last executing test programs: 2.622429361s ago: executing program 2 (id=5433): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000400)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x4044804) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/83, 0x53}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "910d000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x104}, 0x1, 0x0, 0x0, 0x180}, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000280)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6}, @device_b, @device_b, @random="f56b19124e1f", {0xc, 0x1}}, 0x6820, @random=0x9, 0x2002, @void, @val, @void, @void, @void, @val={0x5, 0x7f, {0x3, 0x31, 0x4, "74c97a7a8dbbe93fa7e1c134c2d1e7cba35e2d4c53ceb525c17da544684f45892b977ec2df79b2154a39b00702ca0c51e7ef946db61a2d09956beff734f83438f59c1e42b6139b4a4fa91b34b8264e05a05046239a0155078b4c277898e2ecff408e33c1684fc5b3b8752ea858ac898208aee9152329a360f491c9dc"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x4, 0x78, 0x7}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0xa0}}, @val={0x76, 0x27, {0x9, 0x3, 0x33, 0x5}}, [{0xdd, 0x6, "000100000000"}]}, 0xd1) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000240)=@ctrl_frame=@ba={{}, {0x40}, @device_a, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x3}, {0x5, 0x7}, "5bd654f78d16c2fe"}}, 0x1c) 2.280580183s ago: executing program 1 (id=5438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x8002, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, &(0x7f0000000280)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xe, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000300000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000f700000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1e}, 0x94) 2.169031881s ago: executing program 3 (id=5440): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$kcm(0x29, 0x7, 0x0) 2.139987919s ago: executing program 1 (id=5441): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000016000000ff0100000300000000000000", @ANYRES32, @ANYBLOB="0000000000004000002051f7c816a03300"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3d, 0x3d, 0x8, [@const={0xe, 0x0, 0x0, 0xa, 0x1}, @typedef={0x9}, @datasec={0x4, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x5, 0x6}, {0x4, 0x59, 0x2}], "d5"}]}, {0x0, [0x61, 0x30, 0x0, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/45, 0x60, 0x2d, 0x0, 0x1, 0x10000}, 0x28) (rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) close(0x3) (async) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xc) (async, rerun: 64) socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18db0000ff01000000000000000000000000000000000000000000000724e1ed90351eb8975b47345a282b419e6515cf8ebd0a1b2f354a9e1e30c8331f69d794f084b0f461e5ef53acd7368cacb8163b21465e3e9dabbfd96623e532048e69fc0e4f92b4ab447553ba93240fbb5d9eb2e1b5cefe618c780b03a6794d452c99f2617bd24654061ac3", @ANYRES32=r0, @ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) 1.962481152s ago: executing program 3 (id=5443): socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1e, 0x0, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000640)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$tipc(0x1e, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000009c0)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x2000000}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = epoll_create1(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x20) 1.879190743s ago: executing program 2 (id=5444): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\\%\xe9}^X!\'\x00', 0x40, &(0x7f0000000040)={@_ha_fsid={[0x1, 0x7]}, {0x8, 0x2, 0xf0, 0x3}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x5}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x24}, 0x1, 0x0, 0x0, 0x400d7}, 0x4800) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:init_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devlog_t:s0\x00'}]}, 0xa0}}, 0x8000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000440)=0x1000, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@deltaction={0x44, 0x31, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0x40) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x4c0c0) getsockname$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r3, 0x400, 0x80000001, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4044890) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000900)={0x0, 0xffffffff, 0x30}, &(0x7f0000000940)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, &(0x7f0000000980)={r6, @in={{0x2, 0x4e20, @multicast1}}, 0x9, 0x8, 0xb}, &(0x7f0000000a40)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000a80)={r6, 0xcb6}, &(0x7f0000000ac0)=0x8) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b40), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x3c052000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r7, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000002}, 0x48040) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x0, 0x800, 0x70bd28, 0x8, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x890}, 0x80) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000d40)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={r6, 0xa4ad}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@getstats={0x1c, 0x5e, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x2}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040041}, 0x0) close(r0) sendmsg$nl_route_sched(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)=@gettclass={0x24, 0x2a, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xb}, {0xf, 0xe}, {0xd, 0xfff2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r9) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r10, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4080) 1.757715142s ago: executing program 4 (id=5445): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002900010000000000000000001200000008000100", @ANYRES32=r0, @ANYBLOB="0aae7e9262a8d05e1df7d2cd25436630"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.598911968s ago: executing program 0 (id=5446): socket(0x23, 0x6, 0x0) (async, rerun: 32) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0) 1.590244842s ago: executing program 1 (id=5447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0xfc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x90, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff98}, {0x61, 0x6, "fb97564f8f470910dd75fcd24a81607f5323d13806d7a349d6c55ebc78f02f1a38c9a920041c793cca89ef5c00000000000000002c032f52f86e65b25b12aa602ed4677fe8255909630e02edcba2f47f75b45f0a50ece7857ea7587dd2"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xe7b}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d46, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) 1.517647639s ago: executing program 3 (id=5448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "640000002e6573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) 1.439034332s ago: executing program 4 (id=5449): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x401, 0x0, 0x0, {{@in6=@mcast2, @in6=@loopback, 0x1234, 0x9a, 0x0, 0xfffd, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@local, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x5b57, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x4000800) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000000000000000000000000000000000000000000000000000104e2400000a00200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0700000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000003000000000000200200fffffffffeffffff000000001e00000300"/112], 0xb8}}, 0x4004) (async) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c821}, 0x0) 1.391645961s ago: executing program 1 (id=5450): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c0100001000010000000000feffffffe0000002000000000000000000000000000000000000000000000000001000000000000000000000008feb609874dc3c2422e76b357078aa6bd6744d69683ae748363f921fa1e89fee7e5ea341c7502854535cff5a06131cb056ff7f000043311cbee4d079c9054cb705663b01e46c0528330000000000000002e5a43960ddaeeed6f42085330d24c1ae96ec3e14fa163a98982f8bafaed1d849885b9db3ae359b8a6ba63b2eb4b0dd7aad8a6a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003300000000000000000000000000ffff7f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c00170000000000ffffffff000000000000000000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210002000000"], 0x15c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000740)={0x0, 0x5}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x44010) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000d0a01030000000000ca5c712a7531079b3b558700000005000000f321020073797a32000000000900020073797a320000000008000440000000000900010073797a30000000000800044000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c0100001000010000000000feffffffe0000002000000000000000000000000000000000000000000000000001000000000000000000000008feb609874dc3c2422e76b357078aa6bd6744d69683ae748363f921fa1e89fee7e5ea341c7502854535cff5a06131cb056ff7f000043311cbee4d079c9054cb705663b01e46c0528330000000000000002e5a43960ddaeeed6f42085330d24c1ae96ec3e14fa163a98982f8bafaed1d849885b9db3ae359b8a6ba63b2eb4b0dd7aad8a6a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003300000000000000000000000000ffff7f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c00170000000000ffffffff000000000000000000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210002000000"], 0x15c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000740)={0x0, 0x5}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740ab487b1b512f33a8dbd67a8b35f2405127f309901ea13e31d5810f85eae8f528c938c24abb1b1abbda2e7fa6e0758629bb09ed64a8ba5b2ef3c3591fd06d7e10d93c0857ecac854ac51ad69639d98adb2c1464e444cc1a6a2e7ee244622433b51f58606b063f4938101a7e764c957eba2e913b2ac10435471fa769740a1275cb467e5264b71bc8727fc12e9aba46e4a8abf3dda91e0da608d6a0a35573d5524fb25451cc23051887de4df85c8e771260c4943e78905aa1e7493027366ed1bea0d80304804800"], 0x558}}, 0x40) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x44010) (async) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000d0a01030000000000ca5c712a7531079b3b558700000005000000f321020073797a32000000000900020073797a320000000008000440000000000900010073797a30000000000800044000000003"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) (async) 1.327165512s ago: executing program 0 (id=5451): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000029000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="69254a4092ce44fd235ea2800b86225f805d2f11ab6f609e130447b078724355928e13b2f12013806bad249f62cdfcd7ebbc809e8f1a2d6cb76c8c40dd8cae6cfe164a3d9b18c02800fc4cc2c1c7428aafe7217e7cc0c7bdbf7a46ea0ca65589eabc13f5048fa9ac25f47544e52c67960387f943f13920a94984e636b9440e71a93066035298b98ad1eb718f67fabfa1d1a27d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) 1.325272545s ago: executing program 2 (id=5452): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={r1, 0x1, 0x6}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000500)=r4}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r6, &(0x7f0000000580), 0x0}, 0x20) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 1.303342324s ago: executing program 3 (id=5453): r0 = socket$kcm(0xa, 0x5, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @multicast1, @remote}, &(0x7f00000007c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="a1", 0x1}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3], 0x30, 0x40400d1}}], 0x1, 0x10) (async) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=@bridge_getlink={0x40, 0x12, 0x4, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x2, 0x8100}, [@IFLA_NET_NS_FD={0x8, 0x1c, r4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3a31c}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf122}, @IFLA_LINKMODE={0x5, 0x11, 0x7}]}, 0x40}}, 0x40020) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='`', 0x1}], 0x1}, 0x41) (async, rerun: 32) r6 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) getpeername$l2tp6(r6, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000240), 0x4) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x14c, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x80, 0x0, 0x2f}, {@in6=@remote, 0x0, 0x32}, @in=@private=0xa010101, {0x323, 0x80000000, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x200000000}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @offload={0xc, 0x1c, {r1, 0x2}}]}, 0x14c}}, 0x200080d4) r8 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) (async) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000280)={'wlan1\x00', @random="0200ac7f7f00"}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f00000000c0)=0x1000f85, 0x64) 1.187967098s ago: executing program 4 (id=5454): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @random="0100003600"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1d, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x5e}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r4, 0x29, 0x32, &(0x7f00000008c0)="9ea2a0b1a39471c2e58c96cae6850478554b8bab", 0x14) sendmmsg$inet6(r4, &(0x7f0000000900)=[{{&(0x7f0000000940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000009c0)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xb130, 0x5, 0x0, 0xea}, 0x60}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000500), 0x56) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r7, 0x42}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200dc0f14000e0000000025c10200000001125ce882cbf400930bf4533f00429c65112a", 0x26}, {&(0x7f0000000680)="02db0b9ef1cafdab", 0xdd86}], 0x2}, 0x4005) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r9, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c00000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xfffffffe}, 0x10}, 0x94) 1.135826167s ago: executing program 0 (id=5455): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) (async) 1.05822516s ago: executing program 1 (id=5456): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x7fffffffffffffff}) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0xa0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) (async) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000000)) 906.006499ms ago: executing program 0 (id=5457): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r0, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}]}, 0x24}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r0, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}]}, 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r4) getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0xd) (async) getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0xd) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r8) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r8) getsockname$packet(r8, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) sendmsg$nl_route_sched(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000a00)=@qipcrtr={0x2a, 0x2, 0x2}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000a80)="4db815da9801c686d7a466d721271377631ed70ca4d9636273d92aed58af6a3738f8bcffc1b5ed431d239320f48feb08b828ea9a134b09763a5c77e6181de81e6c6ab9351eba107014f3f8f4079001ae9176078f7b072bfa", 0x58}, {&(0x7f0000000b00)="06b14c2fddb7e1adbe2e00cbe0d0ef342f6e0c6272b3e1bc0eae3dbd7b5ae995e525cec7994abb64a970471be02205b5fb4bccf17686584adf4a3f60a20e305ca12f9e709f13c78c6dfeb1370808ea150e", 0x51}, {&(0x7f0000001040)="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", 0xfb}, {&(0x7f0000000bc0)="3edcaf7e09c6a78028274d8f5a2812b28261703339bc632040d6398b46cab790bd1af4d4464c75af616cb1ecc8e4dc5338b2b67a19d8f11d1f52", 0x3a}, {&(0x7f0000000c00)="df0f6bfb815a88f5c010712816518febca6205238584758717cd183fcf2daa2c5a9461339f5563c1987ebe7e2e85177b00f29167eae6e62a6dcaf2cd6c403fd1a092dc6e17f2c86498aac8563cb5974d2a1c", 0x52}, {&(0x7f0000000c80)="8fba851cfc11932e144d4780bf557a2296f2cefae06fdab290b32756410187098fa10ed670c9b8e726244794539ce8f68b35eb082b98aa95347f389d34028f87bd2e74cfbeb040d0b2f38c5d425296e92ec046c166c40e4581cfcca5e05104b985a7b83c5750faba5f4d93ad3fe5354aba125505c05536a1dabd45684110b77f9af45f65ff0a24646700d040d127e30b4b9b6ebeedc5db8d148ef1adf25f86f5144848fe66142f620264da96abe26abf", 0xb0}, {&(0x7f0000000d40)="18b4811c54c83c1d7288cbf1fe25d0b0dbece76e9a2cd058c2dcc565339c3084b2796c3ff1dc6cf9c80bec4da9d7bd97fce37caed77b3e2d5599f358eec28a4d018ef20644cf5f16de456b3fd08bccf351f059338d74ad544decd1dcaecdb24ea5108cfd9ce73c38e2940b5ff05cf369b512fe57f91ffa6d5c75fc12f81d839a03de00ca6678", 0x86}, {&(0x7f0000000e00)="105ac7e3a88287f1b978c7884c152cf7cc34ce7057ad62a43dca13b28493b09a0c800f124417562be6348ba78f3c347615276de4dc8a5cb48824427141b89873f87e45d759ea6ff6355ec6d6b5a149b266f248bf88850a6db1cd3e492621b9a4e938c5951c4cdb5fff7d3176378fb8d1df7cbf6f227eaa6be356a223b4393804fe31533575ff10366e0a7daec62be78badc6a7a17c2f97585b150fbc2986f96b745e27d666d6ede7d3b942797d2337b059c806417d1d0a0dac45e860c4442209a9d1a60e68db633e1fad44b21e223f264940ed9a58818c", 0xd7}], 0x8, &(0x7f0000000f80)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}], 0x30}, 0x4000080) sendmsg$nl_route(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newchain={0x84, 0x64, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x1}, {0xa, 0x7}, {0x4, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xf8, 0x9}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x11}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x81, 0x5}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x84}}, 0x24000004) r11 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000400)={'ipvlan1\x00', 0x0}) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000440)=0xf3f, 0x4) sendto$packet(r11, &(0x7f0000000480)="3f03fe7f0302140006121e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000500)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="3800001b03010104000000000000000002000000240001801400018008008be874912c0100e000000108000200e00000010c0002808a9a096c00000000"], 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="3800001b03010104000000000000000002000000240001801400018008008be874912c0100e000000108000200e00000010c0002808a9a096c00000000"], 0x38}}, 0x0) 905.056077ms ago: executing program 3 (id=5458): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b000100657874686472000014000280050002008300000008000640000000010900020073797a3200000000140000001100010000000000000000000200000a10e2d1663c083aa12a87dbb4d4d41c7ec59dfb18fd71cd715e971ee34e32828f01eae10edb91594c9e6ed85427de0727d4945062281a42bd0884f524df2fc9ea4508233e446589026dd7dae6a5a5f0916024616c75e78dfce9442d8f71777d52cd3af795b38d1d80b2aaa37213c946f11c44b86b41a2ed0e706b4130854567fc8859f13ec0c298cee6b2fd64c5418174b4f80f8d96863924aee0a354913a8e79a1640626fcf3795c87d4b36353d9fc78f89e15973ad61e2950957a01504f699dbdc771079552af35c76856d4142c39a5f9ad057e62889cb30765637eaba7c980b56c6a55a0d4b57a4c9501107c9f99c76603186cfa58141516d874a2defb7e79fe2bb15045b540cf797c3b7c27407d7263ee3cc799943ebe832a5cc61a6bcf6cf49995e4b85f4548ff83c58f3466f3d085d7ee0b191e0710ed1fa3f00fa6168da9148f2ad8114ff3eb1d54a1ebc7148f3c6bbeee7a052e29c957897bef2fb5bd57657ef3ffcaf40b1ff5aeb2b1b13f5b6a0f6c5f61b3a4198f418337be21b0fb19c9ed71fea4"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x10) 879.80856ms ago: executing program 2 (id=5459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x53}}}}, ["", "", "", "", "", ""]}, 0x20}}, 0x4008010) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000d00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x2004}, 0x10}, 0x34) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x4, 0xffffffff, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffff8}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 811.909906ms ago: executing program 1 (id=5460): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) r3 = socket(0x15, 0xa, 0x83) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000300), &(0x7f0000000340)=@tcp=r3}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000002ec0)={0x0, r0}, 0x8) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001e80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="160000001000000000000000", @ANYRES32, @ANYBLOB="285296a1943fd694036c603586236bc4af2404381b39600fe3e6dddeedd67312f749ccdb7e319cb3cdac0c149244f2f2c0dcb5b7a13eaf503b0082be6ce042b9cd4589489dff1fd219419b759295b1a2442677df3fd3abde057c56cc820e393f1a9eb116a84c5b605abacbb1e1345eab6806dbbc213e9161a6612d6d1c3db124c4ce90b15b4151efc55cc2ecba1a011a51902372a49af527431c9624c18f117c8eb9f9b1b9f879b8458da9be3eb79e8549e8610a15dba2cba832b38a82b9d37f946c94c506638ac32edffa4efc163859c576045aa854", @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f00000003c0), &(0x7f0000000400)=@tcp=r3, 0x2}, 0x20) syz_emit_ethernet(0x15, &(0x7f0000000080)={@random="fb57e76be621", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000440)={0xffffffffffffffff, 0x7, 0xff30, "9873"}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000880), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001bc0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}]}, 0x58}}, 0x0) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f00000009c0)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000002dc0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000002dc0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0xfffe, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001e40)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f00000008c0)=""/235, 0xeb}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/146, 0x92}, {&(0x7f00000001c0)=""/87, 0x57}], 0x8}, 0x5}], 0x1, 0x40000100, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x700, 0x7, 0x1, 0x6, {{0x9, 0x4, 0x2, 0x2, 0x24, 0x67, 0x0, 0xfa, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}, {[@timestamp={0x44, 0x10, 0xf0, 0x0, 0x5, [0x0, 0xfff, 0x82]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x700, 0x7, 0x1, 0x6, {{0x9, 0x4, 0x2, 0x2, 0x24, 0x67, 0x0, 0xfa, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}, {[@timestamp={0x44, 0x10, 0xf0, 0x0, 0x5, [0x0, 0xfff, 0x82]}]}}}}}) r8 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001c40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@delqdisc={0x48, 0x25, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffe0, 0xffe0}, {0xf29907d8252ade6c, 0x4}, {0x10, 0x9}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfff}, @TCA_INGRESS_BLOCK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@delqdisc={0x48, 0x25, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffe0, 0xffe0}, {0xf29907d8252ade6c, 0x4}, {0x10, 0x9}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfff}, @TCA_INGRESS_BLOCK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x10000800) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x10000800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e80)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x14}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="d17f4b69", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x44000) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="d17f4b69", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x44000) 657.545532ms ago: executing program 3 (id=5461): syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000700800000000019078ac1e0001ac1414aa03049078030200004500000000000000002f0000ac14140a0000000044196af3e000000100000001ac1e010100007fffac1e000100000002ac14141800000006441c0f51e0000001000000010a01010100000006fffffeff000001ff"], 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) vmsplice(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f00000002c0)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async) tee(r0, r2, 0x8f5, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={0x2, 0xa01, 0x2}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000480)={r3, @in6={{0xa, 0x4e22, 0x9, @private2, 0x8}}}, &(0x7f0000000540)=0x84) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) 469.231739ms ago: executing program 4 (id=5462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, r2, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0xdb3}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x455}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc8}}, 0x0) 462.29164ms ago: executing program 2 (id=5463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}}, 0x0) 380.014825ms ago: executing program 0 (id=5464): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x60, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x2}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0xfdde, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x60, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x2}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0xfdde, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) (async) 229.152501ms ago: executing program 0 (id=5465): ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x12) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, r3, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x48, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000041) getsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000580)=0x6e) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f00000005c0)) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVKEY={0x11c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000080) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x2, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r11, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xffffffffffff0003}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r13, &(0x7f0000000e00)={&(0x7f0000000b80), 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x200, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0xb4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7e5}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb496}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffa}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x30}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x776bdfaa}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x80, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4c}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffa80}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_SEC_DEVKEY={0x8c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2e0}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffd}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x699ed4d673de5011}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r14 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADD(r14, 0x0, 0x482, &(0x7f0000000e40)={0x3c, @empty, 0x4e24, 0x4, 'wrr\x00', 0x1b, 0xc2, 0xc}, 0x2c) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r15, &(0x7f0000000f80)={&(0x7f0000000e80), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0xc440cf175717c175}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x5, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x24000001) 210.483929ms ago: executing program 2 (id=5466): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000000030000000500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001000000010000557b"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000600)=ANY=[@ANYBLOB="64010000", @ANYRES16=r0, @ANYBLOB="010000000000000600003b00000008000300", @ANYRES32=r2, @ANYBLOB="3d01330010800e00"], 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 150.57326ms ago: executing program 4 (id=5467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000d11f32bf4ffc11741f3be63c911a89a3a5ed74695eabb8d8035e2c", @ANYRES16=r1, @ANYBLOB="200025bd7000fedbdf256500000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000e0000007d000000080002000100000008000200010000000800020001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x28000000) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f00000000c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc01, 0x1, 0x0, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1, 0x2}, 0x300, 0x5, 0xea}}]}, 0x48}}, 0xc04) 0s ago: executing program 4 (id=5468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x3c, 0x0, 0x0, 0xfe, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd714100027d003b11"}]}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x24000000) (async) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) socket(0x27, 0x80000, 0x1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:var_auth_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ksm_device_t:s0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) kernel console output (not intermixed with test programs): 8037][T21427] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 482.588074][T21427] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 482.695861][T21427] RDS/IB: syz2: added [ 482.695948][T21427] smc: adding ib device syz2 with port count 1 [ 482.696307][T21427] smc: ib device syz2 port 1 has pnetid S (user defined) [ 482.753138][ T6567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.753194][ T6567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.816908][T21473] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 483.002302][T21486] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 483.006153][T21486] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 483.006969][T21482] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 483.253765][T21490] __nla_validate_parse: 10 callbacks suppressed [ 483.253786][T21490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 483.396307][T21500] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20004 [ 483.449676][T21497] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 484.037621][T21522] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 484.366872][T21536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3877'. [ 484.377432][T21534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3877'. [ 484.630434][T21545] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 484.631884][T21546] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 484.725495][T21545] 8021q: adding VLAN 0 to HW filter on device bond5 [ 484.726943][T21551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3881'. [ 484.756082][T21551] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3881'. [ 484.879552][T21549] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 485.922865][T21583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3890'. [ 486.383026][T21604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3893'. [ 486.383049][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3893'. [ 486.646153][T21613] netlink: 'syz.3.3894': attribute type 7 has an invalid length. [ 487.024627][T21622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.025329][T21623] openvswitch: netlink: Actions may not be safe on all matching packets [ 487.067463][T21623] nbd: socks must be embedded in a SOCK_ITEM attr [ 487.242682][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3896'. [ 487.723107][T21648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3903'. [ 487.935682][T21662] netlink: 'syz.1.3908': attribute type 58 has an invalid length. [ 488.268548][T21673] netlink: 'syz.1.3911': attribute type 2 has an invalid length. [ 488.268570][T21673] netlink: 'syz.1.3911': attribute type 1 has an invalid length. [ 488.433724][T21682] netlink: 'syz.3.3912': attribute type 1 has an invalid length. [ 488.435573][T21681] __nla_validate_parse: 5 callbacks suppressed [ 488.435589][T21681] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3912'. [ 488.572481][T21682] 8021q: adding VLAN 0 to HW filter on device bond6 [ 488.643032][T21683] bond6: (slave geneve2): making interface the new active one [ 488.660185][T21683] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 489.024386][T21710] netlink: 'syz.4.3916': attribute type 16 has an invalid length. [ 489.024407][T21710] netlink: 'syz.4.3916': attribute type 17 has an invalid length. [ 489.068808][T21698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3913'. [ 489.070207][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3913'. [ 489.484514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 489.548247][T21724] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3918'. [ 489.622792][T21710] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 489.626371][T21710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.681949][T21710] bridge2: left allmulticast mode [ 489.763657][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.763765][ T6567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.797284][T21730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3919'. [ 489.797308][T21730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3919'. [ 489.885853][T21725] vlan2: entered promiscuous mode [ 489.885874][T21725] hsr0: entered promiscuous mode [ 489.934005][ T53] Bluetooth: hci0: command 0x0c13 tx timeout [ 489.934205][ T5641] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 489.943819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.243075][T21749] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 490.271693][T21749] bond1 (unregistering): Released all slaves [ 490.415090][ T6563] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.415566][ T6563] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.445915][ T5732] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.638034][ T5732] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.934199][T13409] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.294008][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 491.361843][T21809] netlink: 'syz.0.3935': attribute type 1 has an invalid length. [ 491.403378][T21812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3936'. [ 491.661391][T21809] block nbd296: server does not support multiple connections per device. [ 491.667058][T21809] block nbd296: shutting down sockets [ 491.925445][T21826] pimreg: entered allmulticast mode [ 491.951331][T21832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3940'. [ 491.967346][T21833] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 492.320405][T21846] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3941'. [ 492.760942][T21852] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.761649][T21852] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.818043][T21852] dummy0: left promiscuous mode [ 492.953023][T21880] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3943'. [ 493.136168][T21852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.156617][T21852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.376149][T21892] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 493.456492][T21894] __nla_validate_parse: 1 callbacks suppressed [ 493.456524][T21894] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3950'. [ 493.458433][T21852] bond0: left allmulticast mode [ 493.547871][T21852] vlan2: left promiscuous mode [ 493.547899][T21852] hsr0: left promiscuous mode [ 493.617922][T21899] ip_tables: iptables: counters copy to user failed while replacing table [ 493.715145][T21902] xt_nat: multiple ranges no longer supported [ 493.954624][ T6590] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.954661][ T6590] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.954776][ T6590] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.954801][ T6590] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.954834][ T6590] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.954859][ T6590] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.954891][ T6590] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.954915][ T6590] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.162768][T21912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3956'. [ 494.363203][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3960'. [ 494.475931][T21926] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 494.493844][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 494.705186][T21944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3963'. [ 494.789189][T21952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3963'. [ 494.926586][T21961] syzkaller1: entered promiscuous mode [ 494.926627][T21961] syzkaller1: entered allmulticast mode [ 495.333327][T21978] netlink: 'syz.1.3968': attribute type 4 has an invalid length. [ 495.430608][T21976] : renamed from bond0 (while UP) [ 495.472042][T21938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 495.490963][T21964] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3967'. [ 495.879757][T21988] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 495.906834][T21989] sctp: [Deprecated]: syz.0.3972 (pid 21989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.906834][T21989] Use struct sctp_sack_info instead [ 496.341091][T21998] syzkaller0: entered promiscuous mode [ 496.341114][T21998] syzkaller0: entered allmulticast mode [ 496.372408][T21998] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3973'. [ 496.641926][T22007] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3977'. [ 496.685646][T22009] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3979'. [ 496.687029][T22009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3979'. [ 496.834655][T22007] netlink: 'syz.1.3977': attribute type 2 has an invalid length. [ 497.457782][T22039] syzkaller0: entered promiscuous mode [ 497.457815][T22039] syzkaller0: entered allmulticast mode [ 500.280159][T22044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.555772][T22090] __nla_validate_parse: 4 callbacks suppressed [ 500.555794][T22090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3994'. [ 500.556132][T22090] gre0: Master is either lo or non-ether device [ 500.971421][T22108] blkio.reset_stats is deprecated [ 501.177768][T22119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4001'. [ 501.184349][T22119] openvswitch: netlink: IP tunnel dst address not specified [ 501.537963][ T1317] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 501.855952][T22140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4007'. [ 501.856280][T22140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4007'. [ 501.859997][T22140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4007'. [ 501.860314][T22140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4007'. [ 501.895724][T22140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4007'. [ 501.898065][T22140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4007'. [ 501.898706][T22140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4007'. [ 501.909992][T22140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4007'. [ 502.509997][T22162] IPv6: Can't replace route, no match found [ 502.710939][T22170] netlink: 'syz.4.4015': attribute type 1 has an invalid length. [ 502.710995][T22170] netlink: 'syz.4.4015': attribute type 2 has an invalid length. [ 502.724075][T22170] netlink: 'syz.4.4015': attribute type 12 has an invalid length. [ 502.813930][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.227762][T22211] netlink: 'syz.4.4022': attribute type 1 has an invalid length. [ 503.391646][T22211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.439960][ T6568] IPVS: starting estimator thread 0... [ 503.454220][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.524773][T22225] IPVS: using max 29 ests per chain, 69600 per kthread [ 503.555863][T22227] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.574432][T22219] bond0: (slave geneve2): making interface the new active one [ 503.576931][T22219] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 503.606651][T22207] syzkaller1: entered promiscuous mode [ 503.606673][T22207] syzkaller1: entered allmulticast mode [ 503.614926][T22129] Bluetooth: hci1: command 0x0406 tx timeout [ 503.614991][T22129] Bluetooth: hci5: command 0x0419 tx timeout [ 504.178730][T22239] nbd: must specify at least one socket [ 504.317972][T22247] netlink: 'syz.2.4035': attribute type 1 has an invalid length. [ 504.389630][T22247] bond2: entered promiscuous mode [ 504.391187][T22247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 504.431661][T22250] bond2: (slave bridge3): making interface the new active one [ 504.431702][T22250] bridge3: entered promiscuous mode [ 504.441129][T22250] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 504.734307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.088251][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.219264][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.270043][T22285] netlink: 'syz.1.4044': attribute type 1 has an invalid length. [ 505.296696][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.297681][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.718001][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.718387][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.872609][T22296] __nla_validate_parse: 34 callbacks suppressed [ 505.872649][T22296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4047'. [ 506.015974][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.062329][T22309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4055'. [ 506.158497][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.752589][T22344] veth1_to_hsr: entered allmulticast mode [ 506.836117][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.836679][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.257928][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.308061][T22382] syzkaller1: entered promiscuous mode [ 507.308117][T22382] syzkaller1: entered allmulticast mode [ 507.951804][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.374412][T22416] syzkaller1: entered promiscuous mode [ 508.374434][T22416] syzkaller1: entered allmulticast mode [ 509.091672][T22447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4094'. [ 509.091744][T22447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4094'. [ 509.750661][T22482] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4104'. [ 509.998423][T22492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4108'. [ 510.002163][T22477] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4102'. [ 510.002202][T22477] veth0_to_bond: default FDB implementation only supports local addresses [ 510.136421][T22494] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4109'. [ 510.136453][T22494] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4109'. [ 510.188036][T22503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4110'. [ 510.217419][T22495] bond7 (unregistering): Released all slaves [ 510.393399][T22514] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 510.556377][T13409] net_ratelimit: 11 callbacks suppressed [ 510.556409][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.676506][T22519] netlink: 'syz.3.4114': attribute type 12 has an invalid length. [ 510.676560][T22519] netlink: 'syz.3.4114': attribute type 29 has an invalid length. [ 510.902887][T22533] netlink: 'syz.2.4118': attribute type 1 has an invalid length. [ 511.175983][T22547] __nla_validate_parse: 3 callbacks suppressed [ 511.176019][T22547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4121'. [ 511.346616][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.346916][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.374453][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.634376][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.781355][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.417061][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.444661][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.445191][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.654127][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.763829][T20293] net_ratelimit: 10 callbacks suppressed [ 515.763850][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.764148][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.789882][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.829346][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.863956][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.864254][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.896685][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.535098][T18701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.868783][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.963810][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.823941][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.978947][ T1723] net_ratelimit: 10 callbacks suppressed [ 520.978962][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.304022][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.304315][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.023036][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.414603][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.415124][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.069525][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.513790][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.514077][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.613737][T18701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.182702][ T5732] net_ratelimit: 6 callbacks suppressed [ 526.182727][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.654148][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.843916][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.844316][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.219784][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.774732][T18701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.791924][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.943891][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.944191][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.264350][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.214819][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 530.149460][T15311] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 531.324199][ T1124] net_ratelimit: 7 callbacks suppressed [ 531.324230][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.324646][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.384417][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.419747][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.424277][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.424834][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.454646][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.536164][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.536633][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.854869][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.586902][ T5772] net_ratelimit: 7 callbacks suppressed [ 536.586927][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.894097][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.923802][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.924123][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.382969][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.615750][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.033919][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.034253][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.668518][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.134889][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.779878][T13409] net_ratelimit: 8 callbacks suppressed [ 541.779901][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.463826][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.464124][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.820085][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.974047][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.583874][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.584174][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.858901][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.573870][T22128] Bluetooth: hci0: command 0x0c13 tx timeout [ 544.704178][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.704509][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.923919][ T50] net_ratelimit: 6 callbacks suppressed [ 546.923941][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.924260][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.989309][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.621298][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.023932][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.024222][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.030187][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.255505][T18701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.069057][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.123932][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.453867][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 552.189223][ T5772] net_ratelimit: 8 callbacks suppressed [ 552.189241][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.435020][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.435393][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.219887][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.543866][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.544188][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.268817][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.336182][T18701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.664046][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.664574][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.216350][ T194] net_ratelimit: 6 callbacks suppressed [ 557.216376][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.374635][T18701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.394630][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.983855][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.984170][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.428844][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.495531][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.094514][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.094901][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.464602][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.413921][ T6567] net_ratelimit: 7 callbacks suppressed [ 562.413942][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.414224][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.579764][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.973957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.977773][ T1317] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 563.523864][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.524160][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.619020][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.574070][ T6376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.643809][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.644139][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.614064][ T6376] net_ratelimit: 8 callbacks suppressed [ 567.614086][ T6376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.780459][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.964078][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.964369][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.094973][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.824194][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.093800][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.094127][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.859558][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.014192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.203778][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.988403][ T5732] net_ratelimit: 8 callbacks suppressed [ 572.988427][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.533812][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.534144][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.693915][T18701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.018999][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.643925][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.644324][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.058787][ T1723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.743915][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.744210][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.179928][T13409] net_ratelimit: 8 callbacks suppressed [ 578.179970][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.053965][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.054249][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.218633][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.773859][T18701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.154460][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.154827][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.258666][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.722852][T22571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4125'. [ 580.722917][T22571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4125'. [ 580.752796][T22580] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4126'. [ 580.774847][T22578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4126'. [ 581.061390][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4133'. [ 581.061413][T22594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4133'. [ 581.257706][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.257995][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.803291][T22632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4144'. [ 581.813131][T22635] IPv6: NLM_F_CREATE should be specified when creating new route [ 582.028528][T22633] netlink: 'syz.1.4145': attribute type 15 has an invalid length. [ 582.085993][T22627] tipc: New replicast peer: 255.255.255.255 [ 582.086803][T22627] tipc: Enabled bearer , priority 10 [ 582.202220][T22652] block nbd2: server does not support multiple connections per device. [ 582.202562][T22652] block nbd2: shutting down sockets [ 582.209998][T22652] bridge_slave_1: left allmulticast mode [ 582.210023][T22652] bridge_slave_1: left promiscuous mode [ 582.210273][T22652] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.227491][T22652] bridge_slave_0: left allmulticast mode [ 582.227516][T22652] bridge_slave_0: left promiscuous mode [ 582.227759][T22652] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.318477][T22658] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4149'. [ 582.326207][T22659] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4149'. [ 582.522230][T22664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4150'. [ 582.569402][ T5641] Bluetooth: hci5: ISO packet too small [ 582.571881][T22633] lo: entered promiscuous mode [ 582.578233][T22633] tunl0: entered promiscuous mode [ 582.872557][T22633] gretap0: entered promiscuous mode [ 582.968800][T22633] ip_vti0: entered promiscuous mode [ 583.066959][T22673] bridge5: entered allmulticast mode [ 583.321484][T22679] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 583.432155][ T5732] net_ratelimit: 7 callbacks suppressed [ 583.432190][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.495537][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.495854][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.638209][T22693] xt_socket: unknown flags 0x8 [ 583.888431][T22706] netlink: 'syz.0.4164': attribute type 1 has an invalid length. [ 583.888487][T22706] netlink: 'syz.0.4164': attribute type 2 has an invalid length. [ 583.901308][T22706] netlink: 'syz.0.4164': attribute type 9 has an invalid length. [ 583.907783][T22706] netlink: 'syz.0.4164': attribute type 9 has an invalid length. [ 584.041485][T22710] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 584.352755][T22729] x_tables: duplicate underflow at hook 3 [ 584.470630][T22735] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 584.510646][T22739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 584.551543][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.613169][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.613905][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.600615][T22801] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 585.647434][T22801] netlink: 'syz.1.4192': attribute type 1 has an invalid length. [ 585.803705][T22809] __nla_validate_parse: 10 callbacks suppressed [ 585.803727][T22809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4194'. [ 585.922701][T22812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.036408][T22817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.057039][T22815] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 586.156301][T22824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.263133][T22831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.360001][T22837] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4204'. [ 586.698022][T22847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4208'. [ 587.229413][T22877] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 587.241060][T22877] bond3 (unregistering): Released all slaves [ 587.375609][T22885] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.4216'. [ 588.747055][T22930] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4227'. [ 588.751544][T22931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4228'. [ 588.803284][ T6567] pimreg: left allmulticast mode [ 588.806522][T22934] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4228'. [ 588.865178][T13409] net_ratelimit: 11 callbacks suppressed [ 588.865211][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.868055][T22936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.873321][T22936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.976544][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.020603][T22938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.056348][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.057301][T22938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.057769][T22938] x_tables: duplicate underflow at hook 1 [ 589.059300][T22938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.081552][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.222883][ T6567] bond11 (unregistering): (slave ip6gretap1): Releasing active interface [ 589.481140][ T6567] bond9 (unregistering): (slave bridge4): Releasing backup interface [ 589.481165][ T6567] bond9 (unregistering): (slave bridge4): the permanent HWaddr of slave - 9a:24:6c:e5:62:17 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 589.481191][ T6567] bridge4 (unregistering): left promiscuous mode [ 589.481211][ T6567] bond9 (unregistering): (slave bridge5): making interface the new active one [ 589.481225][ T6567] bridge5 (unregistering): entered promiscuous mode [ 589.536384][ T6567] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 589.536410][ T6567] bridge5 (unregistering): left promiscuous mode [ 589.659260][ T6567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.659710][ T6567] bond_slave_0: left promiscuous mode [ 589.659902][ T6567] bond_slave_0: left allmulticast mode [ 589.662435][ T6567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.662972][ T6567] bond_slave_1: left promiscuous mode [ 589.663134][ T6567] bond_slave_1: left allmulticast mode [ 589.707637][ T6567] bond0 (unregistering): Released all slaves [ 589.723086][ T6567] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 589.723113][ T6567] wireguard0: left promiscuous mode [ 589.742260][ T6567] bond1 (unregistering): Released all slaves [ 589.763306][ T6567] bond2 (unregistering): Released all slaves [ 589.783386][ T6567] bond3 (unregistering): Released all slaves [ 589.817615][ T6567] bond4 (unregistering): Released all slaves [ 589.839850][ T6567] bond5 (unregistering): Released all slaves [ 589.869399][ T6567] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 589.890073][ T6567] bond6 (unregistering): Released all slaves [ 589.923258][ T6567] bond7 (unregistering): Released all slaves [ 589.950652][ T6567] bond8 (unregistering): Released all slaves [ 589.956497][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.001907][ T6567] bond9 (unregistering): Released all slaves [ 590.022573][ T6567] bond10 (unregistering): Released all slaves [ 590.045253][ T6567] bond11 (unregistering): Released all slaves [ 590.072857][ T6567] bond12 (unregistering): Released all slaves [ 590.104205][ T6567] bond13 (unregistering): Released all slaves [ 590.193941][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.194596][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.535478][ T6567] tipc: Disabling bearer [ 590.535601][ T6567] tipc: Left network mode [ 590.687842][T22963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4234'. [ 590.687870][T22963] block nbd2: Unsupported socket: should be TCP or UNIX. [ 590.816676][T22973] veth1_to_hsr: entered allmulticast mode [ 590.919742][ T6567] IPVS: stopping master sync thread 13059 ... [ 590.978419][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.012265][T22983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4240'. [ 591.023985][T22984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4240'. [ 591.235407][T22989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.235601][T22989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.441707][T23003] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4242'. [ 592.228762][T23031] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4246'. [ 592.230392][T23030] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4246'. [ 593.021215][ T6567] hsr_slave_0: left promiscuous mode [ 593.031076][ T6567] hsr_slave_1: left promiscuous mode [ 593.032359][ T6567] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 593.032423][ T6567] batman_adv: batadv0: Removing interface: ipvlan2 [ 593.063192][ T6567] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 593.063214][ T6567] batman_adv: batadv0: Removing interface: ipvlan3 [ 593.095732][ T6567] veth1_macvtap: left promiscuous mode [ 593.095780][ T6567] veth0_macvtap: left promiscuous mode [ 593.095901][ T6567] veth1_vlan: left promiscuous mode [ 593.095929][ T6567] veth0_vlan: left promiscuous mode [ 593.129801][T23064] netlink: 'syz.1.4253': attribute type 13 has an invalid length. [ 593.184335][T23066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4253'. [ 593.237866][T15311] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 593.802359][T23084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4260'. [ 594.095049][ T5772] net_ratelimit: 54 callbacks suppressed [ 594.095085][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.256962][ T6567] team0 (unregistering): Port device team_slave_1 removed [ 594.281773][ T6567] team0 (unregistering): Port device team_slave_0 removed [ 594.687961][T23099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4262'. [ 594.690820][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4261'. [ 594.690854][T23097] netlink: 'syz.2.4261': attribute type 10 has an invalid length. [ 594.690871][T23097] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4261'. [ 594.706134][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.706430][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.770805][T23097] geneve3: entered promiscuous mode [ 594.770828][T23097] geneve3: entered allmulticast mode [ 594.789097][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.789164][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.789198][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.789231][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.055139][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.137890][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.201529][T23112] netlink: 'syz.2.4269': attribute type 1 has an invalid length. [ 595.201724][T23112] netlink: 'syz.2.4269': attribute type 1 has an invalid length. [ 595.201896][T23112] netlink: 'syz.2.4269': attribute type 1 has an invalid length. [ 595.202069][T23112] netlink: 'syz.2.4269': attribute type 1 has an invalid length. [ 595.202236][T23112] netlink: 'syz.2.4269': attribute type 1 has an invalid length. [ 595.202405][T23112] netlink: 'syz.2.4269': attribute type 1 has an invalid length. [ 595.202574][T23112] netlink: 'syz.2.4269': attribute type 1 has an invalid length. [ 595.202747][T23112] netlink: 'syz.2.4269': attribute type 1 has an invalid length. [ 595.342566][T23114] wireguard: wg2: Could not create IPv4 socket [ 595.487837][ T6567] IPVS: stop unused estimator thread 0... [ 595.616833][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.824630][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.825151][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.876574][T23134] dummy0: entered promiscuous mode [ 596.174733][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.266350][T23150] __nla_validate_parse: 4 callbacks suppressed [ 596.266369][T23150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4277'. [ 596.315244][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4279'. [ 596.381345][T23161] x_tables: duplicate entry at hook 1 [ 596.392420][ T50] IPVS: starting estimator thread 0... [ 596.473785][T23163] IPVS: using max 28 ests per chain, 67200 per kthread [ 596.673147][T23172] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4283'. [ 596.929175][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.994003][T20293] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.997946][T23184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4285'. [ 596.997966][T23184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4285'. [ 597.094457][T23188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4288'. [ 597.398674][T23196] syzkaller0: entered promiscuous mode [ 597.398750][T23196] syzkaller0: entered allmulticast mode [ 597.512434][T23196] tipc: Started in network mode [ 597.512498][T23196] tipc: Node identity 12257de6a2e6, cluster identity 4711 [ 597.517570][T23196] tipc: Enabled bearer , priority 0 [ 597.518303][T23197] tipc: Enabling of bearer rejected, already enabled [ 597.560936][T23195] tipc: Resetting bearer [ 597.576245][T23209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4293'. [ 597.576288][T23209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4293'. [ 597.620347][T23195] tipc: Disabling bearer [ 597.660949][T23211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4295'. [ 597.751422][T23213] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4296'. [ 598.099111][ T30] audit: type=1800 audit(1793379791.289:6): pid=23233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4301" name="memory.events" dev="tmpfs" ino=893 res=0 errno=-22 [ 598.101143][ T30] audit: type=1804 audit(1793379791.289:7): pid=23233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4301" name="/newroot/172/memory.events" dev="tmpfs" ino=893 res=1 errno=0 [ 598.688482][T23251] bond3 (unregistering): Released all slaves [ 598.967812][T23279] validate_nla: 29 callbacks suppressed [ 598.967834][T23279] netlink: 'syz.4.4311': attribute type 1 has an invalid length. [ 599.162479][T23289] net_ratelimit: 7 callbacks suppressed [ 599.162614][T23289] veth0: mtu less than device minimum [ 599.274538][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.274844][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.304600][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.420572][T23307] xt_hashlimit: size too large, truncated to 1048576 [ 599.525683][T23309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.525708][T23309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.531707][T23309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.531729][T23309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.334098][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.374185][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.374697][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.626359][T23359] syzkaller0: entered promiscuous mode [ 600.626385][T23359] syzkaller0: entered allmulticast mode [ 600.657334][T23355] syzkaller1: entered promiscuous mode [ 600.657357][T23355] syzkaller1: entered allmulticast mode [ 601.134335][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.137071][T23381] netlink: 'syz.1.4334': attribute type 83 has an invalid length. [ 601.183014][T23375] netlink: 'syz.2.4332': attribute type 3 has an invalid length. [ 601.380225][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.410307][T23393] __nla_validate_parse: 11 callbacks suppressed [ 601.410345][T23393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 601.410463][T23393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4338'. [ 601.410898][T23393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4338'. [ 601.464209][T23394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4338'. [ 601.468672][T23394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 601.476302][T23396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 601.476373][T23396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4338'. [ 601.476764][T23397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4338'. [ 601.492878][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.515464][T23402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4338'. [ 601.525232][T23396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 601.562524][T23399] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 601.578010][T23399] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 602.765244][ T6576] IPVS: starting estimator thread 0... [ 602.855982][T23464] IPVS: using max 30 ests per chain, 72000 per kthread [ 603.342142][T23486] syzkaller1: entered promiscuous mode [ 603.342199][T23486] syzkaller1: entered allmulticast mode [ 603.369044][T23489] gtp0: entered promiscuous mode [ 603.369072][T23489] gtp0: entered allmulticast mode [ 603.415759][T23492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.453838][ T5641] Bluetooth: hci3: command tx timeout [ 603.474974][T23492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.756094][T23506] netlink: 'syz.4.4369': attribute type 1 has an invalid length. [ 604.175990][ T6386] net_ratelimit: 9 callbacks suppressed [ 604.176010][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.655359][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.833762][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.834078][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.942181][T23548] netlink: 'syz.2.4385': attribute type 1 has an invalid length. [ 604.971796][T23548] 8021q: adding VLAN 0 to HW filter on device bond3 [ 604.987717][T23549] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 605.014047][T23547] bond3: entered promiscuous mode [ 605.014102][T23547] bond3: entered allmulticast mode [ 605.214957][ T6386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.419136][T23576] IPVS: length: 59 != 8 [ 605.694006][T13409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.947233][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.947524][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.155506][T23619] Bluetooth: hci0: unsupported parameter 5161 [ 606.155528][T23619] Bluetooth: hci0: unsupported parameter 8192 [ 606.155541][T23619] Bluetooth: hci0: unsupported parameter 5161 [ 606.155553][T23619] Bluetooth: hci0: unsupported parameter 8192 [ 606.231088][ T5641] Bluetooth: hci0: unexpected event for opcode 0x203d [ 606.247955][T23626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.259518][T23623] ip_tables: iptables: counters copy to user failed while replacing table [ 606.461461][T23635] netlink: 'syz.4.4407': attribute type 29 has an invalid length. [ 606.529600][T23639] ip6t_rpfilter: unknown options [ 606.547473][T23642] ip6t_rpfilter: unknown options [ 606.607182][T23644] __nla_validate_parse: 21 callbacks suppressed [ 606.607274][T23644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4410'. [ 606.677728][T23646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 606.835467][ T5641] Bluetooth: hci3: link tx timeout [ 606.835497][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.840353][ T5641] Bluetooth: hci3: link tx timeout [ 606.840391][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.844029][ T5641] Bluetooth: hci3: link tx timeout [ 606.844064][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.844126][ T5641] Bluetooth: hci3: link tx timeout [ 606.844154][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.844196][ T5641] Bluetooth: hci3: link tx timeout [ 606.844224][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.844281][ T5641] Bluetooth: hci3: link tx timeout [ 606.844292][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.844350][ T5641] Bluetooth: hci3: link tx timeout [ 606.844383][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.844424][ T5641] Bluetooth: hci3: link tx timeout [ 606.844451][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.844492][ T5641] Bluetooth: hci3: link tx timeout [ 606.844520][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.844577][ T5641] Bluetooth: hci3: link tx timeout [ 606.844587][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.844642][ T5641] Bluetooth: hci3: link tx timeout [ 606.844652][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 606.845561][ T5641] Bluetooth: hci3: link tx timeout [ 606.845572][ T5641] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 607.233707][T23674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4419'. [ 607.242216][T23674] netlink: 9720 bytes leftover after parsing attributes in process `syz.4.4419'. [ 607.815853][T23697] xt_connbytes: Forcing CT accounting to be enabled [ 607.816091][T23697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.928690][T23702] netlink: 'syz.0.4427': attribute type 8 has an invalid length. [ 608.045872][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4429'. [ 608.192035][T23714] sch_tbf: burst 4398 is lower than device lo mtu (32783) ! [ 608.381920][T23721] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 608.528752][T23728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4435'. [ 608.528781][T23728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4435'. [ 608.672211][T23720] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 608.896245][ T5641] Bluetooth: hci3: command 0x0406 tx timeout [ 609.022888][ T6567] IPVS: starting estimator thread 0... [ 609.103909][T23738] IPVS: using max 28 ests per chain, 67200 per kthread [ 609.155569][T23743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4441'. [ 609.619239][T23756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4444'. [ 609.885832][T23765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4445'. [ 610.010723][T23763] gretap0: entered promiscuous mode [ 610.040345][T23763] : (slave vlan3): Enslaving as an active interface with an up link [ 610.393338][T23784] team0 (unregistering): Port device team_slave_0 removed [ 610.419156][T23784] team0 (unregistering): Port device team_slave_1 removed [ 610.808125][T23800] bridge0: left promiscuous mode [ 610.823001][T23800] dummy0: left promiscuous mode [ 610.832325][T23804] net_ratelimit: 12 callbacks suppressed [ 610.832348][T23804] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 611.200791][T23800] gretap1: left promiscuous mode [ 611.298191][T13409] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.569508][ T6386] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 611.572617][T23808] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 611.776913][ T6386] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 611.813253][T23836] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 612.016356][ T5732] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.229352][T23845] __nla_validate_parse: 3 callbacks suppressed [ 612.229373][T23845] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4464'. [ 612.229614][T23847] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4464'. [ 612.270087][T23857] netlink: 'syz.4.4465': attribute type 2 has an invalid length. [ 612.270139][T23857] netlink: 'syz.4.4465': attribute type 8 has an invalid length. [ 612.270153][T23857] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4465'. [ 612.589122][T23866] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 612.702910][T23869] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 612.702993][T23869] gretap1: entered promiscuous mode [ 612.703034][T23869] gretap1: entered allmulticast mode [ 612.992051][T23876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4471'. [ 613.171661][T23881] netlink: 'syz.2.4474': attribute type 3 has an invalid length. [ 613.183961][T23881] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 613.317130][T23883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4473'. [ 613.514123][T23885] ip6erspan0: entered allmulticast mode [ 613.573339][T23887] ip_tables: iptables: counters copy to user failed while replacing table [ 613.846422][T23900] netlink: 'syz.2.4478': attribute type 1 has an invalid length. [ 613.927096][T23900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 614.275347][T23913] ipt_REJECT: ECHOREPLY no longer supported. [ 614.293284][T23917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4485'. [ 614.355927][T23920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4483'. [ 614.465502][T23926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4487'. [ 614.467141][T23926] netlink: 'syz.3.4487': attribute type 3 has an invalid length. [ 614.803838][T23939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4493'. [ 615.240830][T23960] syzkaller0: entered promiscuous mode [ 615.240854][T23960] syzkaller0: entered allmulticast mode [ 615.297373][T23960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4500'. [ 615.375795][T23973] syzkaller0: left promiscuous mode [ 615.375837][T23973] syzkaller0: left allmulticast mode [ 615.427499][T23976] netlink: 'syz.3.4502': attribute type 29 has an invalid length. [ 615.448256][T23976] netlink: 'syz.3.4502': attribute type 29 has an invalid length. [ 616.818545][T24046] netlink: 'syz.1.4521': attribute type 1 has an invalid length. [ 616.830055][T24047] netlink: 'syz.1.4521': attribute type 1 has an invalid length. [ 617.219758][T24066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 617.270014][T24065] __nla_validate_parse: 70 callbacks suppressed [ 617.270069][T24065] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4526'. [ 617.304967][T24078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4529'. [ 617.732457][T24101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4534'. [ 617.980011][T24113] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 618.550312][T24131] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 618.569329][T24131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4544'. [ 618.688377][T24141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4545'. [ 618.824532][T24144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4545'. [ 619.294275][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 619.447913][T24170] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4551'. [ 619.580853][T24196] netlink: 'syz.0.4553': attribute type 1 has an invalid length. [ 619.659397][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4554'. [ 619.659421][T24201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4554'. [ 619.811045][T24224] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4557'. [ 619.811077][T24224] openvswitch: netlink: Missing key (keys=40, expected=100) [ 621.030465][T24286] x_tables: duplicate underflow at hook 3 [ 621.321316][T24305] syzkaller0: entered promiscuous mode [ 621.321339][T24305] syzkaller0: entered allmulticast mode [ 621.407886][T24306] netlink: 'syz.1.4564': attribute type 4 has an invalid length. [ 621.415780][T24306] netlink: 'syz.1.4564': attribute type 4 has an invalid length. [ 623.370380][T24306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 623.636052][T24325] xt_connbytes: Forcing CT accounting to be enabled [ 623.636319][T24325] set match dimension is over the limit! [ 623.678176][T24325] netlink: 'syz.2.4572': attribute type 1 has an invalid length. [ 623.678198][T24325] netlink: 'syz.2.4572': attribute type 2 has an invalid length. [ 623.678598][T24325] __nla_validate_parse: 2 callbacks suppressed [ 623.678611][T24325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4572'. [ 623.678638][T24325] netlink: 'syz.2.4572': attribute type 10 has an invalid length. [ 623.678654][T24325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4572'. [ 623.723635][T24329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4574'. [ 623.801498][T24334] netlink: 'syz.2.4575': attribute type 4 has an invalid length. [ 623.802675][T24335] netlink: 'syz.2.4575': attribute type 4 has an invalid length. [ 623.975802][T24338] nbd: couldn't find a device at index 0 [ 624.127663][T24348] syzkaller0: entered promiscuous mode [ 624.127686][T24348] syzkaller0: entered allmulticast mode [ 624.422358][ T1317] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.758450][T24364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4582'. [ 624.787093][T24367] netlink: 'syz.1.4583': attribute type 62 has an invalid length. [ 624.924215][T24374] netlink: 'syz.1.4587': attribute type 2 has an invalid length. [ 624.948047][T24372] syzkaller0: entered promiscuous mode [ 624.948068][T24372] syzkaller0: entered allmulticast mode [ 625.116489][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4588'. [ 625.205874][T24386] netlink: 'syz.1.4591': attribute type 10 has an invalid length. [ 625.230669][T24386] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 625.533636][T24396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4592'. [ 626.028872][T24429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4601'. [ 626.087065][T24430] bridge_slave_1: left allmulticast mode [ 626.087091][T24430] bridge_slave_1: left promiscuous mode [ 626.087318][T24430] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.093153][T24430] bridge_slave_0: left allmulticast mode [ 626.093176][T24430] bridge_slave_0: left promiscuous mode [ 626.093384][T24430] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.024554][T24428] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4602'. [ 627.024909][T24432] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4602'. [ 627.519044][T24481] netlink: 'syz.2.4614': attribute type 9 has an invalid length. [ 627.519100][T24481] netlink: 'syz.2.4614': attribute type 4 has an invalid length. [ 627.590797][T24483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4614'. [ 628.095449][T22128] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 628.095907][T22128] Bluetooth: hci0: command 0x0c13 tx timeout [ 628.306837][T24524] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 629.097951][T24557] __nla_validate_parse: 7 callbacks suppressed [ 629.097973][T24557] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4634'. [ 629.754236][T24580] netlink: 'syz.3.4641': attribute type 4 has an invalid length. [ 629.797205][T24582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4642'. [ 629.920675][T24591] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 629.921255][T24591] team0: Device ipvlan2 is already an upper device of the team interface [ 630.004277][ T6576] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.004559][ T6576] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.004700][ T6576] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.004778][ T6576] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.201332][T24602] netlink: 'syz.2.4649': attribute type 13 has an invalid length. [ 630.302276][T24607] gretap0: invalid flags given to default FDB implementation [ 630.340443][T24608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4648'. [ 630.352997][T24609] netlink: 'syz.3.4648': attribute type 1 has an invalid length. [ 630.353037][T24609] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4648'. [ 630.622116][T24625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4655'. [ 630.644129][T24625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4655'. [ 630.976565][T24639] netlink: 'syz.1.4662': attribute type 11 has an invalid length. [ 630.976622][T24639] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4662'. [ 631.301136][T24656] netlink: 'syz.3.4668': attribute type 10 has an invalid length. [ 631.301389][T24656] netlink: 'syz.3.4668': attribute type 10 has an invalid length. [ 631.301590][T24656] netlink: 'syz.3.4668': attribute type 10 has an invalid length. [ 631.301794][T24656] netlink: 'syz.3.4668': attribute type 10 has an invalid length. [ 631.302002][T24656] netlink: 'syz.3.4668': attribute type 10 has an invalid length. [ 631.302197][T24656] netlink: 'syz.3.4668': attribute type 10 has an invalid length. [ 631.302398][T24656] netlink: 'syz.3.4668': attribute type 10 has an invalid length. [ 631.365875][T24656] netlink: 'syz.3.4668': attribute type 10 has an invalid length. [ 631.443292][T24656] veth1_macvtap: entered promiscuous mode [ 631.452538][T24656] macsec1: entered promiscuous mode [ 631.464574][T24656] veth1_macvtap: left promiscuous mode [ 631.531471][T24657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4668'. [ 631.559205][T24670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4672'. [ 631.592186][T24657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4668'. [ 632.148087][ T1124] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.148180][ T1124] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.148251][ T1124] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.148319][ T1124] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.702377][T24712] netlink: 'syz.3.4682': attribute type 11 has an invalid length. [ 633.666924][T24735] tipc: Enabling of bearer rejected, failed to enable media [ 633.691971][T24738] x_tables: duplicate underflow at hook 3 [ 633.996774][T24757] ip_tables: iptables: counters copy to user failed while replacing table [ 634.028626][ T1124] IPVS: starting estimator thread 0... [ 634.113868][T24768] IPVS: using max 28 ests per chain, 67200 per kthread [ 634.169882][T24744] bond0: entered promiscuous mode [ 634.170304][T24744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.220617][T24754] vlan2: entered allmulticast mode [ 634.220640][T24754] bond0: entered allmulticast mode [ 634.244839][T24769] bond0: (slave bridge4): making interface the new active one [ 634.244871][T24769] bridge4: entered promiscuous mode [ 634.245040][T24769] bridge4: entered allmulticast mode [ 634.246722][T24769] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 634.404662][T24776] batman_adv: batadv0: Adding interface: virt_wifi0 [ 634.404714][T24776] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.408286][T24776] batman_adv: batadv0: Interface activated: virt_wifi0 [ 634.481530][T24780] tipc: Started in network mode [ 634.481560][T24780] tipc: Node identity 829f16cfaf84, cluster identity 4711 [ 634.481714][T24780] tipc: Enabled bearer , priority 0 [ 634.482322][T24780] syzkaller0: entered promiscuous mode [ 634.482341][T24780] syzkaller0: entered allmulticast mode [ 634.515719][T24780] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 634.598161][T24784] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 634.635466][T24791] __nla_validate_parse: 74 callbacks suppressed [ 634.635486][T24791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4706'. [ 634.678767][T24780] tipc: Resetting bearer [ 634.785168][T24779] tipc: Resetting bearer [ 634.849478][T24799] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.865715][T24796] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4708'. [ 634.866967][T24779] tipc: Disabling bearer [ 634.900746][T24796] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4708'. [ 635.009156][T24796] bridge7: entered allmulticast mode [ 635.098131][T24805] syzkaller0: entered promiscuous mode [ 635.098152][T24805] syzkaller0: entered allmulticast mode [ 636.200507][T24858] xt_limit: Overflow, try lower: 536871034/127 [ 636.275552][T24856] vxcan3: entered allmulticast mode [ 636.585755][T24866] lo speed is unknown, defaulting to 1000 [ 636.585892][T24866] lo speed is unknown, defaulting to 1000 [ 636.596898][T24866] lo speed is unknown, defaulting to 1000 [ 636.601035][T24866] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 636.601092][T24866] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 636.601154][T24866] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 636.702199][T24866] lo speed is unknown, defaulting to 1000 [ 636.714599][T24866] lo speed is unknown, defaulting to 1000 [ 636.720342][T24866] lo speed is unknown, defaulting to 1000 [ 636.722224][T24866] lo speed is unknown, defaulting to 1000 [ 636.742517][T24866] lo speed is unknown, defaulting to 1000 [ 636.796141][T24879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4729'. [ 636.952578][T24866] lo speed is unknown, defaulting to 1000 [ 637.084046][T24887] validate_nla: 65 callbacks suppressed [ 637.084066][T24887] netlink: 'syz.3.4730': attribute type 49 has an invalid length. [ 637.090891][T24887] netlink: 'syz.3.4730': attribute type 2 has an invalid length. [ 637.355502][T24895] ¾x9ÿ: renamed from bridge_slave_0 [ 637.543853][T24902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4734'. [ 637.566661][T24894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4731'. [ 637.687034][T24915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4738'. [ 637.690314][T24915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4738'. [ 637.690786][T24915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4738'. [ 637.693333][T24915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4738'. [ 637.967813][T24924] bond5: (slave veth0_to_bond): Releasing backup interface [ 638.026124][T24924] bond0: (slave bond_slave_0): Releasing backup interface [ 638.082108][T24931] netlink: 'syz.2.4743': attribute type 3 has an invalid length. [ 638.090540][T24932] netlink: 'syz.1.4742': attribute type 30 has an invalid length. [ 638.114725][T24924] team0: Port device team_slave_0 removed [ 638.152414][T24924] team0: Port device team_slave_1 removed [ 638.163165][T24924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.163191][T24924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.188065][T24924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.188088][T24924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.192435][T24924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.325627][T24932] bond3: option arp_missed_max: invalid value (0) [ 638.325653][T24932] bond3: option arp_missed_max: allowed values 1 - 255 [ 638.338108][T24932] bond3 (unregistering): Released all slaves [ 638.444757][T24927] team0: Mode changed to "loadbalance" [ 638.656271][T24952] batman_adv: batadv0: Adding interface: syzkaller0 [ 638.656295][T24952] batman_adv: batadv0: Interface activated: syzkaller0 [ 638.922189][T24970] netlink: 'syz.2.4753': attribute type 4 has an invalid length. [ 639.185921][T24986] netlink: 'syz.4.4755': attribute type 4 has an invalid length. [ 639.679212][T25007] syzkaller1: entered promiscuous mode [ 639.679236][T25007] syzkaller1: entered allmulticast mode [ 639.699973][T25007] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 639.699997][T25007] syzkaller1: Linktype set failed because interface is up [ 639.760912][T25012] __nla_validate_parse: 69 callbacks suppressed [ 639.760953][T25012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4764'. [ 639.768816][T25012] netlink: 'syz.1.4764': attribute type 11 has an invalid length. [ 639.982045][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4768'. [ 639.982068][T25023] netlink: 'syz.1.4768': attribute type 1 has an invalid length. [ 639.982081][T25023] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4768'. [ 640.157476][T25027] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 640.160698][T25027] bond7 (unregistering): Released all slaves [ 640.196320][T25034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4771'. [ 640.515466][T25043] bond3: entered promiscuous mode [ 640.515492][T25043] bond3: entered allmulticast mode [ 640.518002][T25048] tipc: Enabled bearer , priority 11 [ 640.607525][T25052] tipc: Enabling of bearer rejected, already enabled [ 641.029690][T25072] netlink: 'syz.3.4778': attribute type 1 has an invalid length. [ 641.140757][T25075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4778'. [ 641.219915][T25070] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 641.245971][T25075] 8021q: adding VLAN 0 to HW filter on device bond7 [ 641.300232][T25079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4779'. [ 641.348734][T25079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.652100][T25088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 641.667571][T25088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4782'. [ 641.667592][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4782'. [ 641.726862][T25097] netlink: 'syz.4.4782': attribute type 4 has an invalid length. [ 641.726885][T25097] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4782'. [ 641.750962][T25097] .`: renamed from  (while UP) [ 641.812511][T25088] tipc: New replicast peer: 172.20.20.187 [ 641.821665][T25088] tipc: Enabled bearer , priority 10 [ 641.927882][T25101] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4786'. [ 641.931734][T25101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.068572][T25106] tipc: Enabling of bearer rejected, failed to enable media [ 642.337459][T25117] netlink: 'syz.0.4791': attribute type 21 has an invalid length. [ 642.603766][T25125] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 642.923806][ T194] tipc: Node number set to 756750031 [ 643.131824][T25143] 8021q: VLANs not supported on gre0 [ 643.345256][T25153] netlink: 'syz.4.4803': attribute type 39 has an invalid length. [ 644.121462][T25179] netlink: 'syz.3.4812': attribute type 10 has an invalid length. [ 644.458081][T25209] syzkaller0: entered promiscuous mode [ 644.460770][T25209] syzkaller0: entered allmulticast mode [ 644.482897][T25208] tipc: Started in network mode [ 644.483050][T25208] tipc: Node identity fe2b732274ee, cluster identity 8 [ 644.502624][T25208] tipc: Enabled bearer , priority 10 [ 644.558815][T25207] tipc: Resetting bearer [ 644.628319][T25207] tipc: Disabling bearer [ 644.811888][T25219] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 644.894265][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 645.090082][T25232] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 645.412624][T25266] __nla_validate_parse: 107 callbacks suppressed [ 645.412645][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4830'. [ 646.537656][T25311] netlink: 'syz.0.4840': attribute type 2 has an invalid length. [ 646.715867][T25317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4844'. [ 646.743832][T25320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4843'. [ 646.901560][T25323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4845'. [ 647.170004][T25332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4847'. [ 647.225401][T25341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4850'. [ 647.467587][T25351] netlink: 'syz.1.4854': attribute type 1 has an invalid length. [ 647.467627][T25351] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4854'. [ 647.609649][T25354] veth0: entered promiscuous mode [ 647.838062][T25358] batman_adv: batadv0: Adding interface: syzkaller0 [ 647.838082][T25358] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.838113][T25358] batman_adv: batadv0: Interface activated: syzkaller0 [ 648.257274][T25355] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 648.317192][T25355] batman_adv: batadv0: Removing interface: syzkaller0 [ 648.416684][T25349] veth0: left promiscuous mode [ 648.825531][T25398] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4869'. [ 649.041032][T25404] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4870'. [ 649.207554][T25412] netlink: 1092 bytes leftover after parsing attributes in process `syz.2.4873'. [ 649.245207][T25412] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 649.250932][T25417] ip_tables: iptables: counters copy to user failed while replacing table [ 649.297277][T25425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 649.599782][T25441] netlink: 'syz.2.4878': attribute type 8 has an invalid length. [ 649.952050][T25459] netlink: 'syz.4.4883': attribute type 11 has an invalid length. [ 650.370640][T25476] syzkaller0: entered promiscuous mode [ 650.370662][T25476] syzkaller0: entered allmulticast mode [ 650.819828][T25499] __nla_validate_parse: 3 callbacks suppressed [ 650.819867][T25499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4889'. [ 651.154857][T25508] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4892'. [ 651.371817][T25515] bond3: entered promiscuous mode [ 651.382665][T25515] bond3: entered allmulticast mode [ 651.390467][T25515] 8021q: adding VLAN 0 to HW filter on device bond3 [ 651.439030][T25521] netlink: 'syz.0.4897': attribute type 4 has an invalid length. [ 651.452301][ T6376] lo speed is unknown, defaulting to 1000 [ 651.452348][ T6376] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 651.786641][T25542] bond4: option mode: unable to set because the bond device is up [ 652.215274][T25556] x_tables: duplicate underflow at hook 1 [ 652.299139][T25559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4905'. [ 652.653212][T25577] netlink: 'syz.0.4910': attribute type 1 has an invalid length. [ 652.991141][T25588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4912'. [ 653.576411][T25616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4921'. [ 653.589615][T25614] ip_tables: iptables: counters copy to user failed while replacing table [ 653.630484][T25617] syzkaller1: entered promiscuous mode [ 653.630506][T25617] syzkaller1: entered allmulticast mode [ 653.829109][T25624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4924'. [ 653.845364][ T5641] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 653.967868][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4927'. [ 654.009945][T25630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4925'. [ 654.171025][T25631] xt_addrtype: ipv6 does not support BROADCAST matching [ 654.401159][T25644] bond2: Unable to set up delay as MII monitoring is disabled [ 654.405564][T25644] bond2 (unregistering): Released all slaves [ 654.571585][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4933'. [ 654.687511][T25653] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 654.687548][T25653] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.911010][T25665] netlink: 'syz.4.4935': attribute type 1 has an invalid length. [ 654.962451][T25665] 8021q: adding VLAN 0 to HW filter on device bond5 [ 655.269699][T25685] netlink: 'syz.2.4939': attribute type 1 has an invalid length. [ 655.433244][T25693] ipt_REJECT: TCP_RESET invalid for non-tcp [ 655.510031][T25685] 8021q: adding VLAN 0 to HW filter on device bond6 [ 655.605923][T25686] bond6: (slave bridge10): making interface the new active one [ 655.610277][T25686] bond6: (slave bridge10): Enslaving as an active interface with an up link [ 655.610391][T25688] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 655.614044][T25694] syzkaller0: entered promiscuous mode [ 655.614072][T25694] syzkaller0: entered allmulticast mode [ 655.716073][T25697] bond6: entered promiscuous mode [ 655.716099][T25697] bond6: entered allmulticast mode [ 655.721270][T25697] 8021q: adding VLAN 0 to HW filter on device bond6 [ 655.799576][T25686] bond6: (slave bridge11): Enslaving as an active interface with a down link [ 655.912040][T25706] IPVS: Scheduler module ip_vs_sip not found [ 655.995250][T25686] bond6: (slave bridge12): Enslaving as an active interface with a down link [ 655.995645][T25709] tipc: Enabled bearer , priority 0 [ 656.071341][T25686] bond6: (slave bridge13): Enslaving as an active interface with a down link [ 656.089142][T25692] tipc: Resetting bearer [ 656.158566][T25692] tipc: Disabling bearer [ 656.609121][T25731] tipc: Enabling of bearer rejected, failed to enable media [ 656.671368][T25734] netlink: 'syz.0.4948': attribute type 3 has an invalid length. [ 656.688701][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 656.720850][T15311] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 657.123035][T25752] netlink: 'syz.3.4952': attribute type 1 has an invalid length. [ 657.277807][T25750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4953'. [ 657.516148][T25764] ip_tables: iptables: counters copy to user failed while replacing table [ 657.625603][T25771] nbd: couldn't find a device at index 0 [ 657.886203][T25787] netlink: 'syz.0.4967': attribute type 1 has an invalid length. [ 657.936472][T25787] bond2: (slave gretap2): making interface the new active one [ 657.938702][T25787] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 658.173011][T25804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4969'. [ 658.454827][T25813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4972'. [ 658.482696][T25813] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 658.580721][T25820] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4974'. [ 658.688756][T25824] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 658.774926][T25826] netlink: 'syz.1.4975': attribute type 1 has an invalid length. [ 658.928170][T25826] bond4: entered promiscuous mode [ 658.930576][T25826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 658.965101][T25836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4978'. [ 659.060515][T25826] bond4: (slave bridge3): making interface the new active one [ 659.060539][T25826] bridge3: entered promiscuous mode [ 659.081358][T25826] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 659.113678][T25845] netlink: 'syz.4.4981': attribute type 1 has an invalid length. [ 659.113701][T25845] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4981'. [ 659.242370][T25850] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4983'. [ 659.489163][T25867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4986'. [ 659.741034][T25883] IPVS: ip_vs_add_dest(): server weight less than zero [ 659.788394][T25867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4986'. [ 660.116901][T25896] tipc: Failed to remove unknown binding: 66,0,0/756750031:4112842200/4112842202 [ 660.116936][T25896] tipc: Failed to remove unknown binding: 66,0,0/756750031:4112842200/4112842201 [ 660.117149][T25896] tipc: Failed to remove unknown binding: 66,0,0/756750031:4112842200/4112842202 [ 660.117175][T25896] tipc: Failed to remove unknown binding: 66,0,0/756750031:4112842200/4112842201 [ 660.442077][T25910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4992'. [ 660.480944][T25912] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20003 [ 660.492387][T25911] netlink: 'syz.0.4993': attribute type 21 has an invalid length. [ 660.770314][T25921] netlink: 'syz.4.5001': attribute type 12 has an invalid length. [ 660.790324][T25918] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 660.967581][T25932] netlink: 'syz.1.5003': attribute type 1 has an invalid length. [ 661.014614][T25932] bond5: entered promiscuous mode [ 661.015498][T25932] 8021q: adding VLAN 0 to HW filter on device bond5 [ 661.040552][T25932] vlan2: entered allmulticast mode [ 661.040572][T25932] bond5: entered allmulticast mode [ 661.094149][T25932] bond5: (slave bridge4): making interface the new active one [ 661.094174][T25932] bridge4: entered promiscuous mode [ 661.094365][T25932] bridge4: entered allmulticast mode [ 661.095823][T25932] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 661.286502][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.291056][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.316497][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.320257][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.326470][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.361098][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.374442][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.377068][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.379182][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.381750][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.418794][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.441499][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.457060][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.458492][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.459908][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.461346][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.462806][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.487209][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.509046][T25954] ip_tables: iptables: counters copy to user failed while replacing table [ 661.517177][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.532377][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.557442][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.598898][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.652371][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.681412][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.721917][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.765133][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.802002][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.814593][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.816137][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.817548][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.818970][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.820449][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.821800][T25937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.842732][T25960] vlan0: entered promiscuous mode [ 662.302566][T25975] netlink: 'syz.2.5012': attribute type 1 has an invalid length. [ 662.302590][T25975] netlink: 'syz.2.5012': attribute type 2 has an invalid length. [ 662.407833][T25976] netlink: 'syz.1.5011': attribute type 4 has an invalid length. [ 662.407864][T25976] __nla_validate_parse: 7 callbacks suppressed [ 662.407875][T25976] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5011'. [ 662.483754][T25982] netlink: 'syz.4.5014': attribute type 1 has an invalid length. [ 662.493136][T25983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5014'. [ 662.537020][T25984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5014'. [ 662.543195][T25987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5014'. [ 662.588470][T25988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5014'. [ 662.756329][T25991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.780109][T25991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.894113][T25991] nbd: nbd1088 already in use [ 663.391268][T26021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5023'. [ 663.419838][T26027] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5026'. [ 663.477473][T26027] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5026'. [ 663.647440][T26035] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 663.648096][T26035] batman_adv: batadv0: Adding interface: gretap2 [ 663.648109][T26035] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.648140][T26035] batman_adv: batadv0: Interface activated: gretap2 [ 663.853018][T26054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5031'. [ 663.930514][T26055] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 664.000552][T26061] xt_LOG: level 8 >= 8 [ 664.001571][T26061] netlink: 'syz.1.5032': attribute type 1 has an invalid length. [ 664.048021][T26061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5032'. [ 664.301028][T26072] sctp: [Deprecated]: syz.3.5039 (pid 26072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 664.301028][T26072] Use struct sctp_sack_info instead [ 664.526774][T26086] tipc: Enabled bearer , priority 10 [ 664.894563][T26104] xt_ecn: cannot match TCP bits for non-tcp packets [ 665.415356][T26120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.678637][T26120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 665.708356][T26120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.751250][T26120] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 665.798707][ T6376] tipc: Node number set to 2328195874 [ 665.911027][T20293] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.912500][T20293] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.912580][T20293] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.912645][T20293] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.072590][T26139] veth7: entered allmulticast mode [ 666.531421][T26165] netlink: 'syz.0.5063': attribute type 1 has an invalid length. [ 666.774702][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 67 > 9 [ 666.774736][ T5641] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 666.821776][T26167] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 666.822312][T26167] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 666.830962][T26167] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 666.831418][T26167] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 666.840065][T26167] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 666.844397][T26167] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 666.844858][T26167] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 667.172763][T26179] macvtap0: entered promiscuous mode [ 667.172788][T26179] hsr0: entered promiscuous mode [ 667.173046][T26179] macvtap0: entered allmulticast mode [ 667.173060][T26179] hsr0: entered allmulticast mode [ 667.173073][T26179] hsr_slave_0: entered allmulticast mode [ 667.173088][T26179] hsr_slave_1: entered allmulticast mode [ 667.416638][T26186] __nla_validate_parse: 12 callbacks suppressed [ 667.416661][T26186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5071'. [ 667.416700][T26186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5071'. [ 667.667026][T26201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5073'. [ 667.669234][T26200] netlink: 'syz.3.5072': attribute type 29 has an invalid length. [ 667.669256][T26200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5072'. [ 667.697499][T26200] netlink: 'syz.3.5072': attribute type 2 has an invalid length. [ 667.861210][T26208] tipc: Enabling of bearer rejected, failed to enable media [ 668.098742][T26222] net_ratelimit: 27 callbacks suppressed [ 668.098762][T26222] ip_tables: iptables: counters copy to user failed while replacing table [ 668.281519][T26231] ip6erspan0: entered allmulticast mode [ 668.805296][T26247] netlink: 'syz.1.5090': attribute type 16 has an invalid length. [ 668.805352][T26247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5090'. [ 668.936789][T26253] tipc: Enabling of bearer rejected, already enabled [ 669.081431][T26255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5092'. [ 669.340015][T26273] bond0: Error: CAN devices cannot be enslaved [ 669.340587][T26273] openvswitch: netlink: Message has 70 unknown bytes. [ 669.340618][T26273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.434636][T26282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.577210][T26288] tipc: Enabling of bearer rejected, already enabled [ 669.586222][T26288] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 669.671344][T26286] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5101'. [ 669.729674][T26292] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5104'. [ 669.730200][T26292] unsupported nlmsg_type 40 [ 669.891516][T26302] netlink: 'syz.2.5106': attribute type 1 has an invalid length. [ 669.987305][T26302] 8021q: adding VLAN 0 to HW filter on device bond7 [ 670.013276][T26302] netlink: 'syz.2.5106': attribute type 10 has an invalid length. [ 670.013297][T26302] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5106'. [ 670.105275][T26312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5111'. [ 670.161399][T26319] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 670.220124][T26319] openvswitch: netlink: Multiple metadata blocks provided [ 670.243416][ T194] hid-generic 0005:0008:0007.0002: item fetching failed at offset 0/1 [ 670.246523][ T194] hid-generic 0005:0008:0007.0002: probe with driver hid-generic failed with error -22 [ 670.283203][T26322] Cannot find add_set index 34 as target [ 670.392918][T26330] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 670.413113][T26327] openvswitch: netlink: Multiple metadata blocks provided [ 670.439150][ T194] hid-generic 0005:0008:0007.0003: item fetching failed at offset 0/1 [ 670.439854][ T194] hid-generic 0005:0008:0007.0003: probe with driver hid-generic failed with error -22 [ 670.560149][T26340] ip_tables: iptables: counters copy to user failed while replacing table [ 670.843947][T26354] bond0: entered promiscuous mode [ 670.846342][T26354] batadv0: entered promiscuous mode [ 670.849004][T26354] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 670.849055][T26354] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 670.851577][T26354] hsr1: entered promiscuous mode [ 670.852591][T26354] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 671.812853][T26406] Cannot find del_set index 65532 as target [ 672.011341][T26415] netlink: 'syz.1.5140': attribute type 2 has an invalid length. [ 672.795951][T26451] __nla_validate_parse: 4 callbacks suppressed [ 672.795972][T26451] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5149'. [ 672.865695][T26451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5149'. [ 673.657501][T26499] ovs-dp0: entered promiscuous mode [ 673.960017][T26511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5165'. [ 673.960086][T26511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5165'. [ 674.078976][T26511] erspan0: entered promiscuous mode [ 674.112398][T26511] gretap0: entered promiscuous mode [ 674.119739][T26511] debugfs: 'hsr1' already exists in 'hsr' [ 674.119799][T26511] Cannot create hsr debugfs directory [ 674.134253][T26493] lo: left promiscuous mode [ 674.135370][T26493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.142406][T26493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.156003][T26493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.213129][T26493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.232865][T26493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.249149][T26493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.249832][T26493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.250453][T26493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.250955][T26493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.251869][T26493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.794222][T26542] IPv6: NLM_F_CREATE should be specified when creating new route [ 674.895431][T26547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5174'. [ 675.281569][T26557] netlink: 'syz.1.5176': attribute type 1 has an invalid length. [ 675.394068][T26562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 675.396979][T26562] bond7: (slave bond8): making interface the new active one [ 675.397466][T26562] bond7: (slave bond8): Enslaving as an active interface with an up link [ 675.479936][T26567] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5180'. [ 675.505476][T26562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5176'. [ 675.528244][T26557] bond7: (slave gretap3): Enslaving as a backup interface with an up link [ 675.895787][T26589] netlink: 'syz.0.5184': attribute type 1 has an invalid length. [ 675.936539][T26586] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5182'. [ 676.008009][T26594] netlink: 'syz.0.5185': attribute type 4 has an invalid length. [ 676.104426][T26597] netlink: 'syz.0.5185': attribute type 4 has an invalid length. [ 676.179922][T13409] lo speed is unknown, defaulting to 1000 [ 676.181442][T13409] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 676.200086][T26603] netlink: 'syz.4.5187': attribute type 28 has an invalid length. [ 676.200108][T26603] netlink: 'syz.4.5187': attribute type 3 has an invalid length. [ 676.200144][T26603] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5187'. [ 676.244952][T26593] netlink: 'syz.2.5182': attribute type 2 has an invalid length. [ 676.275601][T26593] !;: entered promiscuous mode [ 676.369679][T26606] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5189'. [ 676.907425][T26639] netlink: 'syz.0.5195': attribute type 13 has an invalid length. [ 677.566924][ T5641] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 677.730949][T26671] netlink: 'syz.3.5200': attribute type 1 has an invalid length. [ 677.902517][T26679] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5202'. [ 677.967710][T26673] 8021q: adding VLAN 0 to HW filter on device bond9 [ 677.982822][T26673] bond8: (slave bond9): making interface the new active one [ 677.994798][T26673] bond8: (slave bond9): Enslaving as an active interface with an up link [ 678.110561][T26687] geneve3: entered promiscuous mode [ 678.166469][T26691] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 678.267592][T26694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5206'. [ 678.269826][T26687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5205'. [ 678.852166][T26719] netlink: 'syz.0.5214': attribute type 1 has an invalid length. [ 679.018822][T26719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 679.134143][T26725] bond3: (slave geneve3): making interface the new active one [ 679.138988][T26725] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 679.296867][ T6590] net_ratelimit: 57 callbacks suppressed [ 679.296899][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.503182][T26744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5220'. [ 679.654062][T26753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5223'. [ 679.840155][T26753] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 679.915635][T26766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5225'. [ 679.957859][T26762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5225'. [ 680.093898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.266289][T26781] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 680.339215][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.407742][T26753] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 680.407768][T26753] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 680.517747][T26753] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 680.517787][T26753] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 680.594882][T26799] ip_tables: iptables: counters copy to user failed while replacing table [ 680.757162][T26753] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 680.757189][T26753] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 680.780006][T26807] xt_hashlimit: size too large, truncated to 1048576 [ 680.929055][T26808] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.5236'. [ 680.948684][T26808] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 680.983717][T26808] 0ªX¹¦Dö»: entered allmulticast mode [ 681.161287][T26753] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 681.161313][T26753] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 681.378440][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.473782][T26753] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 681.473808][T26753] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 682.065796][T26842] syzkaller0: entered promiscuous mode [ 682.065855][T26842] syzkaller0: entered allmulticast mode [ 682.173049][T26846] openvswitch: netlink: Tunnel attr 229 out of range max 16 [ 682.292742][T26852] ip_tables: iptables: counters copy to user failed while replacing table [ 682.414551][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.510458][T26859] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 682.776233][T26869] netlink: 'syz.0.5250': attribute type 10 has an invalid length. [ 682.992053][T26872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5253'. [ 682.992082][T26872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5253'. [ 683.074036][T26876] xt_l2tp: missing protocol rule (udp|l2tpip) [ 683.080228][T26872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5253'. [ 683.150899][T26880] xt_l2tp: missing protocol rule (udp|l2tpip) [ 683.258727][T26849] set match dimension is over the limit! [ 683.462971][ T6593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.470128][T26889] netlink: 'syz.4.5257': attribute type 10 has an invalid length. [ 683.928225][T26889] team0: Device wg2 is of different type [ 683.942446][T26894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5257'. [ 684.237770][T18701] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 684.473006][T26928] ip_tables: iptables: counters copy to user failed while replacing table [ 684.494960][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.136392][ T6386] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.228784][T26965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5273'. [ 685.238172][T26965] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5273'. [ 685.238198][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5273'. [ 685.474480][T26971] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5274'. [ 685.495747][T26971] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5274'. [ 685.534689][ T6593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.565514][T26965] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.565553][T26965] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.734827][T26982] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 685.752152][T26982] netlink: 'syz.2.5278': attribute type 3 has an invalid length. [ 685.752173][T26982] netlink: 'syz.2.5278': attribute type 1 has an invalid length. [ 685.752186][T26982] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5278'. [ 685.752202][T26982] NCSI netlink: No device for ifindex 813332851 [ 685.859849][ T1317] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 685.938984][T26965] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.939054][T26965] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.211799][T26965] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.211859][T26965] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.282247][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282282][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282308][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282332][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282356][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282380][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282404][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282427][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282452][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282496][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282521][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282545][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282569][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282593][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282624][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282648][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282672][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282696][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282720][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282744][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282768][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282792][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282815][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282839][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282863][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282887][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282911][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282935][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282958][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.282982][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283006][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283030][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283053][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283077][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283101][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283152][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283177][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283201][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283224][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283248][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283272][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283296][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283320][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283344][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283368][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283392][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.283415][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.295792][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.295823][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.295847][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.295869][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.295892][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.295915][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.295938][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.295960][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.295983][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.296005][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.296027][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.296050][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.296072][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.296094][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.296116][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.296139][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.296161][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.296208][T27005] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 686.423839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.424109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.424330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.587023][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.628923][T26965] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.628960][T26965] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.141957][ T1124] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.141992][ T1124] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.144056][ T1124] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.144085][ T1124] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.145061][ T1124] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.145086][ T1124] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.254230][ T6593] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.254266][ T6593] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.614900][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.616790][T27052] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 687.616868][T27052] gretap3: entered promiscuous mode [ 687.616883][T27052] gretap3: entered allmulticast mode [ 688.328508][T27089] 8021q: VLANs not supported on sit0 [ 688.584326][T27095] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 688.584365][T27095] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 688.654124][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.810718][T27106] __nla_validate_parse: 2 callbacks suppressed [ 688.810737][T27106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5310'. [ 688.810751][T27106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5310'. [ 689.249674][T27127] ip_tables: iptables: counters copy to user failed while replacing table [ 689.296986][T27124] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 689.589254][T27136] syzkaller0: left promiscuous mode [ 689.589294][T27136] syzkaller0: left allmulticast mode [ 689.613870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.614455][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.696697][ T6593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.415058][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.417170][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.654244][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.735048][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.879214][T27182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 690.934135][T27182] syzkaller0: entered promiscuous mode [ 690.934160][T27182] syzkaller0: entered allmulticast mode [ 691.280715][T27187] syzkaller1: entered promiscuous mode [ 691.280740][T27187] syzkaller1: entered allmulticast mode [ 691.429948][T27194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5334'. [ 691.456184][ T6376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.505211][T27197] sctp: [Deprecated]: syz.2.5336 (pid 27197) Use of int in maxseg socket option. [ 691.505211][T27197] Use struct sctp_assoc_value instead [ 691.646433][T27202] netlink: 'syz.4.5338': attribute type 16 has an invalid length. [ 691.646490][T27202] netlink: 'syz.4.5338': attribute type 17 has an invalid length. [ 691.687279][T27201] netlink: 'syz.0.5337': attribute type 1 has an invalid length. [ 691.692434][T27202] 8021q: adding VLAN 0 to HW filter on device .` [ 691.743740][T27206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5337'. [ 691.779456][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.866947][T27201] 8021q: adding VLAN 0 to HW filter on device bond4 [ 692.020451][T27219] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 692.866547][T27268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5355'. [ 692.870223][T27268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5355'. [ 692.889536][T27269] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5352'. [ 693.069889][T27272] netlink: 207 bytes leftover after parsing attributes in process `syz.3.5356'. [ 693.465871][T27295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5363'. [ 693.489964][T27295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5363'. [ 694.314615][T27338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5371'. [ 694.317925][T27334] gtp1: entered promiscuous mode [ 694.317978][T27334] gtp1: entered allmulticast mode [ 694.321403][ T5294] veth1_vlan: left promiscuous mode [ 694.650711][T27345] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5375'. [ 694.653801][ C0] net_ratelimit: 4 callbacks suppressed [ 694.653817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.654091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.654295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.897330][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.131269][T27367] netlink: 'syz.0.5382': attribute type 2 has an invalid length. [ 695.355093][T27377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5385'. [ 695.357955][T27379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5385'. [ 695.374976][T27381] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 695.378408][T27381] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 695.513137][T27386] gre1: entered promiscuous mode [ 695.935731][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.094745][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.129886][T27402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5392'. [ 696.649551][T27439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5402'. [ 696.663036][T27431] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 696.680252][T27431] bond5 (unregistering): Released all slaves [ 696.698577][T27441] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5400'. [ 696.698601][T27441] nbd: illegal input index 65508 [ 696.766952][T27443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5402'. [ 696.974605][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.036769][T27439] macvtap1: entered promiscuous mode [ 697.036823][T27439] vlan0: entered promiscuous mode [ 697.037690][T27439] macvtap1: entered allmulticast mode [ 697.037723][T27439] vlan0: entered allmulticast mode [ 697.037749][T27439] veth0_vlan: entered allmulticast mode [ 697.172587][T27443] macvtap2: entered promiscuous mode [ 697.173182][T27443] macvtap2: entered allmulticast mode [ 697.242724][T27442] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 697.983305][T27484] sctp: [Deprecated]: syz.2.5411 (pid 27484) Use of int in maxseg socket option. [ 697.983305][T27484] Use struct sctp_assoc_value instead [ 698.023055][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.091459][T27484] xt_NETMAP: bad MAP_IPS. [ 698.392618][T27470] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5407'. [ 698.891680][T27527] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5419'. [ 699.055597][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.196844][T27537] netlink: 'syz.1.5423': attribute type 4 has an invalid length. [ 699.411696][T27546] ip_tables: iptables: counters copy to user failed while replacing table [ 699.525139][T27553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5428'. [ 699.660807][T27560] xt_IDLETIMER: label is empty or not nul-terminated [ 699.867879][T27573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.871617][T27573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.093978][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.493753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.493992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.511125][T27601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5442'. [ 700.945773][T27620] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5447'. [ 700.945803][T27620] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5447'. [ 701.091023][T27624] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5449'. [ 701.093942][T27625] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5449'. [ 701.134906][ T6593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.194309][T27630] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5450'. [ 701.198436][T27631] hsr0: entered allmulticast mode [ 701.198457][T27631] hsr_slave_0: entered allmulticast mode [ 701.198496][T27631] hsr_slave_1: entered allmulticast mode [ 701.199222][T27631] hsr0: entered promiscuous mode [ 701.201203][T27630] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5450'. [ 701.201221][T27630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5450'. [ 701.222442][T27630] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5450'. [ 701.241646][T27631] hsr_slave_0: left promiscuous mode [ 701.285010][T27631] hsr_slave_1: left promiscuous mode [ 701.300134][T27631] hsr0 (unregistering): left allmulticast mode [ 701.300176][T27631] hsr0 (unregistering): left promiscuous mode [ 701.709532][T27657] ip6gre3: entered promiscuous mode [ 701.709587][T27657] ip6gre3: entered allmulticast mode [ 701.850058][T27665] bond5: invalid ARP target 0.0.0.0 specified for addition [ 701.850084][T27665] bond5: option arp_ip_target: invalid value (0) [ 701.857399][T27665] bond5 (unregistering): Released all slaves [ 702.174204][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.344527][T27692] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 702.493760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.495179][ C0] [ 702.505605][ C0] ================================ [ 702.510715][ C0] WARNING: inconsistent lock state [ 702.515844][ C0] syzkaller #0 Not tainted [ 702.520268][ C0] -------------------------------- [ 702.525375][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 702.532221][ C0] ipvs-e:4:0/9183 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 702.538555][ C0] ffff888027bfc260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 702.548035][ C0] {SOFTIRQ-ON-W} state was registered at: [ 702.553743][ C0] lock_acquire+0x115/0x350 [ 702.558382][ C0] lock_sock_nested+0x41/0x100 [ 702.563316][ C0] x25_ioctl+0x96e/0xff0 [ 702.567646][ C0] sock_do_ioctl+0x101/0x320 [ 702.572369][ C0] sock_ioctl+0x57a/0x7e0 [ 702.576779][ C0] __se_sys_ioctl+0xfc/0x170 [ 702.581529][ C0] do_syscall_64+0x166/0x520 [ 702.586292][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.592292][ C0] irq event stamp: 383658 [ 702.596605][ C0] hardirqs last enabled at (383658): [] __local_bh_enable_ip+0xd6/0x140 [ 702.606619][ C0] hardirqs last disabled at (383657): [] __local_bh_enable_ip+0x72/0x140 [ 702.616602][ C0] softirqs last enabled at (383022): [] __irq_exit_rcu+0xc6/0x220 [ 702.626061][ C0] softirqs last disabled at (383569): [] __irq_exit_rcu+0xc6/0x220 [ 702.635514][ C0] [ 702.635514][ C0] other info that might help us debug this: [ 702.643561][ C0] Possible unsafe locking scenario: [ 702.643561][ C0] [ 702.650998][ C0] CPU0 [ 702.654265][ C0] ---- [ 702.657536][ C0] lock(sk_lock-AF_X25); [ 702.661861][ C0] [ 702.665303][ C0] lock(sk_lock-AF_X25); [ 702.669799][ C0] [ 702.669799][ C0] *** DEADLOCK *** [ 702.669799][ C0] [ 702.677927][ C0] locks held by ipvs-e:4:0/9183: 1, last CPU#0: [ 702.684160][ C0] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 702.694245][ C0] [ 702.694245][ C0] stack backtrace: [ 702.700134][ C0] CPU: 0 UID: 0 PID: 9183 Comm: ipvs-e:4:0 Not tainted syzkaller #0 PREEMPT(full) [ 702.709411][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 702.719467][ C0] Call Trace: [ 702.722740][ C0] [ 702.725575][ C0] dump_stack_lvl+0xe8/0x150 [ 702.730204][ C0] print_usage_bug+0x28c/0x2e0 [ 702.734975][ C0] valid_state+0xbe/0xf0 [ 702.739219][ C0] mark_lock_irq+0x36/0x380 [ 702.743725][ C0] mark_lock+0x117/0x190 [ 702.747970][ C0] __lock_acquire+0x71e/0x2de0 [ 702.752734][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 702.758059][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 702.763079][ C0] ? lock_acquire+0x115/0x350 [ 702.767759][ C0] lock_acquire+0x115/0x350 [ 702.772260][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 702.777379][ C0] ? x25_kill_by_neigh+0x103/0x250 [ 702.782493][ C0] lock_sock_nested+0x41/0x100 [ 702.787263][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 702.792549][ C0] x25_kill_by_neigh+0x10d/0x250 [ 702.797487][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 702.802867][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 702.808327][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 702.813784][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 702.819682][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 702.825065][ C0] lapbeth_napi_poll+0x42/0x90 [ 702.829946][ C0] __napi_poll+0xaa/0x330 [ 702.834339][ C0] net_rx_action+0x61d/0xf50 [ 702.838936][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 702.844047][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 702.849180][ C0] handle_softirqs+0x265/0x8d0 [ 702.853954][ C0] __irq_exit_rcu+0xc6/0x220 [ 702.858543][ C0] irq_exit_rcu+0x9/0x30 [ 702.862785][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 702.868412][ C0] [ 702.871335][ C0] [ 702.874257][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 702.880243][ C0] RIP: 0010:finish_task_switch+0x413/0xc60 [ 702.886073][ C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 27 81 6e 0a e8 02 89 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 702.905672][ C0] RSP: 0018:ffffc90005a377e0 EFLAGS: 00000202 [ 702.911737][ C0] RAX: 000000000005da4f RBX: ffff8880b823d120 RCX: 8000000000000001 [ 702.919704][ C0] RDX: 0000000000000000 RSI: ffffffff8e6a204f RDI: ffffffff8c8e8c80 [ 702.927670][ C0] RBP: ffffc90005a37830 R08: ffffffff919d71bf R09: 1ffffffff233ae37 [ 702.935634][ C0] R10: dffffc0000000000 R11: fffffbfff233ae38 R12: ffff888020f80000 [ 702.943688][ C0] R13: ffff8880b823d0e8 R14: dffffc0000000000 R15: 1ffff11017047a24 [ 702.951667][ C0] __schedule+0x17e5/0x5830 [ 702.956246][ C0] ? __lock_acquire+0x747/0x2de0 [ 702.961190][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 702.966298][ C0] ? __pfx___schedule+0x10/0x10 [ 702.971138][ C0] ? lock_acquire+0x115/0x350 [ 702.975816][ C0] ? schedule+0x90/0x2b0 [ 702.980055][ C0] schedule+0x164/0x2b0 [ 702.984208][ C0] schedule_timeout+0x152/0x2c0 [ 702.989140][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 702.994513][ C0] ? __pfx_process_timeout+0x10/0x10 [ 702.999823][ C0] ip_vs_estimation_kthread+0x29db/0x3940 [ 703.005632][ C0] ? ip_vs_estimation_kthread+0x2826/0x3940 [ 703.011547][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 703.017624][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 703.023697][ C0] ? __kthread_parkme+0x71/0x1f0 [ 703.028640][ C0] ? __kthread_parkme+0x199/0x1f0 [ 703.033658][ C0] kthread+0x38b/0x480 [ 703.037736][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 703.043806][ C0] ? __pfx_kthread+0x10/0x10 [ 703.048397][ C0] ret_from_fork+0x514/0xb70 [ 703.053018][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 703.058128][ C0] ? __switch_to+0xc78/0x1410 [ 703.062812][ C0] ? __pfx_kthread+0x10/0x10 [ 703.067404][ C0] ret_from_fork_asm+0x1a/0x30 [ 703.072179][ C0] [ 703.076504][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3910 [ 703.076521][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9183, name: ipvs-e:4:0 [ 703.076539][ C0] preempt_count: 101, expected: 0 [ 703.076549][ C0] RCU nest depth: 1, expected: 0 [ 703.076559][ C0] INFO: lockdep is turned off. [ 703.076565][ C0] Preemption disabled at: [ 703.076571][ C0] [] schedule+0x15d/0x2b0 [ 703.076604][ C0] CPU: 0 UID: 0 PID: 9183 Comm: ipvs-e:4:0 Not tainted syzkaller #0 PREEMPT(full) [ 703.076627][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 703.076640][ C0] Call Trace: [ 703.076650][ C0] [ 703.076658][ C0] dump_stack_lvl+0xe8/0x150 [ 703.076692][ C0] __might_resched+0x36a/0x4c0 [ 703.076715][ C0] ? schedule+0x15d/0x2b0 [ 703.076736][ C0] lock_sock_nested+0x56/0x100 [ 703.076767][ C0] x25_kill_by_neigh+0x10d/0x250 [ 703.076800][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 703.076834][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 703.076861][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 703.076887][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 703.076920][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 703.076951][ C0] lapbeth_napi_poll+0x42/0x90 [ 703.076985][ C0] __napi_poll+0xaa/0x330 [ 703.077016][ C0] net_rx_action+0x61d/0xf50 [ 703.077053][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 703.077081][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 703.077133][ C0] handle_softirqs+0x265/0x8d0 [ 703.077168][ C0] __irq_exit_rcu+0xc6/0x220 [ 703.077196][ C0] irq_exit_rcu+0x9/0x30 [ 703.077222][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 703.077246][ C0] [ 703.077252][ C0] [ 703.077261][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 703.077284][ C0] RIP: 0010:finish_task_switch+0x413/0xc60 [ 703.077316][ C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 27 81 6e 0a e8 02 89 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 703.077334][ C0] RSP: 0018:ffffc90005a377e0 EFLAGS: 00000202 [ 703.077353][ C0] RAX: 000000000005da4f RBX: ffff8880b823d120 RCX: 8000000000000001 [ 703.077369][ C0] RDX: 0000000000000000 RSI: ffffffff8e6a204f RDI: ffffffff8c8e8c80 [ 703.077383][ C0] RBP: ffffc90005a37830 R08: ffffffff919d71bf R09: 1ffffffff233ae37 [ 703.077400][ C0] R10: dffffc0000000000 R11: fffffbfff233ae38 R12: ffff888020f80000 [ 703.077415][ C0] R13: ffff8880b823d0e8 R14: dffffc0000000000 R15: 1ffff11017047a24 [ 703.077445][ C0] __schedule+0x17e5/0x5830 [ 703.077467][ C0] ? __lock_acquire+0x747/0x2de0 [ 703.077500][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 703.077525][ C0] ? __pfx___schedule+0x10/0x10 [ 703.077543][ C0] ? lock_acquire+0x115/0x350 [ 703.077573][ C0] ? schedule+0x90/0x2b0 [ 703.077594][ C0] schedule+0x164/0x2b0 [ 703.077619][ C0] schedule_timeout+0x152/0x2c0 [ 703.077649][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 703.077679][ C0] ? __pfx_process_timeout+0x10/0x10 [ 703.077713][ C0] ip_vs_estimation_kthread+0x29db/0x3940 [ 703.077745][ C0] ? ip_vs_estimation_kthread+0x2826/0x3940 [ 703.077791][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 703.077829][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 703.077860][ C0] ? __kthread_parkme+0x71/0x1f0 [ 703.077881][ C0] ? __kthread_parkme+0x199/0x1f0 [ 703.077903][ C0] kthread+0x38b/0x480 [ 703.077926][ C0] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 703.077952][ C0] ? __pfx_kthread+0x10/0x10 [ 703.077972][ C0] ret_from_fork+0x514/0xb70 [ 703.077993][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 703.078015][ C0] ? __switch_to+0xc78/0x1410 [ 703.078045][ C0] ? __pfx_kthread+0x10/0x10 [ 703.078064][ C0] ret_from_fork_asm+0x1a/0x30 [ 703.078091][ C0] [ 703.165680][ T1124] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 703.165748][ T1124] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 703.165804][ T1124] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 703.165847][ T1124] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 703.225167][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.254137][ T6593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.293905][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.693809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.693947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.694044][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.334437][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.373912][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.413649][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.454324][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.493717][ T6590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.293641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.293801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.534880][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog