last executing test programs: 4m3.702449764s ago: executing program 0 (id=2744): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x2a, &(0x7f0000000a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0x1c, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @echo={0x8, 0x0, 0x0, 0xd, 0x6d63}}}}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)=@getspdinfo={0x14, 0x25, 0x300, 0x70bd2a, 0x25dfdbf7, 0x10}, 0x14}}, 0x1000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0xc569fc2e8e00e2b2, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x20008400) (async, rerun: 32) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') (rerun: 32) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000700)) vmsplice(r3, &(0x7f0000000400)=[{&(0x7f0000000440)="b44d071541f2e3", 0x7}], 0x1, 0xd) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r4) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x1c, r6, 0x27, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r2, 0x100, 0x70bd29, 0x1, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0xb9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0xe8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r10, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) ioctl$FICLONE(r12, 0x40049409, r11) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f00000006c0)={&(0x7f0000000500), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r13, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r15}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1d, 0x13, [{0x18, 0x1}, {0x66}, {0x78}, {0x48, 0x1}, {0x48, 0x1}, {0x24, 0x1}, {0x24, 0x1}, {0x24, 0x1}, {0x16}, {0x60, 0x1}, {0x1b}, {0x4}, {0x30}, {0x2f}, {0xb, 0x1}, {0x60, 0x1}, {0x3}, {0x9, 0x1}, {0xad3fa6fe9b41fed6}, {0x30, 0x1}, {0x3}, {0xc}, {0x5, 0x1}, {0x16}, {0x2cc35de5f9bff3af}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x20) (async, rerun: 64) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (rerun: 64) 4m2.98823677s ago: executing program 0 (id=2748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r2, 0x731, 0x0, 0x20, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x4}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x80802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f00000005c0)={0xfffffffffffffe43, 0x0}) read(r3, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000600)=0x4000404) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/206, 0xce, 0x0, &(0x7f00000003c0)=""/1, 0x1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 4m2.696308554s ago: executing program 0 (id=2754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xc, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}]}, 0x44}}, 0xc000) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x0, 0x2b, 0x1, @empty, @local}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000140)="de0b27debadb8c9b128dfdfa28c2fd1cd18673ffd6a533473debea24fd7bae3eb3a4ecaf52ceeedca5168e85c0238f89a1f6393275255b149c565ca2d6c8ce10fbba7dde0475d95af6ace150580fa58a3852b08a4cb44710dc1e4d6ee3639b8a7edc586599092f95efc03cafdfa5a395efcd", 0x72) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000300)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000000340)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000580), 0xb5, 0x10, &(0x7f00000005c0), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x27, 0x6a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4m2.051464259s ago: executing program 0 (id=2760): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='syzkaller\x00', 0x2}, 0x90) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x45ed4000) socket$inet6(0xa, 0x3, 0xff) r3 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r3, &(0x7f0000000800)="60000000000800400000000000000000000000000000000100000000000000000000000000000001", 0x28, 0x0, &(0x7f0000000840)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000680)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x44, 0x6, 0xfe, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x11, 0xc2, 0x2000, 0x0, 0x7, {[@mptcp=@capable={0x1e, 0xc, 0xf, 0x1, 0x5, 0x1}, @md5sig={0x13, 0x12, "e9803cac6913fbfccc18ce5a512eaf73"}, @md5sig={0x13, 0x12, "f2a3c47d2be4dabe21013d40454c15b5"}]}}}}}}}}, 0x0) (async) getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000140)) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xe, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x39, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001400)={&(0x7f0000002400)=ANY=[@ANYBLOB="4c0f00009f4dc0aed2226cbb53d53a4b00ac49f660d8fbeab6a1a005bfbb8c164e028e1dd02b2881bf6e4e65044faddd4adf5e0390847700f504aa36d1f7b6483be91e91c3c24d3e8028bcbde0ef11ff3d4af209beb2975ca38a32485c6e1b6f26dfa532663bd950b492174ad6af6ef17ac6ab4884a7d006405c6ca56a0301", @ANYRES16=r4, @ANYBLOB="00012abd7000ffdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="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"], 0xf4c}, 0x1, 0x0, 0x0, 0x4}, 0x10000881) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r7, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}}, 0x14}, 0x1, 0xf000, 0x0, 0x20803}, 0xc004) 3m59.675959088s ago: executing program 0 (id=2776): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e24, @remote}, {0x306, @random="2b1f1e1941d0"}, 0x40, {0x2, 0x4e24, @remote}, 'ip6gre0\x00'}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r2 = socket$inet6(0xa, 0x4, 0x80000001) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x24, 0x9, {}, {0x77359400}, {0x4, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x0, 0x1}, 0x1e, 0x2, 0x0, 0x0, "bd34db547c824960db8811a77b77a4b592de0ae5f75f9ca5816f024a3a7374d86fa48860677d18413760b0848fff1f18c7772ef1d7e83dc60e691c84f9724dae"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8010) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000240)={0x1d, r4}, 0x10) getsockopt$inet_buf(r0, 0x0, 0x26, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000012c0)={0x0, 0x5, 0x96, "40a1b50f2d670ba9fd1eafff6d866cfd2e2fdac4f216a5929997edb9bb51e03fd3912c2c44f036df1aa9daa6aa34e4342aa911de7640d60250728a233ae25f030f135753f6f96cdade7088a760118aab036512f5b7562287067a85ff06647eeca2372104b3522d24f8fa487378aaecceefbadc9536a4c9a0bdf0119ba3b51192078709f88a8ba289b081e9a616de0406feb599b3491b"}, 0x9e) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000001380)=0x2, 0x8) close(r0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000013c0)) r5 = accept4$inet6(r2, &(0x7f0000001400)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001440)=0x1c, 0x101800) connect$inet6(r5, &(0x7f0000001480)={0xa, 0x4e24, 0xff8, @private2, 0x8}, 0x1c) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000014c0)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000001500)={0x2, 0xffffffffffffffff}, &(0x7f0000001540)=0xc) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000001580)={0xf8}, 0x1) listen(r0, 0x5) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000015c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, r4}, 0xc) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001600)={0x0, 0x8, 0xf6, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001a00)={0x0, 0x9d, 0x1, [0x800, 0x7fffffffffffffff, 0x7, 0xd, 0x8], [0xffffffff, 0x0, 0x7f, 0x401, 0x398, 0x8, 0x100, 0x9, 0x8, 0x3, 0x1, 0x8, 0x800000000000, 0x6c, 0x3, 0xbac, 0x9, 0xb, 0x6, 0x7, 0xf, 0x6, 0x1, 0xda, 0x2, 0xe8, 0x0, 0x1, 0x4, 0xffffffffffff696a, 0x4, 0x7, 0xfffffffffffffff8, 0x0, 0x100000000, 0x0, 0x3, 0x0, 0x10000, 0x5, 0x2, 0x7, 0x10000, 0x67, 0x4461, 0xfffffffffffffffb, 0x6, 0x0, 0x8000000000000000, 0x6, 0xff, 0x5, 0xcf, 0x3, 0x62, 0x81, 0x2, 0xfffffffffffffffe, 0x6, 0x3a9, 0x200, 0x474, 0xffffffff, 0xffffffffffffffff, 0x7e81, 0x1d, 0x9, 0x68a, 0x100, 0x7, 0x7, 0x9, 0x4, 0x1000, 0xfffffffffffffffb, 0x6, 0x3ff, 0x7, 0xb74, 0x7f, 0xdc7, 0x8c5, 0x2, 0x3, 0x4, 0xd7d, 0x7, 0xffffffffffffda8b, 0x5, 0x9, 0x0, 0x80000001, 0x1, 0xde, 0x7fffffff, 0x8001, 0x3, 0x3, 0x8, 0xb3e, 0xd, 0x6, 0xfffffffffffff6d0, 0x6, 0x0, 0x5, 0x0, 0xfff, 0x4, 0x10001, 0x4, 0x8, 0x7, 0x2000, 0x7, 0xff, 0xfff, 0x2, 0x3e4c, 0x1c, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001e40)={0x2, 0x4, {0x80, @usage=0xb, r8, 0x1cb, 0xe8, 0x0, 0x0, 0xb0a, 0xcee784ef44db31dd, @usage=0x9f0, 0x7, 0x7, [0x3, 0x7, 0x39, 0xec5b, 0x5]}, {0x3, @struct={0xd, 0x4}, r9, 0x9, 0xc, 0x8000000000000001, 0x2, 0x7, 0x52, @usage=0xfffffffffffffff8, 0x0, 0x8, [0x3, 0x2, 0x0, 0x6, 0xd, 0x100000000]}, {0x0, @usage=0xfffffffffffffffa, 0x0, 0x4, 0x100000000, 0x0, 0x6, 0x60000000000, 0x440, @usage, 0x80, 0x5, [0x4, 0x2, 0x4, 0x2, 0x6, 0x5]}, {0x10001, 0x9, 0x9}}) getsockopt$MRT6(r5, 0x29, 0xd0, &(0x7f0000002240), &(0x7f0000002280)=0x4) r10 = accept4(r7, &(0x7f00000022c0)=@in={0x2, 0x0, @private}, &(0x7f0000002340)=0x80, 0x800) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000023c0), r10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000002500)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002400)={0x98, r11, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}]}, 0x98}}, 0x24000001) 3m59.189162148s ago: executing program 0 (id=2780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 3m44.046648459s ago: executing program 32 (id=2780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m30.072407515s ago: executing program 4 (id=3252): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0xa0}}, 0x20050800) sendmsg$NFT_BATCH(r2, &(0x7f0000000bc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x503, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x90, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0xffffffffffffff13, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x190, 0xb, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_USERDATA={0x41, 0xd, 0x1, 0x0, "b0401db30faad3d28b535dfafc626e285346fe953fe8a4274db8a4936a8ad4faff503b02206d6e4bab0853a2db04120a7b7d0fdf399b501eb28a919b73"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_EXPRESSIONS={0xbc, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}}, {0x74, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x7}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_DYNSET_EXPRESSIONS={0x10, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x25}, @NFTA_SET_EXPRESSIONS={0x50, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2f0}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c000280050001"], 0xc8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=@delqdisc={0x58, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xc, 0xc}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x0, 0x6, 0x1, 0xd865}, {0xdd, 0x2, 0xf, 0x8000, 0x1, 0x3}, 0x7ff, 0xff800000, 0x3a2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000001}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m29.624448498s ago: executing program 4 (id=3255): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="5400000030000106010000000000000000000000400001803c0001800f00010074756e6e656c5f6b65790000280002801c00020000000000000000000000000000000000000000000100000008000b8004000380"], 0x54}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000040)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002301"], 0x48}}, 0x4008004) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x8001) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000feffffff00000000", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="60f5e1ff03"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x1412, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048c54}, 0x20000008) 1m29.301950222s ago: executing program 4 (id=3257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000600)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x76, 0x7, @loopback}, @IFLA_GENEVE_DF={0x5, 0xd, 0x40}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m28.266522863s ago: executing program 4 (id=3259): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x18, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b79bb859f5f6166d778af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000002ffffffbfa400000000000013270000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000cd9000079960085000000a500"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x28002, 0x7}, 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b40)={r0, 0x0, &(0x7f0000000600)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x89}}, &(0x7f0000000340)='syzkaller\x00'}, 0x90) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1e, 0x4, &(0x7f0000000ac0)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x50}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f0000000500)={{0x0}, 0x0, 0x71}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@float={0x1, 0x0, 0x0, 0x10, 0x8}, @ptr={0x9, 0x0, 0x0, 0x2, 0x3}, @union={0xb, 0x1, 0x0, 0x5, 0x0, 0xe9d, [{0x4, 0x0, 0x81}]}, @int={0x3, 0x0, 0x0, 0x1, 0x10, 0x28, 0x0, 0x5, 0xd}, @ptr={0xf, 0x0, 0x0, 0x2, 0x4}, @volatile={0x10}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000e80)=""/53, 0x77, 0x35, 0x0, 0x3ff}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@arena={0x21, 0x0, 0x0, 0x8, 0x40000, 0x1, 0x3478dba0, '\x00', 0x0, r6, 0x3, 0x1, 0x1}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000b80)="4d49120c0bc0ca93253dd696123d5394da56dc2d5d4e24f10889ef94abbf308a9874f36324a55815ea92918c4e9f09ca682a7a74e8de88b7c9226a9cfaa9e95b222dd9eeccee651707601cf977550085a0133b29fb076be7ddcec65224e914f468207f8060221dbc8d2e76c7290bc18faad385434f325ee50930dc701ad04dde4f980742d2e830", &(0x7f0000000480)=@udp=r4}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r2, &(0x7f0000000640)="6a334b4ab83a8a1d3771107d408c819d29cae018fff023c9f51c9d231f57e7a19eb3a7c3a24eeef7d8374d6ff5fe66aa5ca6c8179c3a76850b6d5c408ea0a6b4e2514ac68f429b2a84239cb1e84e0f233a369b0b78b69749435a313272dfef0b75f683f67fee001a2bd2029bcc115467bd514e494c2fb4648c1b3716a51e5bfeefaa046b5d46d1b0090d4f34a8334b58e0d27abbad15ce53b6d992c3cb664c752e67804f1e40d3f7ced26d4ae1dce6599d9a9639ca1d34b043c37cb4ba204fec6fe71f63e43628620ab29bc83bf1555626064680c65c56251be94e5fe2b92e14b8c460b3f229c9b9a9a0c419114ac4bf239592d30a48a4b1799e"}, 0x20) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000f80)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaa93aa86dd698750bb001800fffe80000000000000000000000000000b000000000000000000000000000000008702010500000000ff020000000000000000000000000001a3a487fe162ac83d8ddfbcac6d0047f990f473dd1112c4c6d226489cb5282d9006aab0eb5c9ee2be947dd6e0384ab320fbf4db94a19b41dc8a55e7179995ef1bcf408e316fe5d42cc668a26ad0f3e6b12981a8463857e109"], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000280), &(0x7f0000001040)=@buf="6386397fe9d6d923e2297799262241c93147d14d3eefc131f8223e3a7b4dbae7e7efa3ad699eb54ec09111fe3a283663110fe14114ced0b339aeec6277c75013b2b60e944ffe14189d76daa698d3ee00776873e9b93a0e14b7e9ac5f474a5f000743a4df6cde840e62d65aa264c4a495116777294c25efbe8af9795d96", 0x1}, 0x15) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x2, 0xffffffffffffffff}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={0x1, 0x7}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f00000003c0)={r11, 0x8, 0x2, 0xf}, 0x10) 1m27.588329245s ago: executing program 4 (id=3264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000007b005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811248000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) 1m27.246052261s ago: executing program 4 (id=3265): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000012800000001c0012800b0001006272696400"], 0x3c}}, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f00000005c0)={0x7, 0xffffffffffffffff, 0xfff, 0x6, 0x800000}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023010000340200400600000008000100", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x22940040}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}}, 0x80) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r0}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000004c0)=[{&(0x7f0000000500)='/', 0x1}], 0x1) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f00000007c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(r8, 0xffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0xd, 0x4, &(0x7f0000000540)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x90}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, r7}, 0x94) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000000000001800000008000300", @ANYRES32=r6], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r10 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40088a01, &(0x7f0000000600)=0x100) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000640)={0x1}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000680)={0x10000000}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8004) 1m20.476933733s ago: executing program 2 (id=3301): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000440)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4070, 0xfe6, 0x0, 0x0}, &(0x7f0000001600)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000001680)=0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000340)="bbb4", 0x2}], 0x1) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000040)="8d557fd094c38f748ec33512ef3a") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000001010400000000000000000a0000001800018006000340000200000c000280050001002f0000001800028006000340000000000c0002800500010000000000080100512e393331000000"], 0x5c}, 0x1, 0xfffff000}, 0x811) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000200)={0x4, 0x0, 0xa, 0xb, 0x20000}) setsockopt$sock_int(r6, 0x1, 0x55, &(0x7f0000000240)=0x9, 0x4) 1m18.017170426s ago: executing program 2 (id=3308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x8, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20004018) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="b70200000a000000732ac0ff00000000000000000000180200000a0000020000000000000000bfd100000000000007020000c0ffffffb703000040004c00b70400008100000085ff0000450000009500"/96], &(0x7f00000007c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0xe, 0x0, &(0x7f0000000880)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4004800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r2, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000f40)=[{}, {}], 0x10, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0xea, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f0000001180)={0x2b4, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf2, 0x5, "4082c5cf55f581da36782e5af2f05af5dfcb420c29d3e7c8cc72b59dd001edbed23580d720351f2a2378a7337aece526ba3f444b02a1eae4d5df089c4cdc097f6c76f2e1c2e8c7a31f9606c7527ce19ee7f03535a81bc6dce03acfc915f292283e4f99bbcbb47425321d83fed4a09d5aaf66406ad7ed55a06cfb30e8ff7c67d62b590350d7af621093a0ac8840ca655c68c04f27dffb9dc285f635f7a2a76db0c7ed49abd8aea8e3dc874a7933826db67a549eabacd46d7c48b0376482a56e7b8d7173cb0eb2893dd2d5a39e8a883682ed93db1518341b2e78f6ce890729dc6180fa53b22f07d7c98ec73b397a8b"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x48, 0x4, "a62f98f5bada239b81ec95dc199b1781783fff52acf5cfe45b750512f4c228fd90b27d872eee886c67540df586ba002c3aec0d22559a57c394aa5a9b44aa3004c3b2b5f0"}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'd\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'cake\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'cake\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000b00)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00', 0x0}) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f0000000b80)={&(0x7f0000000bc0)=@xdp={0x2c, 0x0, r11, 0x42}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c80)="2703", 0x2}], 0x1}, 0x4005) sendmsg$key(r4, &(0x7f00000003c0)={0x400000000000000, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000e000000900000000000000000200010000000000000100030000000003000500000000000200000200"/80], 0x50}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x2b, 0x1, 0x70bd29, 0x25dfdbfb, {0xa}, [@typed={0x4, 0x52}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000085}, 0x140) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r13, 0x6, 0x2a, &(0x7f00000008c0)=0xffff, 0x4) 1m17.933100035s ago: executing program 3 (id=3309): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x80000220}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 1m17.586908011s ago: executing program 1 (id=3311): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048001}, 0x1841) 1m17.344683442s ago: executing program 1 (id=3312): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000160300"/28], 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200090a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, &(0x7f0000000880)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4000000000080006111140000000000060000000000000095000000000000000dac"], &(0x7f0000000480)='GPL\x00', 0x4, 0x3f7, &(0x7f0000000600)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000700), 0x44, 0x10, &(0x7f0000000740)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="ec969129e34c8deedc1278a546b8d7def87efa29f98ee9c3364527f32386d96a8c44fe15aaab08d6d78af3d5257f699f4414ed62b5a6d82888c02c45b82b5bc53968401d5782a038a84388de75c39f61a2caa2c573b2b1e6373a916a40c006d9bfc07f6b6f7ecc4aef56ab67f2a7e72356fb608dd1c08840359f748695c58d3b0892a0a6d6c173bf931b1b1a742b96782688be703a299ff77e0d", @ANYRES64=0x0], 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000900), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000940)={0x1f, 0x7, @none, 0x3}, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x52, 0x0, 0x1}, 0x28) connect$packet(r7, 0x0, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x6) r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000180)=@tcp6=r8, 0x6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000004000000b704000000000000850000001c00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.180605136s ago: executing program 5 (id=3313): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtaction={0xb4, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0xa0, 0x1, [@m_sample={0x9c, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x46, 0x6, "16f718015ae371fbc008de86cda5c8ef5b3c4cd8fb32e6492cbc6a6a1a7a9aadda62d3e8023359e4ae0f2fb62a36b5215bc10e1eec93c435755c005a2fad174858b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1m17.158955558s ago: executing program 3 (id=3314): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001580)={{0xffffffffffffffff, &(0x7f00000000c0)='GPL\x00', 0x650002, &(0x7f0000000100)={@align=0x6, {0x9, 0x4, 0x4, 0xd}}, 0x78574d06, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x7}, {[0x9, 0x7fffffff, 0x2a, 0x7ff]}, 0xb, 0x1000, &(0x7f0000000580)=""/4096}) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000001600)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x5}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2801, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000002702000014000000b703000000000000850000005e000000bf09000000000000550901000000000095000000eaffffffbe91000000000000b702000000000000850000006c000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) 1m16.643202471s ago: executing program 3 (id=3315): unshare(0x22020600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000940)={r0, &(0x7f00000000c0)='+\'\xc4\x00', 0x111240, &(0x7f0000000140)={@_ha_fsid={[0x3, 0x6]}, {0x3e28, 0x4, 0x2, 0x6}}, 0x3, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000780)={r4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880), &(0x7f00000008c0), 0x8, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x3, r5}, 0x38) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x9, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0xfffffffffffffffd, 0xe313, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) unshare(0x40b00) 1m16.106411387s ago: executing program 1 (id=3316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/4096, 0x1000}, 0x0) close(r6) pipe(0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, 0x0) r12 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r12, &(0x7f0000000380), 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)={0x3c, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x400}, @NL80211_ATTR_DURATION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1100}]}, {0x20}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x6c}}, 0x0) 1m16.044924819s ago: executing program 5 (id=3317): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a34000000140a0101000000000000c7a30a0000090900020073797a320000000008000340000000030900010073797a3100000000140000001100010000000000000000000000000ab9d30c7fa487f381e1e00d165bd7c13595ccd2af0363a5add0eb1014"], 0x5c}}, 0x8000) sendto$inet6(r1, &(0x7f0000000c00)="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", 0x1000, 0x40002, &(0x7f0000001c00)={0xa, 0x4e24, 0x7, @local, 0x40b5}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x7ff, @local, 0xeb2}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0xd1a}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) 1m16.03733044s ago: executing program 2 (id=3318): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40"], 0xa8}}, 0x8000) socket$inet(0x2, 0x3, 0x2) (async) socket$inet(0x2, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=@base={0x14, 0x4, 0x8, 0xa, 0x100c, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=@base={0x14, 0x4, 0x8, 0xa, 0x100c, 0x1}, 0x48) r1 = socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000580)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000280)=0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)='$', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x1) (async) recvmsg$unix(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c000000040008"], 0x18}}, 0x0) 1m15.780328861s ago: executing program 3 (id=3319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) 1m15.556568412s ago: executing program 5 (id=3320): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="80", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) (async) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="80", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10020) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000780)=""/126, 0x7e}, {&(0x7f00000017c0)=""/4100, 0x1004}, {&(0x7f0000002800)=""/4108, 0x100c}, {&(0x7f0000003840)=""/171, 0xab}, {&(0x7f0000003900)=""/210, 0xd2}], 0x5}, 0x40000102) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000340)=""/67, 0x43}], 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sendto$inet6(r0, &(0x7f0000000000)="f5bd1307ab", 0x5, 0x8000, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000000)="f5bd1307ab", 0x5, 0x8000, 0x0, 0x0) 1m14.983302084s ago: executing program 1 (id=3321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)={0x384, r1, 0xf, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x288, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfa, 0x4, "44803030e5772d95d68fe94015569a12f4ca52c36e4abf792cfd897bcdb14744d0b7c2001d400ed8bad8a2edb873e812a81e0280f91b1f224f2f33663646b723999eaa859b69d760bde48838b6f4b342addfc53d3cb82469f3277b451593b4c27680d1d3d26b9013b0d49482bd6a3f4b5702cd07484c57dcb900f15f9b2da98864a016b99bd08073aa1fb75893c927eefe3223386e771d7e91d9df25199825f48310361660ff52cbe6f404d57c8d7bec57d0f2f936fdec3038c042df256ae14de49de053d53b069f5f1eee11b893bc16aa65dcadcb1c8725144eea702fde886137f5f6e67690335fa9675e64ce8bfa98cae81ab7e461"}, @ETHTOOL_A_BITSET_VALUE={0x8a, 0x4, "c1e3f61273f4afafe6a5478f0f97030de79f912f5e3ee5bfaad20b46e2e25170e4de818afd6a230d03f558643b968e32e21841662703fdc7ab50fbc7436d3041422db2fe3162cd125f3a8b2345f9d8879e6f23c10e70fc01bf26f0e501819f594ee3bc84330a9db20aed1716069e7b6b3f480a0f054c4c3c7662c74853a87f4f486c781397ac"}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfcf}]}, {0x4}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '_@#,%()}]{,\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-($f}\x1c$\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "7f20319a2ca8d063f8cd0da68327cecc00762bf0ee4322f061e017ef81423b7eff09c39320b259d12539a76a703501367d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100000}]}, @ETHTOOL_A_FEATURES_WANTED={0xe8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '^$$-{[[[&@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',)+^--\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '&\\@${(*$/-\'(-&!F!,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*-\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'L[\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')-\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[\xd5\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@{[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdcc}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'M\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x5040}, 0x40800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) 1m14.772343751s ago: executing program 1 (id=3322): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="150b00000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="04524bd0933bd79ff9950000000000000322b835e80d286c039038b58493981c510d658b6d05779aa9a9ff64e09609387d0d69a814f32e2865e2880bc20afcf1f6082c847cca72476e2c0d684a1d6f942ee2d0e8ffaf41d70548c641c4decdd50cef50386048c449eca530dc8b5c9ddfc05376b4b2fff2ed8695200d8dc7e0bb0a0000000000000009cf579ca6279e9b456b92e7dea2a3cb08f3beea72eb7e56e0a9a6a507ac9a734d0c3d40c9227f3ebc0deda38a3ea781707fb60e7f8f172771cfc5c41f8bf00000000025b608214501169695801c7965b2da2463"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2a, 0x25dfdbff, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x42, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c4}, 0x4040) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000003c0)={@private0={0xfc, 0x0, '\x00', 0x1}, r4}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) setsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000180)="9ea2a0b1a39471c2e58c96cae6850478554b8bab", 0x14) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) 1m14.696222786s ago: executing program 2 (id=3323): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={@rand_addr=0x4, 0x0, 0x0, 0x70, 0x0, [{@multicast2}, {@private}, {@dev}, {@remote}, {@local}, {@local}, {@remote}]}}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000100)={r1, &(0x7f0000000000)='iprange\x00', 0x208000, &(0x7f0000000040)={@align, {0x7, 0x8, 0x8, 0x3}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x80000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000a000000080026000816"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000b00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd8, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x0, 0x5}, {0xfc, 0x5}], "efe1ffc49287e9c0"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x5a, 0x3}, {0x3, 0x6}, {0xa, 0x4}, {0x59, 0x2}, {0x20, 0x3}, {0xfe, 0x2}, {0x8, 0x6}, {0xfe, 0x6}, {0x72, 0x3}, {0x6, 0x1}, {0xa, 0x6}, {0x4, 0x6}, {0x2, 0x3}, {0x4, 0x6}, {0x49, 0x3}, {0xe}, {0x2, 0x1}], "b5cc15284836063d"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "734d1f4794394732"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x21}, {0x2, 0x4}, {0x4, 0x5}, {0x1, 0x2}, {0x1, 0x4}], "c9769014312ae783"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x9, 0x3}, {0x1, 0x2}], "d14f5e2da59efab3"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x6, 0x7}, {0x8, 0x2}, {0x3, 0x6}, {0xff, 0x4}, {0xd8, 0x4}, {0x5, 0x4}, {0xad, 0x7}, {0xda, 0x2}, {0x3, 0x4}, {0xd1, 0x7}, {0x7, 0x7}, {0x1, 0x1}, {0xd, 0x2}], "7894b13f50ad2636"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x0, 0x4}, {0x5, 0x2}, {0x0, 0x3}, {0x6, 0x5}, {0x80}, {0xe, 0x7}, {0x6, 0x5}], "8a9111b6c989e98e"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "39a82e39c7bcf748"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000000}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 1m14.662419278s ago: executing program 3 (id=3324): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m14.548415979s ago: executing program 5 (id=3325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000005c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000006c0)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'bond0\x00', 0x0}) bind$packet(r1, &(0x7f0000000740)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000780)=0xe9, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000640), 0x3c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000008, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000680)=0x1000000, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f0000000440), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000580)='syzkaller\x00'}, 0x90) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0x2}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4020000000000007911b0000000000006000000000000009540000c00000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0xfd90, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x1f2, 0x10, &(0x7f0000000400), 0xfffffe51}, 0x48) setsockopt$sock_int(r6, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) 1m14.318516731s ago: executing program 1 (id=3326): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b0002"], 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 1m14.131683115s ago: executing program 5 (id=3327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0x2, 0x6, "bfe431", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x26e1, 0x0) close(0x3) (async) close(0x3) socket$inet_tcp(0x2, 0x1, 0x6) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000140)='espintcp', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58}, 0x10) 1m13.944580559s ago: executing program 3 (id=3328): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000380)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) (async, rerun: 64) writev(r2, 0x0, 0x0) (async, rerun: 64) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r7, 0x0, 0xf3a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0xffffff40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000b00)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0x8, 0x1, @dev}]}, 0x48}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r12, 0x1, 0x14, &(0x7f0000000080)=""/210, &(0x7f0000000180)=0xd2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@loopback, @multicast1, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipv6_newroute={0x54, 0x18, 0x1, 0x70bd31, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0xfc, 0x2, 0xff, 0xa, 0x2400}, [@RTA_OIF={0x8, 0x4, r13}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x89, 0x0, 0x4, 0x0, 0xff, 0x20, 0x84}}, [@loopback]}}}]}, 0x54}}, 0x0) 1m13.688167439s ago: executing program 2 (id=3329): syz_emit_ethernet(0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60120008d1113a00fe8000000000000000000000a2c69210000000bbfe8000000000000000000000000000aa800090780000000090c8a1a190c999b1f0"], 0x0) (async) socketpair(0x15, 0x6, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000080)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r3, &(0x7f00000001c0)={0x0, 0x48, &(0x7f0000000200)={&(0x7f0000000240)="05000000b92ba9e375f3d5a1fc0751577daff448fb417eb76377c3075661e57f6a1ad88443faf85a902e03e4c4e68c258b10a733e428ae2cd65cf9e52e6a23541f4bc6970df209050bf052c6624effea5f1e99ad3d96ed78ff3f524af2c90d5643d563b4f469a937cccad6efa449da086721a42a6616eb56afdf6e1e977964a59a007754d9a22bf26ddb67fb3cd24af531bb3a42a0532ff51473993bd4fb62b7fae1a02f982796fe3df1f080196ff1db13e62950561bf6330ce41dde70f59450a43a0e5678b45689b989d46e9e242cc89f34cd04c4e22e5cc1f1035c5010fd47be95ca79f9a85bf56011d8397d00"/253, 0x1}}, 0x20000855) (async) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000340)) (async) getsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, &(0x7f00000000c0)) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x2, 0x4e, 0x7, 0x6}, 0x10) 1m13.581443086s ago: executing program 5 (id=3330): unshare(0x4000400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89e0, 0x500) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000600)={0xa, 0x0, &(0x7f0000000640)={&(0x7f0000002140)={0x2, 0x3, 0xfe, 0x2, 0x23, 0x0, 0x0, 0x0, [@sadb_key={0x17, 0x8, 0x580, 0x0, "d3045592924a8ddf3bd1551f79d7c79648bb8c56747d6f53927bd16747c9eedb8d611bb86f5341fab934ba299397acc5fcf4bc067fbecf8dee48a40805d09309a624a2d7fe3a7efcff8ee2f3f624e52317ab01b894c707000c97f1d52efceb35fd96b78ef98fc45c6eac7c7d6e50d6957c8985eadd0bbb6e386807e2d4f99e28ad846239f408f270c51af7aa6470131c6d7054bb75a1ddbf737d9385264f5c6bfa0d4bd8d25c1542e29a8d932a30102b"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0xffffff7f}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8, @private2}}, @sadb_x_nat_t_type={0x1}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x118}, 0x1, 0x7}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001740)={'wlan1\x00', &(0x7f0000001780)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) pread64(r2, &(0x7f0000000700)=""/4102, 0x1006, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040041}, 0x4004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_lsm={0x6, 0x3, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000001e00)='GPL\x00'}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001e80)=r9, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ec0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000001f80)=@framed, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31450000000900010073797a300000000008000540000000214c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100007800a00010071756f7461000000140000001000010000000000000000000084000a"], 0xd0}}, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000226ad5f7674693080"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r12, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000001bc0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001940)={0x224, r7, 0x800, 0xf74, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x224}, 0x1, 0x0, 0x0, 0x40000d0}, 0x20000004) 1m13.007202872s ago: executing program 2 (id=3331): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002a00)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2}}, 0xe8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001a40)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x3}, {0xfff2, 0xffff}, {0x3, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f00000004c0)=0x1, 0x4) shutdown(r7, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x14, &(0x7f0000000500)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000540)={0x2, 0x200, @local}, 0x10) sendto$inet(r7, &(0x7f0000000580)='\x00\x00', 0x2, 0x200408d0, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x5, 0xa) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000005c0)=0x0) sendmsg(r6, &(0x7f0000001a00)={&(0x7f0000000600)=@nfc={0x27, r8, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000680)="98a9b2b4a170374cc85e7f22d02f17cb142f65652fbf1773982763390c236142f6f06051378ccf317aaf6c0658e54b20244b2770ea1fcd879a554eae0f4a4d50afa05b1c1191a956fa0c0d652df1a3564cbd83e627e15c801e705f3dc45184676f0857866594503e64a93ff2d854c74ad92dbf9bb10d0aa55dcc", 0x7a}, {&(0x7f0000000700)="80731dfec7b4f593cd278b04d4808f9284ff39e53afaf5e1882110408853acd7af1a97447c9e037bb8894b4b5a10dca93fbb26a2d79161d43ebac98d8e2757f3a786354855", 0x45}, {&(0x7f0000000780)="e66f3c47d865e7d148def9e7e1cafb3902f4fc0e0dab1ebe30151f", 0x1b}, {&(0x7f00000007c0)="0bad9f84fdd2fa51dae919340e723b2434924ef9fc1cbfc12def18050c88a7312324880f8b9d353b19b7c1106b708c6001613e499c234c1ef5aa0344d886193fc21c077459eb01981f6ba1b6bfafa328f52c22ec30375a9dc3ecbf", 0x5b}, {&(0x7f0000000840)="9fd75ee1445fde359ed9709007", 0xd}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="9b90b4e5fc487d3a7782c557b0446d66634228d086d6e279cebb39a56e85a3932898cca500db0f61a92dac79184329e02a980992f75c35cc4f8d557df2ffd995658725fd1ff87c849d9d0c112040cf4fe8efd1e6c3f9793c98330cba2223751fb53cd072e2a89508fee34792ffbbb87c65633f2e8fa6d46a60d20a0b9ad1fc7f72fedb414c4e7b7d9d0166dac16801012d54b04ef4ed748854171606dc919d727cad6ba1ddccc14e88b34f336835ee7f50e97e128ac1f1b942771aaeb952cafbce30be4b6d5eafc699a3fddaf1e42519588cb6b8fa822df09012e06cce9afe27", 0xe0}], 0x7}, 0x800) sendfile(r2, r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000000140)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000c00800"/16, @ANYRES64=0x0, @ANYRESDEC=r10, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000400d3238e"], 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x50) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x404c050) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa, 0x1234, 0x0, @remote}, 0x1c) 0s ago: executing program 33 (id=3330): unshare(0x4000400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r1, 0x89e0, 0x500) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000600)={0xa, 0x0, &(0x7f0000000640)={&(0x7f0000002140)={0x2, 0x3, 0xfe, 0x2, 0x23, 0x0, 0x0, 0x0, [@sadb_key={0x17, 0x8, 0x580, 0x0, "d3045592924a8ddf3bd1551f79d7c79648bb8c56747d6f53927bd16747c9eedb8d611bb86f5341fab934ba299397acc5fcf4bc067fbecf8dee48a40805d09309a624a2d7fe3a7efcff8ee2f3f624e52317ab01b894c707000c97f1d52efceb35fd96b78ef98fc45c6eac7c7d6e50d6957c8985eadd0bbb6e386807e2d4f99e28ad846239f408f270c51af7aa6470131c6d7054bb75a1ddbf737d9385264f5c6bfa0d4bd8d25c1542e29a8d932a30102b"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0xffffff7f}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8, @private2}}, @sadb_x_nat_t_type={0x1}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x118}, 0x1, 0x7}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001740)={'wlan1\x00', &(0x7f0000001780)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) pread64(r2, &(0x7f0000000700)=""/4102, 0x1006, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040041}, 0x4004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_lsm={0x6, 0x3, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000001e00)='GPL\x00'}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001e40)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001e80)=r9, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ec0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000001f80)=@framed, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31450000000900010073797a300000000008000540000000214c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100007800a00010071756f7461000000140000001000010000000000000000000084000a"], 0xd0}}, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000226ad5f7674693080"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r12, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0b1600000000000000f6490000000800b8"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000001bc0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b80)={&(0x7f0000001940)={0x224, r7, 0x800, 0xf74, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x224}, 0x1, 0x0, 0x0, 0x40000d0}, 0x20000004) kernel console output (not intermixed with test programs): t [0, 0] type 1 family 0 port 8472 - 0 [ 305.784306][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.784353][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.061794][T13712] netlink: 'syz.0.2050': attribute type 2 has an invalid length. [ 306.284879][ T8682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.285827][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.286153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.477206][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'. [ 306.515588][T13740] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 306.527974][T13706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.545792][T13737] syzkaller0: entered promiscuous mode [ 306.545856][T13737] syzkaller0: entered allmulticast mode [ 307.096396][T13752] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 307.173476][T13759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2060'. [ 307.179588][T13762] netlink: 'syz.4.2061': attribute type 2 has an invalid length. [ 307.187516][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.187819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.456185][T13759] sctp: [Deprecated]: syz.2.2060 (pid 13759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.456185][T13759] Use struct sctp_sack_info instead [ 307.586342][T13778] trusted_key: syz.3.2065 sent an empty control message without MSG_MORE. [ 307.710605][T13774] xt_nat: multiple ranges no longer supported [ 308.905201][T13810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2078'. [ 309.508896][T13838] ip6gre1: entered allmulticast mode [ 310.247879][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2088'. [ 310.405933][T13865] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2091'. [ 310.691980][T13870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2090'. [ 311.383347][T13888] netlink: 'syz.2.2095': attribute type 1 has an invalid length. [ 311.383373][T13888] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2095'. [ 311.418965][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.420346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.422595][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.423004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.423635][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.429120][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.431236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.949337][T13906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2100'. [ 312.411937][T13913] bond7: entered promiscuous mode [ 312.416888][T13913] bond7: entered allmulticast mode [ 312.417383][T13913] 8021q: adding VLAN 0 to HW filter on device bond7 [ 312.475461][T13914] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2104'. [ 312.543031][T13924] netlink: 'syz.4.2105': attribute type 10 has an invalid length. [ 312.546161][T13924] dummy0: left promiscuous mode [ 312.663783][T13924] team0: Port device dummy0 added [ 312.975388][T13933] netlink: 'syz.2.2110': attribute type 4 has an invalid length. [ 312.975416][T13933] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2110'. [ 312.979653][T13933] .`: renamed from bond0 (while UP) [ 313.497089][T13956] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2117'. [ 313.497113][T13956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 313.875428][T13975] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 314.364261][T13985] netlink: Conntrack attr has 8 unknown bytes [ 314.366215][T13985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.457959][T13993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.457990][T13993] IPv6: NLM_F_CREATE should be set when creating new route [ 314.458867][T13989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.462823][T13993] netlink: 'syz.2.2124': attribute type 4 has an invalid length. [ 314.462844][T13993] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2124'. [ 314.597755][T13993] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 314.636351][T13993] bond0 (unregistering): Released all slaves [ 315.117374][T14007] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 315.273563][T14007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.360080][T14018] x_tables: duplicate underflow at hook 3 [ 315.420789][T14018] __nla_validate_parse: 2 callbacks suppressed [ 315.420811][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2132'. [ 315.622507][T14017] bond0: (slave geneve2): making interface the new active one [ 315.768979][T14017] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 315.973824][T14045] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 316.301267][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2140'. [ 316.424935][T14060] net_ratelimit: 1 callbacks suppressed [ 316.424957][T14060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.425359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.576563][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 316.576607][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2146'. [ 316.681886][T14073] netlink: 'syz.2.2148': attribute type 1 has an invalid length. [ 316.731059][T14073] bond8: (slave geneve3): making interface the new active one [ 316.731918][T14073] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 316.735355][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2148'. [ 316.737857][T14073] 8021q: adding VLAN 0 to HW filter on device bond8 [ 316.786981][ T8692] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 316.787079][ T8692] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 316.805152][ T66] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 316.822248][ T99] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 316.957158][ T279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.957212][ T279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.985315][T14079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.172119][ T8682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.174345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.177017][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.193376][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.214851][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.215350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.259521][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.259883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.297466][T14118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.895563][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 319.156640][T14146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 319.734667][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2172'. [ 319.734712][T14158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.735205][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2172'. [ 321.249854][T14200] bond9: entered promiscuous mode [ 321.379246][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'. [ 321.427799][T14209] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2188'. [ 321.916406][T14220] syzkaller1: entered promiscuous mode [ 321.916433][T14220] syzkaller1: entered allmulticast mode [ 321.919300][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2193'. [ 322.285643][ T279] net_ratelimit: 4 callbacks suppressed [ 322.285665][ T279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.286090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.286684][ T279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.290564][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.291324][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.558684][T14243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2202'. [ 322.923636][ T99] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.923950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.326325][T14253] netlink: 'syz.3.2204': attribute type 2 has an invalid length. [ 323.702519][T14273] openvswitch: netlink: IPv4 tunnel dst address is zero [ 324.335555][T14293] geneve4: entered promiscuous mode [ 324.472499][T14301] netlink: 'syz.4.2215': attribute type 21 has an invalid length. [ 326.241633][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2229'. [ 326.290676][T14343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.291923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.315699][T14344] 8021q: adding VLAN 0 to HW filter on device bond8 [ 326.549256][ T8681] nci: nci_rsp_packet: unknown rsp opcode 0xb [ 327.061318][T14387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2237'. [ 327.061405][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2237'. [ 327.323984][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 327.437218][T14395] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2240'. [ 327.648939][T14400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2242'. [ 327.763010][T14402] sctp: [Deprecated]: syz.2.2243 (pid 14402) Use of int in max_burst socket option. [ 327.763010][T14402] Use struct sctp_assoc_value instead [ 327.822533][T14403] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 328.042504][ T8681] net_ratelimit: 2 callbacks suppressed [ 328.042525][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.043105][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.043439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.045164][ T99] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.045535][ T6275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.045852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.045882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.216190][T14343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.727590][T14423] veth1_to_bond: entered allmulticast mode [ 330.787119][T14436] veth1_to_bond: left allmulticast mode [ 331.030230][T14454] netlink: 'syz.0.2251': attribute type 23 has an invalid length. [ 331.030498][T14454] netlink: 'syz.0.2251': attribute type 23 has an invalid length. [ 331.030720][T14454] netlink: 'syz.0.2251': attribute type 23 has an invalid length. [ 331.086253][T14454] netlink: 'syz.0.2251': attribute type 23 has an invalid length. [ 331.086970][T14454] netlink: 'syz.0.2251': attribute type 23 has an invalid length. [ 331.087569][T14454] netlink: 'syz.0.2251': attribute type 23 has an invalid length. [ 331.088283][T14454] netlink: 'syz.0.2251': attribute type 23 has an invalid length. [ 331.132717][T14454] netlink: 'syz.0.2251': attribute type 23 has an invalid length. [ 331.133414][T14454] netlink: 'syz.0.2251': attribute type 23 has an invalid length. [ 331.134484][T14454] netlink: 'syz.0.2251': attribute type 23 has an invalid length. [ 331.941082][T14476] tipc: Started in network mode [ 331.941117][T14476] tipc: Node identity 120dc075b2ff, cluster identity 4711 [ 331.941271][T14476] tipc: Enabled bearer , priority 11 [ 333.023736][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 333.023782][T14502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.072317][ T6275] tipc: Node number set to 2700263541 [ 333.097325][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.129597][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.131305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.165582][ T279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.167225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.240975][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.242917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.472626][T14517] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 333.472657][T14517] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 333.549438][T14516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2267'. [ 334.394649][T14545] IPVS: set_ctl: invalid protocol: 11609 172.30.1.4:20003 [ 334.594855][T14554] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2277'. [ 334.623343][T14553] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2277'. [ 334.641373][T14554] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2277'. [ 334.658444][T14553] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2277'. [ 335.515140][T14588] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2285'. [ 336.181082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.291083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.641568][T14605] syzkaller0: entered promiscuous mode [ 336.641595][T14605] syzkaller0: entered allmulticast mode [ 336.690793][T14605] tipc: Started in network mode [ 336.692828][T14605] tipc: Node identity e250ee15cb8a, cluster identity 4711 [ 336.695612][T14605] tipc: Enabled bearer , priority 0 [ 336.748320][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880574c8400: rx timeout, send abort [ 336.869322][T14603] tipc: Resetting bearer [ 336.879812][T14614] validate_nla: 24 callbacks suppressed [ 336.879868][T14614] netlink: 'syz.3.2294': attribute type 1 has an invalid length. [ 336.999113][T14603] tipc: Disabling bearer [ 337.191967][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 337.192066][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2295'. [ 337.248555][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880574ca000: rx timeout, send abort [ 337.249844][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880574c8400: abort rx timeout. Force session deactivation [ 337.366342][T14614] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.410574][T14613] bond6: (slave ip6erspan0): making interface the new active one [ 337.428659][T14613] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 337.460409][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2298'. [ 337.720344][T14621] syzkaller0: entered promiscuous mode [ 337.720403][T14621] syzkaller0: entered allmulticast mode [ 337.748622][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880574ca000: abort rx timeout. Force session deactivation [ 338.933314][ T99] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.933605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.934266][ T99] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.934638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.936005][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.937984][ T6272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.938309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.392965][T14664] __nla_validate_parse: 1 callbacks suppressed [ 341.392987][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 341.469046][T14673] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 341.546418][T14672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2305'. [ 341.734450][T14664] IPVS: persistence engine module ip_vs_pe_À not found [ 342.035452][T14689] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 342.040239][T14689] SET target dimension over the limit! [ 342.158233][T14692] bond0: option mode: unable to set because the bond device is up [ 342.160802][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 342.216626][T14693] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2315'. [ 342.521461][T14706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.416874][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2321'. [ 343.962769][ T66] net_ratelimit: 129 callbacks suppressed [ 343.962794][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.963757][ T279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.964311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.988292][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.992813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.172659][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2324'. [ 344.684262][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.684709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.917359][T14779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.755535][T14804] syzkaller0: entered promiscuous mode [ 345.755559][T14804] syzkaller0: entered allmulticast mode [ 345.904703][T14813] x_tables: duplicate underflow at hook 1 [ 346.712536][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 346.712598][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2346'. [ 346.988520][T14843] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2347'. [ 347.101041][T14848] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2348'. [ 347.578846][T14867] netlink: 'syz.0.2351': attribute type 1 has an invalid length. [ 347.714557][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2351'. [ 347.939711][T14867] 8021q: adding VLAN 0 to HW filter on device bond10 [ 348.252527][T14877] v: renamed from veth0_vlan [ 349.082741][ T8686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.084630][ T6271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.084960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.481654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.484666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.485230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.807230][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.807591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.840080][T14927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'. [ 349.840124][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 349.914597][ T6216] IPVS: starting estimator thread 0... [ 350.002877][T14935] IPVS: using max 24 ests per chain, 57600 per kthread [ 350.444447][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.444920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.555592][T14943] veth1_macvtap: left promiscuous mode [ 350.600449][T14943] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 351.028374][T14954] veth0: left allmulticast mode [ 351.028445][T14954] veth0: left promiscuous mode [ 351.028995][T14954] bridge0: port 3(veth0) entered disabled state [ 351.197857][T14954] bridge_slave_0: left allmulticast mode [ 351.197921][T14954] bridge_slave_0: left promiscuous mode [ 351.198476][T14954] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.283964][T14962] netlink: 'syz.1.2369': attribute type 1 has an invalid length. [ 351.283990][T14962] netlink: 'syz.1.2369': attribute type 3 has an invalid length. [ 351.284005][T14962] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2369'. [ 351.447958][T14954] bridge_slave_1: left allmulticast mode [ 351.448023][T14954] bridge_slave_1: left promiscuous mode [ 351.448572][T14954] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.666572][T14954] team0: Port device team_slave_0 removed [ 351.692888][T14954] team0: Port device team_slave_1 removed [ 351.698434][T14954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.698462][T14954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.838693][T14954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.838758][T14954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.949148][T14958] tipc: Resetting bearer [ 352.173712][T14958] team0: Port device xfrm0 added [ 352.195287][T14962] tipc: Enabled bearer , priority 0 [ 352.488266][T14982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2375'. [ 352.718416][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2379'. [ 352.884025][ T8693] nci: nci_ntf_packet: unknown ntf opcode 0x133 [ 352.948908][T15003] syzkaller1: entered promiscuous mode [ 352.948968][T15003] syzkaller1: entered allmulticast mode [ 353.156910][T15009] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2383'. [ 353.259827][T15015] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 4, id = 0 [ 353.339373][ T5278] v: left promiscuous mode [ 353.425045][ T6271] v: entered promiscuous mode [ 353.459178][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'. [ 353.482875][T15016] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2382'. [ 353.705961][T15024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2386'. [ 353.706852][T15024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2386'. [ 353.789412][T15025] bridge6: entered promiscuous mode [ 353.798561][T15025] netlink: 'syz.0.2386': attribute type 4 has an invalid length. [ 353.799875][T15025] netlink: 'syz.0.2386': attribute type 4 has an invalid length. [ 353.824301][T15025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2386'. [ 354.922725][ T8693] net_ratelimit: 1 callbacks suppressed [ 354.922749][ T8693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.926080][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.926471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.564121][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.565794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.643471][T14987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.294851][T15043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2391'. [ 356.565577][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2396'. [ 356.795136][T15063] xt_hashlimit: size too large, truncated to 1048576 [ 356.824289][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.894036][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.909354][T15064] 0ªX¹¦Dö»: renamed from 30ªî{X¹¦ (while UP) [ 357.036352][T15074] netlink: 'syz.4.2398': attribute type 23 has an invalid length. [ 357.060015][T15072] netlink: 'syz.2.2397': attribute type 1 has an invalid length. [ 357.168511][T15072] bond10: entered promiscuous mode [ 357.172638][T15072] 8021q: adding VLAN 0 to HW filter on device bond10 [ 357.204409][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.372811][T15076] 8021q: adding VLAN 0 to HW filter on device bond10 [ 357.375752][T15076] bond10: (slave xfrm2): The slave device specified does not support setting the MAC address [ 357.375778][T15076] bond10: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 357.433828][T15076] bond10: (slave xfrm2): making interface the new active one [ 357.433857][T15076] xfrm2: entered promiscuous mode [ 357.463670][T15076] xfrm2: left promiscuous mode [ 357.754040][T15076] bond10: (slave xfrm2): The slave device specified does not support setting the MAC address [ 357.778167][T15076] bond10: (slave xfrm2): making interface the new active one [ 357.850088][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.037011][T15099] __nla_validate_parse: 5 callbacks suppressed [ 358.037043][T15099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2404'. [ 358.328061][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2405'. [ 359.367963][T15129] macvtap6: entered promiscuous mode [ 359.368020][T15129] hsr0: entered promiscuous mode [ 359.369440][T15129] macvtap6: entered allmulticast mode [ 359.369461][T15129] hsr0: entered allmulticast mode [ 359.369476][T15129] hsr_slave_0: entered allmulticast mode [ 359.369493][T15129] hsr_slave_1: entered allmulticast mode [ 359.539125][T15133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.556798][T15133] bond0: (slave gtp2): The slave device specified does not support setting the MAC address [ 359.557876][T15133] bond0: (slave gtp2): Error -95 calling set_mac_address [ 359.697520][T15153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 360.300353][T15165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2420'. [ 360.419095][T15167] tipc: Bearer : already 2 bearers with priority 10 [ 360.419121][T15167] tipc: Bearer : trying with adjusted priority [ 360.419169][T15167] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2419'. [ 360.419184][T15167] tipc: Invalid UDP bearer configuration [ 360.419228][T15167] tipc: Enabling of bearer rejected, failed to enable media [ 360.684241][ T8694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.685611][ T6271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.686013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.819652][T15181] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 360.819696][T15181] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 360.819726][T15181] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 360.948006][T15184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2423'. [ 361.021793][T15187] ip_tables: iptables: counters copy to user failed while replacing table [ 361.136396][T15189] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2428'. [ 361.325390][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.325775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.353999][T15199] xt_l2tp: wrong L2TP version: 255 [ 361.452688][T15204] openvswitch: netlink: IP tunnel dst address not specified [ 362.022242][T15220] ip_tables: iptables: counters copy to user failed while replacing table [ 362.932303][T15257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2441'. [ 363.577563][T15281] x_tables: unsorted underflow at hook 1 [ 363.578217][T15269] bond7 (unregistering): Released all slaves [ 363.606006][T15273] Bluetooth: ISO socket layer initialized [ 364.220158][T15298] xt_REDIRECT: bad rangesize 26624. [ 364.332121][T15300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 364.335359][T15300] netlink: 'syz.2.2451': attribute type 1 has an invalid length. [ 364.396003][T15300] bond11: (slave gretap0): making interface the new active one [ 364.396975][T15300] bond11: (slave gretap0): Enslaving as an active interface with an up link [ 364.745165][T15310] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2455'. [ 365.525012][T15331] xt_hashlimit: size too large, truncated to 1048576 [ 365.626607][T15337] netlink: 'syz.2.2465': attribute type 1 has an invalid length. [ 366.199141][T15349] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 366.297935][T15354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2469'. [ 366.392446][T15354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2469'. [ 366.444357][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.472272][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.474534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.549100][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2469'. [ 366.781830][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2471'. [ 366.783330][T15364] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2471'. [ 367.089850][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.090225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.273119][T15384] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 367.273145][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'. [ 367.304856][T15383] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 367.304882][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'. [ 367.370237][T15383] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 367.370300][T15383] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2475'. [ 367.428763][T15383] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.2475'. [ 367.589630][T15401] sctp: [Deprecated]: syz.4.2476 (pid 15401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.589630][T15401] Use struct sctp_sack_info instead [ 367.641404][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 367.642998][T15402] netlink: 'syz.2.2478': attribute type 1 has an invalid length. [ 368.724877][T15431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.725389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.108309][T15444] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 369.162964][T15446] netlink: 'syz.2.2493': attribute type 1 has an invalid length. [ 369.292336][T15446] 8021q: adding VLAN 0 to HW filter on device bond12 [ 369.320250][T15448] bond1: (slave veth0_to_bond): Releasing active interface [ 369.366080][T15448] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 369.654283][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.654740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.209231][ T6218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.225186][ T6272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.225538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.767660][T15471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.849083][ T6216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.851433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.145374][T15546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.276924][T15556] __nla_validate_parse: 3 callbacks suppressed [ 373.276976][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'. [ 374.533345][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 374.609560][T15602] netlink: 'syz.3.2523': attribute type 1 has an invalid length. [ 374.855761][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2523'. [ 374.855790][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 375.001226][T15610] bridge5: entered allmulticast mode [ 375.405054][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.405920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.225182][T15642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.384549][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 376.491598][T15646] syzkaller0: create flow: hash 3925146290 index 0 [ 377.015757][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 377.095086][T15668] netlink: 'syz.0.2539': attribute type 16 has an invalid length. [ 377.298812][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 377.316735][T15687] netlink: 'syz.0.2539': attribute type 16 has an invalid length. [ 377.711659][T15696] x_tables: duplicate underflow at hook 4 [ 377.966119][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.966219][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.968777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.010915][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.011753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.614351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.619285][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.887011][ C0] syzkaller0 (unregistering): delete flow: hash 3925146290 index 0 [ 380.449281][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.449741][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.724511][T15709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2549'. [ 380.724608][T15709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2549'. [ 380.782432][T15712] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2551'. [ 380.789548][T15712] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2551'. [ 380.800244][T15714] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 380.884812][T15723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.932664][T15723] netlink: 'syz.1.2552': attribute type 1 has an invalid length. [ 380.966947][T15726] netlink: 'syz.3.2550': attribute type 9 has an invalid length. [ 381.777776][T15750] syzkaller0: entered promiscuous mode [ 381.777801][T15750] syzkaller0: entered allmulticast mode [ 381.801323][T15750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2558'. [ 381.877822][T15752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2560'. [ 381.877924][T15752] netlink: 'syz.3.2560': attribute type 7 has an invalid length. [ 381.877960][T15752] netlink: 'syz.3.2560': attribute type 8 has an invalid length. [ 381.878012][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'. [ 382.122535][T15752] erspan0: entered promiscuous mode [ 382.156227][T15752] gretap0: entered promiscuous mode [ 382.212493][T15752] erspan0: left promiscuous mode [ 382.227794][T15752] gretap0: left promiscuous mode [ 382.337798][T15767] xt_l2tp: unknown flags: 43 [ 382.694627][T15776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 382.694660][T15776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 382.694732][T15776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 382.873617][T15757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.082491][ T8682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.082841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.598337][T15809] syzkaller0: entered promiscuous mode [ 383.598362][T15809] syzkaller0: entered allmulticast mode [ 383.639116][T15809] tipc: Started in network mode [ 383.639191][T15809] tipc: Node identity 56bac3830c89, cluster identity 4711 [ 383.664292][T15811] can: request_module (can-proto-4) failed. [ 383.696857][T15809] tipc: Enabled bearer , priority 0 [ 383.739791][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.743521][ T6272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.743874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.048381][T15809] syzkaller1: entered promiscuous mode [ 384.048410][T15809] syzkaller1: entered allmulticast mode [ 384.178022][T15821] netlink: 'syz.4.2573': attribute type 17 has an invalid length. [ 384.210103][T15821] 0ªX¹¦Dö»: entered promiscuous mode [ 384.238205][T15821] 0ªX¹¦Dö»: left promiscuous mode [ 384.595766][T15806] tipc: Resetting bearer [ 384.657412][T15806] tipc: Disabling bearer [ 385.105207][T15856] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 385.653049][T15867] Bluetooth: hci0: unsupported parameter 5134 [ 385.653074][T15867] Bluetooth: hci0: unsupported parameter 8192 [ 385.653089][T15867] Bluetooth: hci0: unsupported parameter 5134 [ 385.653103][T15867] Bluetooth: hci0: unsupported parameter 8192 [ 385.754527][T15875] __nla_validate_parse: 7 callbacks suppressed [ 385.754550][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'. [ 386.286999][ T8682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.287491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.504652][T15895] netlink: 'syz.4.2595': attribute type 10 has an invalid length. [ 386.575319][T15895] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 386.664940][T15895] team0: Port device wlan0 added [ 386.749352][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2597'. [ 387.011651][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2599'. [ 387.141306][ T8682] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.166804][ T8694] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.180264][ T8694] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.180312][ T8694] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.227364][T15907] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 387.279116][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2600'. [ 387.329264][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2599'. [ 387.345521][T15921] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 388.007257][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2606'. [ 388.007298][T15953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2606'. [ 388.468137][T15964] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2610'. [ 388.848676][ T254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.849055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.351167][T15994] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 389.432853][T15993] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2618'. [ 389.666631][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.682775][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.683118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.807356][T15998] bond0: option mode: unable to set because the bond device is up [ 389.808009][T15999] bond0: option mode: unable to set because the bond device is up [ 390.251184][T16014] netlink: 'syz.3.2622': attribute type 12 has an invalid length. [ 390.369572][T16014] bond8: option primary_reselect: invalid value (255) [ 390.400455][T16014] bond8 (unregistering): Released all slaves [ 390.474400][T16021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2624'. [ 390.566729][T16013] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 390.567615][T16019] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 390.680562][T16031] sctp: [Deprecated]: syz.0.2626 (pid 16031) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.680562][T16031] Use struct sctp_sack_info instead [ 390.872780][T16038] __nla_validate_parse: 6 callbacks suppressed [ 390.872806][T16038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2625'. [ 391.020365][T16035] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2627'. [ 391.020393][T16035] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2627'. [ 391.020411][T16035] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2627'. [ 391.689061][T16057] netlink: 'syz.2.2631': attribute type 1 has an invalid length. [ 391.788989][T16060] netlink: 872 bytes leftover after parsing attributes in process `syz.0.2632'. [ 392.044107][ T254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.045022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.448234][T16086] ip6gretap2: entered allmulticast mode [ 392.590154][T16072] syzkaller1: entered promiscuous mode [ 392.590183][T16072] syzkaller1: entered allmulticast mode [ 393.332036][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2647'. [ 393.358830][ T5623] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 393.528862][T16124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2650'. [ 393.549737][T16127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2648'. [ 393.979811][ T8682] net_ratelimit: 2 callbacks suppressed [ 393.979860][ T8682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.980529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.158706][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'. [ 394.359564][T16145] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2658'. [ 394.525765][T16149] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 394.778031][T16158] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 394.778190][T16158] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 394.778318][T16158] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 394.778444][T16158] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 394.778570][T16158] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 394.778699][T16158] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 394.778834][T16158] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 394.778957][T16158] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 394.779099][T16158] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 394.852061][T16158] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 395.245031][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.245959][ T6271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.246297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.319431][T16170] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 395.356927][T16180] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 395.401753][T16170] bond8 (unregistering): Released all slaves [ 395.725594][T16188] Bluetooth: hci0: unsupported parameter 5161 [ 395.725619][T16188] Bluetooth: hci0: unsupported parameter 8192 [ 395.725634][T16188] Bluetooth: hci0: unsupported parameter 5161 [ 395.725648][T16188] Bluetooth: hci0: unsupported parameter 8192 [ 396.447532][T16214] __nla_validate_parse: 2 callbacks suppressed [ 396.447556][T16214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2679'. [ 396.473464][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 396.566876][T16214] smc: removing ib device syz2 [ 396.596341][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2679'. [ 396.654792][T16213] bond13: entered allmulticast mode [ 396.696405][T16221] netlink: 'syz.1.2680': attribute type 13 has an invalid length. [ 396.968793][T16228] netlink: 'syz.3.2681': attribute type 1 has an invalid length. [ 397.096007][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 397.096099][T16231] netlink: 'syz.3.2681': attribute type 30 has an invalid length. [ 397.140176][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 397.140243][T16227] netlink: 'syz.3.2681': attribute type 30 has an invalid length. [ 397.165790][ T8686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.166242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.236133][T16214] smbdirect: ib_dev[syz2] removed [ 397.881278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.432637][T16260] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 398.507256][T16253] lo speed is unknown, defaulting to 1000 [ 399.163322][T16277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2697'. [ 399.725742][ T50] net_ratelimit: 1 callbacks suppressed [ 399.725799][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.726309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.500293][T16297] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2703'. [ 401.004516][ T8686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.025754][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.026475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.848168][T16331] tipc: Can't bind to reserved service type 1 [ 402.171726][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2714'. [ 402.208223][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.209665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.324066][T16341] xt_REDIRECT: bad MAP_IPS. [ 402.391662][T16348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2716'. [ 402.391695][T16348] block nbd0: Unsupported socket: should be TCP or UNIX. [ 403.075552][T16367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2724'. [ 403.271685][T16373] netlink: 'syz.0.2726': attribute type 2 has an invalid length. [ 403.447617][T16377] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 403.450587][T16377] netlink: 'syz.2.2729': attribute type 21 has an invalid length. [ 403.450648][T16377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2729'. [ 403.600416][T16381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2728'. [ 404.102693][T16397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2736'. [ 404.192837][T16400] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2737'. [ 404.218484][T16400] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2737'. [ 404.285679][T16403] lo: entered allmulticast mode [ 404.342986][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2741'. [ 404.396019][ T6271] lo speed is unknown, defaulting to 1000 [ 404.396049][ T6271] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 404.426798][T16409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2742'. [ 404.492313][T16411] netlink: 'syz.0.2743': attribute type 1 has an invalid length. [ 404.492337][T16411] netlink: 'syz.0.2743': attribute type 2 has an invalid length. [ 404.644932][T16414] syzkaller1: entered promiscuous mode [ 404.644959][T16414] syzkaller1: entered allmulticast mode [ 404.769518][ T8692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.770208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.001098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.001456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.519425][T16443] block nbd0: not configured, cannot reconfigure [ 406.127532][ T8694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.163374][ T6271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.163751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.738505][T16496] erspan0: entered allmulticast mode [ 408.027129][T16527] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.047498][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.047917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.107547][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.147384][T16527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.165471][T16527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.169110][T16527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 408.191933][T16527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 408.242324][T16527] 8021q: adding VLAN 0 to HW filter on device bond6 [ 408.246567][T16527] 8021q: adding VLAN 0 to HW filter on device bond8 [ 408.268196][T16527] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 408.564159][ T8694] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 408.564664][ T8694] bond7: (slave veth5): making interface the new active one [ 408.669545][ T8694] bond7: active interface up! [ 408.788195][T16542] netlink: 'syz.2.2775': attribute type 83 has an invalid length. [ 409.300264][T16552] netlink: 'syz.3.2779': attribute type 1 has an invalid length. [ 409.418765][T16556] netlink: 'syz.3.2779': attribute type 10 has an invalid length. [ 409.418791][T16556] __nla_validate_parse: 11 callbacks suppressed [ 409.418805][T16556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2779'. [ 409.545226][T16560] netlink: 'syz.4.2781': attribute type 21 has an invalid length. [ 409.630699][T16551] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 409.873361][T16552] 8021q: adding VLAN 0 to HW filter on device bond8 [ 410.042276][T16550] bond8: (slave dummy0): making interface the new active one [ 410.065970][T16550] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 410.084814][T16556] dummy0: entered promiscuous mode [ 410.086867][T16556] bond8: (slave dummy0): Releasing active interface [ 410.129603][T16560] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2781'. [ 410.715179][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.715215][T16585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.719934][T16585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.719960][T16585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.766946][T16585] batman_adv: batadv0: Interface deactivated: syz_tun [ 410.766973][T16585] batman_adv: batadv0: Removing interface: syz_tun [ 410.829013][T16585] batadv0 (unregistering): left promiscuous mode [ 410.911932][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2789'. [ 410.929271][T16590] netlink: 'syz.3.2790': attribute type 1 has an invalid length. [ 411.161149][ C1] net_ratelimit: 8 callbacks suppressed [ 411.161172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.161562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.309603][T16603] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2795'. [ 411.590429][T16611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.591034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.883357][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.884708][ T6271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.885092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.265253][T16617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2802'. [ 412.750292][T16641] Bluetooth: hci0: unsupported parameter 5135 [ 412.750317][T16641] Bluetooth: hci0: unsupported parameter 8192 [ 412.750332][T16641] Bluetooth: hci0: unsupported parameter 5135 [ 412.750346][T16641] Bluetooth: hci0: unsupported parameter 8192 [ 412.822549][T16639] ovs-s: entered promiscuous mode [ 412.905207][T16641] openvswitch: ovs-s: Dropping previously announced user features [ 413.162197][ T8682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.162647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.165883][ T254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.752712][T16665] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 413.752801][T16665] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 413.752872][T16665] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 413.777152][T16665] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 413.932585][T16665] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 414.091303][T16677] x_tables: duplicate underflow at hook 1 [ 414.277729][ T8680] smbdirect: ib_dev[syz2] removed [ 414.370572][T16683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2818'. [ 416.171605][T16673] net_ratelimit: 876 callbacks suppressed [ 416.171635][T16673] bpf: recursion limit reached on datapath, buggy bpf program? [ 416.173112][T16673] bpf: recursion limit reached on datapath, buggy bpf program? [ 416.174633][T16673] bpf: recursion limit reached on datapath, buggy bpf program? [ 416.176094][T16673] bpf: recursion limit reached on datapath, buggy bpf program? [ 416.177532][T16673] bpf: recursion limit reached on datapath, buggy bpf program? [ 416.179182][T16673] bpf: recursion limit reached on datapath, buggy bpf program? [ 416.180755][T16673] bpf: recursion limit reached on datapath, buggy bpf program? [ 416.194946][T16673] bpf: recursion limit reached on datapath, buggy bpf program? [ 416.200007][T16673] bpf: recursion limit reached on datapath, buggy bpf program? [ 416.219033][T16673] bpf: recursion limit reached on datapath, buggy bpf program? [ 416.747263][T16673] syz.2.2817 (16673) used greatest stack depth: 12808 bytes left [ 416.838895][T16689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2820'. [ 417.198979][T16696] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 417.596282][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.600639][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 417.620036][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 417.633768][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 417.639364][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.055639][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2828'. [ 418.391777][T16730] netlink: 'syz.1.2831': attribute type 12 has an invalid length. [ 418.443451][T16731] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2830'. [ 418.443515][T16731] tc_dump_action: action bad kind [ 418.524627][T16729] netlink: 'syz.4.2830': attribute type 2 has an invalid length. [ 418.713831][T16707] rxe_eth0 speed is unknown, defaulting to 1000 [ 418.718887][T16707] rxe_eth0 speed is unknown, defaulting to 1000 [ 418.719854][T16707] rxe_eth0 speed is unknown, defaulting to 1000 [ 419.373261][T16707] infiniband rxe0: set active [ 419.373321][ T6275] rxe_eth0 speed is unknown, defaulting to 1000 [ 419.396484][T16707] infiniband rxe0: added rxe_eth0 [ 419.430108][T16707] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 419.430168][T16707] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 419.430212][T16707] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 419.547280][T16707] RDS/IB: rxe0: added [ 419.547474][T16707] smc: adding ib device rxe0 with port count 1 [ 419.547537][T16707] smc: ib device rxe0 port 1 has no pnetid [ 419.550103][ T5857] rxe_eth0 speed is unknown, defaulting to 1000 [ 419.554053][T16707] rxe_eth0 speed is unknown, defaulting to 1000 [ 419.728062][ T52] Bluetooth: hci5: command tx timeout [ 420.045826][T16766] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2837'. [ 420.190362][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2838'. [ 420.607045][T16707] rxe_eth0 speed is unknown, defaulting to 1000 [ 420.776942][T16788] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20001 [ 421.008548][T16793] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 421.308124][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2846'. [ 421.308329][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2846'. [ 421.308523][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2846'. [ 421.308706][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2846'. [ 421.308925][T16800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2846'. [ 421.718480][T16707] rxe_eth0 speed is unknown, defaulting to 1000 [ 421.801097][ T52] Bluetooth: hci5: command tx timeout [ 422.275299][T16821] __nla_validate_parse: 61 callbacks suppressed [ 422.275323][T16821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2849'. [ 422.275346][T16821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2849'. [ 422.502856][T16827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2852'. [ 422.652897][T16707] rxe_eth0 speed is unknown, defaulting to 1000 [ 422.770971][ T279] net_ratelimit: 189 callbacks suppressed [ 422.770994][ T279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.776732][ T6275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.777099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.321220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.321491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.517749][T16707] rxe_eth0 speed is unknown, defaulting to 1000 [ 423.738771][T16850] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2857'. [ 423.881078][ T52] Bluetooth: hci5: command tx timeout [ 424.674651][T16707] lo speed is unknown, defaulting to 1000 [ 424.687471][ T254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.689742][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.693613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.753527][T16707] rxe_eth0 speed is unknown, defaulting to 1000 [ 424.769082][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2863'. [ 424.968579][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.984171][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.985093][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.988695][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.989773][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.324960][ T8686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.325958][ T6272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.962973][ T5623] Bluetooth: hci5: command tx timeout [ 426.087863][T16902] netlink: 'syz.1.2871': attribute type 26 has an invalid length. [ 426.367631][T16911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2873'. [ 426.927622][T16922] batman_adv: batadv0: Adding interface: syzkaller0 [ 426.927644][T16922] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.927688][T16922] batman_adv: batadv0: Interface activated: syzkaller0 [ 426.928485][T16871] lo speed is unknown, defaulting to 1000 [ 427.053179][T16871] rxe_eth0 speed is unknown, defaulting to 1000 [ 427.467506][ T52] Bluetooth: hci2: command tx timeout [ 427.753969][T16922] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 427.852871][T16922] batman_adv: batadv0: Removing interface: syzkaller0 [ 427.971249][T16944] IPVS: set_ctl: invalid protocol: 172 127.0.0.1:20004 [ 428.213257][T16951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2879'. [ 428.328550][T16955] x_tables: unsorted underflow at hook 3 [ 428.524996][ T8682] net_ratelimit: 1 callbacks suppressed [ 428.525040][ T8682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.526145][ T6275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.526491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.691660][T16967] openvswitch: netlink: Key type 30 is not supported [ 428.870418][T16970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2883'. [ 428.880388][T16971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2883'. [ 428.906934][T16707] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.907133][T16707] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.907293][T16707] bridge_slave_0: entered allmulticast mode [ 428.935008][T16707] bridge_slave_0: entered promiscuous mode [ 428.957631][T16707] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.957801][T16707] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.957992][T16707] bridge_slave_1: entered allmulticast mode [ 428.960204][T16707] bridge_slave_1: entered promiscuous mode [ 429.104643][T16707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.127328][T16707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.276856][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2885'. [ 429.402453][T16707] team0: Port device team_slave_0 added [ 429.462810][T16985] netlink: get zone limit has 4 unknown bytes [ 429.483460][ T52] Bluetooth: hci2: command tx timeout [ 429.530703][T16707] team0: Port device team_slave_1 added [ 429.684815][T16707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.684835][T16707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.684865][T16707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.748536][T16707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.748554][T16707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.748584][T16707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.126968][T16707] hsr_slave_0: entered promiscuous mode [ 430.128300][T16707] hsr_slave_1: entered promiscuous mode [ 430.129240][T16707] debugfs: 'hsr0' already exists in 'hsr' [ 430.129358][T16707] Cannot create hsr debugfs directory [ 430.443321][ T8682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.446413][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.448465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.809353][T16871] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.809466][T16871] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.809648][T16871] bridge_slave_0: entered allmulticast mode [ 430.841894][T16871] bridge_slave_0: entered promiscuous mode [ 430.967363][T16871] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.970007][T16871] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.970297][T16871] bridge_slave_1: entered allmulticast mode [ 431.004747][T16871] bridge_slave_1: entered promiscuous mode [ 431.092531][ T254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.114178][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.231602][T16871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.265098][T16871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.352348][T16871] team0: Port device team_slave_0 added [ 431.355878][T16871] team0: Port device team_slave_1 added [ 431.564486][ T52] Bluetooth: hci2: command tx timeout [ 431.616796][T16707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.616838][T16707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.616868][T16707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 431.772964][T16871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.773022][T16871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.773090][T16871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.887011][T16871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.887032][T16871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.887062][T16871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.161503][T16707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.161544][T16707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.161573][T16707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 432.439604][T16871] hsr_slave_0: entered promiscuous mode [ 432.440659][T16871] hsr_slave_1: entered promiscuous mode [ 432.456879][T16871] debugfs: 'hsr0' already exists in 'hsr' [ 432.456905][T16871] Cannot create hsr debugfs directory [ 432.693220][T16707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.693344][T16707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.693409][T16707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 432.825802][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'. [ 432.887038][T16707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.887079][T16707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.887115][T16707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 432.927413][T17055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.002996][T17056] netlink: 'syz.1.2902': attribute type 1 has an invalid length. [ 433.003020][T17056] netlink: 'syz.1.2902': attribute type 2 has an invalid length. [ 433.146441][T17066] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 3, id = 0 [ 433.534535][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2905'. [ 433.534561][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2905'. [ 433.590726][T17076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2905'. [ 433.761089][T16707] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 433.787992][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.793203][T16707] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 433.834929][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.848503][T16707] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 433.874430][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.876119][T16707] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 433.913399][T16707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.285256][ T8680] net_ratelimit: 2 callbacks suppressed [ 434.285295][ T8680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.286394][ T6271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.286754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.441290][ T5623] Bluetooth: hci2: command 0x0419 tx timeout [ 434.450319][T16871] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 434.526611][T16871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.530361][T16871] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 434.577187][T16871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.580207][T16871] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 434.643307][T16871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.645801][T16871] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 434.680584][T16871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.124278][T16707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.265057][T17116] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2913'. [ 435.289215][T16871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.318910][T16871] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.337959][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.338073][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.359190][T16707] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.387506][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.387621][ T8686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.457152][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.457280][ T8680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.544672][T17120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2913'. [ 435.743167][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.743279][ T8686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.827121][T17045] udevd[17045]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 436.188282][T17135] 8021q: adding VLAN 0 to HW filter on device bond8 [ 436.215312][ T279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.216242][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.216557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.219212][ T8694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.241384][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.243676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.520916][ T5623] Bluetooth: hci2: command 0x0419 tx timeout [ 436.601381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.879476][T17153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2922'. [ 437.664245][T17175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2924'. [ 437.664275][T17175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2924'. [ 438.097702][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 438.158388][ T5623] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 438.178158][T17187] xt_NETMAP: bad MAP_IPS. [ 438.283792][ T5623] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 438.507638][T17203] syzkaller0: entered allmulticast mode [ 438.803135][T16707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.927893][T16707] veth0_vlan: entered promiscuous mode [ 438.964585][T16707] veth1_vlan: entered promiscuous mode [ 439.053256][T16707] veth0_macvtap: entered promiscuous mode [ 439.079207][T16707] veth1_macvtap: entered promiscuous mode [ 439.106527][T16871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.137237][T16707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.198263][T17220] tipc: Enabling of bearer rejected, failed to enable media [ 439.215052][T16707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.326644][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.327762][ T6271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.328133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.412368][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.413017][ T6218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.413368][ T6218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.517161][T17225] nftables ruleset with unbound set [ 439.533992][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.613405][T17225] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.984837][T17242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2935'. [ 439.987746][ T8682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.987769][ T8682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.051101][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.204639][T16871] veth0_vlan: entered promiscuous mode [ 440.225446][ T8694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.225470][ T8694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.315569][T16871] veth1_vlan: entered promiscuous mode [ 440.468041][T17250] IPVS: set_ctl: invalid protocol: 94 10.1.1.0:20002 [ 440.693233][T16871] veth0_macvtap: entered promiscuous mode [ 440.758157][T16871] veth1_macvtap: entered promiscuous mode [ 440.873295][T17267] ip_tables: iptables: counters copy to user failed while replacing table [ 440.919063][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2940'. [ 441.094792][T16871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.180258][T16871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.312147][ T8694] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.312243][ T8694] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.312369][ T8694] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.312449][ T8694] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.863910][ T8681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.863974][ T8681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.963104][ T8694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.963727][ T8694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.965358][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.966118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.989853][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.990946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.319023][ T8692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.319048][ T8692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.462510][T17306] wlan1 speed is unknown, defaulting to 1000 [ 442.462580][T17306] wlan1 speed is unknown, defaulting to 1000 [ 442.463504][T17306] wlan1 speed is unknown, defaulting to 1000 [ 442.469571][T17306] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 442.469610][T17306] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 442.469653][T17306] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 442.565811][T17306] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 442.606175][T17306] wlan1 speed is unknown, defaulting to 1000 [ 442.608151][T17306] wlan1 speed is unknown, defaulting to 1000 [ 442.610143][T17306] wlan1 speed is unknown, defaulting to 1000 [ 442.680148][T17306] wlan1 speed is unknown, defaulting to 1000 [ 442.706093][T17306] wlan1 speed is unknown, defaulting to 1000 [ 442.718119][T17306] wlan1 speed is unknown, defaulting to 1000 [ 442.730516][T17306] wlan1 speed is unknown, defaulting to 1000 [ 443.416742][T17337] sctp: [Deprecated]: syz.5.2861 (pid 17337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.416742][T17337] Use struct sctp_sack_info instead [ 443.680321][T17333] syzkaller0: entered promiscuous mode [ 443.680347][T17333] syzkaller0: entered allmulticast mode [ 444.397021][T17318] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 444.397051][T17318] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 444.507344][T17351] xt_recent: Unsupported userspace flags (000000b1) [ 444.509499][T17354] xt_esp: unknown flags DD [ 444.548043][T17318] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 444.548069][T17318] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 445.039329][T17360] 8021q: adding VLAN 0 to HW filter on device bond11 [ 445.044743][T17369] netlink: 'syz.5.2962': attribute type 2 has an invalid length. [ 445.044767][T17369] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2962'. [ 445.169041][ T6218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.188787][ T6271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.189160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.848491][T17393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2965'. [ 445.848517][T17393] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2965'. [ 445.900001][ T6271] wlan1 speed is unknown, defaulting to 1000 [ 445.929033][T17318] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 445.929060][T17318] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 445.987260][T17318] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 445.987328][T17318] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 446.038682][T17397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2966'. [ 446.598956][T17407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2967'. [ 446.616425][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 446.616448][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2967'. [ 446.616473][T17406] netlink: 'syz.3.2967': attribute type 15 has an invalid length. [ 446.704845][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 446.709274][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 446.710206][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 446.713092][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 446.722869][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 446.865546][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 446.879915][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 446.882443][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 446.892060][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 446.906905][ T8693] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 446.907667][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 447.062920][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 447.062946][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2967'. [ 447.062972][T17406] netlink: 'syz.3.2967': attribute type 15 has an invalid length. [ 447.114399][ T8694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.116482][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.117241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.291193][ T279] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 447.291759][ T279] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 447.291801][ T279] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 447.642077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.642471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.728705][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.736692][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.943217][T17439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2974'. [ 448.448963][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.449038][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.747525][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.747592][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.002122][ T5623] Bluetooth: hci6: command tx timeout [ 449.003844][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.003910][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.719219][T17480] bridge1: entered promiscuous mode [ 449.728005][T17480] bridge1: entered allmulticast mode [ 449.918081][T17492] x_tables: duplicate underflow at hook 2 [ 450.273941][T17343] lo speed is unknown, defaulting to 1000 [ 450.275472][T17343] rxe_eth0 speed is unknown, defaulting to 1000 [ 450.814367][T17519] __nla_validate_parse: 5 callbacks suppressed [ 450.814425][T17519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2990'. [ 450.899247][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2990'. [ 450.927245][ T6218] net_ratelimit: 2 callbacks suppressed [ 450.927268][ T6218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.928530][ T6271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.928947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.012257][ T50] pim6reg: left allmulticast mode [ 451.037483][ T50] tipc: Resetting bearer [ 451.091031][ T5623] Bluetooth: hci6: command tx timeout [ 451.475626][ T50] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 451.646876][ T50] team0: Port device xfrm0 removed [ 451.648021][ T50] tipc: Disabling bearer [ 451.667726][ T50] bond5 (unregistering): (slave xfrm1): Releasing backup interface [ 451.667790][ T50] xfrm1 (unregistering): left promiscuous mode [ 451.756818][ T50] bond3 (unregistering): (slave gretap1): Releasing active interface [ 451.859974][ T50] bond6 (unregistering): (slave geneve3): Releasing active interface [ 452.027646][ T50] bond1 (unregistering): Released all slaves [ 452.046621][ T50] bond2 (unregistering): Released all slaves [ 452.076527][ T50] bond3 (unregistering): Released all slaves [ 452.104428][ T50] bond4 (unregistering): Released all slaves [ 452.123172][ T50] bond0 (unregistering): Released all slaves [ 452.145180][ T50] bond5 (unregistering): Released all slaves [ 452.176311][ T50] bond6 (unregistering): Released all slaves [ 452.196883][ T50] bond7 (unregistering): Released all slaves [ 452.214427][ T8694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.215404][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.215789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.257663][ T50] bond8 (unregistering): Released all slaves [ 452.335673][T17536] veth0: entered promiscuous mode [ 452.336150][T17537] veth0: left promiscuous mode [ 452.336667][T17343] wlan1 speed is unknown, defaulting to 1000 [ 452.935591][ T50] ovs-s: left promiscuous mode [ 453.161935][ T5623] Bluetooth: hci6: command tx timeout [ 453.308564][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2998'. [ 453.483558][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.505920][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.506295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.075037][T17573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.092183][ T50] tipc: Disabling bearer [ 454.092685][ T50] tipc: Left network mode [ 455.241443][ T5623] Bluetooth: hci6: command tx timeout [ 455.543264][T17608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3010'. [ 455.543302][T17608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3010'. [ 456.221725][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 456.315143][T17626] net_ratelimit: 1 callbacks suppressed [ 456.315166][T17626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.315507][T17626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.315856][T17626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.316168][T17626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.342364][T17626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.361812][T17626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.362900][T17626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.408517][T17626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.408939][T17626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.409262][T17626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.456382][T17633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.122858][T17343] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.123120][T17343] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.123599][T17343] bridge_slave_0: entered allmulticast mode [ 457.173222][T17343] bridge_slave_0: entered promiscuous mode [ 457.209463][T17343] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.209579][T17343] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.209744][T17343] bridge_slave_1: entered allmulticast mode [ 457.230060][T17343] bridge_slave_1: entered promiscuous mode [ 457.253566][ T8681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.253590][ T8681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.501509][T17343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.537966][T17343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.274421][T17343] team0: Port device team_slave_0 added [ 458.309546][T17343] team0: Port device team_slave_1 added [ 458.720032][T17343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.720052][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.720080][T17343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.737834][T17683] xt_bpf: check failed: parse error [ 458.753866][T17343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.753918][T17343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.755914][T17343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.123942][T17343] hsr_slave_0: entered promiscuous mode [ 459.130711][T17343] hsr_slave_1: entered promiscuous mode [ 459.159572][T17343] debugfs: 'hsr0' already exists in 'hsr' [ 459.159599][T17343] Cannot create hsr debugfs directory [ 460.626706][ T50] hsr0: left allmulticast mode [ 460.627474][ T50] veth1_macvtap: left promiscuous mode [ 460.627550][ T50] veth0_macvtap: left promiscuous mode [ 460.627773][ T50] veth0_vlan: left promiscuous mode [ 460.753972][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3033'. [ 460.854006][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'. [ 462.566009][T17742] net_ratelimit: 27 callbacks suppressed [ 462.566034][T17742] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 463.086233][T17721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.089946][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.090903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.124717][T17787] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 463.124754][T17787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.154679][T17788] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 463.154721][T17788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.488357][ T50] IPVS: stop unused estimator thread 0... [ 464.500599][T17806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.998379][T17835] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3053'. [ 465.304939][T17848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3057'. [ 465.986291][T17343] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.007468][T17343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.008546][T17343] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.033298][T17343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.163054][T17343] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.206202][T17343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.208893][T17343] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.241158][T17343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.677919][T17343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.793855][T17343] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.871733][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.871849][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.880108][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.880222][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.245576][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3068'. [ 467.879754][T17926] C: renamed from lo [ 467.898274][T17926] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 467.919900][T17923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3071'. [ 468.817427][T17944] syzkaller0: entered promiscuous mode [ 468.817452][T17944] syzkaller0: entered allmulticast mode [ 468.898443][T17723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.899816][ T6275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.900243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.054968][T17944] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 469.462748][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3079'. [ 469.517785][T17961] 8021q: VLANs not supported on ip_vti0 [ 469.620611][T17972] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3084'. [ 469.867103][T17968] bond9 (unregistering): Released all slaves [ 469.978432][T17343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.055896][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3085'. [ 470.197822][T17343] veth0_vlan: entered promiscuous mode [ 470.248913][T17343] veth1_vlan: entered promiscuous mode [ 470.522620][T17343] veth0_macvtap: entered promiscuous mode [ 470.631725][T17343] veth1_macvtap: entered promiscuous mode [ 470.725932][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3092'. [ 470.749161][T18004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3092'. [ 470.915328][T18006] C: renamed from lo (while UP) [ 470.949730][T18006] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 470.967643][T17343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.080483][T17343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.163025][T17715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.243505][T17719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.244809][T17716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.269411][T17716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.568545][T17716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.568570][T17716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.657174][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3096'. [ 471.843689][T18023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3097'. [ 471.843714][T18023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3097'. [ 472.039077][T18026] 8021q: adding VLAN 0 to HW filter on device bond12 [ 472.644042][T18047] syzkaller0: entered promiscuous mode [ 472.644118][T18047] syzkaller0: entered allmulticast mode [ 474.607404][T17720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.631491][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.631891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.662091][T17718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.662116][T17718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.378802][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.379999][ T6277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.380415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.487095][ T8681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.488362][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.488795][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.245840][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.249141][ T6271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.249556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.363852][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.366863][ T5857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.367345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.481162][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.481432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.483821][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.127847][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.144446][ T6272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.144891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.884034][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.885939][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.886566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.002556][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.003568][ T6272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.003978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.607966][ T8683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.609790][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.611953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.396669][T18106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3100'. [ 525.537582][T18106] bond1: Invalid ad_actor_system MAC address. [ 525.537606][T18106] bond1: option ad_actor_system: invalid value (1) [ 525.573939][T18106] bond1 (unregistering): Released all slaves [ 525.640613][T18103] nbd: must specify a device to reconfigure [ 526.091635][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 526.095836][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 526.096758][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 526.133644][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 526.137256][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 526.346359][T18129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.617842][T18137] netlink: 'syz.4.3108': attribute type 12 has an invalid length. [ 527.458264][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 527.688671][T18159] xt_TPROXY: Can be used only with -p tcp or -p udp [ 527.819233][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3119'. [ 528.201199][ T52] Bluetooth: hci3: command tx timeout [ 528.205641][T18177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3122'. [ 528.365761][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.367098][ T6277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.367525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.255951][T18201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3126'. [ 529.292917][T18201] ip6t_hbh: too many supported opts specified [ 529.564304][ T99] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.565516][ T99] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 529.565552][ T99] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.655779][T18211] netlink: 596 bytes leftover after parsing attributes in process `syz.5.3131'. [ 529.671800][T18207] tipc: New replicast peer: 255.255.255.255 [ 529.672852][T18207] tipc: Enabled bearer , priority 10 [ 529.985218][ T99] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.985261][ T99] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 529.985292][ T99] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.064774][T18118] lo speed is unknown, defaulting to 1000 [ 530.082349][T18118] rxe_eth0 speed is unknown, defaulting to 1000 [ 530.167807][ T99] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.167849][ T99] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 530.199143][ T99] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.283105][ T52] Bluetooth: hci3: command tx timeout [ 530.948762][ T99] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.948829][ T99] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 530.948885][ T99] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.161990][ T5857] tipc: Node number set to 702213653 [ 531.850641][T18118] wlan1 speed is unknown, defaulting to 1000 [ 532.087363][T18267] netlink: 'syz.5.3142': attribute type 39 has an invalid length. [ 532.107316][T18268] netlink: 'syz.5.3142': attribute type 39 has an invalid length. [ 532.259305][T18275] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3143'. [ 532.362622][ T52] Bluetooth: hci3: command tx timeout [ 532.962585][T18292] xt_l2tp: missing protocol rule (udp|l2tpip) [ 532.967123][T18289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3145'. [ 532.967228][T18289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3145'. [ 533.179417][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3146'. [ 533.179447][T18299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3146'. [ 533.456844][T18307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.674061][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3151'. [ 534.122856][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.439831][ T99] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 534.442685][ T52] Bluetooth: hci3: command tx timeout [ 534.762842][ T99] bond6 (unregistering): (slave ip6erspan0): Releasing active interface [ 535.686209][ T99] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 535.712763][ T99] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 535.712795][ T99] bridge4 (unregistering): left promiscuous mode [ 535.747551][ T99] bond1 (unregistering): Released all slaves [ 535.772207][ T99] bond2 (unregistering): Released all slaves [ 535.796102][ T99] bond0 (unregistering): Released all slaves [ 535.829173][ T99] bond3 (unregistering): Released all slaves [ 535.850084][ T99] bond4 (unregistering): Released all slaves [ 535.879505][ T99] bond5 (unregistering): Released all slaves [ 535.908292][ T99] bond6 (unregistering): Released all slaves [ 535.938216][ T99] bond7 (unregistering): Released all slaves [ 535.960038][ T99] bond8 (unregistering): Released all slaves [ 536.025951][T18319] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 536.113366][ T5278] veth1_vlan: left promiscuous mode [ 536.514782][ T99] tipc: Left network mode [ 536.520964][ T52] Bluetooth: hci3: command tx timeout [ 536.821517][T18361] netlink: 'syz.4.3158': attribute type 2 has an invalid length. [ 537.269566][ T99] IPVS: stopping master sync thread 12538 ... [ 537.278314][ T99] IPVS: stopping backup sync thread 17066 ... [ 537.423487][T18381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3161'. [ 537.688548][T18389] netlink: 'syz.1.3162': attribute type 4 has an invalid length. [ 538.232191][T18407] xt_hashlimit: invalid interval [ 538.232358][T18407] xt_hashlimit: invalid interval [ 538.232502][T18407] xt_hashlimit: invalid interval [ 538.232633][T18407] xt_hashlimit: invalid interval [ 538.232763][T18407] xt_hashlimit: invalid interval [ 538.232892][T18407] xt_hashlimit: invalid interval [ 538.233036][T18407] xt_hashlimit: invalid interval [ 538.233165][T18407] xt_hashlimit: invalid interval [ 538.233294][T18407] xt_hashlimit: invalid interval [ 538.233422][T18407] xt_hashlimit: invalid interval [ 538.858111][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 538.889783][T18118] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.889954][T18118] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.890129][T18118] bridge_slave_0: entered allmulticast mode [ 538.920094][T18118] bridge_slave_0: entered promiscuous mode [ 538.934058][T18118] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.934236][T18118] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.934387][T18118] bridge_slave_1: entered allmulticast mode [ 538.939980][T18118] bridge_slave_1: entered promiscuous mode [ 538.980631][T18422] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3168'. [ 539.274062][T18118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.299084][T18118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.344236][T18427] ip6t_rt: address list match requested but addrnr is 0 [ 539.516788][T18414] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 539.530046][T18414] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 539.740402][T18414] Dev vda: unable to read RDB block 8 [ 539.741187][T18414] vda: unable to read partition table [ 539.780096][T18118] team0: Port device team_slave_0 added [ 539.813880][T18118] team0: Port device team_slave_1 added [ 539.881987][T17721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.267839][T18445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3175'. [ 540.288761][T18447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.442909][T18118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.442948][T18118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.443011][T18118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.489252][T18118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.489274][T18118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.489303][T18118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.343645][T18460] x_tables: duplicate underflow at hook 1 [ 541.661212][T18118] hsr_slave_0: entered promiscuous mode [ 541.688280][T18118] hsr_slave_1: entered promiscuous mode [ 541.698032][T18118] debugfs: 'hsr0' already exists in 'hsr' [ 541.698057][T18118] Cannot create hsr debugfs directory [ 541.967442][T18472] ip_tables: iptables: counters copy to user failed while replacing table [ 541.981153][ T99] hsr_slave_0: left promiscuous mode [ 541.983522][ T99] hsr_slave_1: left promiscuous mode [ 541.984578][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.984654][ T99] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.023418][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.023445][ T99] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.102348][ T99] veth1_macvtap: left promiscuous mode [ 543.462244][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 543.656634][T18507] netlink: 'syz.5.3188': attribute type 1 has an invalid length. [ 543.785349][T18521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3188'. [ 543.788798][T18520] netlink: 'syz.1.3190': attribute type 2 has an invalid length. [ 543.881360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.908991][T18508] bond1: (slave veth0_to_bond): making interface the new active one [ 543.921585][T18508] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 543.957558][T18514] bond0: Error: CAN devices cannot be enslaved [ 544.084373][T18521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.458589][ T99] IPVS: stop unused estimator thread 0... [ 544.655560][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3194'. [ 544.949783][T18549] netlink: 'syz.2.3196': attribute type 2 has an invalid length. [ 545.645410][T17720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.318876][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 546.571513][T18590] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3207'. [ 546.576314][T18590] netlink: 'syz.5.3207': attribute type 1 has an invalid length. [ 546.894362][T18601] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3211'. [ 546.915564][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'. [ 547.223788][T18608] netlink: 'syz.4.3214': attribute type 11 has an invalid length. [ 547.433757][T18118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 547.514826][T18118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.533471][T18118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 547.589009][T18118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.602648][T18118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 547.636917][T18118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.666834][T18118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 547.704652][T18614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.745427][T18118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.835117][T18618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3216'. [ 548.034701][T18634] ip_tables: iptables: counters copy to user failed while replacing table [ 548.456945][T18648] veth1_macvtap: left promiscuous mode [ 548.866285][T18118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.877561][T18652] syzkaller0: entered promiscuous mode [ 548.877584][T18652] syzkaller0: entered allmulticast mode [ 548.936543][T18663] netlink: 'syz.5.3224': attribute type 2 has an invalid length. [ 548.936602][T18663] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3224'. [ 548.985067][T18118] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.018210][T18652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.047336][T18661] ip_tables: iptables: counters copy to user failed while replacing table [ 549.060833][ T8681] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.060951][ T8681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.338672][T17723] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.338903][T17723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.369205][T18669] netlink: 'syz.5.3225': attribute type 3 has an invalid length. [ 549.369232][T18669] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3225'. [ 549.682758][T18678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3229'. [ 549.760189][T18678] ip_tables: iptables: counters copy to user failed while replacing table [ 550.618514][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3234'. [ 550.618543][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3234'. [ 550.618833][T18709] veth0_vlan: left promiscuous mode [ 550.618908][T18709] vlan0: entered promiscuous mode [ 550.618924][T18709] veth0_vlan: entered promiscuous mode [ 550.763112][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.535678][T18721] syzkaller0: entered promiscuous mode [ 551.535706][T18721] syzkaller0: entered allmulticast mode [ 551.540482][T18730] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 551.542079][T18735] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 551.939131][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'. [ 551.939155][T18749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3241'. [ 551.939391][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'. [ 551.939408][T18749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3241'. [ 552.281332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.525088][T17723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.198144][T18793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3245'. [ 557.308097][T18799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3248'. [ 557.308209][T18799] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 558.070033][T18118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.318105][T18827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3252'. [ 558.318154][T18827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3252'. [ 558.410695][T18827] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.3252'. [ 558.416915][T18827] netlink: 'syz.4.3252': attribute type 1 has an invalid length. [ 558.716479][T18118] veth0_vlan: entered promiscuous mode [ 558.859666][T18118] veth1_vlan: entered promiscuous mode [ 559.099475][T18846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 559.138633][T18846] bridge_slave_1: left allmulticast mode [ 559.138663][T18846] bridge_slave_1: left promiscuous mode [ 559.138902][T18846] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.202735][T18846] bridge_slave_0: left allmulticast mode [ 559.202803][T18846] bridge_slave_0: left promiscuous mode [ 559.203411][T18846] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.356605][T18848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3257'. [ 559.417416][T18850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3257'. [ 559.820092][T18118] veth0_macvtap: entered promiscuous mode [ 559.912868][T18118] veth1_macvtap: entered promiscuous mode [ 560.115807][T18118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.160314][T18118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.391536][ T8684] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.392029][ T8684] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.392832][ T8684] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.392873][ T8684] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.764159][ T8683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.764183][ T8683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.917841][ T8689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.917865][ T8689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.971173][T18873] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3263'. [ 561.097072][T18883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3265'. [ 561.146949][T18873] bond0: (slave bond_slave_0): Releasing backup interface [ 561.445567][T18873] bond_slave_0: entered promiscuous mode [ 561.445635][T18873] bond_slave_0: entered allmulticast mode [ 561.601690][T18899] netlink: 'syz.1.3268': attribute type 1 has an invalid length. [ 561.601893][T18900] netlink: 'syz.1.3268': attribute type 1 has an invalid length. [ 561.841895][T18899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.287413][T17723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.309556][T18916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3270'. [ 562.415109][T18912] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3271'. [ 562.415604][T18915] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3271'. [ 562.858339][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 562.878620][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 562.887966][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 562.898582][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 562.899208][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 562.932910][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.999354][T18950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3278'. [ 564.056569][ T8683] IPVS: starting estimator thread 0... [ 564.141018][T18961] IPVS: using max 24 ests per chain, 57600 per kthread [ 564.162513][T18967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3279'. [ 564.267272][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3282'. [ 564.293443][T18968] netlink: 'syz.5.3282': attribute type 4 has an invalid length. [ 564.317225][T18968] netlink: 'syz.5.3282': attribute type 4 has an invalid length. [ 564.990027][T18926] lo speed is unknown, defaulting to 1000 [ 565.005566][T18926] rxe_eth0 speed is unknown, defaulting to 1000 [ 565.009459][ T52] Bluetooth: hci0: command tx timeout [ 565.187089][ T8695] IPVS: starting estimator thread 0... [ 565.228402][T18989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 565.281994][T18998] IPVS: using max 27 ests per chain, 64800 per kthread [ 566.002919][T19009] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3291'. [ 566.042568][T19009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3291'. [ 566.042607][T19009] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 566.074720][T19009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3291'. [ 566.178727][T18926] wlan1 speed is unknown, defaulting to 1000 [ 567.081148][ T52] Bluetooth: hci0: command tx timeout [ 567.322793][ T8689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.352107][T19040] IPVS: length: 239 != 24 [ 567.697623][T19049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3298'. [ 567.969627][T19054] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 568.147654][T19051] syzkaller0: entered promiscuous mode [ 568.147694][T19051] syzkaller0: entered allmulticast mode [ 568.354619][T19051] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3299'. [ 568.835695][T18926] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.842426][T18926] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.842942][T18926] bridge_slave_0: entered allmulticast mode [ 568.868762][T18926] bridge_slave_0: entered promiscuous mode [ 568.946032][T18926] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.947636][T19076] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 568.949124][T18926] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.949604][T18926] bridge_slave_1: entered allmulticast mode [ 569.059739][T18926] bridge_slave_1: entered promiscuous mode [ 569.161201][ T52] Bluetooth: hci0: command tx timeout [ 569.621961][T18926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.656456][T18926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.759812][T18926] team0: Port device team_slave_0 added [ 569.792296][T18926] team0: Port device team_slave_1 added [ 569.993640][T18926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.993662][T18926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.993693][T18926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.055698][T18926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.055722][T18926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.055753][T18926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.124561][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 570.567414][T19100] syzkaller0: entered promiscuous mode [ 570.567441][T19100] syzkaller0: entered allmulticast mode [ 570.603932][T18926] hsr_slave_0: entered promiscuous mode [ 570.605034][T18926] hsr_slave_1: entered promiscuous mode [ 571.243136][ T5623] Bluetooth: hci0: command tx timeout [ 571.307730][T19118] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3313'. [ 571.307826][T19118] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3313'. [ 572.829430][T18926] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.829472][T18926] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.946172][T19166] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3320'. [ 573.055989][T19163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3316'. [ 573.056048][T19163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3316'. [ 573.057520][T19167] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3320'. [ 573.197442][T17714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.217800][T18926] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.217842][T18926] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.604594][T18926] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.604635][T18926] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.709002][T19177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3322'. [ 574.035040][T19188] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 574.134202][T18926] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.134245][T18926] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.204774][T19183] netlink: 'syz.3.3324': attribute type 12 has an invalid length. [ 575.309148][T19200] IPv6: NLM_F_CREATE should be specified when creating new route [ 583.630777][ C1] sched: DL replenish lagged too much [ 610.154094][ T8679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.979367][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.969930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.217969][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 672.283126][ T6212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.186493][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 727.328174][ T33] INFO: task syz.1.3326:19190 blocked for more than 152 seconds. [ 727.328203][ T33] Not tainted syzkaller #0 [ 727.328216][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 727.328228][ T33] task:syz.1.3326 state:D stack:26536 pid:19190 tgid:19189 ppid:17343 task_flags:0x400140 flags:0x00080002 [ 727.328330][ T33] Call Trace: [ 727.328343][ T33] [ 727.328361][ T33] __schedule+0x17db/0x58f0 [ 727.328428][ T33] ? __pfx___schedule+0x10/0x10 [ 727.328467][ T33] ? schedule+0x90/0x2b0 [ 727.328497][ T33] schedule+0x164/0x2b0 [ 727.328527][ T33] schedule_preempt_disabled+0x13/0x30 [ 727.328552][ T33] __mutex_lock+0x7c1/0x1550 [ 727.328587][ T33] ? __mutex_lock+0x5d4/0x1550 [ 727.328621][ T33] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 727.328670][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 727.328710][ T33] ? net_generic+0x1e/0x240 [ 727.328741][ T33] ? net_generic+0x1e/0x240 [ 727.328781][ T33] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 727.328825][ T33] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 727.328868][ T33] ? rcu_is_watching+0x16/0xb0 [ 727.328900][ T33] ? trace_kmalloc+0x2a/0xf0 [ 727.328931][ T33] ? __kmalloc_noprof+0x38c/0x720 [ 727.328962][ T33] ? __nla_parse+0x40/0x60 [ 727.328991][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 727.329037][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 727.329085][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 727.329131][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 727.329183][ T33] ? bpf_lsm_capable+0x9/0x20 [ 727.329208][ T33] ? security_capable+0x7e/0x2c0 [ 727.329250][ T33] genl_rcv_msg+0x614/0x7a0 [ 727.329294][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 727.329330][ T33] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 727.329382][ T33] netlink_rcv_skb+0x226/0x4a0 [ 727.329413][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 727.329452][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 727.329499][ T33] ? down_read+0x2be/0x330 [ 727.329535][ T33] genl_rcv+0x28/0x40 [ 727.329568][ T33] netlink_unicast+0x8ef/0xa80 [ 727.329616][ T33] netlink_sendmsg+0x813/0xb40 [ 727.329672][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.329713][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 727.329748][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.329777][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 727.329813][ T33] ____sys_sendmsg+0x54e/0x850 [ 727.329846][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.329883][ T33] ? import_iovec+0x73/0xa0 [ 727.329924][ T33] ___sys_sendmsg+0x2a5/0x360 [ 727.329948][ T33] ? __lock_acquire+0x747/0x2de0 [ 727.329980][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.330014][ T33] ? irqentry_exit+0x218/0x920 [ 727.330073][ T33] ? __fget_files+0x2a/0x420 [ 727.330095][ T33] ? __fget_files+0x3a2/0x420 [ 727.330129][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 727.330159][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 727.330211][ T33] do_syscall_64+0x166/0x520 [ 727.330240][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.330264][ T33] ? clear_bhb_loop+0x70/0xc0 [ 727.330293][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.330318][ T33] RIP: 0033:0x7fc42b59e559 [ 727.330348][ T33] RSP: 002b:00007fc42c4dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.330372][ T33] RAX: ffffffffffffffda RBX: 00007fc42b825fa0 RCX: 00007fc42b59e559 [ 727.330390][ T33] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 727.330406][ T33] RBP: 00007fc42b635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 727.330421][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.330436][ T33] R13: 00007fc42b826038 R14: 00007fc42b825fa0 R15: 00007ffdd9d51578 [ 727.330474][ T33] [ 727.330498][ T33] [ 727.330498][ T33] Showing all locks held in the system: [ 727.330507][ T33] locks held by kthreadd/2: 1, last CPU#1: [ 727.330524][ T33] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 727.330589][ T33] locks held by kworker/0:1/10: 3, on CPU#0: [ 727.330605][ T33] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630