last executing test programs: 2m40.022239908s ago: executing program 2 (id=2758): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000540)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}, 0x4}}, 0x80, 0x0}, 0x0) 2m38.405988839s ago: executing program 2 (id=2769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000800b85aa99a00002c0000001d0a010300000000000000000a0000020900010073797a31000000000c0010"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m38.145496519s ago: executing program 2 (id=2774): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="2e00000010008188e6b62aa73f72cc9f0ba1f848460000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) 2m37.706361824s ago: executing program 2 (id=2780): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="140000001e002508"], 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2m37.445717403s ago: executing program 2 (id=2785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000cc0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m37.066483118s ago: executing program 2 (id=2790): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270001002bbdc3c6871a129906"], 0x14}}, 0x24000004) 2m31.74880084s ago: executing program 3 (id=2830): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40e0}, 0x44004) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40e0}, 0x44004) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'wg1\x00', 0x1}, 0x18) ppoll(&(0x7f00000004c0)=[{r0, 0x1}], 0x1, &(0x7f0000000540), 0x0, 0x0) (async) ppoll(&(0x7f00000004c0)=[{r0, 0x1}], 0x1, &(0x7f0000000540), 0x0, 0x0) 2m31.424554899s ago: executing program 3 (id=2834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8a}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x200000000000017b}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) 2m30.806882431s ago: executing program 3 (id=2840): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="304400000041d6117771a8df0601ebfeffff00000019017c008006000600840a0000000000000000", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) 2m30.041931797s ago: executing program 3 (id=2848): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r2) sendfile(r2, r1, 0x0, 0xf03a0005) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2b, 'memory'}, {0x2d, 'memory'}, {0x2d, 'hugetlb'}]}, 0x19) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000b000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}, {&(0x7f0000000100)="6d3bd7ed191af89f0f6480ab71c959db27c1157ef28f0795e5860751091a747c0f820f8fea16cb4a8349b2a1dc90859802a544aabc61bf8f596e5d3f23135aa93774696a14aee7b570e50ecf65e40763cf070fb5d129eb80ecabb02cfd03a05eba0ca30c98ab79899c146c7b90a7c599ddf411008785b119035829b07ed1536571100c9167c05119ad3e6fc111e5d141a86eec80e27796773dedf684b7c3ef3f0dfda5990428420e91fcddc183def79a733144afbe1f845b1f61e68ca258e178c1db5b14b08a33c56ca25d510e12bce865ba2307cb731489cb", 0xd9}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@initdev, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) 2m29.746893787s ago: executing program 3 (id=2852): r0 = socket(0x11, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r1], 0x18}, 0x1, 0x0, 0x0, 0x20040814}, 0x400c010) 2m29.300796725s ago: executing program 3 (id=2854): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, r0, 0x11, 0x1008, 0x0, @void, @value=r0}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m21.955243005s ago: executing program 32 (id=2790): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270001002bbdc3c6871a129906"], 0x14}}, 0x24000004) 2m14.09781502s ago: executing program 33 (id=2854): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, r0, 0x11, 0x1008, 0x0, @void, @value=r0}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 1m39.095789065s ago: executing program 4 (id=3149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'netpci0\x00'}}, 0x1e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, &(0x7f0000000540)) getpeername(r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000000000)) 1m37.57587789s ago: executing program 4 (id=3156): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m37.043881567s ago: executing program 4 (id=3159): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) (async) 1m36.301954521s ago: executing program 4 (id=3163): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) sendmsg$unix(r2, &(0x7f0000000140)={&(0x7f0000000300)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}], 0x10}, 0x20000000) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) connect$inet(r1, &(0x7f0000000700)={0x2, 0x4e22, @empty}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000bf00010000000000000911223344551614b1faaac399aabb080045000014fdffffff0016e900012203040506070800000c00020006000600080000000c00030008000c025290e73997bf9e51dec699d9f529e562380a726f9114dd1174d1ec0a50f4cea901db8af0e076abe6caf3e3fb2040e3381aa3e2c8b64368da0973c05c91b0bfae40d4a6c6520da760ab9d95a93121c13083d21a4eaf1c5e2f195fae5e73061c7c79f382c9169477572ce2f69e4ec6e09a6cda44b4c240b3c548fdd34e31a93b2d5fedcd5bdd896f3d1538fffa2adc40e96d717898dfa06ff8dadd"], 0x58}}, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$xdp(r4, &(0x7f0000000680)={&(0x7f0000000280)={0x2c, 0xe, r5, 0x26}, 0x10, &(0x7f0000000640)=[{&(0x7f00000005c0)="bb74f9da6e74d3a1b66fca5c5996817d1c13dddf41dca5e75d641af91ea215266f432234db89d35fde25fa788b5897c69993eb2220500bcaf5b0debe77f30e9ceb881a196f9e675ae594", 0x4a}], 0x1, 0x0, 0x0, 0x20040041}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="f1ffffed3f0a000000006db6e72388835fcf3d11d25d72d08e19b908c3bc424e7409592567a26ff2315f087ccd83c9e461267003f0ab108e62736c7a0f92506e689f233bd6bdc8f97d6dc520499512ef"], 0x30}}, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x100c108, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r8, 0x1000000}, 0x10) (async) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) (async) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r9], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000480)=0x200000) 1m35.962414185s ago: executing program 4 (id=3165): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0), 0x1000000}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="926ef240e06eef491c69e73920e008581798d211135c21b50a5e981b76b94d0ed032cd95f29580cd2a4d3b67690d7662333953452d8abdc51dee784ae4c9cc9811e76a", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000100ac14144100000000000000001400020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) 1m35.674310731s ago: executing program 4 (id=3168): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r4 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="01154e000100001122330000892f07fdcd7788fb6bde50baafa9", 0x1a, 0x4008834, &(0x7f0000000040)={0x11, 0x1c, r5, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r7, r3, 0x4, r3}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r9, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) 1m20.438172919s ago: executing program 34 (id=3168): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r4 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="01154e000100001122330000892f07fdcd7788fb6bde50baafa9", 0x1a, 0x4008834, &(0x7f0000000040)={0x11, 0x1c, r5, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r7, r3, 0x4, r3}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r9, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) 3.697100939s ago: executing program 6 (id=3755): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c00000003"], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002840)={'vcan0\x00', 0x0}) sendmmsg$sock(r9, &(0x7f0000002ac0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x9, @local, 0x7, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)="01c964271a9dbac55e6e020bb000336c748d43f0f79aca9341ea7e76f70da59e4387d24ee96fc274334ed3a58f6941803b42370e51f0de3803b1ae81b86d1a098588bfac12f10508a5d2db5e017a8b3590ab8acf5bdebe71db6ffa703ffd9a405814bf62c5c96f067befbd12f10a982a1cbd3db345e36fa24ddef886504d4ffbd6400c", 0x83}, {&(0x7f00000002c0)="19b02083da0f0e07d2e69cd57bdb1de9e3109e2b81af73bc27991e82b3e9565fd1e9a9ca2e0ca2d0b266da0bf84dc7b826e80760c8ba54f10cfd749d3a2dacc0f22ff893b0380dc14af0675260d3c844eed8bebe38ff7dfe15041d46d7bed8cf6a7c5da2a85550babcb09030c1f8c489ad97abf0182516440083a089fa5c9fa2fd45e6885c576c176c65e6cc8f40de1a3e20069c8c335722d2c793b9b9f2d58fcb29ff2a47eff425efcaeb827c1ed047462cd93a19629f4a904fefc832215bb759212a16cd91b283cc16a99eee7f95bf", 0xd0}, {&(0x7f00000003c0)="dcbb9cba50abab32172aa9f46d429d89a9c8d00c362105de340735538347e491ca326ffd583e99dbfe8893ba11e7bc460cdcfc056bb66c74538c48d3b6bf48b00431f98903942c0ebd18d2b60b9c6ba2eb60a1fd9d37035f54fd7b362ffe7f3501f3b75051e3ee680f341edaef24b96c7ddef0414a2fb240842d619a75abbe4951b5e0f8b352727f93", 0x89}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000580)="669225efd71c250f6bb4993d45103085d28d520be22618456f1baf0a9cbc76b1ce2c27c877374412354e2fa20824dd36cce47b264b009fb1c6b3e992ca323e0b525efde2f7af633d45b2d8ed233e342d3c8f5e948a379690575eb64b2f16765e02da1493b41c57e2063dc30f48db72c790c8955a2906cddf0ec6081c4f84ecf28ce76b9ceebd1f3876072243bf0083870820c0ddb1d4658cb083f0a516f87b32646fc2d83fd87adb130dd984994aea6ef48d956a1f753bf433ff9e39d9be641a8b633274143924d7988c74b0757d77db9d5ba09f98de90171fb7c244a535", 0xde}, {&(0x7f0000000680)="13e5c2e97cffaba5c27a024992719765042f3d904606f34d08a331b325cb422461c3e7cb99ee47fa6fb9f3cf98cb40601605e217703ba8c2550bf80e2fb9fab4df3022bd4800243dbde3683185c4d77a898019d475abe14d62faf095371d71e704f23d713b68f1119a7b2d81a2f0fd4352dcfcf7fccca915048ba758a09cd6d591df19503bc8c7514f223ff9c6c1677727f0589437bde1dc63dd650d8dc2fb23e734acc68eed9a6f4ea5225b708b887fbf3e8d6fb651d8f168ddb10fe800aecff714e6cd7cc0e708cf5437ec42d2b64cc70e0c698ec7420d356890deba75013b85401837361fdae2b3945dc65d4840d6281e", 0xf2}, {&(0x7f0000000780)="6c3c024281e2f3130721a36d68d6c19dbcc41e540a468c8ac743a162113d018257fe34397c8ce906d87e74620a9bf4fdba597f95dc59f1fbd5d0731deac77bf7a8ac60cd25c58f3a3ab6a10113a3191ad08fa53d8b3af78e64bbee6c308105acb00f585c98d28ceaf242b66acacb4887b62f0faefc6f9b53816e26c7fda58fe3bafb8d1b86045a9681578f6942b3191d0b385eae41d1b788266e64279dc23f698038e2015abffc707890939fef6790d84af22f0c06e58aebc48edf9e0e7fad", 0xbf}, {&(0x7f0000000840)="4d58e16f55997bdee77da2363dd2f3968bca5601f043153d3d2e8c9f1e640c1746bf1a834e62a1d490615ac229c070ce80d044b16c508105c9d0df6a1f04162da1ebcfe4e2b350d42842c40c413ef8e243248640e3769b0f41644b1aab26296d480ffa213e08bd2cb3633a50167b5d6b0b0dbd16d6d474cd0c09cc2a1030f1ee591eceb51755166134a692ff01a0ce4139d47e9b420715d71241a0ab82aa32ef476782317070fd57ced32e19fd055856d2d35e", 0xb3}, {&(0x7f0000000900)="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", 0xfe}, {&(0x7f0000000a00)="9eb9e0112f9b55048c8f4e5f47e83d7df6b951809c58cca8fa98140bd1ab6a3809c3bab22abfe72a8c82900c9e91d7dc78e381396574f4e46a0a18a59ede652c71477e165007bb4fe61a8e98f6763703fd5de3df014b936cc946509a98ef9e16827390776b647510e56dd5cde0f9939d2528737792b73d41dab7dce82936c7fb7e136cdf87455b1e0f60c128fb84c29f5db7ebe84ac744d9d2593942c03c03bd2b44fc7d2a0c38c0ecde5db663c3d04c224c369e", 0xb4}, {&(0x7f0000000ac0)="29a3b4a122c6d83e21619993f4697ea38254f15720954905e54f6b4d8499644fad3e3be4250bec5251a08033b74108765cacbf71d25e486334bf2f4d5f6befb74f1ff509fb9ae74959691d9095c38872acb7603e73ed1778636702f43127abf9c00f9a4d65361c5c0a8aff867b91cc4abb011867c92327c2cb6cb055b9b3ca8e296361012c4fa5a6aeefb9832dbb0fa6e42bd28d49150fdcbcfb44759713565f1221ba7870fdf5f88e4ae3063ef050c596a47b27002fff", 0xb7}, {&(0x7f0000000b80)="6c2258b6e9902b7b2d7b2b6905d0740bbb74cc9be77c0bcf445f2de99ab9a249135dc6eac7d31914d5ca4d6dbcccb5b97170b0c58681dc2dfd55d45f6899ae51fc207c373f638a0eb564c0c8a95a8f7de6c6d0d01681c0c4ba254fc353f229f07ee16fcf4faa02eabdf06b6aa5131de1cf253c7e80069ce09b7236643a39f73f9efdd9b04da7fcd8f2ce9c26cc8332c926ff8022fd07a19a41cc9f237e0cb460bf68aa2c2e96a4e954a824d6fed682562872970f066964618439e93682f20c5dd8228adcc1d71f5def94fcdc82bdaf55beda077821a65fac1d1872da99ce60f36ad1e575fb7e", 0xe6}, {&(0x7f0000000c80)="819c054dc37b76db55a532695aeba17019c0593a73ee489c63a297bcf8bf2fb987f9ab9a378e08a11f4d179e131cad0c3a19bc40e248578df4d9408fcbe716e7e9fe0c4ec62be9c729adcda616ba33a36dc1c3a4bfc9129c5071fb59f34a237e97edc4fe7e1b22e1738be0ad5049f7e38245b95b477fb8f05d59870e58", 0x7d}], 0x9, &(0x7f0000000dc0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffff8eb}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000ec0)="78619f6e4ef3b4d128cfb1ea9640743d6ddce425eea4ac0bfc5eb3a8a045a944d688d4928c90906392521e83dfcec1f3443fb77ddea31d46f73070c655b618b25a24f2377e84ff956ee8a8365866f06eb37eb02a7d6a0c7d502b296985eed550dcb645feeece18f56fe178f9d89683aa206d66a33e5e5ad217a6c7767eaf3889bf63efd101dbbab0e9e773f6baa331ff0de8", 0x92}, {&(0x7f0000000f80)="5f5f3c032db83874ab146ab7bb330aad19da41c1c1ef97c64a7ec7ed48436588443a2a7470d8cc76730fec4b89d0533b2dbdf840041927a0d7cd8be9402c98849923482f8943838f2df853a8bce3fee3457d7df684a087d64bed3e9a0c1648615bb8536649731c493ff671dbb98795", 0x6f}, {&(0x7f0000001000)="9523079aeb657b8b26e56a8b8fed2f628321d3d19ca886abdfe381f9c5f513e02b8b03fb9344127c0e7e0f8014318a6a41b13a4ff776ad6ae8bfc87280a3dd244044fed20b0721553c3167d852f7e72e2bc4058d918b018bc76d8a000753ef021c83ba8f8aedbfd80cd2cfc3a2d61058f4b64700d5e96c92602dde1dbb621965d3f3be057493962113238dc3e33bd3c130ab68df9c733b3f364cd163829dc50492a55d185aa98d6b6da52aaa7ba711bb71feba811f514e432a6125d74c06a79252c8878d86d8b18dcb2d2dd228e02f07", 0xd0}, {&(0x7f0000001100)="ec2f0f8ad6d9dab06b1660", 0xb}, {&(0x7f0000001140)="ee46437626fdeebcf86785f69a34b678d6e9cfc3056e39b23c1928382ad5e79900b7936bffcc85b0cc22394086ea9e58a37c63128c08ca11b134dcc7eb4b9818ae8f8e34478e729b0d29f2cf92ad83e4eee5dcf0ad2244f0757673bb4f4db14f2abfce292d1fdecadfd86ff28068eaaa1a6ba928476ab4cd9ed0d52646abb957fb76ef23d1ff3ff9a351afefac00fbfe7b376330d09703ae94a76250336774eb47d4cbe0a4aa5fd7a0e45bfb5e805f5c0464855b2aac497c3715c542673b693018539f380364aaf3b4fdfbe1ecaa4355bdcfc79e487fde4824ea28984abf062b5376b359b5d4f86498c7c815aa617aaa", 0xf0}, {&(0x7f0000001240)="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", 0xfd}, {&(0x7f0000001340)="9dc548342642b5832b2e10346e68fe0491a257245ed9f3003aa7c6cb8b58c49875e21276d6b4266710a1795190a8360128458ea80dd021a81944cbe77332bae6d2e452ae974bd1cc855810b7", 0x4c}, {&(0x7f00000013c0)="5f5cbb6bdae6fd0cc555a474416cea49ecb38ec0336e63bdf42d0ea8ff830ee568391b50fcda82dde6c20acb88026338527221744d9ef925c5e9aafea1a1cf2c08dbe3eed45ddcbea6f4e7d6aaa18a15c6e2176de542cf15f04b0eeec1dc6ab9025a261d19ec4b6d6caa5285711a6cde6678ca863d1bf830d00be08bedd2e5f4c0f9616cda72f70e04e567c32dda0e05feb7f7314d864a", 0x97}], 0x8}}, {{&(0x7f0000001500)=@llc={0x1a, 0x301, 0x7f, 0x2, 0x1, 0x6, @random="c0671d8efa92"}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001580)="1fd40a9eb0e1ab8d6d38d2ee592f3eebd35b749e35687511f6e4def8fd9bd98d052bd4b007", 0x25}, {&(0x7f00000015c0)="cf0f6070d54aa723d6ccf7f8baf2d94af63aeae6149ba7ddb6475f14e777e6d3baaf59e1a2956df6b70a04fce0c9f084642768ecf0bff318a4f653d69969edf9f41d2a8d9c8b7483f67406f510f5387f43c2c8e5cf60f6569b471e78d6434eaa5aab7b5236e7ea9cbe0efa52331437cab5075e2e19b03caa2137209c76525aa3b763ce7dd7649a083870dd734380ba7dffdaa9d891a2132b663aa7b706e81381a48670c00b291df2265fd9650b3c3765d1df8f6514a28a89cc86afaa7b8c5796bd192fb6bd7434099b026b80d2a73f7c53efb9ca1abf78f2e38c34140d115e0f43b4905e", 0xe4}, {&(0x7f00000016c0)}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="a8d0634276a30df6f17633e615e3d795d30fa6e940917c863b72290f2eff15754e813e77dd4a77bbe9e2b4", 0x2b}], 0x5, &(0x7f00000027c0)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xb}}], 0x60}}, {{&(0x7f0000002880)=@ll={0x11, 0x7, r10, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002900)="28f983c71acbacb0", 0x8}, {&(0x7f0000002940)="3bd67d69e3eda5e99e5f403c9709a4daeb95521c6ff8b2b4a74eef7e0d47b770197b2553ef656b3892005019ccb74045f8bf6a09afc130bff690ff2ed9c805d550a523f5ececdfde2d12c72de8464aa90c0b6b6798c3e043f085b7d5f7e25a565f60c0679ab1add69bd504189969565ac7c384e097064b41cef609ecd77035791cb9b5ec3be8ec29a00b4fb3021340928e164effc604c044e8715935", 0x9c}], 0x2, &(0x7f0000002a40)=[@timestamping={{0x14, 0x1, 0x25, 0x76}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x78}}], 0x5, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 3.362090111s ago: executing program 0 (id=3758): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0xf9}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.934419273s ago: executing program 5 (id=3760): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0x7, 0x19, "6a3ec8"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x20008c84) 2.578003041s ago: executing program 5 (id=3763): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/mnt\x00') sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a"], 0x2c}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d6574610000000014000280080001400000001008000240000000051400"], 0xf8}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write(r5, &(0x7f0000000000)="f1002000", 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r3) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x1b, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x20, 0x6, 0x9}}) r12 = socket(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0xd0, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffa}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfffffff7}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xd}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x7}]}}, @TCA_STAB={0x4}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6c, 0x6, 0x0, 0x2, 0x1ff, 0x6aa5b397, 0x2}}, {0x8, 0x2, [0x4, 0xe755]}}, {{0x1c, 0x1, {0x6, 0x5, 0x7, 0xc3, 0x2, 0xff, 0xffffffff, 0x1}}, {0x6, 0x2, [0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x2, 0xc0000000, 0x2, @local, @rand_addr=' \x01\x00', 0x78a8, 0x1, 0x4}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r9, @ANYBLOB="00012bbd7000fedbdf25060000001c000180060005004e220000060001000a000000050002000000000008000400070000000c000680060005004e22000008000400fcffffff08000300040000002c000180080003006401010008000700", @ANYRES32=r11, @ANYBLOB="060005004e21000008000700", @ANYRES8=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r14, @ANYBLOB="24000680060001000a0000000800060008000000080003006401010208000700", @ANYRES32=r15, @ANYBLOB="3c000680060005004e22000008000700", @ANYRES32=r16, @ANYBLOB="060005004e220000050002007f00000008000300e000000108000300ac1414aa0800070068527b847132a6388ae3d0f17e49385487fe60346eb4d9bb4e823f8ffde6f56ff00e932b6f49d7497bdff956797825d96019ecfc794d13e5c1d69d6909816afc9f9dfeaa9d331bfe12b33c6c92ca0d2feab1a06a7d464bf154b2b2c44260fd8a0a9b7b70c05d3d6dd961df6503684a11e1312db066ab0b0088715913abb44831a1de7eb5757f42c31001", @ANYRES32=r3, @ANYBLOB="85742b6e8703fe7a8be69ba215f00c87fa4e7b8178c59fee372166ba487f899a5b3695d13c2db24a772e38a516f7a5bcb2ac1abb7e5628d6f6f03272032cb963b9c4bfa605e8a60b9df4acbc8cd2"], 0xec}, 0x1, 0x0, 0x0, 0x40000000}, 0x800) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000052c50b949d96d9e2dd19d2794a8bcad60a397124ec76ee9a3a8a38e942dcc45e1e0fa2d2e5527b57565e25b861df178e3bdba7e1694db5cae08074bea9bcd6", @ANYRES16=r7, @ANYBLOB="01002cbd7000fddbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) r17 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="00042792ea08b8bbda0cd9aaf257a10004000300000017000600fc0100000000000000000000000000010800040001080000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) 2.142686582s ago: executing program 1 (id=3766): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0xfffc, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipv6_newroute={0x54, 0x18, 0x1, 0x70bd31, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0xfc, 0x2, 0xff, 0xa, 0x2400}, [@RTA_PREF={0x5, 0x14, 0x81}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x89, 0x0, 0x4, 0x0, 0xff, 0x20, 0x4}}, [@rand_addr=' \x01\x00']}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.142008209s ago: executing program 6 (id=3767): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newae={0x70, 0x1e, 0x399, 0x0, 0x0, {{@in6=@mcast1}, @in6=@local}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000dc0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x800, {{@in=@broadcast, @in6=@empty, 0x0, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0xe, 0x0, 0x0, 0x3, 0x7}, {0x100, 0x0, 0x3}, 0x7, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private1, 0x0, 0x32}, 0x0, @in=@multicast2, 0x3502, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff}]}]}, 0xfc}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005", 0xb}], 0x1}, 0x4005) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 2.137789061s ago: executing program 0 (id=3768): socket$nl_netfilter(0x10, 0x3, 0xc) 2.048126995s ago: executing program 5 (id=3769): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0xf4}, 0x1, 0x0, 0x0, 0x24048020}, 0x4885) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x1, 0x10000, {{0x8, 0x4, 0x2, 0xe, 0x20, 0x64, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2b}, {[@ssrr={0x89, 0xb, 0x95, [@rand_addr=0x64010101, @private=0xa010100]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000030c0)={&(0x7f0000000040), 0xc, &(0x7f0000003080)={&(0x7f0000000f00)=@deltfilter={0x2174, 0x2d, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0x5}, {0x8, 0xc}}, [@filter_kind_options=@f_route={{0xa}, {0x210c, 0x2, [@TCA_ROUTE4_POLICE={0xc10, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x10001, 0x200, 0xfffffffa, 0x2, 0x96c, 0x95dc, 0x6, 0x1, 0x8, 0x5, 0x8001, 0x1, 0x9, 0x80000000, 0x1, 0x1ff, 0x7fff, 0xc, 0x9, 0x6, 0x8c, 0x0, 0xf1, 0x1, 0x40, 0x10, 0x6, 0x6, 0x0, 0x800, 0xb, 0x17, 0x8, 0x31, 0x8, 0x3ff, 0x9, 0x9, 0x80c9, 0x100, 0x2, 0x81, 0x7fffffff, 0x9, 0x5, 0x5, 0x2, 0x3ff, 0x2, 0x4, 0x9, 0x9, 0x7, 0x5389, 0x0, 0xb6, 0x64, 0x10001, 0x80000000, 0x3, 0x9, 0x846, 0xfff, 0x81, 0x3, 0x9, 0x400, 0x7fff, 0x4, 0x4, 0x124800, 0x7, 0x3, 0x3000000, 0x8, 0x9, 0x3, 0x400, 0x3, 0x7, 0x1000, 0x9, 0x8, 0x3ff, 0x9, 0x1, 0x1, 0x5, 0x10001, 0xfb8, 0x3, 0x5, 0x4, 0x1, 0x0, 0x7, 0x1ff, 0x9, 0x6, 0x0, 0x7, 0x8001, 0x5, 0xfffffffc, 0x10, 0x1, 0x3, 0x100, 0x800, 0x1ff, 0x6, 0x3, 0x2, 0x9, 0x0, 0x7, 0xf0, 0x2, 0x0, 0x10, 0x5, 0x3, 0x1000, 0xcef, 0x1, 0x9, 0x9, 0x3, 0x9, 0xf, 0x4, 0x107, 0xa, 0x7, 0x9, 0x3, 0xff, 0x8, 0x0, 0x6, 0x9, 0x2, 0x6, 0x4, 0x1000, 0x5339, 0xffff7fff, 0xd2, 0xc807, 0x3, 0xa23f, 0xe1, 0x5, 0x6, 0x7, 0x5, 0x5, 0x1, 0x2, 0x9, 0x4, 0x10001, 0x5, 0x1000000, 0x2, 0x6, 0x1, 0x8, 0xe, 0x7, 0x7, 0x9, 0xfff, 0x5, 0x7, 0x7ff, 0x0, 0x6, 0xe, 0x7, 0x4efc, 0x9, 0x70, 0x40, 0x1, 0x3ff, 0x2d, 0x9, 0x0, 0x101, 0x80, 0x4, 0x1, 0x5, 0x4, 0x6, 0x7, 0x9, 0x3, 0xb86, 0x8, 0x6, 0x400, 0x7, 0x4, 0x1, 0x7, 0xe1, 0x800, 0xffffffff, 0xfffffffc, 0x4, 0x80000001, 0x5, 0x9, 0x200, 0x0, 0x8, 0x6, 0x0, 0x8, 0x2, 0x8000, 0x8, 0x81, 0x6, 0x561, 0x4, 0xe6f9486, 0x9, 0x1000, 0x1, 0xb, 0x2c5e, 0x2, 0xc57, 0x7, 0x3, 0x7ff, 0xe919, 0x44d7813b, 0xa42, 0x9, 0x9, 0x6, 0x1, 0x4, 0x3, 0x100000, 0x5, 0x6, 0x6, 0x3, 0x7, 0xff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd4, 0x9, 0x5, 0x2, 0x1, 0x5, 0x7, 0x9, 0x8, 0x8, 0x2087, 0xffff, 0x5, 0x6, 0x0, 0xffffffff, 0x5, 0x6e2, 0x6, 0x68ce, 0x9, 0x58, 0xfffffff7, 0x1, 0x6, 0xa94, 0xd3, 0x4, 0x10000, 0x3, 0x2, 0x6, 0x8, 0x3, 0xfffffff9, 0x0, 0x7, 0x2, 0x9, 0xc2, 0x4, 0x5, 0x9, 0x4000, 0x3, 0x9, 0x6, 0xe, 0x5, 0x7, 0xffffffff, 0x3, 0x1855, 0x1, 0x9, 0x4, 0x9, 0x1, 0xaf, 0x2, 0x2, 0x8, 0x6, 0x10001, 0xf, 0x5, 0x3d, 0x9, 0x0, 0x8, 0x3, 0x4, 0x862e, 0x3, 0x7, 0x10000, 0x6, 0x9, 0xce5, 0x4, 0x7, 0x1, 0x55b, 0x2, 0x7, 0x8, 0x8000, 0x80, 0x7fff, 0xb, 0x1, 0x1, 0x8, 0x2, 0x5eec, 0x1, 0x79, 0x10, 0x1, 0x467, 0xfffff4b5, 0x1, 0x8000, 0x5, 0x2, 0x8, 0x4, 0x6, 0x10, 0x73, 0xcf, 0xffffffff, 0x9, 0x7fff, 0x5, 0x101, 0x6, 0x6, 0x0, 0xffffa174, 0x7, 0xcc29, 0x1, 0x8, 0xe275, 0x5, 0x40, 0x37a, 0xc, 0x2, 0x4, 0x1, 0xffffff72, 0x9, 0xffffffc0, 0x2, 0x101, 0xf, 0xef34, 0x6, 0x9, 0x9, 0x1, 0x7, 0x9, 0x5, 0x0, 0x801, 0x800, 0x5, 0x2, 0xfffffe00, 0x8001, 0x8, 0x1, 0x8, 0xf4, 0x48000000, 0xf, 0xffffffff, 0x7, 0x4, 0x5e, 0x3ff, 0x4c, 0x100, 0x75a5, 0x7f, 0x1, 0xc0000000, 0x9, 0x80000000, 0x9, 0x101, 0x6, 0xd7, 0x400, 0x7, 0x4, 0x100, 0x9, 0x8, 0x3ff, 0x98f, 0x2, 0x800, 0x10, 0x3, 0x6, 0x6, 0x800, 0x7, 0x0, 0x1, 0x8, 0x2, 0x7, 0x2, 0x3, 0x5, 0x2, 0x2, 0x200, 0x3ff, 0x3, 0xffff0001, 0xe, 0x10001, 0x9, 0x0, 0x2711, 0x7f, 0xfffffffb, 0x2, 0x1, 0x3ff, 0x7ff, 0xffff5f63, 0x6, 0x10000, 0x964, 0x8, 0x6, 0xff, 0xffff, 0x4b, 0x10001, 0xfffffff9, 0x0, 0x7ff, 0x1, 0x44d, 0x200, 0x9, 0x6, 0x9, 0xa, 0x7f, 0x100, 0x3, 0x8, 0x2, 0x0, 0x456, 0xc, 0x40, 0x7, 0xa8c, 0xedbb, 0x7, 0x6, 0x6, 0x5, 0x9, 0x80000000, 0x100]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x0, 0x9, 0x3a2, 0x6, 0x7ff, 0x7, 0x0, 0xfffffbff, 0xffff, 0x1, 0x6, 0xc5, 0x10001, 0x5024, 0x0, 0xffffff3a, 0x9, 0xfffffffe, 0x2, 0x4, 0x6, 0x5, 0x47, 0x1, 0x0, 0x8, 0x3, 0x9, 0x3d, 0xfff, 0x1, 0xd, 0x92, 0xc, 0x8, 0x4, 0x4a, 0xfffffff9, 0xfffffffb, 0xe, 0xe, 0x5a, 0x80000001, 0x10001, 0x56, 0x2, 0x1, 0x7fffffff, 0xe, 0x836, 0xe, 0x9db7, 0x80000001, 0x0, 0x0, 0x401, 0x5d01, 0x6, 0x7, 0x9, 0x7fffffff, 0x2, 0x1, 0x0, 0x5, 0x9, 0x2, 0x9287, 0x0, 0x9, 0x7fff, 0x5, 0x5, 0xbc3f, 0xff, 0x6, 0x5, 0x2, 0x1, 0x578f, 0x200, 0x7, 0xffff, 0xfffffffd, 0x8, 0x4, 0x5, 0x7, 0xe000, 0x3, 0xc, 0x2, 0xe, 0x0, 0x0, 0x8, 0x4, 0x8, 0x4, 0x4e, 0x401, 0x8, 0x0, 0x4, 0x5, 0x1, 0x7, 0x7e1, 0x1, 0x5, 0x6, 0x7fffffff, 0x2, 0x1, 0x8, 0xff, 0x1, 0x7, 0x4, 0xf1, 0x4, 0x27ba, 0x8, 0x5, 0x7fffffff, 0x6, 0x5, 0x1, 0x4, 0x1, 0x6, 0x0, 0x6, 0x4, 0xf, 0xffff36ad, 0x7fffffff, 0x9, 0x4, 0x7fffffff, 0xb, 0x0, 0xfff, 0x8001, 0x87, 0x2, 0x8, 0x7d45, 0x1, 0x1, 0x401, 0x800, 0xfffffc00, 0xe07, 0x0, 0x2, 0x9, 0xc9b, 0x5, 0x3, 0xb, 0x6, 0x1000, 0x6, 0x28, 0xcd86, 0x4, 0xfffffffb, 0x4d, 0xfffffffa, 0x8, 0x400, 0x8b32, 0x1, 0x2, 0x0, 0x7, 0x4, 0xe4, 0x8, 0x80, 0x9, 0x632, 0x9, 0x0, 0x6, 0x16, 0xf94, 0x6, 0x5eef, 0x800, 0x9, 0x8, 0x7, 0x2, 0x2, 0xf4c, 0x5, 0x4, 0x2, 0x2, 0x6, 0x1, 0x101, 0x0, 0x100, 0xe5, 0x2, 0x6, 0xfffffffa, 0x7f, 0xf4ed, 0x5, 0xc402, 0x3, 0xfffffff1, 0xfffffffb, 0x5, 0xfffffffd, 0x0, 0xa, 0x1, 0x7fd, 0x10, 0x6, 0x0, 0xa16, 0xfff, 0x6, 0x80000000, 0x120000, 0x4, 0x5, 0x9, 0x6, 0x5, 0x5, 0x21e0, 0x1, 0x7, 0x6, 0xd, 0xf07, 0x4daa4cc3, 0x9, 0x3, 0x9, 0xffffffff, 0x2, 0x4, 0x10001, 0x7, 0x4, 0x6, 0x3]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xf}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_POLICE={0xc20, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x1, 0x99, 0x3, 0x9, 0x7fffffff, 0x6, 0x4, 0x6, 0x80, 0x3ff, 0xc, 0x5, 0x9, 0x6, 0x0, 0xffffff5c, 0x5, 0x1, 0x4, 0x8, 0x10, 0x738f, 0x9, 0x9, 0x10000, 0x5, 0x2, 0x4a, 0x5, 0x55, 0xe6c0, 0x1, 0x6, 0x5, 0x1, 0x8000, 0x401, 0x5e6c, 0xcc, 0xa0000000, 0x5, 0x1, 0xef, 0x5, 0x3, 0x80000001, 0x40, 0x1, 0xe2, 0x1, 0x1, 0x9, 0x8000, 0x9, 0x1, 0x7fff, 0x4, 0x4, 0xe2, 0x40, 0x7, 0x0, 0x5, 0x8, 0x2, 0x80, 0xcc4, 0x3ff, 0x1, 0x5, 0x7, 0x1, 0x80000000, 0x7fffffff, 0x4, 0xffffffff, 0x6, 0x1, 0x1, 0x284, 0xb9, 0x1, 0x2, 0x8001, 0x35f6, 0x3, 0xde, 0x797, 0x0, 0xfb, 0x487, 0x0, 0x4, 0x3, 0x8efb, 0x2, 0x9, 0x1000, 0xcf, 0x40, 0xf325, 0x9, 0xfff, 0x8, 0x1, 0x8001, 0x1, 0xd2e, 0x6, 0x8, 0x1000, 0x1000, 0x5, 0x6706f8b8, 0x5, 0x9, 0x5, 0x101, 0x7, 0x10a, 0x7fffffff, 0x3, 0x9, 0xff8f, 0x10000, 0xa0, 0x5, 0xe, 0x7, 0x7, 0x4, 0x4, 0x7, 0x2, 0x1, 0x7, 0x5, 0xffff, 0x8, 0x80000000, 0x7ff, 0x800, 0x40, 0x0, 0x9, 0x7, 0x5, 0x8, 0x40, 0x5, 0x101, 0x4, 0x36, 0x7, 0x9, 0x1, 0x3, 0x6, 0x7, 0xfffffff7, 0x3, 0x8, 0xc2ae, 0x2, 0x64d, 0x6, 0x7, 0x3, 0x7fff, 0x0, 0x6d, 0x101, 0x1, 0x2, 0x1, 0x9, 0x9, 0x6, 0x6, 0x8, 0x1, 0x8, 0x3, 0x0, 0x380, 0x2, 0x7, 0xc, 0x3, 0x7, 0x81, 0x6, 0x7, 0x9d3, 0x0, 0x86, 0x7, 0x8, 0x9, 0x7c80, 0x7, 0x6, 0x5, 0x2, 0x4, 0x2, 0x8, 0x7fffffff, 0xff, 0x1b, 0xfffff50e, 0x0, 0xffff0000, 0x1, 0x80, 0x400, 0xffff, 0x0, 0xffff, 0x5, 0xe, 0x5de3, 0x7fffffff, 0x8, 0x8, 0x3, 0xe5, 0x219, 0xd3, 0x3, 0x6, 0x8, 0x1, 0x5, 0x0, 0x2, 0x80000001, 0x4, 0x1, 0x1000, 0x7f, 0x7, 0xa3e, 0x3, 0x8, 0x9, 0x6, 0x0, 0xc, 0x30, 0xff, 0x4, 0xc, 0xb27]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc9a, 0x4c86, 0xd1, 0x3, 0x5, 0x10000, 0x0, 0x16, 0xf, 0x17c, 0x2, 0xe5, 0x80, 0xfffffffc, 0x6f, 0x80000000, 0x5, 0x10001, 0xfffffffd, 0x21bc, 0x9, 0x2, 0x1ff, 0x8000, 0x7, 0x1, 0x259, 0x2, 0xfff, 0xc390, 0x0, 0xfffffff6, 0x5, 0x8851, 0x5, 0x7, 0xf, 0x10000, 0x26, 0x6, 0xa52e, 0xffff, 0xbc6, 0x5, 0x10001, 0x7ff, 0x8000, 0xf3, 0x20, 0x5, 0xaa8, 0x1, 0x4, 0x0, 0x4f9, 0x9, 0x4, 0xc89, 0x2, 0x6615, 0x400, 0x7fffffff, 0x8, 0x5, 0xf, 0xc, 0xd, 0x10, 0x3, 0xdd, 0x800, 0x6, 0xe0000, 0x4, 0x1, 0x6, 0x232044c7, 0x3, 0x21, 0x3, 0x6, 0x4, 0x0, 0xb7, 0x9, 0x0, 0x3, 0x99, 0x5, 0xfff, 0xa469, 0x3a6, 0xffff, 0x401, 0x4, 0xfffffff7, 0x4, 0x4, 0x7, 0xd35f, 0x5, 0x3, 0x200, 0x7, 0xf, 0x7, 0x100, 0x9, 0x71, 0x72, 0x6, 0xf, 0x6, 0x8000, 0x2, 0x687e, 0x8001, 0x9, 0x5, 0xffffff35, 0x40, 0xb, 0x9f7a, 0x2, 0x5d37, 0x1, 0x80000000, 0x3, 0x6, 0x29, 0x787, 0x8, 0x100, 0x30, 0x1b401da1, 0x8600, 0x7000, 0x200, 0x4, 0x10001, 0x5, 0x3, 0xd542, 0x8e, 0x5, 0x9c00, 0xee35, 0x1, 0x2, 0xc, 0x38ea7d83, 0xab, 0x6, 0x4, 0x1, 0x3, 0x9, 0xcf, 0xb847, 0x8, 0x2, 0xa, 0x8, 0x7, 0x257, 0x10000, 0x2, 0x1c254a21, 0x200, 0x5, 0xfffffffa, 0x3, 0xfffffcec, 0x4, 0x1, 0x1, 0x40, 0x0, 0x5, 0x2ba45812, 0x2, 0xca, 0x4, 0x5, 0x6, 0x8000, 0x0, 0x7, 0x34, 0x2, 0x8, 0x40, 0x3d, 0xfffeffff, 0x3, 0x3, 0x2, 0xbd, 0x3, 0x454, 0x2, 0x2, 0x5, 0x5, 0x8, 0x200, 0xbf5, 0x101, 0xffffffff, 0x1, 0x8001, 0x1000, 0x200, 0x800000, 0x8, 0x0, 0x1, 0x6c, 0x1ff, 0x81, 0x1, 0x9, 0x0, 0x3, 0xbb65, 0x9, 0x2, 0x100, 0xffffffff, 0x3, 0xf0f, 0x101, 0x9, 0x7, 0x2, 0x1, 0xfffffffa, 0xd3, 0xde, 0x0, 0x1, 0x9, 0x9, 0x5, 0x9, 0x4, 0xbe4, 0xfff, 0x80, 0x1c6e, 0x7ff00000, 0x9, 0x0, 0x1, 0x2, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfff, 0x1, 0x8, 0x140, 0x8, 0xffff65de, 0x6, 0x0, 0x1, 0x9, 0xe5e, 0xf2, 0xf, 0x1bec, 0x3, 0x3, 0x1000, 0x8001, 0x1, 0x5, 0x10, 0x7, 0xffffffff, 0x21c, 0x8, 0x6, 0x1, 0x9, 0x9, 0x9, 0x7a24, 0xf3, 0x9, 0x4, 0x200, 0x4, 0x401, 0xadc, 0x5, 0x717a1920, 0x7d6, 0xba, 0x1, 0x7f, 0x0, 0x6, 0xfe38, 0x7b12, 0xfffffffd, 0xfffffffc, 0x2, 0xaec, 0x4804, 0x80000000, 0x8, 0x6, 0x3, 0xd, 0x40, 0x9, 0x5, 0x0, 0x40000, 0x1f1a5de0, 0x7, 0x2, 0x9e79, 0x9, 0x10000, 0xc, 0x6, 0x8, 0x9, 0x7fff, 0x53a, 0x1a, 0x5, 0x3, 0x0, 0x8, 0xb627, 0x10000, 0x221, 0x7, 0x10000, 0x7, 0x6, 0x31, 0x8, 0x9097, 0x7fff, 0x1, 0xaa, 0x100, 0x10000, 0x0, 0x7f, 0x6, 0x8001, 0x400, 0x6, 0x4, 0x8cd3, 0x7c8, 0xd91, 0x6, 0x9, 0x80, 0x6, 0x4, 0x200, 0xfffffff7, 0x5, 0x4, 0x74fd, 0x8, 0x7, 0x8, 0x3, 0x4, 0x9, 0x7a, 0x7, 0xb2, 0x6, 0x2, 0x879b, 0x9, 0x1, 0xbec, 0x2, 0x884, 0xd, 0x6, 0xffc00000, 0x7, 0x2, 0x4, 0xe7, 0x9, 0x371, 0x800, 0x9, 0xd2a, 0xfff, 0xffffffff, 0x9, 0x6, 0x3, 0x3, 0x5, 0x4, 0x5, 0x9, 0x3, 0x0, 0x401, 0x8, 0x1, 0x4, 0x3, 0xfffffffe, 0x0, 0xa, 0x9, 0x81, 0xffffffff, 0xb, 0xfffffff0, 0x7, 0x7, 0x1, 0x6, 0x3, 0x1ff, 0x4, 0x836, 0x0, 0x9, 0x7fff, 0x1, 0xd, 0x7, 0x1, 0x4, 0x7f, 0x8001, 0x0, 0x7, 0x10, 0x4, 0x2, 0x5, 0x36c3, 0x6, 0x9, 0x1ff, 0x8000, 0x1, 0x600000, 0x7fffffff, 0x9, 0x80, 0x7, 0x4, 0x7, 0x1000, 0x1, 0xa, 0x6, 0x38cb69a0, 0xa519, 0x1, 0x7, 0xbe85, 0x1759, 0xcce5, 0x8, 0x5, 0x6, 0x65d, 0x7, 0x9c, 0x2, 0x9, 0x6e, 0x8, 0x2, 0xffffffff, 0x10001, 0xb38, 0x9, 0x4, 0x23, 0x0, 0x6, 0x0, 0x9, 0xa9, 0xb, 0x6, 0x8d, 0x5, 0x939, 0x4, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0x5, 0x2, 0x7fffffff, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x683}]}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xbb6d}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000005, 0x400, 0x18, 0x10000, {0xf, 0x1, 0xd, 0x10, 0x40, 0x1858}, {0xf9, 0x0, 0x7fff, 0x4, 0x0, 0x1}, 0x4, 0x3, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa3}, @TCA_ROUTE4_POLICE={0x854, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9, 0x8, 0x9a34, 0x4, 0x8, 0x4, 0x3, 0x1, 0x4, 0x0, 0xe, 0x400, 0x1, 0xff, 0xfffffff9, 0x7fffffff, 0xe4e, 0xfffffffa, 0x2, 0x7, 0x1ff, 0x0, 0x4, 0x7, 0x8, 0xfffffffe, 0xfffffffb, 0x8, 0x5, 0x1, 0x4, 0x800, 0x9, 0x0, 0xffff, 0x7, 0x5, 0x7f, 0x7, 0x5, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x0, 0xfffffff3, 0x8, 0x5, 0x30e, 0x5, 0x81, 0xffffffff, 0x3, 0x6, 0x47, 0x2, 0x4fb, 0x0, 0x5, 0x5, 0x6, 0x3bbb8cf3, 0x5d, 0x2, 0x401, 0x7, 0x6, 0xa2, 0xfffffffc, 0x3c, 0x7, 0x3, 0x0, 0x49, 0x1, 0xf, 0x9, 0x5d, 0x300, 0x9, 0x3e2b, 0x8633, 0x0, 0x1, 0x8, 0xffff1da7, 0x0, 0xfff, 0x2, 0x1, 0x400, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1ff, 0x2, 0x320dde, 0xf, 0xcb, 0x9, 0xcf38, 0x2, 0x0, 0xffffffff, 0x5, 0x7, 0x5, 0x84, 0x1, 0x4, 0x1, 0x5, 0x800, 0x9, 0x400, 0x1, 0x2, 0x100, 0x3e6, 0x8, 0x1ff, 0x9, 0x7, 0xb631, 0x7, 0x6, 0x79, 0x1, 0x6, 0x5, 0x4, 0x80000001, 0x7, 0x30, 0x6, 0x0, 0x50a8, 0xb303, 0xffffcc36, 0xfffffff9, 0xde2d, 0x0, 0x40, 0x1, 0x8, 0xffffff80, 0x8d, 0x9, 0xe, 0x4, 0x7e, 0x9, 0x0, 0xf4, 0x8, 0xc, 0x5b94, 0x5, 0xce25, 0x7, 0x4, 0x10000, 0x817a, 0x0, 0x7fff, 0xdf, 0x3, 0x10001, 0x5, 0x3, 0x3, 0x9d4, 0x40, 0x6, 0x40, 0x4e0b, 0x2, 0x0, 0x80000001, 0x0, 0x7, 0x7, 0x5270, 0x9, 0x1, 0x4, 0x5, 0xfffffff6, 0x2, 0x0, 0x1, 0x7, 0x49d0, 0x4, 0x80000001, 0xe, 0x3, 0xffff, 0x80000000, 0x5636, 0x7fff, 0x2, 0x81, 0x1, 0x6, 0x3, 0x1, 0x1, 0x6, 0x4067, 0x6, 0xa287, 0x8, 0x5, 0x7fff, 0x7f, 0x1, 0x9, 0xec, 0x800, 0x2, 0x401000, 0x20797a5, 0x1, 0x8000, 0x9, 0x2, 0x1, 0xffff, 0x5, 0x3, 0x8, 0x9, 0x5, 0x800, 0x50, 0xa7c, 0x6, 0x100, 0x8, 0x940a, 0x4, 0x7, 0x7, 0x1, 0x6, 0x1, 0x5, 0x8, 0xd, 0x6, 0x3]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x2, 0x24000, 0x5, {0x2, 0x2, 0xfffb, 0xe0f, 0x8, 0x9}, {0xd, 0x3, 0x7ff, 0x10, 0x6, 0x401}, 0xb62, 0x8, 0xffff7160}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3, 0x10000, 0x1, 0x4, 0x8, 0x8, 0xcb9, 0xe, 0x6, 0x401, 0x2, 0x29d, 0x8, 0x5975, 0x49, 0x7fffffff, 0x0, 0x0, 0x0, 0x9, 0xfd, 0x46, 0x0, 0x49, 0x2, 0x0, 0xc0000000, 0xca, 0x1, 0x2, 0x0, 0x800, 0x2, 0x0, 0x3, 0x0, 0x3866, 0x5, 0x1, 0x2, 0x7f, 0x4, 0x8, 0x10000, 0x10001, 0x2, 0x7, 0x0, 0xfffffff6, 0x8, 0x4, 0x6, 0x13a5, 0x5, 0x6, 0x1, 0x3, 0x1, 0x27, 0x9c, 0x7fff, 0x7, 0x7, 0xfff, 0x4, 0x5, 0x5, 0x40, 0x2, 0x1, 0x3, 0xfffffffc, 0x2, 0x0, 0x6, 0x5, 0x8, 0xcf9, 0x6, 0x4, 0x10001, 0x9, 0xffffffc0, 0xc4, 0x8, 0x6, 0x479, 0x3, 0x2, 0x7, 0x8, 0xffffffff, 0x40, 0x4, 0x7a, 0x8c3b, 0xffff, 0x1dea0072, 0xfffffffa, 0x1802690, 0x80000001, 0x8, 0x4, 0x0, 0xf57, 0x9, 0x1, 0x401, 0x1, 0x200, 0x800, 0x0, 0x7f, 0x8, 0xc, 0x6a, 0x1, 0x5, 0xcf99, 0xeb45, 0x3, 0x3ff, 0x8001, 0x6, 0x7fffffff, 0xde, 0x0, 0x68032de2, 0xfffff2be, 0x5, 0x4, 0x1, 0x4, 0xb2, 0x8, 0x3, 0x0, 0x7ff, 0x3ff, 0xe, 0x39, 0xc, 0x7f, 0x6, 0x9883, 0x9, 0x200, 0x6, 0x5, 0x1, 0x0, 0x9, 0x400, 0x40, 0x8, 0x1, 0x5, 0x0, 0x3, 0x8, 0x7, 0x3, 0x200, 0xe52, 0x3, 0xee51, 0xac, 0x5, 0x9, 0x2, 0x2, 0x4, 0x7ff, 0x1, 0x9, 0x9, 0x9, 0x9, 0xfffffff7, 0x2, 0xe1, 0x55ca, 0x7, 0x3, 0x7, 0x7f, 0x9, 0x7fffffff, 0xffff, 0x0, 0x6, 0x7fffffff, 0x545, 0xb53, 0x7, 0xffffffff, 0x40, 0x1ff, 0x2, 0x5, 0x800, 0x1, 0x8, 0x6, 0x40, 0x3f, 0x4, 0x3, 0x101, 0x40, 0x0, 0x200, 0x4, 0xf000, 0xe94e, 0x10, 0x6, 0x9, 0x2, 0x2, 0x50, 0x3, 0x8000, 0x9, 0x2, 0x70cd7b3a, 0x28, 0x60, 0x7, 0x6, 0x8, 0x3, 0x3, 0x81, 0x0, 0x1000, 0x80000001, 0x34c7, 0x8, 0x10000, 0x2, 0x3, 0x800, 0x228, 0x8000, 0x7, 0x7, 0x2, 0x4, 0x14354000, 0x3, 0x0, 0x5, 0x3, 0x2]}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'pimreg\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x98}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0x2174}, 0x1, 0x0, 0x0, 0x18914}, 0x40d0) 1.838359475s ago: executing program 0 (id=3770): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9f", 0x2c}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001680)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4000000) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010067656e657665000024000280050009008f0000000400060014000700fc0200"/60], 0x54}}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xef2, '\x00', 0x0, r4, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='veth0_to_hsr\x00') 1.830146421s ago: executing program 1 (id=3771): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=r1, @ANYBLOB="0000000023000400240012800b0001006272696467650000140002800800080088a8"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000001b000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.728870935s ago: executing program 7 (id=3772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x1}, 0x10}, 0x94) 1.614021065s ago: executing program 5 (id=3773): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000005c0)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x18, 0x33, @ctrl_frame=@bar={{}, {0xd}, @device_a, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x4}, {0xe, 0x9}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x80) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfa}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x80, 0x64}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40184) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.612431766s ago: executing program 6 (id=3774): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4c23, 0x800e5, @ipv4={'\x00', '\xff\xff', @local}, 0xffefffff}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x9}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.569882958s ago: executing program 0 (id=3775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) 1.421705829s ago: executing program 7 (id=3776): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.342756696s ago: executing program 1 (id=3777): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f00000014c0)={0x1d, r1, 0x0, {0x0, 0xf0}, 0x1}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x15, 0x5, 0x6) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7ffffffc}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES16=r7, @ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40000) 1.300884696s ago: executing program 5 (id=3778): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) (async) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x1) (async) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB='\t\r'], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x20c89, 0x4cc44}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) (async) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x20c89, 0x4cc44}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 1.287867058s ago: executing program 0 (id=3779): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r2, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 1.174073958s ago: executing program 6 (id=3780): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000680)={0x18, r1, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1e, 0x8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000000)="e8066a96063d393e133c18819222bd1df220d76eba173270904b8fd6d2c2f46ddb727e1b811bb556e93b9bd1b6286d63fe60fbb18c7518353f514730c25d4833c682974a562517412d00a612d55800f0581876298b5231f4b68928ccd6c016960c2c838af645c629898dcdc1"}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x10007}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @generic={0x6, 0x2, 0x6, 0x9, 0xf2c}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @cb_func={0x18, 0xa}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.061376887s ago: executing program 7 (id=3781): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r2, r3, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r2, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700)="01", 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r2, 0x40109441, &(0x7f0000000040)={0x7, 0x2, 0x2}) 604.248024ms ago: executing program 1 (id=3782): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xfc, 0x19, 0x301, 0x70bd25, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0xffff}, {0x0, 0x8001, 0x2, 0x9}, 0xf, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0xfffffffc, 0x3c}, 0x0, @in6=@empty, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}]}]}, 0xfc}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @dev, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xf, 0x9, 0x401b}}}}}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100dffffffffffffff607"], 0x14}], 0x1}, 0x0) 603.701597ms ago: executing program 6 (id=3783): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000080)=0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002900)={'tunl0\x00', &(0x7f0000002840)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x9, 0x0, {{0x23, 0x4, 0x0, 0x3d, 0x8c, 0x66, 0x0, 0x1, 0x2f, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x20, 0x85, 0x0, 0x0, [0x7fffffff, 0x1ff, 0xfffffffa, 0x7, 0x8, 0x4, 0x100]}, @cipso={0x86, 0x4f, 0x3, [{0x1, 0x4, "fb2a"}, {0x5, 0xd, "9b8c49fa5be3097ca0da97"}, {0x0, 0xe, "498291286af4410c56a1bceb"}, {0x5, 0x2}, {0x1, 0x9, "a9933319047a57"}, {0x5, 0xb, "6a26fa8810ba5f77db"}, {0x0, 0xb, "bc9b9b8997b5269233"}, {0x5, 0x9, "378b8eedb6e2a1"}]}, @ssrr={0x89, 0x7, 0x20, [@remote]}]}}}}}) sendto$packet(r1, &(0x7f0000001840)="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", 0x1000, 0x1, &(0x7f0000002940)={0x11, 0x15, r6, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$tipc(r5, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r5, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)="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", 0x159}, {&(0x7f00000000c0)="cc40d737c26d58771966b7cb9b68c000af445c49a92642ca13489f37320a265c3cba2f0d31d087411172909ca4405dfff9d609ce3186ef", 0x37}], 0x2}}], 0x1, 0x0) 602.837512ms ago: executing program 1 (id=3784): syz_emit_ethernet(0x92, &(0x7f00000000c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x68, 0x0, 0x6, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xf2, 0xb, 0x0, {0x18, 0x4, 0x0, 0x6, 0x0, 0x1065, 0xf30, 0x4, 0x16, 0x4, @multicast2, @multicast2, {[@generic={0x83, 0xd, "05869d075923f2858fa128"}, @end, @ssrr={0x89, 0xb, 0x29, [@dev={0xac, 0x14, 0x14, 0x22}, @multicast1]}, @cipso={0x86, 0x32, 0x2, [{0x2, 0xb, "95c07b0acf877a8d6c"}, {0x2, 0xe, "dbeb32b2c7df196894e1c07a"}, {0x6, 0x2}, {0x6, 0x6, "48a8cfb9"}, {0x0, 0xb, "46789e1cba4fb3a2da"}]}]}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) 601.289259ms ago: executing program 7 (id=3785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000002, &(0x7f0000000040)=0xb, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x92258420943190a, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) close(0x3) 437.98186ms ago: executing program 1 (id=3786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00*\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000151efd7ff810dd857f4c7e6200"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008060}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) 390.812951ms ago: executing program 7 (id=3787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0xd, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000004}) 160.981554ms ago: executing program 0 (id=3788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x991c}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x8}}]}}]}, 0x4c}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x10, 0xf, 0x3c}, 0x2c) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, 0x0, 0x0, 0x45007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 160.385769ms ago: executing program 5 (id=3789): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@private1, @private=0xa010100, 0x14, 0x1f}}) socket(0x1e, 0x6, 0xa) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@private1, @private=0xa010100, 0x14, 0x1f}}) (async) socket(0x1e, 0x6, 0xa) (async) 144.578623ms ago: executing program 6 (id=3790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x1, 0x8, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @broadcast, @random="6735a00cc4fb", @local, @local, @remote, @random="136f46093c00"]}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000440)=0xfffffff0, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@empty, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x6}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000200), &(0x7f0000000240)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x264, 0x44, 0x1, 0x70bd29, 0x25dfdbfa, {0x1}, [@nested={0x24e, 0x48, 0x0, 0x1, [@generic="a71606e68afe9d226617ccce466bf9ad2c5fdea74dc2b09fc441c3881efd649f9015dc9e60d562f01d2d033894f928fa3203e30a81c876e44bebc6212cde18a93031e9ef69981ca14c12bf5ad880a251729a3d20984bf0dabe96d92c8cfe3a8186a480012f185a1c9336", @nested={0x1cb, 0x96, 0x0, 0x1, [@generic="6374cfb3c721a68a5d926e2976dcc849ab205ad9292bf7ef2e829e5ff1029af358471ffb32af21cf2d56cf0f33f8e37d42972f353e33a17bf35dbab99ad16d5a5c9a723f06fbfe5b0bd1ec8f7a4d766c4ed1eb9a687d7a5ab7fbd41582f403280988f793eb73c5c81bceb798011bed51e8a237412cc1e6d91a3a5e5a9690bf215854e34255dec1d90b06a1d9735cdf525463d958be748b2cf9cd26d4091192ae0556f04b7311d526816d8ce91d2ab4c1712fc9f39de03c7b9ff4d3ea509417cdd217", @nested={0x4, 0x9f}, @generic="f0b6d65297999f879bee7773ba545c15", @generic="bcadb8d23712d24a4781bdee303352d89c0d11400bf17df54d24360393640f0e65935cbf2a709a383d7019907340bb2dcd2e0eb050a9562ca096be840726951ef021e74438642dba1b158961d1eeb400245da0904e2a08a03bdbb461247cab913aaaaa028fa49313145fe538a5fcc64def40eb4efe74b654c7697735be34ba45dfd8b79f99fce745ab3c17d046d1d61dda0c2e63a504ca04912242dd80dc4d179266ed653e616d46f2e098a9e90c967984d483e90cc38084cf4c0386d7869660d0a7c9309386b857a515d1d67cda22f210cdbd52470c26bc04c2d1f6f89dbffb66a2585133a460bee3dc5da15801369fe3"]}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r6, 0x4}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000340)={0x81, "48fa7b"}, 0x6) 0s ago: executing program 7 (id=3791): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000800)={0x0, 0x6, 0x9}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) r3 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0x8) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async, rerun: 32) sendmmsg$inet6(r4, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r4) (async, rerun: 64) recvmsg$unix(r4, &(0x7f00000012c0)={&(0x7f0000000180), 0x6e, &(0x7f0000001040)=[{&(0x7f0000000300)}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f00000006c0)=""/226, 0xe2}, {&(0x7f0000000c00)=""/206, 0xce}, {&(0x7f0000000d00)=""/132, 0x84}, {&(0x7f0000000dc0)=""/3, 0x3}], 0x8, &(0x7f00000011c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0xd0}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x122, &(0x7f0000001300)=ANY=[@ANYBLOB="aaaaaaaaaa230180c2000001080045000114000000000011907800000000ac1414aa00004e2001009078a047ab94b449a7303618d16bb4603292858545d91856c8d7a3ab2f6312c87f79ba91af3e8a2c13806b64ac91a2501e9b03e98da479da4be6c041e648f2f43aece2f4151a53141579e11a28838b5369987434c01a882565b8bb848e34a222d257d62bb12890fad014aad218142bcbdacb214dcdd49a9fb27e95867ecc4a7cecaa609bd69b366ce45cdb8881bb9acf76854f87a4fc39ab197d3e93a540c4f33cffcace858d75b35f8ab805ac111073b4e95c1d3a77c5addc2f0a3b28853709af459b3f68b5d6e3085fd179a420d7392ee3262badf8e87135c9a039f0de5753156b1a93fe955241182cecfd77d957d8e4d76b25c4f775858fa421"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="2f68d437d7ac1800bc7803f09efd73929ee53dc3876de035b22989f65800e6e03cd12dea2ee82ba39e73bd3932007debd9b7f8bb6688b6d6c1b829fccf8e6d2d515a50f643001de19ec6fa4314372eb7f897b43e8b026d82e070f84ed8b945dc8aeb917e57612be841f968d383a8333f17b1", @ANYRESOCT=r7, @ANYRES16=r6, @ANYRESHEX=r4, @ANYRES32=r2], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x44}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000fc0)={0x0, 0x1}, 0x8) sendto$inet6(r9, &(0x7f00000005c0)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r2, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000003cc0)=""/4096, 0x94}, {0x0}], 0x2}, 0x3}], 0x1, 0x40000000, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000f80)={&(0x7f0000000e00), 0xc, &(0x7f0000000f40)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) syz_emit_ethernet(0x2f0, &(0x7f0000001740)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "175bde", 0x2ba, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@srh={0x2b, 0x4, 0x4, 0x2, 0x1, 0x40, 0x8, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}]}, @hopopts={0x2b, 0x9, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x13}, @enc_lim={0x4, 0x1, 0x94}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x28, {0x3, 0x8, 0xb2, 0x0, [0xc5c31af, 0x8001, 0x0, 0x9]}}, @jumbo={0xc2, 0x4, 0x1}]}, @hopopts={0x3a, 0x21, '\x00', [@hao={0xc9, 0x10, @remote}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0xbe, "6749862532123bdfe28f8ef5c0e399dc3659c969881491784f7a7808920671302fdd94d1c65e970af4ee2010566143e953ac12480d7d045109e553f5a89b1ee704c1097928d7ad6d68ba7d36053c2453bdef2c9570379202ec682a5ffe51db669bb92c8d206dbb63c996360082fe8a62c6bd21b48aa842fb93f48babdf62082e7b6096a35e43f126860779a7f1b662b6a6cf9f10ff4a6825f790b04ee15598278a843df357d5d14ca667ab2daad4a05a5f6cc40f77c320157333cdcb85d2"}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x4}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x80000000}, @ra={0x5, 0x2, 0x6a}]}, @srh={0xff, 0xe, 0x4, 0x7, 0xe, 0x58, 0xfed9, [@local, @dev={0xfe, 0x80, '\x00', 0x42}, @private1, @mcast2, @mcast1, @empty, @empty]}, @dstopts={0x33}, @hopopts={0x3a, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0x42}, @generic={0x81}, @jumbo={0xc2, 0x4, 0x10001}, @calipso={0x7, 0x48, {0x3, 0x10, 0x6, 0x4, [0x8, 0x8000, 0x1, 0x1, 0x9, 0x80000000, 0x7, 0x0]}}, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3e}}]}], @payload_named={{{{{0x2a, 0x0, 0x0, 0x1, 0x1, 0xa, 0x1, 0x2, 0x6, 0x0, 0x2, 0x7, 0x3, 0x2, 0x5ce7, 0x0, 0x0, 0x4e24, 0x4e23}, 0x2, 0xfffffffc}, 0x3, 0x1}}, [0x0, 0x0]}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000dd29d5a94d1a211632135c162800000000001f00000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, 0x3a, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) kernel console output (not intermixed with test programs): ous mode [ 440.237504][T15788] team_slave_0: entered promiscuous mode [ 440.255199][T15788] team_slave_1: entered promiscuous mode [ 440.282718][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.295017][T15788] bond7: (slave vlan4): making interface the new active one [ 440.312541][T15795] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2654'. [ 440.331170][T15788] bond7: (slave vlan4): Enslaving as an active interface with an up link [ 440.547726][T15801] netlink: 'syz.4.2656': attribute type 3 has an invalid length. [ 440.665535][T15807] netlink: 'syz.0.2657': attribute type 83 has an invalid length. [ 440.803383][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.812213][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 441.223513][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.309712][T15829] netlink: 'syz.0.2662': attribute type 21 has an invalid length. [ 441.368296][T15833] xt_HMARK: proto mask must be zero with L3 mode [ 441.380941][T15829] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2662'. [ 441.427287][T15829] netlink: 'syz.0.2662': attribute type 5 has an invalid length. [ 441.436421][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.445078][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 441.498518][T15829] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2662'. [ 441.534749][T15841] netlink: 'syz.2.2665': attribute type 5 has an invalid length. [ 441.625260][T15841] netlink: 'syz.2.2665': attribute type 5 has an invalid length. [ 441.769934][T15848] bond1: option mode: unable to set because the bond device is up [ 441.981092][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 442.088745][T15853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 442.241131][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.249326][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.800443][ T5609] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 443.192195][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 443.445597][T15887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.478492][T15887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.548707][T15887] bond0 (unregistering): Released all slaves [ 444.125502][T15909] tipc: Enabled bearer , priority 0 [ 444.175428][T15905] syzkaller0: entered promiscuous mode [ 444.225097][T15905] syzkaller0: entered allmulticast mode [ 444.331241][ T5341] net_ratelimit: 3 callbacks suppressed [ 444.331262][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.404803][T15909] tipc: Resetting bearer [ 444.586055][T15900] tipc: Resetting bearer [ 444.794468][T15900] tipc: Disabling bearer [ 444.811923][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.290596][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.363781][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.493026][T15945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2703'. [ 445.794065][T15950] C: renamed from veth1_to_team (while UP) [ 445.981454][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.204834][T15950] netlink: 'syz.0.2706': attribute type 1 has an invalid length. [ 446.401087][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.638775][T15950] netlink: 'syz.0.2706': attribute type 2 has an invalid length. [ 446.879619][T15950] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 447.183772][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.347814][T15983] netlink: 'syz.1.2713': attribute type 46 has an invalid length. [ 447.390980][T15983] netlink: 'syz.1.2713': attribute type 28 has an invalid length. [ 447.443590][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.698743][T15999] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2720'. [ 447.902929][T16003] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 447.937875][T16003] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 447.962492][T16006] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 448.326317][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.498442][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2731'. [ 448.656642][T16029] tunl0: Caught tx_queue_len zero misconfig [ 448.908826][T16035] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.2738'. [ 449.492467][ T36] net_ratelimit: 3 callbacks suppressed [ 449.492487][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.520928][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.028779][T16062] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2751'. [ 450.364349][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2755'. [ 450.410685][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.563413][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.664370][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.000524][T16086] netlink: 'syz.4.2761': attribute type 2 has an invalid length. [ 451.364812][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.601570][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.867503][T10004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.942048][T16110] netlink: 'syz.4.2766': attribute type 21 has an invalid length. [ 451.986765][T16110] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2766'. [ 452.412335][T16125] netlink: 'syz.2.2774': attribute type 10 has an invalid length. [ 452.443917][T16125] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 452.529381][T16125] wlan0: mtu less than device minimum [ 452.641719][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.931097][T16140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2781'. [ 453.077913][T16145] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2783'. [ 453.468683][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2789'. [ 454.396603][T16178] vlan5: entered promiscuous mode [ 454.432947][T16178] bond0: entered promiscuous mode [ 454.455206][T16178] bond_slave_0: entered promiscuous mode [ 454.487141][T16178] bond_slave_1: entered promiscuous mode [ 454.504649][T16186] netlink: 'syz.3.2802': attribute type 2 has an invalid length. [ 454.525319][T16178] bond14: (slave vlan5): making interface the new active one [ 454.550075][T16178] bond14: (slave vlan5): Enslaving as an active interface with an up link [ 454.583382][T16186] netlink: 'syz.3.2802': attribute type 24 has an invalid length. [ 454.732251][ T5341] net_ratelimit: 5 callbacks suppressed [ 454.732272][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.780819][T16191] batman_adv: batadv0: Adding interface: veth0 [ 454.840450][T16191] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.936683][T16191] batman_adv: batadv0: Interface activated: veth0 [ 455.236468][T16211] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 455.256366][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.331455][T16211] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 455.352974][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2811'. [ 455.368405][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2811'. [ 455.379571][T16211] lo: Caught tx_queue_len zero misconfig [ 455.761624][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.255083][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2816'. [ 456.343889][T16236] netlink: Conntrack attr has 4 unknown bytes [ 456.401473][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.478457][T16236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.525311][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2818'. [ 456.538349][T16243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2818'. [ 456.618623][T16243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2818'. [ 456.647218][T16245] xt_TCPMSS: Only works on TCP SYN packets [ 456.744097][T16250] veth0: Caught tx_queue_len zero misconfig [ 456.807780][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.922889][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805532b000: rx timeout, send abort [ 456.993241][T16260] netlink: 'syz.4.2822': attribute type 13 has an invalid length. [ 457.022536][T16260] netlink: 'syz.4.2822': attribute type 17 has an invalid length. [ 457.069919][T16256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.082971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.182801][T16265] __nla_validate_parse: 2 callbacks suppressed [ 457.182831][T16265] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2823'. [ 457.287531][T16260] tunl0: left promiscuous mode [ 457.302573][T16260] 0ªî{X¹¦: left allmulticast mode [ 457.423618][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805674d000: rx timeout, send abort [ 457.432226][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805532b000: abort rx timeout. Force session deactivation [ 457.450721][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.596717][T16267] netlink: 'syz.1.2824': attribute type 2 has an invalid length. [ 457.609314][T16267] netlink: 'syz.1.2824': attribute type 2 has an invalid length. [ 457.787070][T16260] macvlan0: left promiscuous mode [ 457.932003][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805674d000: abort rx timeout. Force session deactivation [ 457.971191][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'. [ 458.047768][T16270] batadv_slave_0: entered promiscuous mode [ 458.066573][T16271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.194731][T16271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.297613][T16274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2826'. [ 458.351674][T16279] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2827'. [ 458.417600][T16279] Bluetooth: hci0: unsupported parameter 5135 [ 458.440230][T16279] Bluetooth: hci0: unsupported parameter 8192 [ 458.455117][T16279] Bluetooth: hci0: unsupported parameter 5135 [ 458.481413][T16280] bond0: entered allmulticast mode [ 458.499322][T16279] Bluetooth: hci0: unsupported parameter 8192 [ 458.507574][T16280] bond_slave_0: entered allmulticast mode [ 459.026775][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2833'. [ 459.297593][T16311] team0: Caught tx_queue_len zero misconfig [ 459.786828][T16323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2839'. [ 459.805557][T10003] net_ratelimit: 5 callbacks suppressed [ 459.805574][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.827826][T16329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2841'. [ 459.928869][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.012722][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.118104][T16337] IPv6: addrconf: prefix option has invalid lifetime [ 460.183571][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'. [ 460.494290][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.577207][T16350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2849'. [ 460.931407][T10002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.961107][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.068022][T16368] netlink: 'syz.4.2853': attribute type 2 has an invalid length. [ 461.116330][T16368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2853'. [ 461.261909][T16372] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 461.975179][T16394] vlan4: entered promiscuous mode [ 461.991116][T16394] bond0: entered promiscuous mode [ 462.003070][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.017135][T16394] bond0: (slave vlan4): Opening slave failed [ 462.071286][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.465230][T16404] netlink: 'syz.0.2865': attribute type 2 has an invalid length. [ 462.897453][ T4925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 462.914674][ T4925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 462.925000][ T4925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 462.937623][ T4925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 462.947855][ T4925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.042618][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.372926][T16422] netlink: 'syz.4.2869': attribute type 3 has an invalid length. [ 463.393476][T16422] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2869'. [ 464.482711][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 464.492063][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 464.499454][ C0] bridge0: port 3(team0) entered learning state [ 464.812696][T16453] netlink: 'syz.0.2875': attribute type 2 has an invalid length. [ 464.947887][T16451] veth1_vlan (unregistering): left allmulticast mode [ 465.041642][ T4925] Bluetooth: hci5: command tx timeout [ 465.060001][T16460] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2876'. [ 465.121970][ T5341] net_ratelimit: 4 callbacks suppressed [ 465.122025][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.215990][T16451] vlan0 (unregistering): left allmulticast mode [ 465.229771][T16451] v (unregistering): left allmulticast mode [ 465.236913][T16451] vlan0 (unregistering): left promiscuous mode [ 465.434417][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.161002][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.561906][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.582680][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.697883][T16413] lo speed is unknown, defaulting to 1000 [ 467.121405][ T4925] Bluetooth: hci5: command tx timeout [ 467.313154][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2884'. [ 467.412779][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2884'. [ 467.521021][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.703406][T10004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.833370][T16507] netlink: Unknown NAT attribute (type=16383, max=9) [ 467.859543][T16507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.873604][T16413] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.890950][T16413] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.908850][T16413] bridge_slave_0: entered allmulticast mode [ 467.929558][T16413] bridge_slave_0: entered promiscuous mode [ 467.965532][T16413] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.994755][T16413] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.012705][T16413] bridge_slave_1: entered allmulticast mode [ 468.033190][T16413] bridge_slave_1: entered promiscuous mode [ 468.148571][T16514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2889'. [ 468.168678][T16413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.183941][T16413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.236729][T16413] team0: Port device team_slave_0 added [ 468.246270][T16413] team0: Port device team_slave_1 added [ 468.287755][T16413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.295917][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.327759][T16413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.345092][T16413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.353628][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.414406][T16413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.560994][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.589165][T16413] hsr_slave_0: entered promiscuous mode [ 468.614456][T16413] hsr_slave_1: entered promiscuous mode [ 468.921902][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.937698][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.950332][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.959373][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.969702][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 469.213319][ T4925] Bluetooth: hci5: command tx timeout [ 469.296141][T16541] netlink: 'syz.0.2896': attribute type 1 has an invalid length. [ 469.465328][T16541] 8021q: adding VLAN 0 to HW filter on device bond7 [ 469.558238][T16546] vlan3: entered promiscuous mode [ 469.566620][T16546] bond7: entered promiscuous mode [ 469.574353][T16546] vlan3: entered allmulticast mode [ 469.585106][T16546] bond7: entered allmulticast mode [ 469.628099][T16547] bond7: (slave bridge2): making interface the new active one [ 469.636725][T16547] bridge2: entered promiscuous mode [ 469.644597][T16547] bridge2: entered allmulticast mode [ 469.656790][T16547] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 469.837356][T16556] xt_hashlimit: size too large, truncated to 1048576 [ 470.117903][T16413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.154460][T16413] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.491454][T16413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.519561][T16413] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.643641][ T5341] net_ratelimit: 5 callbacks suppressed [ 470.643660][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.794752][T16413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.815369][T16413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.985275][T16413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.011442][T16413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.041076][ T4925] Bluetooth: hci3: command tx timeout [ 471.102862][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.282278][ T4925] Bluetooth: hci5: command tx timeout [ 471.481002][T16583] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2904'. [ 471.533680][T16532] lo speed is unknown, defaulting to 1000 [ 471.681652][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.824291][T16413] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.848564][T16413] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.874365][T16413] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.931169][T16413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.961647][T16413] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 471.988988][T16413] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.020068][T16413] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.043684][T16413] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.119065][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'. [ 472.171425][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'. [ 472.186356][T16594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2909'. [ 472.202657][T16594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2909'. [ 472.263276][T10002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.424861][T16604] vlan4: entered promiscuous mode [ 472.430022][T16604] bond0: entered promiscuous mode [ 472.436571][T16604] bond_slave_0: entered promiscuous mode [ 472.641373][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.692021][T16610] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 472.723502][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.807530][T16413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.956733][T16413] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.053447][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.060828][ T6806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.125284][ T4925] Bluetooth: hci3: command tx timeout [ 473.159382][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.166648][ T6806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.404185][T10002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.488685][T16532] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.518067][T16532] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.533757][T16532] bridge_slave_0: entered allmulticast mode [ 473.546959][T16532] bridge_slave_0: entered promiscuous mode [ 473.593614][T16532] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.613760][T16532] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.631744][T16532] bridge_slave_1: entered allmulticast mode [ 473.649141][T16532] bridge_slave_1: entered promiscuous mode [ 473.666313][T16637] Unsupported ieee802154 address type: 0 [ 473.763299][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.819721][T16532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.869986][T16532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.957186][T16642] tipc: Enabling of bearer rejected, failed to enable media [ 474.054406][T16532] team0: Port device team_slave_0 added [ 474.108769][T16532] team0: Port device team_slave_1 added [ 474.255939][T16532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.270989][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.326924][T16532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.365396][T16532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.381815][T16532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.466663][T16532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.521232][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2922'. [ 474.562682][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.645002][T16532] hsr_slave_0: entered promiscuous mode [ 474.653043][T16532] hsr_slave_1: entered promiscuous mode [ 474.659726][T16532] debugfs: 'hsr0' already exists in 'hsr' [ 474.669926][T16532] Cannot create hsr debugfs directory [ 474.801110][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.873615][T16664] netlink: 'syz.4.2924': attribute type 1 has an invalid length. [ 474.972627][T16662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2924'. [ 475.123941][T16664] 8021q: adding VLAN 0 to HW filter on device bond18 [ 475.201425][ T4925] Bluetooth: hci3: command tx timeout [ 475.211065][T16666] bond18: (slave geneve2): making interface the new active one [ 475.223828][T16666] bond18: (slave geneve2): Enslaving as an active interface with an up link [ 475.671822][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.684604][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.842489][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.898229][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'. [ 475.913215][T16686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2931'. [ 475.985392][T16413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.036099][T16532] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 476.077216][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.109627][T16532] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 476.155008][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.175495][T16532] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 476.206898][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.228976][T16532] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 476.284733][T16532] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.640725][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 476.733606][T16413] veth0_vlan: entered promiscuous mode [ 476.798820][T16413] veth1_vlan: entered promiscuous mode [ 476.821818][ T6806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.857627][T16715] netlink: 'syz.4.2939': attribute type 4 has an invalid length. [ 476.883298][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.899458][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 476.917603][T16715] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2939'. [ 476.928784][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 476.943943][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 476.958779][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 476.968214][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 477.039905][T16532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.091816][T16715] .`: renamed from bond0 (while UP) [ 477.200996][T16413] veth0_macvtap: entered promiscuous mode [ 477.281474][ T5609] Bluetooth: hci3: command tx timeout [ 477.291882][T16413] veth1_macvtap: entered promiscuous mode [ 477.369038][T16532] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.438849][T10003] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.447734][T10003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.500194][T10002] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.507494][T10002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.555619][T16413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.662536][T16413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.767006][T10006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.922702][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.982476][ T6806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.055338][T16532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.181783][T10002] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.342591][ T781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.600175][T10007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.621547][T10006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.654259][T10007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.724684][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.964444][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.992595][T10007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.017571][T10007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.041924][ T5609] Bluetooth: hci6: command tx timeout [ 479.162417][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.687687][T16772] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2951'. [ 479.747243][T16775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'. [ 480.005607][T16716] lo speed is unknown, defaulting to 1000 [ 480.487418][T16532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.836694][T16800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2957'. [ 481.041496][ T5712] net_ratelimit: 5 callbacks suppressed [ 481.041515][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.122503][ T5609] Bluetooth: hci6: command tx timeout [ 481.433644][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.449417][T16824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2963'. [ 481.761199][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.828494][T16839] openvswitch: netlink: IP tunnel attribute has 5385 unknown bytes. [ 481.881421][T16828] bond8: option fail_over_mac: invalid value (16) [ 481.914565][T16828] bond8 (unregistering): Released all slaves [ 482.093459][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.139650][T16716] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.160729][T16716] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.177398][T16716] bridge_slave_0: entered allmulticast mode [ 482.200377][T16716] bridge_slave_0: entered promiscuous mode [ 482.298287][T16716] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.309131][T16716] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.323065][T16716] bridge_slave_1: entered allmulticast mode [ 482.339063][T16716] bridge_slave_1: entered promiscuous mode [ 482.543644][T16716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.594993][T16716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.683745][T10002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.872398][T16846] syzkaller0: entered promiscuous mode [ 482.905681][T16846] syzkaller0: entered allmulticast mode [ 482.958069][T16854] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 482.973291][T16854] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 483.130911][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.203684][ T4925] Bluetooth: hci6: command tx timeout [ 483.727644][T16866] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 483.756272][T16866] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 483.852564][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.160852][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.802685][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.858149][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 484.866306][T16871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2975'. [ 485.282343][ T4925] Bluetooth: hci6: command tx timeout [ 486.133353][T10006] net_ratelimit: 2 callbacks suppressed [ 486.133377][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.254494][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.144884][T16716] team0: Port device team_slave_0 added [ 487.222232][T16870] xfrm0: entered promiscuous mode [ 487.236217][T16870] xfrm0: entered allmulticast mode [ 487.261541][ T6806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.281841][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.306691][T16716] team0: Port device team_slave_1 added [ 487.453475][T16532] veth0_vlan: entered promiscuous mode [ 487.540460][T16716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.557727][T16716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.668410][T16716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.716830][T16716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.748561][T16716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.827977][T16716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.842584][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.063230][T16532] veth1_vlan: entered promiscuous mode [ 488.159327][T16716] hsr_slave_0: entered promiscuous mode [ 488.199107][T16716] hsr_slave_1: entered promiscuous mode [ 488.233473][T16716] debugfs: 'hsr0' already exists in 'hsr' [ 488.280048][T16716] Cannot create hsr debugfs directory [ 488.321863][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.401336][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.461877][T16910] siw: device registration error -23 [ 488.742773][T16911] bond1: invalid ARP target 0.0.0.0 specified for addition [ 488.766814][T16911] bond1: option arp_ip_target: invalid value (0) [ 488.777324][T16911] bond1 (unregistering): Released all slaves [ 488.816347][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.858333][T16923] xt_addrtype: ipv6 does not support BROADCAST matching [ 489.106331][T16925] lo: MTU too low for tipc bearer [ 489.130584][T16925] tipc: Enabling of bearer rejected, failed to enable media [ 489.280822][T16934] netlink: 'syz.1.2991': attribute type 21 has an invalid length. [ 489.320350][T16934] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2991'. [ 489.361442][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.407370][T16532] veth0_macvtap: entered promiscuous mode [ 489.466291][T16532] veth1_macvtap: entered promiscuous mode [ 489.541277][ T6806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.607760][T16532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.650876][T16532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.785946][T16946] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2992'. [ 490.010878][ T781] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.192461][T16950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2995'. [ 490.202702][ T6806] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.225001][T16716] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 490.241710][T16716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.277565][T16952] veth3: entered allmulticast mode [ 490.303194][T16716] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 490.337738][T16716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.395609][T16716] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 490.439237][T16716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.465240][T16716] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 490.530203][T16716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.566481][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.695415][T10007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.165297][T16970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.172613][T16970] IPv6: NLM_F_CREATE should be set when creating new route [ 491.210754][T10002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.223590][T10002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.358615][ T6806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.390999][ T6806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.444066][ T5712] net_ratelimit: 3 callbacks suppressed [ 491.444089][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.688944][T16716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.751075][T16986] netlink: 'syz.0.3003': attribute type 16 has an invalid length. [ 491.791710][T16986] netlink: 'syz.0.3003': attribute type 3 has an invalid length. [ 491.799129][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.858589][T16986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3003'. [ 491.860238][T16716] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.950199][T10006] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.957469][T10006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.028727][T10007] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.036053][T10007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.198600][T16996] bond14: option mode: unable to set because the bond device has slaves [ 492.229712][T16996] bond14: option mode: unable to set because the bond device has slaves [ 492.483692][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.609535][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'. [ 492.741142][T17009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3009'. [ 492.819654][T17012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3009'. [ 492.880099][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'. [ 492.925900][T17012] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3009'. [ 492.977422][T10004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.065649][T17009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.187523][T17012] batadv1: entered promiscuous mode [ 493.194585][T17012] batadv1: entered allmulticast mode [ 493.527077][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.758165][T17034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3014'. [ 493.878867][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'. [ 493.925164][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.135021][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.529407][T17057] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3020'. [ 494.560284][ C0] bridge0: port 3(team0) entered forwarding state [ 494.566867][ C0] bridge0: topology change detected, propagating [ 494.567177][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.574232][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.588682][ C0] bridge0: topology change detected, propagating [ 494.595320][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.602652][ C0] bridge0: topology change detected, propagating [ 494.765035][T16716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.365452][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.601408][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.643069][T17090] __nla_validate_parse: 3 callbacks suppressed [ 495.643090][T17090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3030'. [ 496.480415][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 496.511272][T10002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.651644][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.819311][T17118] macvtap1: entered promiscuous mode [ 496.836406][T17118] dummy0: entered promiscuous mode [ 497.017628][ T5705] dummy0: left promiscuous mode [ 497.070956][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.312644][T16716] veth0_vlan: entered promiscuous mode [ 497.394333][T16716] veth1_vlan: entered promiscuous mode [ 497.685221][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.703540][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.738717][T17138] bond1: Removing last ns target with arp_interval on [ 497.933086][T17150] bridge1: entered promiscuous mode [ 497.988371][T17160] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 498.167208][T16716] veth0_macvtap: entered promiscuous mode [ 498.238317][T16716] veth1_macvtap: entered promiscuous mode [ 498.353695][T16716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.361704][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3048'. [ 498.401102][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.415939][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3048'. [ 498.457009][T16716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.497863][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3048'. [ 498.531176][T10007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.545458][T10007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.585409][ T6806] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.606858][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3048'. [ 498.632489][ T6806] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.694262][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3048'. [ 498.735848][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.876612][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3048'. [ 498.895718][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.957039][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3048'. [ 499.040038][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.059981][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.222652][T10007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.256910][T10007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.764549][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.769579][ T5609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 500.784465][ T5609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 500.796512][ T5609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 500.808041][ T5609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 500.826728][ T5609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 501.063174][T17237] sctp: [Deprecated]: syz.5.3066 (pid 17237) Use of int in maxseg socket option. [ 501.063174][T17237] Use struct sctp_assoc_value instead [ 501.456558][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3070'. [ 501.528910][T17257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3070'. [ 501.597924][ T5608] syz_tun (unregistering): left allmulticast mode [ 501.608542][ C1] openvswitch: cpu_id mismatch with handler threads [ 501.617604][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.633796][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.841892][ T5801] net_ratelimit: 4 callbacks suppressed [ 501.841913][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.325546][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.550937][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3077'. [ 502.602579][T17293] hsr_slave_0: left promiscuous mode [ 502.632973][T17293] hsr_slave_1: left promiscuous mode [ 502.884595][ T4925] Bluetooth: hci7: command tx timeout [ 502.903085][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.123246][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.297564][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3085'. [ 503.506212][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.732552][T17330] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 503.788250][T17330] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 503.904624][T17330] netlink: 'syz.4.3089': attribute type 24 has an invalid length. [ 503.929032][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.968993][T17334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3090'. [ 503.997121][T17228] lo speed is unknown, defaulting to 1000 [ 504.519758][T17357] netlink: 'syz.5.3095': attribute type 3 has an invalid length. [ 504.544335][T17357] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3095'. [ 504.670585][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.866247][T17370] netlink: 'syz.1.3099': attribute type 2 has an invalid length. [ 504.906492][T17370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3099'. [ 504.961099][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.969728][ T4925] Bluetooth: hci7: command tx timeout [ 504.999421][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3099'. [ 505.284761][T17377] team0: Device gtp3 is of different type [ 505.862205][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.007282][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.047901][T17228] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.089873][T17228] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.116524][T17228] bridge_slave_0: entered allmulticast mode [ 506.134123][T17228] bridge_slave_0: entered promiscuous mode [ 506.139731][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3107'. [ 506.175187][T17228] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.186338][T17228] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.200417][T17228] bridge_slave_1: entered allmulticast mode [ 506.225620][T17228] bridge_slave_1: entered promiscuous mode [ 506.244304][T17399] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 506.306927][T17399] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3107'. [ 506.468029][T17228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.504629][T17409] __nla_validate_parse: 1 callbacks suppressed [ 506.504646][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3109'. [ 506.535519][T17228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.620863][T17414] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 506.667975][T17414] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 506.806643][T17228] team0: Port device team_slave_0 added [ 506.904209][T17228] team0: Port device team_slave_1 added [ 507.041401][ T5341] net_ratelimit: 1 callbacks suppressed [ 507.041421][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.055255][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.064605][ T4925] Bluetooth: hci7: command tx timeout [ 507.118926][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.128180][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.150909][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.233821][T17228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.257694][T17228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.405663][T17228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.497975][T17228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.565296][T17228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.648379][T17449] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3119'. [ 507.683329][T17228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.020541][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.161411][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.183624][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.197604][T17228] hsr_slave_0: entered promiscuous mode [ 508.233694][T17228] hsr_slave_1: entered promiscuous mode [ 508.286323][T17228] debugfs: 'hsr0' already exists in 'hsr' [ 508.316632][T17228] Cannot create hsr debugfs directory [ 509.121082][ T4925] Bluetooth: hci7: command tx timeout [ 509.201377][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.209572][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.400720][T17499] Cannot find set identified by id 4 to match [ 509.475975][T17501] netlink: 'syz.6.3134': attribute type 2 has an invalid length. [ 509.621975][T17501] : entered promiscuous mode [ 510.053355][T17519] netlink: 'syz.4.3139': attribute type 1 has an invalid length. [ 510.094478][T17228] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.125478][T17228] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.150287][T17228] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 510.223079][T17527] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.298595][T17527] bridge_slave_0 (unregistering): left allmulticast mode [ 510.331307][T17527] bridge_slave_0 (unregistering): left promiscuous mode [ 510.352266][T17527] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.557905][T17228] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.575592][T17228] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.593217][T17228] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 511.113165][T17228] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.216882][T17228] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.267692][T17228] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 511.747973][T17228] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.808665][T17228] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.876797][T17228] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 512.134377][T17560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3151'. [ 512.243265][ T10] net_ratelimit: 6 callbacks suppressed [ 512.243283][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.300851][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.322187][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.362447][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.393091][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.721727][ T6806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.800165][T17228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 512.873646][T17228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.905763][T17228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 512.941044][T17228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.962535][T17228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 512.974894][T17581] netlink: 'syz.4.3156': attribute type 7 has an invalid length. [ 512.997069][T17228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.005874][T17578] netlink: 'syz.6.3155': attribute type 1 has an invalid length. [ 513.018555][T17228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 513.050849][T17228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.092472][T17581] netlink: 'syz.4.3156': attribute type 7 has an invalid length. [ 513.125123][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.156081][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.165046][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.243841][T10004] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.340562][ T781] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.371891][ T781] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.470729][T10004] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.720983][T17597] bond19: option resend_igmp: invalid value (32767) [ 513.727852][T17597] bond19: option resend_igmp: allowed values 0 - 255 [ 513.745665][T17597] bond19 (unregistering): Released all slaves [ 513.851435][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.011188][T17228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.133986][T17228] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.195063][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.202333][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.256692][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.263952][ T6806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.557848][T17619] netlink: 'syz.5.3164': attribute type 1 has an invalid length. [ 514.579711][T17619] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3164'. [ 515.067910][T17630] ªªªªª»: renamed from dummy0 (while UP) [ 515.097213][T17638] IPv6: NLM_F_CREATE should be specified when creating new route [ 515.437044][T17648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3171'. [ 515.683579][T17651] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3172'. [ 516.136096][T17228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.298800][T17228] veth0_vlan: entered promiscuous mode [ 516.356410][T17228] veth1_vlan: entered promiscuous mode [ 516.455439][T17228] veth0_macvtap: entered promiscuous mode [ 516.509153][T17228] veth1_macvtap: entered promiscuous mode [ 516.607293][T17228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.676337][T17228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.799580][T17674] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3178'. [ 516.829035][T17675] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3179'. [ 516.923020][ T781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.005953][ T781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.072647][T10004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.107508][T10004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.226749][T10003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.261248][T10003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.261696][ T781] net_ratelimit: 8 callbacks suppressed [ 517.261743][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.361508][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.463013][T10004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.511235][T10004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.543225][T17683] tipc: Enabling of bearer rejected, failed to enable media [ 517.566897][T17683] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3182'. [ 517.629976][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.697415][T10003] IPVS: starting estimator thread 0... [ 517.821062][T17686] IPVS: using max 26 ests per chain, 62400 per kthread [ 517.961994][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'. [ 518.117380][T17697] lo: entered promiscuous mode [ 518.327965][T17697] netlink: 'syz.5.3185': attribute type 2 has an invalid length. [ 518.362888][T17697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.401981][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.471346][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.511047][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.746295][T17707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3188'. [ 518.778311][T17705] syzkaller0: entered promiscuous mode [ 518.803804][T17705] syzkaller0: entered allmulticast mode [ 518.927632][T17714] atomic_op ffff88805504b1e0 conn xmit_atomic 0000000000000000 [ 518.943326][T10003] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.096184][T17720] netlink: 'syz.6.3193': attribute type 4 has an invalid length. [ 519.112167][T17722] netlink: 'syz.6.3193': attribute type 4 has an invalid length. [ 519.364287][ T6806] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.417791][ T6806] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.444467][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.483336][ T6806] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.622163][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.885204][T17747] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3199'. [ 519.949438][T17747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3199'. [ 520.481701][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.546192][T17760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3204'. [ 520.589428][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3197'. [ 520.661333][T17763] netlink: 'syz.5.3205': attribute type 1 has an invalid length. [ 521.052781][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3208'. [ 521.867685][T17798] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 521.912889][T17798] gretap1: entered promiscuous mode [ 521.943134][T17798] gretap1: entered allmulticast mode [ 521.966290][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3216'. [ 522.011769][T17806] netlink: 'syz.6.3216': attribute type 5 has an invalid length. [ 522.070430][T17806] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3216'. [ 522.252716][T17806] geneve2: entered promiscuous mode [ 522.273638][T17806] geneve2: entered allmulticast mode [ 522.491439][T10003] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 522.516219][T10003] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 522.559833][T10003] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 522.569911][ T5341] net_ratelimit: 4 callbacks suppressed [ 522.569929][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.613627][T10003] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 522.900583][T17826] netlink: 'syz.6.3223': attribute type 1 has an invalid length. [ 522.941822][T17828] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3224'. [ 523.043066][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.149552][T17830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3225'. [ 523.873252][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.156770][ T8960] udevd[8960]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 524.223818][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.269579][ T9074] udevd[9074]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 524.561499][T17852] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 524.570794][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.603906][T17852] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 524.881195][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.135595][T17870] netlink: 'syz.6.3237': attribute type 1 has an invalid length. [ 525.159315][T17870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3237'. [ 525.403064][ T6806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.583479][T17890] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 525.942884][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.952549][T17906] vlan2: entered promiscuous mode [ 525.960430][T17906] bond0: entered promiscuous mode [ 525.974457][T17906] bond_slave_0: entered promiscuous mode [ 525.998560][T17906] bond_slave_1: entered promiscuous mode [ 526.007152][T17902] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 526.551559][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.586333][T17921] netlink: 'syz.1.3255': attribute type 8 has an invalid length. [ 526.610187][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3255'. [ 526.826228][T17921] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.834090][T17921] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.082970][T17931] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3258'. [ 527.203062][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.248749][T17941] veth0: entered promiscuous mode [ 527.311103][T17940] veth0: left promiscuous mode [ 527.605772][ T5607] net_ratelimit: 1 callbacks suppressed [ 527.605791][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.691146][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.965297][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3265'. [ 528.042146][T17956] sctp: [Deprecated]: syz.5.3265 (pid 17956) Use of int in max_burst socket option deprecated. [ 528.042146][T17956] Use struct sctp_assoc_value instead [ 528.244815][T17969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3269'. [ 528.254847][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.391200][T17973] xt_TPROXY: Can be used only with -p tcp or -p udp [ 528.585140][T17979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3270'. [ 528.873464][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.929043][T17986] ƒ05ÉÏ£: renamed from bond_slave_0 (while UP) [ 529.282857][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.021366][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.325206][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.629752][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 530.651201][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.651692][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 530.674723][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 530.694417][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 530.703549][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 530.754210][T18023] netlink: 'syz.5.3284': attribute type 1 has an invalid length. [ 530.863603][T18023] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3284'. [ 530.984932][T18025] netlink: 'syz.5.3284': attribute type 1 has an invalid length. [ 531.025225][T18025] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3284'. [ 531.211178][T10004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.283127][T18045] ip6gre0: entered promiscuous mode [ 531.317773][T18045] ip6gre0: entered allmulticast mode [ 531.363245][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.472847][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3290'. [ 532.576046][T18084] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 532.811977][ T5609] Bluetooth: hci2: command tx timeout [ 532.819807][T18088] net_ratelimit: 2 callbacks suppressed [ 532.819827][T18088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.037890][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 533.512119][ T6806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.684334][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.745327][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.782794][T18026] lo speed is unknown, defaulting to 1000 [ 534.016297][T18112] netlink: 'syz.0.3306': attribute type 1 has an invalid length. [ 534.286132][T18115] bond1: (slave bridge1): making interface the new active one [ 534.322728][T18122] IPVS: set_ctl: invalid protocol: 44 172.20.20.52:20004 [ 534.343822][T18115] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 534.509458][T18129] netlink: Invalid conntrack helper [ 534.562516][T18129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.732426][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.741893][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.883132][ T5609] Bluetooth: hci2: command tx timeout [ 535.377987][T18154] tipc: Enabling of bearer rejected, failed to enable media [ 535.458791][T18154] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3315'. [ 535.761137][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.854087][T18026] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.870812][T18026] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.892832][T18026] bridge_slave_0: entered allmulticast mode [ 535.959395][T18026] bridge_slave_0: entered promiscuous mode [ 535.993430][T18164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.069287][T18026] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.087432][T18026] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.107276][T18026] bridge_slave_1: entered allmulticast mode [ 536.125470][T18026] bridge_slave_1: entered promiscuous mode [ 536.444873][T18026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.486084][T18176] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3320'. [ 536.511961][T18026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.596351][T18180] netlink: 'syz.6.3321': attribute type 1 has an invalid length. [ 536.614068][T18177] veth3: entered allmulticast mode [ 536.684328][T18179] xt_hl: Unknown TTL match mode: 255 [ 536.861297][T18026] team0: Port device team_slave_0 added [ 536.889225][T18026] team0: Port device team_slave_1 added [ 536.961084][ T4925] Bluetooth: hci2: command tx timeout [ 537.115043][T18026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.139698][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.249920][T18026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.344716][T18026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.400419][T18026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.687165][T18026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.738416][T18205] netlink: 'syz.5.3325': attribute type 1 has an invalid length. [ 537.841756][ T5341] net_ratelimit: 5 callbacks suppressed [ 537.841778][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.084810][T18206] macvlan2: entered promiscuous mode [ 538.155943][T18206] macvlan2: entered allmulticast mode [ 538.197701][T18206] bond2: entered promiscuous mode [ 538.229467][T18206] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 538.259443][T18206] bond2: left promiscuous mode [ 538.283495][T10002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.624078][T18026] hsr_slave_0: entered promiscuous mode [ 538.672375][T18026] hsr_slave_1: entered promiscuous mode [ 538.717578][T18026] debugfs: 'hsr0' already exists in 'hsr' [ 538.751353][T18026] Cannot create hsr debugfs directory [ 538.857230][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3327'. [ 538.883655][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.937097][T18226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3327'. [ 539.028154][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3329'. [ 539.050776][ T4925] Bluetooth: hci2: command tx timeout [ 539.064111][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3327'. [ 539.079223][T18229] geneve3: entered allmulticast mode [ 539.092854][T18231] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3329'. [ 539.106075][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3329'. [ 539.128058][T18231] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3329'. [ 539.158791][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3329'. [ 539.243235][T18231] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3329'. [ 539.466529][ T6806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.618036][T18238] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3332'. [ 539.671225][T18238] 0·: renamed from hsr0 (while UP) [ 539.682379][ T30] audit: type=1800 audit(1787467959.476:3): pid=18235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3331" name="memory.events" dev="tmpfs" ino=442 res=0 errno=0 [ 539.863822][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.921740][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.077943][T18238] 0·: entered allmulticast mode [ 540.174444][T18238] hsr_slave_0: entered allmulticast mode [ 540.192958][ T30] audit: type=1804 audit(1787467959.986:4): pid=18258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3331" name="/newroot/83/memory.events" dev="tmpfs" ino=442 res=1 errno=0 [ 540.240054][T18238] hsr_slave_1: entered allmulticast mode [ 540.264024][T18238] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 540.672422][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.965175][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.062843][T18280] netlink: 'syz.0.3339': attribute type 14 has an invalid length. [ 541.085974][T18280] netlink: 'syz.0.3339': attribute type 13 has an invalid length. [ 541.711977][T18287] tipc: Started in network mode [ 541.742730][T18296] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 541.774929][T18287] tipc: Node identity 36b428ff7d9c, cluster identity 4711 [ 541.813200][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.846699][T18287] tipc: Enabled bearer , priority 10 [ 542.053296][T18286] tipc: Resetting bearer [ 542.227706][T18286] tipc: Disabling bearer [ 542.384662][T18026] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 542.467483][T18026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.548508][T18026] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 542.606691][T18026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.720068][T18026] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 542.755217][T18026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.797190][T18026] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 542.881956][ T5619] net_ratelimit: 2 callbacks suppressed [ 542.881975][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.892796][T18026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.969865][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.041661][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.609267][T18026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.845593][T18026] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.096961][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.125459][T10007] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.132784][T10007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.138484][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.240066][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.247348][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.753754][T18373] __nla_validate_parse: 10 callbacks suppressed [ 544.753774][T18373] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3363'. [ 544.902005][T18373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 545.124831][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.246588][T18387] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3366'. [ 545.301400][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.921040][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.068680][T18026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.162410][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.555261][T18026] veth0_vlan: entered promiscuous mode [ 546.600877][T18026] veth1_vlan: entered promiscuous mode [ 546.693761][T18026] veth0_macvtap: entered promiscuous mode [ 546.716013][T18026] veth1_macvtap: entered promiscuous mode [ 546.769255][T18026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.829020][T18026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.965577][T10000] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.992221][T10000] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.026705][T10000] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.064053][T10000] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.179059][T18357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.425335][T10006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.476825][T10006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.748233][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.775658][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3379'. [ 547.785800][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.242951][ T5705] net_ratelimit: 8 callbacks suppressed [ 548.242973][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.393193][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3282'. [ 548.447753][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3282'. [ 548.711199][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.900712][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3384'. [ 548.962392][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.242499][T18469] xt_policy: too many policy elements [ 549.282197][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.297780][T18469] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3386'. [ 549.861637][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.328017][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.053189][ T6806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.367971][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.001028][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.189247][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.810277][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 552.819203][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 553.228470][T18447] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 553.311603][T10007] net_ratelimit: 1 callbacks suppressed [ 553.311624][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.348399][T18469] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 553.443700][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.605434][T18475] netlink: 'syz.0.3387': attribute type 11 has an invalid length. [ 553.812572][T18488] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3390'. [ 553.869511][T18488] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3390'. [ 553.899521][T18488] netlink: 'syz.5.3390': attribute type 6 has an invalid length. [ 553.967769][T18488] netlink: 'syz.5.3390': attribute type 5 has an invalid length. [ 554.017623][T18488] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3390'. [ 554.275683][T18498] netlink: 'syz.7.3394': attribute type 8 has an invalid length. [ 554.345108][T18499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3395'. [ 554.484055][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.623667][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.981669][T18510] ipt_ECN: cannot use operation on non-tcp rule [ 555.068407][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.440163][T18521] syzkaller0: entered allmulticast mode [ 555.522025][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.821435][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.114023][T18538] sctp: [Deprecated]: syz.6.3403 (pid 18538) Use of int in max_burst socket option deprecated. [ 556.114023][T18538] Use struct sctp_assoc_value instead [ 556.137176][T18540] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3404'. [ 556.183432][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3404'. [ 556.302627][T18549] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 556.337688][T18549] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3407'. [ 556.437328][T18549] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 556.502804][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3407'. [ 556.558573][T18549] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 556.568125][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.608392][T18556] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3409'. [ 556.682861][T18558] syzkaller1: entered promiscuous mode [ 556.724094][T18558] syzkaller1: entered allmulticast mode [ 556.749722][T18557] tc action pedit offset 1997406208 out of bounds [ 556.822697][T18557] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3410'. [ 556.983457][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.281654][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.847472][T18594] netlink: 'syz.1.3418': attribute type 3 has an invalid length. [ 557.983144][T18596] bridge3: entered promiscuous mode [ 557.995218][T18596] bridge3: entered allmulticast mode [ 558.013176][T18599] netlink: 'syz.5.3421': attribute type 1 has an invalid length. [ 558.649168][ T5801] net_ratelimit: 3 callbacks suppressed [ 558.649189][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.311114][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.684699][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.764326][T18646] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 559.842190][T18646] __nla_validate_parse: 4 callbacks suppressed [ 559.842210][T18646] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3435'. [ 559.914752][T18652] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 560.465444][T18673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.487778][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.627530][T10007] IPVS: starting estimator thread 0... [ 560.652899][T18673] netlink: 'syz.1.3442': attribute type 1 has an invalid length. [ 560.715866][T18673] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3442'. [ 560.727186][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.790927][T18681] IPVS: using max 28 ests per chain, 67200 per kthread [ 561.124656][ T5607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.633829][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.763211][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.062529][T18718] netlink: 'syz.0.3456': attribute type 3 has an invalid length. [ 562.144951][T18719] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3455'. [ 562.210053][T18724] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3457'. [ 562.242206][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3455'. [ 562.445498][T18727] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3458'. [ 562.653374][T18737] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 562.821591][T18737] netlink: 'syz.5.3462': attribute type 58 has an invalid length. [ 562.857428][T18737] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3462'. [ 563.031145][T18750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3467'. [ 563.051020][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.101681][T18747] xt_socket: unknown flags 0x8 [ 563.116389][T18749] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 563.195945][T18749] team0: Device ipvlan2 is already an upper device of the team interface [ 563.473254][T18757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 563.480633][T18757] IPv6: NLM_F_CREATE should be set when creating new route [ 563.841751][ T5712] net_ratelimit: 3 callbacks suppressed [ 563.841770][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.945979][T18765] syzkaller0: entered promiscuous mode [ 563.963273][T18765] syzkaller0: entered allmulticast mode [ 563.995105][T18739] lo speed is unknown, defaulting to 1000 [ 564.002754][T10005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.161586][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.544644][T18766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 564.893289][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.914553][T18784] netlink: 'syz.1.3476': attribute type 21 has an invalid length. [ 565.075824][T18784] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3476'. [ 565.297196][T10005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.342974][T18794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3479'. [ 565.397090][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3479'. [ 565.426602][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 565.598031][T18799] vlan2: entered promiscuous mode [ 565.650947][T18799] bond0: entered promiscuous mode [ 565.683903][T18799] bond_slave_0: entered promiscuous mode [ 565.733492][T18799] bond_slave_1: entered promiscuous mode [ 565.933068][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.356069][T18818] FAULT_INJECTION: forcing a failure. [ 566.356069][T18818] name failslab, interval 1, probability 0, space 0, times 1 [ 566.412243][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3484'. [ 566.433464][T18818] CPU: 0 UID: 0 PID: 18818 Comm: syz.1.3485 Not tainted syzkaller #0 PREEMPT(full) [ 566.433495][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 566.433517][T18818] Call Trace: [ 566.433604][T18818] [ 566.433679][T18818] dump_stack_lvl+0xe8/0x150 [ 566.433845][T18818] should_fail_ex+0x410/0x560 [ 566.433962][T18818] should_failslab+0xa8/0x100 [ 566.434026][T18818] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 566.434058][T18818] ? skb_clone+0x212/0x3a0 [ 566.434154][T18818] ? skb_clone+0x212/0x3a0 [ 566.434176][T18818] ? irqentry_exit+0x218/0x910 [ 566.434286][T18818] skb_clone+0x212/0x3a0 [ 566.434311][T18818] __netlink_deliver_tap+0x413/0x860 [ 566.434396][T18818] ? netlink_deliver_tap+0x2e/0x1b0 [ 566.434421][T18818] netlink_deliver_tap+0x19c/0x1b0 [ 566.434445][T18818] netlink_unicast+0x781/0x940 [ 566.434516][T18818] netlink_sendmsg+0x813/0xb40 [ 566.434563][T18818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.434590][T18818] ? aa_sock_msg_perm+0xf6/0x1c0 [ 566.434698][T18818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.434720][T18818] sock_sendmsg_nosec+0x13a/0x180 [ 566.434784][T18818] ____sys_sendmsg+0x54e/0x850 [ 566.434865][T18818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.434909][T18818] ? import_iovec+0x73/0xa0 [ 566.434984][T18818] ___sys_sendmsg+0x2a5/0x360 [ 566.435017][T18818] ? __lock_acquire+0x683/0x2cf0 [ 566.435076][T18818] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.435148][T18818] ? __fget_files+0x2a/0x420 [ 566.435188][T18818] ? __fget_files+0x3a2/0x420 [ 566.435231][T18818] __x64_sys_sendmsg+0x1b1/0x290 [ 566.435268][T18818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 566.435325][T18818] do_syscall_64+0x166/0x520 [ 566.435352][T18818] ? trace_irq_disable+0x3b/0x140 [ 566.435398][T18818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.435437][T18818] ? clear_bhb_loop+0x70/0xc0 [ 566.435465][T18818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.435487][T18818] RIP: 0033:0x7fb4b559e0d9 [ 566.435515][T18818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.435535][T18818] RSP: 002b:00007fb4b6424028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.435586][T18818] RAX: ffffffffffffffda RBX: 00007fb4b5825fa0 RCX: 00007fb4b559e0d9 [ 566.435603][T18818] RDX: 0000000004008010 RSI: 0000200000000240 RDI: 0000000000000006 [ 566.435618][T18818] RBP: 00007fb4b6424090 R08: 0000000000000000 R09: 0000000000000000 [ 566.435632][T18818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.435645][T18818] R13: 00007fb4b5826038 R14: 00007fb4b5825fa0 R15: 00007ffec74234b8 [ 566.435681][T18818] [ 566.447573][T10005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.735845][T18818] vlan2: entered promiscuous mode [ 566.893623][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.971253][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.015344][T18823] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 567.716468][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 567.796745][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 567.867827][T18847] netlink: 'syz.5.3494': attribute type 4 has an invalid length. [ 567.889465][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 567.951569][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 567.982481][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 568.039837][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 568.074473][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 568.144745][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 568.257224][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 568.277087][T18854] vlan2: entered promiscuous mode [ 568.327276][T18854] bond0: entered promiscuous mode [ 568.362666][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 568.382324][T18854] ƒ05ÉÏ£: entered promiscuous mode [ 568.394837][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 568.426517][T18854] bond_slave_1: entered promiscuous mode [ 568.442495][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 568.480900][T18843] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 568.716569][T18872] FAULT_INJECTION: forcing a failure. [ 568.716569][T18872] name failslab, interval 1, probability 0, space 0, times 0 [ 568.808497][T18872] CPU: 1 UID: 0 PID: 18872 Comm: syz.5.3501 Not tainted syzkaller #0 PREEMPT(full) [ 568.808527][T18872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.808541][T18872] Call Trace: [ 568.808550][T18872] [ 568.808559][T18872] dump_stack_lvl+0xe8/0x150 [ 568.808596][T18872] should_fail_ex+0x410/0x560 [ 568.808636][T18872] should_failslab+0xa8/0x100 [ 568.808677][T18872] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 568.808702][T18872] ? skb_clone+0x212/0x3a0 [ 568.808722][T18872] ? skb_clone+0x212/0x3a0 [ 568.808750][T18872] skb_clone+0x212/0x3a0 [ 568.808775][T18872] __netlink_deliver_tap+0x413/0x860 [ 568.808813][T18872] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.808839][T18872] netlink_deliver_tap+0x19c/0x1b0 [ 568.808864][T18872] netlink_unicast+0x781/0x940 [ 568.808911][T18872] netlink_sendmsg+0x813/0xb40 [ 568.808946][T18872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.808976][T18872] ? aa_sock_msg_perm+0xf6/0x1c0 [ 568.809019][T18872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.809043][T18872] sock_sendmsg_nosec+0x13a/0x180 [ 568.809073][T18872] ____sys_sendmsg+0x54e/0x850 [ 568.809114][T18872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.809159][T18872] ? import_iovec+0x73/0xa0 [ 568.809187][T18872] ___sys_sendmsg+0x2a5/0x360 [ 568.809220][T18872] ? __lock_acquire+0x683/0x2cf0 [ 568.809263][T18872] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.809334][T18872] ? __fget_files+0x2a/0x420 [ 568.809363][T18872] ? __fget_files+0x3a2/0x420 [ 568.809405][T18872] __x64_sys_sendmsg+0x1b1/0x290 [ 568.809442][T18872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.809500][T18872] do_syscall_64+0x166/0x520 [ 568.809527][T18872] ? trace_irq_disable+0x3b/0x140 [ 568.809557][T18872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.809580][T18872] ? clear_bhb_loop+0x70/0xc0 [ 568.809608][T18872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.809632][T18872] RIP: 0033:0x7facf179e0d9 [ 568.809660][T18872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.809680][T18872] RSP: 002b:00007facef9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.809704][T18872] RAX: ffffffffffffffda RBX: 00007facf1a25fa0 RCX: 00007facf179e0d9 [ 568.809721][T18872] RDX: 0000000004008010 RSI: 0000200000000240 RDI: 0000000000000006 [ 568.809735][T18872] RBP: 00007facef9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 568.809749][T18872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.809762][T18872] R13: 00007facf1a26038 R14: 00007facf1a25fa0 R15: 00007ffcb4d9f6d8 [ 568.809798][T18872] [ 569.148404][ T5712] net_ratelimit: 4 callbacks suppressed [ 569.148425][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.380951][T18885] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3505'. [ 569.424696][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.774210][T18896] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 569.829117][T18904] xt_CT: You must specify a L4 protocol and not use inversions on it [ 570.277600][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.508460][T18919] vlan2: entered promiscuous mode [ 570.529541][T18919] bond0: entered promiscuous mode [ 570.586230][T18919] bond_slave_0: entered promiscuous mode [ 570.597506][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3516'. [ 570.612590][T10005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.657713][T18919] bond_slave_1: entered promiscuous mode [ 571.047448][T18938] xt_hashlimit: size too large, truncated to 1048576 [ 571.106209][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3521'. [ 571.169832][T18944] netlink: 45349 bytes leftover after parsing attributes in process `syz.7.3519'. [ 571.248331][T18947] mac80211_hwsim hwsim26 ÿ: renamed from wlan1 (while UP) [ 571.370813][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.409969][T18944] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 571.529317][T18944] 0ªX¹¦Dö»: entered allmulticast mode [ 571.592427][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.784329][T10005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.518672][T18972] openvswitch: netlink: Message has 8 unknown bytes. [ 572.540070][T18972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.085822][T18987] netlink: 534 bytes leftover after parsing attributes in process `syz.7.3533'. [ 573.121816][T18989] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3531'. [ 573.180923][T18989] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3531'. [ 573.546290][T19003] netlink: 'syz.1.3536': attribute type 1 has an invalid length. [ 573.857486][T19012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3536'. [ 573.936439][T19003] bond2: entered promiscuous mode [ 574.013649][T19003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 574.511023][T19009] vlan2: entered allmulticast mode [ 574.536876][T19009] bond2: entered allmulticast mode [ 574.601929][ T5619] net_ratelimit: 4 callbacks suppressed [ 574.601948][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.716255][T19011] bond2: (slave bridge4): making interface the new active one [ 574.752823][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.788349][T19011] bridge4: entered promiscuous mode [ 574.804112][T19011] bridge4: entered allmulticast mode [ 574.834968][T19011] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 574.962069][T18984] lo speed is unknown, defaulting to 1000 [ 575.214929][ T6806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.761312][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.382987][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.481971][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.943694][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.001025][T19061] gtp0: entered promiscuous mode [ 577.053817][T19061] gtp0: entered allmulticast mode [ 577.155754][T19060] IPv6: sit1: Disabled Multicast RS [ 577.613940][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.780499][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.843407][T19081] sctp: [Deprecated]: syz.6.3556 (pid 19081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.843407][T19081] Use struct sctp_sack_info instead [ 577.910640][T19078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3555'. [ 577.923741][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3554'. [ 578.012117][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.127100][T19090] netlink: 272 bytes leftover after parsing attributes in process `syz.7.3558'. [ 578.686782][T19100] netlink: 'syz.1.3559': attribute type 2 has an invalid length. [ 578.749521][T19101] netlink: 'syz.0.3560': attribute type 32 has an invalid length. [ 579.911095][ T36] net_ratelimit: 5 callbacks suppressed [ 579.911115][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.090701][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.167942][T19135] FAULT_INJECTION: forcing a failure. [ 580.167942][T19135] name failslab, interval 1, probability 0, space 0, times 0 [ 580.252999][T19135] CPU: 1 UID: 0 PID: 19135 Comm: syz.7.3569 Not tainted syzkaller #0 PREEMPT(full) [ 580.253031][T19135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 580.253046][T19135] Call Trace: [ 580.253055][T19135] [ 580.253065][T19135] dump_stack_lvl+0xe8/0x150 [ 580.253103][T19135] should_fail_ex+0x410/0x560 [ 580.253144][T19135] should_failslab+0xa8/0x100 [ 580.253178][T19135] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 580.253204][T19135] ? local_lock_release+0x9c/0x160 [ 580.253236][T19135] ? __alloc_skb+0x1db/0x7a0 [ 580.253271][T19135] ? __alloc_skb+0x1db/0x7a0 [ 580.253308][T19135] __alloc_skb+0x1db/0x7a0 [ 580.253343][T19135] netlink_ack+0x136/0xb30 [ 580.253364][T19135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.253559][T19135] ? ref_tracker_free+0x689/0x830 [ 580.253623][T19135] ? __pfx_ref_tracker_free+0x10/0x10 [ 580.253656][T19135] netlink_rcv_skb+0x2a4/0x4a0 [ 580.253681][T19135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.253715][T19135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 580.253752][T19135] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.253776][T19135] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.253806][T19135] netlink_unicast+0x7bd/0x940 [ 580.253853][T19135] netlink_sendmsg+0x813/0xb40 [ 580.253888][T19135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.253916][T19135] ? aa_sock_msg_perm+0xf6/0x1c0 [ 580.253959][T19135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.253983][T19135] sock_sendmsg_nosec+0x13a/0x180 [ 580.254013][T19135] ____sys_sendmsg+0x54e/0x850 [ 580.254054][T19135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.254098][T19135] ? import_iovec+0x73/0xa0 [ 580.254126][T19135] ___sys_sendmsg+0x2a5/0x360 [ 580.254160][T19135] ? __lock_acquire+0x683/0x2cf0 [ 580.254198][T19135] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.254276][T19135] ? __fget_files+0x2a/0x420 [ 580.254305][T19135] ? __fget_files+0x3a2/0x420 [ 580.254345][T19135] __x64_sys_sendmsg+0x1b1/0x290 [ 580.254380][T19135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 580.254434][T19135] do_syscall_64+0x166/0x520 [ 580.254459][T19135] ? trace_irq_disable+0x3b/0x140 [ 580.254487][T19135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.254510][T19135] ? clear_bhb_loop+0x70/0xc0 [ 580.254537][T19135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.254560][T19135] RIP: 0033:0x7f27d339e0d9 [ 580.254581][T19135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.254599][T19135] RSP: 002b:00007f27d41bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.254621][T19135] RAX: ffffffffffffffda RBX: 00007f27d3625fa0 RCX: 00007f27d339e0d9 [ 580.254637][T19135] RDX: 0000000004008010 RSI: 0000200000000240 RDI: 0000000000000004 [ 580.254651][T19135] RBP: 00007f27d41bf090 R08: 0000000000000000 R09: 0000000000000000 [ 580.254665][T19135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 580.254679][T19135] R13: 00007f27d3626038 R14: 00007f27d3625fa0 R15: 00007ffde793ae28 [ 580.254714][T19135] [ 581.124693][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.282403][T10005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.412310][T19157] netlink: 'syz.6.3574': attribute type 1 has an invalid length. [ 581.496870][T19156] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3572'. [ 581.521116][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.536193][T19161] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 581.577851][T19162] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3573'. [ 581.609098][T19162] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3573'. [ 581.636902][T19130] nbd: nbd1 already in use [ 581.647034][T19130] block nbd1: NBD_DISCONNECT [ 581.659985][T19130] block nbd1: Send disconnect failed -32 [ 581.676292][T19130] block nbd1: shutting down sockets [ 582.158405][T19173] netlink: 'syz.7.3579': attribute type 63 has an invalid length. [ 582.167805][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.218325][T19176] netlink: 'syz.7.3579': attribute type 63 has an invalid length. [ 582.376023][T19181] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 582.441300][T10002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.617835][T19185] bridge2: entered promiscuous mode [ 582.692810][T19185] bridge2: entered allmulticast mode [ 583.089833][T19198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3586'. [ 583.198626][T19198] bond3: entered promiscuous mode [ 583.208021][T19198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.219875][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.500494][T19210] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3590'. [ 583.548921][T19210] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3590'. [ 583.591399][T10005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.707705][T19210] gretap2: entered promiscuous mode [ 583.723640][T19210] gretap2: entered allmulticast mode [ 583.909881][T10000] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 584.292930][T19209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.399076][T19227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 584.769537][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3597'. [ 584.786324][T19249] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3597'. [ 585.281351][ T5341] net_ratelimit: 5 callbacks suppressed [ 585.281372][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.604544][ T4925] Bluetooth: hci5: command 0x0406 tx timeout [ 585.718447][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3600'. [ 585.862128][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.936495][T19276] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3606'. [ 586.039967][T19282] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3608'. [ 586.050158][T19276] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3606'. [ 586.050203][T19276] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3606'. [ 586.084846][T19275] macsec1: entered promiscuous mode [ 586.092408][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.270000][T19280] vlan3: entered promiscuous mode [ 586.322965][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.551762][T19289] netlink: NAT attribute has 4 unknown bytes [ 586.586725][T19289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.619634][T19290] netlink: 'syz.6.3610': attribute type 1 has an invalid length. [ 586.652516][T19293] netlink: 'syz.0.3611': attribute type 1 has an invalid length. [ 586.678559][T19298] netlink: 'syz.1.3614': attribute type 1 has an invalid length. [ 586.696440][T19300] netlink: 'syz.1.3614': attribute type 1 has an invalid length. [ 586.813311][T19290] bond3: entered promiscuous mode [ 586.819451][T19290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.905873][T19298] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 586.908067][T19293] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 587.058269][T10004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.361487][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.602519][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.786547][T19340] vlan2: entered promiscuous mode [ 587.959675][T19346] FAULT_INJECTION: forcing a failure. [ 587.959675][T19346] name failslab, interval 1, probability 0, space 0, times 0 [ 588.226998][T19346] CPU: 1 UID: 0 PID: 19346 Comm: syz.1.3624 Not tainted syzkaller #0 PREEMPT(full) [ 588.227042][T19346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.227055][T19346] Call Trace: [ 588.227064][T19346] [ 588.227073][T19346] dump_stack_lvl+0xe8/0x150 [ 588.227112][T19346] should_fail_ex+0x410/0x560 [ 588.227151][T19346] should_failslab+0xa8/0x100 [ 588.227185][T19346] __kmalloc_cache_noprof+0xa8/0x660 [ 588.227219][T19346] ? __hw_addr_create+0x62/0x240 [ 588.227364][T19346] ? __hw_addr_create+0x62/0x240 [ 588.227407][T19346] __hw_addr_create+0x62/0x240 [ 588.227448][T19346] __hw_addr_add_ex+0x1ce/0x520 [ 588.227490][T19346] dev_addr_init+0x15a/0x240 [ 588.227526][T19346] ? __pfx_dev_addr_init+0x10/0x10 [ 588.227578][T19346] ? __kvmalloc_node_noprof+0x35e/0x870 [ 588.227616][T19346] alloc_netdev_mqs+0x2b4/0x12a0 [ 588.227639][T19346] ? __pfx_snprintf+0x10/0x10 [ 588.227690][T19346] ? __pfx_vlan_setup+0x10/0x10 [ 588.227785][T19346] rtnl_create_link+0x321/0xd70 [ 588.227818][T19346] rtnl_newlink_create+0x258/0x7b0 [ 588.227859][T19346] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 588.227897][T19346] ? __pfx___mutex_lock+0x10/0x10 [ 588.227960][T19346] ? ns_capable+0x89/0xe0 [ 588.228008][T19346] rtnl_newlink+0x166d/0x1c30 [ 588.228056][T19346] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.228084][T19346] ? do_syscall_64+0x166/0x520 [ 588.228109][T19346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.228171][T19346] ? kasan_quarantine_put+0xbb/0x1f0 [ 588.228214][T19346] ? lockdep_hardirqs_on+0x7b/0x110 [ 588.228247][T19346] ? nlmon_xmit+0xb0/0x100 [ 588.228364][T19346] ? kmem_cache_free+0x182/0x650 [ 588.228405][T19346] ? __lock_acquire+0x683/0x2cf0 [ 588.228444][T19346] ? __dev_queue_xmit+0x29b/0x3820 [ 588.228496][T19346] ? __local_bh_enable_ip+0xd6/0x140 [ 588.228523][T19346] ? lockdep_hardirqs_on+0x7b/0x110 [ 588.228550][T19346] ? __dev_queue_xmit+0x29b/0x3820 [ 588.228571][T19346] ? __local_bh_enable_ip+0xd6/0x140 [ 588.228595][T19346] ? __dev_queue_xmit+0x29b/0x3820 [ 588.228626][T19346] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 588.228675][T19346] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.228705][T19346] rtnetlink_rcv_msg+0x802/0xc00 [ 588.228741][T19346] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 588.228778][T19346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.228808][T19346] ? ref_tracker_free+0x689/0x830 [ 588.228834][T19346] ? __pfx_ref_tracker_free+0x10/0x10 [ 588.228869][T19346] netlink_rcv_skb+0x226/0x4a0 [ 588.228894][T19346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.228928][T19346] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.228967][T19346] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.228990][T19346] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.229020][T19346] netlink_unicast+0x7bd/0x940 [ 588.229068][T19346] netlink_sendmsg+0x813/0xb40 [ 588.229102][T19346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.229131][T19346] ? aa_sock_msg_perm+0xf6/0x1c0 [ 588.229174][T19346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.229197][T19346] sock_sendmsg_nosec+0x13a/0x180 [ 588.229228][T19346] ____sys_sendmsg+0x54e/0x850 [ 588.229274][T19346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.229319][T19346] ? import_iovec+0x73/0xa0 [ 588.229348][T19346] ___sys_sendmsg+0x2a5/0x360 [ 588.229381][T19346] ? __lock_acquire+0x683/0x2cf0 [ 588.229418][T19346] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.229496][T19346] ? __fget_files+0x2a/0x420 [ 588.229526][T19346] ? __fget_files+0x3a2/0x420 [ 588.229569][T19346] __x64_sys_sendmsg+0x1b1/0x290 [ 588.229607][T19346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.229666][T19346] do_syscall_64+0x166/0x520 [ 588.229693][T19346] ? trace_irq_disable+0x3b/0x140 [ 588.229723][T19346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.229747][T19346] ? clear_bhb_loop+0x70/0xc0 [ 588.229793][T19346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.229816][T19346] RIP: 0033:0x7fb4b559e0d9 [ 588.229839][T19346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.229859][T19346] RSP: 002b:00007fb4b6424028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.229883][T19346] RAX: ffffffffffffffda RBX: 00007fb4b5825fa0 RCX: 00007fb4b559e0d9 [ 588.229901][T19346] RDX: 0000000004008010 RSI: 0000200000000240 RDI: 0000000000000006 [ 588.229916][T19346] RBP: 00007fb4b6424090 R08: 0000000000000000 R09: 0000000000000000 [ 588.229931][T19346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 588.229944][T19346] R13: 00007fb4b5826038 R14: 00007fb4b5825fa0 R15: 00007ffec74234b8 [ 588.229981][T19346] [ 588.685597][T10003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.924865][T19358] __nla_validate_parse: 2 callbacks suppressed [ 588.924886][T19358] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3626'. [ 589.159453][T19366] veth0_to_bridge: entered promiscuous mode [ 589.331314][T19365] veth0_to_bridge: left promiscuous mode [ 589.860865][T19388] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3634'. [ 590.068955][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3636'. [ 590.188197][T19393] netlink: 'syz.6.3637': attribute type 8 has an invalid length. [ 590.399580][T19393] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 590.457705][T19393] bond4: option packets_per_slave: allowed values 0 - 65535 [ 590.469609][T19393] bond4 (unregistering): Released all slaves [ 590.487859][T19405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3639'. [ 590.531581][T19406] netlink: 'syz.7.3640': attribute type 1 has an invalid length. [ 590.539647][T19407] netlink: 'syz.7.3640': attribute type 1 has an invalid length. [ 590.564161][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3639'. [ 590.655397][ T9] net_ratelimit: 4 callbacks suppressed [ 590.655415][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.733012][T19405] xfrm1: entered promiscuous mode [ 590.783376][T19405] xfrm1: entered allmulticast mode [ 590.965236][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.987715][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.002311][T19413] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3641'. [ 591.155841][T19421] netlink: 'syz.6.3643': attribute type 1 has an invalid length. [ 591.262317][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3643'. [ 591.338559][T19421] 8021q: adding VLAN 0 to HW filter on device bond4 [ 591.363716][T19426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3645'. [ 591.392598][T19426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.598512][T19432] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 591.617786][T19432] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 591.793906][T19442] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3650'. [ 591.916263][T19442] netlink: zone id is out of range [ 591.959971][T19442] netlink: zone id is out of range [ 592.001826][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.048362][T19442] netlink: zone id is out of range [ 592.097801][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.126128][T19442] netlink: zone id is out of range [ 592.234661][T19442] netlink: zone id is out of range [ 592.701026][T19456] netlink: 'syz.5.3655': attribute type 2 has an invalid length. [ 592.770075][T19456] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3655'. [ 592.835507][T19464] nbd: must specify at least one socket [ 593.782840][T19488] batadv_slave_0: entered promiscuous mode [ 593.848638][T19488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.989452][T19488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.009097][T19495] block nbd6: not configured, cannot reconfigure [ 594.123756][T19499] netlink: 'syz.1.3665': attribute type 5 has an invalid length. [ 594.245890][T19504] __nla_validate_parse: 1 callbacks suppressed [ 594.245912][T19504] netlink: 45 bytes leftover after parsing attributes in process `syz.7.3666'. [ 595.008587][T19522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3670'. [ 595.127672][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3671'. [ 595.145472][T19522] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 595.283938][T19527] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3671'. [ 595.380029][T19482] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3661'. [ 595.681713][ T5619] net_ratelimit: 26 callbacks suppressed [ 595.681732][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.846784][ T4925] Bluetooth: hci3: command 0x0406 tx timeout [ 596.063299][T19554] netlink: 'syz.0.3677': attribute type 142 has an invalid length. [ 596.167935][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.442983][T19565] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3682'. [ 596.644055][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.721240][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.847218][T19578] x_tables: unsorted underflow at hook 3 [ 596.877069][T19577] netlink: 'syz.5.3686': attribute type 3 has an invalid length. [ 596.954578][T19577] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3686'. [ 596.988988][T19578] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3685'. [ 597.201473][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.357062][T19575] netlink: 'syz.1.3684': attribute type 2 has an invalid length. [ 597.459515][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3688'. [ 597.774636][T10004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.256488][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.473093][T19625] dvmrp8: entered allmulticast mode [ 598.821287][T19632] tipc: Started in network mode [ 598.840456][T19632] tipc: Node identity ac141441, cluster identity 4711 [ 598.907002][T19632] tipc: Enabled bearer , priority 10 [ 599.023658][ T781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.069736][T19636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.282420][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.461655][T19654] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3704'. [ 599.679470][T19658] netlink: 'syz.0.3705': attribute type 7 has an invalid length. [ 599.759680][T19658] netlink: 'syz.0.3705': attribute type 7 has an invalid length. [ 599.769049][ T77] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.769529][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.821961][T10009] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.870051][T10009] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.953736][T19662] IPv6: sit1: Disabled Multicast RS [ 600.006642][T19662] sit1: entered allmulticast mode [ 600.139815][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3711'. [ 600.158045][T19669] IPv6: sit1: Disabled Multicast RS [ 600.208177][T19669] sit1: entered allmulticast mode [ 600.248843][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3713'. [ 600.296270][ T5619] tipc: Node number set to 2886997057 [ 600.818272][ T5341] net_ratelimit: 2 callbacks suppressed [ 600.818291][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.833892][T10009] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.974875][ T5609] Bluetooth: hci6: command 0x0406 tx timeout [ 601.372328][T10000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.841581][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.898966][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3716'. [ 602.196450][T19719] bond2: Unable to set down delay as MII monitoring is disabled [ 602.300048][T19719] bond2 (unregistering): Released all slaves [ 602.528336][T19725] hsr_slave_1 (unregistering): left promiscuous mode [ 602.562367][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.800943][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.881187][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.996577][T19747] syzkaller0: entered promiscuous mode [ 603.016616][T19747] syzkaller0: entered allmulticast mode [ 603.021201][T19748] IPVS: set_ctl: invalid protocol: 148 172.20.20.170:20004 [ 603.691261][T10009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.788941][T19778] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 603.845842][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3731'. [ 603.927931][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.014417][T19778] netlink: 'syz.5.3734': attribute type 21 has an invalid length. [ 604.056767][T19778] IPv6: NLM_F_CREATE should be specified when creating new route [ 604.083493][T19784] netlink: 'syz.1.3735': attribute type 1 has an invalid length. [ 604.095196][T19778] netlink: 'syz.5.3734': attribute type 1 has an invalid length. [ 604.572820][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3737'. [ 604.607308][T19799] x_tables: duplicate underflow at hook 2 [ 604.634698][T19784] bond4: entered promiscuous mode [ 604.651526][T19784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 604.727258][T19786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 604.752986][T19786] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 604.765478][T19786] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 604.832112][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.848984][T19786] bond4: (slave wireguard0): making interface the new active one [ 604.886882][T19786] wireguard0: entered promiscuous mode [ 604.918028][T19786] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 604.963035][ T5341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.164971][T19798] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 605.194717][T19798] gretap1: entered promiscuous mode [ 605.202234][T19798] gretap1: entered allmulticast mode [ 605.352436][T19796] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 605.518495][T19818] netlink: 'syz.6.3743': attribute type 2 has an invalid length. [ 605.841073][ T10] net_ratelimit: 1 callbacks suppressed [ 605.841109][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.972421][T10007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.001724][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.117721][T19833] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3748'. [ 606.236467][T19833] netlink: 'syz.7.3748': attribute type 2 has an invalid length. [ 606.257669][T19841] xt_hashlimit: invalid interval [ 606.273944][T19833] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3748'. [ 606.297232][T19841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3750'. [ 606.461935][T19833] : entered promiscuous mode [ 606.649219][T19845] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 606.785191][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3752'. [ 606.859251][T19853] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3754'. [ 607.081319][T19856] syzkaller0: entered promiscuous mode [ 607.116441][T19856] syzkaller0: entered allmulticast mode [ 607.126093][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.222907][T10009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.357198][T19864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3758'. [ 608.041470][T19881] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3763'. [ 608.161222][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.398870][T19890] IPv6: NLM_F_CREATE should be specified when creating new route [ 608.416826][T19886] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 608.428257][ T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.466376][T19894] netlink: 'syz.6.3767': attribute type 5 has an invalid length. [ 608.548270][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3767'. [ 608.724909][T19902] netlink: 'syz.1.3771': attribute type 8 has an invalid length. [ 608.782478][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3771'. [ 608.884579][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.122576][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 609.202885][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.717149][T19925] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 609.855062][T19925] bond2 (unregistering): Released all slaves [ 610.401632][ T31] INFO: task syz.3.2854:16371 blocked for more than 143 seconds. [ 610.426015][ T31] Not tainted syzkaller #0 [ 610.444358][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 610.486910][ T31] task:syz.3.2854 state:D stack:27200 pid:16371 tgid:16369 ppid:5614 task_flags:0x400140 flags:0x00080002 [ 610.523541][T19948] __nla_validate_parse: 2 callbacks suppressed [ 610.523560][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'. [ 610.526682][ T31] Call Trace: [ 610.550019][ T31] [ 610.556269][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'. [ 610.558071][ T31] __schedule+0x17d4/0x5630 [ 610.575481][ T31] ? __pfx___schedule+0x10/0x10 [ 610.583906][ T31] ? schedule+0x90/0x2b0 [ 610.600963][ T31] schedule+0x164/0x2b0 [ 610.617917][ T31] schedule_preempt_disabled+0x13/0x30 [ 610.631778][T19958] netlink: 588 bytes leftover after parsing attributes in process `syz.6.3790'. [ 610.643991][ T31] __mutex_lock+0x7c1/0x1550 [ 610.654922][ T31] ? __mutex_lock+0x5d4/0x1550 [ 610.672487][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 610.678366][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 610.690174][ T31] ? irqentry_exit+0x218/0x910 [ 610.701799][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 610.716603][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 610.746038][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 610.773346][T10000] IPVS: starting estimator thread 0... [ 610.774229][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 610.793923][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 610.801409][ T31] ? bpf_lsm_capable+0x9/0x20 [ 610.806261][ T31] ? security_capable+0x7e/0x2c0 [ 610.813222][ T31] genl_rcv_msg+0x614/0x7a0 [ 610.817949][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.824093][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 610.831107][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 610.836819][ T31] netlink_rcv_skb+0x226/0x4a0 [ 610.846511][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.852659][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.858185][ T31] ? down_read+0x2be/0x330 [ 610.863586][ T31] genl_rcv+0x28/0x40 [ 610.869949][ T31] netlink_unicast+0x7bd/0x940 [ 610.878660][ T31] netlink_sendmsg+0x813/0xb40 [ 610.884443][T19966] IPVS: using max 26 ests per chain, 62400 per kthread [ 610.898845][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.905184][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 610.911030][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.916671][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 610.923672][ T31] ____sys_sendmsg+0x54e/0x850 [ 610.928812][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.934981][ T31] ? import_iovec+0x73/0xa0 [ 610.939801][ T31] ___sys_sendmsg+0x2a5/0x360 [ 610.945403][ T31] ? __lock_acquire+0x683/0x2cf0 [ 610.955327][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.962104][ T31] ? futex_wait+0x2a2/0x390 [ 610.967001][ T31] ? __fget_files+0x2a/0x420 [ 610.974142][ T31] ? __fget_files+0x3a2/0x420 [ 610.979114][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 610.987339][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.993183][ T31] do_syscall_64+0x166/0x520 [ 610.997993][ T31] ? trace_irq_disable+0x3b/0x140 [ 611.005121][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.012130][ T31] ? clear_bhb_loop+0x70/0xc0 [ 611.017085][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.023988][ T31] RIP: 0033:0x7f7e3ff9e0d9 [ 611.028683][ T31] RSP: 002b:00007f7e40ea0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.039032][ T31] RAX: ffffffffffffffda RBX: 00007f7e40225fa0 RCX: 00007f7e3ff9e0d9 [ 611.056745][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 611.069857][ T31] RBP: 00007f7e40035024 R08: 0000000000000000 R09: 0000000000000000 [ 611.081941][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.094299][ T31] R13: 00007f7e40226038 R14: 00007f7e40225fa0 R15: 00007fff26bee288 [ 611.103237][ T31] [ 611.106716][ T31] [ 611.106716][ T31] Showing all locks held in the system: [ 611.121935][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 611.131385][ T31] #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 611.141782][ T31] locks held by getty/5364: 2, on CPU#0: [ 611.147650][ T31] #0: ffff88807fe130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 611.162017][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 611.181295][ T31] locks held by syz.2.2790/16158: 2, on CPU#1: [ 611.187804][ T31] #0: ffffffff900a70e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.198494][ T31] #1: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 611.219485][ T31] locks held by syz.3.2854/16371: 2, on CPU#0: [ 611.227759][ T31] #0: ffffffff900a70e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.236974][ T31] #1: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 611.248204][ T31] locks held by syz.4.3168/17633: 2, on CPU#1: [ 611.255323][ T31] #0: ffffffff900a70e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 611.264809][ T31] #1: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 611.279089][ T31] locks held by syz.1.3786/19942: 2, on CPU#0: [ 611.291462][ T5712] net_ratelimit: 3 callbacks suppressed [ 611.291480][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.307598][ T31] #0: ffffffff900363c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 611.317098][ T31] #1: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 611.333552][ T31] locks held by syz.6.3790/19951: 1, on CPU#1: [ 611.339864][ T31] #0: ffffffff900363c0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 611.350998][ T31] locks held by syz.6.3790/19958: 1, on CPU#0: [ 611.357283][ T31] #0: ffffffff900363c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 611.371580][ T31] locks held by syz.0.3788/19947: 4, on CPU#1: [ 611.381109][ T31] #0: ffff888075cf8240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 611.394642][ T31] #1: ffffffff900a5108 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 611.408318][ T31] #2: ffff888031e438e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x14b/0xe60 [ 611.419850][ T31] #3: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 611.432930][ T31] locks held by syz.0.3788/19959: 1, on CPU#0: [ 611.439212][ T31] #0: ffffffff900363c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 611.457144][ T31] locks held by syz.0.3788/19963: 1, on CPU#1: [ 611.464272][ T31] #0: ffffffff900363c0 (rtnl_mutex){+.+.}-{4:4}, at: tc_new_tfilter+0x504/0x1810 [ 611.474648][ T31] locks held by syz.5.3789/19950: 1, on CPU#0: [ 611.483488][ T31] #0: ffffffff900363c0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 611.493443][ T31] locks held by syz.5.3789/19954: 1, on CPU#1: [ 611.499799][ T31] #0: ffffffff900363c0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 611.513142][ T31] [ 611.515619][ T31] ============================================= [ 611.515619][ T31] [ 611.545001][ T31] NMI backtrace for cpu 1 [ 611.545025][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 611.545050][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.545063][ T31] Call Trace: [ 611.545071][ T31] [ 611.545080][ T31] dump_stack_lvl+0xe8/0x150 [ 611.545119][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 611.545238][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 611.545280][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 611.545319][ T31] sys_info+0x135/0x170 [ 611.545350][ T31] watchdog+0xfd7/0x1030 [ 611.545394][ T31] ? watchdog+0x1c7/0x1030 [ 611.545431][ T31] kthread+0x38b/0x480 [ 611.545464][ T31] ? __pfx_watchdog+0x10/0x10 [ 611.545491][ T31] ? __pfx_kthread+0x10/0x10 [ 611.545523][ T31] ret_from_fork+0x514/0xb70 [ 611.545574][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 611.545605][ T31] ? __switch_to+0xc89/0x1420 [ 611.545635][ T31] ? __pfx_kthread+0x10/0x10 [ 611.545668][ T31] ret_from_fork_asm+0x1a/0x30 [ 611.545717][ T31] [ 611.545725][ T31] Sending NMI from CPU 1 to CPUs 0: [ 611.664887][ C0] NMI backtrace for cpu 0 [ 611.664904][ C0] CPU: 0 UID: 0 PID: 19942 Comm: syz.1.3786 Not tainted syzkaller #0 PREEMPT(full) [ 611.664927][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.664939][ C0] RIP: 0010:do_raw_spin_unlock+0xf8/0x200 [ 611.664971][ C0] Code: 0a 93 00 49 c7 06 ff ff ff ff 42 0f b6 44 25 00 84 c0 0f 85 fc 00 00 00 c7 43 08 ff ff ff ff 48 89 df e8 cb 44 38 0a 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 56 20 2f 03 85 c0 0f 84 [ 611.664988][ C0] RSP: 0018:ffffc900039e7610 EFLAGS: 00000046 [ 611.665006][ C0] RAX: 0000000000000001 RBX: 0000000000000282 RCX: 0000000000000000 [ 611.665018][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9aa09598 [ 611.665030][ C0] RBP: 1ffffffff35412b4 R08: ffffffff9aa0959b R09: 1ffffffff35412b3 [ 611.665045][ C0] R10: dffffc0000000000 R11: fffffbfff35412b4 R12: 0000000000000000 [ 611.665058][ C0] R13: 1ffffffff35412b5 R14: ffffffff9aa095a8 R15: ffffffff9aa095a0 [ 611.665075][ C0] FS: 000055558959d500(0000) GS:ffff888124f23000(0000) knlGS:0000000000000000 [ 611.665092][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.665105][ C0] CR2: 00007ffa26beb7c0 CR3: 0000000064e4a000 CR4: 00000000003526f0 [ 611.665122][ C0] Call Trace: [ 611.665129][ C0] [ 611.665138][ C0] _raw_spin_unlock_irqrestore+0x23/0x80 [ 611.665162][ C0] debug_check_no_obj_freed+0x39e/0x450 [ 611.665256][ C0] kfree+0x13e/0x640 [ 611.665275][ C0] ? skb_release_data+0x85e/0xab0 [ 611.665307][ C0] skb_release_data+0x85e/0xab0 [ 611.665340][ C0] __kfree_skb+0x5d/0x210 [ 611.665367][ C0] netlink_broadcast_filtered+0xd9d/0xea0 [ 611.665409][ C0] nlmsg_notify+0xe3/0x1a0 [ 611.665429][ C0] mpls_dev_notify+0xb52/0xd30 [ 611.665518][ C0] ? ovs_netdev_get_vport+0x11c/0x120 [ 611.665592][ C0] notifier_call_chain+0x1a5/0x3d0 [ 611.665624][ C0] unregister_netdevice_many_notify+0x17f9/0x2140 [ 611.665655][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 611.665693][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 611.665720][ C0] unregister_netdevice_queue+0x2f5/0x340 [ 611.665740][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 611.665758][ C0] ? queue_delayed_work_on+0x12f/0x1e0 [ 611.665781][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 611.665803][ C0] ? queue_delayed_work_on+0x171/0x1e0 [ 611.665829][ C0] __tun_detach+0x1074/0x1900 [ 611.665867][ C0] tun_chr_close+0x10a/0x1c0 [ 611.665891][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 611.665915][ C0] __fput+0x418/0xa50 [ 611.665949][ C0] task_work_run+0x1d9/0x270 [ 611.665980][ C0] ? __pfx_task_work_run+0x10/0x10 [ 611.666013][ C0] exit_to_user_mode_loop+0x204/0x770 [ 611.666039][ C0] ? rcu_is_watching+0x16/0xb0 [ 611.666059][ C0] do_syscall_64+0x328/0x520 [ 611.666081][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.666100][ C0] ? clear_bhb_loop+0x70/0xc0 [ 611.666122][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.666139][ C0] RIP: 0033:0x7fb4b559e0d9 [ 611.666155][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.666171][ C0] RSP: 002b:00007ffec7423618 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 611.666189][ C0] RAX: 0000000000000000 RBX: 00007ffec7423700 RCX: 00007fb4b559e0d9 [ 611.666201][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 611.666212][ C0] RBP: 0000000000094f77 R08: 0000000000000001 R09: 0000000000000000 [ 611.666224][ C0] R10: 0000001b2d220000 R11: 0000000000000246 R12: 00007ffec7423740 [ 611.666236][ C0] R13: 00007fb4b5825fac R14: 0000000000095058 R15: 00007fb4b5825fa0 [ 611.666259][ C0] [ 612.062270][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 612.069192][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 612.078343][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.088443][ T31] Call Trace: [ 612.091762][ T31] [ 612.094729][ T31] vpanic+0x56d/0xa60 [ 612.098763][ T31] ? __pfx___schedule+0x10/0x10 [ 612.103656][ T31] ? __pfx_vpanic+0x10/0x10 [ 612.108228][ T31] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 612.114463][ T31] panic+0xc5/0xd0 [ 612.118279][ T31] ? __pfx_panic+0x10/0x10 [ 612.122742][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 612.128246][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 612.133668][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 612.139891][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 612.146112][ T31] watchdog+0x1030/0x1030 [ 612.150534][ T31] ? watchdog+0x1c7/0x1030 [ 612.155031][ T31] kthread+0x38b/0x480 [ 612.159245][ T31] ? __pfx_watchdog+0x10/0x10 [ 612.163967][ T31] ? __pfx_kthread+0x10/0x10 [ 612.168659][ T31] ret_from_fork+0x514/0xb70 [ 612.173296][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 612.178455][ T31] ? __switch_to+0xc89/0x1420 [ 612.183169][ T31] ? __pfx_kthread+0x10/0x10 [ 612.187801][ T31] ret_from_fork_asm+0x1a/0x30 [ 612.192613][ T31] [ 612.196317][ T31] Kernel Offset: disabled [ 612.200674][ T31] Rebooting in 86400 seconds..