last executing test programs: 1.897729352s ago: executing program 3 (id=4908): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000240)=0xffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000ff7f000085000000ab000026fe11e22c75a15fc0c12b86bf16009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x50, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) recvmmsg(r0, &(0x7f000000e280), 0x58a, 0x42, 0x0) 1.888993797s ago: executing program 4 (id=4909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @local}}, 0x9, 0xfffffffb, 0xfffffff7, 0xe, 0x5}, &(0x7f0000000040)=0x98) 1.645882722s ago: executing program 4 (id=4914): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) read(r1, &(0x7f0000000100)=""/253, 0xfd) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x2f, 0x8, "cc0031280bc550d80c57541dd66dc05f8b16dc9193b7f75e53dd7fee7cb77c48d347ab3475483abcd602fc"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4d}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.568002106s ago: executing program 2 (id=4916): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x0, 0x3, 0xa, 0x8}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = getgid() ioctl$TUNSETGROUP(r5, 0x400454ce, r6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="100000002c0004002dbd7000fb41f317dbdf252e62d57c1f596caba78108cd02ecfec194a8d9feae9025176551f036cdd23ad77bc8f179611d7ffe1f2105f4ca"], 0x10}], 0x1, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r2, r7, r3}}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r6}}}], 0x40, 0x80040}, 0x40001) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x1, 0x0, 0x3, 0xa, 0x8}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}], 0x20}, 0x0) (async) syz_open_procfs$namespace(r2, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@initdev, @in6=@remote}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) getgid() (async) ioctl$TUNSETGROUP(r5, 0x400454ce, r6) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="100000002c0004002dbd7000fb41f317dbdf252e62d57c1f596caba78108cd02ecfec194a8d9feae9025176551f036cdd23ad77bc8f179611d7ffe1f2105f4ca"], 0x10}], 0x1, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r2, r7, r3}}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r6}}}], 0x40, 0x80040}, 0x40001) (async) 1.462960203s ago: executing program 1 (id=4918): syz_emit_ethernet(0xa2, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60fb35190068030000000000000000000000000000000001fe8000000000000000000000000000bb330b0000000000000738000000000c0502005c660000000000004c0000000000d90000000000000084aa1d6b0000000002000000000000000001000101000401020710000000030200fbff01000000000000000001003200000000000000"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xa, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010328bd70000000000034000000080003000300ed"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 1.425161163s ago: executing program 1 (id=4919): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)=ANY=[@ANYBLOB="4400000040000701feffffff00000000017c00000400d7002800018006000600800a000008001100", @ANYRES32=0x0, @ANYBLOB="14001900fe800000000000000000000000000019040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd0, &(0x7f0000000080)=0x2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000140)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x24000000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x40}]}}}]}, 0x3c}}, 0x0) 1.270568571s ago: executing program 2 (id=4921): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1, @ANYBLOB="859c260b814dfd57d97b026300000000faf6c9d9"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r12, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYRES8=r12], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56441, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x4}, {0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0xf, 0x3, 0x4, 0xd, 0x0, 0xb, 0x8, 0x7, 0x5, 0x6, 0xa, 0xd, 0x8, 0xf, 0x3], 0x1, [0x1, 0x10, 0x3, 0x3, 0x8, 0x6, 0x6, 0xadf, 0x7fff, 0x81, 0xff, 0x800, 0xcbe6, 0xd80, 0xf638, 0x1], [0x3, 0x9, 0x8, 0x4, 0x0, 0x3, 0xc, 0x6, 0x5, 0x1, 0xe, 0x8002, 0x8a67, 0x4, 0x7fff, 0xfffe]}}]}}]}, 0x8c}}, 0x80) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r14, &(0x7f0000001000)=[{{&(0x7f0000000340)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @dev={0xac, 0x14, 0x14, 0x2a}}}}], 0x20}}], 0x1, 0xc000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.221595017s ago: executing program 1 (id=4923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x5b, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.110569581s ago: executing program 2 (id=4924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x2000000, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x0, 0x1084}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x20044840) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newtaction={0x2f0, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x2dc, 0x1, [@m_xt={0x2e4, 0x7, 0x0, 0x0, {{0x7}, {0x1e3, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x0, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xe}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7f}, @TCA_IPT_TARG={0x0, 0x6, {0xbca, 'security\x00', 0x6, 0x1, "91b30c403028cd663114de27c9491f9527ca6b2691ad9ec90035fd0341cd24b43fd5420af3ba1254faceb48c55f7f346ed35daa107c9ed78d0f4df0f32d1d72e16cd177c75cae05d1714f8e5b3ea1b46777f27dffbfc84ecf0a691a1b57032"}}, @TCA_IPT_TARG={0xd7, 0x6, {0xfffe, 'security\x00', 0x5, 0x247a, "76b3c8547abe01e7dbd7a762979d591784448b6387ca874f7009df4ef445909b68572b56b73a439f9c84a6d68a77b50c52a5cb204359c8e91a929c98fa74f182f50bcb6f5d6952bffc07468d189a142a3925ec836727d2e7662f835f1036254f5a7c39784842ca6193c326e725f09515a04826b0402560bca14cea4dcedf4cfca7d26e5dc5f6ddd391431500fc3d3e5c293b4226e8cc2cf608bed14a21adca94f464a77f5be92b590ddd11ff59"}}, @TCA_IPT_TARG={0x57, 0x6, {0x7, 'security\x00', 0xcd, 0x6, "53a18aaa394866347213464cbf10b898e6f3d9561f978b173c5646525fe1ed3c48b9c103c6af487bc391f0f77e"}}, @TCA_IPT_TARG={0x15b, 0x6, {0x40, 'nat\x00', 0xd4, 0x6, "db48097fbb0cbab35fe88702afab89a3659c46f8d01412250695da05fc847229c7a19c2ee37e7ad863b7c6d05d0dd2a09b76701520f1790130a2c4a68189f8f3254d7aab532c6e1fbf2d034dc286237b9ec326b517bfe8bfc52dfc599f493e2b2aa9f506bab3c91c759174974e9b0b60a2ab74ee42fbaaa559f0ddce2248620003fd28d2d46d81241387a3c19e89d3519461ae2ec46335633ba01561913575a609a6e3ca44434ca3020faf33bb87d31299d0a76ba3aaa6f6ebaff7243f7fa81323f3e62ccc2d8ba63d7410e7b3b53373282e87e647b7aa15b8"}}]}, {0x36, 0x6, "c4a75fc9bc79ffb52a31804b0f3d655390ecee36a3cc231871aa5f948065f2b8ad3f615402cea9c032a4bfe139165d90a411"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x2f0}}, 0x481d5) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa03049078e1ff0000470000000000000000110000e000000200000000440c0001ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000ac14140000000000"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) 1.03745333s ago: executing program 0 (id=4925): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x50, &(0x7f0000000000)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r3 = socket(0x10, 0x3, 0x0) splice(r0, &(0x7f00000002c0)=0x100000001, r3, &(0x7f0000000300)=0x8, 0x8, 0x4) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) 969.153797ms ago: executing program 2 (id=4926): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010603}}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) listen(r0, 0xfffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20006841}, 0x4004011) recvmmsg(r8, &(0x7f00000026c0)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f0000000640)=""/222, 0xde}], 0x3, &(0x7f0000000380)=""/120, 0x78}, 0x4}, {{&(0x7f0000000440)=@qipcrtr, 0x80, &(0x7f0000000300)=[{&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000001880)=""/200, 0xc8}], 0x2, &(0x7f0000001980)=""/110, 0x6e}, 0x6}, {{&(0x7f0000001a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)=""/103, 0x67}, 0x200}, {{&(0x7f0000001dc0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e40)=""/254, 0xfe}], 0x1, &(0x7f0000001f80)=""/137, 0x89}, 0x8}, {{&(0x7f0000002040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002640)=[{&(0x7f00000020c0)=""/22, 0x16}, {&(0x7f0000002100)=""/92, 0x5c}, {&(0x7f0000002180)=""/153, 0x99}, {&(0x7f0000002240)=""/233, 0xe9}, {&(0x7f0000002340)=""/248, 0xf8}, {&(0x7f0000002440)=""/81, 0x51}, {&(0x7f00000024c0)=""/230, 0xe6}, {&(0x7f00000025c0)=""/92, 0x5c}], 0x8}, 0x3}], 0x5, 0x40000060, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r8, 0x89e8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$netlink(0x10, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r12, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_TTY_SET(r9, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x18, 0x3f9, 0x20, 0x70bd27, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x240088c1}, 0x50800) recvmsg$unix(r13, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r14, 0xc040ff0b, 0x200000000003) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000df21", @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf25790000000c0099000000000032000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 898.893467ms ago: executing program 3 (id=4927): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x100000011, @rand_addr=0x64010100, 0x0, 0x0, 'wlc\x00', 0xd, 0xff, 0x24}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 896.433756ms ago: executing program 1 (id=4928): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r4, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000000000000000000000000000f1c4394192597a692ee9fdc3011d9d21d63917ffd37bd30b", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000b4000004f3e"], 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000180)={0x0, 0xffbd, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="f627008191c1324289d49176596c504faf6b83852107df2b607137aebea640f9bc4181b78957d3e78a6109bcad8bc1be4fa921bae0792298677d8978e9146364214d358170d6917434ed409e5fea07dadfa7039ad244286460241ec9ba2c7c8d5be09920c02b2b7ac845", @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000b8ff090002000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000408000100ff0001"], 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000030061105b00000000009500"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 855.631214ms ago: executing program 3 (id=4929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000800000000000000001000000850000000f000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) close(r6) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000380)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0cb0000", @ANYRES8=r3, @ANYRES32=r5, @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x844) 830.688436ms ago: executing program 2 (id=4930): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5411, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x1e, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000340)=0x2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="71004c4fdf8c994f842c9688b1c492557e750d4f7597777ee27d033b1749759093c9447e2019dbc162650fff36289757785e1a54608472f05516b7e53d8a7b55e48b8f8ebd3cfdcb2fa2cf76d9f3f22072907d458d806d1ed78e3f6db105d95ad491c78921dad2ae04cf163a9e6fece0d256f3630bb6900e79e50aa4db6a1067f663527ccda5c7d8cac2a1e33674c1af1048279d9abc978496753b527cf80e575b3caa1461b0da1173e131a3a794fd74f22a7558e8e62083dba2db7ad8b4fb528bd64400533090b5c934b595ae7682d9f453450d4e1c3954", @ANYRES8=r4], 0x28}}, 0x10800) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000060a010400000000000000000a000001140000001100010000010000000000000100000a881b79e3441e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRES32=r4, @ANYBLOB="41aeea", @ANYRES16, @ANYRESDEC=r2], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000240)={@private, @empty}, &(0x7f00000002c0)=0xc) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x400}, &(0x7f0000000200)=0x8) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4805000010000100000000000200000000000000", @ANYRES32=r7, @ANYBLOB="408f010008200200280012800e00010069703667726574617000000014000280060011004e240000060010004e240000"], 0x48}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r5) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000440)={0x0, 0x0, 0x9, r7, 0x1}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64=r7, @ANYRES32=0x0, @ANYBLOB="000000000000a70de3b0000000300016802c00018028000100fcffffff0000000000000000009cab00000000000000000000000000000000000000000008001b0000000000"], 0x58}}, 0x800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x62}, 0x1c) listen(r8, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x0, 0x4) 754.865808ms ago: executing program 0 (id=4931): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="200000640f740002", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000001700"/28], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r2, 0x26, 0x0, @void}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x11, r4, 0x0) pipe(&(0x7f00000002c0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r3, 0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b07, &(0x7f0000000240)={'veth1_to_batadv\x00', @random="8dffffffebff"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f00000003c0)={0x40, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x0, &(0x7f0000000380)=[{0x5, 0xfe, 0x7}, {0x14, 0xfe, 0x80}]}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 739.977921ms ago: executing program 1 (id=4932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x10, 0x1, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) 705.60308ms ago: executing program 4 (id=4933): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x40, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@nested={0x14, 0x8, 0x0, 0x1, [@nested={0x10, 0x12, 0x0, 0x1, [@typed={0xc, 0x4b, 0x0, 0x0, @u64=0x5}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4) 626.93609ms ago: executing program 3 (id=4934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000010000000000000076ab0187000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a80f6ff0a800500080004000000"], 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r4 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x6, @empty, 0x3}, 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) recvmmsg$unix(r5, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1}}], 0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x80, 0x700, 0x4, 0x7, {{0x9, 0x4, 0x2, 0x8, 0x24, 0x66, 0x0, 0xfb, 0x29, 0x0, @local, @remote, {[@timestamp={0x44, 0x10, 0x29, 0x0, 0x6, [0x1, 0xffff, 0x400]}]}}}}}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x4, 0x0, &(0x7f0000000180)) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0xf, 0x0, 0x5e) connect$packet(r5, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000010021bd70009acc1c9354bc927100000000080001000200000000000000"], 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) 622.163712ms ago: executing program 0 (id=4935): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) sendto$inet(r0, &(0x7f0000000440)='!', 0x1, 0xbe60b1d4954314b1, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) 621.608336ms ago: executing program 2 (id=4936): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x81}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r5, 0x6, 0x19, &(0x7f0000000200)=r5, 0x21) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e0000f9120002800400120008000d0005000000"], 0x44}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000001400)={{r0, &(0x7f0000000040)='}#\\\x12**+-\x00', 0x40, &(0x7f0000000200)={@_ha_fsid={[0x1, 0x5]}, {0x6, 0x80, 0x4, 0x4}}, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x6}, 0x2, &(0x7f00000013c0)=[{0x3, 0x80000001, &(0x7f00000002c0)='cgroup.controllers\x00', &(0x7f0000000300)="666b7907f990e8dff094549883cdf6275c93b1fe95bf756f3d68a89ec855c1cc154dca7630c01b9c2e810a525fd2b9985b168dc4ad6cf5f649e6cccaf14d766b863f3c5f0ed69c35ff7e72d935cbeb70898bde69", 0x54}, {0x3, 0x3, &(0x7f0000000380)='/dev/net/tun\x00', &(0x7f00000003c0)="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", 0x1000, 0xa}]}) 566.776717ms ago: executing program 1 (id=4937): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x3, 0x7, @l2={'eth', 0x3a, 'gretap0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x20000004) unshare(0x40000000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003d000103feff010000000000010000005b0c0657d7cfaaec33082898e6bed632fa5a1c9aec0c8df80821544a77e6fc78ec2457cea7fa4adb8fbf3894676b5006b1e883002d4e"], 0x14}}, 0x4000011) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a7ea64a431486a162adc5c41d1813443"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e0620e4bcb0222bdf67021e6eb5aad0f"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b34dfc52f721c48d953a15166fb1de3a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x80000001, 0x3, 0x7fffffff, 0x20a, 0xffffffffffffffff, 0x5}, 0x48) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfefe}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x7, 0xc47, 0xc, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1, 0x8000, 0x7800, 0x3, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x29, 0x9, 0x9, 0x8, 0x40000, r7, 0x1, '\x00', r10, r7, 0x2, 0x0, 0x1}, 0x50) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r11, 0x65f1b4631b73b101, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4140) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x8000004}, 0x801) 545.688242ms ago: executing program 4 (id=4938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xdb8, @bcast, @bpq0, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) recvmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000280), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000400)=""/224, 0xe0}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000300)=""/55, 0x37}], 0x4, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x4001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 430.103077ms ago: executing program 3 (id=4939): syz_emit_ethernet(0x86, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff0180c2000000080045000078000000000011907800000000000000004e244e220064907802000000010000000400000030bd05a78f0edbcb66cce5984343e09c262fc62d381cd6515d33e142245708d985db081dcb26409ecb60274324d724100c1c28b8552c9dfdf23da2340cb8cbc71f5489d79cc13665174cedcb215e4a1a"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "eac3", 0x1}}, @common=@frag={{0x30}, {[0x2, 0x7], 0xfff, 0x4, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x8, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd25, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="380100001a000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a0000006667106322a59ef04da5902fe00d6705a062a0038887e78d292d7849bae7aa427d1e637500021d6847b7d388ed703a2d051680daa0cfbd12cb22c4b1f55e4fc75bba06660f44b6bbbe2123854fe84efaba01d9603f6fc9b15a4896ae4106221b699385457daa00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x24, r1, 0x3, 0x70bd2a, 0x65dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x408c0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r3, &(0x7f0000000140)='\x00', 0x81, &(0x7f0000000180)={@_ha_fsid={[0x0, 0xc]}, {0xe0, 0x6, 0x4}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r11, 0x4) bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r12, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="ee9cb073688cdbf41fffdb0978fcf4d613baf4abc115b36d2d040f2c0819d67703075ba49d5b6aa0a071cd946d32d132033768a25e4cf8d0815f8a2896f436e373f74a4e427002eb35da5124fdd42b416f77aad944f58573c2cd989a4702004d85f04e63547741f7861df7b887297c1dba37c0ff73d2649e3d0dffcfe5b234bdc2ff", @ANYRES32=r12, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r13 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r14, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 415.787751ms ago: executing program 4 (id=4940): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x28}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) accept4(r0, &(0x7f00000000c0)=@ax25={{0x3, @rose}, [@netrom, @default, @remote, @netrom, @default, @bcast, @null]}, &(0x7f0000000040)=0x80, 0x80800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 329.136969ms ago: executing program 0 (id=4941): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x3, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x61]}}, &(0x7f0000000040)=""/18, 0x27, 0x12, 0x1, 0x8}, 0x28) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0x3, 0xc) (async) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0x3, 0xc) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0xd3, 0xeef, 0x20, @private0, @private0, 0x8, 0x7, 0x3, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0xd3, 0xeef, 0x20, @private0, @private0, 0x8, 0x7, 0x3, 0x4}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x7, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x80000001}]}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0x7, 0xf}, {0xc, 0x3}, {0x10, 0x10001}]}, @enum64={0xd, 0x7, 0x0, 0x13, 0x1, 0x0, [{0x9, 0x8, 0x7}, {0x5, 0x8, 0x8}, {0x9, 0xb, 0x400}, {0x3, 0x6, 0x9}, {0x8, 0x2, 0xd}, {0x6, 0xa5cc, 0xc}, {0xe, 0x2, 0x6}]}, @enum64={0xc, 0x4, 0x0, 0x13, 0x0, 0x2, [{0x7, 0x9, 0xffff}, {0x9, 0xc}, {0x4, 0x2, 0x4}, {0x6, 0x0, 0x8}]}]}, {0x0, [0x2e, 0x0, 0x61, 0x30, 0x2e]}}, &(0x7f0000000340)=""/241, 0xff, 0xf1, 0x1, 0xcc8}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x3ff00000, '\x00', r2, r3, 0x1, 0x4, 0x4}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r5, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x13f]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7cf152a3]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x134}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3, 0x0, 0x6, 0xb, 0x1, 0x2]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4001}, 0x20004810) sendmsg$nl_route(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newrule={0x2c, 0x20, 0x100, 0x70bd28, 0x25dfdbfb, {0x2, 0x80, 0x80, 0x2, 0xff, 0x0, 0x0, 0x4}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_DST={0x8, 0x1, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004) r6 = socket(0x29, 0x5, 0xb613) socket$unix(0x1, 0x0, 0x0) (async) socket$unix(0x1, 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r6, 0x80705864, &(0x7f00000007c0)) socket(0x1d, 0x2, 0x3) (async) r7 = socket(0x1d, 0x2, 0x3) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000840)={'pimreg1\x00', {0x2, 0x4e23, @rand_addr=0x64010101}}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000880)={'filter\x00', 0x1000, "d868083b07461d934d2e11c61201b63ef6914479c61ef710ddadbce37bdc9abf962499f5b5fa220aa263b6e1b57e004efee3586099cb1fd68cbf38b86997a7a7f53a4696ddf8aea9b7f32924e91597f1c1f366fcd648e33f8c5c9175ddc9caa1d8eea6460cbd8344112580fc96c72a7c7a53033c373204d30af9d3bd630dda0076c34246f70817dbf4e7d7620a578972a91fa081a3f1615a83cea4901e4d41483430659209e058b83833bc7c09c23891d4f243b69c62be67df0b7caaf11f6607c33ae63f3272cf36648ae24feede7ec0fa68e2d895e141f62762685d8d8fb30ddf8709b9df3c704599ceffaf220a6bc618bc35eebeada96e05327c6e2b943173df04eaf7c0a50c998e688ac5df241fa8081090899d69c09a4fd5e94440fe5090eec501026298dee67e40527383821c24c31b554ea88c937d733ac21425947bb93aa0f451ad01bdd0eae298a0aa6f37512ff42a480a8f808fa8f77bb892f8ad93028b7d4ca9c4111e855a336c95eb48a1105cd6f146e1cbf1851df50486d0b7e2ec39171cc7aeb3af798cc8336fc0ce22588ce00adb724b4080f909ae0e0c1ee877d03aad255266aebba7b0f6efd7827370e61a1ccb60ff6a09f87bb503947d47c0f391dd4779906a4680e58cb20f76fab61e2b6964103063fb79cc231a207c945c22c6e1cca942b388e40dd1425afe17a659e5e3bdf9712a5fe1df31bc89fd785f2d7e8513fb39f32153ada3a1db7e272c6622d81958953d6828fd7ee220f49d0d9d770bc646154dd772560aa99b08bdea4394058d3ee6067ea47e01b7abf8d26b1c0c5c99b4efc8eb7423c6cfd9056f1b62bfc7fde8ccfaecbfcd0a9350760fb9382f328e2723cebdbabd8dba4937a4244704436aa1d4efcc413eaf492faadec5aa518beb68ec6d553cffaa82871fb6c64499b0e8e6843f6eb14531ca1768c45c9e22be02891b0334a91df3c3a6fedfdbdecd10f60891f20a4c1d8ebfba785a62162d27d94fa4118f89f5127c2e11f79ac42fc8104c4c9a63193e489a8c0fecbdf86422727cec254bd3dcd77aa39225b3fda46ad22e03c5812d742c1e83a232470ceceec315b2a95d1b5ee9f4f41ad16ba2e31ae7d26219fe9dfd9ec207e2426112a5544ae98efac74a77ec5c61e0ef06ef750ded073d3caf3fcfe49a5da9e744f4fd7342fd837fd57e54a00b2372108ea10aca094322f5fb67e24e5a014de574055a7f6c09815b637684ad2fb3f97e1f49c1cc9c4fc273a3a7fefd8c0ad92569264967dc498853301fb4c13165536efa1bf9f9187ee660a71750253ffe415a56ba9647b1a5b76e220751efa0016998b887e62d4e8319c3faaf62b0ec7139016a592a77d50827164c3eb9b279075b89b738077408a440292f848d7ce33411fd31b2e1f676c3fbc5272c4dae0968af67799e034095bdbc6d1e5582ebe4988b09f6edaac9bc38dcbf6d31236403a1f713196128b74ec37fbba2d9d1627e713bdbc4fd802b93783ca99ae42ab0ad390299608d7c0a657b4d8974936d920cd9f53d12cdd042b62fbbc620bc11113e98754f412ad7ba6db328e361b5af102a089bd13e0c261ec643364448a90a832ad829794b96dd74d70247ea8360f467cd2451061b97558713b19c99e5fab2a89994c7c369fe2cd6a6c24f06f8ae206b6c2a37bf8b067792ad0747d1d4cbdd1ffe456e5cbd158193307ea0a32df011e540171123d0e7b975557251d77db73d1cf923155e486f9d9518aaf7f3578aee02e224e6213408c4f3ddf41196652f2f100403ebd742ca63c9dcfa036a776c5d17c5722c0b069c5c05c9b0c0f1163c484591e27867e7c3fea0d24e2ae70b8bc0e31f7bfb592947880206f3d50f4597ec4e908f69d69ff4c59077e0139fc2d82dc53dbc26bf91c5afef8652a0985d506be8359efea93ab737a370baf53cf395e93095e1cabc5c2d199bd0205d85ffc09ea40544da077422260ef0295c35e24647cd8a0d1a8b8cf1eb285d65fc0f34fb4c51c8ae1357f591a4428f51ed4bd9b5df4c06427c0cb766726ed42a4225844c4f2c8edf3bc56196d180d5d0fc4338b71938204b2ae3611894ed9db2d9031ab19d41983996306c91b355c417e5f57f7cb5ca26d3497f8591d679dea0fe27130c4c1f673693e03c2d02dd72c354b9adb5546e0f455d4191d812156e94692571c85cfe192f0ae493edc9ab89e374bba178ec35b7cbe4e2c0123ad3a8f9647726c43d39eb7b05b29231bb91a6471c0594d313cf82a18d9a8981ea3c5373a63acb0f87372dec249f5e940545ad43bfbeeddf3b4f81c1a8f496e480f4db4d79636e16faecd18df4e41e84e5685e50dbff5fd0221c1540209f04f44dba872dd2f61a0cf6f5068da67b1808fb51a4abee70a3a28d592abeeb2625c6d35b724a170d08eac71de47b92be378f20df22fc0da4da345d7a342ab079d287b498c30c1545ec433a441049c5757a3f8c6bf0e49c5c640e186b65e940b1c8c219c70660b0cbf031254f5eee96b27eb1687d3c2ea6f6d63377b8499ff51ee7b3c0b0e4ba9429848bd553b37ea11b57126b42930e37961583ae9c162a52dacb4c621e1ddbbaf273de95e659cd292c525da8527ea0edbc0214c61f5ed19c39bb57259986b8de8234c3e318d26e78cf65ec4ac73756de1da729274da95af82a3bbb9acef66e34d5fb3625cd31f92890b895855243063585ee2efa1968cde71e2ba786ec5b345f20974b1eb3ac7f17c093ca85c49a9acd95cf47d133b22c4d3740c8f882a344444cc10e8ac2f7296725dd5c69441568860ba2f11a5dfeaf38efeb502af0ff7f820c6479d862bf0f31259bf896a5c22042f78b3410c5512bd551666568ead1edf3d057b160e119794135436c05a818f4ac8a81cf7d2c92dbfb4e19f0203da77f532a43265f0698856557b4b8349681e1fdcde09ec3f69fdd610233ec0009f46c125148b3c546d6ac5bbf6c7fa2273603d1396f29a9bbb9a24caebe29d786f37cc800c94e342e55f1b2d966bd34985cda728c378831f35d30b00aa87702b85ba07c4fe60328407cb43f8b18056624b26a29d54ee76cdc9816dce9a2f2692e4ca77d5b492c68e5946d807a50e7382d347739f3f4aa1aa1553a19a0417d06d93841d499a5567eff20d7cbabcc450da5c56203312bfd5d0b839f1efe0a5e5144928fcbf5229cdeeceaf2935673d1b88941db7ee2dc8796eda3dfae3619e9b21dd294175c04822a1652f7a7ed5962b60c95bf5d9672e40a8a9f049f66fb16c778f33001b47449ed61a7259932de3ad0433ab4232e5ea0a0943149fe37de6951f7a29627ea101be2d4406452db42bf58f0ed90c97660611e2a30165e23818547a887e6cfc16a947808aa5055cb6026a613b499739f3440077ecd4b10998d276e1952f104f7180ddbe471fe4b071c13ba95c7933792d394a03f6ace8f0bd87a2484006c5c9cb4e3cec5a9c1422e464a45e7cf39647f6f104cc6b631a73bd17580bee612f96eb7d7c3ed0fce097e8d8c453d2f165f7cc3cda3285a1802076667140313fa38fe6851ca8f04ac30d69390b1944bc714b9231cb646b9d111bffdfabd13bda0fc152dfa3b436dbaa041009fae4db7a02ae6a4d6b5dd429f2fe7b552e45a51d90c1fa4fda702b4072a7dc3645bdce07a3ca4a68fa6eb10df148583082bd0c2bdc087a837025fa4626e9a30750e1318e58eb21e20e1330015b5b941aaa929dde1612028c14238a3724ba18f872e609c33715090e8c00be3a59f6ebb81634d9208c4b6c694479f0333a2c452c1bdeffb50bee495db047ac2d3017ef41d1dae02d9e57f4599db76ebc68dfb8b7aa15a87d1a6ccc65d9f8767f67000571dd13864973a2dcea33ea2b8680a0ef9060ddd99589e31f6e8cb201dbfd8b1f69045a1deac66457feb0d20dc99a31a0dcd8bc66d3ccf86e6d42d62a5e095d2c9fdbefd3cc8225ee58b024ab4394b61a73528f18bf794f0c0489c907d865be1bf0678e68f8c39d03d22d6d6b40e4bfb2dc2f7aabc540b371c02082ba2d20535db15a9ed6cab6f5f41857b91dea43588563c916cac419f9d0f3e25a53f52998883e392e1a82f4192354936332ba7020f1bf8b73fe93b78d405324ce23d42d847b757ff21919ee8e5997d4968307dd87da88bc49e02b6372356672978e8016a812da3b96086223ace0078b044de14ae433e4c0e0a3fcc5046e064c30b8c49e90f81d2232941569211603e6549d8bdc1d127fe3186d2d7376f6ed5220cedc8029735681f60ce9d4fb73fd2cd3c1f68c7f5c5b0250c34153e3ad9202a78ee6ba47b9431518b33cad9846ab499d724e70fdc1d0fe48d37a148926e3152b87b5c751dd628f40e0485654bc88436ab5e8705e96e0444a8fcee09fc9de14b30eeb616b26342c50aa4f4537488e7910dd7d2a999c58caaf4b48064937cf8cc3563ef64338313504f0ca857cd974a829260df93992731304981d215e568eb2679d35a8fb761ff520819f55b1dd1ac3400ea67bf9cac1334df9bcd438f7540695a4844025c85d35c875bc23de05a59c6cddb569c9af63cb7d14514d559efe1abb15a94cdf0eee775ececa1ec7807239c667dd8eb7996af32c05db2a723f9214949ef772b7d538b4bc48f978efd03b674253f908d5458f2571bb08d82e592434c8f0f20e7bb12e25f28e61a9584d3b496163e7c662ff6368bd95dd9969fe20a3c01ce95e866faee47492572cf1636add30b21866a6f23e4058d67a3b65b3493a4536b3738fc79b3a52254633388e8ab0127c992d0237fee083347747b3948b64936ee6da472968489e6bdd6de4a1f7e42816eaf500b68ab05db46a199181533dbff19bcc1529fa018bfd6bba253083ec1da881e56bc7a59aa0e5c242d771fdad7d7d3f09d9bb15600a08b0b2d8514f1d148ff7dcc5898174008c9fa5f4d1e7fff061f74de1f7d881d5f0087a70aa22615d6595da3e8e8a5275e276576f2ab5306daa95620a2d096d0c45e469841a1438a7ac6c7f4d40917294d7ac6bae5642d2f5c27aa12bbf81152de3dea5c825d43882ba4be64250820ed9ff4376076e996c0235f288be8021960cc30efeaf7de485314be8f660f652b751a215de13deb58b9c1d3241d9fd74344d32bb75af62e01d0c3bc332cfeac9fbfda38939d0da91223f0936e0e6554d17a3bfe21f9e6eee28e6e1efd49c2817b12c18806694c7c7236bedde4cc27335cba0960aced619c4bdf39861ea52f57e44814addfb73f34536fb0909ed1b9fe3f634e02b098b65eb0e8afa97c8962275b4ab420f09ea97de026343763b14f6ce8664db021c7f798a0125fe6b30d0651aed29f31166c0ff5c89fe831e81505e83aae40548282489ee053f04169f2ccb504756c92a2d50d810b9dd2bec9247aa8659f8410b8a6153e2bfa0ab3c34508f7afe398f213434b6409f4e2c072ae530d7e0dda41e1af689986fd3efb4aa1229735d9bd7fd713e4192891438cea0db99bb1ef04b1af5ae5f4607df952617976912f5ef460ad9ced397b91dfe4a3ee3fe10cc8a6f4cd1870c23f29626cf99e049ce0abd71595c1dbf02be45c03066443b1c9c53733571d9ff9507d58454753ef0b39ea22ad170821f5419f4a71bf1a1ee2fd079d78e168a0ea367b394261c250a70773abc37eeae16ca8e7d61c4eee20e6b142088bfe3abd27c06195e3886f1afb72c3adee4a39dd2b73a02b1ba706ada6696ea95bd469754eb7a2280787a58f5e92480b6581faa22276b727e0df04a423b6a40177bf27eaff52539d508b22bc92e86d687f7005c5943d321a7e92e2c3"}, &(0x7f00000018c0)=0x1024) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001940), r7) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r8, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4008080) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) (async) getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x94, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x8}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000001c40)='ip6tnl0\x00') (async) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000001c40)='ip6tnl0\x00') r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r10, 0x0, 0x2d, &(0x7f0000001c80)={0x3, {{0x2, 0x4e21, @private=0xa010101}}}, 0x88) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r10, 0x0, 0x2d, &(0x7f0000001c80)={0x3, {{0x2, 0x4e21, @private=0xa010101}}}, 0x88) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2022}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x80, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9d}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000020}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2022}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x80, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9d}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000020}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f0000001e80)={0x6, 'veth1_to_bridge\x00', {0x3ff}, 0x8000}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f00), r9) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0x90, r11, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7f}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0x90, r11, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7f}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) bind$xdp(0xffffffffffffffff, &(0x7f0000002140), 0x10) 122.701379ms ago: executing program 4 (id=4942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500140002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x4, 'syz0\x00', @bcast, 0x1, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bridge\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x3}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000700)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000000105d"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 122.119971ms ago: executing program 0 (id=4943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x5c815}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x55}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 35.328428ms ago: executing program 3 (id=4944): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x20, 0x40, 0x2eda3bd3, 0x5, {{0x1a, 0x4, 0x1, 0x11, 0x68, 0x66, 0x0, 0x3e, 0x2f, 0x0, @multicast2, @local, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xfc, 0x1, 0x0, [{@broadcast, 0x100}]}, @noop, @end, @end, @timestamp={0x44, 0x10, 0xc5, 0x0, 0x6, [0x4, 0x0, 0x0]}, @rr={0x7, 0x7, 0xf0, [@dev={0xac, 0x14, 0x14, 0x44}]}, @end, @ssrr={0x89, 0x1b, 0xed, [@rand_addr=0x64010101, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x34}, @remote, @broadcast]}, @generic={0x93, 0xd, "930b95f2c0687a7c469cf7"}]}}}}}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000002c0)={@private1, r1}, 0x14) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f0000000280)=""/53, 0x35}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000200)=""/30, 0x1e}], 0x4, &(0x7f0000000340)=""/95, 0x5f}, 0x2001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xb0351000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) recvfrom$inet6(r4, &(0x7f00000003c0)=""/117, 0x75, 0x40000042, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=4945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x7, 0x66, 0x68, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x6}, {"92de7b253fdcf89d15d599cb58511c3efe6eea31b11b67944960fec8de12b986ba3d8ae4c8330900000040da57842b55726a6aa269847c6a10c6"}}}}, 0x74) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x6b, 0x1d, &(0x7f0000000000)="865b73f2218f36e0ca3993fcbd1ae569df74b954079602f5ff8933d244bd242e47ec66a6ee82383b1d224ddeebcfd9cdaf0e0567463bb90604b9844b30504315d4d6720ee892fbb1a13c4cb05d1fdc84799e868cd3c03ec89d5e54afdf6c178bef7bb447ad7f67628a1640", &(0x7f0000000080)=""/29, 0x4, 0x0, 0xd, 0xff, &(0x7f00000000c0)="97266a983972c3dd3b014c815b", &(0x7f0000000400)="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", 0x4, 0x0, 0x92c}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x6b, 0x1d, &(0x7f0000000000)="865b73f2218f36e0ca3993fcbd1ae569df74b954079602f5ff8933d244bd242e47ec66a6ee82383b1d224ddeebcfd9cdaf0e0567463bb90604b9844b30504315d4d6720ee892fbb1a13c4cb05d1fdc84799e868cd3c03ec89d5e54afdf6c178bef7bb447ad7f67628a1640", &(0x7f0000000080)=""/29, 0x4, 0x0, 0xd, 0xff, &(0x7f00000000c0)="97266a983972c3dd3b014c815b", &(0x7f0000000400)="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", 0x4, 0x0, 0x92c}, 0x50) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xffffffffffffff5f}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xffffffffffffff5f}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) kernel console output (not intermixed with test programs): th. [ 365.299805][T17318] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2991'. [ 365.343948][T17316] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3104'. [ 365.361225][T17316] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3104'. [ 365.422416][T17319] syzkaller0: entered promiscuous mode [ 365.467730][T17319] syzkaller0: entered allmulticast mode [ 365.483607][T17316] netlink: 'syz.3.3104': attribute type 2 has an invalid length. [ 365.980974][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.005584][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.014658][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.028430][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.036581][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.264858][T17341] vxcan1 speed is unknown, defaulting to 1000 [ 366.445581][T17362] netlink: 'syz.4.3110': attribute type 12 has an invalid length. [ 366.491507][T17362] netlink: 'syz.4.3110': attribute type 29 has an invalid length. [ 366.526904][T17362] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3110'. [ 367.053240][T17341] 9 speed is unknown, defaulting to 1000 [ 367.054033][T17377] vxcan1 speed is unknown, defaulting to 1000 [ 367.175877][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3118'. [ 368.029125][T17341] chnl_net:caif_netlink_parms(): no params data found [ 368.123825][T17377] 9 speed is unknown, defaulting to 1000 [ 368.140831][ T5829] Bluetooth: hci2: command tx timeout [ 368.222086][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 368.521089][T17341] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.528763][T17341] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.537253][T17341] bridge_slave_0: entered allmulticast mode [ 368.548647][T17341] bridge_slave_0: entered promiscuous mode [ 368.565964][T17341] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.575621][ T5829] block nbd5: Receive control failed (result -32) [ 368.587890][T17341] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.605235][T17341] bridge_slave_1: entered allmulticast mode [ 368.649370][T17341] bridge_slave_1: entered promiscuous mode [ 368.737607][T17465] netlink: 'syz.0.3130': attribute type 1 has an invalid length. [ 368.753991][T17468] SET target dimension over the limit! [ 368.794807][T17341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.835283][T17341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.987833][T17341] team0: Port device team_slave_0 added [ 369.082908][T17341] team0: Port device team_slave_1 added [ 369.211479][T17341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.226955][T17341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.300355][T17341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.318521][T17341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.326486][T17341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.373130][T17341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.463494][T17495] netlink: 'syz.0.3136': attribute type 1 has an invalid length. [ 369.537407][T17341] hsr_slave_0: entered promiscuous mode [ 369.555725][T17341] hsr_slave_1: entered promiscuous mode [ 369.570803][T17502] __nla_validate_parse: 1 callbacks suppressed [ 369.570823][T17502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3136'. [ 369.571352][T17341] debugfs: 'hsr0' already exists in 'hsr' [ 369.600206][T17341] Cannot create hsr debugfs directory [ 369.654602][T17497] bond13: (slave veth11): Enslaving as an active interface with a down link [ 369.667409][T17503] netlink: 208272 bytes leftover after parsing attributes in process `syz.2.3139'. [ 369.675054][T17502] 8021q: adding VLAN 0 to HW filter on device bond13 [ 369.942230][T17523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3142'. [ 369.967893][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3142'. [ 370.043892][T17517] ipt_rpfilter: unknown options [ 370.073017][T17523] wg1: entered allmulticast mode [ 370.222009][ T5829] Bluetooth: hci2: command tx timeout [ 370.241424][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'. [ 370.256819][T17529] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 370.327260][T17534] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3145'. [ 370.345128][T17341] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.356855][T17341] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 40115 - 0 [ 370.425128][T17540] netlink: 'syz.0.3144': attribute type 9 has an invalid length. [ 370.434583][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 370.467137][T17540] netlink: 'syz.0.3144': attribute type 9 has an invalid length. [ 370.496196][T17341] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.508010][T17540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 370.517000][T17341] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 40115 - 0 [ 370.623673][T17341] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.660340][T17341] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 40115 - 0 [ 370.789317][T17341] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.820334][T17341] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 40115 - 0 [ 371.215397][T17341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 371.274625][T17341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 371.308847][T17341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 371.334247][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3155'. [ 371.353113][T17341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 371.360722][T17586] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3155'. [ 371.649129][T17341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.717533][T17341] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.755569][T15690] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.762895][T15690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.795337][T15690] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.802660][T15690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.300653][ T5829] Bluetooth: hci2: command tx timeout [ 372.399304][T17642] netlink: 'syz.0.3162': attribute type 10 has an invalid length. [ 372.735434][T17654] netlink: 'syz.0.3166': attribute type 3 has an invalid length. [ 372.769582][T17654] syzkaller0: entered allmulticast mode [ 372.811348][T17341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.143986][T17670] netlink: 'syz.4.3171': attribute type 29 has an invalid length. [ 373.163722][T17670] netlink: 'syz.4.3171': attribute type 29 has an invalid length. [ 373.203891][T17669] netlink: 'syz.4.3171': attribute type 29 has an invalid length. [ 373.249973][T17341] veth0_vlan: entered promiscuous mode [ 373.262446][T17669] netlink: 'syz.4.3171': attribute type 29 has an invalid length. [ 373.291204][T17669] netlink: 'syz.4.3171': attribute type 29 has an invalid length. [ 373.299566][T17669] netlink: 'syz.4.3171': attribute type 29 has an invalid length. [ 373.412487][T17341] veth1_vlan: entered promiscuous mode [ 373.453612][T17693] syzkaller0: entered promiscuous mode [ 373.464085][T17693] syzkaller0: entered allmulticast mode [ 373.780106][T17341] veth0_macvtap: entered promiscuous mode [ 373.837402][T17341] veth1_macvtap: entered promiscuous mode [ 373.937876][T17341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.979960][T17341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.085791][T15690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.101556][T15690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.141092][T15690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.169510][T15690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.380694][ T5829] Bluetooth: hci2: command tx timeout [ 374.427030][T15690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.480683][T15690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.591536][T17746] __nla_validate_parse: 6 callbacks suppressed [ 374.591558][T17746] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3189'. [ 374.702114][T15696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.726950][T15696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.872591][T17757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3191'. [ 374.910701][T17757] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3191'. [ 374.947898][T17759] IPVS: Unknown mcast interface: ry.events [ 375.001608][T17762] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 375.038061][T17762] tipc: Started in network mode [ 375.074160][T17762] tipc: Node identity , cluster identity 4711 [ 375.119593][T17762] tipc: Failed to set node id, please configure manually [ 375.191623][T17762] tipc: Enabling of bearer rejected, failed to enable media [ 375.244356][T17766] syzkaller0: entered promiscuous mode [ 375.253319][T17766] syzkaller0: entered allmulticast mode [ 375.734269][T17794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3201'. [ 376.087499][T17766] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.100607][T17766] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 376.276597][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.301801][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.314915][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.339839][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.348148][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.480397][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.494822][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.505539][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.517457][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.526075][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.616903][T17831] openvswitch: netlink: IP tunnel dst address not specified [ 376.822860][T17843] validate_nla: 4 callbacks suppressed [ 376.822883][T17843] netlink: 'syz.1.3209': attribute type 2 has an invalid length. [ 376.829706][T17785] vxcan1 speed is unknown, defaulting to 1000 [ 376.839841][T17845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3210'. [ 377.170161][T17859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.516806][T17882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3220'. [ 377.543469][T17882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3220'. [ 377.584365][T17882] erspan0: entered promiscuous mode [ 377.592205][T17882] gretap0: entered promiscuous mode [ 377.599465][T17882] debugfs: 'hsr1' already exists in 'hsr' [ 377.609098][T17882] Cannot create hsr debugfs directory [ 377.640459][T17785] 9 speed is unknown, defaulting to 1000 [ 377.840716][T17899] netlink: 'syz.3.3224': attribute type 83 has an invalid length. [ 377.953869][T17905] tipc: Started in network mode [ 377.974108][T17905] tipc: Node identity ac14140f, cluster identity 4711 [ 378.004515][T17905] tipc: New replicast peer: 255.255.255.255 [ 378.027282][T17910] netlink: 'syz.4.3226': attribute type 10 has an invalid length. [ 378.033347][T17905] tipc: Enabled bearer , priority 10 [ 378.081435][T17910] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 378.109824][T17915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.149246][T17785] chnl_net:caif_netlink_parms(): no params data found [ 378.516423][T17785] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.527224][T17785] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.535249][T17785] bridge_slave_0: entered allmulticast mode [ 378.544540][T17785] bridge_slave_0: entered promiscuous mode [ 378.559393][T17785] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.587297][T17785] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.604808][T17785] bridge_slave_1: entered allmulticast mode [ 378.621225][ T5829] Bluetooth: hci1: command tx timeout [ 378.629135][T17785] bridge_slave_1: entered promiscuous mode [ 378.770660][T17785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.788993][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.824711][T17785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.962862][T17785] team0: Port device team_slave_0 added [ 378.984790][T17785] team0: Port device team_slave_1 added [ 379.060094][T17962] ipt_REJECT: ECHOREPLY no longer supported. [ 379.107287][T17785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.136029][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.219890][T17785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.247665][ T47] tipc: Node number set to 2886997007 [ 379.290158][T17785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.299485][T17785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.363387][T17980] netlink: 'syz.1.3244': attribute type 1 has an invalid length. [ 379.367003][T17785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.378022][T17980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3244'. [ 379.575894][T17785] hsr_slave_0: entered promiscuous mode [ 379.612939][T17785] hsr_slave_1: entered promiscuous mode [ 379.630031][T17785] debugfs: 'hsr0' already exists in 'hsr' [ 379.654180][T17785] Cannot create hsr debugfs directory [ 379.670518][T17989] syzkaller0: entered promiscuous mode [ 379.676051][T17989] syzkaller0: entered allmulticast mode [ 379.832458][T18007] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3248'. [ 379.920473][T18016] syz.2.3251 uses old SIOCAX25GETINFO [ 380.133367][T18024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3254'. [ 380.150930][T18024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3254'. [ 380.164177][T18026] netlink: 'syz.2.3255': attribute type 17 has an invalid length. [ 380.172953][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3255'. [ 380.184066][T18026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3255'. [ 380.206117][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3253'. [ 380.223131][T18026] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3255'. [ 380.361420][T18031] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3256'. [ 380.710652][ T5829] Bluetooth: hci1: command tx timeout [ 380.830984][T17785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.854965][T17785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.880045][T17785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.895346][T17785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.003465][T18065] syzkaller0: entered promiscuous mode [ 381.009428][T18065] syzkaller0: entered allmulticast mode [ 381.271890][T18082] xt_TPROXY: Can be used only with -p tcp or -p udp [ 381.298567][T17785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.327221][T17785] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.344305][T15701] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.351711][T15701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.392994][T15694] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.400173][T15694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.560500][T18093] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3268'. [ 381.882432][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3271'. [ 382.215678][T17785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.336910][T17785] veth0_vlan: entered promiscuous mode [ 382.375190][T17785] veth1_vlan: entered promiscuous mode [ 382.401387][T18132] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 382.454816][T17785] veth0_macvtap: entered promiscuous mode [ 382.485920][T17785] veth1_macvtap: entered promiscuous mode [ 382.533238][T17785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.558787][T17785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.583893][T15701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.598089][T15701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.608145][T15701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.675827][T15701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.781485][ T5829] Bluetooth: hci1: command tx timeout [ 382.888377][T15701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.922198][T15701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.026189][T15689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.038270][T15689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.072173][T18161] netlink: 'syz.4.3289': attribute type 9 has an invalid length. [ 383.236832][T18165] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 383.305932][T18170] netlink: 'syz.2.3291': attribute type 1 has an invalid length. [ 383.463257][T18170] bond1: entered promiscuous mode [ 383.468789][T18170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.493947][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.504426][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.513295][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.521742][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.529651][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.627430][T18177] vxcan1 speed is unknown, defaulting to 1000 [ 384.132483][T18205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.336300][T18177] 9 speed is unknown, defaulting to 1000 [ 384.471165][T18225] tipc: Enabling of bearer rejected, failed to enable media [ 384.512763][T18231] openvswitch: netlink: Duplicate key (type 32). [ 384.520084][T18225] openvswitch: netlink: Duplicate key (type 32). [ 384.554653][T18224] tipc: Enabling of bearer rejected, failed to enable media [ 384.616087][T18234] netlink: 'syz.0.3310': attribute type 6 has an invalid length. [ 384.702178][T18234] netlink: 'syz.0.3310': attribute type 12 has an invalid length. [ 384.722531][T18238] openvswitch: netlink: Flow key attr not present in new flow. [ 384.746014][T18234] netlink: 'syz.0.3310': attribute type 8 has an invalid length. [ 384.830153][T18240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.864098][ T5829] Bluetooth: hci1: command tx timeout [ 385.001594][T18249] netlink: 'syz.4.3313': attribute type 1 has an invalid length. [ 385.025452][T18247] netlink: 'syz.4.3313': attribute type 1 has an invalid length. [ 385.084002][T18249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.132702][T18177] chnl_net:caif_netlink_parms(): no params data found [ 385.399078][T18177] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.407979][T18177] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.416156][T18177] bridge_slave_0: entered allmulticast mode [ 385.429173][T18261] __nla_validate_parse: 19 callbacks suppressed [ 385.429194][T18261] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3316'. [ 385.431461][T18177] bridge_slave_0: entered promiscuous mode [ 385.490886][T18177] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.510816][T18177] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.518520][T18177] bridge_slave_1: entered allmulticast mode [ 385.524050][T18282] netlink: 'syz.2.3321': attribute type 1 has an invalid length. [ 385.533520][T18282] netlink: 'syz.2.3321': attribute type 1 has an invalid length. [ 385.537115][T18177] bridge_slave_1: entered promiscuous mode [ 385.580597][ T5829] Bluetooth: hci0: command tx timeout [ 385.639426][T18177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.753628][T18280] syzkaller0: entered promiscuous mode [ 385.759201][T18280] syzkaller0: entered allmulticast mode [ 385.775038][T18177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.671908][ T5829] Bluetooth: hci0: command tx timeout [ 387.878181][T18177] team0: Port device team_slave_0 added [ 387.887697][T18177] team0: Port device team_slave_1 added [ 387.894057][T18309] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 388.025946][T18177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.044205][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.046770][T18333] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 388.099758][T18177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.154529][T18177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.180114][T18177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.217977][T18345] xt_hashlimit: size too large, truncated to 1048576 [ 388.248424][T18177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.280668][T18342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3336'. [ 388.412139][T18352] openvswitch: netlink: IP tunnel dst address not specified [ 388.608544][T18177] hsr_slave_0: entered promiscuous mode [ 388.630052][T18177] hsr_slave_1: entered promiscuous mode [ 388.642402][T18177] debugfs: 'hsr0' already exists in 'hsr' [ 388.648742][T18177] Cannot create hsr debugfs directory [ 388.844625][T18370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.918825][T18368] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 388.945934][T18370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3343'. [ 388.978471][T18368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3342'. [ 389.035005][ T1766] block nbd2: Possible stuck request ffff888026d28000: control (read@0,1024B). Runtime 180 seconds [ 389.048518][ T1766] block nbd2: Possible stuck request ffff888026d28200: control (read@1024,1024B). Runtime 180 seconds [ 389.060090][ T1766] block nbd2: Possible stuck request ffff888026d28400: control (read@2048,1024B). Runtime 180 seconds [ 389.071606][ T1766] block nbd2: Possible stuck request ffff888026d28600: control (read@3072,1024B). Runtime 180 seconds [ 389.150162][T18177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 389.171242][T18381] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 389.303853][T18177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 389.493238][T18177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 389.693830][T18177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 389.706715][T18418] netlink: 'syz.2.3356': attribute type 11 has an invalid length. [ 389.715406][T18418] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3356'. [ 389.741722][ T5829] Bluetooth: hci0: command tx timeout [ 389.858475][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3358'. [ 389.922103][T18422] vlan2: entered allmulticast mode [ 389.931483][T18422] geneve1: entered allmulticast mode [ 389.981237][T18428] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3360'. [ 389.999721][T18428] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3360'. [ 390.011561][T18428] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3360'. [ 390.055231][T18428] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 390.213040][T18177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 390.214526][T18443] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3365'. [ 390.462232][T18177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 390.485204][T18177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 390.549058][T18177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 390.641170][T18460] __nla_validate_parse: 1 callbacks suppressed [ 390.641192][T18460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3369'. [ 390.902334][T18177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.944572][T18177] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.969675][T15689] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.976998][T15689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.034527][T15689] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.041940][T15689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.250692][T18486] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3375'. [ 391.288268][T18487] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3375'. [ 391.345035][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 391.364305][T18490] tipc: Started in network mode [ 391.369309][T18490] tipc: Node identity 8645c432cdb4, cluster identity 4711 [ 391.381306][T18490] tipc: Enabled bearer , priority 0 [ 391.389838][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 391.417912][T18490] syzkaller0: entered promiscuous mode [ 391.444679][T18490] syzkaller0: entered allmulticast mode [ 391.571124][T18489] tipc: Resetting bearer [ 391.766172][T18489] tipc: Disabling bearer [ 391.821073][ T5829] Bluetooth: hci0: command tx timeout [ 391.855696][T18504] netlink: 'syz.4.3378': attribute type 33 has an invalid length. [ 391.974025][T18177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.168974][T18524] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3382'. [ 392.348397][T18520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.441133][T18177] veth0_vlan: entered promiscuous mode [ 392.603357][T18520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.686248][T18177] veth1_vlan: entered promiscuous mode [ 392.768200][T18520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.833459][T18553] netem: change failed [ 392.846194][T18553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3390'. [ 392.868656][T18553] unsupported nlmsg_type 40 [ 392.942201][T18520] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.986802][T18177] veth0_macvtap: entered promiscuous mode [ 392.999408][T18555] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 393.023514][T18555] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 393.037089][T18561] netlink: 'syz.1.3393': attribute type 9 has an invalid length. [ 393.054482][T18177] veth1_macvtap: entered promiscuous mode [ 393.161271][T18555] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 393.170013][T18565] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20003 [ 393.194919][T18177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.203430][T18555] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 393.208956][T18567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3395'. [ 393.229059][T18177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.273502][T15696] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.329491][T18568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3394'. [ 393.339286][T15696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.394803][T18570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3396'. [ 393.409664][T15696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.420056][T18572] netlink: 'syz.1.3397': attribute type 1 has an invalid length. [ 393.427559][T15696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.464119][T18572] bond1: entered promiscuous mode [ 393.469656][T18572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.483426][T15696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.507881][T15696] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.565387][T18572] bond1: (slave bridge1): making interface the new active one [ 393.593731][T18572] bridge1: entered promiscuous mode [ 393.600965][T18572] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 393.622022][T15696] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.633043][T15699] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.682951][T18575] bond_slave_0: entered allmulticast mode [ 393.885995][T15692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.907696][T15692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.945569][T15699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.954754][T15699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.261114][T18596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.345585][T18602] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 394.404986][T18602] gretap0: entered promiscuous mode [ 394.588982][T18615] netlink: 'syz.2.3410': attribute type 10 has an invalid length. [ 394.721716][T18602] gretap0: left promiscuous mode [ 394.795104][T18615] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 395.080459][T18635] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 395.404248][T18655] netlink: 'syz.2.3423': attribute type 1 has an invalid length. [ 395.581047][T18665] syzkaller0: entered promiscuous mode [ 395.587017][T18665] syzkaller0: entered allmulticast mode [ 395.637696][T18676] sctp: [Deprecated]: syz.0.3433 (pid 18676) Use of int in max_burst socket option deprecated. [ 395.637696][T18676] Use struct sctp_assoc_value instead [ 395.833006][T18687] __nla_validate_parse: 10 callbacks suppressed [ 395.833028][T18687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3434'. [ 395.989188][T18695] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3439'. [ 396.164735][T18709] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3443'. [ 396.218551][T18710] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3441'. [ 396.332478][T18717] netlink: 'syz.0.3445': attribute type 29 has an invalid length. [ 396.354053][T18719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3446'. [ 396.363279][T18717] netlink: 'syz.0.3445': attribute type 29 has an invalid length. [ 396.372399][T18717] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3445'. [ 397.007619][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3457'. [ 399.026602][T18701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.247896][T18784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.296222][T18784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.414732][T18799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.512248][T18804] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 399.530580][T18804] syzkaller1: Linktype set failed because interface is up [ 399.570696][ T9271] syzkaller1: tun_net_xmit 90 [ 399.630678][ T9271] syzkaller1: tun_net_xmit 90 [ 399.690847][T15696] syzkaller1: tun_net_xmit 86 [ 400.127232][T18812] netlink: 'syz.3.3474': attribute type 17 has an invalid length. [ 400.135478][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3474'. [ 400.144847][T18812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3474'. [ 400.166899][T18812] bridge0: entered promiscuous mode [ 400.192332][T18812] ip6gretap0: entered promiscuous mode [ 400.199595][T18812] debugfs: '' already exists in 'hsr' [ 400.227309][T18812] Cannot create hsr debugfs directory [ 400.626446][T18833] x_tables: duplicate underflow at hook 2 [ 400.786632][T18838] netlink: 'syz.2.3481': attribute type 3 has an invalid length. [ 400.809139][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 400.843060][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 401.128396][T18860] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 401.152052][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3487'. [ 401.177764][T18860] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 401.213922][T18860] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 401.216434][T18868] Bluetooth: MGMT ver 1.23 [ 401.222522][T18860] gretap1: entered promiscuous mode [ 401.233577][T18860] gretap1: entered allmulticast mode [ 401.589002][T18879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.186699][T18907] netlink: 'syz.1.3501': attribute type 1 has an invalid length. [ 402.218180][T18907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.245294][T18907] bond2: (slave veth0_to_bond): making interface the new active one [ 402.256228][T18907] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 402.294657][T18911] netlink: 'syz.1.3501': attribute type 1 has an invalid length. [ 402.547880][T18925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3507'. [ 402.565855][T18927] tipc: Enabling of bearer rejected, failed to enable media [ 402.962610][T18950] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 403.108503][T18955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3515'. [ 403.470881][T18978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3523'. [ 403.518781][T18978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3523'. [ 403.523573][T18981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3524'. [ 403.534684][T18986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3523'. [ 403.550074][T18982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.559860][T18985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3523'. [ 403.598735][T18984] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 403.745858][T18989] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 403.890045][T19001] ip6gre1: entered promiscuous mode [ 404.087954][T19010] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3535'. [ 404.629010][T19028] bridge2: entered promiscuous mode [ 404.642745][T19028] bridge2: entered allmulticast mode [ 404.677381][T19028] team0: Port device bridge2 added [ 404.756445][T19032] bridge0: port 1(team0) entered blocking state [ 404.763298][T19032] bridge0: port 1(team0) entered disabled state [ 404.773347][T19032] team0: entered allmulticast mode [ 404.798009][T19032] team_slave_0: entered allmulticast mode [ 404.814962][T19032] team_slave_1: entered allmulticast mode [ 404.832120][T19032] team0: entered promiscuous mode [ 404.837225][T19032] team_slave_0: entered promiscuous mode [ 404.872632][T19032] team_slave_1: entered promiscuous mode [ 404.879287][T19032] bridge0: port 1(team0) entered blocking state [ 404.885887][T19032] bridge0: port 1(team0) entered forwarding state [ 404.899215][T19037] bridge0: Device is already in use. [ 404.967025][T19037] xt_hashlimit: size too large, truncated to 1048576 [ 406.008783][T19102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.236864][T19110] netlink: 'syz.0.3561': attribute type 1 has an invalid length. [ 407.964227][T19110] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 408.231426][T19122] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 408.464048][T19139] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 408.513165][T19139] netlink: 'syz.0.3569': attribute type 21 has an invalid length. [ 408.556861][T19142] netlink: 'syz.3.3572': attribute type 83 has an invalid length. [ 408.580416][T19143] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 408.673891][T19151] bridge0: port 3(ipvlan2) entered blocking state [ 408.689393][T19151] bridge0: port 3(ipvlan2) entered disabled state [ 408.698752][T19151] ipvlan2: entered allmulticast mode [ 408.708039][T19148] __nla_validate_parse: 4 callbacks suppressed [ 408.708060][T19148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3574'. [ 408.717995][T19154] sctp: [Deprecated]: syz.2.3575 (pid 19154) Use of int in maxseg socket option. [ 408.717995][T19154] Use struct sctp_assoc_value instead [ 408.728770][T19146] can: request_module (can-proto-0) failed. [ 408.754435][T19151] bridge0: entered allmulticast mode [ 408.773424][T19151] ipvlan2: left allmulticast mode [ 408.779047][T19151] bridge0: left allmulticast mode [ 408.825931][T19158] bridge1: entered promiscuous mode [ 408.832542][T19158] bridge1: entered allmulticast mode [ 408.919785][T19166] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3580'. [ 408.973277][T19166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3580'. [ 408.983846][T19166] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 409.054646][T19166] team1: entered promiscuous mode [ 409.059912][T19166] team1: entered allmulticast mode [ 409.209936][T19180] netlink: 'syz.2.3583': attribute type 9 has an invalid length. [ 409.280650][T19180] netlink: 'syz.2.3583': attribute type 11 has an invalid length. [ 409.288524][T19180] netlink: 'syz.2.3583': attribute type 12 has an invalid length. [ 409.380160][T19180] netlink: 211728 bytes leftover after parsing attributes in process `syz.2.3583'. [ 409.521752][T19193] netlink: 'syz.3.3587': attribute type 1 has an invalid length. [ 409.602953][T19193] netlink: 'syz.3.3587': attribute type 1 has an invalid length. [ 409.650947][T19193] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3587'. [ 409.670480][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3587'. [ 409.782240][T19216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3590'. [ 409.991295][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3592'. [ 410.096235][T19228] netlink: 'syz.2.3595': attribute type 1 has an invalid length. [ 410.184498][T19234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3596'. [ 410.683719][T19260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.711083][T19260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.719247][T19260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.727728][T19260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.771360][T19269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3605'. [ 410.859510][T19271] Bluetooth: MGMT ver 1.23 [ 411.415739][T19309] syzkaller0: entered promiscuous mode [ 411.423516][T19309] syzkaller0: entered allmulticast mode [ 411.431617][T19309] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 411.871463][T19341] netlink: 'syz.2.3624': attribute type 61 has an invalid length. [ 412.472552][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.482384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.498986][T15690] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.521871][T15690] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.540291][T15690] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.593742][T15690] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.031019][T19379] netlink: 'syz.4.3635': attribute type 1 has an invalid length. [ 413.502064][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.510439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.965101][T19414] syzkaller0: entered promiscuous mode [ 413.971303][T19414] syzkaller0: entered allmulticast mode [ 413.983213][T19211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.992409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.141224][ T9280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.181414][T19419] netlink: 'syz.1.3646': attribute type 1 has an invalid length. [ 414.350009][T19433] __nla_validate_parse: 11 callbacks suppressed [ 414.350025][T19433] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3650'. [ 414.529778][T19442] x_tables: duplicate underflow at hook 2 [ 414.545150][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.554245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.581585][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.236140][T19396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.248122][T19409] netlink: 'syz.2.3642': attribute type 4 has an invalid length. [ 416.278881][T19409] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3642'. [ 416.413676][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3656'. [ 416.525309][T19458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3658'. [ 416.795087][T19475] netlink: 'syz.3.3664': attribute type 21 has an invalid length. [ 416.821789][T19475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3664'. [ 417.033783][T19487] netlink: 'syz.1.3667': attribute type 1 has an invalid length. [ 417.163260][T19495] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3672'. [ 417.178623][T19496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3671'. [ 417.236745][T19487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 417.295823][T19496] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 417.311731][T19496] team0: Port device batadv1 added [ 417.323709][T19491] syzkaller1: entered promiscuous mode [ 417.339963][T19491] syzkaller1: entered allmulticast mode [ 417.448510][T19508] netlink: 'syz.1.3673': attribute type 8 has an invalid length. [ 417.661919][ T5895] net_ratelimit: 6 callbacks suppressed [ 417.661940][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.676202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.795861][T19519] netlink: 'syz.1.3678': attribute type 2 has an invalid length. [ 418.128877][T19532] veth0_to_bond: entered allmulticast mode [ 418.475097][T19552] openvswitch: netlink: Invalid VLAN frame [ 418.703264][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.712288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.732607][T19562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3692'. [ 418.786378][T19562] netlink: 'syz.2.3692': attribute type 2 has an invalid length. [ 418.880035][T19573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.894784][T19573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.915136][T19570] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 418.927765][T19570] bond1 (unregistering): Released all slaves [ 418.971040][T19576] netlink: 'syz.2.3696': attribute type 29 has an invalid length. [ 419.101883][ T1766] block nbd2: Possible stuck request ffff888026d28000: control (read@0,1024B). Runtime 210 seconds [ 419.113900][ T1766] block nbd2: Possible stuck request ffff888026d28200: control (read@1024,1024B). Runtime 210 seconds [ 419.116418][T19580] vxcan1 speed is unknown, defaulting to 1000 [ 419.127388][ T1766] block nbd2: Possible stuck request ffff888026d28400: control (read@2048,1024B). Runtime 210 seconds [ 419.143776][ T1766] block nbd2: Possible stuck request ffff888026d28600: control (read@3072,1024B). Runtime 210 seconds [ 419.208392][T19584] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3700'. [ 419.317903][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 419.429404][T19593] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3701'. [ 419.433408][T19580] 9 speed is unknown, defaulting to 1000 [ 419.735530][T19603] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3706'. [ 419.749496][T15690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.757896][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.766062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.774203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.939760][T19611] netlink: 'syz.1.3710': attribute type 9 has an invalid length. [ 419.969465][T19611] netlink: 'syz.1.3710': attribute type 11 has an invalid length. [ 420.020662][ T5909] IPVS: starting estimator thread 0... [ 420.033235][T19611] netlink: 'syz.1.3710': attribute type 12 has an invalid length. [ 420.087481][T19611] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.3710'. [ 420.121997][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3710'. [ 420.130769][T19617] IPVS: using max 28 ests per chain, 67200 per kthread [ 420.226731][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.479896][T19637] netlink: 'syz.1.3716': attribute type 1 has an invalid length. [ 420.488423][T19637] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3716'. [ 420.539172][ T5829] block nbd6: Receive control failed (result -32) [ 420.964058][T19656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3720'. [ 420.990808][T19656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3720'. [ 421.053170][T19656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3720'. [ 421.521549][T19684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3729'. [ 421.786607][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3732'. [ 421.858461][T19703] netlink: 'syz.4.3734': attribute type 75 has an invalid length. [ 421.936355][T19705] delete_channel: no stack [ 422.015657][ T5485] veth0_vlan: left promiscuous mode [ 422.053120][ T5485] veth0_vlan: entered promiscuous mode [ 422.166293][T19712] syzkaller0: entered promiscuous mode [ 422.185834][T19712] syzkaller0: entered allmulticast mode [ 422.839149][T19749] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 422.859884][T19749] Cannot find del_set index 0 as target [ 422.869572][ T9271] net_ratelimit: 8 callbacks suppressed [ 422.869592][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.884335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.923742][T19747] vxcan1 speed is unknown, defaulting to 1000 [ 422.941585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.955501][T11705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.964528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.975405][T19754] validate_nla: 1 callbacks suppressed [ 422.975427][T19754] netlink: 'syz.0.3748': attribute type 21 has an invalid length. [ 423.067479][T19758] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 423.267807][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.456513][T19767] syzkaller0: entered promiscuous mode [ 423.463102][T19767] syzkaller0: entered allmulticast mode [ 423.485547][T19762] vxcan1 speed is unknown, defaulting to 1000 [ 423.490727][T19747] 9 speed is unknown, defaulting to 1000 [ 423.580575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.904913][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.914042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.290395][T19762] 9 speed is unknown, defaulting to 1000 [ 424.318127][T19804] netlink: 'syz.1.3761': attribute type 1 has an invalid length. [ 424.525424][T19812] smc: net device wlan0 applied user defined pnetid SYZ0 [ 424.674953][T19804] bond4: entered promiscuous mode [ 424.681005][T19804] bond4: entered allmulticast mode [ 424.686635][T19804] 8021q: adding VLAN 0 to HW filter on device bond4 [ 424.912658][T19822] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20000 [ 424.960169][T19822] __nla_validate_parse: 7 callbacks suppressed [ 424.962362][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.978824][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 425.012350][T19823] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3766'. [ 425.044732][T19822] erspan0: entered allmulticast mode [ 425.260257][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880785b9800: rx timeout, send abort [ 425.269631][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880785b9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 425.672832][T19859] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.3774'. [ 426.126658][T19897] netlink: 'syz.4.3787': attribute type 12 has an invalid length. [ 426.144236][T19899] netlink: 'syz.2.3788': attribute type 8 has an invalid length. [ 426.169378][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3788'. [ 426.189914][T19897] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 426.250089][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 426.495905][T19926] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3793'. [ 426.524612][T19926] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3793'. [ 426.555123][T19926] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3793'. [ 426.576886][T19926] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3793'. [ 426.598020][T19926] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3793'. [ 426.741008][T19933] netlink: 'syz.2.3797': attribute type 1 has an invalid length. [ 426.775617][T19935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.783050][T19935] IPv6: NLM_F_CREATE should be set when creating new route [ 426.790574][T19935] IPv6: NLM_F_CREATE should be set when creating new route [ 426.900539][T19944] netlink: 'syz.2.3801': attribute type 1 has an invalid length. [ 427.044629][T19953] netlink: 'syz.1.3803': attribute type 2 has an invalid length. [ 427.256664][T19968] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 427.265805][T19968] netlink: 'syz.1.3809': attribute type 6 has an invalid length. [ 427.275220][T19968] netlink: 'syz.1.3809': attribute type 6 has an invalid length. [ 427.333012][T19208] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 428.001649][T19964] syzkaller0: entered promiscuous mode [ 428.007196][T19964] syzkaller0: entered allmulticast mode [ 428.063022][ T47] net_ratelimit: 8 callbacks suppressed [ 428.063044][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.077230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.152218][T20005] netlink: Unknown conntrack attr (0) [ 428.376512][T20008] team0: Port device team_slave_0 removed [ 428.567434][T20024] veth1_macvtap: left promiscuous mode [ 428.600608][T20024] macsec0: entered promiscuous mode [ 428.643977][T20024] macsec0: entered allmulticast mode [ 428.721784][T20030] vlan3: entered allmulticast mode [ 428.741370][T20030] hsr0: entered allmulticast mode [ 428.747828][T20030] hsr_slave_0: entered allmulticast mode [ 428.781335][T20030] hsr_slave_1: entered allmulticast mode [ 428.792158][T20024] veth1_macvtap: entered promiscuous mode [ 428.803099][T20024] veth1_macvtap: entered allmulticast mode [ 428.823031][T20024] macsec0: left promiscuous mode [ 428.835397][T20024] macsec0: left allmulticast mode [ 428.850868][T20024] veth1_macvtap: left allmulticast mode [ 428.996971][T20045] veth1_to_team: entered allmulticast mode [ 429.103419][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.112539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.121868][T20039] syzkaller0: entered promiscuous mode [ 429.128219][T20039] syzkaller0: entered allmulticast mode [ 429.196605][T20056] geneve2: entered promiscuous mode [ 429.203695][T20056] geneve2: entered allmulticast mode [ 429.342354][ T9280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.362407][ T9280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.413221][T20067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.422269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.477439][T20060] syzkaller0: entered promiscuous mode [ 429.487253][T20060] syzkaller0: entered allmulticast mode [ 430.017426][T20102] __nla_validate_parse: 35 callbacks suppressed [ 430.017441][T20102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3843'. [ 430.142576][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.058493][T20113] netlink: 'syz.2.3847': attribute type 1 has an invalid length. [ 432.097708][T20113] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3847'. [ 432.130446][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3847'. [ 432.508756][T20134] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20001 [ 432.556704][T20143] ip6tnl1: entered promiscuous mode [ 432.557531][T20134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3854'. [ 432.863965][T20152] : entered promiscuous mode [ 433.046899][T20162] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3863'. [ 433.272677][ T5926] net_ratelimit: 13 callbacks suppressed [ 433.272700][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.287934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.297960][T20176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3866'. [ 433.752067][T20207] Cannot find add_set index 0 as target [ 433.863529][T20212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3873'. [ 433.903741][T20213] netlink: 'syz.3.3875': attribute type 12 has an invalid length. [ 433.912218][T20213] netlink: 'syz.3.3875': attribute type 29 has an invalid length. [ 433.920148][T20213] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3875'. [ 433.932723][T20213] netlink: 'syz.3.3875': attribute type 1 has an invalid length. [ 433.945397][T20213] netlink: 'syz.3.3875': attribute type 2 has an invalid length. [ 433.955332][T20213] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3875'. [ 433.956254][T20219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 433.994658][T20218] ip6gre0: Master is either lo or non-ether device [ 434.002335][T20217] ip6gre0: Master is either lo or non-ether device [ 434.301255][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.309837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.345723][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.354138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.421470][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.741607][T15701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.749982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.382789][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.999776][ T5190] udevd[5190]: worker [5819] /devices/virtual/block/nbd2 timeout; kill it [ 437.008714][ T5190] udevd[5190]: seq 15380 '/devices/virtual/block/nbd2' killed [ 438.460870][ T5909] net_ratelimit: 3 callbacks suppressed [ 438.460893][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.475022][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.484064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.501465][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.509705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.584992][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.226272][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.541142][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.549570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.501745][T15690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.662118][ T47] net_ratelimit: 6 callbacks suppressed [ 443.662142][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.676163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.702306][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.710622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.670852][ T9280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.741344][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.749660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.783304][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.791607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.262365][T15690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.701436][ T10] net_ratelimit: 4 callbacks suppressed [ 448.701459][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.863965][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.872360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.181745][ T1766] block nbd2: Possible stuck request ffff888026d28000: control (read@0,1024B). Runtime 240 seconds [ 449.192820][ T1766] block nbd2: Possible stuck request ffff888026d28200: control (read@1024,1024B). Runtime 240 seconds [ 449.203996][ T1766] block nbd2: Possible stuck request ffff888026d28400: control (read@2048,1024B). Runtime 240 seconds [ 449.216199][ T1766] block nbd2: Possible stuck request ffff888026d28600: control (read@3072,1024B). Runtime 240 seconds [ 449.901496][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.909936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.941377][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.949831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.741001][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.981344][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.989796][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.061938][ T9271] net_ratelimit: 4 callbacks suppressed [ 454.061961][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.076087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.782892][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.101402][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.109944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.141074][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.149535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.191209][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.199689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.821083][T11705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.261939][ T47] net_ratelimit: 4 callbacks suppressed [ 459.261956][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.276264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.312032][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.320567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.864134][T11705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.343955][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.353392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.403660][T20260] tls_set_device_offload_rx: netdev not found [ 461.538903][T20259] vlan2: entered allmulticast mode [ 461.587121][T20259] hsr0: entered allmulticast mode [ 461.597150][T20259] hsr_slave_0: entered allmulticast mode [ 461.613890][T20259] hsr_slave_1: entered allmulticast mode [ 461.644818][T20276] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 461.667462][T20277] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 462.042848][T20299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.101010][T20299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.381429][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.390064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.402820][T20306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.678078][T20318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'. [ 462.690118][T20318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'. [ 462.690854][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3895'. [ 462.825518][T20321] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3898'. [ 462.949391][T20324] syzkaller0: entered promiscuous mode [ 462.970475][T20324] syzkaller0: entered allmulticast mode [ 463.024721][T20334] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3901'. [ 463.283017][T20344] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3905'. [ 463.305401][T20344] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3905'. [ 463.351491][T20350] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3905'. [ 463.379518][T20350] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3905'. [ 463.497047][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3909'. [ 463.615997][T20366] netlink: 'syz.3.3912': attribute type 1 has an invalid length. [ 463.645068][T20366] netlink: 'syz.3.3912': attribute type 2 has an invalid length. [ 463.666007][T20366] netlink: 'syz.3.3912': attribute type 1 has an invalid length. [ 463.683780][T20366] netlink: 'syz.3.3912': attribute type 3 has an invalid length. [ 463.745936][T20374] netlink: 'syz.2.3915': attribute type 83 has an invalid length. [ 464.014937][T20387] netlink: 'syz.0.3917': attribute type 1 has an invalid length. [ 464.465317][ T47] net_ratelimit: 7 callbacks suppressed [ 464.465338][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.479455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.611689][T20422] syzkaller0: entered promiscuous mode [ 464.624423][T20422] syzkaller0: entered allmulticast mode [ 464.953302][T20439] bond2: entered promiscuous mode [ 464.962402][T20439] bond2: entered allmulticast mode [ 464.972184][T20439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.045651][T20447] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 465.058161][T20439] sctp: [Deprecated]: syz.4.3936 (pid 20439) Use of int in max_burst socket option. [ 465.058161][T20439] Use struct sctp_assoc_value instead [ 465.428612][T20457] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 465.469822][T20457] bond5: (slave lo): Enslaving as an active interface with an up link [ 465.488609][T20457] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 465.523210][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.532146][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.698714][T20481] x_tables: duplicate underflow at hook 2 [ 466.251271][T20510] veth0: entered promiscuous mode [ 466.293332][T20510] veth0: left promiscuous mode [ 466.513691][T20530] set match dimension is over the limit! [ 466.541234][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.549664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.622783][T20541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.766219][T20548] Unsupported ieee802154 address type: 0 [ 466.880620][T20548] netlink: 'syz.4.3966': attribute type 5 has an invalid length. [ 466.941013][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.036823][T20561] x_tables: unsorted underflow at hook 2 [ 467.298038][T20574] syzkaller0: entered promiscuous mode [ 467.322851][T20574] syzkaller0: entered allmulticast mode [ 467.373536][T20579] xt_l2tp: invalid flags combination: 0 [ 467.375841][T20576] syzkaller0: entered promiscuous mode [ 467.400614][T20576] syzkaller0: entered allmulticast mode [ 467.624838][T20587] netlink: 'syz.0.3977': attribute type 4 has an invalid length. [ 469.671464][T15691] net_ratelimit: 4 callbacks suppressed [ 469.671486][T15691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.686180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.694996][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.703461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.755846][T20548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.898505][T20622] netlink: 'syz.1.3987': attribute type 21 has an invalid length. [ 469.917102][T20622] IPv6: NLM_F_CREATE should be specified when creating new route [ 469.938418][T20622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.945734][T20622] IPv6: NLM_F_CREATE should be set when creating new route [ 469.953140][T20622] IPv6: NLM_F_CREATE should be set when creating new route [ 469.960653][T20622] IPv6: NLM_F_CREATE should be set when creating new route [ 469.981664][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.006572][T20628] netlink: 'syz.3.3988': attribute type 11 has an invalid length. [ 470.015233][T20632] netlink: 'syz.1.3987': attribute type 21 has an invalid length. [ 470.023060][T20633] netlink: 'syz.0.3991': attribute type 1 has an invalid length. [ 470.028046][T20627] smc: net device team0 applied user defined pnetid SYZ2 [ 470.048987][T20627] smc: net device caif0 applied user defined pnetid SYZ2 [ 470.063603][T20622] __nla_validate_parse: 11 callbacks suppressed [ 470.063624][T20622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3987'. [ 470.105663][T20632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.127395][T20622] bond5: (slave lo): Releasing backup interface [ 470.201347][T20622] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 470.250812][T20622] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 470.269651][T20645] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3995'. [ 470.342897][T20651] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3995'. [ 470.411114][T20653] IPv4: Oversized IP packet from 172.20.20.24 [ 470.419484][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 470.426192][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 470.716147][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.559376][T20670] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 472.816044][T20686] syzkaller0: entered promiscuous mode [ 472.851711][T20686] syzkaller0: entered allmulticast mode [ 472.913494][T20696] tipc: Enabled bearer , priority 0 [ 472.952603][T20680] tipc: Resetting bearer [ 473.054312][T20680] tipc: Disabling bearer [ 473.497251][T20731] netlink: 'syz.0.4015': attribute type 13 has an invalid length. [ 473.508964][T20728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4014'. [ 473.738882][T20741] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4018'. [ 474.106442][T20748] ip6tnl0: Caught tx_queue_len zero misconfig [ 474.373431][T20759] delete_channel: no stack [ 474.378969][T20758] delete_channel: no stack [ 474.568936][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4025'. [ 474.592976][T20771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4025'. [ 474.604035][T20763] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.611844][T20763] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.698923][T20763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.715710][T20763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.748753][T20763] veth0_vlan: left promiscuous mode [ 474.781385][T15701] net_ratelimit: 13 callbacks suppressed [ 474.781408][T15701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.795629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.858776][T20771] geneve2: entered promiscuous mode [ 474.867158][T20771] geneve2: entered allmulticast mode [ 474.875184][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.884303][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.917840][T20773] vxcan1 speed is unknown, defaulting to 1000 [ 475.508624][T20773] 9 speed is unknown, defaulting to 1000 [ 475.563132][T20810] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4035'. [ 475.584049][T20804] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4035'. [ 475.617986][T20804] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4035'. [ 475.627458][T20804] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4035'. [ 475.901565][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.910115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.062634][T11705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.951278][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.959733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.231211][T20750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.420601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.443972][T20847] netlink: 'syz.4.4038': attribute type 1 has an invalid length. [ 477.497650][T20847] geneve2: entered promiscuous mode [ 477.509019][T20847] geneve2: entered allmulticast mode [ 477.537785][T20848] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4036'. [ 477.895311][ T5909] IPVS: starting estimator thread 0... [ 478.019729][T20874] IPVS: using max 34 ests per chain, 81600 per kthread [ 478.265043][T20885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4047'. [ 478.643025][T20895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.671049][T20899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4052'. [ 478.711802][T20899] netlink: 4748 bytes leftover after parsing attributes in process `syz.1.4052'. [ 478.804519][T20907] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4054'. [ 478.967782][T20917] team0: Cannot enslave team device to itself [ 478.983407][T20920] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 478.992782][T20916] team0: Cannot enslave team device to itself [ 479.048054][T20922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.260928][ T1766] block nbd2: Possible stuck request ffff888026d28000: control (read@0,1024B). Runtime 270 seconds [ 479.272310][ T1766] block nbd2: Possible stuck request ffff888026d28200: control (read@1024,1024B). Runtime 270 seconds [ 479.284130][ T1766] block nbd2: Possible stuck request ffff888026d28400: control (read@2048,1024B). Runtime 270 seconds [ 479.295580][ T1766] block nbd2: Possible stuck request ffff888026d28600: control (read@3072,1024B). Runtime 270 seconds [ 479.436249][T20928] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4061'. [ 479.901876][T15691] net_ratelimit: 13 callbacks suppressed [ 479.901896][T15691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.916348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.070973][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.096048][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.104653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.494751][T20986] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 480.513408][T20987] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 480.609527][T20989] __nla_validate_parse: 5 callbacks suppressed [ 480.609556][T20989] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4083'. [ 480.704668][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4085'. [ 480.746078][T20997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4085'. [ 480.778966][T21003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4087'. [ 480.790654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.885326][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4088'. [ 481.111222][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.119805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.179158][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4092'. [ 481.213381][T21023] openvswitch: netlink: Flow actions attr not present in new flow. [ 481.441478][T21030] syzkaller0: entered allmulticast mode [ 481.638394][T21040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.672749][T21039] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4096'. [ 481.753392][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4096'. [ 482.152230][T21057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4101'. [ 482.163193][T21057] tipc: Invalid UDP bearer configuration [ 482.163258][T21057] tipc: Enabling of bearer rejected, failed to enable media [ 482.207492][T21059] netlink: 'syz.1.4103': attribute type 1 has an invalid length. [ 482.260065][T21056] ip6t_srh: unknown srh invflags 4000 [ 482.594405][T21086] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4110'. [ 482.654512][T21088] netlink: 'syz.2.4112': attribute type 1 has an invalid length. [ 482.670290][T21091] netlink: 'syz.2.4112': attribute type 1 has an invalid length. [ 482.703102][T21091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 482.776575][T21091] bond4: (slave gretap2): making interface the new active one [ 482.789217][T21091] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 482.869858][T21100] dvmrp6: entered allmulticast mode [ 483.066613][T21109] netlink: 'syz.1.4118': attribute type 1 has an invalid length. [ 483.292722][ T29] audit: type=1800 audit(1771824167.065:6): pid=21119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4121" name="memory.events" dev="tmpfs" ino=929 res=0 errno=0 [ 483.462311][T21123] syzkaller1: entered promiscuous mode [ 483.468014][T21123] syzkaller1: entered allmulticast mode [ 484.163280][T21146] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 484.216054][T21146] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 484.227474][T21146] gretap1: entered promiscuous mode [ 484.236632][T21146] gretap1: entered allmulticast mode [ 484.523915][T21170] netlink: 'syz.1.4135': attribute type 1 has an invalid length. [ 485.181154][T11705] net_ratelimit: 9 callbacks suppressed [ 485.181176][T11705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.262190][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.271349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.663970][T15690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.672725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.303766][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.312038][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.321315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.329515][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.338068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.633064][T21270] netlink: 'syz.4.4165': attribute type 4 has an invalid length. [ 486.643796][T21271] netlink: 'syz.4.4165': attribute type 4 has an invalid length. [ 486.749544][T21270] netlink: 'syz.4.4165': attribute type 2 has an invalid length. [ 486.760696][T21272] vlan3: entered promiscuous mode [ 486.765982][T21272] vlan3: entered allmulticast mode [ 486.771505][T21270] __nla_validate_parse: 10 callbacks suppressed [ 486.771522][T21270] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4165'. [ 486.818541][T21271] netlink: 'syz.4.4165': attribute type 2 has an invalid length. [ 486.837807][T21271] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4165'. [ 487.417516][T21297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4173'. [ 487.531776][T21309] tipc: Enabling not permitted [ 487.537491][T21309] tipc: Enabling of bearer rejected, failed to enable media [ 487.741242][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 487.933876][T21330] sctp: [Deprecated]: syz.3.4183 (pid 21330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.933876][T21330] Use struct sctp_sack_info instead [ 491.002227][T21352] sctp: [Deprecated]: syz.0.4191 (pid 21352) Use of int in max_burst socket option deprecated. [ 491.002227][T21352] Use struct sctp_assoc_value instead [ 491.043323][T21352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4191'. [ 491.052888][T21356] ksmbd: Unknown IPC event: 3, ignore. [ 491.149493][T21361] netlink: 'syz.1.4194': attribute type 1 has an invalid length. [ 491.165757][T21361] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4194'. [ 491.204629][T21364] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4194'. [ 491.263955][T21352] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4191'. [ 491.279560][T21363] netlink: 'syz.2.4192': attribute type 1 has an invalid length. [ 491.309862][T21352] netlink: 'syz.0.4191': attribute type 1 has an invalid length. [ 491.574079][T21379] netlink: 'syz.1.4196': attribute type 1 has an invalid length. [ 491.713204][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4200'. [ 491.730443][T21382] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4200'. [ 491.781510][T21385] netlink: 'syz.2.4201': attribute type 2 has an invalid length. [ 491.844459][T21385] v: entered promiscuous mode [ 491.875388][T21385] veth0: entered promiscuous mode [ 491.931641][T21393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4204'. [ 491.964795][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4205'. [ 492.014668][T21393] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 492.144242][T21384] veth0: left promiscuous mode [ 492.163557][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4207'. [ 492.285604][T21411] netlink: 'syz.1.4208': attribute type 5 has an invalid length. [ 492.481746][T21420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.725152][T21432] netlink: 'syz.4.4215': attribute type 1 has an invalid length. [ 492.747591][T21432] netlink: 'syz.4.4215': attribute type 1 has an invalid length. [ 492.894726][T21444] netlink: 'syz.4.4220': attribute type 2 has an invalid length. [ 492.931981][T21446] erspan0: left allmulticast mode [ 492.968688][T21446] wg1: left allmulticast mode [ 492.982523][T21446] bond_slave_0: left allmulticast mode [ 492.992854][T21446] veth1_to_team: left allmulticast mode [ 493.013651][T21446] syzkaller0: left allmulticast mode [ 493.053999][T21446] gretap1: left allmulticast mode [ 493.076215][T21446] team1: left allmulticast mode [ 493.088920][T21446] vlan3: left allmulticast mode [ 493.095541][T21446] hsr0: left allmulticast mode [ 493.101843][T21446] hsr_slave_0: left allmulticast mode [ 493.107568][T21446] hsr_slave_1: left allmulticast mode [ 493.114350][T21446] geneve2: left allmulticast mode [ 493.126558][T21450] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4223'. [ 493.202616][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4223'. [ 493.282151][T21468] sctp: [Deprecated]: syz.2.4225 (pid 21468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 493.282151][T21468] Use struct sctp_sack_info instead [ 493.439554][T21474] vxcan1 speed is unknown, defaulting to 1000 [ 493.564155][T21486] bond6: option lp_interval: invalid value (0) [ 493.571548][T21486] bond6: option lp_interval: allowed values 1 - 2147483647 [ 493.584019][T21486] bond6 (unregistering): Released all slaves [ 493.909434][T21474] 9 speed is unknown, defaulting to 1000 [ 494.042224][T21510] syzkaller0: entered promiscuous mode [ 494.048675][T21510] syzkaller0: entered allmulticast mode [ 494.184604][T21516] tipc: Started in network mode [ 494.190537][T21516] tipc: Node identity ac14140f, cluster identity 4711 [ 494.210593][T21516] tipc: New replicast peer: 255.255.255.255 [ 494.217312][T21516] tipc: Enabled bearer , priority 10 [ 494.453060][T21529] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4241'. [ 494.578611][T21535] xt_hashlimit: size too large, truncated to 1048576 [ 494.731657][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4245'. [ 494.732510][T21544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4246'. [ 494.765842][T21544] netlink: 'syz.1.4246': attribute type 21 has an invalid length. [ 494.775588][T21546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4247'. [ 495.332384][T11705] tipc: Node number set to 2886997007 [ 495.378542][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4258'. [ 495.646414][T21597] bond1 (unregistering): Released all slaves [ 496.652165][T21662] validate_nla: 6 callbacks suppressed [ 496.652187][T21662] netlink: 'syz.3.4279': attribute type 83 has an invalid length. [ 496.728690][T21664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.835337][T21674] netlink: 'syz.2.4282': attribute type 10 has an invalid length. [ 496.910167][T21674] team0: Device ipvlan1 failed to register rx_handler [ 497.202245][T21695] __nla_validate_parse: 7 callbacks suppressed [ 497.202353][T21695] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4287'. [ 497.430688][T21712] netlink: 'syz.1.4292': attribute type 39 has an invalid length. [ 497.549798][T21715] netlink: 'syz.1.4292': attribute type 83 has an invalid length. [ 497.611998][T21717] bridge3: entered promiscuous mode [ 497.638722][T21717] bridge3: entered allmulticast mode [ 497.676864][T21717] team0: Port device bridge3 added [ 497.793804][T21723] syzkaller0: entered promiscuous mode [ 497.810462][T21723] syzkaller0: entered allmulticast mode [ 497.826150][T21723] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4296'. [ 498.154726][T21746] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4303'. [ 498.168577][T21746] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4303'. [ 498.199401][T21738] vxcan1 speed is unknown, defaulting to 1000 [ 498.438603][T21760] xt_hashlimit: size too large, truncated to 1048576 [ 498.568445][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4306'. [ 498.586725][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4306'. [ 498.730080][T21738] 9 speed is unknown, defaulting to 1000 [ 499.235905][T21785] netlink: 'syz.1.4310': attribute type 10 has an invalid length. [ 499.292569][T21785] team0: Port device dummy0 added [ 499.327633][T21787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 499.447862][T21799] syzkaller0: entered promiscuous mode [ 499.486408][T21799] syzkaller0: entered allmulticast mode [ 499.501848][T21789] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4311'. [ 499.605803][T21804] netlink: 'syz.2.4315': attribute type 4 has an invalid length. [ 499.623716][T21804] netlink: 'syz.2.4315': attribute type 1 has an invalid length. [ 499.641700][T21804] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4315'. [ 499.672421][T21804] netlink: 'syz.2.4315': attribute type 13 has an invalid length. [ 499.884336][T21817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4319'. [ 499.894098][T21817] openvswitch: netlink: Duplicate key (type 32). [ 501.666220][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 502.252699][T21787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.263293][T21795] tipc: Started in network mode [ 502.268221][T21795] tipc: Node identity 6266d14073ab, cluster identity 4711 [ 502.276525][T21795] tipc: Enabled bearer , priority 0 [ 502.423985][T21795] tipc: Resetting bearer [ 502.477344][T21795] tipc: Disabling bearer [ 502.497520][T21827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4323'. [ 502.507179][T21827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4323'. [ 502.636293][T21837] lo: Caught tx_queue_len zero misconfig [ 502.664686][T21837] netlink: 'syz.0.4325': attribute type 6 has an invalid length. [ 502.877938][T21850] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.4329'. [ 502.891912][T21849] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.4329'. [ 502.905096][T21849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4329'. [ 503.165672][T21865] netlink: 'syz.3.4334': attribute type 1 has an invalid length. [ 503.305270][T21875] syzkaller0: entered promiscuous mode [ 503.313543][T21875] syzkaller0: entered allmulticast mode [ 503.396969][T21879] netlink: 54 bytes leftover after parsing attributes in process `syz.2.4339'. [ 503.407753][T21876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4337'. [ 503.424786][ T9281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.437559][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4339'. [ 503.470392][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4341'. [ 503.503614][T21886] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4341'. [ 503.613592][T21890] geneve3: entered promiscuous mode [ 503.618895][T21890] geneve3: entered allmulticast mode [ 503.969467][T21913] syzkaller0: entered promiscuous mode [ 503.977549][T21913] syzkaller0: entered allmulticast mode [ 504.014812][T21919] netlink: 'syz.1.4350': attribute type 4 has an invalid length. [ 504.461368][ T9281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.849168][T21962] netlink: 'syz.4.4357': attribute type 6 has an invalid length. [ 504.882773][T21965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.935978][T21973] netlink: 'syz.2.4360': attribute type 23 has an invalid length. [ 504.969781][T15701] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.999346][T15701] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.024682][T15701] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.097750][T21978] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 505.180943][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.190058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.370345][T15701] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.513436][ T9281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.053431][T22036] netlink: 'syz.0.4374': attribute type 1 has an invalid length. [ 506.080389][T22036] netlink: 'syz.0.4374': attribute type 2 has an invalid length. [ 506.098651][T22036] netlink: 'syz.0.4374': attribute type 1 has an invalid length. [ 506.128636][T22036] netlink: 'syz.0.4374': attribute type 3 has an invalid length. [ 506.162864][T22041] netlink: 'syz.0.4374': attribute type 12 has an invalid length. [ 506.335713][T22048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.343048][T22048] IPv6: NLM_F_CREATE should be set when creating new route [ 506.399819][T22052] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20001 [ 506.540783][ T9281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.821531][T22066] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 506.877179][T22074] syzkaller0: entered promiscuous mode [ 506.889447][T22074] syzkaller0: entered allmulticast mode [ 507.111536][T22091] xt_hashlimit: size too large, truncated to 1048576 [ 507.134465][T22093] IPVS: set_ctl: invalid protocol: 44 172.20.20.39:20019 [ 507.335481][T22100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.479529][T22105] openvswitch: netlink: IP tunnel dst address not specified [ 507.524393][T22105] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 507.581817][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.990483][T22142] __nla_validate_parse: 21 callbacks suppressed [ 507.990505][T22142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4400'. [ 508.220697][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.229847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.476227][T22160] validate_nla: 2 callbacks suppressed [ 508.476249][T22160] netlink: 'syz.3.4405': attribute type 1 has an invalid length. [ 508.566573][T22162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.587794][T22167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4407'. [ 508.601746][T22167] team_slave_1: Caught tx_queue_len zero misconfig [ 508.697249][T22162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.803316][T22162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.093208][T22187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4412'. [ 509.176320][T22194] netlink: 'syz.0.4414': attribute type 1 has an invalid length. [ 509.233622][T22194] bond3: entered promiscuous mode [ 509.239371][T22194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.258025][T22194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4414'. [ 509.286846][T22194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4414'. [ 509.320688][T22201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4416'. [ 509.328005][T22194] bond3: (slave bridge2): making interface the new active one [ 509.338555][T22194] bridge2: entered promiscuous mode [ 509.352056][ T1766] block nbd2: Possible stuck request ffff888026d28000: control (read@0,1024B). Runtime 300 seconds [ 509.363221][ T1766] block nbd2: Possible stuck request ffff888026d28200: control (read@1024,1024B). Runtime 300 seconds [ 509.374757][ T1766] block nbd2: Possible stuck request ffff888026d28400: control (read@2048,1024B). Runtime 300 seconds [ 509.382065][T22194] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 509.386121][ T1766] block nbd2: Possible stuck request ffff888026d28600: control (read@3072,1024B). Runtime 300 seconds [ 509.492665][T22201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4416'. [ 509.511607][T22194] syzkaller0: entered promiscuous mode [ 509.517203][T22194] syzkaller0: entered allmulticast mode [ 509.558021][T22211] netlink: 'syz.1.4419': attribute type 1 has an invalid length. [ 509.629321][T22211] 8021q: adding VLAN 0 to HW filter on device bond7 [ 509.672707][T22214] bond7: (slave geneve3): making interface the new active one [ 509.681325][T22220] tipc: Can't bind to reserved service type 0 [ 509.685304][T22214] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 509.766301][T22223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4423'. [ 509.903957][T22227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4424'. [ 509.930536][T22227] nbd: must specify a size in bytes for the device [ 509.942736][T22211] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4419'. [ 510.003743][T22211] team0: Port device dummy0 removed [ 510.507854][T22259] bridge2: entered promiscuous mode [ 510.518466][T22259] bridge2: entered allmulticast mode [ 510.527307][T22259] team0: Port device bridge2 added [ 510.561689][T22259] bridge0: port 3(team0) entered blocking state [ 510.572831][T22265] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 510.574890][T22259] bridge0: port 3(team0) entered disabled state [ 510.588330][T22259] team0: entered allmulticast mode [ 510.599934][T22259] team_slave_0: entered allmulticast mode [ 510.613611][T22259] team_slave_1: entered allmulticast mode [ 510.628498][T22259] team0: entered promiscuous mode [ 510.636768][T22259] team_slave_0: entered promiscuous mode [ 510.656440][T22259] team_slave_1: entered promiscuous mode [ 510.701020][ T9] net_ratelimit: 3 callbacks suppressed [ 510.701039][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.867966][T22285] IPVS: length: 239 != 24 [ 511.133687][T22302] netlink: 'syz.1.4446': attribute type 15 has an invalid length. [ 511.264831][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.276099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.286671][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.296733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.465083][T22306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.629166][T22323] x_tables: duplicate underflow at hook 1 [ 511.752362][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.428035][T22369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.613207][T22379] bond4 (unregistering): Released all slaves [ 512.665040][T22384] netlink: 'syz.3.4468': attribute type 30 has an invalid length. [ 512.780900][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.087104][T22404] syzkaller1: entered promiscuous mode [ 513.095193][T22404] syzkaller1: entered allmulticast mode [ 513.247146][T22417] __nla_validate_parse: 9 callbacks suppressed [ 513.247167][T22417] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4480'. [ 513.336717][T22425] netlink: 'syz.2.4482': attribute type 2 has an invalid length. [ 513.373124][T22427] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4483'. [ 513.392278][T22425] 9: entered promiscuous mode [ 513.822844][ T9280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.854849][T22444] vcan1: entered promiscuous mode [ 513.859983][T22444] vcan1: entered allmulticast mode [ 514.005934][T22454] tc_dump_action: action bad kind [ 514.085120][T22457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4493'. [ 514.111917][T22459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.197193][T22461] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4493'. [ 514.534017][T22477] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4497'. [ 514.563474][T22477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4497'. [ 514.591056][T22477] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4497'. [ 514.597235][T22478] IPv6: sit1: Disabled Multicast RS [ 514.631203][T22477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4497'. [ 514.679141][T22477] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4497'. [ 514.774642][T22483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4499'. [ 515.004047][T22494] netlink: 'syz.2.4504': attribute type 8 has an invalid length. [ 515.359944][T22513] vxcan1 speed is unknown, defaulting to 1000 [ 515.361513][T22524] Cannot find del_set index 4 as target [ 515.691174][T22538] IPVS: set_ctl: invalid protocol: 46 172.20.20.47:20004 [ 515.911522][ T9] net_ratelimit: 3 callbacks suppressed [ 515.911544][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.926815][T22553] netlink: 'syz.2.4519': attribute type 15 has an invalid length. [ 515.960091][T22553] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 515.974629][T22554] netlink: 'syz.4.4520': attribute type 62 has an invalid length. [ 516.006465][T22554] wg1: left allmulticast mode [ 516.139843][T22513] 9 speed is unknown, defaulting to 1000 [ 516.174982][T22553] block nbd2: Unsupported socket: should be TCP or UNIX. [ 516.361014][T22572] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 516.832051][T22608] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 516.941218][ T9280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.955795][T22608] vlan5: entered allmulticast mode [ 516.983266][T22608] geneve1: entered allmulticast mode [ 517.024158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.037522][T15689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.092073][ T9280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.109356][T22614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.160688][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.247748][T22618] sctp: [Deprecated]: syz.1.4540 (pid 22618) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.247748][T22618] Use struct sctp_sack_info instead [ 517.341682][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.926923][T22650] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 518.145019][T22663] netlink: 'syz.3.4554': attribute type 13 has an invalid length. [ 518.253513][T22666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.420423][T22676] __nla_validate_parse: 32 callbacks suppressed [ 518.420444][T22676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4560'. [ 518.514661][T22681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4562'. [ 518.538115][T22678] ip6tnl0: Caught tx_queue_len zero misconfig [ 518.723549][T22689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4566'. [ 519.044305][T22715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4573'. [ 519.187960][T22724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4577'. [ 519.209901][T22724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4577'. [ 519.210092][T22728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4579'. [ 519.231356][T22728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4579'. [ 519.316351][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4580'. [ 519.369672][T22738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4580'. [ 519.442221][T22728] bridge0: port 1(team0) entered disabled state [ 519.449222][T22728] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.916652][T15689] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.949577][T15689] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.968610][T15689] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.020282][T15689] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.141514][T22750] netlink: 'syz.1.4581': attribute type 1 has an invalid length. [ 520.201707][T22750] netlink: 'syz.1.4581': attribute type 1 has an invalid length. [ 520.758972][T22790] xt_hashlimit: invalid rate [ 520.915432][T22802] netlink: 'syz.2.4595': attribute type 1 has an invalid length. [ 520.936128][T22802] net_ratelimit: 11 callbacks suppressed [ 520.936150][T22802] sock: sock_set_timeout: `syz.2.4595' (pid 22802) tries to set negative timeout [ 521.036912][T22808] dvmrp8: entered allmulticast mode [ 521.070824][T22802] dvmrp6: left allmulticast mode [ 521.076043][T22802] dvmrp8: left allmulticast mode [ 521.102206][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.154535][T22811] veth0_to_bond: left allmulticast mode [ 521.274173][T22815] bond5 (unregistering): Released all slaves [ 521.367770][T22814] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 522.026236][T22867] 0: renamed from hsr_slave_1 (while UP) [ 522.054350][T22867] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 522.143629][ T9281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.283521][T22876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.322551][T22885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.334106][T22876] batadv0: entered promiscuous mode [ 522.351792][T22876] batadv0: entered allmulticast mode [ 522.390725][T22876] team0: Port device batadv0 added [ 522.547439][T22894] netlink: 'syz.0.4618': attribute type 2 has an invalid length. [ 522.623197][T22896] IPVS: length: 24 != 3445464 [ 522.731438][T22854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.752473][T15690] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 522.762654][T15690] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 522.826286][T22904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.182714][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.208467][T22925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.217365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.238090][T22925] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.245445][T22925] IPv6: NLM_F_CREATE should be set when creating new route [ 523.424543][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.565178][T22953] geneve2: entered promiscuous mode [ 523.598155][T15699] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 32772 - 0 [ 523.607914][T22955] __nla_validate_parse: 18 callbacks suppressed [ 523.607935][T22955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4635'. [ 523.607965][T15699] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 32772 - 0 [ 523.647214][T15699] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 32772 - 0 [ 523.667560][T15699] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 32772 - 0 [ 523.705458][T22953] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 524.178909][T22985] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4643'. [ 524.205072][T22985] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.213193][T22985] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.230675][T22985] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4643'. [ 524.240807][T22985] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.247997][T22985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.255765][T22985] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.263011][T22985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.294132][T22985] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4643'. [ 524.295840][T22988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4645'. [ 524.308933][T22985] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.321625][T22985] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.523476][T22994] vcan1: entered promiscuous mode [ 524.528747][T22994] vcan1: entered allmulticast mode [ 524.610263][T23012] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4650'. [ 524.624113][T23012] syzkaller0: entered promiscuous mode [ 524.629718][T23012] syzkaller0: entered allmulticast mode [ 524.809179][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4652'. [ 525.183961][T23046] netlink: 'syz.3.4661': attribute type 11 has an invalid length. [ 525.195931][T23046] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4661'. [ 525.218650][T23046] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4661'. [ 525.242049][T23046] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4661'. [ 525.258376][T23046] netlink: 'syz.3.4661': attribute type 1 has an invalid length. [ 525.377405][T23053] netlink: 'syz.3.4663': attribute type 2 has an invalid length. [ 525.390042][T23053] netlink: 'syz.3.4663': attribute type 1 has an invalid length. [ 525.749800][T23074] netlink: 'syz.1.4667': attribute type 11 has an invalid length. [ 525.785849][T23074] netlink: 'syz.1.4667': attribute type 6 has an invalid length. [ 526.300710][ T9277] net_ratelimit: 6 callbacks suppressed [ 526.300730][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.392174][T23105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.462384][T22742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.472080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.620652][T22742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.726472][T23123] openvswitch: netlink: Flow key attr not present in new flow. [ 526.806022][T23125] netlink: 'syz.1.4681': attribute type 2 has an invalid length. [ 527.208006][T23145] syzkaller0: entered promiscuous mode [ 527.214214][T23145] syzkaller0: entered allmulticast mode [ 527.261471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.275470][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.284678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.342450][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.382129][T23153] netlink: 'syz.2.4688': attribute type 1 has an invalid length. [ 527.414890][T23153] bond5: (slave geneve4): making interface the new active one [ 527.423958][T23153] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 527.433297][T15694] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 527.447351][T15694] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 527.458088][T15694] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 527.468059][T15694] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 528.137381][T23188] netlink: 'syz.4.4694': attribute type 1 has an invalid length. [ 528.930150][T23220] team0: entered allmulticast mode [ 528.945484][T23220] team_slave_0: entered allmulticast mode [ 528.958569][T23220] team_slave_1: entered allmulticast mode [ 528.988095][T23220] batadv1: entered allmulticast mode [ 529.203176][T23233] __nla_validate_parse: 11 callbacks suppressed [ 529.203197][T23233] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4710'. [ 529.246975][T23233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4710'. [ 529.431144][T23250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4715'. [ 529.516836][T23254] syzkaller1: entered promiscuous mode [ 529.535124][T23254] syzkaller1: entered allmulticast mode [ 529.958611][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4725'. [ 530.123792][T23293] xt_hashlimit: size too large, truncated to 1048576 [ 530.601406][T23313] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.4737'. [ 530.673552][T23318] netlink: 'syz.1.4739': attribute type 13 has an invalid length. [ 530.673720][T23316] tipc: Enabling of bearer rejected, already enabled [ 530.683212][T23322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.696666][T23322] IPv6: NLM_F_CREATE should be set when creating new route [ 530.704183][T23322] IPv6: NLM_F_CREATE should be set when creating new route [ 530.711606][T23322] IPv6: NLM_F_CREATE should be set when creating new route [ 530.729234][T23313] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4737'. [ 530.779217][T23322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.967146][T23337] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4739'. [ 530.991734][T23337] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4739'. [ 531.194971][T23350] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4747'. [ 531.198080][T23353] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4748'. [ 531.500888][ T9277] net_ratelimit: 14 callbacks suppressed [ 531.500929][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.569003][T23378] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 531.741250][T23389] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 531.933684][T23393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.941147][T23394] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 532.548309][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.655178][T23443] xt_TPROXY: Can be used only with -p tcp or -p udp [ 533.343264][T22742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.353458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.582084][ T9281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.819294][T23488] bond4: option lp_interval: invalid value (0) [ 533.826390][T23488] bond4: option lp_interval: allowed values 1 - 2147483647 [ 533.835924][T23488] bond4 (unregistering): Released all slaves [ 534.212408][T23501] __nla_validate_parse: 8 callbacks suppressed [ 534.212431][T23501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4791'. [ 534.244783][T23503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4792'. [ 534.269534][T23503] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 534.394614][T23513] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 534.434938][T23519] sctp: [Deprecated]: syz.2.4799 (pid 23519) Use of int in maxseg socket option. [ 534.434938][T23519] Use struct sctp_assoc_value instead [ 534.537800][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4798'. [ 534.580028][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4798'. [ 534.621900][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.656944][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4798'. [ 534.675058][T23537] netlink: 'syz.4.4802': attribute type 1 has an invalid length. [ 534.685758][T23525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4798'. [ 534.694552][T23540] openvswitch: netlink: EtherType 50a is less than min 600 [ 534.695740][T23537] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4802'. [ 534.704147][T23540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4804'. [ 534.765024][T23539] netlink: 'syz.2.4801': attribute type 1 has an invalid length. [ 534.776608][T23539] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4801'. [ 534.985363][T23553] netlink: 'syz.3.4808': attribute type 3 has an invalid length. [ 535.088469][T23559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4810'. [ 535.141979][T23565] ip6tnl0: Caught tx_queue_len zero misconfig [ 535.487608][T23589] syzkaller0: entered allmulticast mode [ 535.661961][ T9281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.854349][T23608] netlink: 'syz.1.4826': attribute type 1 has an invalid length. [ 535.995303][T23616] openvswitch: netlink: IP tunnel dst address not specified [ 536.343349][T23627] bond9 (unregistering): Released all slaves [ 536.351111][T23630] netlink: 'syz.2.4835': attribute type 1 has an invalid length. [ 536.358968][T23630] netlink: 'syz.2.4835': attribute type 1 has an invalid length. [ 536.420739][T23630] netlink: 'syz.2.4835': attribute type 8 has an invalid length. [ 536.450933][T23630] netlink: 'syz.2.4835': attribute type 1 has an invalid length. [ 536.458805][T23630] netlink: 'syz.2.4835': attribute type 1 has an invalid length. [ 536.473844][T23630] netlink: 'syz.2.4835': attribute type 8 has an invalid length. [ 536.537381][T23630] netlink: 'syz.2.4835': attribute type 1 has an invalid length. [ 536.545799][T23630] netlink: 'syz.2.4835': attribute type 1 has an invalid length. [ 536.554100][T23630] netlink: 'syz.2.4835': attribute type 8 has an invalid length. [ 536.707791][ T9277] net_ratelimit: 3 callbacks suppressed [ 536.707808][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.820134][T23654] tipc: Enabled bearer , priority 10 [ 537.331183][T23680] sctp: [Deprecated]: syz.4.4850 (pid 23680) Use of int in maxseg socket option. [ 537.331183][T23680] Use struct sctp_assoc_value instead [ 537.500587][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.509438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.550952][T23695] veth1_macvtap: left promiscuous mode [ 537.557278][T23695] macsec0: entered promiscuous mode [ 537.563168][T23695] macsec0: entered allmulticast mode [ 537.577461][T23699] veth1_macvtap: entered promiscuous mode [ 537.591920][T23699] veth1_macvtap: entered allmulticast mode [ 537.604613][T23699] macsec0: left promiscuous mode [ 537.611459][T23699] macsec0: left allmulticast mode [ 537.616749][T23698] can: request_module (can-proto-5) failed. [ 537.650413][T23699] veth1_macvtap: left allmulticast mode [ 537.748971][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.874579][T23714] syzkaller0: entered promiscuous mode [ 537.880703][T23714] syzkaller0: entered allmulticast mode [ 538.399054][T23747] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 538.548976][T23755] openvswitch: netlink: Missing valid actions attribute. [ 538.558721][T23755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.591146][T23757] syzkaller1: entered promiscuous mode [ 538.596764][T23757] syzkaller1: entered allmulticast mode [ 538.746023][T23761] bridge5: entered promiscuous mode [ 538.754852][T23761] bridge5: entered allmulticast mode [ 538.764310][T23761] team0: Port device bridge5 added [ 538.780952][ T9281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.797798][T23762] bridge6: entered promiscuous mode [ 538.804751][T23762] bridge6: entered allmulticast mode [ 538.810534][T23764] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4095471883/4095471885 [ 538.824179][T23762] team0: Port device bridge6 added [ 538.832383][T23765] bridge0: port 3(team0) entered blocking state [ 538.838853][T23765] bridge0: port 3(team0) entered disabled state [ 538.845998][T23764] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4095471883/4095471884 [ 538.863347][T23765] team0: entered promiscuous mode [ 538.868428][T23765] team_slave_0: entered promiscuous mode [ 538.871252][T23764] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4095471883/4095471885 [ 538.877813][T23765] team_slave_1: entered promiscuous mode [ 538.887481][T23764] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4095471883/4095471884 [ 538.910769][T23765] batadv1: entered promiscuous mode [ 538.917212][T23765] bridge0: port 3(team0) entered blocking state [ 538.923637][T23765] bridge0: port 3(team0) entered forwarding state [ 539.203819][T23775] syzkaller0: entered promiscuous mode [ 539.232754][T23775] syzkaller0: entered allmulticast mode [ 539.291706][T15689] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 539.301063][T15689] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 539.422911][ T1766] block nbd2: Possible stuck request ffff888026d28000: control (read@0,1024B). Runtime 330 seconds [ 539.434150][ T1766] block nbd2: Possible stuck request ffff888026d28200: control (read@1024,1024B). Runtime 330 seconds [ 539.434267][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.446107][ T1766] block nbd2: Possible stuck request ffff888026d28400: control (read@2048,1024B). Runtime 330 seconds [ 539.455463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.466409][ T1766] block nbd2: Possible stuck request ffff888026d28600: control (read@3072,1024B). Runtime 330 seconds [ 539.824546][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.693424][T23810] __nla_validate_parse: 32 callbacks suppressed [ 541.693446][T23810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4889'. [ 541.800643][T23810] validate_nla: 3 callbacks suppressed [ 541.800664][T23810] netlink: 'syz.2.4889': attribute type 1 has an invalid length. [ 541.831578][T23810] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4889'. [ 541.904564][ T9281] net_ratelimit: 1 callbacks suppressed [ 541.904587][ T9281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.093049][T23833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4896'. [ 542.127045][T23836] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4897'. [ 542.271534][T23844] netlink: 'syz.3.4900': attribute type 2 has an invalid length. [ 542.293502][T23844] netlink: 119 bytes leftover after parsing attributes in process `syz.3.4900'. [ 542.464100][T22742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.474334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.534343][T23865] netlink: 'syz.4.4906': attribute type 7 has an invalid length. [ 542.562022][T23865] netlink: 'syz.4.4906': attribute type 8 has an invalid length. [ 542.631401][T15700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.641211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.944671][ T9281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.133436][T23907] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 543.177243][T23909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4920'. [ 543.216517][T23909] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 543.227596][T23909] team0: Port device batadv1 added [ 543.263121][T23912] bridge4: entered promiscuous mode [ 543.275074][T23912] bridge4: entered allmulticast mode [ 543.299211][T23912] team0: Port device bridge4 added [ 543.385719][T23915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.394824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.414359][T23915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.450501][T23917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4924'. [ 543.472258][T23917] : entered promiscuous mode [ 543.951217][T23945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4934'. [ 543.983566][T23948] netlink: 'syz.0.4935': attribute type 20 has an invalid length. [ 543.991568][T23949] netlink: 'syz.2.4936': attribute type 1 has an invalid length. [ 544.015959][T23948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4935'. [ 544.053186][T23954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4936'. [ 544.067961][T23955] sctp: [Deprecated]: syz.0.4935 (pid 23955) Use of int in max_burst socket option. [ 544.067961][T23955] Use struct sctp_assoc_value instead [ 544.115136][T23959] --map-set only usable from mangle table [ 544.174465][T23952] vxcan1 speed is unknown, defaulting to 1000 [ 544.279705][T23968] can: request_module (can-proto-3) failed. [ 544.279714][T23967] can: request_module (can-proto-3) failed. [ 544.630087][T23984] [ 544.632564][T23984] ====================================================== [ 544.639687][T23984] WARNING: possible circular locking dependency detected [ 544.646716][T23984] syzkaller #0 Not tainted [ 544.651404][T23984] ------------------------------------------------------ [ 544.658448][T23984] syz.4.4942/23984 is trying to acquire lock: [ 544.664540][T23984] ffffffff8fd47a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 544.673751][T23984] [ 544.673751][T23984] but task is already holding lock: [ 544.681120][T23984] ffff88807b4b7770 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 544.690467][T23984] [ 544.690467][T23984] which lock already depends on the new lock. [ 544.690467][T23984] [ 544.700870][T23984] [ 544.700870][T23984] the existing dependency chain (in reverse order) is: [ 544.710055][T23984] [ 544.710055][T23984] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 544.718228][T23984] _raw_spin_lock_bh+0x36/0x50 [ 544.723514][T23984] nr_del_node+0x2a9/0xbb0 [ 544.728486][T23984] nr_rt_ioctl+0xb34/0xf90 [ 544.733528][T23984] sock_do_ioctl+0x101/0x320 [ 544.738674][T23984] sock_ioctl+0x5c6/0x7f0 [ 544.739950][T23978] bond4: option resend_igmp: invalid value (32767) [ 544.743641][T23984] __se_sys_ioctl+0xfc/0x170 [ 544.743668][T23984] do_syscall_64+0x14d/0xf80 [ 544.743692][T23984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.750604][T23978] bond4: option resend_igmp: allowed values 0 - 255 [ 544.755489][T23984] [ 544.755489][T23984] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 544.755531][T23984] _raw_spin_lock_bh+0x36/0x50 [ 544.787096][T23984] nr_rt_device_down+0xbe/0x860 [ 544.792565][T23984] nr_device_event+0x137/0x150 [ 544.797864][T23984] notifier_call_chain+0x1be/0x400 [ 544.803515][T23984] __dev_notify_flags+0x16d/0x310 [ 544.809321][T23984] netif_change_flags+0xe8/0x1a0 [ 544.814875][T23984] dev_change_flags+0x130/0x260 [ 544.820260][T23984] dev_ioctl+0x7b4/0x1150 [ 544.825127][T23984] sock_do_ioctl+0x23e/0x320 [ 544.830252][T23984] sock_ioctl+0x5c6/0x7f0 [ 544.835129][T23984] __se_sys_ioctl+0xfc/0x170 [ 544.840372][T23984] do_syscall_64+0x14d/0xf80 [ 544.845528][T23984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.851971][T23984] [ 544.851971][T23984] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 544.859922][T23984] __lock_acquire+0x15a5/0x2cf0 [ 544.865417][T23984] lock_acquire+0xf0/0x2e0 [ 544.870391][T23984] _raw_spin_lock_bh+0x36/0x50 [ 544.875708][T23984] nr_del_node+0x57d/0xbb0 [ 544.880691][T23984] nr_rt_ioctl+0xb34/0xf90 [ 544.885723][T23984] sock_do_ioctl+0x101/0x320 [ 544.890876][T23984] sock_ioctl+0x5c6/0x7f0 [ 544.895760][T23984] __se_sys_ioctl+0xfc/0x170 [ 544.901027][T23984] do_syscall_64+0x14d/0xf80 [ 544.906187][T23984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.912814][T23984] [ 544.912814][T23984] other info that might help us debug this: [ 544.912814][T23984] [ 544.923069][T23984] Chain exists of: [ 544.923069][T23984] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 544.923069][T23984] [ 544.937045][T23984] Possible unsafe locking scenario: [ 544.937045][T23984] [ 544.944521][T23984] CPU0 CPU1 [ 544.949996][T23984] ---- ---- [ 544.955389][T23984] lock(&nr_node->node_lock); [ 544.960178][T23984] lock(nr_node_list_lock); [ 544.967396][T23984] lock(&nr_node->node_lock); [ 544.974706][T23984] lock(nr_neigh_list_lock); [ 544.979398][T23984] [ 544.979398][T23984] *** DEADLOCK *** [ 544.979398][T23984] [ 544.987544][T23984] 2 locks held by syz.4.4942/23984: [ 544.992748][T23984] #0: ffffffff8fd47ab8 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 545.002338][T23984] #1: ffff88807b4b7770 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 545.012017][T23984] [ 545.012017][T23984] stack backtrace: [ 545.017921][T23984] CPU: 0 UID: 0 PID: 23984 Comm: syz.4.4942 Not tainted syzkaller #0 PREEMPT(full) [ 545.017939][T23984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 545.017948][T23984] Call Trace: [ 545.017956][T23984] [ 545.017963][T23984] dump_stack_lvl+0xe8/0x150 [ 545.017984][T23984] print_circular_bug+0x2e1/0x300 [ 545.018008][T23984] check_noncircular+0x12e/0x150 [ 545.018030][T23984] __lock_acquire+0x15a5/0x2cf0 [ 545.018064][T23984] lock_acquire+0xf0/0x2e0 [ 545.018080][T23984] ? nr_del_node+0x57d/0xbb0 [ 545.018101][T23984] ? nr_del_node+0x247/0xbb0 [ 545.018123][T23984] ? nr_del_node+0x57d/0xbb0 [ 545.018143][T23984] _raw_spin_lock_bh+0x36/0x50 [ 545.018162][T23984] ? nr_del_node+0x57d/0xbb0 [ 545.018182][T23984] nr_del_node+0x57d/0xbb0 [ 545.018204][T23984] nr_rt_ioctl+0xb34/0xf90 [ 545.018227][T23984] ? kasan_quarantine_put+0xbb/0x1f0 [ 545.018241][T23984] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 545.018265][T23984] ? apparmor_capable+0x137/0x1a0 [ 545.018288][T23984] ? capable+0x88/0xe0 [ 545.018305][T23984] ? nr_ioctl+0x1b1/0x3b0 [ 545.018323][T23984] sock_do_ioctl+0x101/0x320 [ 545.018339][T23984] ? __pfx_sock_do_ioctl+0x10/0x10 [ 545.018352][T23984] ? freezing_slow_path+0x115/0x160 [ 545.018379][T23984] sock_ioctl+0x5c6/0x7f0 [ 545.018393][T23984] ? __pfx_sock_ioctl+0x10/0x10 [ 545.018407][T23984] ? __fget_files+0x2a/0x420 [ 545.018425][T23984] ? __fget_files+0x3a0/0x420 [ 545.018443][T23984] ? __fget_files+0x2a/0x420 [ 545.018462][T23984] ? bpf_lsm_file_ioctl+0x9/0x20 [ 545.018480][T23984] ? __pfx_sock_ioctl+0x10/0x10 [ 545.018493][T23984] __se_sys_ioctl+0xfc/0x170 [ 545.018509][T23984] do_syscall_64+0x14d/0xf80 [ 545.018530][T23984] ? trace_irq_disable+0x3b/0x150 [ 545.018550][T23984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.018565][T23984] ? clear_bhb_loop+0x40/0x90 [ 545.018581][T23984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.018595][T23984] RIP: 0033:0x7f8ac519c629 [ 545.018609][T23984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.018622][T23984] RSP: 002b:00007f8ac5fd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.018637][T23984] RAX: ffffffffffffffda RBX: 00007f8ac5416180 RCX: 00007f8ac519c629 [ 545.018648][T23984] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000007 [ 545.018657][T23984] RBP: 00007f8ac5232b39 R08: 0000000000000000 R09: 0000000000000000 [ 545.018667][T23984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.018676][T23984] R13: 00007f8ac5416218 R14: 00007f8ac5416180 R15: 00007ffdc4d7cef8 [ 545.018693][T23984] [ 545.291853][T23978] bond4 (unregistering): Released all slaves [ 545.319169][T23952] 9 speed is unknown, defaulting to 1000 [ 545.348591][T23985] syzkaller1: entered promiscuous mode [ 545.360929][T23985] syzkaller1: entered allmulticast mode [ 545.383661][T23977] vxcan1 speed is unknown, defaulting to 1000 [ 545.506776][T23977] 9 speed is unknown, defaulting to 1000 [ 547.341650][ T5880] net_ratelimit: 23 callbacks suppressed [ 547.341672][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.381804][T15701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.390827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.399780][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.408528][T15701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.418346][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.427501][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.503378][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.543975][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.431079][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.622612][ T5880] net_ratelimit: 2 callbacks suppressed [ 552.622629][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.662264][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.141011][T15701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.149794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog