last executing test programs: 6.597206105s ago: executing program 0 (id=2550): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffdfffff}, 0xc) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000d00)=[{&(0x7f0000000580)=""/51, 0x33}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x4c}}], 0x90}, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/81, 0x51}, {0x0}], 0x2, &(0x7f0000000400)=""/247, 0xf7}, 0x40000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7", 0x24}], 0x1}], 0x1, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a30000000000800024000000002140000001100010000000000004000000000000a"], 0x50}}, 0x0) socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x8, 0x11, 0x0, 0x1, [@generic="31f9e05e"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 5.754627118s ago: executing program 0 (id=2555): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000a231f966671c131e26f2d4ee4f6402391ac5fbf85739202b2d84f3b02726b854ce3eae06bc2ca9e1c5f7018818f6d10103896699b6d88479cf8ad53955df396f6b0cca788ac2030d684a6fb2c329999b714e1df1b9588b55463b7ca254118eb6cae343137220c6fc5e7959a8f6ff15c8c3f2ba27688afb7f02e7842191e5b3034e907dac8fa48779922be017c941a209ee47aa72c3d372827"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) recvmmsg(r1, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000004c0)=ANY=[@ANYBLOB="3306040307000600fc010000000000000000000000000001fc010000000000000000000000000000fe88000000000000000000000000010115883f76d8dbc9956621caf0a9f2357b5a91dc2a457b6f66cbcdf6d2863178221e2955133ac1d49eb7f21e7635d2525e3332d5433619ccaa0b83bc"], 0x38) sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)}}], 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000324900000900000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00 \x00'/28], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000003840)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0xffffffff, 0x8}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r5, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x2000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x4}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20004000) shutdown(r2, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 5.078772727s ago: executing program 1 (id=2560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000010800000000000800000000850000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="3c020000190001002cbd700000000000fc020000000000000000000000000000ff01000000000000000000000000000100000003000000000200000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000420d00000000e7ffffffffffff1b0000dd0200000000000000000000c06b6e0000000000000000008401050064010102000000000000000000000000000000003300000000000000ac14140c000000100000000000000000000000000300ff0000000000000000862bb4c200ffffffff00000000f1ffffffffffffff0000000032"], 0x23c}}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x2, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0xff}, {0x4, 0x0, 0x0, 0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34a", 0x3c}], 0x1, 0x1) close(r3) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056128ff16b2a141a", 0x28) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xb, 0x1, 0x0, 0x1, [@generic="ac9e36842cfb71"]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1760f000078bb3fb7dbfc8180ca8395ccfda2e4dcf5810000", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="3ed73cfc"]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 5.0293438s ago: executing program 2 (id=2561): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) unshare(0x60600) r2 = socket$netlink(0x10, 0x3, 0x17) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa000000000000000000000000060000000403"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xfffc, 0x1, @empty, 0x200}, 0x1c) 4.727021538s ago: executing program 1 (id=2563): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x12, 0x6, 0x1, 0x2, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8915, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, &(0x7f0000000080)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000080)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4030) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x46, 0x0, 0x0) 3.856175993s ago: executing program 2 (id=2565): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000010800000000000800000000850000008700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34a", 0x3c}], 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) 3.659126361s ago: executing program 2 (id=2566): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x27, &(0x7f0000000000)={@multicast, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@generic={0x88ca, "c82bfb8f5713876856022cd264abbe4b98"}}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000200)={0x2, @long}, 0x8) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000034b0d716d5ca84d985000000"], &(0x7f0000000680)='GPL\x00'}, 0x94) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) listen(0xffffffffffffffff, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001500)="99df", 0x2}], 0x1}}], 0x1, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.25456678s ago: executing program 1 (id=2568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r2, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r2}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, 0x0, &(0x7f0000000180)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d93df0600000000000000000000002369e0ac0f978f5442ed9419a86be9817675d67f40000000", 0x29}, {&(0x7f0000000140)}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x10, 0xfffffdfe, 0x0, 0x6, 0x6, 0x3}}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}]}, &(0x7f0000000140)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000e4dbcf250100000a080007000a0000000e0001006e65742f6c32636170000000080002000500000008000800be1e4001"], 0x3c}, 0x1, 0x2000a00, 0x0, 0x20040090}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 3.238911316s ago: executing program 0 (id=2569): socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) pwritev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000540)}], 0x1, 0x6, 0x5) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f2178"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7002ffdbdf256760000006000a0001000000050007000a00000006000800a0aa0000db5454430ed14bb8a5f208a36d5c99d96a9632efa26a0aea3f7a9bf45af73bee35842ab69a9ee5"], 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) 3.092935624s ago: executing program 3 (id=2570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0xffffffff}, 0x50) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmsg(r1, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x142) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000500)="e87a0e9ad61304a8b59000957bb26569908190442261bd645dc4107d26b7c92a738b761561ce44df2ced095748dc743e5c9200e5999a78d91c85eb4107ae76b32d299f377fd2cfcf553d7e0d9edf717c1decca77dce55fc276f7f81cab7e69bd368f1972184d9d3c26e00c5f7394c9a2b598817e62bf28986cf7eca20c29fa8b95b42e8969613d54ee6dc69cbda7fc7b75737a08ad6faddaf4d1e6d8e9c3be42eb8a33b7e8da0d0e64977b5f43a106a6602ed862b1dea23b09ec303a", 0xbc) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000208000b400000000070000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000003800018008000100636d70002c00028018000380090001009c979b32261fbabdae20b34f870e0000080001400000000208000240000000000900010073797a30"], 0x10c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6(0xa, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r7, @ANYRES8=r7], 0x1c}}, 0x24024080) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r8, 0x1) unshare(0x20000400) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.832887269s ago: executing program 1 (id=2571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x58, r2, 0x100, 0x1, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff3, 0x60}}}}, [@NL80211_ATTR_NAN_FUNC={0x38, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}, @NL80211_NAN_FUNC_SRF={0x18, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x7}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x6}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01004000000002000000010000001c000180080003000a01010105000200bf0000000800060006000000"], 0x30}}, 0x4004811) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x2d3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', @multicast}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@security={'security\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x228, 0x318, 0x228, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, &(0x7f0000000700), {[{{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@local, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], @ipv6=@local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], 0x4d6, 0x3501, 0x29, 0x0, 0x1d, 0xa3421eadf8c40d61}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xff, 0xffffff00], @ipv6=@private1, [0xffffffff, 0x0, 0xff000000], 0x4d4, 0x0, 0x33, 0x0, 0x8, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@remote, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], 0x4d3, 0x3500, 0x94, 0x1, 0x8, 0x12}, {@ipv4=@private=0xa010101, [0xff000000, 0xffffffff, 0xff000000, 0xfffffefe], @ipv4=@loopback, [0xff, 0xffffffff, 0xffffff00, 0xff], 0x4d2, 0x3507, 0x2c, 0x0, 0x10, 0x19}], 0x4, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1c, 0x6, 0xfff8}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x18}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff000000, 0xff000000], [0xffffff00, 0xff, 0xffffff00, 0xffffff00], 'gretap0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0xf, 0x1, 0x25}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'dvmrp0\x00', {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x2}, {0x0, 0x1, 0x8}, {0x3, 0x1, 0x3}, 0x4, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) bpf$MAP_LOOKUP_ELEM(0x1d, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0xd22f7c2db1585cba}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 2.607964797s ago: executing program 3 (id=2573): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xfffb, 0x6, 0x6, 0x2}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000000100736974001c00028005000a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000014000100e0ffffffffffffff0a400000", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000000ffff0000000008000900070000"], 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7606}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x0, 0x0, 0x0, 0xc}, {}, {0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe4a9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x4}, {}, {0x2}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r10, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r11, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_route(r9, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=ANY=[@ANYBLOB="180000006a0001002abd7000fbdbdf2502000008"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x64055) syz_emit_ethernet(0x7a, &(0x7f0000001180)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd610961d300442ffffc010000000000000000000000008001000000000000000000000000000000010c21880b0000a9f3010008000c0086dd0800660eadd90001160863020100000000000009080022eb000000042101ff060200000000000009000e800e08006558000000009712a9dbf8830e1b6061ef0fe44df7531d77450a0dd8a08af7ec82f217705031071ee2b07d884d9523fdb3a3c31303087645e2776d33cc0b28805a299b357630c878bcacf82b154f37c2f3051e9793216ae982575809be9dbed307bd7e7c099057e2a33603cc9c8c4f0a334c1a9a30032e23f379b107262d6c2c4363"], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8) 2.314902472s ago: executing program 3 (id=2574): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000001e0800064000000002"], 0x94}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000008c0)={{r1, &(0x7f00000000c0)='[(>&:\'}#-+\x00', 0x200000, &(0x7f0000000100)={@_ha_fsid={[0xf, 0x3]}, {0xc1b8, 0x41, 0x5, 0x5}}, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x7}, 0x5, &(0x7f0000000740)=[{0x2, 0xfffffffd, &(0x7f00000001c0)='\x00', &(0x7f0000000340)="6d101c1c01bc2a5dc739f4133dde8eb184d4dfce8baae2b2c1521b70cc2338d5ef2d20638a38e797546f7b0373e9b5535cb4256cac9d4a112050af8d11137df338c1a7fdd9eae106139170323bfc914f6c072e27da2904ad435724cb71d07dfea5d1a526a16055bee456fb50806c6140667e81ef33b57eed09b91e159b4b2a612943bb5c675d7535193dffaf412ed86007e4c9f086f0ae74f7c3ba8def05434c2e20f84e8d868ea60382bf6687eda686a5bbca879a71696fa90f9cdf165715c3a6541d40d12977a418eb4d3a", 0xcc, 0x8}, {0x3, 0x8, &(0x7f0000000440)='^0-)/]^#+-\x00', &(0x7f0000000480)="c147f22164b25e42a428114e689a8f057ed2f0c420ed75ff637b4aafc1c231fd75d49e36ef72c86bb040ce1041715b1dc349454c408a03ea8e266052d4057fe7e79962582f20ee8e5282cd617beec43d502539d63d61872436103945ace374e28ba9aeabb96596a86ea195f6a34e3d49501dcbe9a019835f979d61aab0a64b69ded2f77b4e175e3aed2bebc2d31f8b44c7d6368035262efc103e36b0cc0d5dad53f159bca5d403128be277b996755c7c87b3f0791ecfef19638cc0050611b35fb2a9f7ae792e748580e6acca564eedf350bbaba266a5909ca3f679fa4e114f918825ccca0626caae24200dc942321377", 0xf0, 0x28}, {0x3, 0xad, &(0x7f0000000580)='\x00', &(0x7f00000005c0)="64d98182e9a8ec03d45bd1cdcda5", 0xe, 0x20}, {0x3, 0x9, &(0x7f0000000600), &(0x7f0000000640)="6a510150c6d527235cd3ba2fa8d346c863f4f4114cd0", 0x16, 0x2a}, {0x3, 0x8, &(0x7f0000000680)='}L:\x00', &(0x7f00000006c0)="d7f98be4eb70054d838b7225665f887d366348496ac0bd06c2c78612397d3e2f73d8011ab30718651e995c9fc592f86327eb61705b3dda78d3e69c7f7d897e33591f07340fa1af69ecc99fac195a208096cfd9b055", 0x55, 0x38}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x1a, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) unshare(0x2a020400) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x431}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000940)=0x1, &(0x7f0000000980)=0x4) 2.253708147s ago: executing program 1 (id=2575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000b01020000000000b83c000400000808000232000000011454f2a1f2564eda72ff166d52b4ba55eab93e3adcdcad73788d719f266fc2897fa6234da0381c6b4265733a77891613d9d793852417f0cff883c495d937a75889ad915a9b3f11d75503c7a633962cf734a911ace334d06186a7b226c3d6c9fd0800ea5a64bb4126889073aba3f826bf753f6930f1c27be7cfcb28015aaccf4dab7cd95eff6c9acf00b6a3dcc5ff4c4f881e17b9272b59adcf0f39926040d208cfc40b95c30fb77d86eff0e503bbba611da79ad9f9d6955f"], 0x1c}, 0x1, 0x0, 0x0, 0xc810}, 0x40004) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x78}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r5, 0x5, 0xd00, 0x0, {0x22}}, 0x14}}, 0x4000000) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x10}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x6}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, r1, 0x0, 0x4, 0x3}, 0x50) close(r0) 2.178262445s ago: executing program 4 (id=2576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34a", 0x3c}], 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) 1.980229061s ago: executing program 0 (id=2577): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000", 0x1b) r2 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0x2, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'nq\x00', 0x5, 0x7, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x0, 0x40}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000400)=@in6={0x2, 0x4e23, 0x0, @dev, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x40800) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 1.892637384s ago: executing program 4 (id=2578): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000440)={0x6, 0x100, 0xfffffffa, 0x4, 0x8, 0x5, 0x42, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4040810}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(0x4) unshare(0x6020400) socket$netlink(0x10, 0x3, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xffffffff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xffff, 0x3, 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x5, 0x1}, {0x2, 0x2, 0x1}, {0xb, 0x6, 0x4}, 0xffffffff, 0x7ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) shutdown(r3, 0x0) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @none, 0x18}, 0xa) write$cgroup_subtree(r2, &(0x7f0000000d40)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 1.883662916s ago: executing program 1 (id=2579): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000a231f966671c131e26f2d4ee4f6402391ac5fbf85739202b2d84f3b02726b854ce3eae06bc2ca9e1c5f7018818f6d10103896699b6d88479cf8ad53955df396f6b0cca788ac2030d684a6fb2c329999b714e1df1b9588b55463b7ca254118eb6cae343137220c6fc5e7959a8f6ff15c8c3f2ba27688afb7f02e7842191e5b3034e907dac8fa48779922be017c941a209ee47aa72c3d372827"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) recvmmsg(r1, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000004c0)=ANY=[@ANYBLOB="3306040307000600fc010000000000000000000000000001fc010000000000000000000000000000fe88000000000000000000000000010115883f76d8dbc9956621caf0a9f2357b5a91dc2a457b6f66cbcdf6d2863178221e2955133ac1d49eb7f21e7635d2525e3332d5433619ccaa0b83bc"], 0x38) sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)}}], 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000324900000900000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00 \x00'/28], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000003840)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0xffffffff, 0x8}, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r5, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x2000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x4}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x20004000) shutdown(r2, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 1.584610609s ago: executing program 4 (id=2580): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e20, @local}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000300)={@l2tp6={0xa, 0x0, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x3}, {&(0x7f0000000200)=""/49, 0x31}, &(0x7f0000000240), 0x81}, 0xa0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180), 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) listen(r4, 0x7) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x20004000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c840) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.247873978s ago: executing program 2 (id=2581): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r2, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r2}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, 0x0, &(0x7f0000000180)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b3d93df0600000000000000000000002369e0ac0f978f5442ed9419a86be9817675d67f40000000", 0x29}, {&(0x7f0000000140)}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x10, 0xfffffdfe, 0x0, 0x6, 0x6, 0x3}}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}]}, &(0x7f0000000140)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000e4dbcf250100000a080007000a0000000e0001006e65742f6c32636170000000080002000500000008000800be1e4001"], 0x3c}, 0x1, 0x2000a00, 0x0, 0x20040090}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 1.245240947s ago: executing program 4 (id=2582): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 1.240065254s ago: executing program 3 (id=2583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010926bd0000fddbdf2524fff7fd08000200", @ANYRES32=r8, @ANYBLOB="060006000000000005002a0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x64}}, 0x2041815) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4040840) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x48, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x7}]}]}, 0x48}}, 0x20000080) 925.674668ms ago: executing program 0 (id=2584): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xfffb, 0x6, 0x6, 0x2}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000000100736974001c00028005000a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000014000100e0ffffffffffffff0a400000", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000000ffff0000000008000900070000"], 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7606}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x8, 0x0, 0x0, 0x0, 0xc}, {}, {0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe4a9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x4}, {}, {0x2}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r10, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r11, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_route(r9, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=ANY=[@ANYBLOB="180000006a0001002abd7000fbdbdf2502000008"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x64055) syz_emit_ethernet(0x7a, &(0x7f0000001180)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd610961d300442ffffc010000000000000000000000008001000000000000000000000000000000010c21880b0000a9f3010008000c0086dd0800660eadd90001160863020100000000000009080022eb000000042101ff060200000000000009000e800e08006558000000009712a9dbf8830e1b6061ef0fe44df7531d77450a0dd8a08af7ec82f217705031071ee2b07d884d9523fdb3a3c31303087645e2776d33cc0b28805a299b357630c878bcacf82b154f37c2f3051e9793216ae982575809be9dbed307bd7e7c099057e2a33603cc9c8c4f0a334c1a9a30032e23f379b107262d6c2c4363"], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8) 757.383216ms ago: executing program 2 (id=2585): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x138, r0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x114, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}, {0xf8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xf3, 0x1, "298ba797a1b87cf3b6100bd8c879cc7f4075e56f9f67fc56c12b3188d069614d18c22752836cd6f2007b68ac6ffb1d0379c29a196a90e76bdc2f55691131eaeac9ab7de89ba943701b6b169427916f8db12d71a06377aa04610d55b0fa779cce74635e1e30d98e13d1fbdb8ddbde36dafa44e6653d853c5424f2105a604a46f9ee2d95389292abcf15e08453fc5c1f1d842d0393e088624f29a7c63383b63836f1f854709430c9b1db4ae5cf44f7546ea442e43cf82006aa22b34c51ff4124a39d76050dad10683491252e1728bd2c013a728de06af1c5db4c2bfc1699f993daf6e374caef7120b54d20bec93623bc"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x80000001}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x138}, 0x1, 0x0, 0x0, 0x48084}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e25, 0x401, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x1007}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r4, &(0x7f0000000b80)=""/212, 0xd4, 0x1, &(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(r5, &(0x7f0000000b00)=[{&(0x7f00000007c0)="5f8a7fe7144c2496305307be4b41820c950821f84b926fd5e986f42a213d9eaf57367967a7df3e2eff0e0dc6d59959c43f2aaf7faadd696268e331c1ecf98e237ab7b4503336cd666460d754ddd1bfae06119a38a89f7b912619c6276c787114aab5c5015f4dfed9969a2fc785bb9f4af3a2d8526bbbffc35c5b5f2acf6bcc6fc52f7599a4402841b3be58db11f1248b8f2160410402008bf76c23be94148e6cc56385f8ddb6a095a246b2be87602f03a4898d8a023551bcbf1f43d176056cb7", 0xc0}, {&(0x7f0000000880)="1dbe1a209e9a51e8b312fcc2d9c453fb452178077c7b03f2d26fbe66e505acec949685c793e66fe7d17898e57c992bb1a3d1d896215ac7b36c6811b7044d32a8f614ca028b02596efaac6d42d8f4f1afadff3c0950986bc6949fb53347e7e2341e0ee58b02b0df6a69f411afbe65a4573831de03fa", 0x75}, {&(0x7f0000000900)="cd255eb35e1f50880d4e64427b7da3d3a70dda9670faa22e701e5f6acfcdd9acabab18f2c3d9a33399de5537cb44df9c0f146ab596f0927d3de7d07941a0b5a954538fc9b7490b97ec34ddd42d3f5bb868e8f93e45", 0x55}, {&(0x7f0000000980)="5ab16cb55f8d600489e343058016bcf13743c9a9d9dc3968fcc8ac688206953b038d55ff21014279eaf0fb61d0608e48da8ea88d335950d4440dfe5fbffd5a9aa41415e3154bf87b3e2e5b1bc8ceefc3d7b43de2c272c8f8a3e9317e685da7d9a7bc8f5a99e146d81827ed299c0e489f0c1757bdbb2045d77b53e3d2f2875a9661cc6b6c65462033d82ad96281f3b5be2c585c9a8915", 0x96}, {&(0x7f0000000a40)="72226bb68bb545362e699509f22de76f1ea7f9ff2523a7ebd7feca266a0d3f6d642401c252c91254cfb6c3ff73724193da7d9bf5fa798a42bd42f69b23d498f7ed2d2488ccfb9b7f2b4d2b20513809be4db21a0ccd6afa241d25fe784fae7b7eedac5408e2f98b42c99e403d11701ca461761cb8fdda0bc9917ed31ac064b4e15ba3f20b91b1f599d7bf5acff2a260d4743ac11238cb979b518b2f95bc300afea69045", 0xa3}], 0x5) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) write(r5, &(0x7f0000000080)="05000000010001", 0x7) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="07000000010000", 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r5, @ANYBLOB="d85042fcd80a1853f399d0d77d947848816c9f3238327300a15deabe4c04a558e19c90b5013b88595246443a2ef757c9f5ac5d29567b481f06f52b70db6f1c6abbf54cf4b017c2c00278a22cbb28f8d4d24e606930557490b791ae745a7385e424feeb10c8e67ac03a830d64b9d657a162ba1ed96a2f2df53e1bc0cd7caa5d5e7fc4cfdbdddd82b68244cd6201105aaf7eef7c0804b4b3e85067be02949fcdeb2270882c1896fe"], 0x90}}, 0x24040040) socket$inet(0x2, 0x1, 0x100) close(0x3) 726.965981ms ago: executing program 4 (id=2586): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r1, 0x2) recvmsg(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/43, 0x2b}], 0x1}, 0x40000002) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8}}], 0x1, 0x2163, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket(0x2, 0x80805, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, &(0x7f00000002c0)=0x84) sendmmsg$inet_sctp(r5, &(0x7f0000006ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="203b000000000000840000000200000004000400ffffff7f521ad462b51161eab05e293b2ab0f90677fac27458e6afeb87cb63b3c9e8bf861bc5d48201ce3c5c8acb611e52a58eefa8ccc1acb917538958fc9fc29b090a4dfb425cf651b5169c9bf4d190bdf0283a99382ba60e8df41b9ed6f60fd072c298b2c4c9c668749ba9", @ANYRES32=r6], 0x20, 0x80}], 0x1, 0x4040004) 575.616086ms ago: executing program 3 (id=2587): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x22020400) recvmsg(r0, &(0x7f0000001b40)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/67, 0x43}, {&(0x7f0000001780)=""/128, 0x80}, {&(0x7f0000001800)=""/14, 0xe}, {&(0x7f0000001840)=""/40, 0x28}, {&(0x7f0000001880)=""/141, 0x8d}, {&(0x7f0000001940)=""/32, 0x20}, {&(0x7f0000001980)=""/86, 0x56}], 0x9, &(0x7f0000001ac0)=""/102, 0x66}, 0x22) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x1e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000054}, 0x4004) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) write$ppp(r4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2e, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x20008004) 419.415242ms ago: executing program 0 (id=2588): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe0}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x2}, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(0xffffffffffffffff, 0x3) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, 0x0}, 0x40085) sendfile(r0, r3, 0x0, 0x20000000002) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r5, &(0x7f0000000000)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x20000f07, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}, 0x80, 0x0, 0x0, &(0x7f0000000040)}, 0x0) 414.283433ms ago: executing program 2 (id=2589): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdae"], 0x0, 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x1000000, 0x25dfdbfd, {}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x20008044) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e98", 0x2}], 0x1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={r7, 0x80}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000006c0)={r7, 0x48, &(0x7f0000000780)=[@in6={0xa, 0x4e23, 0x4, @mcast1, 0x6}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0xf, @mcast2, 0xb}]}, &(0x7f0000000700)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e24, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x84) 185.198191ms ago: executing program 3 (id=2590): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f030000000000002e100200000000002604fdffff02000014010000030301001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140)={0x5, 0x200}, 0x10}, 0x94) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x4010) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 0s ago: executing program 4 (id=2591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) recvmsg$unix(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000020) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f, 0x5, 0x25dfdbfd, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x4000) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000000000000000a004e2400"], 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x30, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0xf, r2, 0x12, r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000004c0)={r1, &(0x7f0000000300)='vxcan0\x00', 0x400, &(0x7f0000000340)={@align=0x4, {0x0, 0x0, 0x800, 0x6}}, 0x400, &(0x7f0000000400), &(0x7f0000000440)=0xb}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xf, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6836}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x800, 0x92, &(0x7f0000000200)=""/146, 0x21780, 0x4, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x7, 0x1ff}, 0x10, 0xffffffffffffffff, r8, 0x0, &(0x7f0000000580)=[r9], 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r10], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) sendto(0xffffffffffffffff, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) kernel console output (not intermixed with test programs): sim0: Falling back to sysfs fallback for: . [ 246.750311][ T9451] netlink: 'syz.4.1011': attribute type 29 has an invalid length. [ 246.777987][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 246.895522][ T9459] netlink: 'syz.3.1012': attribute type 13 has an invalid length. [ 246.925751][ T9459] netlink: 'syz.3.1012': attribute type 17 has an invalid length. [ 247.072124][ T9459] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 247.450522][ T9465] lo speed is unknown, defaulting to 1000 [ 247.535462][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.847131][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 247.965450][ T9475] syzkaller1: entered promiscuous mode [ 248.005680][ T9475] syzkaller1: entered allmulticast mode [ 248.139382][ T9483] netlink: 'syz.2.1019': attribute type 5 has an invalid length. [ 248.403394][ T9488] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1022'. [ 248.439098][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 248.574931][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.676687][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.685191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.765898][ T9496] netlink: 'syz.3.1024': attribute type 13 has an invalid length. [ 248.801441][ T9496] netlink: 'syz.3.1024': attribute type 17 has an invalid length. [ 249.010187][ T9496] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 249.378478][ T9507] tipc: Enabled bearer , priority 30 [ 249.454807][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.463241][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.616391][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.944609][ T9515] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1032'. [ 250.157649][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 250.195420][ T9521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1035'. [ 250.379261][ T9526] netlink: 'syz.0.1037': attribute type 13 has an invalid length. [ 250.441981][ T9526] netlink: 'syz.0.1037': attribute type 17 has an invalid length. [ 250.477776][ T9530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.486250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.519220][ T9531] netlink: 'syz.2.1038': attribute type 13 has an invalid length. [ 250.545724][ T9526] tipc: Resetting bearer [ 250.553708][ T9531] netlink: 'syz.2.1038': attribute type 17 has an invalid length. [ 250.689256][ T9526] tipc: Resetting bearer [ 250.738937][ T9526] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 250.906517][ T9542] tipc: Enabling of bearer rejected, already enabled [ 251.090869][ T9550] vxcan1: tx drop: invalid da for name 0x00000000000000c7 [ 251.223675][ T9552] netlink: 'syz.3.1045': attribute type 29 has an invalid length. [ 251.277802][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 251.359214][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 251.848389][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'. [ 251.898063][ T9573] syzkaller1: entered promiscuous mode [ 251.935152][ T9573] syzkaller1: entered allmulticast mode [ 252.291541][ T9592] tipc: Enabling of bearer rejected, already enabled [ 252.322722][ T9593] netlink: 'syz.4.1059': attribute type 13 has an invalid length. [ 252.345620][ T9593] netlink: 'syz.4.1059': attribute type 17 has an invalid length. [ 252.979018][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 253.611012][ T9612] netlink: 'syz.2.1063': attribute type 29 has an invalid length. [ 253.699214][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'. [ 253.775646][ T5760] net_ratelimit: 10 callbacks suppressed [ 253.775684][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.809471][ T9618] netlink: 'syz.1.1066': attribute type 13 has an invalid length. [ 253.883191][ T9618] netlink: 'syz.1.1066': attribute type 17 has an invalid length. [ 253.991836][ T9618] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 254.414355][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.422722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.460026][ T9630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.469989][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.825501][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.921685][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 255.745512][ T9654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1077'. [ 255.825719][ T9659] netlink: 'syz.1.1078': attribute type 13 has an invalid length. [ 255.858542][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.865033][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.893654][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.905642][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.915440][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.925279][ T9659] netlink: 'syz.1.1078': attribute type 17 has an invalid length. [ 256.200934][ T9663] syzkaller1: entered promiscuous mode [ 256.252681][ T9663] syzkaller1: entered allmulticast mode [ 256.574569][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1083'. [ 256.812186][ T9681] netlink: 'syz.2.1085': attribute type 13 has an invalid length. [ 256.867177][ T9681] netlink: 'syz.2.1085': attribute type 17 has an invalid length. [ 257.270949][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.829176][ T9688] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1088'. [ 258.147363][ T9704] netlink: 'syz.1.1092': attribute type 13 has an invalid length. [ 258.166366][ T9704] netlink: 'syz.1.1092': attribute type 17 has an invalid length. [ 259.059759][ T995] net_ratelimit: 10 callbacks suppressed [ 259.059782][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.074277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.213849][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.346417][ T9730] netlink: 'syz.4.1101': attribute type 13 has an invalid length. [ 259.393595][ T9730] netlink: 'syz.4.1101': attribute type 17 has an invalid length. [ 259.630292][ T9730] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 259.810887][ T9734] syzkaller1: entered promiscuous mode [ 259.860036][ T9734] syzkaller1: entered allmulticast mode [ 260.191696][ T8127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.200131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.257477][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.478159][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.605118][ T9765] syzkaller1: entered promiscuous mode [ 261.614794][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.621451][ T9765] syzkaller1: entered allmulticast mode [ 261.647233][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.042067][ T9774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1114'. [ 262.117191][ T9774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1114'. [ 262.451077][ T9780] netlink: 'syz.0.1116': attribute type 13 has an invalid length. [ 262.494112][ T9780] netlink: 'syz.0.1116': attribute type 17 has an invalid length. [ 262.625092][ T9780] tipc: Resetting bearer [ 262.696088][ T9786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1118'. [ 262.722973][ T9780] tipc: Resetting bearer [ 262.762652][ T1353] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.769911][ T1353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.855490][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 262.964612][ T9793] tipc: Enabling of bearer rejected, already enabled [ 263.392354][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 264.437548][ T9829] tipc: Enabling of bearer rejected, already enabled [ 264.773158][ T9835] tipc: Enabling of bearer rejected, already enabled [ 264.815679][ T5760] net_ratelimit: 7 callbacks suppressed [ 264.815701][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.185549][ T9841] syzkaller1: entered promiscuous mode [ 265.205460][ T9841] syzkaller1: entered allmulticast mode [ 265.218313][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.226707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.411207][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 265.540942][ T9852] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1140'. [ 265.556937][ T9850] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1139'. [ 265.864625][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.991287][ T9865] tipc: Enabling of bearer rejected, already enabled [ 266.458630][ T9868] tipc: Enabling of bearer rejected, already enabled [ 266.904630][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.935852][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 267.388101][ T6460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.396554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.406262][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.416974][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.433700][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.468786][ T9899] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1155'. [ 267.590074][ T9904] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1157'. [ 267.733319][ T9908] tipc: Enabling of bearer rejected, already enabled [ 268.406855][ T9926] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1165'. [ 268.551293][ T9926] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1165'. [ 268.991025][ T9943] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1169'. [ 269.059812][ T9948] syz_tun: entered allmulticast mode [ 269.166354][ T9948] dvmrp8: entered allmulticast mode [ 269.260002][ T9947] syz_tun: left allmulticast mode [ 269.631266][ T9967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1179'. [ 269.686129][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 269.741095][ T9967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1179'. [ 269.772533][ T9974] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 269.780668][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 269.791238][ T9974] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 269.799230][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 269.817547][ T9974] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 269.835280][ T9974] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 269.859175][ T9974] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 269.876835][ T9974] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 269.898538][ T9974] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 269.921346][ T9974] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 269.943319][ T9974] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 269.962282][ T9974] netlink: 'syz.0.1180': attribute type 29 has an invalid length. [ 270.417701][ T8127] net_ratelimit: 1028 callbacks suppressed [ 270.417721][ T8127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.432082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.574852][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.027236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 271.060000][T10001] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 271.469617][T10015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.500144][T10015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.519676][T10015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.530748][T10015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.541050][T10015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.489970][T10043] __nla_validate_parse: 24 callbacks suppressed [ 272.489991][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 272.730442][T10054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1206'. [ 272.750637][T10052] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 272.791562][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1206'. [ 272.804125][T10052] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 272.818987][T10052] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 273.029187][T10057] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1207'. [ 273.407588][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 273.659772][T10078] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1212'. [ 273.918078][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 274.053219][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 274.187553][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1218'. [ 274.386394][T10091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1218'. [ 274.622753][T10104] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 274.655890][T10104] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 274.681110][T10104] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 275.051136][T10121] validate_nla: 17 callbacks suppressed [ 275.051156][T10121] netlink: 'syz.2.1227': attribute type 13 has an invalid length. [ 275.091937][T10121] netlink: 'syz.2.1227': attribute type 17 has an invalid length. [ 275.228758][T10124] netlink: 'syz.1.1230': attribute type 23 has an invalid length. [ 275.534893][ T995] net_ratelimit: 20 callbacks suppressed [ 275.534914][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.549133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.584148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.250260][T10163] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 276.259942][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.298794][T10163] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 276.327037][T10163] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 276.679264][T10176] netlink: 'syz.1.1251': attribute type 13 has an invalid length. [ 276.703900][T10176] netlink: 'syz.1.1251': attribute type 17 has an invalid length. [ 276.810917][T10176] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 277.118441][T10180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.269785][T10180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.297321][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.324961][T10180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.499493][T10180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.550548][T10198] netlink: 'syz.4.1259': attribute type 13 has an invalid length. [ 277.578469][T10198] netlink: 'syz.4.1259': attribute type 17 has an invalid length. [ 278.053697][T10204] __nla_validate_parse: 12 callbacks suppressed [ 278.053719][T10204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1261'. [ 278.538769][T10223] netlink: 'syz.1.1265': attribute type 13 has an invalid length. [ 278.576213][T10223] netlink: 'syz.1.1265': attribute type 17 has an invalid length. [ 279.070891][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1275'. [ 279.466757][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 279.611859][T10251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.677906][T10251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.765273][T10254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.101388][T10273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.192476][T10273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.284579][T10273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.409204][T10280] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 281.424999][T10278] tipc: Enabling of bearer rejected, already enabled [ 281.433092][T10280] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 281.443070][T10280] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 281.463760][ T8117] net_ratelimit: 340 callbacks suppressed [ 281.469670][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.742695][T10288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1294'. [ 281.805925][T10291] tipc: Enabling of bearer rejected, already enabled [ 282.113646][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1297'. [ 282.504461][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.621898][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 282.688142][T10302] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1300'. [ 283.168101][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1306'. [ 283.220084][T10322] tipc: Enabling of bearer rejected, already enabled [ 283.281214][T10323] tipc: Enabling of bearer rejected, already enabled [ 283.377112][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.385959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.535318][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.597480][T10330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.702413][T10330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.830174][T10337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.869368][T10340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.878367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.946637][T10342] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1312'. [ 284.043541][T10340] syzkaller1: entered promiscuous mode [ 284.063540][T10340] syzkaller1: entered allmulticast mode [ 284.123493][T10345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.220011][T10345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.306741][T10348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.492505][T10352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1317'. [ 284.532446][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1316'. [ 284.575126][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.107100][T10365] tipc: Enabling of bearer rejected, already enabled [ 285.590255][T10367] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 285.604704][T10367] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 285.627093][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.655123][T10367] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 285.679528][T10371] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1324'. [ 285.910143][T10380] netlink: 'syz.2.1327': attribute type 8 has an invalid length. [ 285.924739][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 285.981401][T10380] bond0: entered promiscuous mode [ 285.999369][T10380] bond_slave_0: entered promiscuous mode [ 286.006388][T10385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1328'. [ 286.027849][T10380] bond_slave_1: entered promiscuous mode [ 286.046119][T10380] gretap0: entered promiscuous mode [ 286.052473][T10380] dummy0: entered promiscuous mode [ 286.063356][T10380] dummy0: left promiscuous mode [ 286.070004][T10380] bond0: left promiscuous mode [ 286.081668][T10380] bond_slave_0: left promiscuous mode [ 286.094140][T10380] bond_slave_1: left promiscuous mode [ 286.113704][T10380] gretap0: left promiscuous mode [ 286.117029][T10391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.240849][T10384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.366302][T10396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1331'. [ 286.377862][T10384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.648239][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1333'. [ 286.658474][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.657181][T10429] sctp: [Deprecated]: syz.3.1342 (pid 10429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.657181][T10429] Use struct sctp_sack_info instead [ 287.694787][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.710472][T10432] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.857598][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.866191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.547290][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 288.616761][T10463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.709172][T10456] syzkaller1: entered promiscuous mode [ 288.731143][T10463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.742394][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.763239][T10456] syzkaller1: entered allmulticast mode [ 288.859463][T10463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.136008][ T6460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.144480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.599751][T10481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.678268][T10481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.760253][T10483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.771434][T10484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.785000][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.800170][T10483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.037439][T10515] netlink: 'syz.2.1371': attribute type 10 has an invalid length. [ 291.092377][T10519] netlink: 'syz.2.1371': attribute type 10 has an invalid length. [ 291.129860][T10519] batman_adv: batadv0: Interface deactivated: dummy0 [ 291.147075][T10519] batman_adv: batadv0: Removing interface: dummy0 [ 291.231999][T10515] team0: Port device dummy0 added [ 291.408172][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'. [ 291.484253][T10524] veth0_macvtap: left promiscuous mode [ 291.636587][T10540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.706256][T10530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.802569][T10530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.840119][T10544] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 291.854327][ T5760] net_ratelimit: 21 callbacks suppressed [ 291.854346][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.645736][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 292.864614][T10571] IPVS: Scheduler module ip_vs_sip not found [ 292.894171][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.152128][T10582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.175742][T10582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.196819][T10582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.222994][T10579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.238063][T10579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.374182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.563505][T10593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.657455][T10593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.700497][T10596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.709819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.786031][T10593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.087094][T10605] netlink: 'syz.1.1405': attribute type 4 has an invalid length. [ 294.145898][T10606] netlink: 'syz.1.1405': attribute type 4 has an invalid length. [ 294.196873][ T5821] lo speed is unknown, defaulting to 1000 [ 294.228020][ T5821] syz2: Port: 1 Link DOWN [ 294.263025][ T5760] lo speed is unknown, defaulting to 1000 [ 294.284808][ T5760] syz2: Port: 1 Link ACTIVE [ 294.341204][T10610] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1409'. [ 294.436864][T10615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1411'. [ 294.867516][T10626] netlink: 'syz.1.1415': attribute type 29 has an invalid length. [ 294.876563][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 295.605585][T10648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1423'. [ 295.654209][T10648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1423'. [ 295.710731][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 295.739686][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 296.023251][T10659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.109264][T10659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.174892][T10661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.516798][T10665] macsec1: entered promiscuous mode [ 297.055022][ T8117] net_ratelimit: 4 callbacks suppressed [ 297.055042][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.457619][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.466318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.632934][T10695] netlink: 'syz.3.1441': attribute type 29 has an invalid length. [ 297.663390][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 297.705661][T10701] netlink: 'syz.3.1441': attribute type 29 has an invalid length. [ 297.734632][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 297.744741][T10701] netlink: 'syz.3.1441': attribute type 29 has an invalid length. [ 297.806103][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 297.850257][T10701] netlink: 'syz.3.1441': attribute type 29 has an invalid length. [ 297.931036][T10701] netlink: 'syz.3.1441': attribute type 29 has an invalid length. [ 298.004242][T10701] netlink: 'syz.3.1441': attribute type 29 has an invalid length. [ 298.036281][T10701] netlink: 'syz.3.1441': attribute type 29 has an invalid length. [ 298.102867][T10701] netlink: 'syz.3.1441': attribute type 29 has an invalid length. [ 298.131247][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.145502][T10701] netlink: 'syz.3.1441': attribute type 29 has an invalid length. [ 298.192651][T10701] netlink: 'syz.3.1441': attribute type 29 has an invalid length. [ 298.209636][T10708] xt_hashlimit: size too large, truncated to 1048576 [ 299.134876][ T8117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.848591][T10749] tipc: Enabling of bearer rejected, already enabled [ 300.003557][T10762] __nla_validate_parse: 20 callbacks suppressed [ 300.003578][T10762] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1464'. [ 300.023285][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.031713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.174716][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.316863][T10768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1467'. [ 300.394975][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1467'. [ 300.694992][T10778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.778970][T10778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.867823][T10781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.153475][ T207] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.179550][ T207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.215427][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.224019][ T207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.261741][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.599274][T10801] ip6erspan0: entered allmulticast mode [ 301.608887][T10804] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1481'. [ 302.259587][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.552120][T10835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.560767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.804032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.818181][ T207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.830020][T10833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.846949][ T207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.884667][T10846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.003222][T10848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.092368][T10846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.295185][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.414788][T10858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1502'. [ 303.590104][T10862] bridge1: entered promiscuous mode [ 303.609915][T10862] bridge1: entered allmulticast mode [ 304.256933][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 304.324003][T10888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.346132][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.415186][T10888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.491288][T10888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.966337][T10905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1519'. [ 304.988529][T10904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.056378][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 305.067534][T10905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1519'. [ 305.081258][T10904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.135144][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.178389][T10904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.282096][T10914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.350497][T10919] trusted_key: syz.3.1523 sent an empty control message without MSG_MORE. [ 305.381331][T10914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.478508][T10914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.489587][T10922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1524'. [ 305.511910][T10922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1524'. [ 305.719001][T10924] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 305.729555][T10924] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 305.741110][T10924] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 306.386503][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1533'. [ 306.417727][T10945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1533'. [ 306.720658][T10951] xt_connbytes: Forcing CT accounting to be enabled [ 306.773738][T10951] xt_CT: No such helper "netbios-ns" [ 306.899299][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'. [ 307.475465][T10967] syzkaller1: entered promiscuous mode [ 307.507269][T10967] syzkaller1: entered allmulticast mode [ 307.526630][ T8116] net_ratelimit: 5 callbacks suppressed [ 307.526649][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.006742][T10984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.110069][T10989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.211099][T10981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.253414][T10992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.408449][T10992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.514961][T10990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.562130][T10999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.570699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.637151][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.829698][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 309.118692][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1554'. [ 309.695313][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.608084][T11045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1568'. [ 310.734617][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.901883][ T207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.910898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.017820][T11051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.140289][T11051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.238036][T11051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.774843][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.799422][T11075] tipc: Enabling of bearer rejected, already enabled [ 311.991993][T11079] openvswitch: netlink: Actions may not be safe on all matching packets [ 312.417422][T11091] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1586'. [ 312.826857][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.128526][T11097] validate_nla: 12 callbacks suppressed [ 313.128548][T11097] netlink: 'syz.0.1589': attribute type 29 has an invalid length. [ 313.159690][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'. [ 313.820678][T11117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.833188][T11116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.855472][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.887728][T11120] tipc: Enabling of bearer rejected, already enabled [ 313.958838][T11116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.965516][T11122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.049814][T11109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.068145][T11122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.142202][T11127] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1598'. [ 314.344642][T11132] lo speed is unknown, defaulting to 1000 [ 314.559864][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 314.896753][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.934553][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.015720][ T207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.024213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.218796][T11166] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1610'. [ 316.276822][T11169] tipc: Enabling of bearer rejected, already enabled [ 316.446394][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 316.507088][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 316.513351][ T1012] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.556916][ T1012] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.586394][ T1012] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.613953][ T1012] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.654455][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.662862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.903247][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'. [ 316.932616][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 316.946468][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 316.977171][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.298418][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.306507][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.507453][T11196] netlink: 'syz.2.1621': attribute type 29 has an invalid length. [ 317.527538][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 317.576249][T11198] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1622'. [ 318.024104][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.060565][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.117994][T11226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.217331][T11228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.309261][T11232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.318325][T11232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.335450][T11232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.336776][T11226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.353618][T11232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.355298][T11232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.378606][T11232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.390464][T11232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.413416][T11232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.653405][T11236] netlink: 'syz.0.1635': attribute type 29 has an invalid length. [ 319.662429][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 319.686956][T11236] netlink: 'syz.0.1635': attribute type 29 has an invalid length. [ 319.705791][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 319.733266][T11236] netlink: 'syz.0.1635': attribute type 29 has an invalid length. [ 319.764551][T11236] netlink: 'syz.0.1635': attribute type 29 has an invalid length. [ 319.775129][T11236] netlink: 'syz.0.1635': attribute type 29 has an invalid length. [ 319.787728][T11236] netlink: 'syz.0.1635': attribute type 29 has an invalid length. [ 319.803368][T11236] netlink: 'syz.0.1635': attribute type 29 has an invalid length. [ 319.843388][T11236] netlink: 'syz.0.1635': attribute type 29 has an invalid length. [ 319.915558][T11236] netlink: 'syz.0.1635': attribute type 29 has an invalid length. [ 319.926081][T11236] netlink: 'syz.0.1635': attribute type 29 has an invalid length. [ 320.233079][T11252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.317543][T11257] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 320.332093][T11258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.340372][T11257] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 320.361826][T11257] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 320.375126][T11255] lo speed is unknown, defaulting to 1000 [ 320.437712][T11248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.693584][T11269] policy can only be matched on NF_INET_PRE_ROUTING [ 320.693610][T11269] unable to load match [ 321.540306][T11283] __nla_validate_parse: 23 callbacks suppressed [ 321.540329][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 321.676942][T11285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.711462][T11285] team0: Port device netdevsim1 added [ 322.422215][T11305] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 322.442872][T11305] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 322.488143][T11305] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 322.925555][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 323.215844][ T8116] net_ratelimit: 17 callbacks suppressed [ 323.215867][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.501884][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'. [ 324.255149][ T8116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.347265][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.392138][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.419387][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.429099][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.445885][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.480812][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.503141][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.521381][T11354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.589653][T11358] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 324.603514][T11354] raw_sendmsg: syz.0.1675 forgot to set AF_INET. Fix it! [ 324.609720][T11358] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 324.619760][T11358] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 325.143490][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 325.372271][T11385] syzkaller1: entered promiscuous mode [ 325.385114][T11385] syzkaller1: entered allmulticast mode [ 327.730668][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 327.741152][T11423] validate_nla: 13 callbacks suppressed [ 327.741171][T11423] netlink: 'syz.2.1697': attribute type 29 has an invalid length. [ 327.759562][T11420] xt_hashlimit: size too large, truncated to 1048576 [ 327.808785][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'. [ 328.536526][T11444] syzkaller1: entered promiscuous mode [ 328.542197][T11444] syzkaller1: entered allmulticast mode [ 329.191561][T11469] netlink: 'syz.3.1712': attribute type 29 has an invalid length. [ 329.200808][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 329.224690][T11469] netlink: 'syz.3.1712': attribute type 29 has an invalid length. [ 329.237055][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 329.246719][T11469] netlink: 'syz.3.1712': attribute type 29 has an invalid length. [ 329.255043][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 329.267101][T11469] netlink: 'syz.3.1712': attribute type 29 has an invalid length. [ 329.281831][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 329.315473][T11469] netlink: 'syz.3.1712': attribute type 29 has an invalid length. [ 329.347559][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 329.369324][T11469] netlink: 'syz.3.1712': attribute type 29 has an invalid length. [ 329.385682][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 329.406649][T11469] netlink: 'syz.3.1712': attribute type 29 has an invalid length. [ 329.425653][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 329.452919][T11469] netlink: 'syz.3.1712': attribute type 29 has an invalid length. [ 329.474420][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 329.499984][T11469] netlink: 'syz.3.1712': attribute type 29 has an invalid length. [ 330.898672][T11509] macsec1: entered promiscuous mode [ 331.426676][T11519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.512141][T11519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.619201][T11519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.938501][T11555] __nla_validate_parse: 18 callbacks suppressed [ 332.938526][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1739'. [ 334.951555][T11580] macsec1: entered promiscuous mode [ 335.402622][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1751'. [ 335.959361][T11613] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1754'. [ 336.308808][T11626] validate_nla: 13 callbacks suppressed [ 336.308829][T11626] netlink: 'syz.0.1759': attribute type 1 has an invalid length. [ 336.464078][T11629] netlink: 'syz.0.1759': attribute type 10 has an invalid length. [ 336.501306][T11629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1759'. [ 336.611357][T11626] 8021q: adding VLAN 0 to HW filter on device bond6 [ 336.707646][T11628] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 336.716431][ T76] net_ratelimit: 60 callbacks suppressed [ 336.716451][ T76] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 336.756661][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1760'. [ 336.770892][T11629] dummy0: entered promiscuous mode [ 336.845011][T11629] bond6: (slave dummy0): Removing an active aggregator [ 336.881731][T11629] bond6: (slave dummy0): Releasing backup interface [ 337.588814][T11653] macsec1: entered promiscuous mode [ 338.278161][ T5645] block nbd0: Receive control failed (result -32) [ 338.437968][T11681] nbd: nbd0 already in use [ 338.449689][T11681] block nbd0: NBD_DISCONNECT [ 338.469749][ T5637] block nbd0: Wrong magic (0x25609513) [ 338.501716][T11681] block nbd0: Send disconnect failed -32 [ 338.507759][ T50] block nbd0: Disconnected due to user request. [ 338.547140][T11683] syzkaller1: entered promiscuous mode [ 338.567929][T11681] block nbd0: Send disconnect failed -32 [ 338.580684][T11683] syzkaller1: entered allmulticast mode [ 338.601372][T11681] block nbd0: Send disconnect failed -32 [ 338.628203][T11681] block nbd0: Send disconnect failed -32 [ 338.700874][T11685] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1773'. [ 338.948429][T11689] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1776'. [ 338.955730][T11696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1779'. [ 339.781638][T11717] syzkaller1: entered promiscuous mode [ 339.816776][T11717] syzkaller1: entered allmulticast mode [ 339.909009][T11723] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1789'. [ 340.050657][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 340.096725][T11730] netlink: 'syz.1.1790': attribute type 12 has an invalid length. [ 340.121259][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 340.138727][T11730] netlink: 'syz.1.1790': attribute type 12 has an invalid length. [ 340.172363][T11733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1791'. [ 340.569798][T11736] macsec1: entered promiscuous mode [ 341.206739][T11748] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1795'. [ 341.270884][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1795'. [ 341.587635][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1800'. [ 342.197857][ T6460] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.228509][ T6461] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.295624][ T6461] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.330221][ T6461] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.198807][T11805] macsec1: entered promiscuous mode [ 343.679037][T11819] syzkaller1: entered promiscuous mode [ 343.685989][T11821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.704042][T11819] syzkaller1: entered allmulticast mode [ 343.772536][T11821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.849182][T11826] tipc: Enabling of bearer rejected, already enabled [ 343.872840][T11821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.108350][T11829] __nla_validate_parse: 5 callbacks suppressed [ 344.108371][T11829] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1821'. [ 344.130977][T11831] netlink: 'syz.1.1822': attribute type 1 has an invalid length. [ 344.155598][T11833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.268917][T11833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.314797][T11831] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.404916][T11838] bond2: (slave dummy0): making interface the new active one [ 344.418257][T11838] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 344.430946][T11839] : renamed from dummy0 (while UP) [ 344.582000][T11842] batadv_slave_0: entered promiscuous mode [ 344.603701][T11842] batadv_slave_0: left promiscuous mode [ 344.758806][T11848] tipc: Enabling of bearer rejected, failed to enable media [ 344.772065][T11848] +: renamed from syzkaller0 [ 345.044365][T11861] tipc: Enabling of bearer rejected, already enabled [ 345.131230][T11863] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1834'. [ 345.366823][T11870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1837'. [ 345.392007][T11866] syzkaller1: entered promiscuous mode [ 345.409289][T11866] syzkaller1: entered allmulticast mode [ 345.443005][T11870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1837'. [ 345.767916][T11882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1840'. [ 345.856291][T11883] tipc: Enabling of bearer rejected, already enabled [ 346.611661][T11894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.715113][T11902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.759667][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 346.794490][T11903] tipc: Enabling of bearer rejected, already enabled [ 346.836401][T11894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.293128][T11912] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1849'. [ 347.361356][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1849'. [ 347.479805][T11917] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1851'. [ 351.608023][T11962] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 351.630934][T11962] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 351.651119][T11962] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 351.728449][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 351.821415][T11964] syzkaller1: entered promiscuous mode [ 351.847303][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1864'. [ 351.865086][T11964] syzkaller1: entered allmulticast mode [ 352.355661][T11989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.449824][T11989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.550701][T11987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.787489][T11999] tipc: Enabling of bearer rejected, already enabled [ 353.278476][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1874'. [ 353.699237][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 353.723149][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'. [ 353.752755][T12020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.760188][T12020] IPv6: NLM_F_CREATE should be set when creating new route [ 353.838294][T12022] netlink: 'syz.2.1880': attribute type 1 has an invalid length. [ 353.890947][T12022] 8021q: adding VLAN 0 to HW filter on device bond4 [ 353.977091][T12029] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 353.986976][T12029] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 353.995940][T12029] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 354.142542][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 354.157946][T12036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.222316][T12036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.339291][T12041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.453466][T12044] tipc: Enabling of bearer rejected, already enabled [ 355.215136][T12059] syzkaller1: entered promiscuous mode [ 355.239844][T12059] syzkaller1: entered allmulticast mode [ 355.288321][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 355.357526][T12062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.364882][T12062] IPv6: NLM_F_CREATE should be set when creating new route [ 355.453223][T12065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.558615][T12065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.646499][T12065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.093123][T12084] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 357.109881][T12087] tipc: Enabling of bearer rejected, already enabled [ 357.131189][T12084] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 357.166116][T12084] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 357.240299][T12088] syzkaller1: entered promiscuous mode [ 357.253385][T12088] syzkaller1: entered allmulticast mode [ 357.558586][T12093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.688377][T12093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.880154][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1904'. [ 357.909992][T12100] syzkaller1: entered promiscuous mode [ 357.947867][T12100] syzkaller1: entered allmulticast mode [ 358.395604][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1908'. [ 358.442413][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.454055][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1908'. [ 358.467880][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.477872][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.492908][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.687864][T12115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.784990][T12115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.808871][T12115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.584190][T12131] tipc: Enabling of bearer rejected, already enabled [ 359.773130][T12139] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 359.792875][T12139] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 359.802791][T12139] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 359.872042][T12141] syzkaller1: entered promiscuous mode [ 359.886957][T12141] syzkaller1: entered allmulticast mode [ 360.058745][T12145] netlink: 'syz.1.1918': attribute type 4 has an invalid length. [ 360.096706][ T8117] lo speed is unknown, defaulting to 1000 [ 360.116240][ T8117] syz2: Port: 1 Link DOWN [ 360.125150][T12145] netlink: 'syz.1.1918': attribute type 4 has an invalid length. [ 360.165268][ T5730] lo speed is unknown, defaulting to 1000 [ 360.180079][ T5730] syz2: Port: 1 Link ACTIVE [ 360.243507][T12147] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 360.276453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.489202][T12152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.504845][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1922'. [ 360.628881][T12152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.035905][T12167] tipc: Enabling of bearer rejected, already enabled [ 361.158994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 361.265152][T12173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.348411][T12173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.453631][T12175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.511278][T12177] netlink: 'syz.3.1930': attribute type 1 has an invalid length. [ 361.552141][T12177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.592606][T12177] bond2: (slave veth7): Enslaving as an active interface with a down link [ 361.627413][T12177] bond2: (slave dummy0): making interface the new active one [ 361.648374][T12177] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 361.675223][T12179] netlink: 'syz.3.1930': attribute type 10 has an invalid length. [ 361.694614][T12179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1930'. [ 361.749813][T12179] dummy0: entered promiscuous mode [ 361.777275][T12179] bond2: (slave dummy0): Releasing active interface [ 362.172811][T12195] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 362.216477][T12195] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 362.246467][T12195] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 362.607501][T12212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.609613][T12210] lo speed is unknown, defaulting to 1000 [ 362.678383][T12212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.696397][T12212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.725572][T12215] syzkaller1: entered promiscuous mode [ 362.731325][T12215] syzkaller1: entered allmulticast mode [ 363.161045][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1944'. [ 363.238239][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1943'. [ 363.375394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 363.438294][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1945'. [ 363.475814][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.192862][T12248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1951'. [ 364.482898][T12256] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 364.508636][T12257] tipc: Enabling of bearer rejected, already enabled [ 364.517867][T12256] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 364.534890][T12256] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 364.817441][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1957'. [ 365.369639][T12274] syzkaller1: entered promiscuous mode [ 365.411574][T12274] syzkaller1: entered allmulticast mode [ 365.540304][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1965'. [ 365.789459][T12286] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.809220][T12287] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 365.840660][T12287] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 366.156463][T12298] tipc: Enabling of bearer rejected, already enabled [ 366.290942][T12304] netlink: 'syz.3.1970': attribute type 29 has an invalid length. [ 366.312442][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 367.523001][T12328] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 367.569107][T12328] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 367.583267][T12328] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 367.665801][T12336] syzkaller1: entered promiscuous mode [ 367.688495][T12336] syzkaller1: entered allmulticast mode [ 367.742078][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1980'. [ 367.760910][T12340] syzkaller0: entered promiscuous mode [ 367.768460][T12340] syzkaller0: entered allmulticast mode [ 368.013424][T12346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1982'. [ 368.617626][T12351] tipc: Enabling of bearer rejected, already enabled [ 368.882629][T12372] netlink: 'syz.3.1988': attribute type 29 has an invalid length. [ 368.927978][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 368.968632][T12369] netlink: 'syz.3.1988': attribute type 29 has an invalid length. [ 368.980276][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 369.053612][T12369] netlink: 'syz.3.1988': attribute type 29 has an invalid length. [ 369.071902][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 369.093177][T12376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.113046][T12369] netlink: 'syz.3.1988': attribute type 29 has an invalid length. [ 369.145366][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 369.201891][T12369] netlink: 'syz.3.1988': attribute type 29 has an invalid length. [ 369.238269][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 369.255011][T12369] netlink: 'syz.3.1988': attribute type 29 has an invalid length. [ 369.269398][T12376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.276711][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 369.311901][T12369] netlink: 'syz.3.1988': attribute type 29 has an invalid length. [ 369.339100][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 369.356288][T12369] netlink: 'syz.3.1988': attribute type 29 has an invalid length. [ 369.436088][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 369.446987][T12369] netlink: 'syz.3.1988': attribute type 29 has an invalid length. [ 369.466692][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 369.476463][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 369.773654][T12397] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 369.803253][T12397] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 369.863989][T12397] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 370.267855][T12408] tipc: Enabling of bearer rejected, already enabled [ 370.591020][T12413] syzkaller1: entered promiscuous mode [ 370.624279][T12413] syzkaller1: entered allmulticast mode [ 371.146553][T12418] syzkaller1: entered promiscuous mode [ 371.191110][T12418] syzkaller1: entered allmulticast mode [ 372.709219][T12428] syzkaller0: entered promiscuous mode [ 372.737491][T12428] syzkaller0: entered allmulticast mode [ 372.751793][T12442] sctp: [Deprecated]: syz.3.2009 (pid 12442) Use of int in maxseg socket option. [ 372.751793][T12442] Use struct sctp_assoc_value instead [ 374.854682][T12455] __nla_validate_parse: 18 callbacks suppressed [ 374.854752][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'. [ 376.993706][T12449] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2010'. [ 377.337848][T12474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2018'. [ 377.367533][T12472] lo speed is unknown, defaulting to 1000 [ 377.538886][T12480] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 377.563285][T12480] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 378.181453][T12465] scsi_nl_rcv_msg: discarding partial skb [ 378.462314][T12497] syzkaller1: entered promiscuous mode [ 378.476339][T12497] syzkaller1: entered allmulticast mode [ 378.629011][T12505] syzkaller0: entered promiscuous mode [ 378.647855][T12505] syzkaller0: entered allmulticast mode [ 378.735594][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.744104][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.922553][T12507] tipc: Enabling of bearer rejected, already enabled [ 379.379977][T12527] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2030'. [ 379.500994][T12534] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 379.527777][T12534] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 379.691765][T12540] xt_hashlimit: size too large, truncated to 1048576 [ 379.734169][T12541] syzkaller0: entered promiscuous mode [ 379.751679][T12541] syzkaller0: entered allmulticast mode [ 380.179678][T12553] syzkaller0: entered promiscuous mode [ 380.193388][T12553] syzkaller0: entered allmulticast mode [ 380.440982][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2041'. [ 380.510437][T12558] bond7: entered promiscuous mode [ 380.518116][T12558] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.631587][T12558] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.699504][T12558] bond7: (slave sit2): The slave device specified does not support setting the MAC address [ 380.759133][T12558] bond7: (slave sit2): Error -95 calling set_mac_address [ 380.836666][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'. [ 380.888305][T12580] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2046'. [ 381.019904][T12576] syzkaller0: entered promiscuous mode [ 381.030428][T12576] syzkaller0: entered allmulticast mode [ 381.076462][T12576] tipc: Enabled bearer , priority 0 [ 381.101463][T12575] tipc: Resetting bearer [ 381.234038][T12586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2049'. [ 381.245201][T12575] tipc: Disabling bearer [ 381.661924][T12598] syzkaller1: entered promiscuous mode [ 381.712013][T12598] syzkaller1: entered allmulticast mode [ 381.836154][T12610] sctp: [Deprecated]: syz.2.2056 (pid 12610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.836154][T12610] Use struct sctp_sack_info instead [ 381.942831][T12610] blkio.reset_stats is deprecated [ 381.980161][T12610] ip6erspan0: entered allmulticast mode [ 382.344239][T12615] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 382.368708][T12615] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 382.852482][T12620] macsec1: entered promiscuous mode [ 383.566289][T12641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.596912][T12641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.678255][T12641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.181236][T12646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2066'. [ 384.323651][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2068'. [ 384.377765][T12648] smbdirect: ib_dev[syz2] removed [ 384.440796][T12654] syzkaller0: entered promiscuous mode [ 384.473796][T12654] syzkaller0: entered allmulticast mode [ 384.513497][T12657] tipc: Enabled bearer , priority 0 [ 384.547022][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 384.566330][T12653] tipc: Resetting bearer [ 384.668489][T12653] tipc: Disabling bearer [ 385.510349][T12681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.615810][T12680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.800244][T12687] netlink: zone id is out of range [ 385.828711][T12687] validate_nla: 16 callbacks suppressed [ 385.828803][T12687] netlink: 'syz.1.2077': attribute type 3 has an invalid length. [ 385.878711][T12687] atomic_op ffff888028b8a198 conn xmit_atomic 0000000000000000 [ 385.918362][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2079'. [ 386.193228][T12702] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2082'. [ 386.506876][T12702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2082'. [ 386.552527][T12707] syzkaller1: entered promiscuous mode [ 386.580389][T12707] syzkaller1: entered allmulticast mode [ 386.757482][T12715] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 387.147590][T12718] syzkaller0: entered promiscuous mode [ 387.159640][T12718] syzkaller0: entered allmulticast mode [ 387.422040][T12734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2089'. [ 387.667049][T12733] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 387.683432][T12733] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 387.704329][T12742] syzkaller0: entered promiscuous mode [ 387.717410][T12742] syzkaller0: entered allmulticast mode [ 387.839669][T12745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2092'. [ 388.009189][T12747] syzkaller0: entered promiscuous mode [ 388.044515][T12747] syzkaller0: entered allmulticast mode [ 388.205883][T12759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.240271][T12759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.304481][T12760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2096'. [ 388.354097][T12755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.439536][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2097'. [ 388.484598][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2097'. [ 388.542482][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2097'. [ 388.546247][ T6461] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.565581][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2097'. [ 388.600468][ T6461] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.625713][ T6461] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.650445][ T6461] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.822543][T12778] geneve3: entered promiscuous mode [ 389.074057][T12783] syzkaller0: entered promiscuous mode [ 389.080613][T12783] syzkaller0: entered allmulticast mode [ 389.532203][T12800] netlink: 'syz.3.2108': attribute type 1 has an invalid length. [ 389.693437][T12800] bond3: entered promiscuous mode [ 389.699336][T12800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.786811][T12804] bond3: (slave bridge3): making interface the new active one [ 389.812090][T12804] bridge3: entered promiscuous mode [ 389.826962][T12804] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 389.860198][T12800] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 389.873940][T12800] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 390.100739][T12809] syzkaller0: entered promiscuous mode [ 390.107061][T12809] syzkaller0: entered allmulticast mode [ 390.115717][T12815] syzkaller0: entered promiscuous mode [ 390.121472][T12815] syzkaller0: entered allmulticast mode [ 390.157637][T12819] tipc: Enabled bearer , priority 0 [ 390.191245][T12813] tipc: Resetting bearer [ 390.276495][T12813] tipc: Disabling bearer [ 393.811991][T12870] __nla_validate_parse: 4 callbacks suppressed [ 393.812028][T12870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2119'. [ 393.848142][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 397.162757][T12893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2122'. [ 397.233113][T12895] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 397.277213][T12895] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 397.313294][T12895] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 397.726282][T12920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2129'. [ 397.759461][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 398.192987][T12931] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2132'. [ 398.218700][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 398.406686][T12934] syzkaller1: entered promiscuous mode [ 398.463010][T12934] syzkaller1: entered allmulticast mode [ 398.505139][T12938] syzkaller0: entered promiscuous mode [ 398.520949][T12938] syzkaller0: entered allmulticast mode [ 399.400977][T12947] macsec1: entered promiscuous mode [ 399.472398][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2139'. [ 399.522321][T12959] netlink: 'syz.0.2140': attribute type 4 has an invalid length. [ 399.573172][T12957] netlink: 'syz.0.2140': attribute type 4 has an invalid length. [ 399.876782][T12958] syzkaller0: entered promiscuous mode [ 399.899408][T12958] syzkaller0: entered allmulticast mode [ 400.011495][T12962] bond3: entered promiscuous mode [ 400.032753][T12962] bond3: entered allmulticast mode [ 400.338827][T12969] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 400.357061][T12969] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 400.396789][T12969] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 401.461928][T12996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2146'. [ 401.484634][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 403.701150][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.712754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.079272][T13011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.119022][T13011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.210628][T13011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.251478][T13013] syzkaller0: entered promiscuous mode [ 404.264676][T13013] syzkaller0: entered allmulticast mode [ 404.733923][T13027] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 404.846198][T13027] syzkaller0: entered promiscuous mode [ 404.859207][T13027] syzkaller0: entered allmulticast mode [ 405.126966][T13034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2155'. [ 405.202277][T13039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2157'. [ 405.507571][T13043] netlink: 'syz.2.2158': attribute type 29 has an invalid length. [ 405.515719][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 405.729484][T13057] syzkaller0: entered promiscuous mode [ 405.753622][T13057] syzkaller0: entered allmulticast mode [ 405.825906][T13061] netlink: 'syz.3.2163': attribute type 1 has an invalid length. [ 406.023448][T13061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 406.032022][T13069] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 406.222018][T13066] bond4: (slave ip6gretap1): making interface the new active one [ 406.246793][T13071] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 406.278473][T13066] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 406.288476][T13071] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 406.302923][T13071] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 406.377869][T13077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2168'. [ 406.401284][T13073] syzkaller0: entered promiscuous mode [ 406.415343][T13073] syzkaller0: entered allmulticast mode [ 406.616290][T13086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2172'. [ 406.710116][T13088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.820477][T13088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.040105][T13095] syzkaller0: entered promiscuous mode [ 407.057958][T13095] syzkaller0: entered allmulticast mode [ 407.486288][T13114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2182'. [ 407.838735][T13123] syzkaller0: entered promiscuous mode [ 407.844572][T13123] syzkaller0: entered allmulticast mode [ 407.877002][T13131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2185'. [ 407.971488][T13131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2185'. [ 408.519389][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2187'. [ 408.533038][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2187'. [ 408.586954][T13153] syzkaller0: entered promiscuous mode [ 408.602698][T13153] syzkaller0: entered allmulticast mode [ 408.851697][T13163] syzkaller0: entered promiscuous mode [ 408.874776][T13163] syzkaller0: entered allmulticast mode [ 408.902404][T13163] 0: reclassify loop, rule prio 0, protocol 800 [ 408.922953][T13168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.006833][T13168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.102684][T13161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.126966][T13175] syzkaller0: entered promiscuous mode [ 409.144643][T13175] syzkaller0: entered allmulticast mode [ 409.447671][T13181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.461242][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.471681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.501149][T13184] syzkaller0: entered promiscuous mode [ 409.507429][T13184] syzkaller0: entered allmulticast mode [ 409.539929][T13181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.161697][T13204] geneve1: entered promiscuous mode [ 410.292752][T13205] __nla_validate_parse: 4 callbacks suppressed [ 410.292775][T13205] netlink: 2988 bytes leftover after parsing attributes in process `syz.4.2203'. [ 410.395082][T13208] syzkaller0: entered promiscuous mode [ 410.418798][T13208] syzkaller0: entered allmulticast mode [ 410.601361][T13213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.610025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.671938][T13213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.680969][ T6464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.719494][T13219] syzkaller0: entered promiscuous mode [ 410.726470][T13219] syzkaller0: entered allmulticast mode [ 410.742962][T13213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.751685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.001737][T13228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2211'. [ 411.080089][T13226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.161978][T13228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2211'. [ 411.473306][T13238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.500431][T13240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2215'. [ 411.512977][T13240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2215'. [ 411.550616][T13238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.631663][T13243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.740182][T13247] syzkaller0: entered promiscuous mode [ 411.755297][T13247] syzkaller0: entered allmulticast mode [ 411.807581][T13246] syzkaller0: entered promiscuous mode [ 411.834232][T13246] syzkaller0: entered allmulticast mode [ 411.927464][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2219'. [ 412.165696][T13259] syzkaller0: entered promiscuous mode [ 412.189096][T13259] syzkaller0: entered allmulticast mode [ 412.518706][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'. [ 412.525074][T13268] syzkaller1: entered promiscuous mode [ 412.550833][T13268] syzkaller1: entered allmulticast mode [ 413.192385][T13280] syzkaller0: entered promiscuous mode [ 413.204695][T13280] syzkaller0: entered allmulticast mode [ 413.390255][T13285] syzkaller0: entered promiscuous mode [ 413.398068][T13285] syzkaller0: entered allmulticast mode [ 413.633062][T13289] syzkaller0: entered promiscuous mode [ 413.667689][T13289] syzkaller0: entered allmulticast mode [ 413.767913][T13293] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2230'. [ 414.072893][T13293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2230'. [ 414.186195][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 414.225528][T13299] syzkaller0: entered promiscuous mode [ 414.232507][T13299] syzkaller0: entered allmulticast mode [ 414.698110][T13317] netlink: 'syz.2.2237': attribute type 1 has an invalid length. [ 414.729742][T13310] syzkaller1: entered promiscuous mode [ 414.763920][T13310] syzkaller1: entered allmulticast mode [ 414.908131][T13317] bond6: entered promiscuous mode [ 414.930563][T13317] 8021q: adding VLAN 0 to HW filter on device bond6 [ 414.990894][T13315] syzkaller0: entered promiscuous mode [ 414.997678][T13315] syzkaller0: entered allmulticast mode [ 415.010408][T13332] netlink: 'syz.1.2238': attribute type 1 has an invalid length. [ 415.029440][T13322] vlan4: entered allmulticast mode [ 415.034835][T13332] netlink: 'syz.1.2238': attribute type 8 has an invalid length. [ 415.045013][T13322] bond6: entered allmulticast mode [ 415.093033][T13327] bond6: (slave bridge2): making interface the new active one [ 415.122853][T13327] bridge2: entered promiscuous mode [ 415.128746][T13327] bridge2: entered allmulticast mode [ 415.140020][T13327] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 415.171429][T13330] vlan2: entered promiscuous mode [ 415.195249][T13330] bridge0: entered promiscuous mode [ 415.216228][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.225051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.513609][T13341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.617208][T13344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.711571][T13337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.383527][T13354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2243'. [ 419.513387][T13356] syzkaller1: entered promiscuous mode [ 419.528198][T13356] syzkaller1: entered allmulticast mode [ 419.652192][T13365] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 419.681970][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'. [ 420.287854][T13367] tipc: Enabled bearer , priority 0 [ 420.305010][T13368] bond1: entered promiscuous mode [ 420.321401][T13368] bond1: entered allmulticast mode [ 420.354984][T13368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.535050][T13371] bridge1: entered promiscuous mode [ 420.561471][T13371] bridge1: entered allmulticast mode [ 420.586575][T13371] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 420.604869][ T6466] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 420.622057][T13369] syzkaller0: entered promiscuous mode [ 420.628830][T13369] syzkaller0: entered allmulticast mode [ 420.670848][T13393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.676606][T13375] bridge2: entered promiscuous mode [ 420.691954][T13375] bridge2: entered allmulticast mode [ 420.708317][T13375] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 420.734475][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 420.747111][T13373] tipc: Resetting bearer [ 420.782109][T13395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.821601][T13360] tipc: Resetting bearer [ 420.877588][T13393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.915080][T13360] tipc: Disabling bearer [ 420.932816][T13385] syzkaller1: entered promiscuous mode [ 420.941867][T13385] syzkaller1: entered allmulticast mode [ 420.974480][ T6460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.983513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.626205][T13418] syzkaller1: entered promiscuous mode [ 421.652304][T13418] syzkaller1: entered allmulticast mode [ 422.119156][T13431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2257'. [ 422.142626][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'. [ 422.156149][T13428] syzkaller1: entered promiscuous mode [ 422.194333][T13428] syzkaller1: entered allmulticast mode [ 422.378400][T13436] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 422.456838][T13436] 8021q: adding VLAN 0 to HW filter on device bond7 [ 422.471682][T13438] tipc: Enabled bearer , priority 0 [ 422.486337][T13438] syzkaller0: entered promiscuous mode [ 422.494126][T13438] syzkaller0: entered allmulticast mode [ 422.500572][T13436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2259'. [ 422.530518][T13436] bond7: entered promiscuous mode [ 422.596493][T13436] team0: Port device dummy0 removed [ 422.697396][T13436] bond7: (slave dummy0): making interface the new active one [ 422.713244][T13436] dummy0: entered promiscuous mode [ 422.754667][T13436] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 422.796933][T13444] tipc: Resetting bearer [ 422.929260][T13437] tipc: Resetting bearer [ 423.019911][T13437] tipc: Disabling bearer [ 423.035297][T13450] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 423.068590][T13450] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 423.116360][T13450] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 424.245929][T13467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.341936][T13468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.455948][T13467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.581375][T13470] syzkaller0: entered promiscuous mode [ 424.593313][T13470] syzkaller0: entered allmulticast mode [ 424.600793][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 424.858461][T13478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2271'. [ 425.218331][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 425.829350][T13494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.925655][T13495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.993829][T13495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.097283][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.107409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.668343][T13503] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 428.709861][T13503] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 428.755177][T13503] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 428.908720][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2282'. [ 428.919706][T13509] syzkaller1: entered promiscuous mode [ 428.928927][T13509] syzkaller1: entered allmulticast mode [ 429.056043][T13512] syzkaller0: entered promiscuous mode [ 429.065716][T13512] syzkaller0: entered allmulticast mode [ 429.091020][T13515] syzkaller0: entered promiscuous mode [ 429.102635][T13515] syzkaller0: entered allmulticast mode [ 429.278071][T13526] tipc: Enabled bearer , priority 0 [ 429.358062][T13526] tipc: Resetting bearer [ 429.364470][T13532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.443878][T13536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.519673][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'. [ 429.541075][T13536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.690788][T13544] syzkaller0: entered promiscuous mode [ 429.712589][T13544] syzkaller0: entered allmulticast mode [ 430.251148][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2293'. [ 430.279010][T13560] netlink: 'syz.2.2295': attribute type 1 has an invalid length. [ 430.287024][T13560] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2295'. [ 430.296744][T13560] netlink: 'syz.2.2295': attribute type 1 has an invalid length. [ 430.405800][T13561] syzkaller1: entered promiscuous mode [ 430.420183][T13561] syzkaller1: entered allmulticast mode [ 430.505490][T13564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.524575][T13564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.542984][T13564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.553031][T13564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.563397][T13564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.586112][T13564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.610873][T13564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.619139][T13565] syzkaller0: entered promiscuous mode [ 430.626525][T13564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.637725][T13565] syzkaller0: entered allmulticast mode [ 430.733649][T13567] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2298'. [ 430.864660][T13571] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 430.893669][T13571] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 430.920651][T13571] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 431.017484][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'. [ 431.088492][T13580] syzkaller0: entered promiscuous mode [ 431.099136][T13580] syzkaller0: entered allmulticast mode [ 431.338226][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2304'. [ 431.659364][T13595] tipc: Enabled bearer , priority 0 [ 431.683135][T13595] syzkaller0: entered promiscuous mode [ 431.689210][T13595] syzkaller0: entered allmulticast mode [ 431.751764][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 431.767152][T13595] tipc: Resetting bearer [ 431.779328][T13593] tipc: Resetting bearer [ 431.811773][T13593] tipc: Disabling bearer [ 431.855172][ T13] net_ratelimit: 20 callbacks suppressed [ 431.855268][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.869488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.708877][T13618] tipc: Enabled bearer , priority 0 [ 432.720451][T13618] syzkaller0: entered promiscuous mode [ 432.728248][T13618] syzkaller0: entered allmulticast mode [ 432.764911][T13618] tipc: Resetting bearer [ 432.792730][T13617] tipc: Resetting bearer [ 432.826589][T13624] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 432.851254][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2319'. [ 432.863139][T13624] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 432.882696][T13624] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 432.896559][T13617] tipc: Disabling bearer [ 433.132358][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 433.344631][T13640] tipc: Enabled bearer , priority 0 [ 433.352392][T13640] syzkaller0: entered promiscuous mode [ 433.358995][T13640] syzkaller0: entered allmulticast mode [ 433.403570][T13640] tipc: Resetting bearer [ 433.417902][T13639] tipc: Resetting bearer [ 433.447017][T13639] tipc: Disabling bearer [ 433.464381][T13642] syzkaller1: entered promiscuous mode [ 433.470168][T13642] syzkaller1: entered allmulticast mode [ 433.599143][T13644] syzkaller0: entered promiscuous mode [ 433.606397][T13644] syzkaller0: entered allmulticast mode [ 434.125483][T13662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2331'. [ 434.245904][T13648] tipc: Resetting bearer [ 434.571315][T13657] veth1_macvtap: left promiscuous mode [ 434.783910][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.828640][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.858787][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.879979][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.911435][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.945659][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.975568][ T1012] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.995841][ T1012] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.021348][T13673] macsec1: entered promiscuous mode [ 435.171696][T13604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.216737][T13677] syzkaller0: entered promiscuous mode [ 435.264122][T13677] syzkaller0: entered allmulticast mode [ 435.360425][T13679] tipc: Enabled bearer , priority 0 [ 435.431760][T13676] tipc: Resetting bearer [ 435.469825][T13685] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 435.499023][T13685] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 435.536815][T13685] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 435.661922][T13676] tipc: Disabling bearer [ 435.866657][T13686] syzkaller1: entered promiscuous mode [ 435.929805][T13686] syzkaller1: entered allmulticast mode [ 436.358209][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2341'. [ 436.596260][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2342'. [ 436.638594][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2342'. [ 436.669248][T13709] netlink: 'syz.0.2342': attribute type 6 has an invalid length. [ 436.702106][T13709] TC_ACT_REPEAT abuse ? [ 436.978890][ T6466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.988268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.778301][T13733] syzkaller0: entered promiscuous mode [ 437.803184][T13733] syzkaller0: entered allmulticast mode [ 440.179934][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.517435][T13747] syzkaller0: entered promiscuous mode [ 440.523045][T13747] syzkaller0: entered allmulticast mode [ 442.747038][ T1353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.755780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.001512][ T5287] veth1_macvtap: entered promiscuous mode [ 443.397377][T13786] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 443.428009][T13786] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 443.471936][T13786] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 443.589876][T13792] tipc: Enabled bearer , priority 0 [ 443.604926][T13799] syzkaller0: entered promiscuous mode [ 443.622498][T13799] syzkaller0: entered allmulticast mode [ 443.822908][T13799] tipc: Resetting bearer [ 443.835749][T13808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'. [ 443.858697][T13790] tipc: Resetting bearer [ 443.887016][T13790] tipc: Disabling bearer [ 443.929895][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2357'. [ 444.445676][T13824] syzkaller1: entered promiscuous mode [ 444.473324][T13830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2361'. [ 444.474932][T13824] syzkaller1: entered allmulticast mode [ 444.745190][T13835] syzkaller1: entered promiscuous mode [ 444.761820][T13837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.772641][T13835] syzkaller1: entered allmulticast mode [ 444.869530][T13837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.913647][T13831] sctp: [Deprecated]: syz.4.2362 (pid 13831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.913647][T13831] Use struct sctp_sack_info instead [ 444.980142][T13837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.708576][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'. [ 445.860038][T13874] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 445.888458][T13874] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 445.911358][T13874] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 445.936793][T13878] syzkaller0: entered promiscuous mode [ 445.954527][T13878] syzkaller0: entered allmulticast mode [ 446.443343][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 446.466749][T13870] bond0: (slave wlan0): Opening slave failed [ 446.605532][T13892] syzkaller0: entered promiscuous mode [ 446.612830][T13892] syzkaller0: entered allmulticast mode [ 446.816256][T13897] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 446.837621][T13897] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 446.853402][T13897] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 447.580059][T13915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.617526][T13916] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2382'. [ 447.642520][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2382'. [ 447.657297][T13915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.742010][T13917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.870979][T13921] syzkaller0: entered promiscuous mode [ 447.892991][T13921] syzkaller0: entered allmulticast mode [ 448.039487][T13924] syzkaller0: entered promiscuous mode [ 448.049094][T13924] syzkaller0: entered allmulticast mode [ 448.134632][T13929] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 448.143093][T13929] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 448.231414][T13929] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 448.495704][ T6464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.504524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.516656][T13934] syzkaller1: entered promiscuous mode [ 448.532420][T13934] syzkaller1: entered allmulticast mode [ 448.953195][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 449.179134][T13951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2393'. [ 449.236928][T13952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2393'. [ 449.529820][T13956] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 449.551849][T13956] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 449.585114][T13956] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 449.781390][T13959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2396'. [ 449.838124][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2396'. [ 449.896464][T13964] syzkaller0: entered promiscuous mode [ 449.902981][T13964] syzkaller0: entered allmulticast mode [ 449.924448][T13964] tipc: Enabled bearer , priority 0 [ 449.986500][T13964] tipc: Resetting bearer [ 450.037205][T13964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.080205][T13962] tipc: Resetting bearer [ 450.149858][T13962] tipc: Disabling bearer [ 450.241858][T13969] syzkaller1: entered promiscuous mode [ 450.268763][T13969] syzkaller1: entered allmulticast mode [ 450.407216][T13973] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 450.423446][T13975] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 450.432245][T13973] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 450.432275][T13973] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 450.539261][T13979] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2403'. [ 450.630751][T13979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2403'. [ 450.695332][T13982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2404'. [ 450.824756][T13986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2405'. [ 450.836148][T13982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2404'. [ 451.429865][T13999] macvlan2: entered promiscuous mode [ 451.448557][T13999] macvlan2: entered allmulticast mode [ 451.468126][T13999] team0: Device macvlan2 is already an upper device of the team interface [ 451.651772][T14005] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 451.707911][T14005] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 451.744199][T14005] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 452.269721][T14012] macsec0: entered promiscuous mode [ 453.127149][T14029] tipc: Enabling of bearer rejected, already enabled [ 453.624787][T14040] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 453.654166][T14040] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 453.676033][T14040] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 454.008291][T14051] __nla_validate_parse: 11 callbacks suppressed [ 454.008327][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 454.081026][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'. [ 454.255628][ T207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.265072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.300909][T14062] syzkaller1: entered promiscuous mode [ 454.332675][T14062] syzkaller1: entered allmulticast mode [ 455.065501][T14077] syzkaller0: entered promiscuous mode [ 455.106443][T14077] syzkaller0: entered allmulticast mode [ 455.390449][T14068] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 455.867651][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'. [ 455.890758][T14095] macsec1: entered promiscuous mode [ 456.034430][T14100] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 456.063337][T14100] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 456.105811][T14100] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 456.959704][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2442'. [ 457.213586][T14118] syzkaller0: entered promiscuous mode [ 457.238762][T14118] syzkaller0: entered allmulticast mode [ 457.530910][T14127] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2445'. [ 458.217831][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 460.026079][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.034516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.580609][T14158] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 460.712929][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2452'. [ 460.796747][T14177] macvtap1: entered promiscuous mode [ 460.825370][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2452'. [ 460.841378][T14177] dummy0: entered promiscuous mode [ 460.865538][T14179] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 460.874149][T14177] macvtap1: entered allmulticast mode [ 460.880024][T14177] dummy0: entered allmulticast mode [ 460.887925][T14179] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 460.913184][T14180] dummy0: left allmulticast mode [ 460.932511][T14179] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 460.955813][T14180] macvtap1: left promiscuous mode [ 460.971042][T14180] macvtap1: left allmulticast mode [ 461.021905][ T995] dummy0: left promiscuous mode [ 461.091726][T14192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2457'. [ 461.126044][T14192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2457'. [ 461.163630][T14193] syzkaller1: entered promiscuous mode [ 461.182091][T14193] syzkaller1: entered allmulticast mode [ 461.367577][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2458'. [ 461.402031][T14200] syzkaller0: entered promiscuous mode [ 461.410903][T14200] syzkaller0: entered allmulticast mode [ 461.433473][T14201] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 461.448363][T14201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2458'. [ 461.876803][T14213] tc action pedit 'at' offset 9 out of bounds [ 462.361657][T14229] tipc: Enabled bearer , priority 0 [ 462.382941][T14229] syzkaller0: entered promiscuous mode [ 462.398803][T14229] syzkaller0: entered allmulticast mode [ 462.408025][T14233] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2469'. [ 462.421797][T14229] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 462.510360][T14229] tipc: Resetting bearer [ 462.517590][T14233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2469'. [ 462.585891][T14228] tipc: Resetting bearer [ 462.662617][T14228] tipc: Disabling bearer [ 462.882219][T14241] syzkaller1: entered promiscuous mode [ 462.916330][T14241] syzkaller1: entered allmulticast mode [ 463.013274][T14250] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 463.025083][T14250] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 463.074085][T14242] syzkaller1: entered promiscuous mode [ 463.076672][T14250] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 463.089712][T14242] syzkaller1: entered allmulticast mode [ 463.436477][T14262] tipc: Enabling of bearer rejected, already enabled [ 464.061829][T14280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2482'. [ 464.300883][T14275] geneve1: left promiscuous mode [ 464.342272][T14275] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 464.466407][T14275] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 465.061305][T14302] syzkaller0: entered promiscuous mode [ 465.068356][T14302] syzkaller0: entered allmulticast mode [ 465.078029][T14300] syzkaller1: entered promiscuous mode [ 465.086819][T14300] syzkaller1: entered allmulticast mode [ 465.231229][T14302] tipc: Enabled bearer , priority 0 [ 465.301254][T14301] tipc: Resetting bearer [ 465.443518][T14301] tipc: Disabling bearer [ 465.468370][T14311] xt_TPROXY: Can be used only with -p tcp or -p udp [ 465.481434][T14315] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 465.503379][T14315] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 465.513461][T14315] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 465.708801][T14321] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2495'. [ 465.721755][T14323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2496'. [ 465.742832][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2495'. [ 465.752837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.769871][T14323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2496'. [ 465.783227][ T6466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.791770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.857322][T14321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.871238][T14321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.880551][T14321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.911044][T14321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.921719][T14321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.930777][T14321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.951757][T14321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.254362][T14339] syzkaller0: entered promiscuous mode [ 466.273955][T14339] syzkaller0: entered allmulticast mode [ 466.577687][T14342] syzkaller1: entered promiscuous mode [ 466.594066][T14342] syzkaller1: entered allmulticast mode [ 466.886137][T14353] tipc: Enabled bearer , priority 0 [ 466.905632][T14353] syzkaller0: entered promiscuous mode [ 466.917544][T14353] syzkaller0: entered allmulticast mode [ 467.199662][T14353] tipc: Resetting bearer [ 467.301244][T14360] bond5: option min_links: invalid value (18446744073709551612) [ 467.324613][T14360] bond5: option min_links: allowed values 0 - 2147483647 [ 467.355394][T14360] bond5 (unregistering): Released all slaves [ 467.420034][T14352] tipc: Resetting bearer [ 467.507660][T14352] tipc: Disabling bearer [ 467.575442][T14370] tipc: Enabled bearer , priority 0 [ 467.731064][T14371] syzkaller0: entered promiscuous mode [ 467.750462][T14371] syzkaller0: entered allmulticast mode [ 467.779242][T14370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2507'. [ 467.818699][T14367] tipc: Resetting bearer [ 467.840248][T14366] tipc: Resetting bearer [ 467.917484][T14366] tipc: Disabling bearer [ 467.967410][T14381] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 468.003131][T14381] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 468.036167][T14381] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 468.108228][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 469.114581][T14398] netlink: 'syz.0.2514': attribute type 1 has an invalid length. [ 469.144741][T14402] geneve0: entered promiscuous mode [ 469.150562][T14402] macvlan2: entered promiscuous mode [ 469.266689][T14406] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2515'. [ 469.870745][T14410] bond2: option min_links: invalid value (18446744073709551612) [ 469.878863][T14410] bond2: option min_links: allowed values 0 - 2147483647 [ 469.900131][T14410] bond2 (unregistering): Released all slaves [ 470.306747][T14438] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2523'. [ 470.345387][T14438] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2523'. [ 470.367899][T14438] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2523'. [ 470.397192][T14438] netlink: 'syz.4.2523': attribute type 6 has an invalid length. [ 470.406517][T14438] netlink: 'syz.4.2523': attribute type 5 has an invalid length. [ 470.420558][T14438] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2523'. [ 470.488687][T14442] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 470.508001][T14442] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 470.518982][T14442] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 470.715442][T14450] netlink: 'syz.2.2526': attribute type 1 has an invalid length. [ 470.723478][T14450] netlink: 'syz.2.2526': attribute type 2 has an invalid length. [ 470.802276][T14454] syzkaller1: entered promiscuous mode [ 470.826779][T14454] syzkaller1: entered allmulticast mode [ 470.899329][ T48] net_ratelimit: 257 callbacks suppressed [ 470.899351][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.914130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.122573][T14461] syzkaller1: entered promiscuous mode [ 471.137896][T14461] syzkaller1: entered allmulticast mode [ 471.197182][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2531'. [ 471.223886][T14463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.242657][T14463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.263170][T14463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.276161][T14463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.737376][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2534'. [ 471.932224][T14476] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2535'. [ 472.038701][T14480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2537'. [ 472.050835][T14480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2537'. [ 472.431780][T14492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.518362][T14492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.612694][T14488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.730256][T14497] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 472.776058][T14497] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 472.812399][T14497] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 473.366232][T14501] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.373761][T14501] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.698580][T14522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2549'. [ 474.492109][ T207] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.540506][ T207] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.592474][ T207] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.641437][ T207] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.732587][ T207] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.774499][ T207] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.822180][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2554'. [ 474.824451][ T207] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.892775][ T207] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.325604][T14557] syzkaller1: entered promiscuous mode [ 475.343022][T14557] syzkaller1: entered allmulticast mode [ 475.583013][T14559] syzkaller0: entered promiscuous mode [ 475.602818][T14559] syzkaller0: entered allmulticast mode [ 475.839876][T14566] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 475.894501][T14566] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 475.926534][T14566] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 475.986274][T14569] netlink: 'syz.1.2560': attribute type 1 has an invalid length. [ 476.009674][T14574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.033949][T14569] netlink: 'syz.1.2560': attribute type 8 has an invalid length. [ 476.118203][T14578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.221472][T14578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.494820][T14614] syzkaller1: entered promiscuous mode [ 477.508688][T14614] syzkaller1: entered allmulticast mode [ 477.833853][T14623] netlink: 'syz.0.2569': attribute type 58 has an invalid length. [ 477.855930][T14623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2569'. [ 477.977166][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2570'. [ 478.012723][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2570'. [ 478.325081][T14635] x_tables: duplicate underflow at hook 2 [ 478.414503][T14638] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2573'. [ 478.721500][T14640] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 478.751481][T14640] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 478.784434][T14640] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 479.022461][T14649] netlink: 'syz.0.2577': attribute type 13 has an invalid length. [ 479.090593][T14651] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 479.152191][T14654] IPVS: sh: FWM 3 0x00000003 - no destination available [ 479.168134][T14654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.195777][T14649] tipc: Resetting bearer [ 479.397610][T14649] tipc: Resetting bearer [ 479.792751][T14657] syzkaller1: entered promiscuous mode [ 479.842352][T14657] syzkaller1: entered allmulticast mode [ 480.128994][T14675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2584'. [ 480.504630][ T6466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.513052][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.661899][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2588'. [ 480.952914][ T50] block nbd0: Receive control failed (result -1) [ 480.959840][ T50] [ 480.962386][ T50] ====================================================== [ 480.969457][ T50] WARNING: possible circular locking dependency detected [ 480.976595][ T50] syzkaller #0 Not tainted [ 480.981066][ T50] ------------------------------------------------------ [ 480.988140][ T50] kworker/u9:0/50 is trying to acquire lock: [ 480.994179][ T50] ffff8880768ab860 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 481.003939][ T50] [ 481.003939][ T50] but task is already holding lock: [ 481.011376][ T50] ffff88807a022a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 481.020427][ T50] [ 481.020427][ T50] which lock already depends on the new lock. [ 481.020427][ T50] [ 481.030856][ T50] [ 481.030856][ T50] the existing dependency chain (in reverse order) is: [ 481.039882][ T50] [ 481.039882][ T50] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 481.047649][ T50] __mutex_lock+0x19d/0x1550 [ 481.052887][ T50] nbd_queue_rq+0x373/0x1150 [ 481.058024][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 481.064216][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 481.071126][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 481.077652][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 481.083220][ T50] process_scheduled_works+0xa8e/0x14e0 [ 481.089361][ T50] worker_thread+0xa47/0xfb0 [ 481.094501][ T50] kthread+0x388/0x470 [ 481.099107][ T50] ret_from_fork+0x514/0xb70 [ 481.104264][ T50] ret_from_fork_asm+0x1a/0x30 [ 481.109586][ T50] [ 481.109586][ T50] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 481.116822][ T50] __mutex_lock+0x19d/0x1550 [ 481.121998][ T50] nbd_queue_rq+0xc1/0x1150 [ 481.127045][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 481.133142][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 481.140091][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 481.146608][ T50] blk_mq_run_work_fn+0x16c/0x300 [ 481.152173][ T50] process_scheduled_works+0xa8e/0x14e0 [ 481.158273][ T50] worker_thread+0xa47/0xfb0 [ 481.163435][ T50] kthread+0x388/0x470 [ 481.168048][ T50] ret_from_fork+0x514/0xb70 [ 481.173187][ T50] ret_from_fork_asm+0x1a/0x30 [ 481.178507][ T50] [ 481.178507][ T50] -> #4 (set->srcu){.+.+}-{0:0}: [ 481.185722][ T50] __synchronize_srcu+0xc9/0x2f0 [ 481.191220][ T50] elevator_switch+0x1e8/0x7b0 [ 481.196678][ T50] elevator_change+0x2fa/0x480 [ 481.201990][ T50] elevator_set_default+0x375/0x440 [ 481.207742][ T50] blk_register_queue+0x3f3/0x4e0 [ 481.213377][ T50] __add_disk+0x6cb/0xe30 [ 481.218305][ T50] add_disk_fwnode+0xfb/0x4b0 [ 481.223547][ T50] nbd_dev_add+0x733/0xb60 [ 481.228601][ T50] nbd_init+0x15f/0x1e0 [ 481.233420][ T50] do_one_initcall+0x250/0x870 [ 481.238722][ T50] do_initcall_level+0x10a/0x1a0 [ 481.244270][ T50] do_initcalls+0x59/0xa0 [ 481.249165][ T50] kernel_init_freeable+0x29d/0x3e0 [ 481.254901][ T50] kernel_init+0x1d/0x1d0 [ 481.259811][ T50] ret_from_fork+0x514/0xb70 [ 481.265028][ T50] ret_from_fork_asm+0x1a/0x30 [ 481.270342][ T50] [ 481.270342][ T50] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 481.278276][ T50] __mutex_lock+0x19d/0x1550 [ 481.283404][ T50] elevator_change+0x1af/0x480 [ 481.288708][ T50] elevator_set_none+0xb5/0x140 [ 481.294101][ T50] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 481.300454][ T50] nbd_start_device+0x189/0xb30 [ 481.305841][ T50] nbd_genl_connect+0x1597/0x1c10 [ 481.311398][ T50] genl_family_rcv_msg_doit+0x233/0x340 [ 481.317597][ T50] genl_rcv_msg+0x614/0x7a0 [ 481.322644][ T50] netlink_rcv_skb+0x226/0x4a0 [ 481.327943][ T50] genl_rcv+0x28/0x40 [ 481.332470][ T50] netlink_unicast+0x7bb/0x940 [ 481.337771][ T50] netlink_sendmsg+0x813/0xb40 [ 481.343076][ T50] sock_sendmsg_nosec+0x13a/0x180 [ 481.348733][ T50] ____sys_sendmsg+0x54e/0x850 [ 481.354030][ T50] ___sys_sendmsg+0x2a5/0x360 [ 481.359247][ T50] __x64_sys_sendmsg+0x1b1/0x290 [ 481.364723][ T50] do_syscall_64+0x174/0x580 [ 481.369924][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.376382][ T50] [ 481.376382][ T50] -> #2 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 481.385019][ T50] blk_alloc_queue+0x544/0x690 [ 481.390333][ T50] __blk_mq_alloc_disk+0x194/0x390 [ 481.395980][ T50] nbd_dev_add+0x494/0xb60 [ 481.400935][ T50] nbd_genl_connect+0x992/0x1c10 [ 481.406409][ T50] genl_family_rcv_msg_doit+0x233/0x340 [ 481.412585][ T50] genl_rcv_msg+0x614/0x7a0 [ 481.417632][ T50] netlink_rcv_skb+0x226/0x4a0 [ 481.423225][ T50] genl_rcv+0x28/0x40 [ 481.427839][ T50] netlink_unicast+0x7bb/0x940 [ 481.433163][ T50] netlink_sendmsg+0x813/0xb40 [ 481.438465][ T50] sock_sendmsg_nosec+0x13a/0x180 [ 481.444029][ T50] ____sys_sendmsg+0x54e/0x850 [ 481.449330][ T50] ___sys_sendmsg+0x2a5/0x360 [ 481.454552][ T50] __x64_sys_sendmsg+0x1b1/0x290 [ 481.460052][ T50] do_syscall_64+0x174/0x580 [ 481.465179][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.471623][ T50] [ 481.471623][ T50] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 481.478884][ T50] fs_reclaim_acquire+0x71/0x100 [ 481.484435][ T50] __kmalloc_noprof+0xbc/0x720 [ 481.489746][ T50] tls_sw_sendmsg+0x599/0x2860 [ 481.495173][ T50] sock_sendmsg_nosec+0x90/0x180 [ 481.500654][ T50] sock_sendmsg+0x1ca/0x2d0 [ 481.505703][ T50] splice_to_socket+0xb5e/0x12a0 [ 481.511205][ T50] direct_splice_actor+0x101/0x160 [ 481.516856][ T50] splice_direct_to_actor+0x57b/0xcb0 [ 481.522768][ T50] do_splice_direct+0x195/0x290 [ 481.528158][ T50] do_sendfile+0x52e/0x7c0 [ 481.533154][ T50] __se_sys_sendfile64+0x144/0x1a0 [ 481.538813][ T50] do_syscall_64+0x174/0x580 [ 481.543945][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.550410][ T50] [ 481.550410][ T50] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 481.558522][ T50] __lock_acquire+0x1520/0x2cf0 [ 481.563942][ T50] lock_acquire+0x106/0x350 [ 481.568990][ T50] lock_sock_nested+0x41/0x100 [ 481.574358][ T50] inet_shutdown+0x6a/0x390 [ 481.579427][ T50] nbd_mark_nsock_dead+0x2cb/0x550 [ 481.585170][ T50] recv_work+0x1cee/0x1e10 [ 481.590145][ T50] process_scheduled_works+0xa8e/0x14e0 [ 481.596250][ T50] worker_thread+0xa47/0xfb0 [ 481.601401][ T50] kthread+0x388/0x470 [ 481.606039][ T50] ret_from_fork+0x514/0xb70 [ 481.611180][ T50] ret_from_fork_asm+0x1a/0x30 [ 481.616495][ T50] [ 481.616495][ T50] other info that might help us debug this: [ 481.616495][ T50] [ 481.626745][ T50] Chain exists of: [ 481.626745][ T50] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 481.626745][ T50] [ 481.639879][ T50] Possible unsafe locking scenario: [ 481.639879][ T50] [ 481.647371][ T50] CPU0 CPU1 [ 481.652793][ T50] ---- ---- [ 481.658230][ T50] lock(&nsock->tx_lock); [ 481.662677][ T50] lock(&cmd->lock); [ 481.669202][ T50] lock(&nsock->tx_lock); [ 481.676179][ T50] lock(sk_lock-AF_INET6-NBD); [ 481.681083][ T50] [ 481.681083][ T50] *** DEADLOCK *** [ 481.681083][ T50] [ 481.689317][ T50] 3 locks held by kworker/u9:0/50: [ 481.694492][ T50] #0: ffff888021293940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 481.705782][ T50] #1: ffffc90000ba7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 481.717561][ T50] #2: ffff88807a022a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 481.726910][ T50] [ 481.726910][ T50] stack backtrace: [ 481.732834][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 481.732855][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 481.732867][ T50] Workqueue: nbd0-recv recv_work [ 481.732901][ T50] Call Trace: [ 481.732963][ T50] [ 481.732996][ T50] dump_stack_lvl+0xe8/0x150 [ 481.733071][ T50] print_circular_bug+0x2e1/0x300 [ 481.733096][ T50] check_noncircular+0x12e/0x150 [ 481.733121][ T50] __lock_acquire+0x1520/0x2cf0 [ 481.733141][ T50] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 481.733220][ T50] ? try_to_wake_up+0x8c5/0x14d0 [ 481.733254][ T50] ? inet_shutdown+0x6a/0x390 [ 481.733279][ T50] lock_acquire+0x106/0x350 [ 481.733296][ T50] ? inet_shutdown+0x6a/0x390 [ 481.733323][ T50] ? __queue_work+0x1ea/0x10a0 [ 481.733352][ T50] lock_sock_nested+0x41/0x100 [ 481.733375][ T50] ? inet_shutdown+0x6a/0x390 [ 481.733401][ T50] inet_shutdown+0x6a/0x390 [ 481.733428][ T50] nbd_mark_nsock_dead+0x2cb/0x550 [ 481.733450][ T50] recv_work+0x1cee/0x1e10 [ 481.733471][ T50] ? __lock_acquire+0x683/0x2cf0 [ 481.733489][ T50] ? register_lock_class+0x31/0x2e0 [ 481.733508][ T50] ? __lock_acquire+0x683/0x2cf0 [ 481.733529][ T50] ? __pfx_recv_work+0x10/0x10 [ 481.733550][ T50] ? do_raw_spin_lock+0x12b/0x2f0 [ 481.733576][ T50] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 481.733600][ T50] ? process_scheduled_works+0xa20/0x14e0 [ 481.733629][ T50] ? rcu_is_watching+0x15/0xb0 [ 481.733650][ T50] ? process_scheduled_works+0xa20/0x14e0 [ 481.733675][ T50] process_scheduled_works+0xa8e/0x14e0 [ 481.733715][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 481.733743][ T50] ? assign_work+0x3cf/0x5d0 [ 481.733768][ T50] worker_thread+0xa47/0xfb0 [ 481.733805][ T50] kthread+0x388/0x470 [ 481.733823][ T50] ? __pfx_worker_thread+0x10/0x10 [ 481.733847][ T50] ? __pfx_kthread+0x10/0x10 [ 481.733865][ T50] ret_from_fork+0x514/0xb70 [ 481.733885][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 481.733904][ T50] ? __switch_to+0xc89/0x1420 [ 481.733930][ T50] ? __pfx_kthread+0x10/0x10 [ 481.733954][ T50] ret_from_fork_asm+0x1a/0x30 [ 481.733987][ T50] [ 482.227285][T14702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2591'. [ 482.354927][T14688] sctp: [Deprecated]: syz.2.2589 (pid 14688) Use of int in max_burst socket option. [ 482.354927][T14688] Use struct sctp_assoc_value instead [ 486.254899][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.263216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog