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001002abd70000200000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="000202006b"], 0x38}, 0x1, 0x0, 0x0, 0x44014}, 0x40080c0) sendmmsg$sock(r2, &(0x7f0000000a80)=[{{&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x4000}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000003c0)="19569543d0112417b6f06e44af0f42a2c631a626c9b8d79947c222464403a6e08c21503c4787f4640987bb3746e6bcce03897a779290d38d8a527a2f7f2f996377", 0x41}, {&(0x7f0000000440)="0050fee39cec997835423bf4c97d778a4688997742eb5ab756bb96403b0d1314003f253387f7118c1b93a8a5627a2b8f20d0d8d12f1b3d5db32de89bf648f9f2ac2b68f768422f0ab7c84462dab35d90d70caf8f621d184cea17e236192a1d70e435c1607c34337de5efe589cfc9488714b3ec7e82853f41d113d7376d820550573abe1ae8b5a9b1f791f7caaf0a559e61d895dd428ba09d72a8da6ff8702d6ae2e476ea3ee5fcc2c9ad6e98b02872a1d98927146304ccb3ee3182691967692a38b7d14fc03cbcd79f8d04", 0xcb}, {&(0x7f0000000540)="2d358e72f05ef43090bf95ee5a27c790c08a9a2802ff977c11f54ab762ed2d4c4573981bff7b5731df78fdfa11382d38a8dced4e9278423613436371cf444737a78c8d125942443acfe849b730b41e100116ca152bfcb20d245878fbe6777992ca4acaaa98927bfc8a8f0d84bf8d62297a537f4835719056944b16917c85d4184482426c4ef94a52166db8e415390d31ea6e3462894a3a8d5b60ee0f33de9d98ee8952d76eea194b88f5888d8ead5643e4a66c28d274b4ae15225a40f96234a43dffffb5e253ea55f6bdf20b4fc4cc6d2dfee72a3c91798c4766ea61df0f762c", 0xe0}, {&(0x7f0000000640)="690108ad46214da1f0bc48c8697ed9fa97e734b2a865de397813d01a8004", 0x1e}, {&(0x7f0000000680)="f8fcf3bedca6342372589af40f1cab20a4650dd515be35d47d709b500711d907b00655697fb016b8b0b7d1ba0eee7e5335a5fe13ac2798f114672775bc9ceda57b2560bc95dbee1bb3e99bdc7a779db2290f32b27f7ff78b5af6e6c537cbcfa2af73bfd553685c1fdb7398cace11d1be0ea1193734d076ca53c216dda00de353d5c0c40a85137aaff5f473afe444d3404feae5e4ca4baff3d9deb785bb31f6cdd9cb369544b11b85506eecb0adeec8780bd4e22bd7a388f233f02782d2047745f9028ff10bc84f43dcf0ab2e96e90e81ad4a961a5fae85376e2a7829fd149e291caa8302adc9265962e7219460d907e0c97e3de1c307", 0xf6}, {&(0x7f0000000780)="8c1110f0938de71569b9f2e936f211af814320d05ce8f611e1b29d70d4372ced2262ef9271f540fee6f1ae7288660f4375e1c9baeaf54ff2eeeb522b485d855161e0435be778a56898aacac69a581b5a2ecf90a079748c327f324ce8333d3f163cc9c81209ea8e111d3fc371146e51b32187a64fd1f4d2a147f0", 0x7a}, {&(0x7f0000000800)="20bf0d09bfdd3e662cd03a66d2f8af31ca870280fabfb98e5b76cc18f7d74ee88549f43c2b1a3c72572c839325b5cd1303e0a8f8eeb99b864722ca8cd95aedbcad02fcca01b6fa7798600a86d16cbae528477f9519a2d5514cadb68a58243d215accc8b009efb1d8565c7af79dac8718929a707c5b6298327628735637df639bd95a37ff800f1eb2b154cae2c9c5d60d94cc34d1cff6b75dbb605cca17", 0x9d}, {&(0x7f00000008c0)="76ec73e4259102e912ca49fb36a85a62e087f0b9909f810cfe3da7e848d0bde9b43406bb66d79bd953f7589f350d9fcd3919cd19ca5f1d567f5fd91b400fa900126ceb75", 0x44}], 0x8, &(0x7f00000009c0)}}], 0x1, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500001a5ee5141f87362c90e2196ee6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd02) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r12, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r13, 0x11b, 0x5, &(0x7f0000000200)=0x82, 0x4) 388.73898ms ago: executing program 3 (id=5043): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2b, 'rlimit'}]}, 0x8) 197.410495ms ago: executing program 3 (id=5044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 147.020329ms ago: executing program 0 (id=5045): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r0, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) (async) r1 = socket$caif_stream(0x25, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@srh={0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x51}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) connect$caif(r1, &(0x7f0000000100)=@rfm={0x25, 0x0, "d034e68fae880aca9de7751355b0eb74"}, 0x18) 146.143841ms ago: executing program 3 (id=5046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) (async, rerun: 64) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000000)) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x20, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) 144.323515ms ago: executing program 4 (id=5047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r2 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r4}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 0s ago: executing program 0 (id=5048): r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000004c00)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000007e00)=[{{&(0x7f0000005280)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000005300)=[{&(0x7f00000052c0)="e7", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000140)={0x3, 0x0, 0x6b, &(0x7f00000000c0)=""/107}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r3, 0x80000001}, &(0x7f0000000040)=0x8) kernel console output (not intermixed with test programs): llmulticast mode [ 445.520751][T18216] bridge_slave_0: entered promiscuous mode [ 445.539534][T18216] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.551694][T18216] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.563213][T18216] bridge_slave_1: entered allmulticast mode [ 445.586369][T18216] bridge_slave_1: entered promiscuous mode [ 445.723612][T18216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.739702][T18216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.802921][T18309] syzkaller0: entered promiscuous mode [ 445.829383][T18309] syzkaller0: entered allmulticast mode [ 445.885616][ T51] Bluetooth: hci2: command tx timeout [ 445.957559][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 445.965640][ C1] lec:lec_tx_timeout: lec0 [ 445.975909][T18216] team0: Port device team_slave_0 added [ 445.991313][T18319] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 446.003401][T18216] team0: Port device team_slave_1 added [ 446.037791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.081681][T18216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.102414][T18216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.172693][T18337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.197513][T18216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.209421][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.246512][T18216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.258492][T18216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.322393][T18216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.419487][T18216] hsr_slave_0: entered promiscuous mode [ 446.426422][T18216] hsr_slave_1: entered promiscuous mode [ 446.452473][T18216] debugfs: 'hsr0' already exists in 'hsr' [ 446.472538][T18216] Cannot create hsr debugfs directory [ 446.533807][T18351] ipt_ECN: cannot use operation on non-tcp rule [ 446.557731][T18347] sctp: [Deprecated]: syz.4.3322 (pid 18347) Use of int in max_burst socket option deprecated. [ 446.557731][T18347] Use struct sctp_assoc_value instead [ 446.802003][T18216] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.836115][T18216] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 446.949964][T18216] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.969871][T18216] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 447.077569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.092297][T18216] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.127695][T18216] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 447.159492][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.241283][T18216] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.273783][T18216] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 447.502490][T18381] lo speed is unknown, defaulting to 1000 [ 447.598912][T18216] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 447.622549][T18216] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 447.644976][T18216] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 447.674944][T18216] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 447.688630][T18389] __nla_validate_parse: 5 callbacks suppressed [ 447.688649][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 447.748249][T18391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3336'. [ 447.772287][T18391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3336'. [ 447.960067][ T51] Bluetooth: hci2: command tx timeout [ 448.117581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.162931][T18216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.194778][ T10] IPVS: starting estimator thread 0... [ 448.200777][T18416] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20265 [ 448.276826][T18216] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.307626][T18415] IPVS: using max 28 ests per chain, 67200 per kthread [ 448.362224][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.369513][ T9065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.400753][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.408008][ T9065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.416854][T18420] geneve0: entered promiscuous mode [ 448.422579][T18420] geneve0: entered allmulticast mode [ 448.454641][T18420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3342'. [ 448.506913][T18426] netlink: 'syz.3.3344': attribute type 1 has an invalid length. [ 448.519746][T18426] netlink: 'syz.3.3344': attribute type 3 has an invalid length. [ 448.531068][T18426] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3344'. [ 448.541234][T18426] NCSI netlink: No device for ifindex 813332851 [ 448.791979][T18432] netlink: 'syz.4.3346': attribute type 12 has an invalid length. [ 448.848042][T18434] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 448.942319][T18432] bond2: option primary_reselect: invalid value (255) [ 448.954514][T18432] bond2 (unregistering): Released all slaves [ 448.987018][T18444] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 449.001302][T18444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3348'. [ 449.157887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.224424][T18216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.346086][T18457] IPv6: sit1: Disabled Multicast RS [ 449.359602][T18457] sit1: entered allmulticast mode [ 449.403198][T18216] veth0_vlan: entered promiscuous mode [ 449.424715][T18216] veth1_vlan: entered promiscuous mode [ 449.539934][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3355'. [ 449.549578][T18464] bond9 (unregistering): Released all slaves [ 449.583356][T18468] ip6tnl1: entered allmulticast mode [ 449.603678][T18470] pim6reg: entered allmulticast mode [ 449.609458][T18462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3352'. [ 449.620654][T18470] pim6reg: left allmulticast mode [ 449.716039][T18216] veth0_macvtap: entered promiscuous mode [ 449.722937][ T11] block nbd1: Possible stuck request ffff888026b70000: control (read@0,1024B). Runtime 120 seconds [ 449.734900][ T11] block nbd1: Possible stuck request ffff888026b70200: control (read@1024,1024B). Runtime 120 seconds [ 449.746930][ T11] block nbd1: Possible stuck request ffff888026b70400: control (read@2048,1024B). Runtime 120 seconds [ 449.758818][ T11] block nbd1: Possible stuck request ffff888026b70600: control (read@3072,1024B). Runtime 120 seconds [ 449.794205][T18216] veth1_macvtap: entered promiscuous mode [ 449.834179][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3356'. [ 449.870543][T18477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3356'. [ 449.873386][T18216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.930662][T18216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.950315][ T1025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.972949][ T1025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.007308][ T1025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.028205][ T1025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.051302][ T51] Bluetooth: hci2: command tx timeout [ 450.063027][T18484] wireguard: wg2: Could not create IPv4 socket [ 450.197615][ C1] net_ratelimit: 2 callbacks suppressed [ 450.197636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.312006][ T9060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.332165][ T9060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.360528][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.404973][T18498] veth3: entered allmulticast mode [ 450.462411][T18500] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 450.491338][T18500] bond1 (unregistering): Released all slaves [ 450.647619][ T9100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.655536][ T9100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.825417][T18534] netlink: 'syz.1.3372': attribute type 16 has an invalid length. [ 450.867626][T18534] netlink: 'syz.1.3372': attribute type 17 has an invalid length. [ 450.912178][T18534] gre0: left promiscuous mode [ 450.916963][T18534] gre0: left allmulticast mode [ 450.951893][T18534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.972809][T18542] netlink: 'syz.2.3374': attribute type 2 has an invalid length. [ 451.237560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.643240][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 451.651146][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.668576][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 451.676923][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 451.687089][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 451.695327][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 451.824625][T18585] lo speed is unknown, defaulting to 1000 [ 451.952657][T18596] netlink: 'syz.0.3387': attribute type 16 has an invalid length. [ 451.965451][T18596] netlink: 'syz.0.3387': attribute type 17 has an invalid length. [ 451.992296][T18596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.117690][ T51] Bluetooth: hci2: command tx timeout [ 452.263521][T18585] chnl_net:caif_netlink_parms(): no params data found [ 452.280258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.362832][T18585] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.370234][T18585] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.378387][T18585] bridge_slave_0: entered allmulticast mode [ 452.385939][T18585] bridge_slave_0: entered promiscuous mode [ 452.394839][T18585] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.402132][T18585] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.409853][T18585] bridge_slave_1: entered allmulticast mode [ 452.417571][T18585] bridge_slave_1: entered promiscuous mode [ 452.456794][T18585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.470737][T18585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.506155][T18585] team0: Port device team_slave_0 added [ 452.515442][T18585] team0: Port device team_slave_1 added [ 452.549910][T18585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.556992][T18585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.583953][T18585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.596716][T18585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.603885][T18585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.632368][T18585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.690211][T18585] hsr_slave_0: entered promiscuous mode [ 452.697120][T18585] hsr_slave_1: entered promiscuous mode [ 452.706022][T18585] debugfs: 'hsr0' already exists in 'hsr' [ 452.711929][T18585] Cannot create hsr debugfs directory [ 452.843616][T18585] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.856813][T18585] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 52193 - 0 [ 452.924317][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.945354][T18585] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.958315][T18585] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 52193 - 0 [ 453.023167][T18585] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.034272][T18585] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 52193 - 0 [ 453.101272][T18585] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.111693][T18585] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 52193 - 0 [ 453.317658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.718115][ T51] Bluetooth: hci3: command tx timeout [ 454.171995][T18557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.184257][T18576] __nla_validate_parse: 6 callbacks suppressed [ 454.184275][T18576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3381'. [ 454.281984][T18585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 454.325108][T18585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 454.354331][T18585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 454.358147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.425732][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'. [ 454.435101][T18585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 454.482673][T18620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3392'. [ 454.496991][T18615] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 454.510329][T18620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3392'. [ 454.531504][T18620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3392'. [ 454.653351][T18634] netlink: 'syz.0.3397': attribute type 16 has an invalid length. [ 454.676390][T18634] netlink: 'syz.0.3397': attribute type 17 has an invalid length. [ 454.704475][T18634] FAULT_INJECTION: forcing a failure. [ 454.704475][T18634] name failslab, interval 1, probability 0, space 0, times 0 [ 454.720251][T18634] CPU: 1 UID: 0 PID: 18634 Comm: syz.0.3397 Not tainted syzkaller #0 PREEMPT(full) [ 454.720279][T18634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 454.720293][T18634] Call Trace: [ 454.720301][T18634] [ 454.720310][T18634] dump_stack_lvl+0xe8/0x150 [ 454.720347][T18634] should_fail_ex+0x412/0x560 [ 454.720387][T18634] should_failslab+0xa8/0x100 [ 454.720417][T18634] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 454.720444][T18634] ? __alloc_skb+0x1d0/0x7d0 [ 454.720466][T18634] ? __local_bh_enable_ip+0xd0/0x130 [ 454.720500][T18634] __alloc_skb+0x1d0/0x7d0 [ 454.720530][T18634] rtmsg_ifinfo_build_skb+0x84/0x260 [ 454.720572][T18634] rtmsg_ifinfo+0x8c/0x1a0 [ 454.720612][T18634] netif_state_change+0x297/0x3a0 [ 454.720638][T18634] ? __pfx_netif_state_change+0x10/0x10 [ 454.720666][T18634] ? netif_change_flags+0xe8/0x1a0 [ 454.720699][T18634] do_setlink+0xbf6/0x4590 [ 454.720729][T18634] ? trace_sched_exit_tp+0x3a/0x150 [ 454.720764][T18634] ? __pfx_do_setlink+0x10/0x10 [ 454.720789][T18634] ? __lock_acquire+0x6b5/0x2cf0 [ 454.720833][T18634] ? do_raw_spin_lock+0x12b/0x2f0 [ 454.720858][T18634] ? do_raw_spin_lock+0x12b/0x2f0 [ 454.720894][T18634] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 454.720920][T18634] ? lockdep_hardirqs_on+0x7a/0x110 [ 454.720951][T18634] ? __mutex_lock+0xd09/0x1300 [ 454.720986][T18634] ? __mutex_lock+0x5ac/0x1300 [ 454.721027][T18634] ? rtnl_newlink+0x883/0x1bb0 [ 454.721050][T18634] ? __pfx___mutex_lock+0x10/0x10 [ 454.721082][T18634] ? ns_capable+0x89/0xe0 [ 454.721112][T18634] rtnl_newlink+0x14ca/0x1bb0 [ 454.721142][T18634] ? __pfx_rtnl_newlink+0x10/0x10 [ 454.721160][T18634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.721208][T18634] ? kasan_quarantine_put+0xbb/0x1f0 [ 454.721227][T18634] ? lockdep_hardirqs_on+0x7a/0x110 [ 454.721255][T18634] ? kmem_cache_free+0x187/0x630 [ 454.721275][T18634] ? nlmon_xmit+0xb0/0x100 [ 454.721307][T18634] ? __lock_acquire+0x6b5/0x2cf0 [ 454.721335][T18634] ? __local_bh_enable_ip+0xd0/0x130 [ 454.721359][T18634] ? lockdep_hardirqs_on+0x7a/0x110 [ 454.721382][T18634] ? __dev_queue_xmit+0x277/0x3890 [ 454.721406][T18634] ? __local_bh_enable_ip+0xd0/0x130 [ 454.721428][T18634] ? __dev_queue_xmit+0x277/0x3890 [ 454.721472][T18634] ? __pfx_rtnl_newlink+0x10/0x10 [ 454.721492][T18634] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 454.721515][T18634] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 454.721534][T18634] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 454.721552][T18634] ? ref_tracker_free+0x693/0x840 [ 454.721569][T18634] ? __copy_skb_header+0xa3/0x4a0 [ 454.721594][T18634] ? __pfx_ref_tracker_free+0x10/0x10 [ 454.721621][T18634] netlink_rcv_skb+0x232/0x4b0 [ 454.721655][T18634] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 454.721676][T18634] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.721728][T18634] ? netlink_deliver_tap+0x2e/0x1b0 [ 454.721757][T18634] netlink_unicast+0x80f/0x9b0 [ 454.721793][T18634] ? __pfx_netlink_unicast+0x10/0x10 [ 454.721823][T18634] ? netlink_sendmsg+0x650/0xb40 [ 454.721841][T18634] ? skb_put+0x11b/0x210 [ 454.721866][T18634] netlink_sendmsg+0x813/0xb40 [ 454.721893][T18634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.721916][T18634] ? aa_sock_msg_perm+0xf1/0x1b0 [ 454.721946][T18634] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.721970][T18634] ____sys_sendmsg+0x972/0x9f0 [ 454.722008][T18634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.722040][T18634] ? import_iovec+0x73/0xa0 [ 454.722065][T18634] ___sys_sendmsg+0x2a5/0x360 [ 454.722094][T18634] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.722148][T18634] ? __fget_files+0x2a/0x420 [ 454.722164][T18634] ? __fget_files+0x3a0/0x420 [ 454.722189][T18634] __x64_sys_sendmsg+0x1bd/0x2a0 [ 454.722216][T18634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.722250][T18634] ? __pfx_ksys_write+0x10/0x10 [ 454.722280][T18634] do_syscall_64+0x14d/0xf80 [ 454.722304][T18634] ? trace_irq_disable+0x3b/0x150 [ 454.722320][T18634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.722339][T18634] ? clear_bhb_loop+0x40/0x90 [ 454.722361][T18634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.722379][T18634] RIP: 0033:0x7fa84739c819 [ 454.722397][T18634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.722413][T18634] RSP: 002b:00007fa848196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.722433][T18634] RAX: ffffffffffffffda RBX: 00007fa847615fa0 RCX: 00007fa84739c819 [ 454.722446][T18634] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 454.722458][T18634] RBP: 00007fa848196090 R08: 0000000000000000 R09: 0000000000000000 [ 454.722469][T18634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.722479][T18634] R13: 00007fa847616038 R14: 00007fa847615fa0 R15: 00007ffee44232f8 [ 454.722508][T18634] [ 455.216873][T18634] net_ratelimit: 1 callbacks suppressed [ 455.216886][T18634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.240702][T18640] mac80211_hwsim hwsim52 syzkaller0: entered promiscuous mode [ 455.256360][T18640] mac80211_hwsim hwsim52 syzkaller0: entered allmulticast mode [ 455.397912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.505517][T18585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.533764][T18585] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.592928][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.600220][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.670015][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.677255][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.798500][ T51] Bluetooth: hci3: command tx timeout [ 456.069369][T18683] netlink: 'syz.1.3409': attribute type 16 has an invalid length. [ 456.113922][T18683] netlink: 'syz.1.3409': attribute type 17 has an invalid length. [ 456.122891][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.191423][T18683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 456.232354][T18691] nbd: must specify a size in bytes for the device [ 456.437750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.513272][T18698] IPVS: length: 8 != 1152 [ 456.690959][T18703] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3413'. [ 456.693418][T18585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.820576][T18585] veth0_vlan: entered promiscuous mode [ 456.849933][T18585] veth1_vlan: entered promiscuous mode [ 456.984984][T18585] veth0_macvtap: entered promiscuous mode [ 457.012840][T18585] veth1_macvtap: entered promiscuous mode [ 457.054940][T18585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.111823][T18717] netlink: 'syz.4.3417': attribute type 29 has an invalid length. [ 457.136686][T18585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.161514][T18717] netlink: 'syz.4.3417': attribute type 29 has an invalid length. [ 457.186470][ T9094] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.205300][ T9094] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.242356][ T9094] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.256953][ T9094] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.302565][T18723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3419'. [ 457.330645][T18722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3419'. [ 457.353951][T18725] netlink: 'syz.1.3420': attribute type 16 has an invalid length. [ 457.388462][T18722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3419'. [ 457.398028][ T9060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.406778][T18725] netlink: 'syz.1.3420': attribute type 17 has an invalid length. [ 457.438446][T18723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3419'. [ 457.456085][T18725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.477866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.567750][ T9060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.598475][ T9060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.764646][ T9100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.783866][ T9100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.878133][ T51] Bluetooth: hci3: command tx timeout [ 457.918111][T18742] syzkaller1: entered promiscuous mode [ 457.967508][T18742] syzkaller1: entered allmulticast mode [ 458.008923][T18747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.035090][T18747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.404814][T18757] syzkaller0: entered promiscuous mode [ 458.447717][T18757] syzkaller0: entered allmulticast mode [ 458.517873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.679277][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.287346][T18813] netlink: 'syz.2.3443': attribute type 1 has an invalid length. [ 459.412828][T18826] __nla_validate_parse: 8 callbacks suppressed [ 459.412850][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3445'. [ 459.530012][T18832] xt_limit: Overflow, try lower: 604147548/4200216962 [ 459.751558][T18849] netlink: 'syz.2.3452': attribute type 1 has an invalid length. [ 459.800950][T18849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3452'. [ 459.864925][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'. [ 459.958936][ T51] Bluetooth: hci3: command tx timeout [ 460.031336][T18864] netlink: 'syz.4.3456': attribute type 8 has an invalid length. [ 460.065811][T18861] pim6reg: entered allmulticast mode [ 460.581769][T18904] net_ratelimit: 3 callbacks suppressed [ 460.581792][T18904] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 460.607802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.616048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.749672][T18916] netlink: 'syz.2.3466': attribute type 1 has an invalid length. [ 460.823286][T18910] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 460.921811][ T9060] tipc: Resetting bearer [ 461.265500][ T9060] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 461.380467][ T9060] tipc: Disabling bearer [ 461.520216][ T9060] bond5 (unregistering): (slave gretap1): Releasing active interface [ 461.567294][ T9060] dvmrp0 (unregistering): left allmulticast mode [ 461.579024][ T9060] dvmrp4 (unregistering): left allmulticast mode [ 461.623874][ T9060] bond2 (unregistering): (slave geneve3): Releasing active interface [ 461.719309][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.888181][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.040684][ T51] Bluetooth: hci3: command tx timeout [ 462.158317][ T9060]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.208861][ T9060]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.227278][ T9060]  (unregistering): Released all slaves [ 462.241665][ T9060] bond1 (unregistering): Released all slaves [ 462.260854][T18961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'. [ 462.275230][ T9060] bond0 (unregistering): (slave lo): Releasing backup interface [ 462.295215][ T9060] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 462.313593][ T9060] bond0 (unregistering): Released all slaves [ 462.334737][ T9060] bond2 (unregistering): Released all slaves [ 462.350110][ T9060] bond3 (unregistering): Released all slaves [ 462.365774][ T9060] bond4 (unregistering): Released all slaves [ 462.393103][ T9060] bond5 (unregistering): Released all slaves [ 462.415343][ T9060] bond6 (unregistering): Released all slaves [ 462.502548][T12657] lo speed is unknown, defaulting to 1000 [ 462.546096][T12657] syz2: Port: 1 Link DOWN [ 462.579834][T12657] lo speed is unknown, defaulting to 1000 [ 462.702076][T18972] netlink: 'syz.0.3477': attribute type 2 has an invalid length. [ 462.757647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.003271][T18985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'. [ 463.072868][T18985] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3482'. [ 463.164770][ T9097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.385409][T19001] lo speed is unknown, defaulting to 1000 [ 463.409609][T19006] Bluetooth: MGMT ver 1.23 [ 463.428293][T19014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3488'. [ 463.513127][T19014] hsr_slave_0 (unregistering): left promiscuous mode [ 463.624220][T19019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3489'. [ 463.708533][T19019] netlink: 'syz.3.3489': attribute type 1 has an invalid length. [ 463.728413][T19019] netlink: 'syz.3.3489': attribute type 16 has an invalid length. [ 463.745173][T19019] netlink: 'syz.3.3489': attribute type 17 has an invalid length. [ 463.800071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.837704][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3491'. [ 463.870036][T19031] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 463.969491][T19019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.305395][T19049] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3495'. [ 464.438890][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.878734][T19078] netlink: 'syz.0.3504': attribute type 1 has an invalid length. [ 464.916110][T19078] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3504'. [ 464.937325][T19082] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3505'. [ 465.046681][T19090] nbd: illegal input index 2958377 [ 465.256463][T19102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3509'. [ 465.351488][T19102] hsr_slave_0 (unregistering): left promiscuous mode [ 465.445325][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3510'. [ 465.599516][T19120] net_ratelimit: 1 callbacks suppressed [ 465.599539][T19120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.652910][T19123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.877637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.075476][T19140] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 466.172900][T19146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'. [ 466.182567][T19146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3520'. [ 466.249446][T19147] Unknown options in mask b7f2 [ 466.260225][T19146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'. [ 466.291465][T19146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3520'. [ 466.359274][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.381609][T19152] syzkaller0: entered promiscuous mode [ 466.387151][T19152] syzkaller0: entered allmulticast mode [ 466.449772][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'. [ 466.463786][T19152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3523'. [ 466.511954][T19148] delete_channel: no stack [ 466.592682][T19165] : renamed from hsr0 (while UP) [ 466.714394][T19183] netlink: 'syz.4.3532': attribute type 13 has an invalid length. [ 466.763852][T19183] netlink: 'syz.4.3532': attribute type 13 has an invalid length. [ 466.785355][T19186] Cannot find set identified by id 65534 to match [ 466.841604][T19197] netlink: 'syz.3.3531': attribute type 1 has an invalid length. [ 466.858756][T19195] netlink: 'syz.0.3534': attribute type 12 has an invalid length. [ 466.899995][T19183] netem: invalid attributes len -24 [ 466.905370][T19183] netem: change failed [ 466.917674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.933094][T19195] netlink: 'syz.0.3534': attribute type 16 has an invalid length. [ 466.972527][T19195] netlink: 'syz.0.3534': attribute type 17 has an invalid length. [ 467.004099][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.053014][T19195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.489608][T19225] netlink: 'syz.2.3543': attribute type 5 has an invalid length. [ 467.556285][T19228] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 467.581771][T19229] xt_hashlimit: size too large, truncated to 1048576 [ 467.766859][T19236] netlink: 'syz.2.3548': attribute type 11 has an invalid length. [ 467.785543][T19236] netlink: 'syz.2.3548': attribute type 11 has an invalid length. [ 467.957963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.166723][T19270] netlink: 'syz.2.3557': attribute type 1 has an invalid length. [ 468.260943][T19270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.283207][ T9097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.307404][T19263] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 468.351213][T19278] bond1: (slave geneve2): making interface the new active one [ 468.389258][T19278] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 468.800799][T19306] netlink: 'syz.3.3567': attribute type 7 has an invalid length. [ 469.141774][T19324] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 469.154583][T19324] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 469.165605][T19324] team0: Failed to send options change via netlink (err -105) [ 469.173631][T19324] team0: Port device batadv1 added [ 469.716157][T19354] netem: change failed [ 469.736787][T19362] x_tables: unsorted underflow at hook 4 [ 469.919256][T19378] __nla_validate_parse: 22 callbacks suppressed [ 469.919275][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3591'. [ 469.941021][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3591'. [ 470.132205][T19391] nbd: socks must be embedded in a SOCK_ITEM attr [ 470.183860][T19395] batadv_slave_0: entered promiscuous mode [ 470.282982][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'. [ 470.316527][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'. [ 470.447952][T19394] batadv_slave_0: left promiscuous mode [ 470.617960][T19415] validate_nla: 2 callbacks suppressed [ 470.617980][T19415] netlink: 'syz.0.3602': attribute type 16 has an invalid length. [ 470.643722][T19415] netlink: 'syz.0.3602': attribute type 17 has an invalid length. [ 470.682612][T19415] net_ratelimit: 5 callbacks suppressed [ 470.682625][T19415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.892527][T19392] lec:lec_atm_close: lec0: Shut down! [ 470.923507][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3605'. [ 470.935742][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3605'. [ 471.003826][T19427] bridge2: entered promiscuous mode [ 471.028681][T19431] netlink: 'syz.1.3606': attribute type 1 has an invalid length. [ 471.037089][T19427] bridge2: entered allmulticast mode [ 471.042694][T19431] netlink: 'syz.1.3606': attribute type 1 has an invalid length. [ 471.063056][T19427] team0: Port device bridge2 added [ 471.068400][T19431] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.3606'. [ 471.077976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.089446][T19433] bridge0: port 3(team0) entered blocking state [ 471.095834][T19433] bridge0: port 3(team0) entered disabled state [ 471.107336][T19433] team0: entered allmulticast mode [ 471.124385][T19433] team_slave_0: entered allmulticast mode [ 471.130527][T19433] team_slave_1: entered allmulticast mode [ 471.146056][T19433] team0: entered promiscuous mode [ 471.151564][T19433] team_slave_0: entered promiscuous mode [ 471.157809][T19433] team_slave_1: entered promiscuous mode [ 471.166092][T19433] bridge0: port 3(team0) entered blocking state [ 471.172516][T19433] bridge0: port 3(team0) entered forwarding state [ 471.634861][T19457] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3613'. [ 471.750579][T19464] macvlan0: entered promiscuous mode [ 471.813085][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3616'. [ 471.945821][T19473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3618'. [ 472.118848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.151892][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.333472][T19500] netlink: 'syz.3.3623': attribute type 10 has an invalid length. [ 472.489267][T19500] veth0_vlan: left promiscuous mode [ 472.503670][T19500] veth0_vlan: entered promiscuous mode [ 472.526210][T19500] team0: Device veth0_vlan failed to register rx_handler [ 472.569751][T19514] netlink: 'syz.2.3625': attribute type 1 has an invalid length. [ 472.744891][T19518] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 472.885730][T19530] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 472.938076][T19530] bond1 (unregistering): Released all slaves [ 473.157673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.586297][T19571] lo speed is unknown, defaulting to 1000 [ 474.042448][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.197887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.237689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.959154][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.959735][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5070 ms [ 475.975385][ C1] lec:lec_tx_timeout: lec0 [ 475.980688][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 476.277675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.896779][T19590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.063440][T19626] __nla_validate_parse: 4 callbacks suppressed [ 477.063461][T19626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3646'. [ 477.342349][T19645] syzkaller0: entered promiscuous mode [ 477.351775][T19645] syzkaller0: entered allmulticast mode [ 477.364824][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.379150][T19645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.548783][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3653'. [ 477.561657][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3653'. [ 477.715530][T19659] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3655'. [ 477.724930][T19659] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3655'. [ 477.880137][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.889010][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.107047][T19679] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 478.188600][T19683] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 478.624771][T19713] netlink: 'syz.1.3672': attribute type 4 has an invalid length. [ 478.668685][T19708] netlink: 'syz.2.3671': attribute type 1 has an invalid length. [ 478.701204][T19708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.917598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.167057][T19745] netlink: 'syz.1.3682': attribute type 1 has an invalid length. [ 479.196378][T19745] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3682'. [ 479.381118][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054b9a800: rx timeout, send abort [ 479.546192][T19768] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3686'. [ 479.778442][T19778] lo speed is unknown, defaulting to 1000 [ 479.800823][ T11] block nbd1: Possible stuck request ffff888026b70000: control (read@0,1024B). Runtime 150 seconds [ 479.812402][ T11] block nbd1: Possible stuck request ffff888026b70200: control (read@1024,1024B). Runtime 150 seconds [ 479.825154][ T11] block nbd1: Possible stuck request ffff888026b70400: control (read@2048,1024B). Runtime 150 seconds [ 479.840630][ T11] block nbd1: Possible stuck request ffff888026b70600: control (read@3072,1024B). Runtime 150 seconds [ 479.852564][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.881305][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054b99c00: rx timeout, send abort [ 479.890864][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054b9a800: abort rx timeout. Force session deactivation [ 479.933139][T19785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3691'. [ 480.389640][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054b99c00: abort rx timeout. Force session deactivation [ 480.497375][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3694'. [ 480.807408][T19832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3697'. [ 480.828477][T19832] netlink: 'syz.4.3697': attribute type 12 has an invalid length. [ 480.933163][T19832] netlink: 'syz.4.3697': attribute type 12 has an invalid length. [ 480.987494][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 480.995689][ C1] lec:lec_tx_timeout: lec0 [ 480.998461][ C0] net_ratelimit: 2 callbacks suppressed [ 480.998524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.077586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.087222][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.095432][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.037579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.063718][T19799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.077570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.285160][T19864] netlink: 'syz.1.3701': attribute type 10 has an invalid length. [ 483.309958][T19864] team0: Device ipvlan1 failed to register rx_handler [ 483.509829][T19881] __nla_validate_parse: 3 callbacks suppressed [ 483.509850][T19881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'. [ 483.596102][T19885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.626061][T19885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3707'. [ 483.649624][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.710874][T19892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3710'. [ 483.832627][T19901] netlink: 'syz.0.3713': attribute type 1 has an invalid length. [ 484.140329][T19904] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 484.168054][T19904] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 484.183804][T19904] bond1: (slave ip6gre1): making interface the new active one [ 484.192990][T19904] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 484.343583][T19914] netlink: 'syz.2.3715': attribute type 21 has an invalid length. [ 484.369564][T19914] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3715'. [ 484.918779][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.931343][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.948402][T19945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3723'. [ 485.374775][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3727'. [ 485.571267][T19967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3728'. [ 485.581122][T19967] bridge: RTM_NEWNEIGH with invalid ether address [ 485.822258][T19978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3732'. [ 485.938553][T19978] netlink: 'syz.0.3732': attribute type 21 has an invalid length. [ 485.946472][T19978] netlink: 'syz.0.3732': attribute type 22 has an invalid length. [ 485.987880][T19978] netlink: 'syz.0.3732': attribute type 23 has an invalid length. [ 485.995766][T19978] netlink: 'syz.0.3732': attribute type 25 has an invalid length. [ 486.047855][T19978] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3732'. [ 486.306835][T19992] xt_hashlimit: size too large, truncated to 1048576 [ 486.326638][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3735'. [ 486.589766][T20013] netlink: 'syz.4.3742': attribute type 1 has an invalid length. [ 486.613677][T20012] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.648309][T20012] bridge_slave_0 (unregistering): left allmulticast mode [ 486.661497][T20012] bridge_slave_0 (unregistering): left promiscuous mode [ 486.680243][T20012] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.841856][ T9099] net_ratelimit: 2 callbacks suppressed [ 486.841875][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.997583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.142211][T20043] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 487.486963][T20065] ipt_REJECT: TCP_RESET invalid for non-tcp [ 487.712890][T20068] syzkaller0: entered promiscuous mode [ 487.737755][T20068] syzkaller0: entered allmulticast mode [ 487.764853][T20074] netlink: 'syz.0.3762': attribute type 9 has an invalid length. [ 487.919174][T20089] ipt_REJECT: TCP_RESET invalid for non-tcp [ 488.047863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.145606][T20102] netlink: 'syz.0.3768': attribute type 1 has an invalid length. [ 489.077617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.400668][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.482659][T20099] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 489.495144][T20099] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 489.503961][T20099] gretap1: entered promiscuous mode [ 489.509472][T20099] gretap1: entered allmulticast mode [ 489.739893][T20121] netlink: 'syz.3.3774': attribute type 58 has an invalid length. [ 489.766666][T20121] __nla_validate_parse: 3 callbacks suppressed [ 489.766686][T20121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3774'. [ 490.079623][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 490.111797][T20140] xt_hashlimit: max too large, truncated to 1048576 [ 490.118634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.166831][T20143] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3780'. [ 490.192315][T20142] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3780'. [ 490.218778][T20142] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3780'. [ 490.234915][T20143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3780'. [ 490.298455][T20142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3780'. [ 490.408101][T20150] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3784'. [ 490.600928][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3787'. [ 490.610016][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3787'. [ 490.634961][ T1025] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.668297][ T1025] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.677190][ T1025] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.688083][ T9081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.697340][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.740272][ T1025] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.008384][T20187] ipt_REJECT: TCP_RESET invalid for non-tcp [ 491.024994][T20187] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20004 [ 491.091563][ T1025] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.124167][ T1025] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.149654][ T1025] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.167834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.181114][ T1025] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.600666][T20222] netlink: 'syz.1.3803': attribute type 32 has an invalid length. [ 491.663092][T20222] bond1: option coupled_control: invalid value (192) [ 491.679696][T20222] bond1 (unregistering): Released all slaves [ 491.960827][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.974940][T20241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 492.111210][T20249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.192817][T20249] netlink: 'syz.2.3811': attribute type 10 has an invalid length. [ 492.207543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.222928][T20249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.240209][T20249] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 492.266680][T20264] netlink: 'syz.2.3811': attribute type 10 has an invalid length. [ 492.347325][T20264] batadv0: entered promiscuous mode [ 492.355059][T20264] batadv0: entered allmulticast mode [ 492.389530][T20264] bond0: (slave batadv0): Releasing backup interface [ 492.443610][T20264] bridge0: port 3(batadv0) entered blocking state [ 492.488014][T20264] bridge0: port 3(batadv0) entered disabled state [ 492.661433][ T9081] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 492.671116][ T9081] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 492.845690][T20296] netlink: 'syz.2.3826': attribute type 4 has an invalid length. [ 493.043077][T20305] netlink: 'syz.2.3830': attribute type 32 has an invalid length. [ 493.099449][T20305] bond3: option coupled_control: invalid value (192) [ 493.120976][T20305] bond3 (unregistering): Released all slaves [ 493.238306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.292108][T20317] netlink: 'syz.1.3833': attribute type 2 has an invalid length. [ 493.497654][T20330] netlink: 'syz.1.3839': attribute type 83 has an invalid length. [ 493.822496][T20357] netlink: 'syz.4.3845': attribute type 1 has an invalid length. [ 494.069458][T20376] netlink: 'syz.1.3850': attribute type 3 has an invalid length. [ 494.233558][T20379] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 494.256426][T20376] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 494.325256][T20399] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 494.438267][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.780983][T20419] netlink: 'syz.3.3862': attribute type 21 has an invalid length. [ 494.845545][T20426] netlink: 'syz.1.3864': attribute type 1 has an invalid length. [ 494.861203][T20419] __nla_validate_parse: 28 callbacks suppressed [ 494.861226][T20419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3862'. [ 494.889344][T20426] netlink: 'syz.1.3864': attribute type 3 has an invalid length. [ 494.907421][T20426] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3864'. [ 494.922925][T20426] NCSI netlink: No device for ifindex 813332851 [ 494.970671][T20433] lo speed is unknown, defaulting to 1000 [ 495.256535][T20443] openvswitch: netlink: Message has 138 unknown bytes. [ 495.486775][T20450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3869'. [ 495.516727][T20454] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 495.688408][ T29] audit: type=1800 audit(1775787269.346:3): pid=20457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3872" name="memory.events" dev="tmpfs" ino=916 res=0 errno=0 [ 495.720714][ T9081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.799285][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.891035][T20471] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3874'. [ 495.905749][T20471] unsupported nlmsg_type 40 [ 496.288656][T20494] nft_compat: unsupported protocol 0 [ 496.366827][T20496] netlink: 'syz.0.3882': attribute type 51 has an invalid length. [ 496.379509][T20496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.395141][T20496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.405169][T20496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.413232][T20496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.438683][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.537202][T20503] xt_limit: Overflow, try lower: 271964/0 [ 496.551418][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3885'. [ 496.735129][T20508] netlink: 'syz.3.3888': attribute type 1 has an invalid length. [ 496.847227][T20515] netlink: 'syz.0.3890': attribute type 1 has an invalid length. [ 497.065450][T20515] bond2: entered promiscuous mode [ 497.102364][T20515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.128172][T20533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3892'. [ 497.193983][T20533] bond2: entered promiscuous mode [ 497.199977][T20533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.336651][T20546] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3894'. [ 497.377001][T20554] Cannot find set identified by id 4 to match [ 497.385134][T20555] sctp: [Deprecated]: syz.2.3897 (pid 20555) Use of int in maxseg socket option. [ 497.385134][T20555] Use struct sctp_assoc_value instead [ 497.405800][T20546] net_ratelimit: 1 callbacks suppressed [ 497.405821][T20546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.545235][T20559] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 497.797941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.907380][T20587] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3904'. [ 497.927235][T20587] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3904'. [ 498.278754][T20607] netlink: 'syz.3.3908': attribute type 1 has an invalid length. [ 498.297572][T20607] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3908'. [ 498.352486][T20602] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 498.389633][T20602] bond3 (unregistering): Released all slaves [ 498.837773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.000290][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.062866][T20655] netlink: 'syz.2.3918': attribute type 3 has an invalid length. [ 499.115170][T20655] netlink: 'syz.2.3918': attribute type 1 has an invalid length. [ 499.610208][ T9076] tipc: Subscription rejected, illegal request [ 499.878091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.997782][T20706] netlink: 'syz.2.3934': attribute type 29 has an invalid length. [ 500.232731][T20718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.253761][T20721] netlink: 'syz.2.3937': attribute type 11 has an invalid length. [ 500.285405][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.303780][T20721] __nla_validate_parse: 8 callbacks suppressed [ 500.303858][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3937'. [ 500.351831][T20721] netlink: 'syz.2.3937': attribute type 11 has an invalid length. [ 500.421326][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3937'. [ 500.473833][T20733] netlink: 'syz.4.3939': attribute type 3 has an invalid length. [ 500.506433][T20733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3939'. [ 500.889874][T20750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3943'. [ 500.917604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.920406][T20750] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3943'. [ 500.948389][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 500.992266][T20750] netlink: 'syz.2.3943': attribute type 8 has an invalid length. [ 501.018588][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 501.058222][T20750] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.066797][T20750] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.226105][T20761] sctp: [Deprecated]: syz.4.3945 (pid 20761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.226105][T20761] Use struct sctp_sack_info instead [ 501.502827][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3947'. [ 501.549703][T20777] veth1_macvtap: left promiscuous mode [ 501.555579][T20771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3948'. [ 501.572598][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.583916][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 501.741842][T20785] ip6gre1: entered allmulticast mode [ 501.957808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.111270][T20810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3959'. [ 502.993165][T20867] xt_cgroup: path and classid specified [ 502.998973][ C0] net_ratelimit: 2 callbacks suppressed [ 502.998997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.085321][T20871] ip6gre1: entered allmulticast mode [ 503.178288][T20878] 8021q: VLANs not supported on nr0 [ 503.345187][T20895] x_tables: duplicate underflow at hook 1 [ 503.485274][T20901] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002 [ 504.047583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.140398][T20930] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 504.156988][T20930] bond3 (unregistering): Released all slaves [ 504.760516][ T9097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.858457][T20967] syzkaller1: entered promiscuous mode [ 504.867868][T20967] syzkaller1: entered allmulticast mode [ 505.000684][T20971] netlink: 'syz.4.4005': attribute type 16 has an invalid length. [ 505.018424][T20971] netlink: 'syz.4.4005': attribute type 17 has an invalid length. [ 505.027689][T20973] netlink: 'syz.0.4006': attribute type 1 has an invalid length. [ 505.077806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.121243][T20971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.255537][T20973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.320339][T20981] __nla_validate_parse: 5 callbacks suppressed [ 505.320360][T20981] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4007'. [ 505.416325][T20973] bond3: (slave gretap2): making interface the new active one [ 505.430088][T20973] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 505.589417][T20992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4009'. [ 505.769094][T20998] gtp0: entered promiscuous mode [ 505.787548][T20998] gtp0: entered allmulticast mode [ 506.117578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.136512][ T9097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.817284][T21044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4023'. [ 506.917482][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms [ 506.925582][ C1] lec:lec_tx_timeout: lec0 [ 507.157585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.274116][T21074] Can't find ip_set type [ 507.320244][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.328442][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.482253][T21089] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4035'. [ 507.609076][T21093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4037'. [ 507.837242][T21109] netlink: 'syz.3.4039': attribute type 3 has an invalid length. [ 507.837265][T21107] netlink: 'syz.3.4039': attribute type 3 has an invalid length. [ 508.102378][T21128] netlink: 'syz.0.4044': attribute type 1 has an invalid length. [ 508.162059][T21133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4045'. [ 508.197751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.251910][T21128] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 508.265057][T21128] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 508.274373][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4045'. [ 508.290792][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4045'. [ 508.316026][T21143] netlink: 'syz.1.4046': attribute type 1 has an invalid length. [ 508.318908][T21142] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4047'. [ 508.326954][T21143] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4046'. [ 508.342923][T21143] netlink: 'syz.1.4046': attribute type 1 has an invalid length. [ 508.355244][T21143] netlink: 'syz.1.4046': attribute type 8 has an invalid length. [ 508.383086][T21135] macvlan2: entered promiscuous mode [ 508.388904][T21135] macvlan2: entered allmulticast mode [ 508.395410][T21135] bond4: entered promiscuous mode [ 508.402040][T21135] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 508.412913][T21135] bond4: left promiscuous mode [ 508.436091][T21134] bridge0: port 1(ipvlan2) entered blocking state [ 508.449076][T21134] bridge0: port 1(ipvlan2) entered disabled state [ 508.466427][T21134] ipvlan2: entered allmulticast mode [ 508.472186][T21134] bridge0: entered allmulticast mode [ 508.481695][T21134] ipvlan2: left allmulticast mode [ 508.486884][T21134] bridge0: left allmulticast mode [ 508.595623][T21153] netlink: 'syz.0.4049': attribute type 10 has an invalid length. [ 509.016861][T21171] netlink: 'syz.0.4056': attribute type 1 has an invalid length. [ 509.216457][T21179] pimreg3: entered allmulticast mode [ 509.237656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.889608][ T11] block nbd1: Possible stuck request ffff888026b70000: control (read@0,1024B). Runtime 180 seconds [ 509.901281][ T11] block nbd1: Possible stuck request ffff888026b70200: control (read@1024,1024B). Runtime 180 seconds [ 509.912537][ T11] block nbd1: Possible stuck request ffff888026b70400: control (read@2048,1024B). Runtime 180 seconds [ 509.924081][ T11] block nbd1: Possible stuck request ffff888026b70600: control (read@3072,1024B). Runtime 180 seconds [ 510.277599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.519852][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.801487][ T9097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.810553][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.297410][T21185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.468201][T21249] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 512.615467][T21261] validate_nla: 1 callbacks suppressed [ 512.615488][T21261] netlink: 'syz.4.4080': attribute type 1 has an invalid length. [ 512.647028][T21260] tipc: Started in network mode [ 512.667871][T21260] tipc: Node identity 0663b4a4b8b3, cluster identity 4711 [ 512.678576][T21261] __nla_validate_parse: 11 callbacks suppressed [ 512.678596][T21261] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4080'. [ 512.708764][T21260] tipc: Enabled bearer , priority 0 [ 512.802970][T21275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4085'. [ 512.837587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.876251][T21264] syzkaller0: entered promiscuous mode [ 512.882406][T21264] syzkaller0: entered allmulticast mode [ 512.891072][T21264] tipc: Resetting bearer [ 512.920565][T21258] tipc: Resetting bearer [ 512.926683][T21275] netlink: 'syz.0.4085': attribute type 8 has an invalid length. [ 512.934802][T21275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4085'. [ 513.079031][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.089112][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.486821][T21288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4087'. [ 513.878979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.585146][T21258] tipc: Disabling bearer [ 514.607269][T21275] bond0: entered promiscuous mode [ 514.612613][T21275] bond_slave_0: entered promiscuous mode [ 514.624248][T21275] bond_slave_1: entered promiscuous mode [ 514.645395][T21275] gretap0: entered promiscuous mode [ 514.660519][T21275] ip6gretap0: entered promiscuous mode [ 514.680112][T21275] hsr1: entered promiscuous mode [ 514.718170][ T1587] tipc: Node number set to 3201348772 [ 514.850597][T21296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.918107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.051125][T21308] pim6reg527: entered allmulticast mode [ 515.060572][T21310] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 515.069140][T21310] syzkaller0: entered promiscuous mode [ 515.085107][T21310] syzkaller0: entered allmulticast mode [ 515.191535][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4098'. [ 515.370805][T21320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4100'. [ 515.474634][T21325] netlink: 'syz.2.4102': attribute type 7 has an invalid length. [ 515.483386][T21325] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4102'. [ 515.584412][T21329] netlink: 'syz.2.4104': attribute type 29 has an invalid length. [ 515.595315][T21329] netlink: 'syz.2.4104': attribute type 29 has an invalid length. [ 515.604130][T21329] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4104'. [ 515.639684][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.957648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.342946][T21283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.638893][T21343] veth5: entered allmulticast mode [ 517.007574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.186551][T21366] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4115'. [ 517.196317][T21366] netlink: Unknown conntrack attr (0) [ 517.360804][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'. [ 517.488465][T21380] macsec1: entered promiscuous mode [ 517.559545][ T9097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.623846][T21390] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.698100][T21389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4120'. [ 517.993999][T21403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4125'. [ 518.037802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.106363][T21404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4125'. [ 518.120296][T21413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4125'. [ 518.486911][T21432] netlink: 'syz.2.4131': attribute type 29 has an invalid length. [ 518.527658][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4131'. [ 518.689317][T21442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4133'. [ 518.837984][ T9081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.847155][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.915684][T21449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4135'. [ 519.077585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.113468][T21459] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4136'. [ 519.398760][T21475] tipc: Enabling of bearer rejected, failed to enable media [ 519.425774][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4140'. [ 519.462756][T21473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4140'. [ 519.479286][T21477] netlink: 'syz.2.4142': attribute type 4 has an invalid length. [ 520.128608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.236785][T21519] vlan2: entered promiscuous mode [ 520.242191][T21519] vlan2: entered allmulticast mode [ 520.247373][T21519] hsr_slave_1: entered allmulticast mode [ 520.899625][T21558] sctp: [Deprecated]: syz.4.4157 (pid 21558) Use of int in max_burst socket option. [ 520.899625][T21558] Use struct sctp_assoc_value instead [ 521.157735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.409974][ T9087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.704977][T21593] ip6erspan0: entered allmulticast mode [ 521.759506][T21596] netlink: 'syz.3.4164': attribute type 1 has an invalid length. [ 522.197647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.286384][ T51] block nbd2: Receive control failed (result -32) [ 522.377996][T21627] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 522.431877][T21631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.586008][T21641] netlink: 'syz.3.4177': attribute type 1 has an invalid length. [ 522.631938][T21644] xt_l2tp: v2 doesn't support IP mode [ 522.679556][ T9086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.066829][T21654] __nla_validate_parse: 4 callbacks suppressed [ 523.066854][T21654] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4178'. [ 523.237556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.306412][T21675] netlink: 'syz.3.4181': attribute type 1 has an invalid length. [ 523.334699][T21675] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4181'. [ 523.386974][T21678] bond0: option ad_select: unable to set because the bond device is up [ 523.601831][T21693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4187'. [ 523.905360][T21714] ipt_rpfilter: unknown options [ 524.170154][T21728] IPv6: NLM_F_CREATE should be specified when creating new route [ 524.186662][T21728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.194001][T21728] IPv6: NLM_F_CREATE should be set when creating new route [ 524.277854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.376049][T21740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4196'. [ 524.599636][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.607845][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.644409][T21740] macvtap1: entered promiscuous mode [ 524.665517][T21740] vlan0: entered promiscuous mode [ 524.706185][T21740] macvtap1: entered allmulticast mode [ 524.780971][T21740] vlan0: entered allmulticast mode [ 524.806222][T21740] veth0_vlan: entered allmulticast mode [ 524.943804][T21769] ipvlan2: entered allmulticast mode [ 525.006490][T21769] batadv_slave_1: entered allmulticast mode [ 525.066164][T21761] tipc: Started in network mode [ 525.071401][T21761] tipc: Node identity eac3e5ba4aaf, cluster identity 4711 [ 525.088487][T21761] tipc: Enabled bearer , priority 0 [ 525.144904][T21785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4205'. [ 525.327630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.356049][T21761] syzkaller0: entered promiscuous mode [ 525.374377][T21761] syzkaller0: entered allmulticast mode [ 525.409533][T21761] tipc: Resetting bearer [ 525.415675][T21785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4205'. [ 525.638686][T21760] tipc: Resetting bearer [ 526.361253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.541181][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4217'. [ 526.551575][T21845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4217'. [ 526.561991][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4217'. [ 526.571173][T21845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4217'. [ 527.163084][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.407855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.566126][T21760] tipc: Disabling bearer [ 527.590905][T12657] tipc: Node number set to 2691491258 [ 527.891506][T21853] netlink: 'syz.0.4220': attribute type 1 has an invalid length. [ 527.925353][T21864] openvswitch: netlink: Flow actions attr not present in new flow. [ 528.128492][T21878] xt_socket: unknown flags 0x50 [ 528.162744][T21879] netlink: 'syz.4.4226': attribute type 32 has an invalid length. [ 528.193535][T21879] __nla_validate_parse: 4 callbacks suppressed [ 528.193559][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4226'. [ 528.437971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.448421][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.504256][T21879] bond3: Setting coupled_control to off (0) [ 528.671139][T21910] syzkaller0: entered promiscuous mode [ 528.676710][T21910] syzkaller0: entered allmulticast mode [ 528.734914][T21914] xt_hashlimit: size too large, truncated to 1048576 [ 528.761778][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4233'. [ 528.772579][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4233'. [ 528.786129][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4233'. [ 529.248678][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 529.477641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.743462][T21959] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4238'. [ 529.799495][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.840552][T21959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4238'. [ 530.229838][T21979] bond0: entered promiscuous mode [ 530.251264][T21983] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 530.287842][T21979] bond_slave_0: entered promiscuous mode [ 530.361873][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.366281][T21979] bond_slave_1: entered promiscuous mode [ 530.421578][T21979] mac80211_hwsim hwsim52 wlan1: entered promiscuous mode [ 530.517817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.648158][T22010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4250'. [ 530.739440][T22019] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 530.876058][T22024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4254'. [ 531.035555][T22028] netlink: 'syz.0.4256': attribute type 6 has an invalid length. [ 531.567576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.974093][T22074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.448886][T22094] xt_socket: unknown flags 0xe4 [ 532.597579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.631560][T22099] syzkaller0: entered promiscuous mode [ 532.661568][T22099] syzkaller0: entered allmulticast mode [ 532.740846][T22099] tipc: Enabling of bearer rejected, failed to enable media [ 532.794305][T22099] tipc: Enabled bearer , priority 0 [ 532.803427][T22110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4275'. [ 532.813626][T22098] tipc: Resetting bearer [ 532.862390][T22098] tipc: Disabling bearer [ 532.887720][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4276'. [ 532.915459][T22110] bridge0: port 4(batadv1) entered blocking state [ 532.924999][T22110] bridge0: port 4(batadv1) entered disabled state [ 532.933887][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.957845][T22110] batadv1: entered allmulticast mode [ 532.983236][T22110] batadv1: entered promiscuous mode [ 533.165199][T22118] netlink: 'syz.0.4278': attribute type 8 has an invalid length. [ 533.198938][T22118] __nla_validate_parse: 4 callbacks suppressed [ 533.198958][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4278'. [ 533.418648][ T1025] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 533.428358][ T1025] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 533.473538][T22138] netlink: 'syz.2.4283': attribute type 10 has an invalid length. [ 533.637768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.208452][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.677894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.852157][T22161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.478546][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.519972][T22138] bridge_slave_1: left allmulticast mode [ 535.525687][T22138] bridge_slave_1: left promiscuous mode [ 535.547927][T22138] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.563927][T22138] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 535.668346][T22185] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4291'. [ 535.717567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.846897][T22193] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4293'. [ 536.118078][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.198954][T22200] syzkaller1: entered promiscuous mode [ 536.204598][T22200] syzkaller1: entered allmulticast mode [ 536.221664][T22210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4299'. [ 536.277335][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4301'. [ 536.286811][T22210] veth0_macvtap: left promiscuous mode [ 536.438306][T22227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4303'. [ 536.456509][T22213] netlink: 'syz.4.4300': attribute type 2 has an invalid length. [ 536.481998][T22213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4300'. [ 536.503123][T22219] netlink: 'syz.4.4300': attribute type 2 has an invalid length. [ 536.531415][T22219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4300'. [ 536.643263][T22235] : entered promiscuous mode [ 536.675220][T22224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4303'. [ 536.757828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.822531][ T9087] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.834877][ T9087] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.856885][T22234] syzkaller1: entered promiscuous mode [ 536.859176][T12654] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.873387][T22234] syzkaller1: entered allmulticast mode [ 536.875135][T22243] netlink: 'syz.4.4305': attribute type 1 has an invalid length. [ 536.955388][T22247] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 536.969272][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4306'. [ 537.018456][T12654] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.131245][T22243] bond4: entered promiscuous mode [ 537.136884][T22243] 8021q: adding VLAN 0 to HW filter on device bond4 [ 537.407688][T12654] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 537.504755][T22268] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 537.515082][T22268] openvswitch: netlink: Flow key attr not present in new flow. [ 537.797597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.930270][T22299] ipt_REJECT: TCP_RESET invalid for non-tcp [ 537.981355][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c1cac00: rx timeout, send abort [ 538.039732][ T9100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.476332][T22327] syzkaller0: entered promiscuous mode [ 538.481405][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c1ca400: rx timeout, send abort [ 538.490367][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c1cac00: abort rx timeout. Force session deactivation [ 538.495377][T22327] syzkaller0: entered allmulticast mode [ 538.518198][T22329] __nla_validate_parse: 3 callbacks suppressed [ 538.518219][T22329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4323'. [ 538.718334][T22341] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 538.872598][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4328'. [ 538.990196][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c1ca400: abort rx timeout. Force session deactivation [ 539.887713][ C0] net_ratelimit: 2 callbacks suppressed [ 539.887736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.968487][ T11] block nbd1: Possible stuck request ffff888026b70000: control (read@0,1024B). Runtime 210 seconds [ 539.978967][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.980097][ T11] block nbd1: Possible stuck request ffff888026b70200: control (read@1024,1024B). Runtime 210 seconds [ 539.999775][ T11] block nbd1: Possible stuck request ffff888026b70400: control (read@2048,1024B). Runtime 210 seconds [ 540.011116][ T11] block nbd1: Possible stuck request ffff888026b70600: control (read@3072,1024B). Runtime 210 seconds [ 540.517802][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.528538][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.671026][T22366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.760724][T22381] gtp0: entered promiscuous mode [ 540.770056][T22381] gtp0: entered allmulticast mode [ 540.840918][T22390] ip6tnl2: entered allmulticast mode [ 540.917560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.389787][T22408] syzkaller0: entered promiscuous mode [ 541.395492][T22408] syzkaller0: entered allmulticast mode [ 541.445568][T22432] netlink: 'syz.2.4341': attribute type 13 has an invalid length. [ 541.480036][T22432] netlink: 'syz.2.4341': attribute type 58 has an invalid length. [ 541.499342][T22432] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4341'. [ 541.570592][T22436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4341'. [ 541.601477][T22436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4341'. [ 541.686389][T22441] set match dimension is over the limit! [ 541.697195][T22441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4344'. [ 541.742840][T22443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.779298][T22444] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4344'. [ 541.797332][T22444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4344'. [ 541.816216][T22443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.878961][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.967590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.463485][ T8291] lec:lec_start_xmit: lec0:No lecd attached [ 543.002848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.763497][T22490] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 543.802572][ T9087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.834085][T22500] openvswitch: netlink: IP tunnel dst address not specified [ 544.037566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.088768][T22517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4354'. [ 544.427375][T22530] syzkaller0: entered promiscuous mode [ 544.447659][T22530] syzkaller0: entered allmulticast mode [ 544.608660][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 544.661722][T22544] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 544.891606][T22552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4362'. [ 545.077715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.104058][T22568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4368'. [ 545.158172][T22568] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4368'. [ 545.288907][T22577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4369'. [ 545.566002][T12654] IPVS: starting estimator thread 0... [ 545.568862][T22590] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 545.622048][T22597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.679433][T22598] IPVS: using max 27 ests per chain, 64800 per kthread [ 545.718467][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.727416][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.772405][T22604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4377'. [ 546.359260][ T9087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.376155][T22640] syzkaller1: entered promiscuous mode [ 546.387921][T22638] netlink: 'syz.4.4384': attribute type 10 has an invalid length. [ 546.422350][T22640] syzkaller1: entered allmulticast mode [ 546.606500][T22638] veth0_vlan: left promiscuous mode [ 546.628590][T22638] veth0_vlan: entered promiscuous mode [ 546.643264][T22638] team0: Device veth0_vlan failed to register rx_handler [ 546.918821][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.920707][T22661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.034491][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4388'. [ 547.075942][T22668] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 547.214013][T22685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4392'. [ 547.369415][T22694] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4394'. [ 547.385124][T22698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4396'. [ 547.398578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.957457][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 547.965554][ C1] lec:lec_tx_timeout: lec0 [ 547.981890][T22735] netlink: 'syz.2.4403': attribute type 1 has an invalid length. [ 548.008588][T22735] netlink: 'syz.2.4403': attribute type 8 has an invalid length. [ 548.277773][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 548.437594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.486084][T22770] netlink: 'syz.0.4413': attribute type 1 has an invalid length. [ 548.753163][T22781] lo speed is unknown, defaulting to 1000 [ 548.843853][T22785] netlink: 'syz.0.4416': attribute type 4 has an invalid length. [ 548.864363][T22785] netlink: 'syz.0.4416': attribute type 4 has an invalid length. [ 549.232296][T22805] __nla_validate_parse: 12 callbacks suppressed [ 549.232320][T22805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4421'. [ 549.517092][T22822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4423'. [ 549.582134][T22823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4425'. [ 549.678542][T22834] sit0: entered allmulticast mode [ 549.709193][T22837] sctp: [Deprecated]: syz.0.4428 (pid 22837) Use of int in max_burst socket option deprecated. [ 549.709193][T22837] Use struct sctp_assoc_value instead [ 549.803666][T22834] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4427'. [ 550.058308][T22852] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4431'. [ 550.517531][ C0] net_ratelimit: 3 callbacks suppressed [ 550.517551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.624965][T22884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4438'. [ 550.783719][T22893] sctp: [Deprecated]: syz.2.4440 (pid 22893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.783719][T22893] Use struct sctp_sack_info instead [ 550.834292][T22899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4439'. [ 550.876564][T22891] netlink: 'syz.4.4439': attribute type 2 has an invalid length. [ 550.934062][T22891] netlink: 'syz.4.4439': attribute type 2 has an invalid length. [ 551.084477][T22911] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4444'. [ 551.317381][T22922] netlink: 'syz.3.4446': attribute type 64 has an invalid length. [ 551.342288][T22925] netlink: 'syz.1.4445': attribute type 2 has an invalid length. [ 551.363192][T22922] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4446'. [ 551.372404][T22925] netlink: 'syz.1.4445': attribute type 1 has an invalid length. [ 551.390630][T22922] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4446'. [ 551.478371][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.490951][ T9086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.557560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.590601][T22934] tipc: Failed to remove unknown binding: 66,0,0/0:1006878611/1006878613 [ 551.600105][T22934] tipc: Failed to remove unknown binding: 66,0,0/0:1006878611/1006878612 [ 551.658485][T22937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.684663][T22938] tipc: Failed to remove unknown binding: 66,0,0/0:1006878611/1006878613 [ 551.693812][T22938] tipc: Failed to remove unknown binding: 66,0,0/0:1006878611/1006878612 [ 551.718525][T22940] ipt_ECN: cannot use operation on non-tcp rule [ 552.597796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.762079][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.073798][T23012] 8021q: adding VLAN 0 to HW filter on device bond6 [ 553.101586][T23011] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 553.637517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.696989][T23054] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 553.805713][T23060] validate_nla: 2 callbacks suppressed [ 553.805734][T23060] netlink: 'syz.0.4479': attribute type 4 has an invalid length. [ 554.549778][T23085] bond3: Removing last arp target with arp_interval on [ 554.656600][T23097] __nla_validate_parse: 17 callbacks suppressed [ 554.656624][T23097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4491'. [ 554.678563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.798401][T23107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4490'. [ 554.854582][T23110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4490'. [ 555.291427][T23132] xt_bpf: check failed: parse error [ 555.549095][T23141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4499'. [ 555.577251][T23141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4499'. [ 555.717785][ C0] net_ratelimit: 1 callbacks suppressed [ 555.717833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.018703][T23170] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 556.315783][T23191] xt_hashlimit: size too large, truncated to 1048576 [ 556.747221][T23204] xt_cgroup: xt_cgroup: no path or classid specified [ 556.758049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.798592][T23204] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4511'. [ 556.860431][T23204] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4511'. [ 556.911110][T23204] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4511'. [ 556.934678][T23158] lo speed is unknown, defaulting to 1000 [ 557.043139][T23216] netlink: 'syz.3.4516': attribute type 3 has an invalid length. [ 557.062145][T23218] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4517'. [ 557.208506][T23225] tap0: tun_chr_ioctl cmd 1074025678 [ 557.213889][T23225] tap0: group set to 0 [ 557.239233][ T9086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.248251][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.279309][T23225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4518'. [ 557.794726][T23246] sctp: [Deprecated]: syz.1.4524 (pid 23246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.794726][T23246] Use struct sctp_sack_info instead [ 557.817548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.518306][ T9086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.594198][T23264] batman_adv: batadv0: Adding interface: gretap1 [ 558.637638][T23264] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 558.702282][T23264] batman_adv: batadv0: Interface activated: gretap1 [ 558.837722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.915830][T23275] netlink: 'syz.1.4530': attribute type 16 has an invalid length. [ 558.990216][T23275] netlink: 'syz.1.4530': attribute type 17 has an invalid length. [ 559.057127][T23275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.170537][T23295] block nbd3: Unsupported socket: should be TCP or UNIX. [ 559.269349][T23298] netlink: 'syz.1.4535': attribute type 1 has an invalid length. [ 559.417061][T23305] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 559.488237][T23311] openvswitch: netlink: Flow actions attr not present in new flow. [ 559.508706][T23305] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 559.523544][T23305] bond1: (slave ip6gre2): making interface the new active one [ 559.535702][T23305] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 559.818446][T23323] raw_sendmsg: syz.1.4540 forgot to set AF_INET. Fix it! [ 559.877597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.903578][T23327] syzkaller0: entered promiscuous mode [ 559.926076][T23327] syzkaller0: entered allmulticast mode [ 560.063025][T23337] __nla_validate_parse: 8 callbacks suppressed [ 560.063046][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4542'. [ 560.917557][ C0] net_ratelimit: 1 callbacks suppressed [ 560.917578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.078206][ T9086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.420278][T23405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4565'. [ 561.538843][T23426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4567'. [ 561.668181][T23441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4576'. [ 561.695578][T23446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4576'. [ 561.762556][T23450] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4578'. [ 561.943676][T23460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4582'. [ 561.957781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.981965][T23458] netlink: 'syz.2.4580': attribute type 1 has an invalid length. [ 562.001429][T23458] netlink: 476 bytes leftover after parsing attributes in process `syz.2.4580'. [ 562.035218][T23458] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4580'. [ 562.192812][T23469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4586'. [ 562.255657][T23471] syzkaller0: entered promiscuous mode [ 562.277974][T23471] syzkaller0: entered allmulticast mode [ 562.282267][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.378727][T23473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 562.633642][T23498] netlink: 'syz.4.4593': attribute type 1 has an invalid length. [ 562.743411][T23498] 8021q: adding VLAN 0 to HW filter on device bond7 [ 562.796447][T23493] bond7: (slave ip6erspan0): making interface the new active one [ 562.809430][T23493] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 563.016025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.024229][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.035260][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 563.053338][T23520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.162274][T23523] syzkaller1: entered promiscuous mode [ 563.171655][T23523] syzkaller1: entered allmulticast mode [ 563.435502][T23540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.458053][T23540] netlink: 'syz.4.4606': attribute type 9 has an invalid length. [ 563.470415][T23540] netlink: 'syz.4.4606': attribute type 6 has an invalid length. [ 563.637788][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 563.773457][T23557] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 563.811614][T23557] ip6gretap0: entered promiscuous mode [ 564.037565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.532745][T23566] bridge0: port 3(team0) entered disabled state [ 564.539335][T23566] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.546776][T23566] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.001206][ T9065] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.037508][ T9065] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.088852][ T9065] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.145798][ T9065] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.208160][ T9065] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.243806][ T9065] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.260246][T23626] __nla_validate_parse: 7 callbacks suppressed [ 565.260267][T23626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4620'. [ 565.285774][ T9065] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.299974][ T9065] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.310701][T23627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4622'. [ 565.320802][T23627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4622'. [ 565.389487][T23631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4624'. [ 565.401835][T23627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4622'. [ 565.431226][T23627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4622'. [ 565.634742][T23647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4626'. [ 565.740669][T23655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4626'. [ 565.895972][T23653] lo speed is unknown, defaulting to 1000 [ 566.117598][ C0] net_ratelimit: 4 callbacks suppressed [ 566.117619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.202921][T23673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.840105][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.157545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.185480][T23724] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4643'. [ 567.195849][T23724] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4643'. [ 567.250732][T23724] veth7: entered allmulticast mode [ 567.410566][T23729] Cannot find del_set index 4 as target [ 567.478398][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.607919][T23745] openvswitch: netlink: VXLAN extension message has 217 unknown bytes. [ 568.047752][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.055842][ C1] lec:lec_tx_timeout: lec0 [ 568.197745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.759673][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.252590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.320862][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.053219][ T11] block nbd1: Possible stuck request ffff888026b70000: control (read@0,1024B). Runtime 240 seconds [ 570.064217][ T11] block nbd1: Possible stuck request ffff888026b70200: control (read@1024,1024B). Runtime 240 seconds [ 570.075741][ T11] block nbd1: Possible stuck request ffff888026b70400: control (read@2048,1024B). Runtime 240 seconds [ 570.087744][ T11] block nbd1: Possible stuck request ffff888026b70600: control (read@3072,1024B). Runtime 240 seconds [ 570.138660][T23791] netlink: 'syz.0.4659': attribute type 3 has an invalid length. [ 570.202002][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 570.610442][T23839] vcan0: tx address claim with dlc 0 [ 570.618908][T23842] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 570.626874][T23841] __nla_validate_parse: 7 callbacks suppressed [ 570.626893][T23841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4667'. [ 570.645434][T23840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4668'. [ 570.811964][T23841] team0: Port device team_slave_0 removed [ 571.318127][ C0] net_ratelimit: 1 callbacks suppressed [ 571.318151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.535236][T23896] sctp: [Deprecated]: syz.4.4683 (pid 23896) Use of int in max_burst socket option deprecated. [ 571.535236][T23896] Use struct sctp_assoc_value instead [ 571.953387][T23927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4690'. [ 571.960362][ T9086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.367521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.740870][T23970] syzkaller1: entered promiscuous mode [ 572.763774][T23970] syzkaller1: entered allmulticast mode [ 573.093674][T23991] pim6reg: left allmulticast mode [ 573.248013][ T9087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.322163][T24004] erspan0: entered promiscuous mode [ 573.355637][T24004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4707'. [ 573.407524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.459225][T24012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4710'. [ 573.481190][T24012] netlink: 'syz.0.4710': attribute type 7 has an invalid length. [ 573.495650][T24012] netlink: 'syz.0.4710': attribute type 8 has an invalid length. [ 573.504383][T24012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4710'. [ 573.537139][T24016] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4711'. [ 573.553677][T24016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4711'. [ 573.640549][T24021] ip6gre2: entered allmulticast mode [ 573.878883][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.035958][T24038] netlink: 'syz.2.4718': attribute type 10 has an invalid length. [ 574.090749][T24038] veth0_vlan: left promiscuous mode [ 574.118633][T24038] veth0_vlan: entered promiscuous mode [ 574.126676][T24038] team0: Device veth0_vlan failed to register rx_handler [ 574.301949][T24045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4720'. [ 574.449293][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4722'. [ 574.534040][T24052] netlink: 'syz.0.4724': attribute type 1 has an invalid length. [ 574.649028][T24058] bond5: (slave bridge7): Enslaving as a backup interface with an up link [ 574.700422][T24052] bond5: (slave bridge8): Enslaving as a backup interface with a down link [ 574.934032][T24084] netlink: 'syz.2.4734': attribute type 1 has an invalid length. [ 575.102326][T24089] syzkaller1: entered promiscuous mode [ 575.113206][T24089] syzkaller1: entered allmulticast mode [ 575.136292][T24088] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 575.160064][ T9086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.169430][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.620404][T24122] netlink: 'syz.2.4744': attribute type 2 has an invalid length. [ 575.645109][T24122] netlink: 'syz.2.4744': attribute type 1 has an invalid length. [ 575.760841][T24130] netlink: 'syz.0.4746': attribute type 1 has an invalid length. [ 575.792270][T24132] netlink: 'syz.2.4747': attribute type 1 has an invalid length. [ 575.834467][ T5196] udevd[5196]: worker [13244] /devices/virtual/block/nbd1 timeout; kill it [ 575.857732][ T5196] udevd[5196]: seq 18304 '/devices/virtual/block/nbd1' killed [ 575.865527][T24132] __nla_validate_parse: 7 callbacks suppressed [ 575.865547][T24132] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4747'. [ 575.931627][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4747'. [ 575.946266][T24140] lo speed is unknown, defaulting to 1000 [ 576.046314][T24143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4750'. [ 576.207593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.298153][T23612] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 576.311588][T24141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4749'. [ 576.321736][T24152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4749'. [ 576.423516][T24154] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.4754'. [ 577.037183][T24185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4765'. [ 577.074325][T24186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4764'. [ 577.080737][T23614] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 577.109455][T24189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4766'. [ 577.141403][T24189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4766'. [ 577.247621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.310177][T24203] netlink: 'syz.2.4770': attribute type 10 has an invalid length. [ 577.722050][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 577.738927][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.770671][T24238] netlink: 'syz.3.4782': attribute type 6 has an invalid length. [ 577.778718][T24238] netlink: 'syz.3.4782': attribute type 5 has an invalid length. [ 577.911471][T24242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.195895][T24264] xt_hashlimit: overflow, try lower: 3/0 [ 578.236598][T24264] netlink: 'syz.4.4791': attribute type 39 has an invalid length. [ 578.277934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.361388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.375744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.390223][ T9086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.842876][T24296] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 578.900600][T24296] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 579.028846][T24308] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 579.166047][T24310] netlink: 'syz.4.4804': attribute type 1 has an invalid length. [ 579.317697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.766237][T24330] lo speed is unknown, defaulting to 1000 [ 580.137858][T23609] IPVS: starting estimator thread 0... [ 580.229908][T24367] 8021q: VLANs not supported on gre0 [ 580.299067][T24371] IPVS: using max 30 ests per chain, 72000 per kthread [ 580.876426][T24406] __nla_validate_parse: 23 callbacks suppressed [ 580.876446][T24406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4831'. [ 580.878579][T24399] geneve2: entered promiscuous mode [ 580.897953][T24406] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4831'. [ 580.907241][T24406] netlink: 'syz.0.4831': attribute type 5 has an invalid length. [ 580.911129][T24399] geneve2: entered allmulticast mode [ 580.937916][ T9065] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 580.946780][ T9065] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 580.970252][ T9065] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 580.979491][ T9065] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 581.032005][T24406] netlink: 'syz.0.4831': attribute type 4 has an invalid length. [ 581.082181][T24406] netlink: 'syz.0.4831': attribute type 4 has an invalid length. [ 581.102916][T24414] bond0: left promiscuous mode [ 581.108368][T24414] bond_slave_0: left promiscuous mode [ 581.114045][T24414] bond_slave_1: left promiscuous mode [ 581.123551][T24414] mac80211_hwsim hwsim52 wlan1: left promiscuous mode [ 581.136946][T24414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.456223][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4836'. [ 581.487683][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4836'. [ 581.498340][T24424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4836'. [ 581.500394][T24426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4837'. [ 581.640686][T24433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4840'. [ 581.879868][T24446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4844'. [ 581.941047][ T51] block nbd3: Receive control failed (result -1) [ 582.096940][T24461] netlink: 'syz.4.4845': attribute type 1 has an invalid length. [ 582.107097][T24462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4844'. [ 582.130224][T24461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4845'. [ 582.249025][T24460] x_tables: duplicate underflow at hook 1 [ 582.437716][ C0] net_ratelimit: 5 callbacks suppressed [ 582.437736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.158616][T24504] xt_TCPMSS: Only works on TCP SYN packets [ 583.315062][T24511] xt_limit: Overflow, try lower: 271964/0 [ 583.490100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.502999][ T9087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.121664][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.517719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.739797][T24575] bond8: Unable to set down delay as MII monitoring is disabled [ 584.756907][T24575] bond8 (unregistering): Released all slaves [ 584.789147][T24589] x_tables: duplicate underflow at hook 4 [ 584.799425][T24584] lo speed is unknown, defaulting to 1000 [ 584.847377][T24591] veth0: entered promiscuous mode [ 584.858738][T24591] veth0: left promiscuous mode [ 585.070521][T24600] netlink: 'syz.1.4891': attribute type 9 has an invalid length. [ 585.087809][T24606] netlink: 'syz.1.4891': attribute type 9 has an invalid length. [ 585.317999][T24621] syzkaller1: entered allmulticast mode [ 585.400590][ T1025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.557503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.783951][T24645] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 585.962281][T24645] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.017311][T24661] __nla_validate_parse: 11 callbacks suppressed [ 586.017336][T24661] netlink: 67 bytes leftover after parsing attributes in process `syz.2.4903'. [ 586.121588][T24645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.139803][T24645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.205227][T24645] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 586.228719][T24645] ip6tnl1: left allmulticast mode [ 586.234041][T24645] veth3: left allmulticast mode [ 586.245236][T24645] ip6gre1: left allmulticast mode [ 586.269902][T24645] ip6erspan0: left allmulticast mode [ 586.275369][T24645] ip6tnl2: left allmulticast mode [ 586.299259][T24663] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 586.338822][ T9099] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.348405][ T9099] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.405119][ T9099] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.421455][T24652] lo speed is unknown, defaulting to 1000 [ 586.427346][ T9099] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.597549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.967938][T24690] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 587.014080][T24690] bond0: (slave lo): Error: Device can not be enslaved while up [ 587.060049][T24693] batadv_slave_0: entered promiscuous mode [ 587.105005][T24692] batadv_slave_0: left promiscuous mode [ 587.172326][T24700] syzkaller1: entered promiscuous mode [ 587.181824][T24700] syzkaller1: entered allmulticast mode [ 587.280012][T24708] netlink: 'syz.4.4920': attribute type 10 has an invalid length. [ 587.311433][T24708] mac80211_hwsim hwsim52 syzkaller0: left promiscuous mode [ 587.320605][T24708] mac80211_hwsim hwsim52 syzkaller0: left allmulticast mode [ 587.473644][T24712] lo speed is unknown, defaulting to 1000 [ 587.637993][ C0] net_ratelimit: 2 callbacks suppressed [ 587.638013][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.742588][T24728] bridge5: entered promiscuous mode [ 587.821675][T24728] bridge5: entered allmulticast mode [ 587.987936][T24740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4931'. [ 588.071357][T24740] ipvlan2: entered allmulticast mode [ 588.085041][T24740] syz_tun: entered allmulticast mode [ 588.158855][T24746] IPv6: NLM_F_CREATE should be specified when creating new route [ 588.205956][T24749] sctp: [Deprecated]: syz.0.4933 (pid 24749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 588.205956][T24749] Use struct sctp_sack_info instead [ 588.238066][T24749] sctp: [Deprecated]: syz.0.4933 (pid 24749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 588.238066][T24749] Use struct sctp_sack_info instead [ 588.400378][T24760] sctp: [Deprecated]: syz.3.4938 (pid 24760) Use of int in max_burst socket option deprecated. [ 588.400378][T24760] Use struct sctp_assoc_value instead [ 588.435851][T24762] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004 [ 588.672778][T24772] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 588.681086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.792621][T24782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.915390][T24792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4944'. [ 588.945955][T24792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4944'. [ 589.030701][T24796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4946'. [ 589.121052][T24796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4946'. [ 589.239569][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.297782][T24814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4951'. [ 589.318392][T24817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4952'. [ 589.332374][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4950'. [ 589.481858][T24831] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4957'. [ 589.502567][T24826] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 589.667297][T24839] xt_hashlimit: invalid rate [ 589.707521][T24835] nbd: socks must be embedded in a SOCK_ITEM attr [ 589.714805][T24835] block nbd4: shutting down sockets [ 589.720881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.134376][T24874] x_tables: unsorted underflow at hook 1 [ 590.519695][ T9087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.562992][T24903] netlink: 'syz.3.4977': attribute type 10 has an invalid length. [ 590.636075][T24903] team0: Device ipvlan1 failed to register rx_handler [ 590.723556][T24900] lo speed is unknown, defaulting to 1000 [ 590.905439][T24914] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 591.346273][T24907] netlink: 'syz.4.4975': attribute type 1 has an invalid length. [ 591.412449][T24943] bond8: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 591.423154][T24943] bond8: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 591.440564][T24943] bond8: (slave ip6gre2): making interface the new active one [ 591.456161][T24943] bond8: (slave ip6gre2): Enslaving as an active interface with an up link [ 591.551074][T24948] netlink: 'syz.3.4988': attribute type 21 has an invalid length. [ 591.583361][T24949] __nla_validate_parse: 8 callbacks suppressed [ 591.583383][T24949] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4989'. [ 591.609430][T24948] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4988'. [ 591.622674][T24949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4989'. [ 592.386195][T24978] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5000'. [ 592.440669][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.089390][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.117644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.367697][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 595.003112][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.157605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.327942][T24976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.481596][T25033] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5012'. [ 595.503991][T25036] atomic_op ffff88807ca95998 conn xmit_atomic 0000000000000000 [ 595.656068][T25055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.686700][T25057] netlink: 'syz.4.5019': attribute type 39 has an invalid length. [ 595.791183][T25057] hsr_slave_1 (unregistering): left promiscuous mode [ 595.830718][T25062] sctp: [Deprecated]: syz.3.5020 (pid 25062) Use of int in max_burst socket option. [ 595.830718][T25062] Use struct sctp_assoc_value instead [ 595.859192][T25061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5021'. [ 595.871592][T25061] veth0_virt_wifi: entered promiscuous mode [ 596.198905][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.278167][ T9087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.237611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.198725][ T9087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.206992][ T9087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.277561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.766806][T25062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.905763][T25097] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5029'. [ 599.303602][T25126] bond2: option resend_igmp: invalid value (32767) [ 599.316085][T25126] bond2: option resend_igmp: allowed values 0 - 255 [ 599.323371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.359667][T25126] bond2 (unregistering): Released all slaves [ 599.432263][T25132] netlink: 284 bytes leftover after parsing attributes in process `syz.0.5035'. [ 600.117891][ T11] block nbd1: Possible stuck request ffff888026b70000: control (read@0,1024B). Runtime 270 seconds [ 600.129862][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.138737][ T11] block nbd1: Possible stuck request ffff888026b70200: control (read@1024,1024B). Runtime 270 seconds [ 600.149966][ T11] block nbd1: Possible stuck request ffff888026b70400: control (read@2048,1024B). Runtime 270 seconds [ 600.161593][ T11] block nbd1: Possible stuck request ffff888026b70600: control (read@3072,1024B). Runtime 270 seconds [ 600.357600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.397681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.006928][T25102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.020326][T25109] netlink: 'syz.4.5034': attribute type 1 has an invalid length. [ 602.028330][T25109] netlink: 'syz.4.5034': attribute type 7 has an invalid length. [ 602.036190][T25109] netlink: 'syz.4.5034': attribute type 8 has an invalid length. [ 602.049734][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.058801][T25109] netlink: 208 bytes leftover after parsing attributes in process `syz.4.5034'. [ 602.068409][T25109] NCSI netlink: No device for ifindex 65584 [ 602.077256][T25113] netlink: 'syz.4.5034': attribute type 1 has an invalid length. [ 602.089162][T25113] netlink: 'syz.4.5034': attribute type 7 has an invalid length. [ 602.105539][T25113] netlink: 'syz.4.5034': attribute type 8 has an invalid length. [ 602.114574][T25113] netlink: 208 bytes leftover after parsing attributes in process `syz.4.5034'. [ 602.132950][T25113] NCSI netlink: No device for ifindex 65584 [ 602.437780][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.507158][T25154] syzkaller0: entered promiscuous mode [ 602.527303][T25154] syzkaller0: entered allmulticast mode [ 602.556490][T25165] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5042'. [ 602.927747][ T9060] unregister_netdevice: waiting for bond0 to become free. Usage count = 2 [ 603.487677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.964811][ T9076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.975749][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.517605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.238341][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.528842][ T8291] lec:lec_start_xmit: lec0:No lecd attached [ 605.557891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.597600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.637606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.798438][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.677777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.998229][ T9099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.717950][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.726182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.757546][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.917542][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5390 ms [ 610.925667][ C1] lec:lec_tx_timeout: lec0 [ 612.279028][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.287225][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog